Residents notice Play971 first as a set of rules: it knows which emirate you are in, it refuses VPNs, it wants your Emirates ID and your face, and it will not take crypto. Each of those rules is a piece of technology, and together they are what persuaded a federal regulator to license the UAE’s first online sportsbook and casino. This article looks under the hood at the betting app technology UAE residents are now using: how the geolocation works, how KYC is done, how VPNs are caught, where the odds come from, how the live casino is produced, and what the licence requires of the data and payments underneath.
Why the technology is the licence
The General Commercial Gaming Regulatory Authority (GCGRA), the federal regulator established in 2023, licensed Coin Technology Projects LLC of Abu Dhabi in late 2025 on the strength of a stack that could enforce the framework’s conditions on the device: residents only, 21 and over, participating emirates only, dirhams only, and mandatory player-protection tools. A seven-month supervised trial from November 2025 tested every component under real conditions before the June 2026 public launch. The regulator licenses the key suppliers as well as the operator, so each piece below is on the register in its own right.
Play971 geolocation: emirate-level geofencing
The hardest technical requirement is the emirate map. The framework activates gaming emirate by emirate; Abu Dhabi, Ras Al Khaimah and Sharjah have opted in, Dubai has not, and the operator must geofence non-participating emirates precisely. Country-level geofencing is routine; drawing a reliable line through Al Nahda, where Dubai and Sharjah share a street, is not.
The platform uses Xpoint, a geolocation compliance provider licensed by the regulator, whose software runs on the device at every session. It combines GPS, Wi-Fi positioning, cell tower data and device signals, checks them against the emirate boundaries, and returns a pass or fail. Coarse location is not accepted, which is why the app asks for precise permission and declines rather than guesses near a border. Checks repeat during a session, so a device that crosses from Sharjah into Dubai mid-match is cut off. Identity and location are evaluated separately, which is why a Dubai resident can register at home but only play in a participating emirate.
Play971 VPN and proxy detection
Offshore sites work in Dubai because they ignore location; the licensed platform must detect every attempt to fake it. The Play971 VPN policy is enforced by Xpoint’s fraud layer, which inspects the network path for VPN and proxy signatures, checks for known VPN IP ranges and data-centre addresses, detects location-spoofing apps and mock-location settings, flags rooted or jailbroken devices and emulators, and cross-checks the network location against the device’s sensors. A mismatch fails the session. Repeated attempts breach the terms and can close the account. The regulator audits the detection rate, which is why the platform errs on the side of blocking.
Play971 KYC: Emirates ID and liveness
Know-your-customer verification is completed before any deposit, as the UAE’s anti-money-laundering rules require. The flow captures the Emirates ID front and back and reads the chip data and machine-readable zone, validates the card against the issuing authority’s records for authenticity and expiry, runs a liveness check on a live face capture to confirm a real person rather than a photograph or video, matches the face to the card photograph, confirms the date of birth puts the applicant at 21 or over, and verifies the UAE mobile number by one-time code. The whole sequence takes a few minutes and produces a single verified identity per Emirates ID, which is what makes duplicate accounts impossible and self-exclusion enforceable: an excluded ID cannot pass the check again under any email.
Sportradar: odds, data and integrity
The sportsbook’s prices and live data come from Sportradar, the Swiss data company that supplies official data to leagues and federations and runs integrity monitoring for governing bodies including UEFA and the IOC. Pre-match odds are generated from Sportradar’s models and adjusted by the operator’s traders; in-play markets reprice from Sportradar’s live feed within seconds of events on the pitch. The same feed powers the integrity layer: unusual betting patterns on any match, including UAE Pro League fixtures, flow into the monitoring that governing bodies use to detect manipulation. Settlement draws on official results, which is why disputes are rare and auditable.
Evolution: the Abu Dhabi live studio
The live casino is produced by Evolution, the world’s largest live dealer supplier, from a purpose-built studio in Abu Dhabi licensed and inspected under the same framework. Multiple camera angles, optical card recognition and certified wheels feed a low-latency stream to the app; bets are placed on an overlay and settled against the physical result. Dealers present in English and Arabic. Because the studio is in the UAE, equipment certification and game records are available to the regulator’s inspectors, which has never been true of an offshore stream.
Slots and RNG
Slots and RNG table games come from OneTouch and other licensed suppliers, with random number generators certified by the regulator’s approved test laboratories and return-to-player figures published in each game’s information panel. Game outcomes are logged and auditable.
Payments: dirham rails in your own name
Accounts run in dirhams only, through UAE card and bank rails, with every payment method in the account holder’s name. The platform matches the cardholder or account name against the verified identity, refuses third-party instruments, and routes withdrawals back to the holder’s own methods. Cryptocurrency is excluded by licence because it defeats attribution. Transaction monitoring flags anti-money-laundering triggers such as rapid deposit-withdraw cycles with little play.
Data residency and security
Identity records, contact details and transaction history are hosted in the UAE under the federal Personal Data Protection Law and the regulator’s conditions on security and retention. Two-factor authentication, device binding and session controls protect accounts; the operator never asks for one-time codes. Transaction records must be accurate and auditable, and the regulator can inspect them.
Player-protection tooling
Deposit limits, session reminders, time-outs and self-exclusion are implemented at the account level and enforced against the Emirates ID. Limit increases carry a cooling-off delay by design. The operator runs behavioural monitoring for patterns associated with harm, with a duty to intervene; the operator’s commercial director, Philippa Bowland, spoke at launch of helping customers “play sustainably”, and the tooling is where that is made concrete.
Common technical problems and fixes
Location check fails at home in a participating emirate: grant precise location permission, disable any mock-location or developer setting, turn off VPN apps including those bundled with security suites, and try on mobile data rather than a corporate Wi-Fi that routes through Dubai. Verification fails: avoid glare on the card, capture all four corners, do the face check in even light without sunglasses, and type the name exactly as printed. App flagged as “compromised device”: rooted and jailbroken phones and emulators are blocked by licence; use a standard device. Session drops mid-match: the periodic location check has failed, usually near an emirate border or on a network that masks location; reconnect on mobile data in a participating emirate.
What the stack does not do
It does not track residents outside the app, does not read other apps, and does not share identity records with third parties; the data residency rules and the Personal Data Protection Law prohibit it. It does not change the odds or the house edge. And it does not make the platform work in Dubai, because the geofence is the law, not a setting.
What it adds up to
Every offshore site that reaches UAE residents lacks most of this stack: no emirate geofence, no Emirates ID liveness check, no VPN enforcement, no local studio, no UAE data residency, no auditable limits. The licensed platform’s technology is not there to make betting easier; it is there to make it lawful, bounded and accountable, which is what a federal regulator demanded before it would license anyone. Eligible residents can see it work by registering at play971.ae with their Emirates ID, from a participating emirate, without a VPN.
Frequently asked questions
How does Play971 geolocation work? Xpoint software on the device combines GPS, Wi-Fi, cell and sensor data and checks it against emirate boundaries at every session.
Can I use a VPN with Play971? No. VPNs, proxies and spoofing apps are detected, and use breaches the terms.
What is Play971 KYC? Emirates ID capture and validation, a liveness face check, age confirmation and mobile verification, completed before any deposit.
Where do the odds come from? Sportradar, which also provides integrity monitoring for governing bodies.
Where is the live casino produced? In a licensed Evolution studio in Abu Dhabi.
Where is my data held? In the UAE, under the federal Personal Data Protection Law.
Play971 is licensed by the GCGRA for UAE residents aged 21 and over in participating emirates. Gambling involves risk; set limits and play sustainably.
