Greece opens €28.5k tender for cybersecurity and player verification partner in online gambling

The Hellenic Gambling Supervision and Control Commission (EEEP) has launched a tender to appoint a “specialist legal and technical partner” for Greece’s online gambling market. For PSPs and compliance teams, the useful bit is simple: this is another move toward tighter player identification, stronger KYC (Know Your Customer) controls, and harder AML (anti-money laundering) and cybersecurity requirements.

1. The tender is aimed at redesigning and strengthening the framework for the secure identification of players using Electronic Player Accounts (EPAs). The commission is looking for help with the “design and improvement of the framework for the secure identification of gambling players,” plus the “process of certification and verification of the identity of players participating in games of chance through licensed online gaming providers.”
2. The contract is valued at €28.5k (£24.3k) excluding VAT. The successful contractor will provide specialist legal support until the end of 2026, or until 190 hours of consultancy work have been completed, whichever comes first.
3. Three progress reports are expected during the engagement, each with recommendations and proposals to strengthen Greece’s player verification framework. In practice, that means the regulator is not just buying a memo; it is collecting a roadmap for how identity checks and account controls should work.
4. The tender sits inside a wider government push to tighten oversight of regulated online gambling while making life harder for the black market. In June, the Greek Government submitted draft “Regulations for the Hellenic Gaming Commission (EEEP) and Improvements to the Gaming Framework” to Parliament, described as the most significant expansion of the regulator’s powers since Greece regulated online gambling.
5. That draft would expand the EEEP’s permanent workforce from 80 to 110 employees, with new hires focused on cybersecurity, information technology, intelligence gathering, market surveillance and enforcement. It would also give the regulator power to order the immediate removal of illegal gambling websites and online content, expand Greece’s blacklist of unlicensed operators, and work with law enforcement through an enhanced Gaming Inspectors Corps with formal investigative powers.

For payment providers serving Greece, the direction of travel is clear: more scrutiny on player onboarding, identity verification, and the links between licensed operators and the systems they use to keep out fraud, financial crime, and underage gambling. If your risk stack was built for lighter-touch supervision, this is not that market anymore.