BoundsCheck
Exclude the jurisdictions you have to. Prove you did.
A sweepstakes model lives or dies on a short list of excluded states and counties. BoundsCheck checks every coin purchase and redemption against real boundaries, catches VPNs and fake GPS, and keeps the record.
Flat monthly pricing by active players. No per-check meter on your purchase flow.
decision BLOCK reason mock_location_provider region unresolved activity deposit policy v2026.10.02 signals gps ✓ accuracy 5 m mocked ✓ vpn ✗ check_id chk_c21d…08af
Your exclusion list is only as good as the location behind it.
Excluding a state in your terms is easy. Excluding it in practice means knowing where the device actually is at the moment of purchase, not where its IP address says it is, and being able to show that later.
VPNs defeat IP checks
A player in an excluded state is one VPN toggle from an allowed one. IP geolocation sees the exit node, not the person.
Fake GPS is a free app
Mock-location apps set any coordinates you like. Without a device-integrity signal, GPS alone is only slightly better than IP.
Some exclusions are counties
When a carve-out is a county rather than a state, a state-level check cannot express it. You need county polygons and a rule that targets them.
You will be asked for proof
Payment processors and regulators ask about specific transactions. The answer has to be a stored decision with its reasons, not a description of your process.
A device fix, real boundaries, and a decision you can keep.
- Purchase and redemption gatingCall BoundsCheck's deposit and withdrawal checks before a purchase clears or a redemption is approved. Allow or block comes back with reasons and a check ID to store with the transaction.
- State and county exclusionsRules target a state, a county or a custom zone. All 3,142 US counties are mapped, and a location close enough to an excluded boundary that it could be inside is not approved.
- Named sweepstakes activities RoadmapSignup, coin play, purchase and redemption as separate activities with their own rules. Today, purchases and redemptions use the deposit and withdrawal checks.
- Policy without a releaseAdd or remove an exclusion in the admin panel. The change is versioned with the admin who made it, and live immediately.
- Spoofing and VPN detectionThe fake-GPS flag, VPN and hosting ranges, IP-versus-GPS distance, impossible travel, stale locations and timezone mismatches. An untrusted location is never approved.
- Block by defaultA mocked, unresolvable or border-ambiguous location is never approved, and a missing or stale one prompts the player to share their location. Errors answer BLOCK. Nobody is guessed into an allowed state.
- Full audit trailEvery check is stored with its inputs, signals, the policy version applied and the result. Nothing is sampled. Export any date range yourself, from the admin panel or the API.
- Monitor before you enforceRun checks on real traffic without acting on them, review the decision log and review queue, then start enforcing when you're comfortable.
Questions sweepstakes operators ask.
Why do sweepstakes casinos need geolocation?
Promotional sweepstakes models depend on excluding specific states, and in some cases counties, from coin purchases and prize redemptions. An IP check can be defeated by a VPN in seconds. Device-level geolocation with real boundaries, spoofing detection and an audit trail lets you exclude those jurisdictions and show that you did.
Can BoundsCheck exclude a single county?
Yes. All 3,142 US counties are mapped, and policy rules can target a county directly. County rules use the player's device location, and a location close enough to an excluded area that it could be inside is not approved.
How does it handle VPNs and fake GPS apps?
Each check looks at the fake-GPS flag from the device, VPN, proxy and hosting ranges on the request IP, the distance between the IP location and the GPS fix, and the age and timezone of the fix. An untrusted location is never approved.
Which actions should be gated?
At minimum, coin purchases and prize redemptions, since those are where money moves. Today these run as BoundsCheck's deposit and withdrawal checks; named sweepstakes activities with their own rules are on our roadmap. Many operators also check at signup and session start.
Running a sweepstakes or social casino?
Tell us which jurisdictions you exclude and how purchases flow today. We'll walk through how a check fits in and what the decisions would look like on your traffic.