Published May 22, 2026 · By Editorial Team · 8 min read

Kenya's October 2025 VASP Act Creates the First Crypto-Casino Compliance Architecture in East Africa

Kenya's Virtual Asset Service Providers Act, enacted October 8, 2025, establishes the country's first comprehensive cryptocurrency licensing framework with regulatory authority split between the Capital Markets Authority and the Central Bank of Kenya. For the country's growing crypto-gambling user base — estimated at 1.4 million wallets active in 2025 — the framework introduces formal compliance obligations on the payment-rail side without directly regulating offshore casino operators.

What happened

The VASP Act, formally titled the Virtual Asset Service Providers Act 2025, passed Kenya's National Assembly on August 14, 2025 and received presidential assent on October 8, 2025. It defines virtual asset service providers as entities engaged in exchange between virtual assets and fiat currencies or other virtual assets, transfer of virtual assets, safekeeping and administration of virtual assets, and financial services related to virtual asset offerings.

Regulatory authority is divided. The Capital Markets Authority (CMA) supervises VASPs providing exchange, safekeeping and asset administration services and operating digital token issuance platforms. The Central Bank of Kenya (CBK) supervises VASPs involved in payment, custodial wallet services and transfer functions. Both regulators jointly developed the implementing regulations published in December 2025.

The Act requires VASPs operating in Kenya or serving Kenyan residents to obtain dual licensing where their service offerings span both regulatory remits. Capital requirements are tiered: KES 50 million (approximately $387,000) for exchange services, KES 30 million (approximately $232,000) for transfer-only services, and KES 100 million (approximately $774,000) for combined service offerings. Annual compliance fees, AML programme requirements, and Kenyan-resident director and compliance officer obligations apply.

The licensing window opened January 1, 2026 with a six-month transitional period through June 30, 2026 for existing operators to file applications. As of April 2026, the CMA has confirmed 23 active applications under review, including major exchanges Binance, Bitstamp, Yellow Card, Kotani Pay and HoneyCoin. The CBK has confirmed 17 active applications under its remit, with significant overlap with the CMA filings for combined-service operators.

Why it matters

Kenya is Sub-Saharan Africa's most developed mobile-money market, with M-Pesa penetration exceeding 96% of adults and approximately 67% of GDP flowing through mobile money in 2024. Crypto adoption has been substantial, with Chainalysis ranking Kenya 21st globally for grassroots adoption in its 2024 Global Adoption Index. The combination has produced a distinctive payment-flow architecture in which M-Pesa serves as the fiat on/off ramp and USDT on TRC20 or BNB Chain serves as the cross-border store of value.

For online gambling, the structural significance of the VASP Act is the formalisation of the crypto-fiat conversion path. Kenya's Betting Control and Licensing Board (BCLB) under the Ministry of Interior regulates the domestic gambling industry, licensing operators including SportPesa, Betika, Odibets, MozzartBet, Helabet and dozens of smaller brands. These operators accept Kenyan shilling deposits via M-Pesa, Airtel Money and bank transfer; none operate crypto deposit infrastructure under their BCLB licences.

Crypto-casino flows from Kenyan players occur predominantly through offshore Curacao or Anjouan-licensed operators. The typical flow has been: Kenyan player receives M-Pesa shillings, converts to USDT via P2P or licensed exchange (Yellow Card, Kotani Pay), deposits USDT to offshore casino, plays in USDT, withdraws USDT, converts back to shillings via the same exchange and receives M-Pesa credit. Each step in this flow involves a now-VASP-regulated counterparty on the conversion side.

The VASP Act does not regulate the offshore casino itself; that responsibility remains with the licensing jurisdiction of the operator. But the on/off-ramp VASPs now face KYC, source-of-funds, transaction-monitoring and reporting obligations that may affect their willingness to process gambling-related flows. Kenyan-licensed exchanges will face explicit choices: serve gambling-related conversion flows under their licence (with associated reporting obligations) or refuse them.

For BCLB and Kenyan tax authorities, the VASP framework creates new visibility into previously opaque flows. The Kenya Revenue Authority's 7.5% gambling-winnings withholding tax on amounts above KES 1,000 applies regardless of platform; previously, offshore-platform winnings were largely outside KRA enforcement reach. With VASP reporting requirements creating audit trails for the conversion side of the transaction, tax enforcement against offshore-platform users becomes mechanically possible.

Who is affected

Kenyan exchanges and on/off-ramp providers face the most direct compliance burden. Yellow Card, Kotani Pay, HoneyCoin and BitKE all operate Kenya-resident operations subject to mandatory VASP licensing. The capital requirements are absorbable for the larger operators but exclude smaller informal P2P market makers, who have provided meaningful share of conversion volume historically. Informal P2P flows are likely to migrate to non-Kenyan platforms with Kenyan-resident traders, creating an enforcement-displacement effect.

Kenyan crypto-casino players face increased KYC friction on the conversion side. Exchanges previously able to onboard users with M-Pesa verification will now require additional documentation under the VASP-mandated KYC standards including national ID, proof of address and source-of-funds for larger transactions. Casual users transacting small amounts will see minimal change; users handling larger sums will face more extensive verification.

Offshore casino operators serving Kenyan players retain operational flexibility but face increased due-diligence pressure on the payment-rail side. Operators including Stake, BC.Game, Rollbit and Bitcasino.io continue to accept Kenyan players via standard crypto deposit infrastructure; the conversion friction sits one step upstream at the Kenyan exchange. Operators with Kenyan-targeted marketing may see modest conversion-rate decline as new users encounter VASP-mandated KYC at their first conversion.

BCLB licensees serving the domestic shilling-denominated market are largely unaffected. SportPesa, Betika, Odibets and other Kenya-licensed operators continue to process M-Pesa flows under BCLB regulation independent of the VASP regime. The competitive position of these domestic operators improves marginally because the offshore-platform alternative path becomes more friction-laden.

Kenyan tax authorities gain enforcement infrastructure. KRA's existing 7.5% gambling tax can now be assessed against offshore-platform users by following the VASP-reported conversion trail. The first significant enforcement cases under this framework are anticipated in the 2026-27 tax year.

What players should do

Kenyan crypto-casino players should expect three categories of change in 2026. First, KYC verification at licensed exchanges will become more extensive; players should prepare to provide national ID, proof of address (utility bill or bank statement) and, for larger transactions, employment or income documentation. Second, transaction monitoring will be more rigorous; flagged transactions may face hold periods or require additional explanation. Third, tax obligations on gambling winnings will become more enforceable; players should maintain records of deposits, withdrawals and net positions.

Players considering whether to use licensed Kenyan exchanges versus offshore alternatives should weigh the trade-offs explicitly. Licensed exchanges provide regulatory protection, formal complaints procedures and compliant tax reporting. Offshore exchanges or P2P channels provide reduced KYC friction but no Kenyan-jurisdiction recourse and increasing legal exposure as the VASP regime matures.

For deposit method selection, USDT on TRC20 or BNB Chain remains the dominant cost-efficient option. Players should verify their chosen casino's supported networks and select the lowest-fee option compatible with their exchange's withdrawal options. Yellow Card supports TRC20, ERC20 and BNB Chain USDT withdrawals; Kotani Pay focuses on TRC20 with newer BNB Chain support.

Players seeking to operate entirely within the licensed Kenyan environment should consider BCLB-licensed operators for gambling and licensed exchanges for any crypto activities. This combination provides full regulatory recourse and tax compliance at the cost of reduced product range and increased verification friction. Players prioritising product range, lower friction or specific crypto-native features should use offshore operators with explicit acceptance that tax obligations and dispute-resolution access become weaker.

Conclusion

Kenya's VASP Act is the first significant regulatory architecture for crypto-financial activity in East Africa. Its impact on the gambling sector is indirect but material: by formalising the on/off-ramp compliance burden, it makes the offshore-platform path more friction-laden and provides Kenyan tax authorities with the audit-trail infrastructure they previously lacked. For the next 12 to 24 months, the licensing rollout, the development of formal complaint procedures, and the enforcement track record will determine whether the framework functions as designed. For Kenyan crypto-casino players, the immediate implication is that the easy on/off-ramp era is closing and that maintaining records of deposits and withdrawals is now an operational necessity rather than a tax-advisory recommendation.