While compliance is an operational responsibility, directors remain accountable for ensuring their club has effective governance and compliance frameworks.
Strong governance is not demonstrated by the existence of policies, procedures, training records or software systems. Good governance is demonstrated when directors can show they have:
- Understood the club’s key risks
- Overseen the implementation of appropriate controls
- Received meaningful reporting
- Challenged assumptions
- Sought assurance
- Monitored remediation when issues arise.
The Three Questions Every Director Should Ask
1. What are our biggest risks?
Directors should understand the club’s highest compliance exposures, including:
- AML/CTF obligations
- Responsible gambling
- Liquor compliance
- Governance obligations
- Conflicts of interest
- Fraud and corruption risks.
2. How do we know controls are working?
Boards should seek evidence, not assumptions.
Examples include:
- Audit results
- Incident trends
- Inspection outcomes
- Training effectiveness
- Compliance reporting.
3. What happens when things go wrong?
- Escalation processes
- Incident reporting pathways
- Corrective actions
- Lessons learned.
Key Areas of Governance in More Detail
AML/CTF Oversight for Club Directors
Directors do not investigate suspicions, but they are responsible for ensuring appropriate systems and controls exist.
Why this matters: AUSTRAC expects clubs to understand their risk profile and implement controls to identify and mitigate unusual activity.
What directors should be monitoring:
- AML risk assessments
- Suspicious Matter Reporting (SMR) trends
- High-risk patron activity
- Staff training effectiveness
- Internal audit findings
- Outcomes of remediation activities.
Understanding Regulatory Priorities and Governance Risks
Understand what regulators are currently focusing on and what this means for boards.
Why this matters: Regulators increasingly look beyond compliance breaches and examine governance effectiveness.
What boards should do:
- Challenge assumptions
- Seek evidence
- Review governance controls
- Ensure conflicts are disclosed and recorded
- Monitor remediation activities.
Governing a Compliance Transformation
Understand the board’s role when approving significant compliance change programs.
Why this matters: Many clubs are investing heavily in compliance systems, risk frameworks and governance improvements. Success depends on understanding risk before selecting technology or implementing solutions.
Key principle – Risk drives the response: Controls, training and coaching come first, technology only where it adds value.
Much like a commercial endeavour, a club should only undertake a compliance framework change where:
- The board’s risk appetite is well understood
- Your club’s risks are fully evaluated
- It is demonstrated how these changes will contribute positively to your compliance obligations.
What directors should consider:
- Strategic alignment – does this change support our risk appetite?
- Accountability – who owns the implementation?
- Capability – Do we have the skills/expertise required to deliver this?
- Assurance – how will success be measured / implementation overseen?
Technology Governance
Understand the questions directors should ask before approving compliance technology investments.
Why this matters: Technology can improve compliance processes, but technology alone does not manage risk.
Key principle: Risk drives the response: Controls, training and coaching come first, technology only adds value.
The effectiveness of any system depends on:
- Quality data
- Trained staff
- Effective governance
- Ongoing monitoring.
Director and boards should understand:
- Implementation risks
- Ongoing costs
- Maintenance requirements
- Alert management
- Reporting arrangements
- System effectiveness.
- Addresses a real compliance risk, or does it just sophisticate current processes?
- Supports your controls, or forces the club to redesign its compliance programs?
- Has a clear owner, accountable for its performance and utilisation?
Responsible Gambling Oversight for Directors
Understand how boards monitor responsible gambling obligations through effective governance and reporting.
- Incident trends
- Major gaming incident register reports
- Evidence of staff capability
- Effectiveness of escalation activity
- Responsible Gambling Officer effectiveness
- Audit findings and remediation activities.