The Online Competition Standards Authority (OCSA) is an independent standards and certification body for UK online prize-draw operators. It was founded in response to the DCMS Voluntary Code of Good Practice (2025) and provides auditing, certification and draw integrity services to the sector.

No. OCSA is an independent standards body, not a regulator. It does not have statutory powers. Certification indicates compliance with OCSA standards and alignment with the DCMS Voluntary Code, but is not a legal requirement or regulatory approval.

Are UK online prize draws legal?

Yes. UK online prize draws are legal under the Gambling Act 2005 provided a genuine free entry route exists alongside any paid entry route. They are not regulated by the Gambling Commission. The DCMS Voluntary Code of Good Practice provides the primary regulatory framework.

What is the OCSA draw register?

The OCSA public draw register at draws.ocsa.org.uk/register/ records all certified draws with permanent blockchain verification on the Polygon mainnet. Each draw uses Chainlink VRF (verifiable random function) to ensure results cannot be predicted or manipulated.

What is the OCSA instant win prize manifest register?

The OCSA instant win register at draws.ocsa.org.uk/iw/ publishes the SHA-256 hash of each sealed prize manifest before the competition opens. OCSA acts as independent arbiter — generating all winning ticket numbers before sales begin and holding the manifest encrypted. Neither the operator nor OCSA staff can alter winning ticket numbers after sealing.

Frequently Asked Questions

Q: What is the DCMS Voluntary Code of Good Practice for prize draws?

The DCMS Voluntary Code of Good Practice for Prize Draw Operators was published by the UK Government's Department for Culture, Media and Sport in 2025. Over 100 operators have signed it. It sets out standards for player protection, transparency, draw integrity and accountability. The full implementation deadline is 20 May 2026.

Q: How does OCSA certification work?

OCSA offers three certification tiers: Certified (£75/month), Silver (£275/month) and Gold (£1,275/month). Each tier requires an audit of the operator's website and processes against OCSA's standards. OCSA standards are more demanding than the DCMS Voluntary Code.

For Operators

1. What is the DCMS Voluntary Code of Good Practice for Prize Draw Operators?

The DCMS Voluntary Code of Good Practice is a set of standards published by the UK government's Department for Culture, Media and Sport (DCMS) for operators who run online prize draws — competitions where both a paid and a free entry route exist. It covers player protections, transparency requirements, draw integrity, and accountability. The Code is voluntary in the sense that operators sign up to it; once signed, compliance is expected. The full implementation deadline is 20 May 2026.

2. Does the Code apply to my competition?

The Code applies to UK online prize draw operators who offer both a paid entry route and a free entry route, and where the outcome is determined by chance. If you require participants to pay to enter and also offer a genuinely free alternative route, your competition almost certainly falls within scope. If you are unsure, OCSA can help you assess whether the Code applies to your operation.

3. What is the implementation deadline?

The DCMS Voluntary Code must be fully implemented by 20 May 2026. This is not a consultation date or a review point - it is the date by which operators who have signed the Code are expected to be operating in full compliance with its requirements. Operators who have signed the Code and are not compliant by this date are in breach of their commitment to DCMS.

4. What happens if I am not compliant by 20 May 2026?

The Code is voluntary, but its consequences are not trivial. DCMS monitors the sector and reserves the right to introduce statutory regulation if voluntary standards are not met. Non-compliant operators who have signed the Code are in breach of a public commitment made to the government. This carries reputational risk, potential exclusion from any industry certification scheme, and increased regulatory scrutiny. The May 2026 deadline is also the point at which DCMS has indicated it may delegate oversight to an industry trade body - making visible compliance increasingly important.

5. I signed the Code - does that mean I am now compliant?

No. Signing the Code means you have committed to complying with it. It does not mean you are compliant. OCSA's audit work across the sector has found that the large majority of operators - including reputable, well-intentioned businesses - have significant compliance gaps they are unaware of. Signing and complying are two entirely separate things. The most commonly missed requirements include the consolidated player protections statement (clause 3.4), the prominence of the free-entry route before the point of purchase, and the absence of publicly described harm monitoring processes.

6. What is a valid free entry route under UK law?

Under the Gambling Act 2005 (Schedule 2, paragraph 8), a competition that charges for entry must offer a free entry route in which free entries are no less likely to win than paid entries. The statute uses the word entries, not entrants. This means each free entry must carry the same probability of winning as each paid entry. It does not require the number of free entries to match the number of paid entries. The free route must be genuine, unconditional, and accessible without an unreasonable barrier. Postal routes are the most common mechanism, but digital free-entry routes are also valid, provided they meet the same standard.

7. Can I remove the postal entry route?

This is one of the most misunderstood questions in the sector. The legal requirement is that a free entry route exists - not that it must be postal. The postal route has become conventional, but it is not mandated by law. However, removing it entirely without replacing it with another genuine free route would breach the Gambling Act 2005. Additionally, if you move to a purely digital free entry route, you must ensure it remains unconditional, prominently displayed, and accessible. OCSA recommends that operators seek legal advice before removing the postal route and consider what replacement mechanism they are putting in its place.

8. What is the "consolidated player protections statement" and do I need one?

Clause 3.4 of the DCMS Code requires operators to publish a single, consolidated statement of all the player protection measures they have in place. This is not the same as having those protections buried across your terms and conditions or spread across multiple pages. The consolidated statement must be publicly accessible and easily findable by participants. It is the most commonly missed requirement OCSA identifies during audits - even operators who have genuinely implemented the underlying protections often fail to publish the required statement. Yes, if you have signed the Code, you need one right now. Even if you haven’t signed the code, you need one after May 20.

9. How do I know if my free entry route is prominently displayed?

The CAP Code (ASA rule 8.17.2) requires that the free entry route be presented no less prominently than the paid entry route. This means it must be visible before the point of purchase - not buried in your terms and conditions, not accessible only via a link at the bottom of the page or hidden among advertising in the smallest font available, and not described in language that makes it harder to find or understand than the paid route. OCSA's audit work has found that the majority of operators fail this requirement, often without realising it. If a participant has to search for your free entry route, it is not sufficiently prominent. In OCSA’s opinion, if you have a large, red “BUY NOW” button, you need an equally prominent “PLAY FOR FREE” button right next to it.

10. What is OCSA, and how is it different from DCMS?

DCMS (the Department for Culture, Media and Sport) is the government department that published the Voluntary Code. It is the regulatory authority for the sector. OCSA (the Online Competition Standards Authority) is an independent, private standards and certification body. We are not a government body. Our role is to help operators understand and implement the Code, to certify those who meet or exceed its standards, and to provide the sector with a structured, independent assessment framework. OCSA certification does not confer regulatory approval, but it provides documented, independent evidence of compliance, which is increasingly valuable as DCMS oversight intensifies ahead of the May 20 2026 deadline.

For Players and Consumers

11. What should a legitimate online prize draw look like?

A legitimate online prize draw should clearly state the cost of entry, offer a genuinely free alternative entry route that is no less likely to win, describe how the draw will be conducted, and confirm that the outcome is determined by chance or a verifiable skill-based mechanism. The operator should publish information about player protections - including spending limits, account closure options, and harm support services - and those protections should be easy to find without having to search through terms and conditions. Winners should be announced and verifiable. If an operator makes it difficult to find the free entry route, does not describe their draw process, or avoids publishing player protection information, these are warning signs.

12. How do I know if a competition is genuine?

Genuine competitions are transparent. Look for a clearly described draw mechanism, publicly announced winners, a named and verifiable operator, and a free entry route that is easy to find. Be cautious if the operator cannot explain how the draw is conducted, if there is no evidence of previous winners, if the charitable giving claims are prominent but the actual split is not disclosed, or if the free route is so difficult to use that it appears designed to discourage rather than enable participation. If you have concerns about a specific operator, you can report them to OCSA via our website.

13. What are my rights if a draw is cancelled or delayed?

Under the DCMS Code (clause 2.5), operators who have signed the Code commit not to cancel or significantly delay a draw solely because ticket sales targets have not been met. If an operator cancels a draw after accepting payment, you are generally entitled to a refund. Your consumer rights under the Consumer Rights Act 2015 also apply. If you believe an operator has cancelled a draw improperly, you should first raise a formal complaint with the operator using their published complaints process. If that process is unavailable or your complaint is not resolved, you can report the issue to Trading Standards or contact OCSA.

About OCSA

14. Is OCSA a government body?

No. OCSA - the Online Competition Standards Authority - is an independent, privately established standards and certification body. We are not part of DCMS, the ASA, or any other government agency. Our independence is deliberate and structural: an effective standards body must be able to assess operators objectively, and that requires complete separation from both government and the commercial interests of the sector. DCMS publishes the Voluntary Code; OCSA helps operators understand and implement it. These are complementary but entirely separate functions.

15. How does OCSA certification work?

OCSA certification involves an independent assessment of your operation against the DCMS Voluntary Code and, at higher tiers, the more demanding OCSA Code of Practice. The process begins with an application and an initial review of your publicly accessible materials - what participants can actually see on your website. We assess your free-entry route, your player protection disclosures, your draw transparency, your accountability documentation, and your advertising practices. Operators who meet the required standard are awarded OCSA certification at the appropriate level. Certification is not permanent - it is subject to ongoing monitoring and monthly review. If you would like to begin the process, visit our Apply page.