The Readiness Framework: A Sweepstakes Compliance Standard
Seven sections. What an operator in the sweepstakes market must be able to demonstrate, and how to demonstrate it. Published in full, because a framework kept behind a contact form is a lead magnet, not a standard.
Why publish it
A compliance framework’s value is not in its secrecy. Any competent practitioner could reconstruct these seven sections from the statutes in a fortnight. The value is in the implementation, and the implementation is where operators are failing — not because the requirements are unknown, but because meeting them costs product revenue and nobody has been forced to yet.
Flickloot exists as the proof that a platform can meet all seven and still be worth playing.
1. State access matrix
A live, statute-linked map of every jurisdiction, distinguishing statutory bans from enforcement states — because an operator tracking bills alone will log West Virginia, Michigan and Minnesota as open markets, and all three are closed. Includes the operative test each statute applies, so that a product change can be assessed against the text rather than against a summary.
2. AMOE and promotional-rules checklist
Alternative method of entry, official rules, prize registration and bonding thresholds, disclosure placement, and the drafting errors that convert a lawful promotion into an unlawful lottery. Most sweeps operators inherited their AMOE language from a template and have never had it read against the statute of a single state.
3. Redemption KYC and AML
Where identification must occur, what an operator is obliged to hold and for how long, transaction monitoring calibrated to the sweeps model rather than borrowed from a casino, and the suspicious-activity thresholds that apply to a business that insists it is not a gambling business.
4. Responsible gaming against the SPGA code
The industry’s own code of conduct, read as a compliance baseline, with the gaps between what it says and what member sites actually implement. A self-regulatory code an operator fails to meet is a document a plaintiff will introduce as evidence.
5. Processor and ad-platform survival
Payment processing and advertising access are the two chokepoints where the sweeps model dies quietly, and they answer to card-scheme rules and platform policy rather than to state law. New York and California both extended statutory liability to processors and affiliates directly.
6. Security baseline
Access control, credential handling, session management, data-retention discipline. The unglamorous half. It is also the half that produces the breach that ends the company, and it is the audit that gets bought first because it can be scoped in a week.
7. US model compliance
The three elements — consideration, chance, prize — and where each state’s statute attaches. Includes the design space that survives every ban whose text turns on redeemable value; the two statutes that do not take that shape are set out below, evidenced by the fact that this framework’s author built a working platform inside it and published the source.
Where the three-element test does not decide
Section 7 rests on a test that every ban enacted since 2025 satisfies: the statute attaches to consideration paid in and value paid out, and a platform with neither is outside it on the face of the text. Two statutes on the tracker do not take that shape, and the framework says so here rather than letting the general claim cover them.
Alabama defines gambling as staking something of value on an outcome for something of value, and defines «something of value» to include «a privilege of playing at a game or scheme without charge» (Code of Alabama § 13A-12-20(4), (11)). On that text a granted coin can sit on both sides of the definition; the offence of promoting gambling reaches anyone who «advances or profits» from unlawful gambling activity; and «unlawful» means not specifically authorised by law. No court has applied that clause to a platform with nothing to buy, and the two Alabama class actions that argue it concern purchased coins. The framework holds Alabama as unsettled and sets no status.
Maine uses the same three limbs as New York — online, a dual-currency system of payment, casino-style simulation — but defines the currency limb to include play with «direct consideration», itself defined to include a token «received through a bonus or promotion» (8 M.R.S. § 1351(2), (3), (6), enacted 6 April 2026). The definition is circular on its face and its reach to a single granted currency has not been tested. Held as unsettled.
What this changes: the design space in section 7 survives every statute that turns on redeemable value, which is every ban whose text this tracker has read. It does not, on its own, answer a statute that treats free play as value. A platform relying on this framework in Alabama or Maine is relying on an argument, not on the text, and should say so — as this platform now does on every page that used to say «all fifty». Compliance reference, not legal advice.
How this framework is used
As a scoring instrument. An operator is assessed section by section against public signals first — terms of service, promotional rules, geolocation behaviour, disclosure practice, payment flows — and then, under engagement, against the systems themselves. The output is a gap list with an implementation sequence, not a report.
Advisory work produces a document. Implementation work produces a change to the product. Only one of those survives a regulator’s question.