Image credit: Source: Continent 8 Technologies press materials. Never imply stock depicts the actual event.
Continent 8 Technologies launched Loyalty+ on August 13, 2026, a rewards programme that pays iGaming operators, suppliers and content providers 5% back on their existing cloud, co-location, AWS and managed-services spend, redeemable only for iGaming cybersecurity work: penetration testing, phishing simulation, managed security operations centre (MSOC) support and burst capacity for managed detection and response (MDR). The programme is exclusive to Continent 8's own customer base and launches at a moment the company itself frames as one of rapidly escalating risk.
The numbers behind that framing are specific. Continent 8 says cyber incidents affecting the iGaming sector surged 400% between 2023 and 2025, that third-party vulnerabilities now account for 60% of data breaches, and that downtime costs operators up to $6,000 a minute. Those figures come from the company's own announcement, not an independent audit, but they describe a real structural problem: a regulated, always-on industry that runs on other people's infrastructure.
How Loyalty+ turns spend into iGaming cybersecurity
The mechanics are straightforward. A Continent 8 customer's spend on cloud hosting, co-location, AWS-based services or managed services automatically accrues at a 5% rate. Those accrued credits do not come back as a discount on the next invoice. They can only be spent inside Continent 8's security catalogue: vulnerability testing, simulated phishing campaigns, its managed security operations centre, and short-term surge capacity from its managed detection and response team.
That earmarking is the point. Anthony Abou-Jaoude, Continent 8's chief transformation officer, said in the launch announcement that "security can no longer be treated as a bolt-on," adding that Loyalty+ is meant "to make cybersecurity adoption front of mind, supporting greater protection across the industry while rewarding the loyalty of our customers." Rather than asking operators to find new budget for security work, the programme converts money they were spending anyway into money that can only go toward it.
Continent 8 already sells the underlying menu, including DDoS protection, a web application firewall it markets as SecureEdge, endpoint security, intrusion detection, multi-factor authentication and a product it calls iGaming Shield. Loyalty+ does not add a new capability. It adds an incentive to actually use the ones already on the price list.
Why third-party infrastructure is the industry's weak point
Continent 8's own diagnosis, that third-party vulnerabilities drive 60% of breaches, matches a pattern regulators and operators already recognise. A modern sportsbook or online casino is rarely one company's code end to end. It is a licensed operator's front end sitting on top of a platform provider, connected to payment processors, content suppliers, odds feeds and hosting infrastructure that, in turn, often traces back to the same handful of specialist vendors serving the whole regulated market.
That concentration is not unique to security. Operators made the same build-versus-buy trade when they picked a platform provider instead of writing their own PAM, and the wave of supplier M&A has pulled content and distribution into fewer hands. Geolocation compliance in the US shows the risk in its starkest form: a single vendor has historically checked over 90% of the market's location data, meaning one company's bad day becomes every operator's bad day. Cybersecurity spend sits on the same logic. An operator can harden its own application layer and still get breached through a supplier's unpatched server, which is exactly the scenario Continent 8's 60% figure describes.
Regulatory pressure compounds the problem rather than simplifying it. Continent 8 notes that iGaming operators must meet "strict and often differing compliance requirements across multiple regulated markets," each with its own data-handling and incident-reporting rules. A hosting provider that also functions as the compliance backbone for KYC and financial data, as Continent 8 does for many of its customers, has a direct commercial reason to keep that data secure: a breach there is a breach across every licence the client holds.
A company retooling around security and AI
Loyalty+ did not appear in isolation. Ten days earlier, on August 3, Continent 8 announced that Mike Small, formerly president of Akkodis North America and US country president of The Adecco Group, was taking over as chief executive, effective July 15, after founder Michael Tobin stepped down following 28 years in the role. Small said his priorities are to "deepen customer partnerships, accelerate innovation, and continue delivering secure, resilient solutions," and his brief now explicitly covers infrastructure, cloud, cybersecurity and AI-enabled services for the sector.
That mandate follows a pattern already set in May 2026, when Continent 8 launched intelligence8, a suite bundling AI-ready infrastructure, managed AI services, AI operations tooling and a voice AI product, aimed at letting operators deploy AI workloads inside regulated jurisdictions without breaching data residency or security rules. AI has already reshaped how operators run player retention and CRM; Continent 8's bet is that the infrastructure underneath those AI workloads needs the same regulated, security-first treatment as the betting platform itself. Loyalty+, the CEO transition and intelligence8 read as three parts of one repositioning: a connectivity and hosting vendor recasting itself as the industry's security and compliance layer, not just its landlord.
The rebate becomes the compliance budget
What Loyalty+ actually changes is where security money comes from inside an operator's finance function. Cybersecurity spend usually competes for a dedicated, and often thin, line item that gets cut first when a quarter tightens. By routing 5% of infrastructure spend that already happened into a locked pool for penetration testing and incident response capacity, Continent 8 removes that competition entirely. The operator was never deciding whether to spend the money. It was only deciding, after the fact, what the money could buy.
For an industry where the weakest link is rarely the operator's own code, that is a meaningful shift in incentive design, not just a marketing programme. If it works, other infrastructure and platform vendors serving regulated gambling markets have an obvious template to copy: stop selling security as an optional add-on, and start building it into the invoice the customer was going to pay regardless.