Online Gambling Licenses in 2026: True Costs Across 11 Jurisdictions Plus Vetted Firms
Every fee on these pages comes from an official fee schedule, act, or register, except where a jurisdiction publishes none of the three and the only price that exists is the seller's. That matters in a niche where most of what ranks in search is written by the firms selling the licenses.
11 jurisdictions compared side by side, from the offshore tier to the national market regimes, plus a catalog of licensing firms that made the cut: a corporate record that resolves in a business registry plus at least one outside source.
Every figure sourced from official documents. Last verified July 13, 2026.
Our verdict
The license market splits into tiers, and the price differences buy real things. Anjouan at EUR 17,828 a year buys speed with no public register behind it. Curacao at EUR 47,450 a year buys a rebuilt regime with a license register and 31 enforcement actions on the record. Kahnawake at USD 20,000 buys 27 years of history with a mandatory data center. Malta and the Isle of Man buy market access and banking weight, and charge for it in capital, substance, and compliance machinery rather than just fees. Above all of that sit the national market licenses, a different product entirely: Brazil sells access to one country for R$30 million, Estonia and Cyprus sell EU markets on EU compliance terms, and Mexico sells nothing at all right now. Pick the tier your markets, banks, and payment providers actually require, then use a firm from the vetted catalog below, every one of them has a corporate record you can click.
Every jurisdiction in two tables
An international license runs a cross-border business. A national one opens exactly one country, and you can't swap one for the other.
The international tier
| Jurisdiction | First year | Annual | Stated timeline | Substance | Register |
|---|---|---|---|---|---|
| Curacao | ≈ EUR 52,300 | EUR 47,450 | 2 × 8 weeks by law | Local director now, staff and office from Apr 2027 | PDF register, 660 licenses, public enforcement |
| Malta | ≈ EUR 30,000 + EUR 100k capital | EUR 25,000 + revenue contribution | Not published | No residency mandate, capital and key functions instead | Searchable register with URL checker |
| Isle of Man | GBP 42,000 | GBP 36,750 | 10–12 weeks stated | 2 resident directors, Island servers and banking | Living register with Excel download |
| Kahnawake | USD 40,000 package | USD 20,000 | No fixed clock, 6-month initial term | Mandatory co-location at MIT | Named register, 76 operators |
| Anjouan | ≈ EUR 22,000 packaged | EUR 17,828 | ≈ 2 weeks claimed | None published | None browsable |
| Panama | B/.50,000 + B/.600k bonds | 10% of GGR | Not published | Offices and call center in Panama, 5 years experience | None current, last lists 2019–2020 |
| Costa Rica | No license exists | ₡26M–52M sector tax | Days to incorporate | None, it is a corporate setup plus a municipal permit | None, no regulator either |
Anjouan figures are the licensing site's own published prices, no official fee schedule exists there. Costa Rica sells no license at all, the row shows what actually exists. Malta's first year adds EUR 100,000 in paid-up share capital, locked rather than spent.
National market licenses
| Jurisdiction | First year | Annual | Stated timeline | Substance | Register |
|---|---|---|---|---|---|
| Brazil | R$30M grant + R$35M capital | 13% of GGR + inspection fee | 150 days by rule | Brazilian company, 20% Brazilian shareholder, .bet.br | CSV register, 82 companies, 187 brands |
| Estonia | EUR 51,140 + EUR 1M capital | 5.5% of NGR, falling to 4% | 4 + 2 months by statute | EU company, systems wired to EMTA | Live lists, 59 casino + 38 betting operators |
| Cyprus | EUR 30,000 + EUR 1.05M capital and guarantee | EUR 30,000 + 15% of NGR | No statutory deadline | Cyprus company or branch, backup server on the island | Live registers, 13 online bookmakers |
| Mexico | No new permits issued | IEPS 50% + 1–4% participation | No process exists | Mexican company, on legacy permits only | Query system, no published list |
Each of these opens one country and nothing else, and no offshore license substitutes for any of them. Full breakdowns with sources sit on each jurisdiction page.
Verify any license claim in five minutes
The registers are public, so most license claims can be checked from a laptop. The drill starts where most people stop: at the footer seal.
- 1
Treat the footer seal as a claim, never as proof
An operator's license story lives in the site footer: an issuing body, a company name, usually a clickable validator seal. Seals are embeddable widgets and fakes are trivial, so the seal only tells you what to go check. The register is the proof.
- 2
Open the regulator's own register
Each jurisdiction publishes its own list: Curacao a dated PDF, Malta a searchable register with a URL checker, the Isle of Man a living page with an Excel download, Kahnawake a named permit-holder list, Brazil a CSV of every authorized company and domain, Estonia and Cyprus live operator lists. If the claim is real, it is a row in one of these.
- 3
Match the domain, not just the company
Most regimes bind the license to named domains: Brazil's register lists each .bet.br address, Kahnawake authorizes about 205 URLs across 76 operators, and Curacao entries name the sites. A real company's license does not cover a lookalike domain, and mirrors are exactly where fake claims live.
- 4
Check the enforcement registers too
A license that existed last year proves nothing about today. Curacao publishes an enforcement register and public warnings, Malta a separate enforcement register, and the Isle of Man lists former license holders next to its public statements. Check the exit lists with the same care as the entry lists.
- 5
Know the tiers where no real register exists
Anjouan's verify page runs on the licensing seller's own site, Panama has published no current list, and Costa Rica has neither a register nor a regulator. In those tiers a license claim rests on documents the counterparty chooses to show you. Price that into the trust you extend, and into which payment partners will accept it.
- 6
For B2B deals, verify the license class
A B2C license does not make a company a licensed supplier, and the reverse holds too. Curacao prices B2C at EUR 47,450 against EUR 24,490 for B2B, the Isle of Man's software supplier licence is voluntary, and Malta separates the classes in its register. Ask which class the counterparty holds, then find the row.
These are the registers behind every figure in this category, and each jurisdiction guide links its full source set with dates.
The jurisdiction guides
11One guide per jurisdiction: the official fee table, the first-year math, requirements, the application clock, and the registers to verify against.
First year≈ EUR 52,300AnnualEUR 47,450The rebuilt regime: direct CGA licensing, a public enforcement register, and the substance clock paused until April 2027.Read the guideMalta
First year≈ EUR 30,000 + EUR 100k capitalAnnualEUR 25,000 + revenue contributionThe EU flagship: 10-year license, revenue-based compliance contribution, and the tax reform landing October 1, 2026.Read the guideIsle of Man
First yearGBP 42,000AnnualGBP 36,750Built on substance: two resident directors, servers on the Island, protected player funds, and a regulator that publishes its processing time.Read the guideKahnawake
First yearUSD 40,000 packageAnnualUSD 20,000The veteran: 27 years of licensing, a register that names bwin and partypoker, and a data center you cannot opt out of.Read the guideAnjouan
First year≈ EUR 22,000 packagedAnnualEUR 17,828The entry tier: EUR 17,828 in seller-published pricing, and the thinnest official record of anything sold as a gambling license.Read the guideBrazilFirst yearR$30M grant + R$35M capitalAnnual13% of GGR + inspection feeThe biggest regulated launch of the decade: R$30M grant, 13% GGR take, a real CSV register, and 25,000+ illegal sites blocked in year one.Read the guideEstonia
First yearEUR 51,140 + EUR 1M capitalAnnual5.5% of NGR, falling to 4%The contrarian EU license: 5.5% tax falling to 4% by 2029, statutory deadlines, and crypto bets legal through EEA CASPs.Read the guideCyprus
First yearEUR 30,000 + EUR 1.05M capital and guaranteeAnnualEUR 30,000 + 15% of NGRBetting only, by criminal law: NBA Class B at EUR 30,000 a year, a 15% levy, and .com.cy domains.Read the guidePanamaFirst yearB/.50,000 + B/.600k bondsAnnual10% of GGRPricier and more demanding than its reputation suggests: B/.50,000 per domain, 10% of GGR with no offshore carve-out, and no public register.Read the guideCosta RicaFirst yearNo license existsAnnual₡26M–52M sector taxNot a license at all: incorporation plus a municipal permit, a sector tax by headcount, and a vacuum the legislature reconfirmed in 2026.Read the guideMexicoFirst yearNo new permits issuedAnnualIEPS 50% + 1–4% participationThe closed market: no new permits for years, the operator model abolished, IEPS at 50 percent, and a reform that keeps not arriving.Read the guideThe vetted firm catalog
9Firms that help operators obtain and keep licenses. Every one has a corporate record you can look up in a business registry. Updated July 13, 2026.
CSB Group
Swatar, Malta · since 1987Malta corporate services group with a licensed CSP core, in the industry since 1987
Three group companies authorized on the MFSA Financial Services Register: CSB International (Class C CSP), CSBL Advisory (Class B CSP), CSB Trustees & Fiduciaries
SiGMA Best Corporate Services Provider 2021, 2023 and 2024, SiGMA Euro-Med 2025 exhibitor
Gofaizen & Sherle
Tallinn, Estonia · since 2021Licensing-focused consultancy covering 30+ gambling jurisdictions
Estonian registry 16295888 since 2021, both name partners on the board, 23 staff and EUR 4.89M revenue in 2024
SBSB Fintech Lawyers
London / Tallinn · since 2013Fintech and gambling law firm running license work across 30+ jurisdictions
UK LLP OC384762 active since 2013 plus an Estonian entity since 2018, founder Yuliya Barabash
4H Agency
Limassol, Cyprus · since 2020Gambling-only advisory led by a public industry figure
Cyprus registry HE413554 since 2020, registered at its Limassol office
CEO Ilya Machavariani listed as a speaker at SBC Summit Tbilisi 2024
GBO
Givatayim, Israel · since 2009Small Israeli corporate services firm handling offshore gaming setups since 2009
Israeli Corporations Authority record 514311232, active since 2009, named principals
iGB L!VE 2026 exhibitor directory listing
WH Partners
Ta' Xbiex, Malta · since 2006Malta gaming law firm with the strongest bench rankings in the market
Chambers Global 2025 ranks four partners in gaming, Olga Finkel and James Scicluna in Band 1
Partner Joseph F. Borg is a former Chief Regulatory Officer of Malta's gaming regulator
GVZH Advocates
Valletta, Malta · since 2007Valletta law firm handling MGA licensing and gaming compliance
Contributing firm for the Chambers Global Practice Guide on Malta gaming law
Harris Hagan
London, UK · since 2004The City of London's specialist gambling law firm
Companies House records since 2014 (LLP OC455895 since 2025), practice founded 2004
Chambers UK ranks John Hagan and Bahar Alaeddini Band 1 in gaming
Nordic Gambling
Copenhagen, Denmark · since 2017The only Nordic law firm working exclusively in gambling law
Danish CVR 38516590, founder Morten Ronde is a former head of legal at the Danish Gambling Authority
How the license map got to 2026
Every price and requirement in this category has a date behind it, and the last three years redrew the whole map. The redrawing isn't finished yet.
Malta's current Gaming Act takes effect
The two-license model, B2C gaming service and B2B critical supply, with 10-year terms and the fee structure still in force in 2026. The EU flagship's rulebook predates everything else on this timeline.
Panama consolidates its online regime
JCJ Resolution 11 replaces the 2002 rules that opened Panama's online era: B/.50,000 per license, real bonds, and 10% of gross gaming income with no offshore carve-out. Still the governing text in 2026.
Anjouan relaunches in private hands
A 2005 act, a licensing domain registered in May 2023, and an administrator that is itself a private licensing company. The entry tier's growth rode Curacao's reform wave, and no government-hosted register exists behind it.
Malta builds the Bill 55 shield
Article 56A orders Maltese courts to refuse foreign judgments against MGA licensees for services lawful in Malta, the shield against Austrian and German player-reimbursement claims. The European Commission opened infringement proceedings in 2025, and a CJEU Advocate General found the article incompatible with EU law in April 2026.
Curacao begins direct licensing
A year before the LOK, the regulator starts granting direct licenses under the new policy, ending the era when most operators existed only as private sub-licensees of four master-license holders.
Mexico bans slots and kills the operator model
A presidential decree bans slot machines of any kind, caps legacy permits at 15 non-renewable years, and repeals the third-party operator arrangement that was the only practical market entry. No new permits since, and the decree still sits in amparo limbo.
Brazil writes the betting law
Lei 14.790 creates the federal regime: R$30 million per authorization covering up to three brands, R$30 million minimum paid-in capital, and a Brazilian entity with a Brazilian individual holding at least 20%.
Brazil's licensing window opens
Portaria 827 sets out the rulebook: applications filed within its first 90 days get a decision by year end, and unauthorized operators must leave the market by October 1, 2024.
The Isle of Man starts pulling licenses
King Gaming and Dalmine lose their licenses after a criminal investigation, the start of an exit-and-enforcement wave that would take out one of the Island's oldest licensees within a year. The register stands at 60 active holders in July 2026.
Curacao's LOK kills the master-license system
Submitted to the Staten in December 2023 and passed 13 votes to 6 a year later, the LOK enters into force December 24, 2024. The GCB becomes the independent CGA, every operator licenses directly, and the sub-licensee era formally closes with the Orange Seal's end in October 2025.
Cyprus raises its levy to 15%
The NBA contribution rises from 3% to 5% of net betting revenue on top of the 10% betting tax. Online casino remains a felony there, with betting the only licensed vertical and 13 bookmakers on the register.
Brazil's regulated market goes live
66 companies live on bet.br domains on day one, 82 companies and 187 brands by May 2026, and more than 25,000 illegal sites blocked in year one. The GGR take rises on the law's own schedule: 13% from April 2026, 15% from 2028.
Estonia cuts its remote gambling tax to 5.5%
The remote gambling tax drops to 5.5% with a legislated ladder to 4% by 2029, replacing a 7% step that never took effect. The same package lets crypto-assets be staked through EEA-licensed providers and rewrites the licensing chapter.
Costa Rica rejects its online licensing bill
The Legislative Assembly kills Bill 25.057, the attempt to build an online licensing framework. No license, no regulator, no register: the data processing license sold by agencies there is an ordinary municipal business patente.
Kahnawake refreshes a 27-year rulebook
The Interactive Gaming Regulations, running since July 1999, get their current 92-page edition. The shape holds: one interactive gaming license ever issued, operators under Client Provider Authorizations, and mandatory co-location in the Territory's data center.
Malta's tax reform is gazetted
From October 1, 2026 the flat 5% Malta-facing gaming tax becomes 15% for casino and 10% for betting, and taxability switches from the player's presence to residence. License fees stay untouched.
The next two deadlines are Curacao's
Supplier licensing and registration become enforceable December 24, 2026, and the Article 5.12 substance requirement, key persons and a real office, binds operators from April 1, 2027. The cheap-and-fast window the entry tier sells runs out on those dates.
Dates from gazettes, regulator registers, and official statements, current through July 2026. Each jurisdiction guide carries the full source set.
What the regulators actually did
A license tier is only as real as its enforcement, and the differences show in what lands on the public record.
The enforcement register runs from Rabidi N.V. in June 2024, the reform era's first revocation, to July 2026: 31 entries, 30 of them revocations, every one public. Five public warnings landed in early 2026 alone, and the escalation ladder itself is published policy.
Rush Gaming and BTM Entertainment lost their licenses in March 2024, GameSoft in November, and Goldwin went from suspension to cancellation by March 2025. The register tracks player money too: BTM's remaining balances moved to the Authority for claims. Enforcement fines then fell by about half in 2025.
More than 25,000 illegal sites blocked through Anatel in the market's first year, four provisional authorizations suspended in April 2025 over missing certifications, and the money side wired shut: banks must refuse illegal operators, and payment institutions are jointly liable for their taxes.
A live exit wave: King Gaming and Dalmine canceled after a criminal investigation in July 2024, BMO Manx fined £700,000, and Celton Manx, the SBOBET licensee and one of the Island's oldest, surrendered its license and took a £3,937,500 penalty in 2025, the largest in the jurisdiction's public record.
Einrai's authorization was revoked in April 2026, three operators terminated voluntarily that summer, and the commission published advisories against fake-license sites, including one impersonating the KGC itself. No monetary penalties are on the public record.
The blocked list stood at 1,908 domains in the May 2026 edition, enforced through ISPs and through payment blocking with player refunds. There is no revocation register by design: delisted operators simply drop off the license lists.
The largest blocklist in this directory, 22,417 domains in the July 2026 edition, guarding a market of just 13 licensed bookmakers. Fines cap at EUR 100,000 per infringement, with no running public register of who paid what.
From the regulators' own enforcement registers, public statements, and gazettes, as of July 2026. Panama and Costa Rica publish nothing of this kind, and Anjouan's regime has no enforcement record at all, which is itself a data point.
Our methodology
Two different verification jobs run on these pages. We deliberately don't mix them.
Jurisdiction facts
Every fee, deadline, and requirement comes from the regulator's own documents: fee schedules, acts, registers, official announcements. Each jurisdiction guide names its sources with dates, and figures that exist only on sales pages are labeled with their actual publisher.
Firm vetting
A firm enters the catalog only when its corporate record resolves in an official business registry and at least one outside source backs it up: a regulator's register entry, a Chambers ranking, or an organizer-side conference listing. Firms with no findable footprint are not listed at all, and a claim with nothing behind it never appears as a fact.
What we do not do
We do not rank the firms, take placement fees for the catalog, or score jurisdictions. The comparison table states what each license costs and requires, the choice depends on your markets, banking, and risk appetite.
The terms every licensing conversation runs on
The sales pages in this market lean on words that sound official and mean less than they seem.
The license types
The application
The money
The map
Definitions are ours and deliberately practical. The comparison tables above carry the sourced numbers, and each jurisdiction guide names the regulator's own terms in its tooltips.
Frequently asked
What operators ask before spending on a license, answered from the official record.
How much does an online gambling license cost?+
The realistic range in 2026 runs from about EUR 18,000 a year in Anjouan through EUR 47,450 in Curacao to GBP 36,750 in the Isle of Man, plus Malta's model of EUR 25,000 fixed with a revenue-based contribution on top. First years cost more: about EUR 52,300 in Curacao, GBP 42,000 in the Isle of Man, USD 40,000 in Kahnawake. Company formation, local directors, compliance tooling, and consultant fees come on top everywhere.
Which jurisdiction should a new operator pick?+
Match the license to what your banks, payment providers, and target markets will accept. Crypto-first projects with tight budgets start in Anjouan or Curacao. Operators who need European payment rails and B2B partnerships usually need Curacao at minimum, and Malta or the Isle of Man when reputation drives the deal. Kahnawake fits operators comfortable with mandatory co-location in the Territory. And if the plan targets one specific country, the offshore tier stops mattering: Brazil, Estonia, and Cyprus each require their own national license regardless of what else you hold.
What is the difference between an offshore license and a market license?+
An offshore license from Curacao, Anjouan, Kahnawake, or Panama lets you run an international-facing business from that jurisdiction, and its value is measured in what banks and processors accept. A market license from Brazil, Estonia, or Cyprus is permission to serve that one country and nothing else, priced accordingly: R$30 million in Brazil against EUR 17,828 in Anjouan. The two do not substitute for each other, an offshore license has zero legal effect in a regulated market, and more than 25,000 sites blocked in Brazil's first year show how that is enforced.
Do I need my own license at all?+
Not necessarily. White label platforms let you launch under the provider's license, trading control and margin for speed and zero licensing work. Our white label casino and sportsbook guides compare those setups. The usual path is white label first, own license once volume justifies it.
What do licensing consultants actually charge?+
Almost none publish prices. The usual structure is a service fee on top of official fees, covering company formation, document preparation, and regulator liaison. Packaged first-year offers for entry-tier licenses cluster around EUR 22,000 all-in for Anjouan. For Malta and the Isle of Man expect law-firm rates, those applications are compliance projects, not form-filling.
How are the firms in the catalog vetted?+
Each one has a corporate record in an official business registry, and at least one outside source: an MFSA register entry, a Chambers ranking, an organizer-side conference listing, or a principal who came out of the regulator. Firms with nothing findable behind them, including some widely advertised ones, are deliberately absent.
Why is a well-known licensing agency missing from the catalog?+
Because it did not pass vetting. The most common reasons in this niche: no findable legal entity behind the brand, an anonymous team, or a regulated status that turned out to be canceled. Only firms with a documented existence and a traceable track record make the catalog.
The rest of the launch stack
A license is one procurement line. The directory covers the others.