Crypto Casino Licensing Explained

License comparison at a glance

Jurisdiction	Cost	Player Protection	Verify At
Curaçao (CGCB)	~$50k/yr	Medium	gaming-curacao.com
Anjouan	~$25k/yr	Low-Medium	anjouan.io
Malta (MGA)	~$200k+/yr	High (EU)	mga.org.mt
Gibraltar	~$120k+/yr	High	gibraltar.gov.gi
Isle of Man	~$80k+/yr	High	gov.im
Kahnawake	~$30k/yr	Medium	gamingcommission.ca
Estonia	~$60k/yr	High (EU)	emta.ee

Curaçao GCB reform 2024-2026

The Curaçao Gaming Control Board (GCB) ran a multi-year transition that fundamentally changed how the island licenses online operators. Under the legacy regime, four "master licensees" — Antillephone N.V., Cyberluck Curaçao N.V. (Curaçao eGaming), Gaming Curaçao, and Curaçao Interactive Licensing — issued cheap sub-licences with minimal vetting. That structure dissolved when the National Ordinance for Games of Chance (LOK) took effect in late 2024 and replaced it with direct licensing from the GCB itself.

By Q1 2026 the GCB registry shows 712 active direct licences across roughly 480 operating companies, with another 90 applications under review. The new framework mandates ringfenced player funds, a published complaint procedure, third-party RNG certification, AML reporting under the Caribbean Financial Action Task Force standard, and an annual fitness-and-propriety check on ultimate beneficial owners. Annual licence cost runs around 50,000 USD plus a 12,000 USD supervisory levy.

How to verify a Curaçao licence number on gaming-curacao.com

Visit the official GCB portal at gaming-curacao.com and open the public register. Licence numbers under the new framework follow the format OGL/YYYY/NNNN/XXXX (for example OGL/2024/1451/0918 issued to Stake.com's operating entity). Enter the number in the search field. A valid record displays the licensee company, registered address, ultimate beneficial owner disclosure status, scope (casino / sportsbook / lottery), issue date, expiry, and live status. If the search returns "Not Found" or shows a different company name than the casino's footer, treat the licence as fraudulent.

Casinos with verified Curaçao licences in our database: Stake.com, Duel.com, BC.Game, Roobet, BitStarz, Cloudbet, Bitcasino, 7Bit, FortuneJack, TrustDice, BetFury, Winz.io, and MegaDice. Full guide: Curaçao license explained.

Anjouan AOFA licences

Anjouan is the largest island of the Union of Comoros in the Indian Ocean. Its gambling regulator, the Anjouan Offshore Finance Authority (AOFA), began issuing online gaming licences in 2023 through a Singapore-based intermediary. By March 2026 around 215 active Anjouan licences exist, making it the second-most-common offshore jurisdiction behind Curaçao. AOFA licensing costs operators roughly 25,000 USD per year — half the Curaçao figure — with a faster six-to-eight-week issuance timeline.

The trade-off is lower oversight. AOFA requires no segregated player accounts, no formal complaint adjudication, and no published licensee register comparable to the GCB portal. Operators submit annual self-attestations rather than independent audits. Player remedies in case of dispute are limited to the operator's internal team and any voluntary alternative-dispute-resolution provider.

How to identify an Anjouan-licensed casino

Anjouan licence references typically follow the pattern ALSI-NNNNNNNN-FIN or similar, displayed in the footer with a seal that links to anjouan.io or the Anjouan eGaming portal. The seal should open a license certificate showing the licensee company, jurisdiction (Anjouan, Comoros), and validity dates. A static seal image with no clickable link or one pointing to an unaffiliated domain is a red flag.

Treat a casino with an Anjouan licence as acceptable only if it also holds a Curaçao or comparable second-tier licence, or if it has an established multi-year track record with verifiable withdrawal evidence. Full guide: Anjouan license explained.

Malta Gaming Authority (MGA)

The MGA is the strictest mainstream jurisdiction that licenses online gambling for the global market. Established under the Malta Gaming Act 2018, it issues two relevant licence classes: B2C (operator) and B2B (game supplier). A B2C licence costs around 200,000 EUR in capital plus 25,000 EUR annual fees, with compliance audits twice a year and ongoing player-fund segregation requirements. The MGA register at mga.org.mt is public and searchable by company or licence number.

As of Q1 2026 the MGA lists 312 active B2C licensees. Of these, fewer than 30 are crypto-first operators. The reason most crypto casinos avoid MGA is structural: MGA mandates KYC at deposit, daily transaction reporting to the FIAU under EU AMLD6, segregated bank accounts in MGA-approved institutions, and exit barriers that include a six-month winding-down notice. Crypto operators that grew on no-KYC quick deposits cannot retrofit those flows under MGA rules without losing core product positioning.

Operators that did secure MGA crypto authorization include Bitcasino's EU-facing entity, Cloudbet's regulated tier, and Mr Vegas Casino's crypto deposit gateway. These typically run a separate stricter brand for EU users alongside their global Curaçao operation.

Gibraltar, Isle of Man, Alderney

Three smaller jurisdictions issue gambling licences with reputable oversight but rarely host crypto-first operators.

Gibraltar Licensing Authority

Gibraltar issues B2C remote gambling licences through the Gibraltar Licensing Authority (GLA) under the Gambling Act 2005. Around 32 active operators hold Gibraltar licences in 2026, almost all UK-facing fiat brands such as bet365, William Hill, and Entain group brands. Licence cost is roughly 120,000 GBP per year. Gibraltar has not approved a crypto-only casino since 2022 — UK regulatory alignment makes anonymous crypto play incompatible.

Isle of Man Gambling Supervision Commission

The Isle of Man GSC licenses around 70 operators including a small number of crypto-friendly platforms. The 2018 Designated Businesses (Registration and Oversight) Act extended AML coverage to crypto exchanges and the GSC has accepted crypto wagering since 2017. Licensing fees run 35,000 GBP setup and 80,000 GBP annual. Public register at gov.im/gambling.

Alderney Gambling Control Commission

Alderney, a small Channel Island, hosts the Alderney Gambling Control Commission (AGCC) which licenses 18 active operators in 2026. AGCC is respected for player-funds protection — operators must hold balances in trust accounts — but the jurisdiction has not pivoted toward crypto-native operators.

Across all three, a crypto casino holding one of these licences is exceptional and worth verifying carefully against the regulator's public register.

Costa Rica "data-processing" registrations

Costa Rica has no gambling regulator and issues no online casino licences. What it does issue is a generic data-processing business registration through the Registro Nacional. This filing certifies a company exists and pays municipal taxes — nothing more. Operators that footer-cite "licensed in Costa Rica" are leveraging a 200 USD business registration to imply regulatory oversight that does not exist.

The Costa Rica registration provides zero player protections: no complaint mechanism, no fund segregation, no RNG certification requirement, no AML supervision, no operator vetting. According to data from eCOGRA and Casino Reports, dispute resolution success rates at Costa Rica-only casinos run under 20 percent, versus 65 percent at Curaçao-licensed sites. Treat any Costa Rica-only operator as functionally unlicensed.

How to verify any licence — step by step

A consistent 6-step process works for every jurisdiction.

1. Find the licence number in the casino footer. Reputable operators display it as a clickable seal, not a static image. Note the company name listed alongside.
2. Open the official regulator URL directly in your browser — never click the casino's seal link. Curaçao GCB: gaming-curacao.com. Malta MGA: mga.org.mt. Gibraltar: gibraltar.gov.gi. Isle of Man: gov.im/gambling. Anjouan: anjouan.io.
3. Locate the public register or licensee search. All four major regulators publish one. Anjouan's register is less comprehensive but issues verification certificates on request.
4. Search by licence number first, company name second. Confirm the licensee company on the regulator entry matches the company named in the casino's terms of service.
5. Check live status, issue date, and expiry. Status must read "Active" or "Current". "Suspended", "Revoked", "Surrendered", or "Pending" all mean do not deposit.
6. Cross-reference with independent watchdogs. Sites like AskGamblers and Casino Guru publish complaint histories and operator changes that surface licence issues before regulators update.

Full step-by-step with screenshots: how to spot a fake licence.

What happens when a licence is revoked

Mid-2025 brought the largest cluster of Curaçao licence revocations in the GCB's history. Between April and August 2025 the regulator pulled 28 licences — predominantly small operators that failed to meet the LOK transition deadline of 31 March 2025 or that lost their ultimate beneficial owner fit-and-proper status. Three mid-tier brands with combined player liabilities over 4 million USD were among them.

Player remedies after revocation depend on the framework. Under the LOK, the GCB can compel the operator to release ringfenced player balances under regulatory supervision. In the 2025 wave, recovery rates averaged 65 percent on disputed balances, with median time-to-payment of 92 days. Under Anjouan AOFA — which has no segregation mandate — recovery falls to roughly 18 percent and depends entirely on whether the operator winds down cooperatively or simply vanishes.

Practical playbook when news of regulatory action breaks: withdraw your full balance immediately, screenshot the cashier confirmation, save any operator communications, and if withdrawals are blocked file a complaint with the relevant regulator within 72 hours. Document the licence number, transaction IDs, and timeline. See licence renewal cycles for early-warning signals.

How to verify any license claim

5-minute independent verification using only public sources:

1. Find the license number on the casino footer (e.g. "OGL/2024/1451/0918").
2. Open the regulator's official website (use the verify-at column above — never trust links on the casino itself).
3. Search by license number or company name. Real licensees appear with: licensee company, status (active/suspended/revoked), date issued.
4. Cross-check the company name with what the casino displays in their T&Cs (must match).
5. Check status. "Active" = OK. "Suspended" / "Revoked" / "Not Found" = abandon.

Full step-by-step: how to spot a fake license.

Other jurisdictions worth knowing

Beyond the six top-tier regulators, several second-tier jurisdictions appear in crypto casino footers. Understanding them prevents both false negatives (dismissing a legitimate niche licence) and false positives (accepting a paper-only registration).

Kahnawake Gaming Commission

The Kahnawake Gaming Commission operates from the Mohawk Territory in Quebec, Canada, and has issued online gambling licences since 1999. As of 2026 the commission lists 38 active licensees including a small crypto-friendly contingent. Annual fees run around 30,000 USD. Kahnawake is respected for stability — many of its operators have held licences for 15+ years — but its complaint resolution speed lags behind Curaçao and Malta. Public register at gamingcommission.ca.

Estonia Tax and Customs Board

Estonia issues EU-recognised gambling licences through its Tax and Customs Board (Maksu ja Tolliamet). Around 25 licensees including remote casino operators. Estonia accepts crypto deposits under stricter conditions than offshore jurisdictions but offers the full benefit of EU consumer protection law. Annual fee around 60,000 EUR. Verify at emta.ee.

Tobique (Mi'kmaq First Nation)

A newer Canadian First Nation-issued framework that began licensing online operators in 2022. Around 11 active licences as of 2026. Limited public-register visibility and less industry track record than Kahnawake; treat as Tier 3.

Tipos / Tipico-style Latin American registrations

Several Latin American countries — Panama, Cyprus historically, and Honduras — issue limited or paper-only licences that some crypto casinos cite. These vary widely in legitimacy. Verify each against the issuing authority's website; if no public register exists, treat as functionally unlicensed.

License red flags

• Static seal image — real license seals are clickable + link to the regulator. If clicking does nothing, fake.
• Old Curaçao master license — anything pre-2023 references to "Antillephone N.V. license #8048/JAZ" is the legacy system. Casinos using only this number have not migrated to the new framework.
• Company name mismatch — T&Cs say "Acme N.V." but regulator lists "Bravo Holdings". Either wrong, or operator is using someone else's license illegally.
• "License pending" — not a license. Don't deposit.
• Self-issued certificates — some sites display made-up "International Gaming Authority" logos. There is no such global authority. Real licenses come from sovereign jurisdictions only.

Local law overrides offshore license

An offshore license lets the operator legally accept your business, but it does not make gambling legal in YOUR country. UK, US, AU, FR, ES — most countries have local rules that may make online gambling at unlicensed-locally casinos illegal regardless of offshore status. Always check your country's gambling law before depositing. For example, Japan's regulations treat all offshore play as a grey area, while Brazil's SPA 2025 framework distinguishes licensed national operators from offshore brands, and Mexico's SEGOB rules require local authorization for any operator targeting residents.

Country-by-country status: crypto casino legality by country. For our own rating criteria around licensing weight, see how we test licensing claims.

Independent auditing and RNG certification

Licensing covers the operator's legal status. Game fairness is a separate question handled by independent testing labs. The four labs that dominate online casino RNG certification:

• iTechLabs — Australian-based, founded 2004. Certifies RNG output, game logic, and provably-fair implementations. Tests over 1,200 game titles per year. Their certification stamp appears on most Pragmatic Play and NetEnt games. Public certificate search at itechlabs.com.
• eCOGRA — UK-based, founded 2003. Tests RNG, performs audit reports, and runs an alternative-dispute-resolution service that operators can use to handle player complaints. Public seal and dispute service at ecogra.org.
• Gaming Laboratories International (GLI) — US-based, founded 1989. The largest testing lab globally with offices in 23 countries. Required by many state-licensed jurisdictions including NJ DGE.
• BMM Testlabs — older, more compliance-focused lab. Common for land-based and regulated-state online operators.

What auditing certifies and what it does not. RNG certification confirms the random number generator produces uniformly distributed outputs across the configured range — that is, the dice or the slot reels are not statistically biased. It does NOT confirm RTP figures match marketing claims, that bonus payouts reach advertised frequencies, or that the operator's accounting matches actual play. Those require additional audit-level engagements which not all operators commission.

How to verify a casino's audit claims. Real audit certificates link to a serial number on the lab's public certificate registry. Static seal images that do not link anywhere — or that link only to the casino's own help page — are decorative branding, not active certifications. Two-minute verification: click the audit seal, confirm the URL ends on the lab's domain, and check that the certificate name matches the casino's licensed company name.

Dispute resolution pathways

When negotiation with an operator fails, players have escalation options that vary by licence jurisdiction. The realistic recovery rates from these channels matter more than the theoretical existence of them.

Curaçao GCB complaint procedure. File a written complaint with the GCB after exhausting the operator's internal escalation (usually 30 days of no resolution). The GCB will request the operator's response, review play history and T&Cs, and issue a binding determination within 60-90 days. Recovery rate around 65 percent on substantiated complaints in 2024-2025 data. File at the GCB website.

Malta MGA Player Support Unit. The MGA's PSU handles complaints against Malta-licensed operators. Median resolution time 21 days. The MGA has authority to fine operators and order restitution; recovery rate around 85 percent on substantiated complaints in published MGA enforcement reports.

eCOGRA alternative dispute resolution. eCOGRA's ADR service is available for any operator that has signed up — many Curaçao and a few Anjouan-licensed casinos use it. Free for players, paid by the operator. Resolution time 30-45 days. The decision is binding on the operator if both parties agreed to the process.

AskGamblers and Casino Guru complaint mediation. Industry watchdog sites mediate complaints informally and rely on operator reputation incentives to drive resolution. Effectiveness varies widely by operator but the public-record nature of the complaints creates accountability pressure. Recovery rate 45-55 percent across reported cases.

Frequently asked questions

Next steps

• Curaçao license deep dive
• Anjouan license deep dive
• How to spot a fake license
• License renewal cycles
• Casinos to avoid (blacklist)