The 2026 assessment keeps remote casinos high for money laundering, raises gambling software to medium and warns that AI, cryptoassets and illegal sites are worsening exposure.
The company said its games reached six unlicensed sites through two operators before it tightened controls and paid £4.75 million to close the case.
A seven-day review lag left one customer able to lose £17,900 in 24 hours.
NSUS Limited, the company behind GGPoker, was fined a total of £672,829 for failures in social responsibility practices and anti-money laundering procedures.