Skip to the content

Iron City Dispatch — Technology, platforms and the business of the internet

75 pieces across six desks · reported and checked in Pittsburgh · no affiliate programme of our own

Platforms & Engineering · 8 October 2026 · 3 min read

iGaming affiliates turn to automation as margins tighten and acquisition costs rise

The punched cards of a Jacquard loom: once set, the pattern runs itself
The punched cards of a Jacquard loom: once set, the pattern runs itself. Photo: Jamain · Wikimedia Commons · CC BY-SA 4.0

Modern iGaming operations are rushing to implement advanced affiliate marketing automation as rising customer acquisition costs and volatile search traffic push affiliates to rethink their core business. Tightening regulations, crowded marketplaces, and unpredictable player behavior are driving a shift from manual optimization to automated, data-driven approaches.

In the second quarter of 2026, the iGaming affiliate market faced rapidly increasing costs and decreasing returns from traditional search traffic sources. According to recent reports from Affpapa, affiliates are moving beyond SEO to explore new paid media, data, and audience monetization strategies. The report notes that higher traffic has not always translated to higher revenue, as key metrics like player deposits and first-time depositors rise while affiliate earnings remain flat.

Faced with this shift, affiliates are increasingly investing in technologies that can speed up the conversion process and optimize traffic distribution. In 2026, iGaming platforms use automated traffic routing to direct visitors based on device type, language, IP uniqueness, or time of day, according to figures published by affiliate technology provider Aff.tech. Those traffic distribution rules are being incorporated into modern affiliate software along with link generation, attribution tracking, and payout approval workflows.

Read the full piece

02

Platforms & Engineering

All of Platforms
03

Payments, Privacy & Trust

All of Payments & Trust
04

Four numbers worth knowing by heart

€20m / 4%

The ceiling for the heaviest class of GDPR fine — whichever of the two is higher, counted on worldwide annual turnover.

Regulation (EU) 2016/679, Article 83(5)

72 hours

Time a controller has to notify the supervisory authority of a personal data breach after becoming aware of it.

Regulation (EU) 2016/679, Article 33(1)

200 ms

Interaction to Next Paint at or below this value is what Google counts as a good responsiveness score at the 75th percentile.

web.dev, Interaction to Next Paint

€30

Single-payment ceiling for the low-value exemption from strong customer authentication; the running total caps at €100 or five payments.

Delegated Regulation (EU) 2018/389, Article 16

05

Audience & Growth

All of Growth
06

Markets & Regions

All of Markets
07

On the desk this quarter

Two standing references the desk keeps open while reporting: the stack a mid-sized operator actually runs, and what happens to a payment between the tap and the bank.

Stack of the quarter

Compared on one axis each, not scored

Three ways to push an update to a browser
DirectionReconnects on its ownSpecified in
WebSocketBoth ways over one TCP connectionNo — the application has to reopen the socketRFC 6455
Server-Sent EventsServer to browser onlyYes — the browser retries, and the server can set the delay with a retry: fieldHTML Living Standard
Long pollingRequest/response, one update per round tripYes, by construction — every update costs a new requestRFC 6202

Picked for the quarter because the choice is usually made on habit rather than on the reconnect column, which is where the operational cost actually sits.

What shipped

Dates that changed a requirement, newest first

  • 12 Mar 2024 Interaction to Next Paint replaced First Input Delay as a Core Web Vital, so responsiveness is now measured over the whole interaction instead of its first frame. Google, web.dev
  • 17 Feb 2024 The Digital Services Act became applicable to every online platform in the EU, not only the very large ones. Regulation (EU) 2022/2065, Article 93(2)
  • 31 Mar 2025 The future-dated requirements of PCI DSS v4 stopped being best practice and became mandatory at assessment. PCI Security Standards Council
  • 6 Jun 2022 HTTP/3 was published as a standards-track RFC, which is the date the version stopped being a draft in procurement paperwork. IETF, RFC 9114
08

Work & Leadership

All of Work
Work

Take-Home Tasks: The Time Budget That Keeps Candidates in the Process

A take-home assignment only earns its place in your hiring funnel if it answers one specific, pre-identified question about a candidate's fit. Before it ever reaches an applicant, the hiring team must already know exactly which one to three competencies it measures, and they must have proven the task can be finished within two hours. Anything longer tests endurance, not ability.

22 Mar 2026
4 min

The Wire

Get the Best Android Casinos for Real Money

Mobile gaming has become the latest craze within the online casino industry in recent times. Increasing numbers of players are using their telephones to gamble on their online casinos, and…

10 Sep 2026
5 min

The Wire

How Do Bonus Bets Work in Sports Betting?

Bonus bets are a form of site credit offered by sportsbooks and online casinos. Typically used to encourage brand loyalty and keep customers coming back for more, bonus bets allow players…

4 Sep 2026
4 min

10

The six desks

Platforms & Engineering

How the systems behind consumer internet services are actually built: architecture, latency, delivery and the trade-offs nobody puts in a press release.

14 pieces

Payments, Privacy & Trust

Money moving across borders, data that must not leak, and the rules that decide what an operator is allowed to keep.

12 pieces

Audience & Growth

Measurement, attribution and the unglamorous plumbing of acquisition — written for people who have to defend the numbers.

11 pieces

Markets & Regions

Regional reporting in the language of the market it describes: Europe, the Nordics, Latin America, Asia-Pacific and North America.

20 pieces

Work & Leadership

Teams, on-call rotations, hiring and the habits that survive a quarter — the human half of a technical organisation.

20 pieces

The Wire

The general desk: dispatches, company notes and the long tail of industry news that does not belong to one beat.

19 pieces

11

Across the network

A paid placement carried over from the previous edition of this address, kept as it stood. The desk did not choose the link and does not report on it.

Independent trade desk. We take no commission on anything we describe and run no affiliate programme of our own. Every figure on this page names the standard, filing or organisation it comes from; where a number could not be verified the page says so. How we work and how we correct. Reviewed:

Cookies, and what this site stores. The Dispatch sets no advertising or analytics cookies and loads no third-party tracker. Closing this notice writes one key — icd-notice — into your browser’s local storage, so that the notice does not return. Nothing else is kept. The one thing a page here sends onward is what a reader types into the form on the contact page, and that is described before the form is used. What the policy says.