Compliance

Gambling licence: what it allows and what it requires

A gambling licence (operator licence) is a regulator's permission to accept players and bets in specific markets. In return, the operator meets its requirements: KYC and AML, responsible gambling tools, certified games, geo-blocking, reporting and complaint handling.

Yevhen SychovOctober 2026

Local and international

This is about the B2C licence for those who accept players. Game and platform suppliers need their own B2B licence in a number of markets.

Local licenceInternational (offshore)
Where it is validin the market that issued itin several markets, except prohibited countries
Requirementsstricter: its own rules on bonuses, advertising, limits and taxesusually softer, but KYC, AML and responsible gambling are included too
Entryslower and more expensivefaster and cheaper

A market with its own regulation usually requires a local licence, and an international one does not replace it. The list of restricted countries is set by the licence itself and by each market's law. You can launch a brand without your own licence through a white label.

What a licence usually requires

  • KYC and AML: identity and age checks, source of funds checks, payment monitoring.
  • Responsible gambling: limits, time-outs, self-exclusion, marketing rules.
  • Certified games: games and the random number generator (RNG) are tested by an accredited lab, and RTP matches the stated figure.
  • Geo-blocking: players from restricted countries cannot register or deposit, and no advertising targets those countries.
  • Reporting: regular reports to the regulator, with content and frequency set by the licence.
  • Complaints: a clear procedure and response times, and under some licences also independent dispute resolution.

What breaches lead to

The regulator can issue a fine, or suspend or revoke the licence. Payment and game partners often leave next: a valid operator licence is a condition of their contracts.

Typical grounds for sanctions do not come from the legal team: an email to a self-excluded player, a bonus for a player showing risk markers, advertising aimed at a restricted country. This is the territory of CRM, VIP and marketing. That is why exclusions are checked automatically before every send.

Common mistakes

  • Letting in traffic from restricted countries. An affiliate brought players, but geo-blocking only works at the entry point. Check the country by IP, documents and payment method.
  • Treating the licence as a one-off task. Requirements change, and licences are renewed and audited. Compliance is needed all the time, not just before an audit.
  • Deciding by eye. Verification thresholds and exclusion rules are set down in a policy, otherwise the outcome depends on a manager's mood.
All glossary terms