Every online casino worth considering answers to someone. That someone is a licensing authority: the gambling regulator that decides who may run games, sets the rules they must follow, and is supposed to step in when they break them. But gambling authorities are not created equal. Some run national markets with compulsory deposit limits and their own self-exclusion registers; others license hundreds of companies they never meet, for players in countries they don’t regulate.
This guide explains what a gambling license actually tells you, how the regulatory authorities we’ve reviewed compare on the things that matter to players, how to check a casino license yourself, where to turn when a licensed casino won’t pay, and what it takes, and costs, to get one. Every figure comes from the regulators’ own laws, fee schedules, registers and reports, the same sources behind our individual reviews, and was checked on 16 October 2026.
The licensing landscape at a glance (verified 16 October 2026)
What Is a Gambling Licensing Authority?
A gambling regulatory authority is the public body, or in a few offshore cases the body that claims public authority, that licenses and supervises gambling operators. Depending on the country it may be called a gambling commission, a gaming authority, a licensing body or simply the regulator. Its core jobs are the same everywhere: vet the people behind an operator, approve the games and systems, set player-protection rules, keep a public register, and punish breaches.
The words can mislead. In Britain, a “licensing authority” usually means the local council that licenses betting shops and arcades; online casinos answer to the national gambling regulatory authority UK players know as the Gambling Commission. And searches for a “Gambling Regulatory Authority Act” usually lead to Mauritius, whose Gambling Regulatory Authority Act 2007 governs casinos and betting on the island and, since July 2023, bars people in Mauritius from gambling on offshore sites. Ireland’s new Gambling Regulatory Authority was created under a different law, the Gambling Regulation Act 2024, while the similarly named Gibraltar Regulatory Authority doesn’t regulate gambling at all.
Three Kinds of Casino License
The single most useful thing to know about any casino license is which market it was built for. The authorities we review fall into three groups:
| Type | Examples | Who it protects | What it means for you |
|---|---|---|---|
| National market licence | UK, Sweden, Denmark, Germany, France, Spain, Estonia | Players in that country only | The strongest protections, but only if you live there; operators must block or redirect everyone else |
| International hub licence | Malta, Gibraltar, Isle of Man | Players in countries without their own regime | Serious vetting and supervision, but no right to serve countries that require a local licence |
| Offshore licence | Curaçao, Kahnawake, Tobique, Anjouan | Players anywhere the operator chooses to accept | Lower cost and lighter oversight; protections vary widely and are hardest to enforce |
The national regulators, such as Sweden’s Spelinspektionen, Denmark’s Spillemyndigheden, Germany’s GGL, France’s ANJ and Spain’s DGOJ, run closed markets with national self-exclusion and, in most cases, compulsory limits. An Estonia gambling license works the same way for Estonian players, with a 21+ age limit for casino games.
The hubs sit in between. A gambling license in Malta is the best-known EU licence, a Gibraltar gambling license has long been home to big betting brands, and a gambling license from the Isle of Man comes with the strictest player-fund rule we’ve seen. None of them lets an operator serve a country that demands its own licence.
The offshore group is where most “no-frills” casinos live. A Curaçao gambling license is now issued directly by the Curaçao Gaming Authority after the old sub-licence system ended in 2025; a Kahnawake gambling license has existed since 1999 and is one of the few offshore regimes where the regulator decides complaints itself. Newer options include a gambling license in Tobique, issued by a First Nation in New Brunswick since 2024, and an Anjouan gambling license, sold by a private company on behalf of an island whose authority the Comoros government disputes.
What a Gambling License Does and Doesn't Guarantee
A licence from a serious regulator means a few things are almost always true: the owners passed some form of fit-and-proper check, the games were tested by an independent lab, the operator has anti-money laundering procedures, and there’s a public register you can check. Beyond that, protection depends entirely on the regulator.
- Your money if the casino goes bust: only 4 of the 14 authorities we review require player balances to be segregated (Malta, the Isle of Man, Denmark and, on paper, Tobique). The UK and Gibraltar only require operators to disclose how well they protect your funds.
- A complaint that someone will actually decide: most regulators don’t rule on individual disputes. They send you to an independent ADR body, a mediator, a consumer board or the courts.
- A national self-exclusion register: seven of our 14 run one, all of them national market regulators. Hubs and most offshore regimes leave self-exclusion to each operator.
- The right to serve you: a licence only covers the market it was issued for. There’s no EU-wide gambling licence. The EU Court of Justice confirmed in 2009 that member states may set their own rules, and an Advocate General’s opinion in April 2026 stated that a Maltese licence is in principle valid only in Malta and countries that choose to recognise it. In Britain, anyone serving British players has needed a UK gambling license from the Gambling Commission since 1 November 2014.
What no licence guarantees is that a particular casino will treat you well. That’s why we review casinos and regulators separately.
How 14 Gambling Authorities Compare
This is the table we wish existed when we started: what each regulator actually gives players, side by side.
| Authority | Licence covers | National self-exclusion | Who handles complaints | Player funds |
|---|---|---|---|---|
| UK Gambling Commission | Great Britain only | GAMSTOP | Free independent ADR | Disclosure only |
| Spelinspektionen (Sweden) | Sweden only | Spelpaus | Consumer board (non-binding) | No rule found |
| Spillemyndigheden (Denmark) | Denmark only | ROFUS | Consumer complaints board (binding) | Segregated, bankruptcy-protected |
| GGL (Germany) | Germany only | OASIS | Courts only | No rule found |
| ANJ (France) | France only; no online casino | National gambling ban | Free mediator | No rule found |
| DGOJ (Spain) | Spain only | RGIAJ | The DGOJ itself | No rule found |
| EMTA (Estonia) | Estonia | HAMPI | EMTA (supervisory) | No rule found |
| Malta Gaming Authority | International; no EU passport | None for online | Free ADR or MGA player support | Segregated |
| Gibraltar Gambling Commissioner | International | None found | Commissioner (advice only) | Disclosure only |
| Isle of Man GSC | International; not the UK | None found | GSC decides (non-UK players) | Segregated, 100% on trust |
| Curaçao Gaming Authority | International | None for online | Certified independent ADR | No blanket rule |
| Kahnawake Gaming Commission | International | Permanent, network-wide | KGC decides | Identifiable and liquid |
| Tobique Gaming Commission | International; 21 restricted countries | Operator by operator | ADR after two months | Segregated on paper |
| Anjouan Gaming | International | None | Approved ADR providers | Stated, no mechanism |
Two patterns stand out. National market regulators protect players inside their borders far better than any international licence, but almost none of them decide disputes. And the regulators that do rule on complaints themselves are a surprising mix: Spain’s DGOJ, the Isle of Man and Kahnawake. Each name in the table has a full review, linked above, with the evidence behind every cell.
Who Actually Enforces the Rules?
Rules only matter if someone applies them. The published enforcement records of the authorities we review could hardly be more different:
- UK: the largest regulatory penalty in our set, £19.2 million against William Hill in 2023, and a £5 million penalty against the Rank Group in October 2026.
- Sweden: a SEK 40 million fine against bet365’s operator, upheld by the Court of Appeal in October 2026.
- Spain: 221 published sanctions worth over €506 million since 2021, most of them €5 million fines on unlicensed offshore operators.
- Isle of Man: five civil penalties since 2024, the largest £3.94 million, all against firms that had already surrendered their licences.
- Malta: 30 administrative penalties in 2025, totalling €162,520.
- France: a largest-ever sanction of €800,000, for a self-exclusion failure, with operators usually anonymised.
- Curaçao: an enforcement register listing dozens of revoked licences.
- Anjouan and Tobique: no published fines or sanctions at all.
A regulator that has never published a sanction isn’t necessarily lenient, but it hasn’t shown you that it isn’t.
How to Verify a Casino License in Five Minutes
-
Step 1
Find the licence holder's company name, the regulator and the licence number in the casino's footer or terms and conditions. A licensed site should state all three.
-
Step 2
Open the regulator's official register yourself, by typing its address or using the links in our reviews, rather than trusting a badge in the footer.
-
Step 3
Search for the company and check that the status is active, not suspended, expired or revoked.
-
Step 4
Confirm the exact website you are on is listed for that licence holder. Most registers list approved domains, and a licence for one site doesn't cover another.
-
Step 5
If the regulator uses a validator seal, as Curaçao and Tobique do, click it and make sure it opens on the regulator's own domain. Then check its list of fake or blocked sites.
Why the extra care? Because licences get faked. In October 2026 the Isle of Man regulator warned that sites were copying its licences and crest, and Tobique keeps a growing list of domains falsely claiming its seal. A logo proves nothing; the register does.
Red Flags in a Casino's License Claim
Most fake or weak licence claims give themselves away. Be cautious if you see any of these:
- No licence number, or a number that doesn’t appear on the regulator’s register.
- A different company named in the footer, the terms and the register.
- A seal that opens a page on the casino’s own domain or a look-alike address, rather than the regulator’s site.
- An expired or suspended status. Registers such as Anjouan’s show expiry dates, and some casinos keep displaying licences that have lapsed.
- Accepting players its own licence excludes, such as a Tobique licensee taking UK players, or any offshore site serving a country that requires a local licence.
- Several licences claimed, none checkable. Real multi-licensed operators list each licence with its own number and company.
Casino Without License: What You Risk
Some players go looking for a casino with no license, usually to get around limits, identity checks or a self-exclusion they set themselves. We don’t recommend it, and we don’t list such sites. Here’s what you give up:
- Any regulator to turn to. Regulators can’t help with sites they don’t license; Estonia’s says so plainly, and Germany’s GGL warns there is “no practical way to enforce claims”.
- Your self-exclusion. Unlicensed sites aren’t connected to GAMSTOP, ROFUS, OASIS, Spelpaus or any other register, which is precisely why they attract people who are trying to stop.
- Tested games and protected data. Nobody checks that games are fair or that your documents are stored safely.
- Your access. Regulators block unlicensed sites: Germany had made 1,843 unreachable by the end of 2025, France blocked 1,290 URLs in 2025 and Denmark 334 sites. Germany also cuts off payments.
In some countries, playing itself is the offence. In Germany, taking part in unlicensed gambling can be punished under section 285 of the Criminal Code with up to six months in prison or a fine, and Mauritius bars people on the island from gambling on offshore sites. In most other countries we cover, enforcement targets operators rather than players, but you lose every protection all the same.
One distinction matters: a casino without a license for your country isn’t the same as a casino with no licence at all. Many reputable sites hold a Malta or Curaçao licence and accept players from countries without their own regime. What matters is whether your country requires a local licence, and whether the licence the casino holds gives you anywhere to turn.
A licence is only as useful as the regulator behind it. No licence means no regulator at all.
Which Licence Should You Look For?
The right licence depends less on the casino than on where you live:
- If your country runs its own regulated market, such as Great Britain, Sweden, Denmark, Germany, France, Spain or Estonia, play only with operators licensed there. You get the national self-exclusion register, the local complaint route and, in most cases, compulsory limits, and many offshore sites are blocked anyway.
- If your country has no licensing regime of its own, an international hub licence is the stronger choice: Malta and the Isle of Man require segregated player funds, and Malta licensees must offer free ADR.
- If you’re considering an offshore-licensed casino, check three things first: that the licence is live on the register, that there’s a real complaint route (Kahnawake’s own process, or Curaçao’s certified ADR), and that your country isn’t excluded by the operator’s own licence.
Whatever the licence, judge the casino on its own record too. Our casino reviews do exactly that.
Where to Complain When a Licensed Casino Won't Pay
Always start with the casino’s own complaints process and keep every message. After that, the route depends on who licensed the casino:
- The regulator decides: Spain’s DGOJ handles complaints against its licensees within a 55-day commitment, the Isle of Man GSC decides complaints from non-UK players, and Kahnawake can direct an operator to pay withheld funds.
- Free independent ADR: UK, Malta and Curaçao licensees must offer an approved alternative dispute resolution provider at no cost to you. Anjouan lists four approved providers.
- A mediator: France’s gambling mediator handled 1,856 requests in 2025; its proposals aren’t binding.
- A consumer board: in Denmark the Consumer Complaints Board issues binding decisions; in Sweden the National Board for Consumer Disputes gives non-binding recommendations.
- The courts: Germany’s GGL doesn’t handle payout disputes and points players to a lawyer.
If a casino claims a licence but none of these routes leads anywhere, that tells you something about the licence.
National Self-Exclusion Registers Compared
A national register lets you block yourself from every licensed site in a country with one request, something no operator-level tool can match. These are the national schemes run by the authorities we review:
| Scheme | Country | People registered |
|---|---|---|
| GAMSTOP | Great Britain | 614,738 (July 2026) |
| Spelpaus | Sweden | 143,797 (October 2026) |
| RGIAJ | Spain | About 115,556 (end of 2025) |
| Interdiction volontaire de jeux | France | 87,182 (end of 2025) |
| ROFUS | Denmark | 74,714 (September 2026) |
| HAMPI | Estonia | 20,149 (end of 2025) |
| OASIS | Germany | Not published by the GGL |
Malta, Gibraltar, the Isle of Man, Curaçao, Anjouan and Tobique have no national online scheme, so self-exclusion there works casino by casino. Kahnawake is the exception among offshore regulators, with a permanent exclusion that covers all its licensees.
How to Get a Casino License
If you’re asking what license you need for an online casino, the honest answer is: one for every regulated market you want to serve. A B2C licence lets a company offer games to players; a B2B licence covers suppliers such as game studios and platforms; and in some places, such as the Isle of Man, a sub-licence lets a smaller brand operate under a full licensee. Curaçao, once the home of sub-licensing, abolished it under its 2024 gambling law.
Whichever gaming license a casino applies for, the steps are broadly the same:
- Set up the right company. Malta requires an EU or EEA company, Curaçao a local company with a resident director, and the Isle of Man a Manx company with two resident directors.
- Pass fit-and-proper checks on owners, directors and key staff, including the source of their funds.
- Write the policies: anti-money laundering, responsible gambling, complaints and terms, often with a named ADR provider.
- Certify games and systems with an approved test lab and, in many places, a technical audit before going live.
- Meet local substance rules, from servers on the island (Isle of Man) to a data store in the country (Spain).
- Pay the fees and wait. The UK targets 16 weeks, the Isle of Man 10 to 12, and Estonia up to six months for its activity licence.
How Much Does a Casino License Cost?
Official casino license fees range from a few thousand euros to well over a million pounds a year, and that’s before tax. These are the published figures for an online casino (B2C) licence:
| Authority | Application fee | Annual fee | Gambling tax |
|---|---|---|---|
| UK | £8,185–£165,069 | £7,000 to £1.45m+ (by gross yield) | 40% Remote Gaming Duty |
| Malta | €5,000 | €25,000 + compliance contribution | 15% casino, 10% other (Maltese players) |
| Gibraltar | £30,000 | £50,000–£200,000 | 0.15% of gross profit |
| Isle of Man | £5,250 | £36,750 | 1.5% to 0.1% of yield |
| Denmark | DKK 343,300 | DKK 73,200–6,447,500 | 28% of GGR |
| Sweden | SEK 230,000 | SEK 240,000 supervision fee | 22% of net gaming revenue |
| Spain | €10,000 per licence | Up to 0.75‰ of stakes, plus a €2m guarantee | 20% of net revenue |
| Estonia | €47,940 + €3,200 permit | Not published (€1m share capital required) | 5.5% of net gaming revenue |
| Germany | Based on expected stakes (0.2% up to €40m) | Not published | 5.3% of stakes |
| France | Not published | Not published | 59.3% of GGR (sports betting); no online casino |
| Curaçao | €4,592 | €47,450 | No gaming tax |
| Kahnawake | US$35,000 | US$20,000 | None published |
| Anjouan | €17,828 | €17,828 | None published |
| Tobique | No official schedule | No official schedule | None published |
So how much is a casino license really? The fees are the smallest part. Gambling license cost estimates from consultants usually add company formation, local staff, legal work, game certification and technical audits, and the tax bill dwarfs everything for a successful operator: the UK’s Remote Gaming Duty doubled from 21% to 40% in April 2026. Be wary of any online casino license costs quoted without a source; many guides still repeat fees that changed years ago.
What Changed for Gambling Licences in 2025 and 2026
- UK: Remote Gaming Duty rose to 40% on 1 April 2026, and bonus wagering has been capped at 10 times since January 2026.
- Malta: since 1 October 2026, gaming tax on Maltese players is 15% for casino games and 10% for other types, up from a flat 5%.
- Gibraltar: the Gambling Act 2025 took effect on 1 April 2026 with new tiered licence fees.
- Curaçao: the old sub-licence seals expired in October 2025, and the regulator’s online portal went offline in October 2026.
- Isle of Man: the online register shrank from 72 licences in August 2025 to 51 in October 2026.
- Germany: since July 2026 qualifying players aged 21+ can be offered slot stakes of €3 or €5, above the €1 default.
- Spain: joint deposit limits across all operators start on 25 March 2027.
- Denmark: the National Audit Office called the regulator’s online oversight “unsatisfactory” in April 2025.
- EU: in April 2026 the EU Court of Justice confirmed that German players can seek to recover losses from operators that served them during Germany’s online ban.
How We Rate Licensing Authorities
Every authority on this page gets a Trust Score from 0 to 10, the average of six category scores:
- Player protection standards: what the rules require, from fund segregation and limits to self-exclusion.
- Enforcement track record: published fines, suspensions and revocations, and whether rules are actually applied.
- Licence verification tools: how easy it is to confirm a licence, from registers with domains to validators.
- Complaint resolution: whether players have a real, affordable route to a decision.
- Transparency: published laws, fees, statistics and decisions.
- Industry reputation: independent audits, court rulings and the regulator’s standing with its peers.
We also place each authority in a tier. Tier 1 covers national market regulators and the established hubs; Tier 2 covers offshore regulators with published rules and some track record; Tier 3 covers regimes whose legal standing or oversight we couldn’t verify. Tiers are our editorial classification, not an official ranking.
Each review is researched from primary sources: the regulator’s own laws, fee schedules, registers, annual reports and decisions, cross-checked against court rulings and reputable reporting, and dated so you know how fresh the facts are. Where sources conflict, we say so.
The Bottom Line on Gambling Authorities
A gambling license is the first thing to check and the last thing to rely on alone. If your country runs its own regulated market, its licence will almost always protect you best. If it doesn’t, the difference between a Malta or Isle of Man licence and an Anjouan one is the difference between a regulator that supervises and one that mostly issues certificates.
Check the register, match the domain, know where you’d complain, and use the reviews above to see what each licence is really worth.