Security Intelligence

Security for Casinos and Gaming Venues | CloseProtectionHire

Q: "What physical security obligations do UK casinos have under the Gambling Commission?"

"UK casino operating licences issued under the Gambling Act 2005 are subject to Licence Conditions and Codes of Practice (LCCP). Social responsibility code SR 12.1.1 requires operators to have a documented physical security strategy, maintained CCTV covering all gaming and cash-handling areas, access control for restricted areas including the cage, and documented incident reporting procedures. Failure to maintain these controls can result in licence review, financial penalty, or revocation under the Gambling Act 2005 sections 116-140."

Q: "What is chip theft and how does it typically occur?"

"Chip theft at casino tables involves acquiring gaming chips through deception, sleight of hand, or collusion with staff, and then converting them to cash at the cage. Common techniques include past-posting (placing additional bets after the outcome is known), agent play (colluding players acting as a team), cap and crimp (adding chips to a winning bet), and dealer-player collusion. The conversion step -- presenting stolen chips at the cage -- is the critical detection window, which is why cage transaction monitoring and chip serialisation are primary anti-theft controls."

Q: "What security arrangements apply to VIP patrons at high-stakes gaming rooms?"

"VIP gaming rooms require a distinct security layer from the main floor. High-stakes players with known wealth profiles attract surveillance by criminal networks seeking to identify targets for post-departure robbery. Standard arrangements include: dedicated security escort for VIP players entering and leaving the building, vetted and private vehicle arrangements for departure, discreet observation in the gaming room rather than uniformed security presence, and liaison with the operator's surveillance team to identify any individual conducting unusual observation of the VIP player."

Q: "What happened at Resorts World Manila in 2017 and what are the security lessons?"

"On 2 June 2017, an armed individual entered Resorts World Manila, set fires, and stole gaming chips with a face value of PHP 113 million before dying. Philippine National Police determined the incident was a robbery, not a terrorism event, though it was initially feared to be an IS-affiliated attack. Thirty-seven people died -- primarily from smoke inhalation during the evacuation. The lessons covered: perimeter entry screening effectiveness, fire detection and suppression response time, staff evacuation training, and the confusion cost of an ambiguous incident where the nature of the threat was not immediately clear."

Q: "Is casino security regulated differently in Macau and Manila compared to the UK?"

"Yes. In Macau, the Gaming Inspection and Coordination Bureau (DICJ) under the Macau SAR government sets physical security requirements for the six licensed gaming concessionaires. In the Philippines, PAGCOR (Philippine Amusement and Gaming Corporation) sets security standards for licensed casinos. Both regimes require CCTV coverage, cage security, and incident reporting, but the surveillance architecture and staff licensing requirements differ from the UK's Gambling Commission model. Operators in both markets must also address the specific threat environments of their respective cities."

Casino cage security, chip theft prevention, VIP patron protection, UKGC licensing obligations, and gaming venue physical security in P1 markets. Expert guidance for operators and HNWI clients.

6 May 2026

Written by James Whitfield

Speak to the Team

Casino security sits at the intersection of regulatory compliance, high-value physical asset protection, and personal security for HNWI patrons whose presence on a gaming floor is, by definition, publicly visible and associated with significant liquid wealth. The security function in a licensed casino is not a bolt-on operational requirement – it is a condition of the operating licence, subject to regulatory audit, and directly connected to the financial viability of the operation.

The threat spectrum for casino operators runs from organised chip theft and table manipulation through cage robbery, money laundering through gaming activity, and the personal security of VIP patrons after they leave the building.

Regulatory Framework: UK

UK casino operating licences are issued under the Gambling Act 2005. Physical security requirements are set out in the Licence Conditions and Codes of Practice (LCCP) published by the Gambling Commission. The relevant provisions include:

Social Responsibility Code 12.1.1: Requires a documented physical security strategy appropriate to the nature of the operation, including CCTV coverage of all gaming and cash-handling areas, access control for restricted areas, incident logging, and staff training.
CCTV retention: Casino CCTV must be retained for a minimum of 31 days (extended for footage relevant to an incident under investigation).
Incident reporting: Notifiable events – including robberies, serious assaults, and significant fraud incidents – must be reported to the Gambling Commission under LC 15.2.1.
Cash-handling procedures: The cage must have documented procedures for large cash transactions and must retain transaction records sufficient to meet anti-money-laundering obligations under the Proceeds of Crime Act 2002 and the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017.

The 2023 Gambling Commission enforcement report recorded GBP 54.8 million in financial penalties across the industry. Physical security failures have accompanied anti-money-laundering and safer gambling failures in multiple enforcement cases. A casino that cannot demonstrate documented, functioning physical security controls to a Gambling Commission compliance manager faces licence review.

Cage Security

The cashier cage is the highest-consequence physical security point in a casino. It is the single location through which all chip conversions, credit issuance, cash-in/cash-out transactions, and float management pass. Its concentration of liquid value – in the form of gaming chips, cash, and credit instruments – makes it a target for both internal fraud and external attack.

Physical security requirements for the cage include:

Attack-resistant construction: The cage counter and surround should meet LPS 1175 B3 or equivalent standard for forced entry resistance. This covers the glazing, counter structure, and door.
Access control: The cage interior should operate on a two-person rule for access to the main cash vault. Electronic access logging of all cage entry and exit events. The cage should not be accessible from the main floor without a dedicated security door requiring authorisation.
CCTV: Camera coverage of all transaction positions from angles that capture both the cashier’s and customer’s hands, the face of the customer, and the transaction display. Footage must capture denomination counting.
Counter procedures: Chip verification – including RFID check for high-denomination chips – at the point of every conversion transaction above a defined threshold.

Chip serialisation using RFID technology is now standard practice at major operators for high-denomination chips. RFID chips embedded in gaming chips can be flagged as stolen and rejected at the cage. This substantially reduces the conversion risk for large-denomination theft but does not address incremental conversion by teams spreading transactions across multiple visits.

Table Gaming Security and Fraud Prevention

Table gaming fraud is the most persistent theft vector in casino operations. Documented techniques include:

Past-posting: Adding or increasing a bet after the outcome is determined but before the dealer completes the payout. Requires dealer inattention or distraction.
Capping: Placing additional chips on a winning bet during the payout moment.
Agent play (team play): Colluding players operating as a team – one to play, one to observe, one to signal – exploiting information advantages or distracting dealers.
Dealer-player collusion: The most financially damaging table fraud category. A dealer who deliberately miscounts payouts, signals hole cards, or facilitates muck (card substitution) can cause losses that run to hundreds of thousands before detection.

Surveillance response to these techniques requires dedicated gaming surveillance staff trained to identify specific fraud indicators – not generic CCTV monitoring. Effective casino surveillance is a specialist discipline, and the gap between generic security staffing and gaming-trained surveillance staff is where most table fraud persists.

VIP Patron Security

HNWI patrons at high-stakes gaming rooms are identifiable to any individual monitoring the venue entrance, the gaming floor, or the cage. A player converting GBP 200,000 in chips at the cage is visible. Their departure – identifiable to anyone watching – creates a window for post-departure robbery targeting.

Incidents involving targeted robbery of identified casino patrons have been documented in Macau, Manila, and Latin American gaming markets. The last fifty metres between the casino exit and the patron’s vehicle is consistently the highest-risk window.

Security arrangements for VIP patrons should include:

Dedicated security escort for patrons entering and leaving the building, particularly after significant play.
Pre-arranged, vetted transport rather than publicly hailed vehicles.
Discreet observation in the gaming room – plain-clothes security presence rather than visible uniformed security, which itself flags the patron’s value to observers.
Coordination between the operator’s surveillance team and the patron’s personal security if one is present.
Lobby and vehicle access control to prevent surveillance positions being established near the building entrance.

Resorts World Manila 2017: Incident Lessons

On 2 June 2017, an armed individual entered Resorts World Manila via an emergency exit, set fires on the gaming floor, and stole gaming chips with a face value of PHP 113 million. Philippine National Police concluded the incident was a robbery, not an IS-affiliated attack, despite initial media reporting. Thirty-seven people died – primarily from smoke inhalation during evacuation from the 6th floor gaming area.

The incident illustrated multiple security gaps simultaneously: perimeter entry screening that did not detect the armed individual, fire detection and suppression response that did not contain smoke propagation quickly enough, staff evacuation training that did not prevent a panic concentration in a stairwell, and the real-time confusion cost when the nature of a threat (robbery vs. terrorism) is not immediately clear to responding staff.

The Philippines Casino Regulatory Authority (PAGCOR) subsequently issued updated physical security directives for licensed gaming facilities.

P1 City Casino Environments

Manila (Entertainment City). The integrated resort cluster – Solaire Resort, City of Dreams Manila, Okada Manila, Resorts World Manila – operates in Metro Manila’s general security environment. Known risks include post-departure patron targeting, organised chip fraud by professional teams, and money laundering through gaming activity from regional criminal networks. The 2017 Resorts World incident remains the benchmark for emergency response planning at Manila gaming facilities.

Istanbul. Casino gaming has been prohibited in Turkey since 1998 under Law No. 3038 (amended). Legal casino operations are limited to specific licensing arrangements. HNWI patrons travelling to Turkey for gaming purposes do so in a legally constrained environment and may encounter unlicensed venues where the security standard is entirely at the operator’s discretion.

Moscow (Krasnaya Polyana, Sochi; Altai Special Gaming Zone). Following the 2006 law that concentrated casino operations into four designated gaming zones, Moscow-area casinos closed in 2009. The Krasnaya Polyana resort cluster near Sochi and the Altai gaming zone now operate the major legal Russian casino environments. Visiting patrons require the standard Moscow/Sochi close protection security framework.

Manila, Macau, and Singapore (Marina Bay Sands/Resorts World Sentosa). These three markets represent the main Asia-Pacific gaming destinations for HNWI patrons. Macau’s DICJ-regulated environment is professionally managed but the Cotai Strip and Macau Peninsula venues attract criminal targeting commensurate with the scale of high-value play. Singapore’s Integrated Resorts operate under Casino Control Act 2006 with robust MAS anti-money-laundering requirements.

For nightlife venue and high-footfall public venue security – where SIA licensing requirements, queue management, conflict de-escalation, and crowd dynamics management apply across similar environments with lower average patron value – see our security for alcohol and nightlife venues guide. For VIP close protection at private events and corporate hospitality settings – where many of the same HNWI principal security considerations apply without the regulatory gaming framework – see our VIP protection at conferences and corporate events guide.

Sources

Gambling Act 2005 (c.19), UK. Gambling Commission: Licence Conditions and Codes of Practice, current version. Gambling Commission: Annual Enforcement Report 2022/23. FATF: Guidance for a Risk-Based Approach to Casinos, June 2021. Philippine National Police: Resorts World Manila Incident Investigation Report, 2017. PAGCOR: Physical Security Directive for Licensed Casinos, post-2017. Macau Gaming Inspection and Coordination Bureau (DICJ): Physical Security Requirements for Casino Concessionaires, 2024. Casino Control Act 2006, Singapore (Cap 33A). Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 (SI 2017/692). Proceeds of Crime Act 2002 (c.29). LPS 1175: Loss Prevention Standard – Intruder Resistant Building Components, LPCB, current issue.

James Whitfield is a Senior Security Consultant with 20 years of experience in HNWI personal security, high-value venue protection, and corporate risk management across global markets.

For the sports betting integrity context – where match-fixing investigation exposes integrity officers to criminal networks with large financial incentives, INTERPOL Operation SOGA documented threats, and illegal P1 city betting markets mean investigations target organised crime rather than regulated operators – see our security for sports betting integrity and gaming investigators guide.

Summary

Key takeaways

Cage security is the highest-consequence physical security point in a casino

The cashier cage processes all chip conversions and cash transactions. It is the point at which a casino's liquid value is most concentrated and accessible. Physical security requirements include: attack-resistant glazing (to LPS 1175 or equivalent standard), access control with two-person rule for cash-handling areas, CCTV coverage at cage transaction positions, and documented procedures for large cash transactions. Cage design should be reviewed as part of any broader physical security assessment.

UKGC social responsibility code creates audit risk for inadequate security

UK casinos are periodically assessed by Gambling Commission compliance managers who review physical security, CCTV operation, and incident reporting records. Inadequate documentation -- failure to retain CCTV footage for the required period, incomplete incident logs, or security arrangements not matching the documented strategy -- creates direct licence risk. The 2023 Gambling Commission enforcement report recorded GBP 54.8m in penalties across the industry, with physical security failures cited alongside anti-money-laundering and safer gambling failures.

Post-departure robbery of high-value players is a documented threat

High-stakes players are identifiable to any individual watching the gaming floor or monitoring the entrance. Cash conversion at the cage, visible chip stacks at a table, or arrival by known vehicle all create intelligence for criminal planning. Incidents involving post-casino robbery of identified high-value players are documented in Macau, Manila, and Latin American gaming markets. The last 50 metres -- between the casino exit and the player's vehicle -- is consistently the highest-risk point.

Chip serialisation and RFID technology changes the theft calculus

High-denomination chips at major operators are now embedded with RFID markers that allow the cage to verify authenticity and flag chips reported stolen. This substantially reduces the conversion risk for large-denomination chip theft but does not eliminate team-based or collusion-facilitated theft, which typically avoids serial tracking by converting chips incrementally through multiple cage visits.

P1 city casino environments require specifically elevated security

Casinos in Manila (Entertainment City cluster -- Solaire, City of Dreams, Okada, Resorts World), Istanbul (Lunapark area pre-1998 ban, current legal grey area in special gaming zones), and Moscow (Krasnaya Polyana resort cluster post-2009 Moscow-region ban) operate in threat environments materially above Western European baseline. HNWI patrons visiting casinos in these markets should treat the visit as a close protection operation -- vetted transport, pre-planned departure route, and awareness of post-departure surveillance risk.

FAQ

Frequently Asked Questions

UK casino operating licences issued under the Gambling Act 2005 are subject to Licence Conditions and Codes of Practice (LCCP). Social responsibility code SR 12.1.1 requires operators to have a documented physical security strategy, maintained CCTV covering all gaming and cash-handling areas, access control for restricted areas including the cage, and documented incident reporting procedures. Failure to maintain these controls can result in licence review, financial penalty, or revocation under the Gambling Act 2005 sections 116-140.

Chip theft at casino tables involves acquiring gaming chips through deception, sleight of hand, or collusion with staff, and then converting them to cash at the cage. Common techniques include past-posting (placing additional bets after the outcome is known), agent play (colluding players acting as a team), cap and crimp (adding chips to a winning bet), and dealer-player collusion. The conversion step – presenting stolen chips at the cage – is the critical detection window, which is why cage transaction monitoring and chip serialisation are primary anti-theft controls.

VIP gaming rooms require a distinct security layer from the main floor. High-stakes players with known wealth profiles attract surveillance by criminal networks seeking to identify targets for post-departure robbery. Standard arrangements include: dedicated security escort for VIP players entering and leaving the building, vetted and private vehicle arrangements for departure, discreet observation in the gaming room rather than uniformed security presence, and liaison with the operator’s surveillance team to identify any individual conducting unusual observation of the VIP player.

On 2 June 2017, an armed individual entered Resorts World Manila, set fires, and stole gaming chips with a face value of PHP 113 million before dying. Philippine National Police determined the incident was a robbery, not a terrorism event, though it was initially feared to be an IS-affiliated attack. Thirty-seven people died – primarily from smoke inhalation during the evacuation. The lessons covered: perimeter entry screening effectiveness, fire detection and suppression response time, staff evacuation training, and the confusion cost of an ambiguous incident where the nature of the threat was not immediately clear.

Yes. In Macau, the Gaming Inspection and Coordination Bureau (DICJ) under the Macau SAR government sets physical security requirements for the six licensed gaming concessionaires. In the Philippines, PAGCOR (Philippine Amusement and Gaming Corporation) sets security standards for licensed casinos. Both regimes require CCTV coverage, cage security, and incident reporting, but the surveillance architecture and staff licensing requirements differ from the UK’s Gambling Commission model. Operators in both markets must also address the specific threat environments of their respective cities.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.