What a casino licence actually requires

Licensing regimes differ in cost, prestige and market access, but the shape of what they ask for is remarkably consistent. If you understand the seven blocks below, you can read any regulator's application pack without being surprised by it.

One note before the detail: gambling regulation moves, and specific requirements and fees change from year to year. Treat this as a map of the terrain rather than current legal advice, and confirm the specifics with the regulator or a licensing lawyer before you file.

1. A corporate entity the regulator can assess

Licences go to companies, not to people or to brands. Expect to incorporate in or near the jurisdiction, show a minimum capital position, and in many regimes demonstrate local substance: a registered office, local directors or a resident key function holder, and real decision-making in the jurisdiction rather than a letterbox.

2. Fit and proper checks on everyone behind it

This is where applications actually stall. Regulators want to identify every ultimate beneficial owner and senior officer, and then satisfy themselves about each one: criminal record checks, financial standing, professional history, and a documented source of the funds being invested.

The most common cause of delay is not the regulator being slow. It is a UBO chain that cannot be fully documented, or a source of funds trail with a gap in it.

If your ownership runs through several holding companies in different countries, start collecting that paperwork months before you intend to file.

3. AML and counter-terrorist financing policy

You need a written AML policy that matches how your business will really run, a named officer responsible for it, customer due diligence thresholds, enhanced due diligence triggers, ongoing transaction monitoring rules, and a documented suspicious activity reporting route. Regulators read these for signs they were copied from a template: policies that reference payment methods you do not offer, or thresholds in a currency you do not accept, get noticed.

4. Responsible gambling and player protection

Required in every serious regime, and increasingly the part regulators examine most closely:

• Deposit, loss and session limits that players can set themselves, with increases subject to a cooling-off period.
• Time-out and self-exclusion that works immediately and cannot be reversed on a whim.
• Reality checks and session reminders.
• National register integration where the market operates one, so an excluded player cannot register with you at all.
• Age verification before play, not before withdrawal.
• Marketing restrictions, including bonus terms and who you may advertise to.

These are platform features, not policies you can write your way out of. When you evaluate a platform, check each one works in the markets you are entering.

5. Player funds protection

Most regimes require player balances to be held separately from operating money, and some grade licences by how strongly those funds are protected, from basic segregation up to trust arrangements or bank guarantees. Your platform has to be able to report the player liability figure accurately and on demand, because that is the number the regulator and your auditor will both ask for.

6. Technical certification of the platform

This is the part that belongs to your supplier. An accredited independent test house assesses the platform against the jurisdiction's technical standards, typically covering:

• Random number generation and game fairness, including return to player verification.
• Bonus and wagering logic, so advertised terms match what the system enforces.
• Player account and wallet integrity, including transaction records that reconcile.
• Responsible gambling controls behaving as specified.
• Reporting into the regulator's data feed, where the market operates one.

Ask any prospective provider which test house certified their platform, for which markets, and when. "Certified" with no jurisdiction attached is not an answer. If you are already live and considering a move, certification lead time belongs in your plan, as covered in how casino platform migration works.

7. Ongoing reporting, forever

A licence is not a one-off hurdle. Expect periodic regulatory returns, annual audited accounts, compliance audits, incident reporting within fixed deadlines, and in regulated markets a live or near-live data feed to the regulator. Each of these is a platform capability, so confirm your provider supports your specific market's feed before you sign anything.

A note on jurisdictions

Broadly, you are choosing between three groups. Established regulated markets such as Malta and the larger European national regimes bring credibility, banking access and better payment terms, in exchange for cost, substance requirements and genuine scrutiny. National markets such as Romania, Greece or Ontario are the only legal route into their own territory and usually come with a local data feed and local tax. Offshore regimes, with Curaçao reformed under its own gaming authority and newer entrants such as Anjouan, are faster and cheaper to enter, and the trade-off appears later in payment provider appetite and in which markets you can legitimately serve.

Pick based on where your players actually are and what your payment providers will accept, not on application cost. A cheap licence that no serious PSP will support is not cheap.

Where the platform carries the load

Roughly: you own the corporate structure, the UBO paperwork, the policies and the reporting discipline. Your platform owns certification, the responsible gambling toolset, the audit trail and the reporting plumbing. We build the second half, including KYC and automated identity checks, limits and self-exclusion handling, the bonus logic that has to match your published terms, and the reporting a regulator or auditor will ask for.

The casino platform overview shows what is included. If you are weighing jurisdictions, tell us which markets you are targeting and we will tell you what the platform side involves for each.

Questions we get asked