Platform updates: release 2026.09 (September 2026)

Short answer. Gambling Soft platform release 2026.09 (September 2026) is the largest release of the year: 437 changes. New in this release: the CRM and retention suite (segments, cohorts, welcome chain, rescue bonus, login streak, deposit boost, win-back campaigns), the unified player notification system, the crypto payment module with own wallets (USDT TRC20, Ethereum, Solana, Bitcoin, BNB Smart Chain, TRON), a new game provider, two-factor authentication for players in all 14 themes, responsible gaming tools, email unsubscribe, approvals of large money operations by a second administrator, the income-by-brand report, platform self-checks and an admin timezone. Security work closed CSRF on every state-changing admin action and brand scoping in twelve sections.

Release 2026.09 at a glance

CRM and retention

• New: CRM section. Player segments (first deposit, payers, leaving, gone), cohort retention by registration month, retention by brand, GGR by segment, bonus payback (which bonus brings a player back), a summary that answers “what to do today”, CSV export of the win-back list, a demo mode on real data without names. Segment definitions corrected: a payer is a player who paid, not one who was credited; an administrator’s manual credit is not a deposit for conversion and time-to-pay metrics.
• New: player card timeline. LTV, favourite games, risk flags and a combined event feed in one tab.
• New: retention campaigns. Welcome chain of six decreasing steps with one visible step and a cashier card; rescue bonus as a share of the previous day’s loss, credited in the morning by brand rules; login streak reward for N days in a row with deferred issue; deposit boost rules for large deposits with a banner and badges in the cashier and a celebration window on credit; “leaving right now” and win-back campaigns with brand silence tiers and a hidden deposit bonus by cron; emails on the player’s language with the bonus attached, not only a promo code.
• New: retention page in the admin panel with nightly cohort recalculation; welcome package page with step funnel; deposit boost page.
• Improved: mailing. One email per person, the count on screen equals what will be sent, delivery status visible, stuck mail queue visible, duplicate addresses and quoted addresses in CSV handled, empty lines ignored.
• New: email feedback loop. ElasticEmail events in the journal, dead addresses (including disabled Gmail accounts) moved to the black list automatically; contacts cleaned every 10 minutes so the tariff counts only live ones.

Player notifications

• New: one notification mechanism for all themes. A list in the account, an unread badge, at most five windows on screen, texts on the player’s language with an English fallback.
• New: events covered. Real deposits, withdrawal request and payout, password and 2FA changes, bonuses and their expiry, payout refusal, support replies, documents, VIP level, cashback, login from a new device (by city, not IP), promo code activation, free spins reminders that open the game in one tap, an explanation why a bet was rejected during wagering with a link to eligible games, “bonus not activated expires in less than 12 hours”.

Crypto payments

• New: crypto payment module on own wallets. USDT TRC20 first, then Ethereum, Solana, Bitcoin, BNB Smart Chain (BNB, USDT, USDC) and TRON; a wallet is set per network and the network recognises the coin by contract; coin switches and limits per brand in the admin panel.
• New: wallet rental. A wallet belongs to exactly one player for 30 minutes or until credit; the actual amount is credited automatically; rental history and manual credit; early credit of small amounts on partial confirmations; credit without waiting for the minute cron by polling the wallet state.
• New: cashier page for crypto payment with a large timer, own coin names and icons, all cashier languages; manual withdrawal described through payway type 1; the “Crypto payments” admin page shows the watcher state.

Game providers and catalogue

• New: game provider added. Catalogue, game launch and seamless wallet on the standard bridge model; nightly catalogue import at 00:20 UTC; games inherit the popularity of their twins at other hosters; free spins through bonuses with protection from repeated callbacks; a free round above the issued free spins is rejected; currency in upper case in launch and callbacks.
• New: neutral game launch through /play/<id>: the hoster and its parameters are no longer visible in the markup; direct links respect the brand’s allowed hosters.
• Improved: catalogue. Hoster restrictions per domain with duplicate resolution by priority; a manual top of 119 hits above other games; vertical game cards in WebP; provider currencies from aggregator limits transferred to catalogue restrictions; a calm page instead of a black screen when a game fails to launch; any provider can be disabled completely for a brand.

Player security and compliance

• New: two-factor authentication for players with app codes in all 14 themes; enabled and disabled only with a code from the app; social login with 2FA enabled requires the code; confirmation codes: long for email, phone code only for the owner and rate-limited.
• Improved: login. Rate limits on login, 2FA, registration and password reset; refusals written to the journal with alerts to a dedicated bot and chat; autologin tokens bound to the brand and refused for banned players; an unconfirmed Google email is not linked to an account; social login only to its own domain; 30-day session, login by link from an email without a password.
• New: responsible gaming. Deposit limit and self-exclusion that work in the account of eleven brands; tightening a limit cancels a pending loosening; a currency change does not carry old limit values.
• New: email unsubscribe. A page and a link in every email in ten languages; the signing key is generated automatically.
• New: identity verification. Sumsub KYC in six new templates, the verification result stored and shown on pending payouts; the Sumsub callback refuses requests without a key and compares signatures with hash_equals.
• New: Arabic right-to-left layout in six new themes.

Admin panel security

• Improved: CSRF everywhere. Every state-changing admin action (deleting bonuses, promo codes, tournaments, jackpots, banners, pages, domains, API bridges, payment methods, settings, categories, agent and promo links, cards, VIP points, sectors and bets of the fortune wheel, mailing templates, security journal entries, game settings, approvals of payouts and tickets) is a POST with a CSRF token; the panel login verifies its token.
• Improved: brand scoping. Records of another brand by id are closed in twelve sections; domain roles see only their brand in provider bets, tickets, email journals, statistics sums and partner rewards; gateway balances, transfers and bulk game tools only for the administrator role.
• New: approvals by a second administrator for large money operations; the second administrator must have logged in within 30 days.
• New: employee action log screen; payout cancellation records the employee id.
• Improved: panel login. Attempt limit, password before the 2FA code, identical responses; the rate limiter cannot be bypassed; the Symfony profiler of the poker admin is closed; callback journals, archives with secrets and service files are not served; queue workers start only from the console; SVG uploads are stripped of scripts; player attachments get random names.

Reports and operations

• New: income by brand. GGR by provider, a chart by day, CSV export; weekly totals through a report cache; CRM and income reports are served instantly and recalculated after the response.
• New: live dashboard with an event feed without reload; a demo tour of the panel; a “casino site” button in the header; the demo account sees statistics and support read-only.
• New: platform state screen for silent failures: background jobs now report why they failed, scheduler liveness is visible, the nightly self-check shows problems as a banner in the panel; database connections recover after a drop.
• New: admin timezone (ADMIN_TIMEZONE): reports, days and event feeds in the operator’s zone; the player’s account shows payment times in the casino’s zone.
• Improved: crons. Cashback hourly without a queue, with a watchdog; exchange rates updated daily including currencies played in the last 30 days; ticket auto-close and site availability checks enabled; nightly cleanup of spin journals older than 50 days; payout guard, win-back send and bonus grant returned to the repository; Alanbase deposit postbacks.
• Improved: localisation of the panel. Not a single untranslated string left (295 fixed), 32 menu items, unified terminology, document language follows the interface.

Payments and bonuses

• New: cashier cascade. On a gateway refusal the cashier offers the next payment system automatically.
• Improved: callbacks. provider and FreeKassa signatures compared with hash_equals; Piastrix, RoundSquare and Antrpay callbacks credit only their own requests; NowPayments, StreamPay, Payscrow and Repay ignore unknown statuses and never rewrite the amount of a paid request; a gateway refusal is shown to the administrator as is; payout blocks show the reason and date; payouts have actions in the row.
• Improved: cashback. Hourly cron with a watchdog, payout moment by database clock, term by calendar days, one window for payout and profile, pending withdrawals counted as withdrawals, a hidden deposit bonus for returning players.
• Improved: bonuses. Wagering cannot be bypassed by switching slots (real turnover check); free spins do not expire until played and the wager does not kick the player out of a slot with free spins left; a bonus for reaching a level; balance promo codes returned to the panel; bonus to all players without a background process; a stuck bonus state can be reset; 905 players stuck in wagering became visible.
• Improved: currency change from the account by the same rules as in the panel, available in all brands where it can appear; only on an empty balance after social login.

Compatibility and upgrade notes

• New environment settings: ADMIN_TIMEZONE, SLOT_LOG_KEEP_DAYS, alert bot and chat for login failures, crypto wallets per network.
• Migrations for CRM tables, retention campaigns, notifications, crypto payments, the new provider, approvals and the GGR journal index.
• Themes: 2FA, notifications, Sumsub and RTL changes touch all player templates; custom themes should merge the shared includes.

Delivery to clients

Projects hosted by Gambling Soft are updated by our team. Source-code licensees receive the release from the repository under their support terms. Questions about a specific item: the contact page. All issues are listed under Platform updates.