Evolution’s Asian trail did not disappear!

Hong Kong and Singapore produced complete player journeys. Thailand and Vietnam added funded play and operator-linked technical routes. None of that proves that Evolution knowingly approved every session, but it leaves a much harder question than a few old casino screenshots.
I keep coming back to one rather awkward point. If the Asian allegations had consisted of nothing more than a few screenshots collected in 2021, this story should have died when the New Jersey regulator closed its investigation. It did not. A new round of testing in January 2025 named operators, funded casino accounts, placed wagers and traced live-game traffic through Evolution related domains.
That does not prove that Evolution knowingly authorised every operator or every country route. It does mean we are no longer dealing only with an anonymous report from five years ago. The evidence changed, became more specific and, in some places, became considerably more difficult to explain as a copied logo or a stale casino lobby.
In the launch article to The Evolution Files, I explained why “Evolution was cleared” is far too simple. The New Jersey regulator did not confirm the central prohibited-market allegation under its own framework. The same regulator also recorded that Evolution’s earlier compliance procedures required substantial strengthening. Both findings matter and neither one makes the other disappear.
Why Asia changed the argument
Evolution had every right to treat the New Jersey closure as an important result. The Division of Gaming Enforcement said it could not confirm that Evolution content had been offered in a market it regarded as prohibited. It also found no evidence that Evolution sanctioned, promoted, permitted or materially benefited from the control evasion it examined.
That finding prevents anybody from honestly saying that the New Jersey regulator proved Evolution knowingly supplied prohibited or sanctioned markets. It also matters when people talk rather loosely about cryptocurrency. A player depositing Bitcoin with an offshore casino is not the same as Evolution receiving Bitcoin from that player. Evolution supplied the game content, while the operator controlled the account, the wallet and the player transaction.
The other part of the New Jersey record was less comfortable. Evolution’s consultant identified limited onboarding checks, insufficient continuing review of customers, a beneficial-ownership threshold that could miss warning signs and VPN blocking that did not work comprehensively across every downstream route. Evolution later introduced recurring customer reviews, stronger contracts, technical improvements and a Compliance Committee.
So the real question after 2024 was not whether every allegation had suddenly become true or false. It was whether the strengthened controls worked. That is where the Asian testing carried out in January 2025 becomes important.
The January 2025 test did more than open a casino lobby
Redburn Atlantic used country-specific VPN routes to test named Asian-facing casino sites. The analysts attempted to launch Evolution content, funded selected accounts with cryptocurrency, placed wagers and inspected the browser traffic behind the live-game window. The operators named included KUBet, BC Game, Fun88, BK8, Net88, BJ88, 8xBet and 6686.
The evidence was not equally strong for every operator, and that needs to be said clearly. Some entries showed access and a technical route. Others went further and involved a funded account, an interactive game and a completed wager. That difference is important because seeing an Evolution tile on a casino homepage proves very little by itself.
A provider logo can be copied. A game tile can remain visible after an integration has ended. A casino lobby can advertise content that does not actually launch. A functioning live session, particularly one accepting a wager, is a much more serious observation.
The analysts reported that accounts on KUBet and BC Game were funded with cryptocurrency and used to play Evolution games. KUBet was associated with Immersive Roulette, while BC Game was described as offering branded roulette through dedicated tables. Again, the cryptocurrency went to the operator, not to Evolution, but the account could apparently be funded and used to enter an interactive live game under the test conditions.
This is the point where the stale-lobby explanation starts to struggle. A dedicated table carrying an operator’s branding looks more like a configured integration than a random promotional image. It still does not reveal who approved the branding, which company held the direct contract or whether the country use remained inside the agreed territory. That missing commercial bridge is important, but it does not make the session meaningless.
The domain trail is where it gets uncomfortable
During the same testing, the analysts collected CNAME records from the browser traffic connected with the live-game window. A CNAME is essentially a domain alias. It helps show where a browser connection travels, even when the casino front end uses another name.
The published routes included subdomains under evo-games.com and evonetworks.net, associated with several named operator brands. BC Game, Net88 and BJ88 were linked to operator-specific routes under evo-games.com. KUBet and 8xBet appeared through intermediary aliases before resolving towards Evolution-related infrastructure.
Now, a domain route is not a contract. It does not prove that the casino visible to the player was a direct Evolution customer, and it certainly does not prove that somebody at board level knew about one player session in Thailand or Vietnam. A second-level or third-level aggregator may have stood between the operator and the company holding the original integration.
But the CNAME evidence is also not nothing. It suggests that the live-game connection travelled through supplier-related infrastructure rather than ending with a logo copied onto an unrelated website. When that route appears beside successful gameplay and a funded wager, the technical question becomes considerably more serious.
The wider authentication material makes that question harder again. The game-launch process described in Evolution-related technical material involved casino keys, short-lived API tokens, approved hostnames and whitelisted technical endpoints. Under that architecture, the operator controls the wallet and player account, but the live game still depends on credentials and infrastructure connected with the supplier.
That does not prove knowledge. It does show that the supply chain was not necessarily invisible merely because it was long. The public material supports meaningful supplier-side control over authentication while leaving the commercial approval and internal monitoring questions open.
Hong Kong and Singapore were stronger than the rest
Hong Kong and Singapore should not be placed in the same evidentiary bucket as every other Asian market. The original tests in those two jurisdictions went further than access and routing. They attempted to document the player journey from location check to account registration, deposit, gameplay and, in several examples, withdrawal.
In Hong Kong, the material included four live-casino examples using Bitcasino, Playamo and Stake, followed by another branded-game example. One Bitcasino sequence showed registration, deposit, live roulette, a recorded win, withdrawal and blockchain confirmation. A second operator added Speed Blackjack Live, while another Stake example used Lightning Roulette.
Those sessions remain disputed investigator evidence. They are not findings by a court or regulator. But they are considerably more substantial than a screenshot showing an Evolution logo.
The operator handled the account and the money. That means the evidence does not show Evolution performing KYC, accepting the deposit or processing the withdrawal. What it supports, if the recorded sequence is authentic and complete, is that several player-facing operators accepted the tested Hong Kong route and provided functioning Evolution-branded gameplay.
Repetition is the point here. Bitcasino, Playamo and Stake did not represent one casino front end or one account. The games differed, the sessions differed and the financial steps were repeated. That does not establish authorisation, but it makes a single accidental lobby exposure a rather incomplete answer.
Singapore followed a similar pattern through Bitcasino and Stake. The sessions included registration, deposits, live roulette, wagers and withdrawals, with blockchain confirmation included in one of the longer examples. Black Cube later said it had recorded additional Singapore sessions after the original investigation, although those later claims remain contested and have not been adopted as court findings.
The legal position also needs care. The Hong Kong Gambling Ordinance and Singapore’s Gambling Control Act govern the local player-facing activity. The New Jersey regulator was answering a different question about the suitability and conduct of a New Jersey-connected B2B supplier.
A successful player session does not automatically establish a New Jersey licensing breach. Equally, the New Jersey regulator’s inability to confirm a prohibited-market violation does not establish that the player sessions never happened. Those are different findings made under different legal and evidentiary tests.
What makes Hong Kong and Singapore more difficult to dismiss now is that Spectrum, which was engaged by Evolution, reportedly corroborated access to Evolution games in both markets. Spectrum also described customers supplying content outside contractual restrictions. That does not validate every Black Cube claim, but it means these two markets cannot honestly be reduced to something invented by one hostile investigator.
China is a different case, and that matters
China did not have the same complete 2021 player journey as Hong Kong and Singapore. There was no equivalent public sequence showing a China IP address, account registration, deposit, wager and withdrawal from beginning to end. Any article pretending otherwise would be borrowing evidence from neighbouring markets and attaching it to China.
The Chinese record developed in another way. It began with recorded discussions about Asian distribution, then moved into a China-labelled Fun88 configuration linked to an evo-games.com subdomain. Later reporting described former personnel alleging that aggregators were used to reach markets including China, while a January 2026 analyst test again marked Evolution content as accessible through a Chinese IP route.
Each of those elements has limits. A recorded statement is not company policy. A China-labelled domain entry does not establish that every user was physically in mainland China, and an analyst VPN result is not Malta Media fieldwork or a regulator determination.
Still, China moved beyond a vague reference to “Asia”. It became a named technical configuration followed by a later dated access result. The public record does not show who held the direct customer agreement, what territory was approved or whether the country traffic reached Evolution’s compliance team. It does show why China could no longer be dismissed as one dramatic sentence from 2021.
Thailand and Vietnam carried the strongest modern evidence
Thailand had the broadest combination of modern evidence outside Hong Kong and Singapore. The January testing identified KUBet, a Thailand-facing Fun88 route and kuthailand.com. The KUBet account was reportedly funded with cryptocurrency before an Evolution game was played and a wager placed.
The technical table also included country-labelled routes associated with KUBet and Fun88 Thailand. One route travelled through an intermediary alias before resolving towards an evonetworks.net subdomain. The other was linked directly to an evo-games.com address.
There was also a wider enforcement context. Thai police had reportedly encountered Evolution products while investigating illegal gambling websites, and the country was blocking large numbers of gambling domains and promotional routes. That does not make Evolution the operator of those sites or establish a licensing violation by the supplier.
It does show that Thailand was neither an obscure market nor a harmless theoretical grey zone. The unresolved question is fairly obvious: which company held the integration, what territories were approved and what monitoring took place when Thai-facing traffic appeared?
Vietnam produced the clearest modern gameplay example through BC Game. The analysts reported funding an account, placing wagers and accessing BC Game-branded roulette through dedicated tables. BC Game and Net88 were also linked to separate operator-specific routes under evo-games.com.
The BC Game result matters because several layers appeared together. There was a named operator, a funded account, interactive gameplay, dedicated branding and a supplier-related technical route. That combination still does not prove that Evolution approved the Vietnamese use, but it makes the idea of a simple copied casino image increasingly difficult to rely on.
Net88 was thinner. The technical route was identified, but the same detailed funded player journey was not published. That difference should remain visible because two operators appearing under the same country label do not automatically carry the same evidentiary weight.
Malaysia and Japan were narrower, but the pressure was increasing
Malaysia appeared primarily through BJ88. The analysts reported access under a Malaysian test condition and linked the operator to an identifiable evo-games.com route. The public material did not provide the same funded-play sequence seen with KUBet or BC Game, so the safe conclusion is narrower: access and a technical route were reported, but the complete transaction and contractual chain remain missing.
Japan appeared through 8xBet, which shared an intermediary Skyfortune Asia route with another named operator before resolving towards evonetworks.net. Again, that supports a traceable integration question, not proof of a direct Evolution contract with every front-end website using it.
Japan matters because its enforcement framework was hardening quickly. The Japanese National Police Agency’s 2025 White Paper described millions of users, substantial domestic wagering and expanding enforcement against operators, advertising and inducements rather than players alone.
That changes the commercial context. A market that may once have been treated as merely unregulated was moving towards direct action against the businesses and promotional routes surrounding online casino play. For a global B2B supplier, relying entirely on the downstream operator’s interpretation becomes harder as the local position becomes more explicit.
The Japanese evidence remains thinner than Hong Kong, Singapore, Thailand or Vietnam. It shows operator access and a traceable route under the test conditions. It does not disclose the contract, the approved territory or whether the route was later blocked.
Evolution’s defence is real, but it is not the whole answer
Evolution’s main defence starts with a fact: it is not the casino facing the player. The operator opens the account, performs player KYC, accepts the deposit and decides how the casino is marketed. An aggregator may then sit between the operator and Evolution, sometimes with further resellers or white-label businesses underneath it.
That commercial distance matters. A supplier cannot automatically be treated as responsible for every action of every downstream casino merely because its game appears on screen. Operators can breach agreements, hide IP information, share integrations outside the intended scope or use copied and hijacked streams.
This is also why Malta Media announced that it would test Evolution’s offshore footprint rather than simply recycle somebody else’s allegations. The technical route, the behaviour of the game and the ability to wager matter far more than the provider logo.
But the defence becomes less complete when several things appear together. A funded account, a functioning live game, an operator-branded table and an Evolution-related domain create a much stronger case for a real integration than a lobby screenshot. They still leave open whether the downstream territory was approved, whether the customer acted outside contract and whether anybody at Evolution knew what was happening.
The later British enforcement case showed that both propositions can be true at once. Customers can circumvent restrictions and breach supply terms, while the supplier’s own controls can still be found inadequate. The UK Gambling Commission ultimately confirmed genuine Evolution games on six unlicensed websites operated by two customers.
That British finding does not automatically transfer to Asia. It does show why the abstract statement “we are only the supplier” cannot settle every country route without the contracts, credentials, monitoring records and customer hierarchy.
What the Asian record actually shows
The Asian evidence does not prove a universal strategy in which Evolution management knowingly authorised every operator and every restricted market. It does not reveal the direct customer behind every website, the complete territory schedules, the casino-key ownership or the internal alerts that may or may not have been generated.
It does establish a much more serious record than a few promotional screenshots.
Hong Kong and Singapore had repeated operator-side player journeys involving deposits, gameplay and withdrawals. Thailand and Vietnam added funded modern sessions, named operator brands and supplier-related technical routes. Malaysia and Japan provided narrower access and routing evidence inside markets where enforcement pressure was increasing. China followed a separate path, moving from recorded allegations to a country-labelled technical configuration and a later analyst access result.
The strongest evidence appears where several layers meet. A funded account is stronger than an open homepage. A successful wager is stronger than a game tile. An operator-branded table is stronger than a generic stream. A supplier-related technical route adds traceability, even though it does not reveal the contract or prove management knowledge.
That is the line I would be very careful not to cross. Access is not authorisation. Technical capability is not human knowledge. A long supply chain, however, is also not the same thing as having no visibility or control.
The unanswered questions are not mysterious. Who held the casino key? Which domains and territories were approved? What location or session information reached the authentication system? Was an anomaly generated, who reviewed it and what happened next?
Until those records are available, the Asian case remains strongest on repeated access, functioning gameplay and technical traceability. It remains incomplete on direct approval, senior-management knowledge and country-specific revenue. That is not a reason to dismiss the evidence. It is the reason to describe it properly.
Europe comes next
The next article will move into Europe, where the problem looks different again. The headline result was simple: seven EU countries blocked, twenty still reachable through at least one tested offshore route.
What interests me is what happened underneath that number. Some major operators began blocking German users while smaller routes remained open. Spain contracted to one surviving operator route, while Italy still showed Evolution across half the tested network. In France, competing suppliers blocked the same traffic while Evolution content remained playable.
That is not a country list. It is a patchwork of operator decisions, supplier controls and routes that changed without making the overall map disappear.
The complete PDF will be available by request after final legal and copyright sign-off. Readers, regulators, lawyers, analysts and industry participants who want the full report can contact me directly at ms@malta-media.com and send me their WhatsApp number.
FAQs
What does the latest Asian evidence involving Evolution show?
The evidence describes functioning Evolution-branded gameplay, funded accounts, wagers and supplier-related technical routes across several Asian markets. Its strength varies by operator and jurisdiction and it does not by itself prove direct authorisation or management knowledge.
Why are Hong Kong and Singapore significant in the Evolution investigation?
Hong Kong and Singapore produced some of the most detailed player journeys, including registration, deposits, live gameplay, wagers and, in several examples, withdrawals. These sessions were more substantial than screenshots of casino lobbies or provider logos.
What did the January 2025 tests find?
The January 2025 testing used country-specific VPN routes to examine named Asian-facing casino sites. Analysts attempted to launch Evolution games, funded selected accounts, placed wagers and examined technical traffic associated with the live-game sessions.
What role do CNAME records play in the Evolution evidence?
CNAME records can help trace where browser connections travel. The reported testing identified operator-specific routes under Evolution-related domains, providing technical traceability beyond the simple appearance of a game logo on a casino website.
Does the evidence prove that Evolution authorised gambling in restricted Asian markets?
No. The evidence does not establish that Evolution directly authorised every operator, country route or player session. The article explicitly distinguishes technical access and functioning gameplay from contractual approval and human knowledge.
Why are Thailand and Vietnam important to the investigation?
Thailand and Vietnam contained some of the strongest modern evidence. Reported tests included funded accounts, functioning gameplay, wagers, named operators and technical routes connected with Evolution-related infrastructure.
How does the evidence concerning China differ from other Asian markets?
China lacks the same complete documented player journey seen in Hong Kong and Singapore. Instead, the record developed through recorded discussions, a China-labelled technical configuration and a later analyst access result, making the evidentiary picture different and more limited.
What does the UK Gambling Commission case add to the Evolution debate?
The UK Gambling Commission confirmed in July 2026 that genuine Evolution games had appeared on six websites operated by two customers without UK licences. The Commission also identified weaknesses in Evolution's controls and announced a £4.75 million regulatory settlement.
Why does Evolution's position as a B2B supplier matter?
Evolution does not normally control the player's casino account, deposit or KYC process. Operators and potentially aggregators sit between the supplier and player, meaning the presence of Evolution content does not automatically establish that Evolution approved a particular operator's use in a particular country.
What questions about Evolution remain unanswered?
Important unresolved issues include which companies controlled casino credentials, which territories and domains were contractually approved, what location information reached the authentication system, whether compliance alerts were generated and how any such alerts were handled.
Related Posts

Evolution Files investigation challenges claims of full clearance
September 9, 2026

GGL questioned over Tipwin LUGAS evidence and Bet3000 standards
September 9, 2026

Evolution Spectrum Report findings raise fresh compliance concerns
September 9, 2026

GGL gambling enforcement raises questions over licence transparency
September 7, 2026

GGL faces scrutiny over competitor evidence in Bet3000 licence case
September 4, 2026

German gambling safeguards face test over cash-funded betting wallets
September 3, 2026

Tipwin wallet raises questions over Germany’s LUGAS betting limits
September 1, 2026






































