Skip to content

Power

Your Sportsbook Turns the New Jersey Border Into a Data Log

A legal wager depends on a private geolocation system deciding which side of New Jersey’s border your phone occupies. That decision leaves records behind.

Lena VasquezPower — Courts & Policy

August 19, 2026 · 7 min read

A sportsbook location-check screen on a phone beside a New Jersey transit window.

Keep one small object in view: the location spinner beside a pending bet slip. A commuter opens a sportsbook while a train is still under the Hudson River, waits for service to return in New Jersey and taps the button. Before the operator accepts the wager under its New Jersey license, software must turn that physical crossing into a jurisdictional decision.

The border is no longer only a sign, a river or a line maintained by surveyors. Inside the app, it is a geofence, a digital boundary drawn from geographic coordinates, followed by a result that says the device is inside, outside or too uncertain to trust.

That result looks minor. It is the permission slip for the entire transaction.

The location check inside the bet button

New Jersey law does not make a mobile wager legal merely because the customer has a New Jersey account, lives in the state or selected a casino whose servers sit there. The person placing the wager must be physically located within an authorized jurisdiction when the operator accepts it.

That territorial requirement is binding. It comes from state gambling law, regulations and controls overseen by the New Jersey Division of Gaming Enforcement. An operator cannot replace it with a checkbox asking customers to promise they are in Hoboken.

The rules generally describe the required outcome rather than ordering every sportsbook to use an identical technical stack. The system must reasonably establish location and block unauthorized play. Regulators review the controls, while operators buy much of the machinery from specialist vendors.

GeoComply is the best-known company in that layer of the market. Its software has been widely used by US sportsbooks and online casinos to perform location and fraud checks. Xpoint competes in the same category. A particular app’s vendor and configuration can change, so a GeoComply logo in an industry presentation does not establish what every New Jersey sportsbook currently runs.

These companies do not decide whether sports betting should be legal. They sell the evidence that lets an operator tell regulators it accepted a wager where it was allowed to accept one.

The sportsbook pays for that service. The customer pays with delay, device permissions and data.

One signal is not enough

A phone’s GPS reading can place it on a map, but GPS becomes unreliable indoors, underground and among tall buildings. It can also be falsified. A regulated betting app therefore tends to compare several signals rather than trusting the blue dot you see in a consumer map.

Depending on the device and vendor, those signals can include GPS coordinates, nearby Wi-Fi networks, cellular information, the internet protocol address assigned to the connection and device characteristics. Wi-Fi matters even when the phone is not connected to a hotspot because nearby network identifiers can help location services estimate where the device is sitting.

The software also looks for contradictions. A phone reporting Jersey City coordinates while routing traffic through a distant virtual private network may draw scrutiny. So can mock-location software, remote-desktop tools, a modified operating system or an emulator, which imitates a physical device in software. None proves fraud by itself.

Together they can make the location result too risky to approve.

On mobile, much of this work can happen through a software development kit, a package of vendor code embedded inside the sportsbook app. Desktop betting may require browser permissions or separate location software. The vendor evaluates the signals against New Jersey’s geofence and sends the operator a decision, often with supporting risk information.

Near the border, the system may demand stronger evidence because ordinary location error could put the device on either side. That is why the location spinner can keep turning after the train reaches New Jersey, or why an app may ask for Wi-Fi and precise-location access even though the customer can see the state outside the window. Geography has already settled the matter. Software has not.

A border crossing becomes a sequence

The app does not need to maintain a perfect, second-by-second trail of the commuter’s trip to enforce the rule. It needs a reliable check at the points required by the gambling system, including before play is authorized and again during an active session under the operator’s approved controls.

That distinction matters. If the app is closed and lacks background permission, the sportsbook may not know the instant the train crosses the state line. Once the customer reopens it, resumes the session or tries to wager, the next check can record that the device now appears inside New Jersey.

The spinner beside the bet slip is therefore not a tiny border agent watching continuously. It is a recurring request for evidence. The requests can still become a movement history when they accumulate, particularly for someone who bets during a commute, visits the same venue or repeatedly opens the app at home.

Each geolocation transaction may generate a timestamp, a location estimate, an accuracy measurement, a device or session identifier, an internet address, a jurisdiction result and flags for suspected interference. Exact fields vary by operator, vendor and platform. The sportsbook separately maintains account, login and wagering records, allowing location decisions to be associated with a named customer rather than an anonymous dot.

A failed check can be recorded too. The wager may never happen, but the attempt matters to the operator because it shows that the compliance system blocked access and may help identify account sharing, spoofing or technical failure. Rejection is still an event.

Compliance data does not stay abstract

Operators need enough of a record to answer a regulator investigating whether a wager was accepted from the wrong place. Vendors need logs to diagnose disputes and improve fraud detection. Those incentives favor evidence that can be reconstructed later, not a disposable green light that vanishes as soon as the button changes color.

Public privacy notices from geolocation companies and sportsbooks describe collection and sharing in broad categories, including precise location, device information, network information and fraud indicators. They may also permit disclosure to regulators, law enforcement or service providers under stated conditions. The language differs, and a privacy notice is not a technical diagram showing every field captured during every check.

It is also not the same thing as a gambling regulation. Statutes and regulations are binding law. DGE-approved controls bind the operator’s regulated conduct. A vendor’s marketing page is a claim, while a privacy policy is a public statement about data practices that can carry legal consequences but does not override the state’s wagering rules.

There is no single, plain retention period that a customer can safely apply to every location signal in this chain. Gambling records, security logs, vendor telemetry and account information can fall under different regulatory requirements, contracts and internal schedules. Anyone promising that all coordinates disappear after one fixed interval is compressing several databases into a cleaner story than the system supports.

This is an account of the machinery, not legal advice. The important policy point is narrower: New Jersey requires operators to prove presence, but that requirement does not by itself settle how much raw location data must be kept, how precisely it should be stored or how broadly it may be reused.

The vendor sells certainty

Geolocation firms market themselves to sportsbooks as compliance and fraud infrastructure. Their position is unusually strong because an operator cannot treat location as an optional feature, and building a defensible anti-spoofing system from scratch would require specialized data, constant testing and a working relationship with regulators.

The operator receives a faster route to approval and a vendor willing to update its detection methods. The vendor receives recurring business tied to every regulated session or location transaction, depending on the contract. Public materials rarely expose the commercial terms for a specific sportsbook, so claims about a universal price per check should be treated as sales folklore unless a contract supports them.

Customers receive access only after submitting to the check. Declining precise-location permission is a real technical choice, but under the current model it generally means the app cannot authorize the wager. Consent has a peculiar shape when the regulated product is designed to stop working without it.

A less extractive system could calculate more of the boundary decision on the device, send the operator a signed inside-or-outside result and retain raw coordinates briefly. Regulators could also specify data-minimization rules, independent audits and firm deletion schedules while preserving records needed to investigate unlawful wagers. Those choices would cost money and reduce the secondary usefulness of the logs, which helps explain why the market has not volunteered them as its default.

The location spinner finally clears. The bet slip becomes actionable. Somewhere behind that small interface change, the state line has been translated into a timestamped software verdict.

Questions people ask

Can a

New Jersey sportsbook track me when the app is closed?

It depends on the phone permission, operating system and app configuration. A sportsbook may receive location while the app is active or during a required check without maintaining a continuous trail when it is closed. “Always allow” access creates broader technical capacity than “while using,” but permission alone does not prove continuous collection.

Why does a betting app need Wi-Fi if GPS is turned on?

GPS can be weak indoors, underground or near dense buildings, and a single coordinate can be spoofed. Nearby Wi-Fi information gives the geolocation system another way to estimate position and compare signals. The app may refuse a wager when Wi-Fi scanning is unavailable because the vendor cannot reach the confidence required by the operator’s controls.

Does the sportsbook keep my exact coordinates?

It may retain precise coordinates or a derived location result, alongside timestamps, device identifiers and risk flags, but the exact record depends on the operator and vendor. Public policies describe categories rather than every database field. Gambling records and vendor security logs can also follow different retention schedules.

What happens if the location check is wrong?

The operator normally blocks the wager rather than accepting it on uncertain evidence. A customer may retry after restoring permissions, disabling conflicting software or moving to a place with stronger signals. The failed attempt can remain in compliance or fraud logs even though no wager was accepted.

Was this worth your time?
ShareFacebook
surveillanceinternet policysports bettinggeolocationprivacynew jersey

One update a day

Today's story, in your inbox

One story each morning — no hype, no filler, no algorithm deciding for you.

Read next