Online Gambling Licenses in 2026: True Costs Across 11 Jurisdictions, and Vetted Help
Every fee on these pages comes from a regulator's own fee schedule, act, or register, not from a sales page. That matters in a niche where most of what ranks in search is written by the firms selling the licenses.
11 jurisdictions compared side by side, from the offshore tier to the national market regimes, plus a catalog of licensing firms that passed our vetting: a registry-verifiable corporate record plus at least one independent anchor.
Every figure sourced from the regulators' own documents. Last verified July 13, 2026.
Our verdict, in brief
The license market splits into tiers, and the price differences buy real things. Anjouan at EUR 17,828 a year buys speed with no public register behind it. Curacao at EUR 47,450 a year buys a rebuilt regime with a license register and 31 enforcement actions on the record. Kahnawake at USD 20,000 buys 27 years of history with a mandatory data center. Malta and the Isle of Man buy market access and banking weight, and charge for it in capital, substance, and compliance machinery rather than just fees. Above all of that sit the national market licenses, a different product entirely: Brazil sells access to one country for R$30 million, Estonia and Cyprus sell EU markets at EU compliance depth, and Mexico sells nothing at all right now. Pick the tier your markets, banks, and payment providers actually require, then use a firm from the vetted catalog below, every one of them has a corporate record you can click.
Every jurisdiction, two tables
Two different products, deliberately not mixed: international licenses you run a cross-border business on, and national market licenses that open exactly one country. First-year and recurring costs in official fees, the stated clock, the substance you must build, and what each register lets you verify.
The international tier
| Jurisdiction | First year | Annual | Stated timeline | Substance | Register |
|---|---|---|---|---|---|
| Curacao | ≈ EUR 52,300 | EUR 47,450 | 2 × 8 weeks by law | Local director now, staff and office from Apr 2027 | PDF register, 660 licenses, public enforcement |
| Malta | ≈ EUR 30,000 + EUR 100k capital | EUR 25,000 + revenue contribution | Not published | No residency mandate, capital and key functions instead | Searchable register with URL checker |
| Isle of Man | GBP 42,000 | GBP 36,750 | 10–12 weeks stated | 2 resident directors, Island servers and banking | Living register with Excel download |
| Kahnawake | USD 40,000 package | USD 20,000 | No fixed clock, 6-month initial term | Mandatory co-location at MIT | Named register, 76 operators |
| Anjouan | ≈ EUR 22,000 packaged | EUR 17,828 | ≈ 2 weeks claimed | None published | None browsable |
| Panama | B/.50,000 + B/.600k bonds | 10% of GGR | Not published | Offices and call center in Panama, 5 years experience | None current, last lists 2019–2020 |
| Costa Rica | No license exists | ₡26M–52M sector tax | Days to incorporate | None, it is a corporate setup plus a municipal permit | None, no regulator either |
Anjouan figures are the licensing site's own published prices, no official fee schedule exists there. Costa Rica sells no license at all, the row shows what actually exists. Malta's first year adds EUR 100,000 in paid-up share capital, locked rather than spent.
National market licenses
| Jurisdiction | First year | Annual | Stated timeline | Substance | Register |
|---|---|---|---|---|---|
| Brazil | R$30M grant + R$35M capital | 13% of GGR + inspection fee | 150 days by rule | Brazilian company, 20% Brazilian shareholder, .bet.br | CSV register, 82 companies, 187 brands |
| Estonia | EUR 51,140 + EUR 1M capital | 5.5% of NGR, falling to 4% | 4 + 2 months by statute | EU company, systems wired to EMTA | Live lists, 59 casino + 38 betting operators |
| Cyprus | EUR 30,000 + EUR 1.05M capital and guarantee | EUR 30,000 + 15% of NGR | No statutory deadline | Cyprus company or branch, backup server on the island | Live registers, 13 online bookmakers |
| Mexico | No new permits issued | IEPS 50% + 1–4% participation | No process exists | Mexican company, on legacy permits only | Query system, no published list |
Each of these opens one country and nothing else, and no offshore license substitutes for any of them. Full breakdowns with sources sit on each jurisdiction page.
Verify any license claim in five minutes
Most license claims can be checked from a laptop, because the registers are public. The drill below is the same one we ran on every operator, firm, and figure in this category, and it starts where most people stop.
- 1
Treat the footer seal as a claim, never as proof
An operator's license story lives in the site footer: an issuing body, a company name, usually a clickable validator seal. Seals are embeddable widgets and fakes are trivial, so the seal only tells you what to go check. The register is the proof.
- 2
Open the regulator's own register
Every register this directory verifies against is public: Curacao publishes a dated PDF, Malta runs a searchable register with a URL checker, the Isle of Man a living page with an Excel download, Kahnawake a named permit-holder list, Brazil a CSV of every authorized company and domain, Estonia and Cyprus live operator lists. If the claim is real, it is a row in one of these.
- 3
Match the domain, not just the company
Most regimes bind the license to named domains: Brazil's register lists each .bet.br address, Kahnawake authorizes about 205 URLs across 76 operators, and Curacao entries name the sites. A real company's license does not cover a lookalike domain, and mirrors are exactly where fake claims live.
- 4
Check the negative registers too
A license that existed last year proves nothing about today. Curacao publishes an enforcement register and public warnings, Malta a separate enforcement register, and the Isle of Man lists former license holders next to its public statements. Check the exit lists with the same care as the entry lists.
- 5
Know the tiers where no real register exists
Anjouan's verify page runs on the licensing seller's own site, Panama has published no current list, and Costa Rica has neither a register nor a regulator. In those tiers a license claim rests on documents the counterparty chooses to show you. Price that into the trust you extend, and into which payment partners will accept it.
- 6
For B2B deals, verify the license class
A B2C license does not make a company a licensed supplier, and the reverse holds too. Curacao prices B2C at EUR 47,450 against EUR 24,490 for B2B, the Isle of Man's software supplier licence is voluntary, and Malta separates the classes in its register. Ask which class the counterparty holds, then find the row.
These registers are the sources every figure in this category is verified against, and each jurisdiction guide links its full source set with dates.
The jurisdiction guides
11One guide per jurisdiction: the official fee table, the first-year math, requirements, the application clock, and the registers to verify against.
First year≈ EUR 52,300AnnualEUR 47,450The rebuilt regime: direct CGA licensing, a public enforcement register, and the substance clock paused until April 2027.Read the guideMalta
First year≈ EUR 30,000 + EUR 100k capitalAnnualEUR 25,000 + revenue contributionThe EU flagship: 10-year license, revenue-based compliance contribution, and the tax reform landing October 1, 2026.Read the guideIsle of Man
First yearGBP 42,000AnnualGBP 36,750The substance route: two resident directors, Island servers, protected player funds, and a regulator that states its processing time.Read the guideKahnawake
First yearUSD 40,000 packageAnnualUSD 20,000The veteran: 27 years of licensing, a register that names bwin and partypoker, and a data center you cannot opt out of.Read the guideAnjouan
First year≈ EUR 22,000 packagedAnnualEUR 17,828The entry tier: EUR 17,828 seller-published pricing and the thinnest official record of any license sold as one.Read the guideBrazilFirst yearR$30M grant + R$35M capitalAnnual13% of GGR + inspection feeThe biggest regulated launch of the decade: R$30M grant, 13% GGR take, a real CSV register, and 25,000+ illegal sites blocked in year one.Read the guideEstonia
First yearEUR 51,140 + EUR 1M capitalAnnual5.5% of NGR, falling to 4%The contrarian EU license: 5.5% tax falling to 4% by 2029, statutory deadlines, and crypto bets legal through EEA CASPs.Read the guideCyprus
First yearEUR 30,000 + EUR 1.05M capital and guaranteeAnnualEUR 30,000 + 15% of NGRBetting only, by criminal law: NBA Class B at EUR 30,000 a year, a 15% levy most guides still get wrong, and .com.cy domains.Read the guidePanamaFirst yearB/.50,000 + B/.600k bondsAnnual10% of GGRMore real and more expensive than its reputation: B/.50,000 per domain, 10% of GGR with no offshore carve-out, and no public register.Read the guideCosta RicaFirst yearNo license existsAnnual₡26M–52M sector taxNot a license at all: incorporation plus a municipal permit, a sector tax by headcount, and a vacuum the legislature reconfirmed in 2026.Read the guideMexicoFirst yearNo new permits issuedAnnualIEPS 50% + 1–4% participationThe closed market: no new permits for years, the operator model abolished, IEPS at 50 percent, and a reform that keeps not arriving.Read the guideThe vetted firm catalog
9Firms that help operators obtain and keep licenses, listed only after vetting: a registry-verifiable corporate record plus at least one independent anchor, checked July 13, 2026. Firms we could not verify are not listed, absence is a verdict.
CSB Group
Swatar, Malta · since 1987Malta corporate services group with a licensed CSP core, in the industry since 1987
Three group companies authorized on the MFSA Financial Services Register: CSB International (Class C CSP), CSBL Advisory (Class B CSP), CSB Trustees & Fiduciaries
SiGMA Best Corporate Services Provider 2021, 2023 and 2024, SiGMA Euro-Med 2025 exhibitor
Gofaizen & Sherle
Tallinn, Estonia · since 2021Licensing-focused consultancy covering 30+ gambling jurisdictions
Estonian registry 16295888 since 2021, both name partners on the board, 23 staff and EUR 4.89M revenue in 2024
SBSB Fintech Lawyers
London / Tallinn · since 2013Fintech and gambling law firm running license work across 30+ jurisdictions
UK LLP OC384762 active since 2013 plus an Estonian entity since 2018, founder Yuliya Barabash
4H Agency
Limassol, Cyprus · since 2020Gambling-only advisory led by a public industry figure
Cyprus registry HE413554 since 2020, registered address matches its Limassol office
CEO Ilya Machavariani listed as speaker by SBC Summit Tbilisi 2024
GBO
Givatayim, Israel · since 2009Small Israeli corporate-services shop selling offshore gaming setups since 2009
Israeli Corporations Authority record 514311232, active since 2009, named principals
iGB L!VE 2026 exhibitor directory listing
WH Partners
Ta' Xbiex, Malta · since 2006Malta gaming law firm with the strongest bench rankings in the market
Chambers Global 2025 ranks four partners in gaming, Olga Finkel and James Scicluna in Band 1
Partner Joseph F. Borg is a former Chief Regulatory Officer of Malta's gaming regulator
GVZH Advocates
Valletta, Malta · since 2007Valletta law firm running MGA licensing and gaming compliance
Contributor firm for the Chambers Global Practice Guide on Malta gaming law
Harris Hagan
London, UK · since 2004The City of London's specialist gambling law firm
Companies House records since 2014 (LLP OC455895 since 2025), practice founded 2004
Chambers UK ranks John Hagan and Bahar Alaeddini Band 1 in gaming
Nordic Gambling
Copenhagen, Denmark · since 2017The only Nordic law firm working exclusively in gambling law
Danish CVR 38516590, founder Morten Ronde is a former head of legal at the Danish Gambling Authority
How the license map got to 2026
Every price and requirement in the tables above has a date behind it, and the last three years redrew the whole map: Curacao rebuilt itself, Brazil opened, the Isle of Man started swinging, and the EU tier changed its tax math. The beats that matter, in order.
Malta's current Gaming Act takes effect
The two-license model, B2C gaming service and B2B critical supply, with 10-year terms and the fee structure still in force in 2026. The EU flagship's rulebook predates everything else on this timeline.
Panama consolidates its online regime
JCJ Resolution 11 replaces the 2002 rules that opened Panama's online era: B/.50,000 per license, real bonds, and 10% of gross gaming income with no offshore carve-out. Still the governing text in 2026.
Anjouan relaunches in private hands
A 2005 act, a licensing domain registered in May 2023, and an administrator that is itself a private licensing company. The entry tier's growth rode Curacao's reform wave, and no government-hosted register exists behind it.
Malta builds the Bill 55 shield
Article 56A orders Maltese courts to refuse foreign judgments against MGA licensees for services lawful in Malta, the shield against Austrian and German player-reimbursement claims. The European Commission opened infringement proceedings in 2025, and a CJEU Advocate General found the article incompatible with EU law in April 2026.
Curacao begins direct licensing
A year before the LOK, the regulator starts granting direct licenses under the new policy, ending the era when most operators existed only as private sub-licensees of four master-license holders.
Mexico bans slots and kills the operator model
A presidential decree bans slot machines in any modality, caps legacy permits at 15 non-renewable years, and repeals the third-party operator figure that was the only practical market entry. No new permits since, and the decree sits in amparo limbo.
Brazil writes the betting law
Lei 14.790 creates the federal regime: R$30 million per authorization covering up to three brands, R$30 million minimum paid-in capital, and a Brazilian entity with a Brazilian individual holding at least 20%.
Brazil's licensing window opens
Portaria 827 publishes the rulebook: applications filed within its first 90 days get a decision by year end, and unauthorized operators must leave the market by October 1, 2024.
The Isle of Man starts swinging
King Gaming and Dalmine lose their licenses after a criminal investigation, the start of an exit-and-enforcement wave that would take out one of the Island's oldest licensees within a year. The register stands at 60 active holders in July 2026.
Curacao's LOK kills the master-license system
Submitted to the Staten in December 2023 and passed 13 votes to 6 a year later, the LOK enters into force December 24, 2024. The GCB becomes the independent CGA, every operator licenses directly, and the sub-licensee era formally closes with the Orange Seal's end in October 2025.
Cyprus raises its levy to 15%
The NBA contribution rises from 3% to 5% of net betting revenue on top of the 10% betting tax. Online casino remains a felony there, betting only by criminal law, with 13 bookmakers licensed.
Brazil opens, the decade's biggest launch
66 companies live on bet.br domains on day one, 82 companies and 187 brands by May 2026, and more than 25,000 illegal sites blocked in year one. The GGR take climbs the legislated ladder: 13% from April 2026, 15% from 2028.
Estonia cuts while everyone raises
The remote gambling tax drops to 5.5% with a legislated ladder to 4% by 2029, replacing a 7% step that never took effect. The same package lets crypto-assets be staked through EEA-licensed providers and rewrites the licensing chapter.
Costa Rica reconfirms the vacuum
The Legislative Assembly kills Bill 25.057, the attempt to build an online licensing framework. No license, no regulator, no register: the data processing license sold by agencies there is an ordinary municipal business patente.
Kahnawake refreshes a 27-year rulebook
The Interactive Gaming Regulations, running since July 1999, get their current 92-page edition. The shape holds: one interactive gaming license ever issued, operators under Client Provider Authorizations, and mandatory co-location in the Territory's data center.
Malta's tax reform is gazetted
From October 1, 2026 the flat 5% Malta-facing gaming tax becomes 15% for casino and 10% for betting, and taxability switches from the player's presence to residence. License fees stay untouched.
The next two deadlines are Curacao's
Supplier licensing and registration become enforceable December 24, 2026, and the Article 5.12 substance requirement, key persons and a real office, binds operators from April 1, 2027. The cheap-and-fast window the entry tier keeps selling is the space before those dates.
Dates from gazettes, regulator registers, and official statements, compiled in docs and checked July 16, 2026. Each jurisdiction guide carries the full source set.
What the regulators actually did
A license tier is only as real as its enforcement, and the differences show in what lands on the public record. One snapshot per regulator, from their own registers and statements.
The enforcement register runs from Rabidi N.V. in June 2024, the reform era's first revocation, to July 2026: 31 entries, 30 of them revocations, every one public. Five public warnings landed in early 2026 alone, and the escalation ladder itself is published policy.
Rush Gaming and BTM Entertainment lost their licenses in March 2024, GameSoft in November, and Goldwin went from suspension to cancellation by March 2025. The register tracks player money too: BTM's remaining balances moved to the Authority for claims. Enforcement fines then fell by about half in 2025.
More than 25,000 illegal sites blocked through Anatel in the market's first year, four provisional authorizations suspended in April 2025 over missing certifications, and the money side wired shut: banks must refuse illegal operators, and payment institutions are jointly liable for their taxes.
A live exit wave: King Gaming and Dalmine cancelled after a criminal investigation in July 2024, BMO Manx fined £700,000, and Celton Manx, the SBOBET licensee and one of the Island's oldest, surrendered its license and took a £3,937,500 penalty in 2025, the largest in the jurisdiction's public record.
Einrai's authorization was revoked in April 2026, three operators terminated voluntarily that summer, and the commission published advisories against fake-license sites, including one impersonating the KGC itself. No monetary penalties are on the public record.
The blocked list stood at 1,908 domains in the May 2026 edition, enforced through ISPs and through payment blocking with player refunds. There is no revocation register by design: delisted operators simply drop off the license lists.
The largest blocklist in this directory, 22,417 domains in the July 2026 edition, guarding a market of just 13 licensed bookmakers. Fines cap at EUR 100,000 per infringement, with no running public register of who paid what.
From the regulators' own enforcement registers, public statements, and gazettes, checked July 16, 2026. Panama and Costa Rica publish nothing of this kind, and Anjouan's regime has no enforcement record at all, which is itself a data point.
Our methodology
Two different verification jobs run on these pages, and they are deliberately not mixed.
Jurisdiction facts
Every fee, deadline, and requirement comes from the regulator's own documents: fee schedules, acts, registers, official announcements. Each jurisdiction guide names its sources with dates, and figures that exist only on sales pages are labeled with their actual publisher.
Firm vetting
A firm enters the catalog only with a registry-verifiable corporate record, a real entity in an official business registry, plus at least one independent anchor: a regulator's register entry, a Chambers ranking, or an organizer-side conference listing. Firms with no verifiable footprint are not listed at all, and claims we could not verify do not appear as facts.
What we do not do
We do not rank the firms, take placement fees for the catalog, or score jurisdictions. The comparison table states what each license costs and requires, the choice depends on your markets, banking, and risk appetite.
The terms every licensing conversation runs on
Licensing sales pages lean on words that sound official and mean less than they seem. These are the working definitions, with the numbers from this directory's own verified pages where they make the meaning concrete.
The license types
The application
The money
The map
Definitions are ours and deliberately practical. The comparison tables above carry the sourced numbers, and each jurisdiction guide names the regulator's own terms in its tooltips.
Frequently asked
What operators ask before spending on a license, answered from the official record.
How much does an online gambling license cost?+
The realistic range in 2026 runs from about EUR 18,000 a year in Anjouan through EUR 47,450 in Curacao to GBP 36,750 in the Isle of Man, plus Malta's model of EUR 25,000 fixed with a revenue-based contribution on top. First years cost more: about EUR 52,300 in Curacao, GBP 42,000 in the Isle of Man, USD 40,000 in Kahnawake. Company formation, local directors, compliance tooling, and consultant fees come on top everywhere.
Which jurisdiction should a new operator pick?+
Match the license to what your banks, payment providers, and target markets will accept. Crypto-first projects with tight budgets start in Anjouan or Curacao. Operators who need European payment rails and B2B partnerships usually need Curacao at minimum, and Malta or the Isle of Man when reputation drives the deal. Kahnawake fits operators comfortable with mandatory co-location in the Territory. And if the plan targets one specific country, the offshore tier stops mattering: Brazil, Estonia, and Cyprus each require their own national license regardless of what else you hold.
What is the difference between an offshore license and a market license?+
An offshore license from Curacao, Anjouan, Kahnawake, or Panama lets you run an international-facing business from that jurisdiction, and its value is measured in what banks and processors accept. A market license from Brazil, Estonia, or Cyprus is permission to serve that one country and nothing else, priced accordingly: R$30 million in Brazil against EUR 17,828 in Anjouan. The two do not substitute for each other, an offshore license has zero legal effect in a regulated market, and more than 25,000 sites blocked in Brazil's first year show how that is enforced.
Do I need my own license at all?+
Not necessarily. White label platforms let you launch under the provider's license, trading control and margin for speed and zero licensing work. Our white label casino and sportsbook guides compare those setups. The usual path is white label first, own license once volume justifies it.
What do licensing consultants actually charge?+
Almost none publish prices. The observable pattern from the firms' own materials is a service fee on top of official fees, covering company formation, document preparation, and regulator liaison. Packaged first-year offers for entry-tier licenses cluster around EUR 22,000 all-in for Anjouan. For Malta and the Isle of Man expect law-firm rates, those applications are compliance projects, not form-filling.
How are the firms in the catalog vetted?+
Each one has a corporate record we verified in an official business registry, and at least one independent anchor: an MFSA register entry, a Chambers ranking, an organizer-side conference listing, or a regulator-alumnus principal. Firms that could not be verified, including some widely advertised ones, are deliberately absent.
Why is a well-known licensing agency missing from the catalog?+
Because it did not pass vetting. The most common reasons in this niche: no findable legal entity behind the brand, an anonymous team, or a regulated status that turned out to be cancelled. We list only firms whose existence and track record we could verify in independent sources, absence is a verdict in itself.
The rest of the launch stack
A license is one procurement line. The directory covers the others.