Behavioral Attest Protocol

Share the state.
Not the identity.

ONLY THE RISK STATE TRAVELS

Verant is behavioral risk infrastructure for any event with a decidable outcome — wherever users commit funds against a result. A graduated risk state, derived from the data operators already hold, crosses operator boundaries — while the identity, the behavior, and the money data never leave home.

Risk state — what the network sees hover a lane
Monitor GREEN

Play within verified capacity. The engine watches deposits, losses, and pattern shifts — the player notices nothing.

Signal YELLOW

Early pattern drift — escalation after losses, deposit-frequency change. Calibrated friction, not punishment.

Verify ORANGE

Risk now justifies the ask. Play pauses until financial capacity is verified — then the state resolves on evidence, not on a timer.

Restrict RED

Verified risk beyond capacity. Restriction propagates across participating operators — and lifts the same way it arrived: with evidence.

Every state is reversible. That's the point — protection players can come back from is protection they don't route around.

The problem

The industry built a stop sign. At-risk players drive around it.

Self-exclusion protects the player who has already decided. The research is consistent about who that leaves out: the players at greatest risk are the least likely to self-identify — and when they do, the harm is largely done. Binary tools also create binary incentives: excluded players surface at the next operator, the next vertical, the next state line.

The stop sign

Exclusion-based tools

  • Player must act first — the highest-risk cohort rarely does
  • Binary: full access or none, nothing between
  • Ends the customer relationship instead of repairing it
  • Routes determined players to the next platform
The toll road

Graduated risk states

  • Detection moves upstream — the system acts on the pattern, not the confession
  • Calibrated: friction, verification, restriction, restoration
  • Suspension resolves on verified capacity — a path back, by design
  • The state follows the player, so the next platform already knows
  • One protected road the whole industry drives — calibrated tolls, not walls
How it works

Three layers. One crossing.

Identity stays with operators. Verant anchors to the KYC each operator already performs. No new identity collection, no identity pooling.

Derivation stays with the engine. Risk states are computed from the capacity-and-allocation signals operators already trust — deposits, withdrawals, losses, escalation after losing sequences. The behavioral data never leaves the boundary it was created behind.

Only the state crosses. What a participating operator receives is a four-value state matched to a privacy-preserving identifier. Not a name. Not a bank balance. Not a bet history. Nothing a competitor can mine, and no central pool of identified player data to breach or subpoena.

What crosses the wire

Operator A
Stays behind A's boundary
  • identity & KYC
  • deposits / withdrawals
  • wagering activity
  • loss patterns
state: ORANGE ref: ████████████ identity: — data: —
Operator B
Stays behind B's boundary
  • identity & KYC
  • deposits / withdrawals
  • wagering activity
  • loss patterns

Nothing in the boxes ever crosses. Identity, KYC, deposits, wagers, losses — each operator keeps its own, permanently. The only thing transmitted between operators is the packet above: a state and an anonymous reference.

The thesis

The industry already knows exactly how much every player can afford to lose. It uses that knowledge to comp suites. Verant uses it to catch the fall.

Every host program and VIP desk runs on the same three questions: how much does this player have, how much are they allocating, and how is that changing? Theo, average daily theoretical, credit-line sizing — capacity-and-allocation analysis is already how operators understand their best customers.

Verant is that same engine pointed at the other tail of the distribution. Not a new science your teams would need to learn — the one they already practice, redirected from extraction to protection. And because the signal lives in money movement, not sentiment or session analytics, it's the model that stands up when a regulator asks for detection efficacy.

Why graduated wins

Verification when risk justifies it. Friction where it matters. Nothing before.

Most players never meet Verant at all — Green is silent. Financial verification is requested only when the pattern warrants it, which means no consent friction at signup, no bank-data collection from players who never need it, and a data-minimization posture privacy counsel can sign without holding their breath.

And when play pauses at Orange, it pauses until verified capacity supports resuming — not for a cooling-off timer a determined player simply waits out. The condition is evidence. That's what makes the intervention meaningful to regulators and survivable for the customer relationship.

Who it's for

A revenue conversation and a rulemaking conversation.

Operators

  • Built on data you already hold — no new collection, no signup friction
  • Players caught early and brought back keep their lifetime value; players who blow up become headlines
  • Demonstrated detection keeps you writing your own compliance story — instead of having one written for you
  • Your competitors learn a state, never your data

Regulators

  • Detection efficacy you can test — the model runs on the highest-signal variables in the published literature
  • Graduated intervention calibrated to risk, with restoration built in
  • Data minimization by architecture: no central pool of identified player data is ever created
  • A standard the industry can adopt before a mandate has to draft one
Built to be infrastructure

Protected architecture. Published thinking. Ready to pilot.

3
Granted U.S. patents

Cross-operator risk-state propagation, protected since a 2018 priority date — with continuation families in active prosecution.

4
Risk states, one protocol

A graduated model designed with regulators, researchers, and operator compliance teams as first-class audiences — and built vertical-agnostic: it applies to any decidable outcome — sportsbook, casino, daily fantasy, prediction markets, and every venue after them.

0
Player identities shared

The privacy property is structural, not policy — identity and behavioral data cannot cross the boundary, because the protocol never carries them.

The standard gets written this cycle. Help write it.

We're partnering with operators, trade associations, and state regulators on research-grade pilots — measured detection efficacy, published results, and a seat at the table when graduated risk becomes the expectation rather than the exception.

Start the conversation