What Is Gambling & iGaming Licensing?
Gambling and iGaming licensing is the regulatory authorisation a business needs to legally offer games of chance, sports betting, or supply gaming software to licensed operators. The licence is granted by a designated gambling authority and prescribes which products are permitted, which markets the operator may serve, and which player-protection, anti-money-laundering, and technical-compliance standards apply.
Unlike payments and crypto, where the European Union has built harmonised frameworks (PSD2, EMD2, MiCA), gambling sits outside EU harmonisation under a 1992 Edinburgh European Council carve-out. Each member state licenses separately, the CJEU has consistently confirmed that mutual recognition does not apply, and a recent Advocate General Opinion in Case C-683/24 (delivered ) found the underlying question inadmissible but, addressing substance for completeness, concluded that a Maltese gaming licence is, in the CJEU's own paraphrase, "in principle valid only in Malta".[1] The practical consequence is that EU passporting is not available, geo-blocking is mandatory, and operators serving multiple regulated markets often need multiple licences.
The global market the licensing system supervises is large and growing. European gross gambling revenue reached EUR 123.4 bn in 2024, with the online share rising to 39% of total revenue (EUR 47.9 bn), and is forecast to reach EUR 66.8 bn online by 2029.[2] Crypto-denominated gambling has scaled from a niche to a USD 81.4 bn segment in 2024, with stablecoins now accounting for roughly 58% of crypto deposits at offshore-licensed casinos.[3]
Licences split along two axes operators routinely conflate. The first axis is product: a casino licence (RNG slots, live dealer, peer poker), a sports betting licence (fixed-odds, pool, exchange), a lottery licence, and a B2B supplier licence (platform, RNG, aggregator, jackpot system) are each issued separately in most jurisdictions, sometimes by the same regulator and sometimes by different ones. The second axis is regulatory tier: EU-regulated jurisdictions price credibility highly, established alternatives price practicality, and emerging jurisdictions price speed.
Buyer profile follows the tier. EU regulated suits operators that already have a UK or German customer base and need Tier-1 acquiring access. Established alternative suits LatAm, Asia and crypto-targeted operators that need a defensible licence without EU substance cost. Emerging suits crypto-native B2C operators willing to operate on grey-market terms and crypto-only payment rails.
Who Needs a Gambling Licence?
A gambling licence is required for any business that offers games of chance, fixed-odds or pool betting, lottery products, peer-to-peer poker, fantasy sports with prize pools, or supplies the platform, RNG or aggregator software that powers those activities. Operating without authorisation is a criminal offence in every regulated market and is increasingly enforced through domain blocking and payment-rail restrictions.
The clearest case is the B2C operator. An online casino offering slots, table games and live dealer products to retail customers needs a casino licence in every jurisdiction where it accepts players. A sportsbook needs a sports betting licence (and in some jurisdictions, a separate casino licence if it offers in-play "casino-style" markets). A peer-to-peer poker room needs a poker-specific authorisation in regimes such as Malta's Type 3. Mixed-vertical operators commonly hold multiple licences from a single regulator.
B2B suppliers need their own authorisations even when they never face a retail customer. Malta's Critical Gaming Supply Licence, Gibraltar's GOSS framework, Curacao's B2B Supplier Licence under the new LOK regime, and Kahnawake's Casino Software Provider Authorization each cover platform providers, RNG developers, game studios, aggregators, payment-critical providers, and increasingly, marketing and CRM service firms. A B2B supplier serving a Malta-licensed operator typically cannot supply unlicensed; a B2B supplier serving an offshore-licensed operator usually can, though Tier-1 acquirers will not process payments for unlicensed activity in the supply chain.
Crypto-native operators sit in the same regulatory bucket as fiat operators. A crypto casino under a Curacao or Anjouan licence is still a gambling operator under domestic law in the markets it serves; accepting crypto does not change the licence classification. What changes is the payment-rail layer: the operator is generally not a CASP under MiCA, but its on/off-ramp partner is, and EU-targeted crypto rails must use MiCA-authorised crypto-asset service providers from .[4]
Prediction markets, fantasy sports, and skill games sit in adjacent regulatory categories. Their classification varies by jurisdiction, and the cleaner the "predominantly skill" or "financial-instrument-like" framing, the more likely the activity escapes gambling licensing. Jagelski & Partners covers the prediction market vertical separately at prediction market licensing; this page covers chance-based gambling.
Where to Get Licensed
Licensing jurisdiction selection depends on three commercial filters: which markets the operator targets, what regulatory credibility the operator needs for banking and payment processing, and what cost and timeline the business can absorb. Nine jurisdictions cover the practical decision set, grouped into three regulatory tiers that each serve a distinct buyer profile.
Tier 1: EU Regulated (Malta, Gibraltar, Cyprus)
The Tier-1 tier delivers the highest-credibility licence available, anchored in primary legislation, supervised by an established authority, and accepted by Tier-1 acquiring banks and payment processors. The MGA issues a unified 10-year framework covering Type 1 RNG casino, Type 2 fixed-odds betting, Type 3 peer-to-peer, and Type 4 controlled skill games under the Gaming Act 2018; application fee is EUR 5,000 and the annual B2C fee is EUR 25,000 plus a tiered Compliance Contribution on gross gaming revenue.[5] Capital requirements scale with vertical: EUR 100,000 for Type 1 and 2, EUR 40,000 for Type 3 and 4, with a cumulative cap of EUR 240,000 across multi-vertical operators under the Capital Requirements Policy of .[6]
Gibraltar's Gambling Act 2025 commenced and replaced the long-running 2005 framework with a B2C / B2B / GOSS (Gambling Operator Support Services) structure that for the first time captures affiliate marketing, CRM and managed-trading firms.[7] Corporate tax rose to 15% on .[8] Under the new Gambling (Duties and Fees) Regulations 2026 (LN.2026/065), gambling duty is 0.15% of gross gaming or betting yield with the first GBP 100,000 of annual GGY exempt; the regime applies to B2C licences only and B2B is exempt. The B2B annual licence fee is set separately at GBP 85,000.[25]
Gibraltar retains guaranteed UK market access under a Joint Ministerial Committee arrangement, the only third jurisdiction with such grandfathered status post-Brexit, although UK-facing operators still need a UKGC licence and pay UK Remote Gaming Duty on online casino, slots and online bingo, which rises from 21% to 40% on under the Finance Act 2026; remote sports betting remains under General Betting Duty at 15% until , when a new 25% remote betting rate takes effect (UK horseracing and SSBTs ring-fenced at 15%).[9]
Cyprus is the EU outlier and merits a specific caution: the National Betting Authority issues sports betting Class A (land-based) and Class B (online) licences only.[10] Online casino, online slots, online poker, betting exchanges and horse-race betting are prohibited under domestic law and criminally enforced against operators and players. Annual fees are modest (EUR 30,000 for one year, EUR 45,000 for two years) but the regime requires EUR 500,000 paid-up share capital plus a EUR 550,000 bank guarantee from a Cyprus or EU credit institution, making Cyprus one of the highest capital-intensity sports-betting regimes in the EU.[11] The total effective burden rose to 14.5% in when Parliament increased the NBA contribution from 3% to 4.5%, with the additional 1.5 percentage points earmarked via the Cyprus Sports Organisation for football clubs and academies.[26]
Tier 2: Established Alternative (Curacao, Costa Rica, Canada / Kahnawake)
Tier 2 serves operators that want a defensible licence without EU substance cost. Curacao is the dominant choice and underwent its most significant reform in three decades in late 2024. The Landsverordening op de Kansspelen (LOK) entered into force on , replacing the 1993 master / sub-licence structure with a direct B2C and B2B regime supervised by the CGA.[12] All four legacy master licences have now expired; sub-licensees that filed direct applications were converted by operation of law into provisional LOK licences. As of the CGA had granted 604 provisional licences (551 B2C and 53 B2B) and rejected 139.[13] Application fee is EUR 4,592, annual B2C fee is EUR 47,450, annual B2B fee is EUR 24,490, and licences are indefinite subject to ongoing supervision.[14]
Experienced operators treat the provisional LOK grant as a starting position rather than the final credibility marker, because Tier-1 acquirers and Tier-1 game studios increasingly require the CGA's transition to a definitive licence with the full substance scaling met (resident managing director, Tier-IV data centre, Key Person phasing through 2028 and 2029) before extending direct contracts on commercial terms comparable to MGA-licensed counterparties.
The substance bar under LOK has risen materially. Operators need a Curacao NV/BV with statutory seat on the island, at least one resident managing director, full UBO disclosure to 10%, on-island hosting in a high-availability data centre with CGA access, and a phased scaling of local Key Persons (one full-time from 2028, three plus a physical office from 2029). Practitioner observation from recent applications: rejection rates run at roughly 38% and the most common cause is incomplete source-of-funds documentation for UBOs, not technical compliance.
Costa Rica is the unusual case in this tier because it issues no dedicated gambling licence. Operators register a Sociedad Anónima with a "data-processing" business permit at canton level, and the entire structure rests on the legal theory that the bet is placed where the player sits, not where the operator is based. First-year setup runs USD 4,000–8,000 and annual upkeep around USD 5,000.[15] The trade-off is that no specific regulator, no AML supervision of gambling activity, and no dispute-resolution body for players means Tier-1 acquirers and game suppliers are increasingly treating Costa Rica-licensed operators as effectively unlicensed.
Canada's Kahnawake Gaming Commission has operated since 1999 under the Mohawk Council of Kahnawake's asserted s.35(1) Constitution Act 1982 jurisdiction.[16] The Client Provider Authorization costs USD 40,000 to apply and USD 20,000 per year (covering up to six domains since the 2025 update), with mandatory hosting at Mohawk Internet Technologies in Kahnawà:ke Territory. Kahnawake licences cannot serve US players post a 2016 NJ DGE settlement and lost the Ontario market when iGaming Ontario launched on . Ontario itself is a provincial conduct-and-manage framework that ran CAD 3.2 bn GGR across 50 operators in FY 2024–25; it is unavoidable in Canadian strategy but is not an international licensing option in the conventional sense.[17]
Tier 3: Emerging / Light-Touch (Anjouan, Liberia, Saint Lucia)
Tier 3 is fast and cheap and increasingly controversial. Anjouan is the volume leader, with all-in Year-1 fees of roughly EUR 17,000 and a 4–8 week timeline. The legitimacy position deteriorated sharply in 2024–2025: the Banque Centrale des Comores publicly stated that the AOFA and its administrator have "no physical or legal existence" in the Comoros and the 2024 FATF-GAFI Mutual Evaluation of the Union of the Comoros confirmed gambling is prohibited under the Comorian Penal Code at union level.[18] Major investigative reporting followed in late 2025 and early 2026. Practitioner observation: Tier-1 EU EMIs and Tier-1 acquiring banks routinely decline Anjouan-only structures, and operators almost always layer an EU or EEA payment-agent company to obtain fiat rails, which adds EUR 25,000–80,000 in annual structural cost. Crypto on/off-ramps continue to accept Anjouan readily, which explains its dominance in the crypto-casino segment.
The real constraint is the AOFA-mandated geo-block list, which prohibits accepting players from the United States, France, Comoros, Australia, the Netherlands, Singapore and a rolling set of UK and Curacao-restricted jurisdictions, and is enforced by AOFA through licence-suspension powers; operators who treat the list as advisory rather than binding are the ones whose Anjouan licence is administratively revoked at the first formal complaint, which terminates the crypto-on-ramp relationships that depend on a live Anjouan certificate.
Liberia launched the International Integrated Gaming Licence in through its NLA, with the deliberate aim of fixing Anjouan's banking pain point.[19] The IIGL bundles a Liberian IBC, a Monrovia business address, a USD or EUR SWIFT-capable corporate bank account, and an embedded AML and compliance officer into the licence package. Year-1 cost runs USD 30,000–55,000. It is too early to assess Tier-1 PSP acceptance, but the structure is novel in being the first offshore licence to bundle local banking inside the licence itself.
Saint Lucia is a caveat case and warrants a specific warning. The country has no functioning online gambling regulator; the 2003/2004 Gaming Control Act is land-based only and the sole domestic casino closed in . A "Saint Lucia Gaming Authority" and a "Digital Gaming and Interactive Entertainment Act 2025" are promoted by one consultancy website but appear in no Saint Lucia government gazette, parliamentary record, Attorney General's Chambers index, Ministry of Finance or FSRA source. Treat references to either as a likely marketing fabrication. Operators using "Saint Lucia" almost always pair an International Business Company with a gambling licence held elsewhere.
Jurisdiction comparison
| Tier | Jurisdiction | Regulator | Licence Types | Total Year 1 Cost | Timeline | Tax / Duty | Best For |
|---|---|---|---|---|---|---|---|
| EU Regulated | Malta | MGA | B2C (Type 1–4) / B2B Critical Gaming Supply | EUR 5k application + EUR 25k+ annual | 4–6 months | 35% headline / ~5% effective; 5% gaming tax on Malta-located players | Operators needing Tier-1 acquirer access and EU-tier credibility |
| EU Regulated | Gibraltar | Gambling Commissioner | B2C / B2B / GOSS | B2B GBP 85k annual; B2C variable≈ $114K | 3–6 months | 15% CT; 0.15% GGY duty B2C (first GBP 100k exempt; B2B exempt) | UK-facing operators retaining grandfathered UK market access |
| EU Regulated | Cyprus | NBA | Sports betting Class A and B only (no online casino) | EUR 30k annual + EUR 500k paid-up capital + EUR 550k guarantee | 6–9 months | 15% CT (from 1 Jan 2026); 14.5% sector levy (10% betting tax + 4.5% NBA) | Sports betting operators targeting EU |
| Established Alternative | Curacao | CGA (under LOK) | B2C Online Gaming / B2B Supplier | EUR 4.6k application + EUR 47.5k annual (B2C) | 3–6 months | 15%/22% CT; no GGR duty | LatAm, Asia, Africa, CIS, crypto-targeted B2C |
| Established Alternative | Costa Rica | None (no gambling regulator) | Data-processing business permit (vehicle only) | USD 4–8k all-in | 3–6 weeks | Territorial (offshore revenue not taxed) | Crypto operators with minimal regulatory credibility need |
| Established Alternative | Canada (Kahnawake) | KGC | CPA (B2C) / CSPA (B2B) / IGL / LDSA | USD 40k application + USD 20k annual | 4–6 months | 0% CT; 0% gaming duty | Operators wanting a long-standing offshore licence with non-US, non-Canadian markets |
| Emerging | Anjouan (Comoros) | AOFA / ALSI (claimed) | Single eGaming licence + B2B Recognition Certificate | EUR 17–18k all-in Y1 | 4–8 weeks | 0% CT (IBC); 0% GGR | Crypto-native B2C accepting fiat and stablecoin via layered structures |
| Emerging | Liberia | NLA | International Integrated Gaming Licence | USD 30–55k Y1 (includes banking) | 6–10 weeks | Effectively 0% via IBC | Operators wanting a sovereign-state offshore licence with banking bundled |
| Emerging | Saint Lucia | None for online gambling | IBC vehicle paired with licence held elsewhere | USD 2–5k IBC only | 1–2 weeks | Territorial | Corporate-law domicile only; no standalone gambling authority |
Markets that need a separate domestic licence
Some markets cannot be served from any of the nine jurisdictions above and require a local licence: the United Kingdom (UK Gambling Commission), Germany (GGL under GlüStV 2021), Sweden (Spelinspektionen), the Netherlands (KSA), France (ANJ), Spain (DGOJ), Italy (ADM), Denmark (Spillemyndigheden), and Brazil (SPA under Lei 14.790/2023, live since ).[20] Brazil generated BRL 37 bn (around USD 7 bn) of regulated online gambling GGR in its first year across 79 licensed operators and is now the largest emerging-market regulated gambling jurisdiction. The United States operates state-by-state, with seven states currently live for real-money online casino (NJ, PA, MI, WV, CT, DE, RI) and combined 2025 iGaming GGR of USD 10.73 bn (+27.6% year-on-year), with Pennsylvania, Michigan and New Jersey accounting for roughly 90% of the total.[24]
What the UKGC licence does not cover is acquirer-side eligibility under Mastercard's Standards for Procedures: Maintain Eligibility (SPME) and Visa's Global Brand Protection Programme, which apply parallel registration, monitoring and chargeback-ratio tests against every UK-licensed operator regardless of UKGC standing; an operator can hold a valid UKGC remote casino licence and still lose Mastercard acquiring within 90 days if SPME chargeback-ratio or excessive-fraud thresholds are breached, because the scheme test runs on transaction data the UKGC does not see.
Key Requirements
Gambling licence requirements vary by jurisdiction and tier, but five categories appear in every regime: corporate substance and key persons, RNG and game certification, player-protection programmes, AML and KYC compliance, and segregation of player funds. The depth and enforcement of each varies sharply across the three regulatory tiers.
Corporate substance and key persons
Tier-1 regulators require a locally incorporated company with a registered office and, in most cases, a resident director and locally employed compliance officer. Malta extends this through fit-and-proper screening of every ultimate beneficial owner holding 10% or more, every director, every MLRO, and every key function holder, with sanction-jurisdiction UBOs (Russia, Iran) ineligible for any licence.[5] Tier-2 substance ranges from genuine (Curacao's mandatory resident managing director plus scaling Key Person requirement) to nominal (Costa Rica's local resident agent only). Tier-3 substance is usually nominal in law and absent in practice, which is part of what makes Tier-3 licences cheap.
RNG and game certification
Every regulated jurisdiction requires that random number generators and individual games be certified by an accredited testing lab before they go live. The lab ecosystem is mature: GLI is accepted by all US states, Ontario, MGA, UKGC, Curacao and Brazil; eCOGRA is accepted by Tier-1 EU and several US states; iTech Labs, BMM Testlabs, SIQ and QUINEL cover the rest. Practitioner observation: cost per slot game per jurisdiction runs USD 3,000–10,000, multi-jurisdiction packages run USD 15,000–40,000, and lead times stretch from two weeks for a simple single-jurisdiction slot to four months for a complex multi-jurisdiction jackpot system. Tier-3 jurisdictions rarely require independent certification and rely on operator self-declaration.
Player-protection programmes
Tier-1 jurisdictions mandate the deepest player-protection layer: deposit, loss and time limits, multi-tier self-exclusion registers, reality checks, ADR entity registration, vulnerable-customer policies, and increasingly, frictionless affordability checks. The UK Gambling Commission introduced statutory levy regulations on with rates of 0.1%–1.1% of gross gaming yield allocated to treatment, prevention and research, and slot stake limits of GBP 5 per spin for over-25s (in force from ) and GBP 2 per spin for 18–24s (from ).[21] Curacao under LOK introduced a mandatory Responsible Gaming Policy on with 1, 3, 5-year and lifetime self-exclusion options, mandatory deposit limits with 24-hour cool-off periods on increases, and a designated Responsible Gambling Officer.[22] Tier-3 jurisdictions impose no equivalent.
AML and KYC compliance
Under EU Regulation 2024/1624 (the AMLR), which applies in full from , all providers of gambling services are obligated entities, with a customer due diligence trigger at EUR 2,000 in single or linked transactions for stakes, winnings or both.[23] The Anti-Money-Laundering Authority in Frankfurt became operational on and supervises the highest-risk cross-border entities directly, with national supervisors continuing to oversee gambling. Practitioner observation: the 2026 compliance-build year is producing visible separation between operators that already run a Tier-1 AML programme (Malta, Gibraltar, UK) and those that have historically relied on the lighter Curacao or Anjouan regimes; for the second group, AMLR-readiness is the single largest pre-2027 work item.
Player fund segregation and technical audit
Player fund segregation is the dividing line between regulated and grey. Malta operates a Player Protection Deposit framework; Gibraltar requires segregation under the operator's licence conditions; Curacao under LOK requires "sufficient financial resources" and liquidity for six months of operations and player payouts. Tier-1 jurisdictions also require an MGA-approved or equivalent system audit before go-live. Editorial position: of the five categories above, the gap between Tier-1 and Tier-3 is widest in AML and player-protection enforcement; the gap in nominal substance requirements is narrower than headline rules suggest.
How Jagelski & Partners Helps
Jagelski & Partners coordinates gambling licensing as a single mandate that runs corporate formation, licence application, banking placement, RNG certification, and AML programme set-up in parallel rather than in sequence. We assess the operator's commercial model first, then recommend the jurisdiction tier that fits target markets, capital position, and banking tolerance, then sequence the workstreams so that capital, substance and banking arrive ahead of the regulator asking.
The first work item on every mandate is a tier and jurisdiction call. A B2C casino operator with a LatAm customer base, USD 200,000 of available capital, and a 90-day target to go live needs a different recommendation than a B2B platform supplier targeting Maltese operators with USD 2m of available capital and a 12-month runway. We do not recommend a jurisdiction before mapping the operator's regulated activities, the markets it actually targets, and the payment rails it needs. Banking is the constraint that disqualifies more jurisdictions than any other variable.
Once the jurisdiction is selected, we run formation in parallel with the licence application. For Malta and Gibraltar that means a Maltese or Gibraltarian holding company with resident director and registered office in place before the licence file goes in. For Curacao under LOK that means a Curacao NV with resident managing director and a Tier-IV data-centre tenancy on the island. We coordinate formation with our company formation service so that corporate substance is delivered at the depth the licence requires, not the cheapest depth available.
The banking placement runs alongside, not after. Gambling is a Tier-1 high-risk category at every acquirer and EMI, and pre-qualification with institutions that have an active gambling-MCC 7995 programme is the difference between a six-week banking timeline and a six-month one. Editorial position: most operators we onboard have a banking expectation calibrated to their previous fintech, not to gambling, and the recalibration is the single most important conversation in the first thirty days. Banking pre-qualification is handled through our high-risk business accounts workflow with 90+ institutions in the pre-qualified network.
RNG and game certification, player-protection programme drafting, AML manual and KYC tooling are sequenced into the application timeline so that on the day the regulator grants the licence the operator can go live, not start a three-month integration. Post-launch we handle ongoing compliance reporting, annual fee renewals, key-person changes, and the jurisdictional reviews that fall due (Curacao LOK transitional milestones in 2028 and 2029, MGA five-year compliance reviews, Gibraltar's GOSS framework rollout).
For licensing work, Jagelski & Partners is engaged by the client on a fixed-fee or fixed-fee-plus-success basis depending on the mandate. For banking placement coordinated alongside, Jagelski & Partners is paid by the institution, not by the client. We do not mark up institutional banking or EMI pricing, and we do not charge a banking onboarding fee. The institutional rates the client sees on banking onboarding documentation are the rates the institution applies.
Frequently Asked Questions
No. Gambling is excluded from EU single-market harmonisation under a 1992 Edinburgh European Council carve-out, and the Court of Justice of the European Union has consistently confirmed that national gambling licences do not benefit from mutual recognition. A recent Advocate General Opinion in Case C-683/24 () found the question referred to be inadmissible and, addressing substance for completeness, concluded that Article 56A of Malta's Gaming Act (which had purported to extend the Maltese licence's protective effect across the EU) is incompatible with Brussels I bis Regulation. The practical consequence is that operators targeting multiple EU markets need either multiple national licences (Malta plus Germany plus France) or one Tier-1 EU licence with geo-blocking for non-licensed markets.[1]
The Landsverordening op de Kansspelen entered into force on and replaced the 1993 master / sub-licence structure with a direct two-tier B2C and B2B regime supervised by the new Curacao Gaming Authority. All four legacy master licences (Antillephone, Cyberluck, Gaming Services Provider, CIL) have now expired and the legacy sub-licence model is legally extinct from . New requirements include a resident managing director, a Tier-IV data centre on the island, full UBO disclosure to 10%, AML alignment with FATF Recommendations, and a phased local Key Person scaling through 2028–2029. As of , the CGA had granted 604 provisional licences and rejected 139.[13]
Year-1 all-in costs range from around USD 4,000 (Costa Rica IBC and business permit only) to EUR 600,000+ for Malta with a full multi-vertical operation including capital, system audit and RNG certification. Tier-1 EU jurisdictions (Malta, Gibraltar) typically run EUR 150,000–350,000 in Year 1 once capital, advisory fees, certification, banking onboarding and AML build are included. Curacao under LOK runs EUR 90,000–180,000 Year 1 including formation, data-centre tenancy, key persons, and the full licence stack. Anjouan and Liberia run EUR 25,000–80,000 once the layered payment-agent structure needed to access fiat rails is included.
Realistic timelines from formation through licence grant are 4–6 months for Malta, 3–6 months for Gibraltar, 6–9 months for Cyprus, 3–6 months for Curacao under LOK, 4–6 months for Kahnawake, 4–8 weeks for Anjouan, 6–10 weeks for Liberia, and 3–6 weeks for Costa Rica. The variance within each band is driven by UBO complexity (multiple jurisdictions, PEP exposure), source-of-funds evidence quality, and whether banking is run in parallel or sequentially. Sequencing in parallel saves 8–12 weeks on Tier-1 mandates.
Yes, in most jurisdictions, with conditions. Curacao under LOK explicitly accommodates crypto-denominated gaming subject to AML alignment and wallet monitoring; the CGA has stated that "anonymous crypto platforms face immediate regulatory rejection". Malta permits virtual financial assets only with explicit MGA approval. The UK Gambling Commission's source-of-funds rules make crypto acceptance practically impossible for UK-licensed operators. Under EU MiCA (fully applicable from ), the operator itself is not a crypto-asset service provider, but its on/off-ramp partner is, and EU-targeting rails must use a MiCA-authorised CASP.[4] Anjouan and Liberia accept crypto without restriction.
In most jurisdictions yes, although the rules differ. Malta requires a separate Critical Gaming Supply Licence for platform, RNG, aggregator and back-office providers serving licensed operators. Gibraltar introduced a new B2B Licence and the GOSS Licence under its 2025 Act, with GOSS specifically covering marketing, CRM and managed-trading firms for the first time. Curacao under LOK has a dedicated B2B Supplier Licence at EUR 24,490 per year. Kahnawake's Casino Software Provider Authorization is the equivalent. The economic logic is the same: regulators want certified, fit-and-proper-checked B2B providers in the supply chain to protect licensed operators from compromised platforms.[7]
Tier-1 EU licences typically do, with caveats on rolling reserves and chargeback monitoring under Visa and Mastercard's gambling-MCC 7995 framework. Curacao under LOK is increasingly bankable through Tier-2 acquirers with 10–20% rolling reserves. Anjouan, Liberia and Saint Lucia-anchored structures rarely access Tier-1 EU EMIs or direct card-scheme acquiring; operators typically layer an EU or EEA payment-agent company to obtain fiat rails, which adds EUR 25,000–80,000 of annual structural cost. Crypto on/off-ramps accept all tiers including emerging jurisdictions, which is why crypto-native operators dominate the Tier-3 segment.
Payment-rail acceptance is driven by the licence's regulatory credibility, not by its formal validity. Tier-1 EU acquirers run their own internal jurisdiction risk-scoring that overlays card-scheme rules; an Anjouan licence often fails this scoring regardless of how the operator presents it, particularly after the Banque Centrale des Comores publicly disavowed the Anjouan Offshore Finance Authority and the 2024 FATF-GAFI Mutual Evaluation of the Union of the Comoros confirmed gambling is prohibited under Comorian Penal Code at union level.[18] Liberia's IIGL launched in explicitly to address this rejection pattern by bundling local banking into the licence itself; results are too early to assess in mid-2026.[19]
Start Your Gambling Licensing Mandate
Jagelski & Partners maps operator activity to the licensing tier and jurisdiction that fits the commercial model, sequences corporate formation, banking and licence application in parallel, and covers nine jurisdictions across EU regulated, established alternative and emerging tiers.
References
Show all references
- Court of Justice of the European Union, Advocate General Opinion in Case C-683/24, , curia.europa.eu, accessed .
- European Gaming and Betting Association / H2 Gambling Capital, European Gambling Market 2025 Edition, , egba.eu, accessed .
- Yield Sec, Crypto Casino Revenue 2024 (via Financial Times reporting), 2025, tradingview.com, accessed .
- European Union, Regulation (EU) 2023/1114 on Markets in Crypto-assets (MiCA), , eur-lex.europa.eu, accessed .
- Malta Gaming Authority, Guidance Note: Licence Fees and Taxation v2, , mga.org.mt, accessed .
- Fenech & Fenech Advocates, Quick Reference Guide to the MGA's Capital Requirements Policy, , fenechlaw.com, accessed .
- HM Government of Gibraltar Gambling Division, Gambling Act 2025, commenced , gamblingdivision.gov.gi, accessed .
- EY, Gibraltar Tax Facts 1 July 2025 to 30 June 2026, 2025, ey.com, accessed .
- HM Treasury, Budget 2026: Remote Gaming Duty reform (commencement ), 2025; accessed via Clifford Chance, UK Gambling Regulations in 2025: the UK Government doubles-down on consumer protection, cliffordchance.com, accessed .
- Cyprus National Betting Authority, Frequently Asked Questions, nba.gov.cy, accessed .
- Cyprus Bar / Chambers & Co, Sports Betting License in Cyprus, chambersandco.com, accessed .
- Curacao Gaming Authority, Online Gaming, cga.cw, accessed .
- Curacao Chronicle, 1 Year of the LOK: an overview of the first year under the new gambling law, , curacaochronicle.com, accessed .
- Asia Gaming Brief, Curacao Gaming Authority updates fee policy under new LOK framework, , agbrief.com, accessed .
- Altenar, Guide to Gambling Laws and Betting Regulations in Costa Rica, 2024, altenar.com, accessed .
- Kahnawake Gaming Commission, About Interactive Gaming, gamingcommission.ca, accessed .
- iGaming Ontario, Annual Report 2024-2025, igamingontario.ca, accessed .
- iGamingToday, Comoros Sounds Alarm Over Fake Anjouan Gambling Licenses, 2025, igamingtoday.com, accessed .
- National Lottery Authority of Liberia, International Integrated Gaming Licence, launched , nla.gov.lr; corroborated by PR Newswire, First International Integrated Online Casino License Gains Growing Recognition, prnewswire.com, accessed .
- iGaming Business, Licensed Brazil online betting generates $7bn in GGR over 2025, , igamingbusiness.com, accessed .
- CMS Lawnow, UK Government's 2025 Statutory Levy on Gambling Operators, , cms-lawnow.com; corroborated by Gambling Insider, Government debates gambling reform: Online slot stake limits and statutory levy introduced, gamblinginsider.com, accessed .
- Curacao Gaming Authority, Responsible Gaming Policy v1.0, , cga.cw, accessed .
- EU-Lex, Regulation (EU) 2024/1624 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, , eur-lex.europa.eu, accessed .
- American Gaming Association, State of the States 2026: The AGA Survey of the Commercial Casino Industry, May 2026, americangaming.org, accessed .
- HM Government of Gibraltar, Gambling (Duties and Fees) Regulations 2026 (LN.2026/065), commenced , gamblingdivision.gov.gi; corroborated by Lexology, In review: licensing and taxation of gambling activities in Gibraltar, lexology.com, accessed .
- Cyprus Mail, MPs approve levy hike to support football clubs, , cyprus-mail.com; corroborated by Yogonet, Cyprus lawmakers approve bill to increase levy on sportsbook winnings to aid football clubs, , yogonet.com, accessed .