GGPoker mobile and bots: the app, the install, and what the policy scans
By Raul Moriarty ·Poker Software Expert
GGPoker ships a full mobile client. The download page we read on 29 October 2026 lists Android OS 10 or later and iOS 15.x or higher next to the Windows and Mac builds. For real money the Android app does not come from the Play Store: Google Play's gambling policy admits licensed casino, sports betting, horse racing, lottery and daily fantasy apps, and online poker is not among them, so the Android client installs as a direct download from ggpoker.com. The phone runs the same account under the same rulebook as the desktop, so the bot question is the same question. Mobile differs in the setup. A "mobile bot" is either an automated phone or the Android client run inside a PC emulator, and GGPoker's Security & Ecology Policy (version 20260313) names Android emulators by brand and reserves a scan of the device. GGPoker publishes no ban figures by platform, so there is no public mobile-only number.
Short version
- The GGPoker download page (read 29 Oct 2026) lists Android OS 10+ and iOS 15.x+ beside the Windows and Mac builds.
- The real-money Android app is not on the Play Store. Google Play's gambling policy allows casino, sports betting, horse racing, lottery and daily fantasy apps; poker is not on that list. The Android client installs as a direct download from ggpoker.com.
- The Security & Ecology Policy (version 20260313) prohibits emulators and virtual machines "of any kind" and names Bluestacks, Nox and MEmu, which are Android emulators. It also reserves a scan of the user's "machine or device" (§1.10).
- GGPoker has published dated enforcement actions in 2020, 2023, 2025 and 2026. None is broken down by platform, so we quote the operator and the outlets and add no mobile figure of our own.
What GGPoker lists for the mobile client
The download page carries system requirements and a three-step "Download & Install, Create Your Free Account, Start Playing Now" flow. The buttons were hidden behind a geo-block on the location we fetched from, so we read the specifications and not a working installer. The mobile rows below are quoted from that page.
| Platform | Minimum OS (as printed) | RAM | Disk |
|---|---|---|---|
| Android | "Android OS 10 or later" | 2 GB (3 GB or greater recommended) | 500 MB (1 GB or greater recommended) |
| iOS | "iOS 15.x or higher" | 3 GB or greater recommended | 500 MB (1 GB or greater recommended) |
The same page lists Windows 10 and macOS 12 for the desktop builds, and the homepage states "Play GGPoker on Windows, Mac, Android, and iOS." The operator is GG International Limited, regulated by the Isle of Man Gambling Supervision Commission per the page footer. None of this says how the Android app arrives on the handset.
How the Android app installs, and why it is not in the Play Store
On the download page we read, there was no "Get it on Google Play" badge, no Play Store link and no .apk link in the markup. The page frames Android as an on-site "Download & Install" step. A store listing check found ClubGG, the free-to-play product, as the only legitimate NSUS title in the US Play Store, alongside imposter "GGPoker" apps from unrelated developers. We did not find GGPoker's real-money poker client published by the operator there.
The reason is in Google Play's own policy, which we opened the same day. Its real-money gambling rules admit a fixed set of product types: "Online Casino games; Sports Betting; Horse Racing ...; Lotteries; Daily Fantasy Sports." Online poker is absent from that list. Approved apps "must be free to download, must not use In-app Billing," and must "prevent access and use from countries, states/territories, or the geographic areas not covered by the developer-provided gambling license." A real-money poker room that wants control over its own client and its own geo-rules therefore distributes the Android build off-store, as a direct download. That is standard for the category, not something unique to GGPoker.
With an off-store APK, the operator controls the binary and its updates directly. The device runs an app installed from outside the store's review. The security clauses below apply to that app once it is signed in.
What a "mobile bot" would be
Two setups sit behind the phrase. The first is automation driving a real phone: an accessibility service, a screen-reader bridge or an external arm reading the screen and tapping. The second, and the common one in practice, is the Android client running on a PC inside an emulator, where a script has a keyboard and a window to work with rather than a touchscreen. Spin and short-format play raise the same question of how much a thin per-spot sample reveals, which we worked through in the Spin and Go note.
Both setups change what a detection system can observe, and both are addressed in the policy. The emulated-client route is the one the Security & Ecology Policy names outright, because the emulators it lists (Bluestacks, Nox, MEmu) exist to run Android apps on a desktop. The architecture of what the operator can read once an account is seated, independent of the device, is in the detection note.
What the Security & Ecology Policy reserves for your device
We fetched the Security & Ecology Policy on 29 October 2026; it prints "Current Version: 20260313." The clauses below are the operator's words, with our reading of what each means once the client is a phone or an emulated Android app. We quote the policy and do not paraphrase it as a promise.
| Clause | What the policy says | For a mobile or emulated client |
|---|---|---|
| Account check (§1.6) | The Security Team "reserves the right to block and conduct a security check on any account at any time, even during gameplay." | The right is written against the account, so a phone session is covered the same way a desktop one is |
| Device scan (§1.10) | "we reserve the right to perform a scan of the User's machine or device ... our software may scan the associated files to compile a composite mesh to be matched against profiles for known illicit automated programs" | "Machine or device" covers a handset; the policy does not describe what the scan reads on a phone |
| Emulators and VMs | "Virtual machines or emulators of any kind that conceal one's own machine and device including, but not limited to Oracle VM VirtualBox, VMware, Parallels, Microsoft Hyper-V, Nox, Bluestacks, or MEmu." | Nox, Bluestacks and MEmu are Android emulators; running the client on a PC through one of them is the clause's named case |
| Bots (§3) | A bot is "software, programs, websites or apps that enable playing without human intervention or reduces the requirement of a human to make decisions"; it "includes ... artificial intelligence" | The definition is about the automation, so it holds whether the automated client is a phone or an emulator |
| Remote access | Prohibits "remote access tools ... including ... TeamViewer, AnyDesk, ChromeRDP ... Microsoft Remote Desktop ... VNC Connect" | Relevant because a phone can be driven from a PC over a remote-control bridge |
| Third-party data (§7.2) | "User is strictly prohibited from using any 3rd party tools to import and/or convert hand histories from the poker tables or PokerCraft." | Applies to trackers regardless of whether the client runs on a phone or a desktop |
The policy pairs a right to scan the device with a named list of the tooling it is scanning for. It does not say how a scan runs on iOS or Android, how often, or what a "composite mesh" contains. Those are the operator's internals, and we do not have them.
What GGPoker has enforced, with dates
The operator has put several actions on the record, and poker outlets have reported figures with dates. None of them is split by device, so none answers "how many of these were phones." The earliest and largest action, from September 2020, with its real-time-assistance ban counts and the confiscation figure, is covered with its numbers in what GGPoker has said publicly about bots, so we do not repeat the arithmetic here.
Three later actions have dated reports. On 29 December 2023 PokerNews reported a superuser account, "Moneytaker69," banned after a client-side vulnerability was exposed, with about US$29,800 confiscated and the flaw patched. On 1 March 2025 PokerNews reported 31 accounts closed for real-time assistance after the operator integrated detection tooling from GTO Wizard. On 18 October 2026 PokerNews reported that GGPoker had banned all third-party software, HUDs included, after a superuser scandal. Each is a statement by or about the operator on a specific date, and none carries a platform breakdown.
What stays open
- How the Android app is installed. GGPoker's own download page does not state it; we read the off-store route from the absence of a Play listing and from Google Play's policy, not from a GGPoker sentence.
- What the §1.10 device scan reads on a phone. The policy says "machine or device" and nothing about the mobile case.
- Whether the phone build gets the same screening as the desktop client. The policy applies to the account; it does not describe per-platform tooling.
- Any GGPoker ban figure for mobile accounts. We found none; the published actions are counted by account, not by device.
If you have installed the Android or iOS client and can confirm the install path or anything the client asked for on setup, send it through the contact button and we will add it with the date.
The pages behind this note
- GGPoker, Download page, ggpoker.com/download/, read 29 October 2026
- GGPoker, Online Poker Security Ecology Policy, version 20260313, ggpoker.com/network/security-ecology-policy/, read 29 October 2026
- Google Play, Real-Money Gambling, Games, and Contests policy, support.google.com/googleplay/android-developer/answer/9877032, read 29 October 2026
- PokerNews, GGPoker Bans Superuser 'Moneytaker69' After Client Vulnerability Exposed, 29 December 2023
- PokerNews, Fedor Holz Says WSOP Bans Are Coming for Online Poker Cheaters, 1 March 2025
- PokerNews, Online Poker Players on GGPoker Can No Longer Use a HUD, 18 October 2026