Netskope is recognized as a Leader again in the Gartner® Magic Quadrant™ for SASE Platforms and Security Service Edge
Western Canada Lottery Corporation replaced a fragmented, multi-ISP retail network with Netskope One SASE across 5,000 retail lottery sites, cutting multi-million dollar circuit costs, eliminating VPN, and gaining real-time visibility and governance over AI usage.
Western Canada Lottery Corporation is a non-profit organization that operates lottery products for Manitoba, Saskatchewan, Alberta, and three northern territories. With 5,000 retail lottery terminal locations across one of the world’s largest and most geographically dispersed retail networks, WCLC set out to consolidate a fragmented multi-ISP infrastructure, cut multi-million dollar circuit costs, modernize employee and vendor access, and govern AI adoption, all on a single unified SASE platform.
Netskope One SD-WAN – Secure SD-WAN built for the cloud and AI era
Netskope One SASE Branch delivers high-performance connectivity and AI-powered zero trust security—all through the power of Netskope One SASE.
Netskope One Private Access (ZTNA) – Netskope One Private Access is the foundation of Netskope’s Universal ZTNA, replacing outdated VPNs, as well as complex network access control and virtual desktop systems, to provide secure, unified access across IT, operational technology, and connected devices.
Netskope Skylight AI Security – Unified AI visibility, risk context, and control over every user, prompt, app, agent, and data flow.
For Western Canada Lottery Corporation (WCLC), a non-profit organization serving the lottery needs of Manitoba, Saskatchewan, Alberta, and three northern territories, operational continuity isn’t just a technical goal. It’s a community obligation. Every dollar of efficiency the organization finds flows directly back to the provinces it serves, funding priority programs and services within the region. With 5,000 retail lottery terminal locations dispersed across some of the most geographically vast and remote terrain in Canada, WCLC needed to consolidate a fragmented, multi-ISP retail network, replacing a sprawl of point products with a single Netskope One SASE at every site, while securing employee access and governing AI adoption. The result: reduced cost, reduced complexity, and streamlined operations across 5,000 retail sites.
The cost savings to move away from private connections to secure SD-WAN with Netskope is definitely multi-millions per year, which is a huge benefit to our organization and our provinces.
Before Netskope, WCLC’s retail lottery network ran through multiple ISPs, and at each of the 5,000 retail sites, that meant a separate stack of point products: a dedicated modem, an intrusion prevention system, a Wi-Fi device, and more. Each ISP brought its own management interface and its own testing requirements. That fragmentation created more than an operational burden, it created security gaps. With no consistent policy baseline across carriers, WCLC had no guarantee that every site was protected to the same standard.
Every troubleshooting exercise had to be validated independently across every carrier. As Adam Janssens, Director of Infrastructure and Operations at WCLC, describes it: “We didn’t have visibility into all of our sites. It was a managed service, and we generally relied on people or retailers calling us, so it was a very reactive response to when there were issues or challenges with our retail lottery terminals.” Beyond visibility, the financial model was unsustainable: every terminal connected through an expensive private leased-line circuit, a cost running into the millions annually that directly reduced funds returned to the provinces.
I will sleep better at night knowing that our environment is secured through all of the various security technologies built within Netskope: zero trust network access, CASB, DLP, and additional AI security services from the entire platform.
WCLC’s retail network has requirements that go beyond standard enterprise connectivity. Sites span remote rural locations where fixed broadband is unavailable. Jackpot signs and content monitors connect over Wi-Fi. And lottery terminal transactions must run over a dedicated, secured path completely separated from general internet traffic. Netskope One SD-WAN hardware addressed all three requirements in a single device. The built-in SIM card capability enables cellular connectivity across remote sites. The integrated access point supports Wi-Fi-connected retail signage and gives visiting technicians on-site access to diagnose and service terminals without requiring a separate connection.
The platform’s ability to separate lottery transaction traffic from general internet traffic gave WCLC the segmentation it needed without adding hardware complexity. In Janssens’ words: “Netskope gives us that flexibility to get content delivered over the internet, but then also creates a secure path for all of our lottery transactions and communications that go back to our central gaming system.” For the most remote sites where cellular is also unavailable, the architecture accommodates wired and satellite connections, ensuring no location is left behind.
The deployment of Netskope One SD-WAN replaces private leased-line circuits with secure, cellular-first connections across all 5,000 sites. Adam is direct about the financial impact, “The cost savings to move away from private connections to secure SD-WAN with Netskope is definitely multi-millions per year, which is a huge benefit to our organization.” Where the legacy model required retailers to call in before the team could act, Netskope’s unified dashboard now gives the infrastructure team proactive, real-time visibility through intuitive dashboards across all 5,000 sites from a single pane of glass.
Alongside the retail network transformation, WCLC is replacing legacy VPN with Netskope One Private Access, integrating ZTNA and Endpoint SD-WAN into a single, unified SASE client. The shift eliminates the decision burden VPN places on end users. As Adam puts it: “There’s no worrying if you need to connect to VPN or if your VPN is connected. It’s just a seamless user experience.”
Beyond simplifying the daily workflow for internal employees, this unified approach drastically elevates WCLC’s security posture and streamlines collaboration with external partners. For third-party vendors assisting with lottery platform development and troubleshooting, traditional remote access tools used to mean clunky software installations, complex firewall configurations, and ongoing management overhead. With Netskope, WCLC provides vendors with a browser-based, agentless secure access model that replaces legacy remote access tools with a fully authenticated, auditable, least-privilege connection model. This eliminates onboarding friction, and delivers a world-class user experience for external teams.
Like every organization, WCLC is navigating AI adoption faster than policy frameworks can keep pace. Adam frames the challenge plainly: “Historically we’ve always been afraid of shadow IT. Now shadow AI is a thing, because people can just go out and use AI and potentially build agents and start proliferating data through its use.” Netskope gives WCLC the visibility to see where AI is being used across the organization and enforce data security policies in real time. The goal isn’t to block AI wholesale. It’s proactive governance: monitor usage, enforce policy, and educate users the moment their behavior approaches a policy boundary.
WCLC ran a rigorous evaluation: a full RFP, extended proof of concept with two vendors, real terminal connections, and multiple rounds of testing. What set Netskope apart wasn’t only the technology. It was the approach. Rather than configuring the environment on WCLC’s behalf, Netskope’s team taught WCLC’s staff how to set it up and secure it themselves. As Adam says: “Netskope came in and really skilled us up on how to do it. That really pushed Netskope over the edge.”