Annex B · §5
Jurisdiction profiles
A profile turns the neutral record model into one authority’s rule set. It contains parameters only — permitted rails, holder and closed-loop rules, thresholds and aggregation windows, payout deadlines, player-funds protection, submission mode and retention — and never adds fields.
- 90JurisdictionsOn six continents
- 450+Published sourcesLaws, regulations, licence conditions and guidance
- 4Reviewed with their authorityCorrections adopted as submitted
- 50With authorities now2 regulator reviewing · 48 sent to regulator
Each profile is researched from the authority’s own published rules — laws, regulations, licence conditions and guidance — Annex B edition of 1 November 2026 (90 jurisdictions), re-verified against the primary instruments. Profiles are a reference, not legal advice. “Not found” means that no published rule was located, not that none exists.
Profiles by region
90 jurisdictions · researched from published sources · open for authority review
Regulator-reviewed corrections adopted as submittedRegulator reviewing the regulator has taken it upSent to regulator awaiting the regulatorUpdated row updated since first publicationResearched from published sources
| Jurisdiction | Authority | Rails and virtual assets | Ownership, closed loop, payouts | Thresholds and reports | Player funds | Reporting and retention | Status |
|---|---|---|---|---|---|---|---|
| Europe | |||||||
| United KingdomCorrect this profile: United Kingdom | Gambling Commission (Gambling Act 2005; LCCP; RTS), also the AML supervisory authority for casinos, remote included (MLR 2017 reg 7(1)(d)); National Crime Agency (UKFIU) receives suspicious activity reports (POCA 2002 Part 7). | Credit cards banned from 14 April 2020, also via a money service business (LCCP 6.1.2); e-wallets not loaded from a credit card (guidance). Payment services only via authorised PSPs (LCCP 5.1.2). Virtual assets not prohibited; 'digital currencies' are cash equivalents (LCCP 5.1.1); crypto High risk (2026 risk assessment); Commission exploring a route (May 2026); no licensee acceptance found. | No closed-loop rule found (LCCP, RTS, AML guidance searched); 'lack of closed-loop system' and payment methods not in the customer's name rated High risk (2026 risk assessment). Identity verified before gambling (LCCP 17.1.1). Limit prompt at registration or first deposit, limit the default (RTS 12A, 12E, from 31 Oct 2025); gross deposit limits per 24 h, 7 days, month (RTS 12B, from 30 Sep 2026). | Casino CDD at £2,000 (MLR reg 27(5); sterling from 30 June 2026 by SI 2026/621, was EUR 2,000), deposits and withdrawals. Vulnerability check when deposits minus withdrawals exceed £150 in 30 days (SR 3.4.4, from 28 Feb 2025). Staged financial risk assessments announced July 2026 (stage one £5,000 net in 24 h; no start date). SARs to the NCA (POCA 2002). Slots stake £5, £2 under 25 (SI 2025/215). | Remote licensees hold customer funds in a separate client bank account (LCCP 4.1.1). Insolvency protection rating disclosed in terms and acknowledged at first deposit: not protected (segregation only is the remote minimum), medium, high (LCCP 4.2.1; Commission ratings system). 'Not protected' customers reminded every six months, stating the value held (LCCP 4.2.1(3), from 31 Oct 2025). | Quarterly regulatory returns within 28 days of quarter end (LCCP 15.3.1; all operators from 1 July 2024). Key events within 5 working days, incl. POCA disclosures, banking, payment methods and processors (LCCP 15.2.1); MLR breaches as soon as practicable (15.2.3). AML records 5 years after the relationship ends (MLR reg 40(3), casinos). Complaints: ADR after 8 weeks, free (SR 6.1.1). | Sent to regulator |
| IrelandCorrect this profile: Ireland | Gambling Regulatory Authority of Ireland (GRAI; Gambling Regulation Act 2024 Part 2; from 5 March 2025). AML supervisor of gambling service providers: Minister for Justice (AML Compliance Unit), CJA (ML/TF) Act 2010; GRA 2024 s. 230 (GRAI role) not commenced. STRs to FIU Ireland and Revenue (CJA s. 42). GRAI betting licences from 9 Feb 2026; Betting Act 1931 licences run to expiry (s. 235). | Credit cards, credit facilities and e-/digital payments loaded from a credit card prohibited (GRA 2024 s. 165, in force 5 Feb 2026, S.I. 31/2026); Authority may bar other payment forms by regulations (s. 165(3)); none found. BNPL guidance not found. Virtual assets not addressed in the Act; Dept of Finance NRA 2026 action plan: GRAI standard on crypto as a source of funds by Q2 2027 (policy). | Closed loop: NRA 2026 plan, Q2 2027; not law. No own-name payment rule found. ID and age verified before account opening (s. 169; S.I. 315/2026). Limit facility; excess refunded within 7 days (s. 164). Deposit caps by regulations (s. 170); none. Winnings not unreasonably withheld, no deadline (s. 155). Balance refunded on closure (s. 171). Exclusion Register refund in 7 days (s. 45; not in force). | CDD before an occasional transaction of EUR 2,000 or more in aggregate, money paid to or by the provider, single or linked transactions (CJA 2010 s. 24(1), s. 33(1)(b); S.I. 487/2018 reg 4 for providers of gambling services; private members' clubs s. 25(1)(h)). STRs as soon as practicable to FIU Ireland (goAML Web) and to the Revenue Commissioners (ROS) (CJA s. 42). | B2C licensees must hold relevant funds (account-holder money, pending payments, unpaid winnings) in a single Segregated Customer Account at a regulated financial service provider, accessed only in listed cases (GRA 2024 s. 135, in force 5 Feb 2026). Authority may prescribe account type, records, retention, audit, deficit make-good (s. 136); none found. s. 152 records power excludes these accounts. | Authority may prescribe records and accounts and their form (s. 152); none found; no 2026 record-keeping consultation found on grai.ie. Account-holder register: name, address, date of birth (s. 168). Alerts on wins, losses, time at set intervals; balance and amounts paid viewable (s. 173); none prescribed. AML records 5 years after relationship or last transaction; Garda may add 5 (CJA s. 55). | Sent to regulator |
| GibraltarCorrect this profile: Gibraltar | Gambling Commissioner | No credit for gaming. No published policy on virtual assets; the Gambling Act 2025 includes crypto currencies in “money’s worth”; DLT businesses are licensed separately by the GFSC. | Payments to and from a bank account in the customer’s name; enhanced due diligence for every new depositing customer. Withdrawals within 5 working days of verification. | Suspicious activity reports to the GFIU through Themis; Commissioner notified within 24 hours of suspected money laundering. | Liabilities separately identifiable and covered by cash or equivalents. | Quarterly statistical and financial returns; annual AML survey. Retention 5 years. | Sent to regulator |
| Isle of ManCorrect this profile: Isle of Man | Gambling Supervision Commission (GSC) licenses under the Online Gambling Regulation Act 2001 and supervises AML/CFT under the Gambling (AML/CFT) Act 2018 and Code 2019; disclosures to the Isle of Man FIU. Gambling Legislation (Amendment) Bill 2026 passed Tynwald 28 April 2026; Royal Assent and commencement not confirmed at 8 October 2026. | No credit-card ban found; GSC approves every payment method in the operator's payment schematic; no cash for online gambling (Code 2019 para 29(1)). Virtual currency allowed since 1 January 2017 (Online Gambling (Amendments) Regulations 2016, deposits in money's worth) under five GSC pre-approved models (Licensing Requirements, October 2025); crypto in, fiat out not permitted. | Same coin in, same coin out (BTC in, BTC out). Online winnings paid only to a card account or other facility from which the customer previously deposited and which the operator is satisfied still belongs exclusively to the customer, or to a facility the operator is satisfied will reach the customer exclusively (Code 2019 para 29(2)). Payout deadline: not found. | Identification at account opening (Code 2019 para 10); verification before a deposit or withdrawal that takes the customer over EUR 3,000 (or equivalent) in 30 days, or EUR 3,000 in single or linked occasional transactions (para 11); virtual assets valued in EUR at transaction time. Disclosures to the Isle of Man FIU through Themis as soon as practicable (paras 22-24). | Participants' money paid into a client account at a recognised bank (Isle of Man licensed or Treasury-listed overseas deposit taker) and held on trust (Participants' Money Regulations 2010 regs 3, 4, 6); GSC expects an Isle of Man bank unless it gives prior written approval. Bank guarantee, trust, insurance or cash-market funds also accepted; cover equals deposits, unpaid winnings and bonuses. | Player registration and gameplay servers in the Isle of Man (software-only suppliers excepted). Quarterly return to the GSC by the 21st after quarter end (player fund cover, SARs, deposits and withdrawals by fiat, VC and VG). Retention 5 years from the transaction or end of relationship, even after the licence ends; transaction logs backed up daily. No central self-exclusion register found. | Sent to regulator |
| AlderneyCorrect this profile: Alderney | Alderney Gambling Control Commission | Card rules not found. Cash may never be accepted from a customer (eGambling Regulations 2009, regs 4 and 6). Virtual assets reportedly not permitted (to be confirmed). | Additions to customer funds governed by the eGambling Regulations 2009 (reg. 232); same-method rule not found. | Due diligence when a customer’s total deposits first reach €3,000 (Schedule 4, as amended from 1 January 2026). Suspicious reports to the Guernsey FIU through Themis. | Category 1 licensees keep customer balances in a separate bank account held solely for that purpose; cash above player balances. | Retention 5 years. | Sent to regulator |
| JerseyCorrect this profile: Jersey | Jersey Gambling Commission (Gambling (Jersey) Law 2012); remote operators under the Policy Statement for Remote Gambling Operators (October 2025), the Code of Practice for Responsible Gambling for Remote Operators (October 2025) and the Code of Practice: Minimum Technical Standards (amended March 2026); AML under the Money Laundering (Jersey) Order 2008; reports under the Proceeds of Crime (Jersey) Law 1999. | Deposits by card or bank transfer; at most two bankers' cards registered on an account (Code of Practice for Responsible Gambling for Remote Operators). Virtual assets not addressed in the instruments opened. No mandatory hub, instrument origin-and-currency or payment-blocking rule set in the official texts. | One active account per customer, in the customer's name; no transfers between customers. Payments from a customer's account go directly to an account with a financial institution in the registered name of the customer; depositing from one account and withdrawing to a different one is not permitted (Code of Practice: Minimum Technical Standards, amended March 2026). Deposit limit offered at the first deposit stage; under-18s excluded; self-exclusion. The balance is refundable at the customer's request (Gambling (Jersey) Law 2012). No payout time limit set. | Casino due diligence at transactions of EUR 3,000 or more (Money Laundering (Jersey) Order 2008). Suspicious activity reports to the FIU Jersey or the nominated officer (Proceeds of Crime (Jersey) Law 1999). | Unused customer funds kept separately from the operator's funds and out of its creditors' reach (Gambling (Jersey) Law 2012). | Regulatory Return to the Commission on the cadence it sets - monthly or quarterly, within one calendar month of the reporting date (Policy Statement for Remote Gambling Operators, October 2025); the licensee retains the presence in Jersey needed to prove the gambling is operated from the Island. AML records 5 years (Money Laundering (Jersey) Order 2008). | Researched |
| MaltaCorrect this profile: Malta | Malta Gaming Authority (Gaming Act, Cap. 583, Art 5; binding instruments under Art 7(2)); Financial Intelligence Analysis Unit (FIAU) receives suspicious transaction reports and supervises AML/CFT (Prevention of Money Laundering Act, Cap. 373, Arts 15-16, 26; PMLFTR, S.L. 373.01). FIAU Implementing Procedures Part II for remote gaming issued with the MGA. | Payments only via payment providers notified to the MGA and not objected to (Directive 3 of 2018, Art 45); new payment methods notified within 30 days (Art 37). No credit (Directive 2, Art 27). Virtual financial assets only with prior MGA approval (DLT Policy, Jan 2023); VFAs with inbuilt anonymisation functions prohibited; third-party wallet or exchange providers, if used, VFA Act authorised. | Withdrawals 'where possible' to the account the funds came from, otherwise to the player in line with AML law (Directive 2, Art 29(2)); paid within 5 working days 'if practicable' (Art 29(1)); time allowed for identity checks and CDD (Art 29(3)); AML or fraud delay or block (Art 30(2)); any withdrawal limit at least EUR 250 a month, deposits never restricted (Art 30(1)). No same-name rule found. | CDD when transactions reach EUR 2,000 (PMLFTR, S.L. 373.01, reg 9(1)). FIAU Implementing Procedures Part II: counted on deposits only, either daily since the relationship began or over a rolling 180 days; CDD not completed within 30 days of the threshold ends the relationship. STRs to the FIAU via goAML (reg 15); transaction held 1 working day after filing. No large-transaction report found. | Distinct patrimony, segregated, no creditor claim (S.L. 583.08, regs 4, 6, 7; Directive 2, Art 37). Held at an MGA-approved credit, financial or payment institution; trusts, guarantees, reserve accounts may be imposed (Art 31). Balance with funds in transit covers player balances, 90% or more in the account, shortfall made good forthwith (Art 38). Changes need prior approval (Directive 3, Art 38). | Monthly player funds report within 20 days of month end with back-end screenshots, bank/PSP statements, merchant screenshots (Directive 3, Art 39; MGA), plus failed VFA deposits/withdrawals (DLT Policy 2.8). Live or real-time mirror server of essential regulatory data (Art 17(4)). Annual auditor AUP on player funds (Art 41). AML records 5 years (PMLFTR reg 13); audit logs 2 years (Art 16(6)). | Sent to regulator |
| ItalyCorrect this profile: Italy | Agenzia delle Dogane e dei Monopoli | Only traceable instruments in the account holder’s name; cash only at retail points, up to €100 per week per account. Virtual assets not permitted in practice. | One account per player per concessionaire; withdrawals to a traceable instrument in the holder’s name. | Suspicious transaction reports to UIF through Infostat-UIF. | Account balances usable only for gaming transactions; guarantee lodged in ADM’s favour. | Real-time exchange with the central system; each transaction receives a unique code before the account moves; infrastructure in the EEA. AML records 10 years. | Sent to regulator |
| GreeceCorrect this profile: Greece | Hellenic Gaming Commission | Bank and credit transfers, debit, credit and prepaid cards, and e-wallets, all through payment service providers. Virtual assets not permitted. | Instruments owned by the player; ownership confirmed for deposits from €5,000 and withdrawals from €800; winnings to the player’s own EU/EEA account. | Due diligence at €2,000; deposits capped at €800 until verification. Suspicious transaction reports to the Anti-Money Laundering Authority. | Separate player account; any shortfall cured within 3 business days. | Real-time link through an intermediate control system; certified data “Safe” every 6 months. Gaming data 10 years; AML 5 years. | Sent to regulator |
| CyprusCorrect this profile: Cyprus | National Betting Authority | Online betting only; online casino prohibited. Funding by card, electronic transfer or e-money; no cash, no credit. Virtual assets only with the Authority’s approval. | Winnings within 5 working days, only to the account the stakes came from; instruments in another person’s name treated as high risk. | Due diligence at €2,000 of deposits. Suspicious reports to MOKAS through goAML; quarterly AML report to the Authority. | Client account at a credit institution; shortfall fixed within 3 days of month-end. | Backup server in Cyprus with real-time access for the Authority; national self-exclusion platform. Retention 5 years. | Sent to regulator |
| PortugalCorrect this profile: Portugal | SRIJ | Only electronic payment instruments in legal tender, via authorised payment service providers (Regulamento 903-B/2015), which excludes virtual assets; instruments disclosed to the regulator; flows through an EU credit-institution account. | Balances paid only to a payment account the player named and holds, or to a bank account if the instrument cannot take refunds; identity verified before withdrawal. | Due diligence at registration and from €2,000. Suspicious reports to the UIF of the Polícia Judiciária. | €500,000 guarantee per licence (bank guarantee, insurance or deposit) securing legal obligations, including to players, reviewable against balances; separate €100,000 tax guarantee. Segregation to be confirmed. | Certified system linked in real time; XML financial reports with hourly summaries; central self-exclusion register. Retention at least 7 years. | Sent to regulator |
| SpainCorrect this profile: Spain | Dirección General de Ordenación del Juego | Regulator-coded list of payment types; no credit, and no payment forms concealing loans (RD 1614/2011 art. 37); no negative balances. Virtual assets reported as not permitted (to be confirmed). | Withdrawal ordered within 24 hours (RD 1614/2011 art. 35). Each deposit and withdrawal reported with method, provider, last four digits and a holder-verified flag; identity verified within one month before prizes are paid. | Due diligence at €2,000, single or linked. Suspicious reports to SEPBLAC without delay on form F19-1; the electronic channel is reserved for credit institutions. | Player deposits in exclusive, separate current accounts in Spain notified to the regulator, used only for gaming, with limited signing powers (RD 1614/2011 art. 39). Licence guarantees (€2 million initially). | Internal control system: XML to the regulator’s schema in an EU data warehouse, real-time, daily and monthly; central self-exclusion register (RGIAJ). AML 10 years. | Sent to regulator |
| FranceCorrect this profile: France | Autorité nationale des jeux | Online betting, horse racing and poker only; no online casino. Payments through EU/EEA payment service providers (Law 2010-476 arts. 17–18). Virtual assets not addressed. | Holder of the payment account verified; balances repaid only to a single payment account the player holds with an EU/EEA provider (art. 17), immediately — delay allowed only to file a suspicious report. | Every online player identified at account opening. Suspicious reports to Tracfin through ERMES, in principle before execution. | Surety, trust, insurance, escrow account or similar mechanism guaranteeing repayment of all player balances in all circumstances (Law 2010-476 art. 15). | Real-time archiving of all data on a frontal in metropolitan France with a certified data safe (art. 31); national gambling ban register. Data retained 5 years after account closure. | Sent to regulator |
| NetherlandsCorrect this profile: Netherlands | Kansspelautoriteit | Instruments from EU-licensed banks, payment or e-money institutions, traceable to the player; anonymous instruments prohibited. Credit-card and virtual-asset rules not found. | Deposits only from the player’s own account; payout without undue delay, no minimum withdrawal and no wagering requirement on deposited funds. | Full due diligence before play. Reports to FIU-Nederland through goAML (objective indicator €15,000). Affordability checks from €700 monthly net deposits (€300 for ages 18–23). | Third-party funds foundation or approved equivalent. | Operator-hosted Controle Databank in the Netherlands, fed near real time as XML to the regulator’s schema; CRUKS check. AML 5 years. | Sent to regulator |
| BelgiumCorrect this profile: Belgium | Gaming Commission | Credit cards prohibited online. No virtual-asset framework. | Account in the player’s name and non-transferable; separate account per licence and no transfers between player accounts (law of 18 February 2024). | €200 weekly deposit cap per operator; an increase needs approval after a National Bank credit-register check. Identification for stakes or winnings of €2,000; suspicious reports to CTIF-CFI through goAML (sole channel since October 2024). | Not found. | Permanent data link to the Commission; EPIS exclusion check before play. AML records 10 years. | Sent to regulator |
| GermanyCorrect this profile: Germany | Gemeinsame Glücksspielbehörde der Länder (GGL), public-law body in Halle (Saale), set up 1 July 2021 under the GlüStV 2021; licenses and supervises online sports betting, virtual slots and poker, runs LUGAS since 1 Jan 2023 and is their GwG supervisor (§ 50 Nr. 8 GwG). OASIS exclusion file run by Regierungspräsidium Darmstadt (§ 8). FIU at the Generalzolldirektion receives STRs (§ 43 GwG). | Deposits and payouts only via a payment account in the player's name at a bank, payment or e-money institution; anonymous instruments banned (§ 6b(4)); GwG § 16(4): direct debit, transfer or card in the player's name; exception EUR 25 single / EUR 100 a month; no interest (§ 16(3)). No loans (§ 4(5)). Virtual assets: not found. GGL can bar banks and PSPs from illegal-gambling payments (§ 9(1)). | Payment account in the player's name (§ 6b(4)); no play or payout before identity verified (§ 6a(4)); transfers between player accounts banned (§ 6b(5)). Payouts only to the player's own account, via the § 16(4) methods, with a purpose text (GwG § 16(7)); no same-method rule in the GlüStV. Closing balance paid within 5 working days, no fees (§ 6b(7)); player-set automatic payout offered (§ 6b(3)). | No EUR 2,000 threshold online (GwG § 10(5) disapplied by § 16(1)); full CDD before play (§ 6a(4)). STRs to the FIU without delay (§ 43 GwG) via goAML; registration mandatory since 1 Jan 2024 (§ 45(1)). Deposit limit max EUR 1,000 a month cross-operator, checked in the Limitdatei; by permit to EUR 10,000 with proof of means, EUR 30,000 for max 1% of players (GGL rule); increase after 7 days (§ 6c). | Entrusted funds on a non-offsetting account at a credit institution, separate from own funds, protected against insolvency of operator and bank, always equal to the sum of player balances, not usable for third-party claims; confirmed to the authority by a lawyer or tax adviser (§ 6b(6)). Permit security: EUR 5m bank guarantee, up to EUR 50m (§ 4c(3)). Game payments via a German or EU bank (§ 4a). | LUGAS (GGL, run by Dataport): Limitdatei (§ 6c) and Aktivitätsdatei against parallel play (§ 6h), checked before deposit and play; OASIS at registration and login (§ 8). Safe-Server: operator-run store of all supervision data, immutable, pseudonymised, direct GGL access (§ 6i(2)); format in unpublished guideline; retention not found. Player data 5 years after closure (§ 6g); AML 5 years (GwG § 8). | Sent to regulator |
| AustriaCorrect this profile: Austria | Finanzamt Österreich (Dienststelle für Sonderzuständigkeiten): concessions and supervision since 1 Jan 2021 (GSpG § 14, § 19); BMF: legislation, strategy. Geldwäschemeldestelle (A-FIU) at the Bundeskriminalamt (§ 4 Abs 2 BKA-G). Sports betting: Länder Wettengesetze (W, NÖ, OÖ, Sbg, Stmk, Ktn, T, Vbg; Burgenland not located). Bill 594 d.B.: Finanzamt = Glücksspielaufsichtsbehörde (§ 60 Abs 56). | Federal monopoly (§ 3); one concession covers Elektronische Lotterien (§ 12a, § 14 Abs 6): Österreichische Lotterien / win2day to 30 Sep 2027. No payment-method or virtual-asset rule found. Bill 594 d.B. (5 Aug 2026, in committee; EU standstill): unlimited online concessions, cooling-off 1 Jan 2027, start Oct 2027; PSPs stop payments for banned games in 3 banking days (§ 56e, from 1 Jan 2027). | No name-match, closed-loop or payout-deadline rule found (GSpG §§ 12a, 14, 16, 31c; bill §§ 13, 14). Payout terms sit in the Spielbedingungen for Elektronische Lotterien, which must regulate 'die Geltendmachung und die Auszahlung der Gewinne' and need prior approval of the Finanzamt Österreich (§ 16 Abs 1, Abs 7 Z 3); not opened. | FM-GwG applies via GSpG § 31c. Online (§ 12a Abs 1): identification (FM-GwG § 6) only where the risk analysis shows no low risk (§ 31c Abs 3 Z 2); EUR 2,000 per visitor and day is a casino and VLT trigger (Abs 2 Z 4). STRs 'unverzüglich' to the Geldwäschemeldestelle (FM-GwG § 16) via goAML; 5-year look-back on FIU enquiries. Bill: deposit cap EUR 250 a week under 26, EUR 1,680 a month from 26. | No segregation or trust rule found (GSpG §§ 12a, 14, 16, 19, 31c; bill §§ 13, 31g-31i). Concession security: Sicherstellung of at least 10 pc of the share capital, mainly for concession and gambling levies (§ 14 Abs 4 Z 2); paid-in capital at least EUR 109m (§ 14 Abs 2 Z 3); Staatskommissär at the concessionaire (§ 19 Abs 2). | Today: VLTs linked to the Bundesrechenzentrum (§ 12a Abs 4); audited accounts to the Finanzamt Österreich within 6 months (§ 19 Abs 4); AML records 10 years after the relationship ends (FM-GwG § 21 via § 31c Abs 3 Z 1). Bill 594 d.B.: Sperrregister (§ 31g), Limitregister (§ 31h), Safe-Server at operator cost (§ 31i); in force 1 Jan 2027 (§ 60 Abs 54); participation start by BMF ordinance. | Researched |
| SwitzerlandCorrect this profile: Switzerland | ESBK and Gespa | Online casino only as an extension of a land-based concession; lotteries and betting a monopoly. Virtual assets not accepted; ESBK found in September 2023 that the framework lacks safeguards for crypto. | Swiss-resident players only; winnings only to accounts in the player’s name; online lottery and betting winnings over CHF 1,000 paid directly to that account (GwV-EJPD art. 21). | Identity checked at account opening; AML identification at CHF 4,000 within 24 hours (casinos) or CHF 15,000 deposits / CHF 10,000–25,000 winnings within 30 days (lotteries, betting). Reports to MROS through goAML. | Not found. | Shared exclusion register, also valid in Liechtenstein since January 2025; DNS blocking. Retention 10 years. | Sent to regulator |
| LiechtensteinCorrect this profile: Liechtenstein | Amt für Volkswirtschaft (Office of Economic Affairs) under the Geldspielgesetz (GSG, LGBl. 2010 No. 235) and the Geldspielverordnung (GSV, LGBl. 2011 No. 221); due diligence under the Sorgfaltspflichtgesetz (SPG, LGBl. 2009 No. 47); suspicious activity to the Stabsstelle Financial Intelligence Unit (FIU). | Deposits by bank transfer, card or e-money; cash prohibited (GSG Art. 29). Cards and accounts accepted only if they are in the player's name (GSV). No credit-card ban found. Virtual assets not provided for in the instruments opened. | One customer account per player (GSV). Payouts exclusively to the account from which the player last made deposits (GSG). The balance withdrawable at any time, in a single transaction, free of deductions (GSV). Limits on transfers, stakes or losses per period offered; general gaming ban for under-18s, self-excluded persons and persons under international sanctions (GSG). | Due diligence for casinos and online money-game providers at transactions of CHF 2,000 or more, winnings or stakes or both (SPG Art. 3). Suspicious activity reported to the Stabsstelle FIU at once, in writing, at any amount (SPG). | All customer balances covered by liquid funds at all times; the account bank waives set-off; accounts at banks licensed in Liechtenstein (GSV). | Operation and maintenance of the online gaming platforms essentially in-country (GSG). Customer documents, business correspondence and records kept 10 years after the relationship ends (SPG). Reporting cadence to the supervisor: not found. | Researched |
| DenmarkCorrect this profile: Denmark | Spillemyndigheden | Deposits only through regulated payment providers; no cash; no credit. Unregulated virtual assets not accepted. | Identification by national ID and eID; no transfers between accounts; balance paid within 5 working days of closure. | Full identification at registration; suspicious reports through goAML. | Entrusted funds in a separate, insolvency-protected bank account. | Operator-hosted SAFE data vault (XML), sealed daily with a regulator-issued tamper token; ROFUS checks. SAFE 12 months online plus 48 archived; KYC 5 years. | Researched |
| SwedenCorrect this profile: Sweden | Spelinspektionen: gambling authority under Spellagen (2018:1138) and Spelförordningen (2018:1475), licenses and supervises, keeps the Spelpaus register, supervises licensees' AML compliance and issues SIFS rules. Finanspolisen (Polismyndigheten) is the FIU: STRs under 4 kap. 3 § Lag (2017:630) go to it via goAML. | Deposits only from a payment service provider under the Payment Services Act (13 kap. 5 §); no cash; stakes in SEK (LIFS 2018:2). From 1 May 2026 (SFS 2026:90, 14 kap. 8 §) no credit-financed play: credit cards, invoice or other third-party credit (prop. 2025/26:11). Virtual assets: no rule found; excluded in effect. PSPs must reject MCC 7995 card payments to unlicensed operators (SF 13 kap. 1 §). | Deposit card, account or other payment service must belong to the account holder, also after a change (SIFS 2022:3 9 kap. 8 §); one account per licensee; no transfers between accounts (13 kap. 6 §). Temporary account until ID verified: max 1/4 price base amount (SEK 14,800 in 2026), 30 days, no payouts. Closing balance within 5 business days, no fee (SF 10 kap. 2 §). Same-method rule not found. | Deposit limits per day, week and month set before online play; cut immediate, rise after 72 h; contact above SEK 10,000 a month (14 kap. 7 §; SF 11 kap. 3, 5 §§). CDD at registration and for single or linked stakes or winnings of EUR 2,000 or more (AML Act 3 kap. 5 §). STRs to Finanspolisen without delay (4 kap. 3 §) via goAML. SIFS 2019:2 AML rules; guidance: under SEK 20,000 a year low risk. | Player balances kept separate from the licensee's own funds (13 kap. 7 §); player told at account opening how funds are protected in insolvency and must specifically accept those terms (LIFS 2018:2 § 7). Prize-pool funds separated (SF 5 kap. 4 §). No guarantee, trust or insurance requirement found (Spellagen, Spelförordningen, LIFS 2018:2 and 2018:5 searched). | Spelpaus (14 kap. 12 §) checked before play (12 kap. 4 §), at registration and each login (SF 11 kap. 9 §) and before direct marketing, via API (SIFS 2026:3, 1 Aug 2026). Gaming system in Sweden unless allowed abroad with remote access (16 kap. 2 §); no data vault; half-yearly RG statistics. Retention: system data 5 years (16 kap. 5 §); AML 5 years, up to 10. B2B software permit since 1 July 2023. | Regulator reviewing |
| NorwayCorrect this profile: Norway | Lotteri- og stiftelsestilsynet | State monopoly (Norsk Tipping, Norsk Rikstoto) plus a private market: online and internet-based bingo are licensed; no gambling on credit. | One account per operator. eID is not a legal requirement but the operators' own choice (most use it). Full identification at registration. Mandatory bet limits (daily and monthly). | Suspicious reports to the FIU. | Gambling operators keep a separate gambling account for each gambler; gamblers have an overview of their transactions and gambling activity. | Banks block payments to unlicensed operators by merchant category and named payment facilitators; DNS blocking. Retention 5 years. [Reviewed with Lotteritilsynet, October 2026.] | Regulator-reviewed |
| FinlandCorrect this profile: Finland | Poliisihallitus (National Police Board) supervises and licenses until 30 June 2027 [Arpajaislaki 1047/2001; Rahapelilaki 10/2026 s. 106]; Lupa- ja valvontavirasto from 1 July 2027 [s. 57]; Ministry of the Interior (game rules and decrees); AML supervisor of gambling: Poliisihallitus [Rahanpesulaki 444/2017 ch. 7 s. 1]; FIU: Rahanpesun selvittelykeskus (NBI). | Veikkaus monopoly to 30 June 2027; licensed online betting and casino from 1 July 2027 [Rahapelilaki 10/2026]; applications to Poliisihallitus from 1 March 2026. From 1 July 2027: no play on credit or pledge, no loan money passed on (s. 25); player-set daily and monthly bank-to-game-account limits (s. 30). Virtual assets: no acceptance rule found; blocking covers crypto providers (2024). | Identity verified at registration; play only logged in; personal game account (Rahapelilaki ss. 20, 22, 28, from 1 July 2027; Veikkaus now: one personal account, Arpajaislaki s. 14). Transfers from the player's own bank account (s. 30); no rule that the bank-account holder must match - Parliament asked for one to be assessed (HaVM 28/2025). Balance paid without delay on closure, no fee (s. 23). | Rahanpesulaki 444/2017: gambling operators are obliged entities (ch. 1 s. 2); customer identified and verified when stakes or winnings reach EUR 2,000, single or linked (ch. 3 s. 2); suspicious transactions reported without delay to the Rahanpesun selvittelykeskus (FIU, NBI) (ch. 4 s. 1); channel (goAML) not verified. No threshold-based routine report found. | Funds on the game account kept separate from the licence holder's own funds; how they are protected in insolvency told to the player at the latest when the account is opened (Rahapelilaki s. 22(4), from 1 July 2027; Ministry of the Interior may issue a decree on the game account, none found). Guarantee or bond: not found. | Game and account data to the authority, kept 5 years (Rahapelilaki s. 45, from 1 Jul 2027); personal data 5 years (s. 36); CDD records 5 years (AML Act ch. 3 s. 3). Self-exclusion by notice to the authority, indefinite bar min 1 year (s. 29). Payment blocking of listed operators from 2023 (Arpajaislaki s. 62 l). Veikkaus: fast-game loss limits EUR 500/day, EUR 2,000/month (SM decree 16.9.2026). | Sent to regulator |
| EstoniaCorrect this profile: Estonia | Tax and Customs Board (Maksu- ja Tolliamet, EMTA): activity licences, operating permits, supervision, blocking. FIU is the Rahapesu Andmebüroo (fiu.ee); from 1 Jan 2026 EMTA needs FIU approval before licensing and the FIU may draw operators' reporting data from EMTA (Gambling Act § 57(4)). Minister of Finance issues the data regulation (määrus nr 26). | From 1 Jan 2026 a stake may be money, a monetary obligation or a crypto-asset (Gambling Act § 2(2)); remote stakes must arrive through a credit institution, payment institution, e-money institution or crypto-asset service provider licensed in the EEA (§ 5(3)). Permit application must describe how a crypto or intermediary payment is proved to come from the player's account (EMTA form, Annex 8). | Stakes accepted only from the same player's account; payouts only to the account paid from (§ 53(1)(5)-(6); EMTA form, Annex 8). From 1 Jan 2026 the account is one at a credit institution, payment institution or e-money institution, or cash at the operator's gaming location (§ 53(1)(5)). Operator credit agreements banned (§ 34(1)). One-account rule, payout deadline: not found (full Act searched). | AML Act (RahaPTS) § 19(3): due diligence when a payout, a stake or both reach EUR 2,000, in one or linked payments within a month. STR, UTR, cash transaction (CTR: cash over EUR 32,000 in one or related transactions) and TFR reports to the FIU, immediately and no later than 2 working days, through the FIU web form into RABIS (rabis-web.fiu.ee) or XML over X-tee. | No segregation, trust or player-balance guarantee rule found (Gambling Act §§ 1-33¹, EMTA permit pages and forms). Share capital at least EUR 1,000,000 for games of chance incl. remote, EUR 130,000 toto, EUR 25,000 skill games (§ 9); additional reserve of at least one-third of share capital built from at least one-seventh of annual net profit (§ 10). Security deposit (tagatis): not found. | Electronic recording and control system (EAKS) connected to EMTA's system; EMTA requests data over X-tee (EHMA); data list in Minister of Finance Regulation 26. HAMPI restrictions list (§ 39) checked before play; term 6-36 months set by the player. Gambling records kept at least 5 years (§§ 53(3), 54(3)); AML records 5 years (RahaPTS § 47; FIU guidelines 5.2, 5.4). Unlicensed sites blocked. | Sent to regulator |
| LatviaCorrect this profile: Latvia | State Revenue Service | Settlement through a credit-institution account; credit cards permitted when the card belongs to the player; payment service providers allowed; every transaction identified to the individual making it. Supervision transferred to the State Revenue Service (VID) in 2026. | Winnings may not be transferred to an account from which no deposit into the gaming account was made. Land-based: winnings may be paid in cash, identified and reported to the FIU at the reporting thresholds. | AML standards as across the EU. Suspicious reports and threshold declarations to the Financial Intelligence Service through goAML. | Held exclusively in a Latvian credit institution or bank account; no requirement to hold them separately. | Self-exclusion register; quarterly statements, and quarterly turnover reports on the VID's demand; operators must give the VID unimpeded remote access to their gaming platforms and the information in them; domain blocking within 5 working days. Retention 5 years. [Reviewed with the State Revenue Service, October 2026.] | Regulator-reviewed |
| LithuaniaCorrect this profile: Lithuania | Gaming Control Authority | Stakes only from the player’s payment account to the operator’s. | Winnings to the gaming account or a payment account the player names; cash payout at a land-based venue on request. | Identify (unless already established) and verify the client and register the client at a deposit, payout or exchange of cash for chips or chips for cash above EUR 1,000 or the equivalent, in a single or several linked operations. Suspicious reports to the FNTT. | Winnings reserve of at least €72,400 in securities, bank funds or cash, restored within 2 calendar days. | The operator platform must be connected to LAKIS (Slot Machine Control Information System) and must record and transmit to LAKIS, at least every 30 days, the data specified in the Law on Gaming. Remote access to operator systems; self-exclusion register; illegal-operator list binding payment providers. Platform data 8 years from the end of the remote gaming contract (Art. 16(8), from 1 Nov 2025; confirmed by the LPT, 14 October 2026). [Reviewed with the Gaming Control Authority, October 2026.] | Regulator-reviewed |
| RomaniaCorrect this profile: Romania | ONJN | Banking-system instruments; payment processors licensed as gambling suppliers and bound by the operator blacklist. | Deposits capped at €200 until verification within 30 days; winnings paid within 3 business days. | Suspicious reports to ONPCSB before execution; cash from €10,000 within 3 working days. | Separate account at a Romanian bank; guarantee of €2 million (€5 million for casino). | Safe server and mirror server in Romania; real-time self-exclusion register. Retention 5 years. | Researched |
| BulgariaCorrect this profile: Bulgaria | National Revenue Agency | Stakes and payouts through a bank account licensed in Bulgaria or the EU; winnings above BGN 5,000 (about €2,500) only by bank transfer. | Not found. | Due diligence at €2,000; suspicious reports to FID-SANS, before the operation where possible. | Collateral in cash or a bank guarantee. | Every wager and payout to an Agency server in real time; gambling data stored in Bulgaria; exclusion register; payment institutions barred from serving unlicensed operators. Retention: AML 5 years, otherwise the tax limitation period. | Sent to regulator |
| HungaryCorrect this profile: Hungary | SZTFH | Transfer, linked card, e-money and carrier billing; online casino reserved to land-based concessionaires. | Payment-account name must match the player’s; winnings to the player’s own account within 30 days of the claim. | Due diligence at winnings of HUF 600,000; suspicious reports to NAV PEI through its online form. | Not found. | Remote back-office access; player-protection register including court-ordered restrictions; card payments to unlicensed operators blocked. Gambling data 6 years. | Sent to regulator |
| PolandCorrect this profile: Poland | Minister of Finance (minister właściwy do spraw finansów publicznych): betting permits and casino concessions, approval of responsible-gaming rules, Register of domains. National Revenue Administration (KAS): supervision and access to archived data (art. 15d). FIU: Generalny Inspektor Informacji Finansowej (GIIF); gambling operators are obliged institutions (AML Act art. 2(1)(20)). | All online gambling except betting and promotional lotteries is a state monopoly, run by Totalizator Sportowy (art. 5(1b)); online betting under a Ministry permit (art. 6(3)); .pl domain only (art. 15d(2)). Payment transactions of online games only via payment service providers listed in art. 4(2)(1)-(4), (6), (9) of the Payment Services Act (art. 15e). Credit cards and virtual assets: not found. | Registration on a player account or temporary player account is a condition of starting and continuing play; play must stop when the account balance is exhausted; 18+ verification (responsible-gaming rules approved by the Minister, art. 15i). Own-account, third-party payment and payout-deadline rules: not found. | Due diligence when stakes placed or winnings collected reach EUR 2,000 (AML Act art. 35(1)(4)). Suspicious-circumstance notifications to GIIF without delay, at latest 2 business days after confirming suspicion (art. 74); above-threshold reports - cash and transfers over EUR 15,000 - within 7 days (art. 72); via SI GIIF (regulation of 4 October 2018). Art. 72 exclusions do not cover gambling. | Financial security of PLN 480,000 for online betting (PLN 40,000 per land-based betting point), protecting players' financial interest and the gaming tax, as a bank or insurance guarantee or a cash deposit on the account named by the authority (art. 63(1), (2a), (3)-(4); Reg. of 23 June 2010). Segregation of player balances: not found. | Domain register (hazard.mf.gov.pl) feeds ISP and payment-provider systems; ISPs block in 48 h (art. 15f); payment providers stop in 30 days, fine to PLN 250,000 (arts 15g, 89). Game data archived in real time in PL/EU/EEA, KAS remote access, 5 years (art. 15d). Winnings register at PLN 2,280+, certificates kept 5 years (art. 20); quarterly data by the 21st (art. 79). AML records 5 years (art. 49). | Sent to regulator |
| Czech RepublicCorrect this profile: Czech Republic | Ministry of Finance (basic licences, kauce, RVO register, blocklist; gambling department odbor 73). FIU is the Financial Analytical Office (FAÚ). | Deposits to the online user account only from the registered payment account or instrument held in the player's own name at a provider authorised in the EU or EEA (§ 17e); cash deposits and cash withdrawals capped at CZK 10,000 per 24 hours (§ 17e(6)). Only monetary funds may be used as stakes. Virtual assets may not be prizes (§ 10(6)); no other crypto rule found. | No deposits from, or transfers to, any account or instrument other than the registered one (§ 17e(4)-(5)). Winnings paid without undue delay, within 30 days of evaluation (§ 10a). Funds in the user account paid out without undue delay, on request and free of charge; in justified cases the payout period may be extended to up to 60 days (§ 17i). Ban on operator credit to players not found. | Player identification always mandatory when the business relationship is established, i.e. when the user account is opened (AML Act); identification also when a transaction exceeds EUR 1,000 (§ 7(1)); suspicious transaction reports to the FAÚ without undue delay, immediately in urgent cases (§ 18), through its e-form (data box required). | Kauce (security deposit) per operator, no longer per game type: one deposit regardless of the games operated, in four categories from CZK 20 million to CZK 300 million, set from the gambling tax paid for the preceding period (§ 95); held on the Ministry's account or as a bank guarantee; no longer used to cover unpaid winnings. Segregation of player balances not found. | Daily automated reporting under vyhláška 10/2019 Sb. (MF pokyn: denní herní výkaznictví); RVO register (§§ 16-16b: benefit recipients, criminal bans, insolvency, maintenance defaulters, execution debtors, self-exclusion) via AISG; blocklist (§§ 84a-84d): ISPs block listed sites, PSPs block payment accounts, apps barred. Verification data 3 years (§ 17c); AML records 10 years (AML Act § 16). | Regulator-reviewed |
| SlovakiaCorrect this profile: Slovakia | Úrad pre reguláciu hazardných hier (ÚRHH), regulator under Act 30/2019 (§ 1(1)(e), § 77); Ministry of Finance issues the implementing decrees (Decrees 134/2019 and 142/2019). FIU: Finančná spravodajská jednotka (FSJ), an organisational unit of the Police Presidium (Prezídium Policajného zboru), not of the National Crime Agency. | Stakes in cash or cashless (§ 14(8)). Server records each account's payment account or card number, deposits, withdrawals (Decree 142/2019 § 2(2)(b)). ISPs and payment providers block listed sites and accounts on the URHH weekly blacklist, no court order (§ 85, from 1 January 2026). Bank card fees on player-account deposits taxed separately from 2026 (261/2025). Virtual assets: not found. | Online play requires registration and a player account; one account per operator; balance refunded on closure (§ 31). Funds deposited above the stake withdrawable after any game (§ 14(8)). Winnings paid within 5 working days of the claim, AML Act aside (§ 14(18)); claim period at least 30 days (§ 14(17)). No loans or credit to players (§ 33(5)); no own-account or third-party payment rule found. | Gambling operators are obliged entities (AML Act 297/2008 § 5(1)(d)). Basic due diligence for a gambling transaction of EUR 2,000 or more, single or linked (§ 10(2)(e)); identification and verification for other transactions of EUR 1,000 or more (§ 10(3)). Unusual transactions, incl. attempts, reported to the FSJ without undue delay (§ 17), only via the goAML web application since 1 January 2025. | Financial guarantee (finančná zábezpeka) on the URHH account, used only for levies, default interest, URHH funding, fines and payment of winnings (§ 2(t), § 67); EUR 750,000 for online betting or internet-casino games, EUR 1,250,000 for both, EUR 1,500,000 combined with land-based (§ 69). Player-account balance refunded on closure (§ 31(3)). Segregation of player funds: not found. | Server in Slovakia, free URHH online access (§ 14(21)-(22); Decree 142/2019 § 2). Daily notices of stakes and winnings for internet games, monthly for some lotteries (§ 74; Decree 134/2019). Register of excluded persons (§§ 33-38). Game data on server to end of the next year, backups two prior years (142/2019 § 2(11)); player interface 60 days (§ 12(3)); AML records 5 years (297/2008 § 19(2)). | Sent to regulator |
| SerbiaCorrect this profile: Serbia | Games of Chance Administration | Cashless, plus cash at approved desks; cash pay-ins and cash payouts each capped at RSD 1,175,000 per player in 30 days. | Deposits only from, and withdrawals only to, the player’s own current account; no transfers between players’ accounts. | Due diligence at €2,000; identity checked before any deposit. Reports to the APML. | Guarantee (amount to be confirmed). | Every transaction by API in real time; database or mirror in Serbia; monthly payment-channel reports by the 5th through the Administration’s web service. Retention 10 years. | Sent to regulator |
| CroatiaCorrect this profile: Croatia | Ministry of Finance | Cards, transfers, e-payments, cash at betting shops; activation vouchers for online casino. | One registered account for withdrawals, checked against the tax-number register; online casino accounts withdraw winnings only; dormant balances returned after 12 months. | Reports to the Anti-Money Laundering Office. | Bank guarantees (from about €398,000 for online casino). | Real-time link to the Ministry; central exclusion register (2026). Retention 5–10 years. | Sent to regulator |
| Bosnia and HerzegovinaCorrect this profile: Bosnia and Herzegovina | Federation: Federal Ministry of Finance approves, Tax Administration FBiH supervises and runs the on-line monitoring (Zakon o igrama na sreću, Sl. novine FBiH 48/15, 60/15). Republika Srpska: Ministry of Finance licenses, Republička uprava za igre na sreću within it (Zakon o igrama na sreću, Sl. glasnik RS 22/19). AML is state-level: FOO within SIPA (Sl. glasnik BiH 13/24). | Federation online betting: winnings paid at betting shops, to the player's virtual account or to the registered transaction account (Pravilnik, Sl. novine FBiH 59/16, 23/24, Art. 32); deposit methods not listed. RS: players pay electronically, non-cash, through bank accounts at a bank seated in RS (Arts. 89, 92). Crypto: not found in either entity. | Federation: payout on written request to the player's transaction account at once, at latest within 3 days (Art. 33); funds returned there after 12 months without a deposit; own-name rule and third-party payments not found; identity verified before registration, no ID photo upload. RS: one account per player; deposits and payouts only for registered players with a virtual account (Arts. 91, 92). | State AML law (Sl. glasnik BiH 13/24): gambling operators obliged entities (Art. 5); CDD at registration on a betting platform regardless of stake (Art. 19(2)); identification at KM 2,000 or more (Art. 19(4)); KM 30,000 CDD trigger (Art. 12). FIU: FOO within SIPA. STR before execution, immediately (Art. 42); cash transactions of KM 30,000 or more at once, at latest 3 days (Art. 43). | Federation: licence guarantee or dedicated deposit KM 1,000,000 casino, KM 600,000 betting (Arts. 71, 93; not online-specific); online player funds at a bank on segregated accounts, shortfall covered within 5 days, shielded from the operator's creditors (Pravilnik Art. 31). RS: bank balance must always cover player funds (Art. 89); fee KM 300,000, guarantee 25% of annual fee costs (Arts. 17, 85). | Federation: direct on-line link to the Tax Administration server (Art. 82); internet system linked to its central office as one separate payment point (Pravilnik Art. 6); payouts of KM 10,000 or more logged (Art. 8); paid tickets kept 1 year (Art. 87). RS: real-time access, data kept in RS, fee return by the 15th monthly, receipts records 5 years (Arts. 14, 87, 94). AML records 10 years (Art. 92). | Sent to regulator |
| MontenegroCorrect this profile: Montenegro | Games of Chance Administration | Euro only; online limited to land-based licensees; banks can be asked to block payments to unlicensed sites. | No third-party payment at the cash desk; separate record and promotional accounts. | Identification at €20 stakes or winnings and at €2,000 transactions. | Bank guarantees covering winnings. | Real-time online supervision of all payments in and out. Retention 5 years. | Sent to regulator |
| North MacedoniaCorrect this profile: North Macedonia | Ministry of Finance (Law on Games of Chance, 2026); Public Revenue Office runs the supervisory information system (NIS); FIU: Financial Intelligence Office (AML Law). | Payments by card or bank transfer only, through banks seated in North Macedonia; denars for residents (Law on Games of Chance 2026). Virtual assets not provided for. | One account per player with each operator; the payment account and the cards named at registration (Law 2026). Withdrawals to the player's payment account or his credit or debit card, within 5 working days of the request. Loss limits per period set with the operator; under-18s excluded; self-exclusion available. | Identity proven with a high-assurance electronic ID (Law 2026). AML identification from EUR 3,000 within 5 days, single or linked transactions (AML Law); reports to the Financial Intelligence Office. | Player funds kept separately from the operator's own funds, on a dedicated account for registered participants (Law 2026). | Online operations run through the supervisory information system (NIS) linked to the Public Revenue Office's system, in real time; monthly returns to the Public Revenue Office and the Ministry of Finance; data kept in North Macedonia (Law 2026). | Researched |
| KosovoCorrect this profile: Kosovo | Tax Administration | Gambling prohibited since 2019; no licensed flows. | Not applicable. | FIU-K. | Not applicable. | A profile would cover payment-side blocking only. | Sent to regulator |
| Eurasia, Middle East, Asia and Pacific | |||||||
| UkraineCorrect this profile: Ukraine | PlayCity | Non-cash only, through current accounts at Ukrainian banks, with a fiscal receipt per transaction; gambling with credit funds banned; no route for virtual assets. | One player, one gaming account, one personal bank account; no third-party bets or account use. Spending and time limits set before play; self-restricted players paid out within 5 days. | Threshold transactions from UAH 55,000 for gambling (UAH 400,000 generally), reported within 5 business days or monthly, by type; suspicious reports immediately; to the State Financial Monitoring Service. | Bank guarantee or deposit of 7,200 minimum monthly wages securing payment of winnings. | State Online Monitoring System in pilot (12 operators connected by April 2026; second phase due end 2026): each bet, payout and refund in near real time with a unique identifier. AML records 5 years. | Sent to regulator |
| GeorgiaCorrect this profile: Georgia | Ministry of Finance; Revenue Service | GEL only (foreign payments converted to GEL on receipt), by card, licensed payment providers and bank transfer; virtual assets not a lawful means of payment. | Biometric and age checks against state databases; players aged 25 and over; 5% income tax withheld on withdrawals. | Due diligence when accepting funds or paying winnings above GEL 5,000; threshold and suspicious reports to the Financial Monitoring Service. | Security required for totalisators. | Connection to the national control system. Player data 5 years; AML records 5 years. | Researched |
| ArmeniaCorrect this profile: Armenia | Ministry of Finance; State Revenue Committee | Cash, e-money and terminal top-ups banned; Armenian bank cards only; banks decline gambling-category payments to unlicensed operators (May 2026). | Dedicated gaming account funded only from a bank account or card verified as the player’s own; winnings only to a card. Gambling capped at 20% of declared annual income from January 2027. | Bets, winnings and lottery purchases from AMD 1 million reportable, with suspicious transactions, to the Financial Monitoring Center of the Central Bank. | Not found. | Central real-time platform for wagers, deposits and losses (rollout January 2027); five-year self-exclusion across all sites and blocking of unlicensed sites from January 2027. | Sent to regulator |
| AzerbaijanCorrect this profile: Azerbaijan | state operator (Azerlotereya) | State monopoly: one lottery and one licensed sports-betting operator; casinos allowed only on artificial islands (July 2025), none operating. Payment rules not found; no virtual-asset providers registered. | Not found. | Cash transaction reports from AZN 15,000 for lottery and betting organisers; suspicious reports to the Financial Monitoring Service. | Not found. | Central system not found. AML records at least 5 years. | Sent to regulator |
| BelarusCorrect this profile: Belarus | Ministry of Taxes and Duties (gambling supervision); regime set by Presidential Decree No. 226 of 6 June 2025 and Council of Ministers Resolution No. 764 of 24 December 2025; all gambling runs through the SKKS, the special computer cash system of the Monitoring Centre for the Gambling Business; financial monitoring by the Financial Monitoring Department of the State Control Committee. | Cash, cards, bank transfers and e-money, accepted through the SKKS; virtual gaming establishments (online casino and betting) licensed and connected to the SKKS; no credit from the operator. Operators use only accounts in Belarusian banks; players pay from their own Belarusian or foreign accounts. Card issuers refuse transfers to foreign MCC 7995 recipients; unlicensed gambling content blocked (Decree 226; Resolution 764). | Only the player's own cards, wallets and accounts; one gaming account per player, duplicates blocked within a working day; anonymous accounts prohibited. Winnings and returned stakes paid to the account, wallet or crypto platform the player paid from - another way only when that is impossible; payouts no later than the banking day after the player's request (Decree 226). At least 70% of deposited funds available for stakes (Resolution 764). Age 21; self-exclusion for 6 months to 3 years with any operator applies to all operators; debtors and court-restricted persons listed. | No check threshold or aggregation window set in the official texts. Operations under special control reported to the Financial Monitoring Department (State Control Committee) through the SKKS on a special form (Decree 226). The operator withholds personal income tax on winnings and returned stakes; the SKKS records it. | Special-regime bank account of 90,000 base units (20,000 for betting only) for taxes and payouts, not subject to seizure; player funds separated (Resolution 764). | Continuous real-time recording of operations in the SKKS, with round-the-clock access for the tax and state control bodies; semi-annual returns to the Ministry of Taxes and Duties (Resolution 764). Sites in the national .by domain segment; on a foreign segment, player accounts, identity data, IP addresses and actions are kept on servers in Belarus. Records 5 years (Decree 226). | Researched |
| KazakhstanCorrect this profile: Kazakhstan | Ministry of Tourism and Sports | Online limited to bookmakers and totalisators; bets and winnings only by electronic payment through the Unified Accounting System (NomadPay); banks reject payments to blacklisted operators. Virtual assets not accepted (to be confirmed). | Two-step biometric identification; debtors, specified public officials and self-excluded players blocked automatically at the central hub. | Reports to the Agency for Financial Monitoring; gambling-specific thresholds not found. | Not found. | Unified Accounting System (live 5 March 2026) records every bet, payment and winning, stores player data and enforces per-player monthly limits. | Sent to regulator |
| UzbekistanCorrect this profile: Uzbekistan | National Agency for Prospective Projects | Payments only through the state register, using cards issued or processed in Uzbekistan; crypto-assets barred as a means of payment (to be confirmed). First two licences issued July 2026. | Remote biometric identification before play; monthly spending cap reported at 10% of verified income (to be confirmed); self-exclusion through the register. | Reports to the FIU (Department for Combating Economic Crimes). | Reserve in a separate bank account (75,000 base units for betting and online games). | Unified State Register of Bets and Players: registrations, bets, deposits and winnings in real time; monthly limits. | Sent to regulator |
| United Arab EmiratesCorrect this profile: United Arab Emirates | GCGRA | No published list of methods; a new method needs a risk assessment; credit cards only in the player’s own name. Virtual assets not addressed. | Withdrawals by the deposit method; third-party payments limited or prohibited; national ID at sign-up. | Due diligence at AED 11,000, single or linked (Cabinet Resolution 134/2025, art. 3); such amounts must pass through a player account. Suspicious reports immediately to the UAE FIU through goAML. | Not found. | Unified Player Database across licensees (in development). Retention 5 years from the transaction or end of the relationship (art. 25). | Researched |
| IndiaCorrect this profile: India | MeitY; Online Gaming Authority of India | Online money games prohibited (2025 Act, in force May 2026); banks and payment firms barred from processing them, including virtual tokens. | Not applicable online. | Land casinos report to FIU-IND: cash over ₹10 lakh a month; suspicious reports within 7 days. | Not applicable. | Payment-blocking orders to banks; registration check before processing permitted games. Retention 5 years. | Researched |
| PhilippinesCorrect this profile: Philippines | PAGCOR (Electronic Gaming Licensing Dept) licenses e-games, e-bingo, sports betting and their online platforms; its PASED supervises AML compliance. AMLC is the FIU; casinos incl. internet-based casinos are covered persons (RA 10927). BSP licenses and supervises payment providers (BSFIs: banks, digital banks, NBFIs, EMIs) and is consulted on accredited payment SSPs (Annex E, 4 Jun 2026). | Payment gateway and channel providers are PAGCOR-accredited SSPs; BSP-supervised ones file BSP licences and NRPS/DPS proof and follow AMLC rules (Annex E, 4 Jun 2026). All BSIs must remove in-app gambling access links in 48 hours (M-2025-029, 14 Aug 2025); gambling barred from BSFI digital marketplaces (Circular 1237, 16 Jun 2026). BSP 2025-26 drafts not opened. Virtual assets: no rule found. | One valid government-issued photo ID with full name and date of birth, age 21+, photo stored; first deposit min. PHP 500 (Gaming Venue Operations (GVO) framework, 6 Nov 2025); selfie rule not found in readable texts. Closed-loop rule not found. Delayed payment of winnings or balances is an offence; no payout deadline. Platform losing accreditation: withdrawals only, 60 days (Annex F, Jul 2026). | Covered transaction for casinos incl. internet-based: a single casino cash transaction above PHP 5 million (RA 10927 s. 3(b)); reports within 5 working days (AMLA s. 9(c)); suspicious transactions of any amount by the next working day (AMLC GoTRACS 2024; text not opened). Operators' internal control rules must cover cash transactions reporting (GVO framework Art. III). | No segregation, trust or guarantee rule found (GVO framework, Annexes E and F, Offenses and Penalties Rev. 3 searched). Unauthorized deductions from winnings or redeemed balances are penalised; a platform provider whose accreditation is cancelled stays liable for unsettled player funds and keeps the platform open 60 days for withdrawals only (Annex F to the GSA framework, 10 Jul 2026). | Platform providers must integrate with PAGCOR's third-party audit platform (Offenses and Penalties Rev. 3, 6 Nov 2025); real-time access rule not found in readable texts. Records of gaming operations and financial records available to the PAGCOR Monitoring Team at no cost. Retention: books and records at least 6 years (GVO framework Art. XIX); AML records 5 years (AMLA s. 9(b)); CCTV 30 days. | Sent to regulator |
| AustraliaCorrect this profile: Australia | ACMA enforces the Interactive Gambling Act 2001 (online casino-style games prohibited; licensed online wagering permitted); wagering licences issued by state and territory authorities; AUSTRAC is the AML/CTF regulator and FIU (AML/CTF Act 2006). | Online wagering may not be paid for by credit card, a payment drawing on credit, or digital currency (Interactive Gambling Act 2001 s. 15C, 2024 amendment). | Licensed interactive wagering providers must not provide services to individuals registered on BetStop, the National Self-exclusion Register (IGA Part 7B). Customer account and payout rules sit in state and territory licence conditions; no federal rule found. | Threshold transaction reports for physical currency of AUD 10,000 or more to AUSTRAC within 10 business days; suspicious matter reports within 3 business days of forming the suspicion (AML/CTF Act 2006). | Not found at the federal level; state and territory licence conditions govern customer funds. | AML/CTF records retained 7 years from the day the record is made (AML/CTF Act 2006). Operator reporting to the licensing state or territory under its conditions; no federal cadence found. | Researched |
| Africa | |||||||
| South AfricaCorrect this profile: South Africa | National Gambling Board (National Gambling Act 7 of 2004); nine provincial licensing authorities with exclusive jurisdiction in their provinces (s. 30), including the Western Cape Gambling and Racing Board (Western Cape Gambling and Racing Act 4 of 1996) and the Eastern Cape Gambling Board (Gambling Act 5 of 1997 (Eastern Cape)); Financial Intelligence Centre (FIC Act 38 of 2001, Schedule 1 item 9). | Online limited to betting with provincially licensed bookmakers; other interactive games unlawful (National Gambling Act s. 11); the National Gambling Amendment Act 10 of 2008 was never brought into operation and the National Gambling Amendment Bill B27-2018 remains unresolved (NCOP rejection, mediation committee 2025). Supreme Court of Appeal, 21 October 2025: Gauteng-licensed bookmakers may not offer fixed-odds bets on roulette outcomes (Portapa v Casino Association of South Africa); the Western Cape Board states the judgment has no bearing in the Western Cape (statement 5 November 2025). Cash widely used; most winnings paid in cash or by EFT; bookmakers take EFT deposits (FIC sector risk assessment, January 2024); no primary source on vouchers found. Betting websites, apps and devices need the Board's prior approval (Western Cape Racing and Betting Rules rule 37; Eastern Cape Betting Rules rule 36.1); wagering systems certified to SANS 1718 Part IV (Western Cape Bookmakers Operational Rules 2017). No rule on virtual assets found in the National Gambling Act, the Western Cape and Eastern Cape instruments or the FIC gambling-sector assessment. | Western Cape: an account is one opened in the name of the customer by the bookmaker (Bookmakers Operational Rules 2017); bookmaker backups record each account player's name, a copy of the ID, driver's licence or passport, residential address and account number (Racing and Betting Rules rule 17(4)); signed copy of betting limits before telephone or electronic betting (rule 12(4)); winning bets payable immediately after the official result (rule 10); winnings to be claimed within 90 days. Eastern Cape: certified ID copy and residential address supported by documents (Betting Rules rule 19.4); winnings paid only once FIC Act requirements are met (rule 9); website terms must set out the procedure for opening deposit accounts (rule 36.1). Credit betting allowed with a signed credit instrument (Western Cape Regulations reg 45). No closed-loop or own-account payout rule found in the National Gambling Act or the Western Cape and Eastern Cape instruments. | FIC Act: cash threshold reports for cash above R49,999.99 (reg 22B, since 14 November 2022) within 3 business days; suspicious and unusual transaction reports within 15 business days (reg 24; days exclude Saturdays, Sundays and public holidays); terrorist property reports within 5 business days; all through the FIC's goAML portal (reg 22). Risk-based customer due diligence under the institution's Risk Management and Compliance Programme (s. 42). Western Cape: cash or negotiable-instrument transactions over R25,000, including deposits for gambling, recorded with the patron's identity and copies sent to the Board within 14 days after month end (Regulations regs 47-48, licensed operators). National online gambling tax proposed by National Treasury (discussion paper, 25 November 2025; comments closed 30 January 2026; reported rate 20% of gross gambling revenue in addition to provincial taxes); not enacted as at 8 October 2026. | No rule or published condition on holding or segregating bookmaker customer balances found in the Western Cape instruments opened (Act to s. 39, Regulations, General Rules 2003, Racing and Betting Rules 2014, Bookmakers Operational Rules 2017) or in the Eastern Cape Betting Rules 2017. The Western Cape minimum bankroll rule applies to casino operators only (reg 63, land-based). The Western Cape Act lets the Board attach licence conditions and require security before operations (ss. 37, 39). | Reporting to the provincial boards. Western Cape: monthly copy of computerised backups to the Board before the 15th unless the Board has remote access (Racing and Betting Rules rule 17(3)); weekly bookmaker return by Thursday (Regulations reg 70); audited annual financial statements within 120 days of year end (reg 43); other returns as the Board determines (reg 44); R25,000 transaction records within 14 days after month end (reg 48); system failures within 24 hours (rule 20). FIC risk and compliance returns (Directive 6 of 2023). Eastern Cape: monthly backups before the 10th (Betting Rules rule 19.3). The national central electronic monitoring system monitors limited pay-out machines (National Gambling Act s. 27). Retention: FIC Act records at least 5 years (s. 23); Western Cape books, accounts and records at least 5 years (reg 40) and backups, registers, ticket and field books 5 years (rules 17(3), 31(8)); Eastern Cape backups 5 years (rule 19.3). | Regulator reviewing |
| MalawiCorrect this profile: Malawi | Malawi Gaming and Lotteries Authority; FIA | Mobile money dominant in practice; no published rules on payment methods. Virtual assets unregulated. | Not found. | Due diligence for casino and remote gaming at MK2 million within 24 hours; cash reports from MK5 million; suspicious transaction reports within 3 days. 15% withholding on winnings at payout. | Not found. | Central monitoring system contracted in 2023. Retention 7 years. | Sent to regulator |
| KenyaCorrect this profile: Kenya | Gambling Regulatory Authority; FRC; KRA | Mobile money pay-bills declared to the regulator; payout route by amount — registered mobile wallet up to KES 500,000, wallet or bank up to KES 5 million, bank above. Virtual assets prohibited unless approved. (2026 regulations partly suspended by the High Court pending a hearing.) | Payouts to the player’s registered wallet or bank account; player-set deposit limits by period. | Suspicious transaction reports to the FRC within 2 days and to the regulator within 24 hours. Excise duty of 5% on deposits; withholding tax on winnings. | Separate from operating funds; security bonds. | Real-time API access for the regulator’s central monitoring; tax-authority integration. Retention 7 years. | Sent to regulator |
| Nigeria (Lagos)Correct this profile: Nigeria (Lagos) | Lagos State Lotteries and Gaming Authority; NFIU | Banks, cards, USSD, wallets and agents; payment gateways to be certified by the regulator (2026); payment data to be held in Nigeria from 2027. Virtual assets not addressed by the gaming regulator. | No published rule found; national identity number collected. | 5% withholding on net winnings. Suspicious transaction reports to the NFIU within 24 hours, through goAML; cash thresholds of N5 million (individuals) and N10 million (companies). | Bank guarantee securing winnings under the inter-state framework. | Regulation by the states since the 2024 Supreme Court ruling; certification of systems. Retention 5 years. | Sent to regulator |
| GhanaCorrect this profile: Ghana | Gaming Commission of Ghana | Mobile money dominant; online betting licensed by the Gaming Commission. Virtual-asset providers licensed under the 2025 VASP Act (Bank of Ghana); no gaming rule on virtual assets. | Ghana Card the only ID accepted online; biometric check against the national ID database on each bet and on each claim for winnings (since 2025). | Suspicious reports to the FIC within 24 hours, through goAML; cash-report threshold set by the FIC per sector (gaming amount not found). 10% withholding on winnings repealed April 2025; 20% tax on gaming revenue. | Not found. | Monthly gaming-revenue returns to the tax authority by the 15th; gaming administration and monitoring system in procurement since 2023 (status to be confirmed). Retention 5 years. | Sent to regulator |
| BotswanaCorrect this profile: Botswana | Gambling Authority (Gambling Act 2012, Cap. 19:03; supervisory authority for casinos under the Financial Intelligence Act 2022, Sch. II); Financial Intelligence Agency (FIU, goAML); NBFIRA licenses virtual-asset service providers (Virtual Assets Act 2025). | No remote regime in the Act: a bookmaker's licence covers fixed bets on sporting events on the licensed premises (s.82(1)); six bookmaker licensees listed, online betting under them reported since 2025 (press); no blocking rule. Banking and payment arrangements approved by the Authority, changes within 30 days (Regulations 2016 reg 79); no credit (s.107). Rails not stated; no virtual-asset rule. | Minors (under 21; Bill 2026 would set 18) barred from casino gambling areas (s.108); excluded persons kept off licensed premises and machines (s.109(8); regs 89-92). No player identity verification, access-control or closed-loop rule for bookmakers found (Act, Regulations 2016, Bill 2026). Casinos only: no cheque or fund transfer for cash or chips unless the patron genuinely gambled (reg 27(2)). | Casinos are specified parties (FI Act 2022 Sch. I; bookmakers not listed); any business reports suspicions (s.40). CDD at P10,000 (FI Regulations 2022 reg 4); cash transactions of P10,000 or more reported (reg 20); suspicious and cash reports within 5 working days via goAML (regs 21-22). Casinos log transactions above P25,000 (reg 28). Gambling (Amendment) Bill 15 of 2026 (FATF) not in force. | No segregation or guarantee rule for bookmakers or online activity found (Act, Regulations 2016, Bill 2026). Casinos only: the applicant gives a guarantee or deposits security the Authority considers adequate for obligations to persons gambling in the establishment (s.37(1)(g)). | Gambling machine licensees link machines to the Authority's central monitoring system; casinos and bingo install their own (s.96; Bill 2026 cl. 26 widens this, not in force). Online data feed not found. Monthly levy within 10 days of month end (s.50; Sch. 15: casinos 10%, bingo 8%, bookmakers 6.5%). Retention: FIA records 20 years (s.32, casinos; reg 18); casino monitoring data 5 years (reg 30). | Sent to regulator |
| ZimbabweCorrect this profile: Zimbabwe | Lotteries and Gaming Board | Mobile money and cards; USD and ZiG in use. Virtual-asset providers register with the FIU (S.I. 99 of 2026); no gaming rule on virtual assets. Online betting rules await the Lotteries and Gaming Amendment Bill. | Not found. | Due diligence when a gaming customer opens an account or transacts US$3,000 or more; suspicious reports to the FIU through goAML. 25% withholding on gross winnings from January 2026, remitted to ZIMRA by the 10th. | Casino bank guarantee of US$50,000 covering prizes and jackpots. | Real-time gaming management system announced, not yet live. Monthly tax returns by the 5th. Retention 5 years (Money Laundering and Proceeds of Crime Act). | Sent to regulator |
| EswatiniCorrect this profile: Eswatini | Gaming Board | Online sports betting under bookmaker licences; online casino games prohibited. Regulations under the Gaming Control Act 2022 still pending. Mobile money dominant. | Clients registered with national ID (2025); minors’ secondary mobile-money wallets to be blocked with the telecoms operators (announced December 2025). | Purpose checked on cash transactions over E10,000 (others over E20,000); suspicious reports to the FIU within 2 working days (2011 AML Act). Cash-report threshold left to ministerial notice; amount not found. | Not found. | Monitoring system proposed, not live. Retention 5 years (2011 AML Act). | Researched |
| LesothoCorrect this profile: Lesotho | Lesotho Casino Board | No online licence type (Casino Order 1989; Lotteries and Betting Act 1984); offshore activity only. | Not found. | Casino due diligence at M25,000; suspicious reports to the FIU within 7 days (2017 AML Regulations under the 2008 AML Act). | Not found. | Retention 5 years (2017 AML Regulations). | Researched |
| AngolaCorrect this profile: Angola | Instituto de Supervisão de Jogos | Online gaming licensed under the 2024 Gaming Activity Law (Lei 17/24); payment systems in force in Angola only. Kwanza only; foreign currency and virtual assets prohibited; locally incorporated companies only. | Players identified before buying chips or being paid; prize cheques crossed, in the winner’s name and non-endorsable (ISJ instruction 2/21). | Identification of online players spending US$2,500 and of winners of US$2,500 or more; suspicious reports to the UIF immediately, through its portal. Prize tax of 10–15% by game type. | Bank guarantee of US$50,000–400,000 by type of gaming reported (2026 licensing; purpose to be confirmed). | All gaming traffic and operations to be routed through a central gaming unit to the ISJ’s control infrastructure (2024 law; implementation to be confirmed). Retention 10 years. | Sent to regulator |
| TanzaniaCorrect this profile: Tanzania | Gaming Board of Tanzania | Cards, transfers, mobile money and vouchers; mobile money dominant. | One account per player, linked to one nominated bank or mobile-money account; identity verified before any wager. | Cash of US$10,000 or more and transfers of US$1,000 or more reported within 5 working days; suspicious reports to the FIU (goAML) within 24 hours. Withholding on winnings: 12% sports, 13% land casino, 15% other. | Security bond available to pay prizes. | Primary server and financial control system in Tanzania; winnings tax filed and paid electronically by the 7th of the following month. Retention 10 years. | Sent to regulator |
| UgandaCorrect this profile: Uganda | National Lotteries and Gaming Regulatory Board | Mobile money dominant. Tax Procedures Code (Amendment) Bill 2025 would route all stakes and payouts through one gateway licensed by the Bank of Uganda and linked to the tax authority (enactment to be confirmed). | Players aged 25 and over, checked against ID. | 15% withholding on net winnings (from July 2026). Cash transactions over UGX 20 million reported to the FIA; suspicious reports through goAML. | Not found. | Central electronic monitoring system live since 2024, with data shared with the tax authority. | Sent to regulator |
| MauritiusCorrect this profile: Mauritius | Gambling Regulatory Authority (GRA Act 2007, consolidated at 16 June 2026); FIU Mauritius receives suspicious transaction reports (FIAMLA 2002). | Interactive gambling outside Mauritius prohibited for persons in Mauritius; on the Authority's direction internet providers block offshore sites and banks stop the payments (GRA Act). Cash bets over Rs 50,000 only by player card or an approved electronic payment method; no credit cards in casinos. | Player card scheme for large cash play (GRA Act). Closed-loop or own-name payout rules: not found. | Suspicious transaction reports to the FIU (FIAMLA 2002). Age 21; identity document checked at entry and recorded (GRA Act). No threshold report found in the instruments opened. | Not found. | Continuous on-line recording, monitoring and control of lottery games, VLTs, gaming machines, gambling and betting transactions through the Authority's central electronic monitoring system (GRA Act). Retention: not found. | Researched |
| Comoros (Anjouan)Correct this profile: Comoros (Anjouan) | Anjouan Gaming (offshore licensing: Regulatory Standards; Ongoing Supervision; Code of Conduct for Licensed Operators). | B2C internet gaming licences cover casino, poker, betting and bingo (Anjouan Gaming, Licence Types). Payment rails: not set out in the published framework. | Deposit and loss limits and age verification required of licensees (Regulatory Standards; no minimum age stated). Closed-loop or payout rules: not set out in the published framework. | Suspicious activity reporting required of licensees; the recipient is not stated in the published framework (Regulatory Standards). | Player funds segregated from operational funds; adequate financial resources maintained (Regulatory Standards). | Compliance reports at prescribed intervals, covering anti-money-laundering controls and responsible gaming (Ongoing Supervision); the Authority may access records and systems on request (Code of Conduct for Licensed Operators). | Researched |
| Comoros (Mohéli)Correct this profile: Comoros (Mohéli) | offshore licensing hub; no gambling regulator, licensing law or payment instrument located in published sources at 1 November 2026. | Not found. | Not found. | Not found. | Not found. | Not found. | Researched |
| The Americas and the Caribbean | |||||||
| CuraçaoCorrect this profile: Curaçao | Curacao Gaming Authority (CGA, Stichting Gaming Control Board; LOK art. 1.1, 12.1), also AML/CFT supervisor for the gaming sector since 15 Feb 2019 (LB 19/0282, 19/0283). FIU Curacao receives unusual transaction reports (LMOT art. 2, 11). Ministerial responsibility for the LOK and the CGA mandated to the Minister of Justice (P.B. 2025/167, 13 Nov 2025). | Fiat tradable internationally; virtual currencies tradable on licensed exchanges; no currency exchange; prizes paid in the currency played (licence conditions art. 9). Crypto policy guideline (June 2026): analytics screening in and out; player, operational and treasury wallets segregated; same-wallet same-asset withdrawals by default; four steps: now, Sep 2026 (portal offline), Dec 2026, Jun 2027. | Players register to play and transact on their own behalf; play for third parties to be detected (CGA AML Regulations III.2.2). All payments between licensee and player only through the player account (licence conditions art. 9.1). T&C guideline (Apr 2026, in force within 6 months): funds returned only to the account they came from. Prizes available 30 months. No own-name instrument rule found. | CDD at NAf 4,000 (XCG 4,000) of a player's transactions, calculated daily across deposits and withdrawals (CGA AML Regulations III.1, III.3; LID art. 2b(d)). Unusual transactions from XCG 5,000 (NAf 5,000 before 31 Mar 2025), single or series per gaming day, prize payouts included; to FIU Curacao via goAML, in English, without delay; objective reports within 48 h (FIU). XCG replaced NAf 1:1. | Sufficient funds at all times to pay prizes, with ring-fencing and segregation; separate account for player deposits and winnings (licence conditions art. 6.5, 9.2). LOK art. 5.7: guarantee fund for player balances (implementing decree not found); art. 5.8(g): CGA may require segregation, reservation or insurance of balances. Crypto: player funds in segregated wallets of the licensee. | Incident report within 24 h (LOK art. 5.10(6); licence condition 13.3); portal mandatory from Jan 2026, offline since Sep 2026 and not returning (7 Oct 2026), channel pending. Change report by 15 Jun and 15 Jan (art. 5.10(4)); complaints report 15 Jan and 15 Jun; player transaction report, cadence set by CGA. Critical data on a Tier-IV server in Curacao (art. 5.9(1)(j)). AML records 5 years. | Researched |
| BrazilCorrect this profile: Brazil | Secretaria de Prêmios e Apostas (SPA/MF); COAF (Siscoaf segment 'SPA - Apostas de quota fixa'); Banco Central do Brasil (payment rails). MP 1.394/2026 (25 Sept 2026) prohibits fixed-odds betting; authorisations extinguished 25 Oct 2026; the SPA supervises the wind-down; Comitê Interinstitucional (Casa Civil) against illegal offer. | Transfers only between the bettor's registered account and the operator's transactional account at BCB-authorised institutions; Pix, TED, debit and prepaid cards and book transfer allowed; cash, boleto, cheques, virtual assets, credit/post-paid and third-party payments prohibited (Portaria SPA/MF 615/2024 art. 3). From 25 Sept 2026 no betting payments except wind-down (MP 1.394 art. 14). | Deposits only from a pre-registered account in the bettor's name (max three; others returned); prizes and withdrawals to that account in 120 minutes, hold only on fraud suspicion; CPF-keyed. Bolsa Família/BPC beneficiaries barred; SIGAP checks at registration, first daily login, every 15 days (IN 22/2025). No deposits from 25 Sept 2026, sites off 5 Oct, refunds in 7 days (MP 1.394 arts 7-9). | Suspicion-based reports to COAF through Siscoaf (segment 'SPA - Apostas de quota fixa', from 1 Jan 2025); no fixed R$ threshold; report by the next business day after the analysis; annual nil declaration to the SPA via SIGAP (Portaria SPA/MF 1.143/2024 arts 27, 30). AML duties survive the extinction of authorisations (MP 1.394 art. 10). | Bettor funds in transactional accounts; statutory separate estate (Lei 14.790 art. 22) revoked 25 Sept 2026; refund funds stay segregated in those accounts (MP 1.394 art. 8); aggregate balance equal to balances plus open bets (Portaria 615 art. 4 §3); operator gains moved to its own account within 120 minutes; R$5m reserve in federal bonds, R$30m minimum capital (Portaria 827/2024 art. 11). | SIGAP (Portaria SPA/MF 722/2024 art. 10; Manual rev. 03, 13 Nov 2025): six XML files per XSD, signed with e-CNPJ, daily by 06:00 at D+2, monthly file by the 5th, basic and cross-validation, 3 MB or 7,500 records per file. Continues after extinction (MP 1.394 art. 11; Portaria 3.005/2026 arts 3-5: balances at 5 Oct 2026 sent by 7 Oct, remaining duties by 15 Dec 2026). Retention 5 years. | Sent to regulator |
| ArgentinaCorrect this profile: Argentina | provincial regulators (e.g. IPLyC Buenos Aires, LOTBA, Mendoza); UIF | Peso accounts; deposits only from the player’s own verified accounts, no cash and no third parties (Buenos Aires Province). Virtual assets not permitted in practice. | Withdrawals to the account used to deposit; payout instruction within 48 hours (Buenos Aires Province). | Monthly systematic report on prize payments from 15 minimum wages; suspicious reports within 15 days of concluding suspicion and no later than 150 days after the operation. | Not uniform across provinces. | Regulator access to operator systems (e.g. Buenos Aires Province); more than 15 jurisdictions and no common data standard. Retention 10 years. | Sent to regulator |
| ColombiaCorrect this profile: Colombia | Coljuegos | Pesos only; bank accounts, cards, gateways and prepaid cards from supervised entities; foreign and virtual currencies banned. 19% VAT on deposits ended 2025; 2026 VAT annulled; 16% GGR tax for 2026, under court review. | Only the identified player can withdraw; payout ordered within 72 hours; at most 3 withdrawals a day; at least 50% of deposits wagered before a withdrawal. | Identification from COP 5 million a day; monthly SIREL reports to the UIAF within 10 days: transactions from COP 5 million and monthly totals from COP 15 million; suspicious reports immediately. | Colombian bank account covering withdrawable balances; guarantee for prizes. | Onshore inspection system recording every transaction, as XML to the regulator’s schema. AML 5 years. | Sent to regulator |
| PeruCorrect this profile: Peru | MINCETUR | Cash, cards and other means; virtual assets expressly excluded. | Payout by the player’s chosen method or to an account in their name at a supervised entity; bank transfers within 3 business days. | Operations register from US$2,500; suspicious reports to UIF-Perú within 24 hours. | Guarantee of 600 UIT or 3% of net income, whichever is higher. | Laboratory-certified platforms; data to the MINCETUR data centre. 5 years, or the tax limitation period if longer. | Researched |
| MexicoCorrect this profile: Mexico | SEGOB | Internet bets need bank confirmation; cash for tickets and prizes banned from 3,210 UMA; virtual assets not addressed. SEGOB’s draft to replace the 1947 law awaits Security Cabinet review (September 2026). | Remote bets record the bettor’s account number and identity. | Identification from 325 UMA; notices to the UIF from 645 UMA by the 17th of the following month, via the SAT portal; 24-hour notices for suspicious cases (new rules from 30 November 2026). UMA 2026: MXN 117.31. | Bond covering about 60 days of prizes. | Real-time access for the tax authority (SAT) through an authorised provider; daily XML with the payment method. Retention 10 years. | Researched |
| ChileCorrect this profile: Chile | Superintendencia de Casinos de Juego | Online law pending: bill 14.838-03 passed the Senate in general (August 2025) and remains in committee (October 2026). It limits payment means to those authorised by the financial regulator; banks must block unlicensed sites. | No betting without funds in the account; payment instruments in a minor’s name barred (bill). | Casinos (UAF Circular 63, from 1 October 2026): due diligence from US$3,000; half-yearly reports of cash operations above US$10,000; suspicious reports to the UAF as soon as possible. Bill extends UAF duties online. | Liquidity reserve before operating (bill). | Remote access to platform systems for the regulator and tax authority (SII); technical standards (bill). Casino AML records 5 years. | Researched |
| ParaguayCorrect this profile: Paraguay | CONAJZAR (Comisión Nacional de Juegos de Azar), since Ley 7438/2025 a deconcentrated body of the tax authority DNIT with functional and administrative autonomy (Ley 1016/1997 art. 4 as amended); Decreto 3846/2025 creates DNIT's Dirección General de Juegos de Azar; SEPRELAD (financial intelligence unit, Ley 1015/97); gaming operators are obliged subjects (Ley 1015/97 art. 13 j). | Ley 1016/1997 as amended by Ley 7438/2025 lists casino online and sports betting (up to 3 concessions) among games awarded by public tender (art. 20); sports betting: one exclusive concessionaire, Daruma SAM S.A. (APOSTA.LA); online casino under CONAJZAR authorisations (Res. 1/2019). CONAJZAR monitors and may block online channels, payment included (art. 6 bis). Payment rules, crypto not found. | Identity document required from every client to take part and transact, whatever the modality, with online gaming in scope (Res. SEPRELAD 258/2020 arts 1, 24). Own-name account rule not found. Prizes claimed within 60 working days of the draw; unclaimed prizes to the FONARESS account within 30 working days, no format exempt (art. 19, Ley 7438/2025). | FIU: SEPRELAD; reports via SIRO (gaming sector on SIRO, 2FA from 1 July 2025). Res. SEPRELAD 258/2020: due diligence from 8 minimum wages on bets, chip or credit purchases, prize collection (art. 26); suspicious reports within 24 hours of classification (art. 41); nil report within 10 working days after a quarter without one (art. 45). No fixed-amount report found. | Player-funds segregation or protection rule not found (Ley 1016/1997 as amended, Decreto 3846/2025, Res. SEPRELAD 258/2020, CONAJZAR pages searched). Concession guarantees exist (bid bond for the whole concession, canon guarantee deposit; Ley 1016/1997 arts 9, 14, text not opened) but secure state revenue, not players. | Machines and systems homologated by DNIT, connected online or in real time to CONAJZAR where applicable, certified by an ONA-accredited inspection body independent of gaming (Decreto 3846/2025 art. 5, text not opened); CONAJZAR laboratory register (Res. 70/2014: GLI, BMM, SIQ). AML records 5 years (Res. 258/2020 arts 28, 40). | Sent to regulator |
| PanamaCorrect this profile: Panama | Junta de Control de Juegos | US dollar settlement; online payment rules not found. Law 527 of 2026 lets the JCJ order internet providers to block unlicensed sites, apps and IP addresses. | Biometric identity and age verification on online platforms; voluntary spending and time limits (Law 527 of 2026, regulations due within six months). | Cash and quasi-cash transactions from US$10,000 declared to the UAF; suspicious reports to the UAF immediately on detection (Law 23 of 2015, art. 54, as amended in 2019). | Bond or deposit guaranteeing payment of prizes (to be confirmed). | Electronic audit system announced; annual JCJ audits of operators (Law 527 of 2026). AML records 5 years from the end of the relationship. | Sent to regulator |
| CanadaCorrect this profile: Canada | provincial (AGCO and iGaming Ontario; IGCO and British Columbia Lottery Corporation; AGLC Alberta); FINTRAC (federal) | Virtual assets not accepted (Ontario, Alberta, BC); deposits authorised by a financial services provider; no credit. Alberta opened 13 July 2026 under AGLC’s Standards and Requirements for Internet Gaming; British Columbia: online gambling through BCLC’s PlayNow. | Withdrawals only to an account the player legally holds; no transfers between players (Ontario). Alberta: geolocation blocking VPNs and proxies; source-of-funds corroboration where risk requires. British Columbia: player identity verified and deposits and withdraws only to player’s account | FINTRAC reports from C$10,000: large cash and casino disbursement reports within 15 calendar days, large virtual currency reports within 5 working days, amounts aggregated under the 24-hour rule; suspicious reports as soon as practicable; JSON API. Reporting entity: iGaming Ontario; BCLC; Alberta, AiGC oversees AML (to be confirmed). BC law requires source of funds and IGCO has regulations to mitigate ML. | Under iGaming Ontario’s oversight (Ontario); annual agreed-upon procedures. Alberta not found. British Columbia: IGCO regulations prohibiting certain types of buy-ins (virtual currency, funds from money services businesses, and pre-paid cards) | Weekly revenue data to iGaming Ontario; FINTRAC copies to the AGCO. Alberta: financial reporting to AiGC; data outside Canada needs AGLC approval. BC: IGCO regulates BCLC. Reports of potential criminal activity, including ML, made to IGCO with reports retained for 5 years. | Updated |
| United States (New Jersey)Correct this profile: United States (New Jersey) | Division of Gaming Enforcement (Casino Control Act, C.5:12-95.17 et seq., P.L. 2013, c. 27; N.J.A.C. 13:69O); FinCEN (31 CFR 1021; casinos with gross annual gaming revenue over $1 million). Internet gaming only by Atlantic City casino licensees. | Patron deposit account, credit or debit card, cash or chips at an approved cashiering location, verified non-transferable prepaid card, ACH, promotional credits and winnings, other means the Division approves (13:69O-1.3(d)); gift cards and sports wagering kiosks added 2024-2025 (official text not opened). Virtual currency and stablecoins not listed; no Division approval found. | One account per patron per Internet gaming intermediary, non-transferable; no transfers between patrons; wagers only up to funds on deposit (C.5:12-95.23). Withdrawals: cash-out at the cage, transfer to the patron's deposit account, verified prepaid card or bank account verified with the bank, other means the Division approves; card deposits refunded to the funding card first (13:69O-1.3). | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection (60 at most); both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320, 1010.306). No separate state threshold report found (13:69D searched in full; 13:69O-1.9 system reports only). | Bank account securing patron Internet gaming funds, FDIC-insured bank with a physical presence in New Jersey unless the Division allows otherwise; balance at least the daily ending cashable balances, funds on game and pending withdrawals; monthly schedule to the Division's Revenue Certification Unit (13:69O-1.3(k), 2024 text; official copy not opened, DGE copy still says 'monthly attestation'). | Division queries and exports all gaming system data in the format it requires (13:69O-1.8(b)); primary gaming equipment in Atlantic City (13:69O-1.2(n); C.5:12-95.20). Game play and account data 10 years (13:69O-1.8(d)); other casino records 5 years (13:69D-1.8(g)); BSA records 5 years (31 CFR 1010.430(d)). Tribal gaming: none found in New Jersey (NIGC state list not opened). | Sent to regulator |
| United States (New York)Correct this profile: United States (New York) | New York State Gaming Commission (Racing, Pari-Mutuel Wagering and Breeding Law Art. 13; 9 NYCRR Subchapter B, Parts 5300-5330); mobile sports wagering by licensed casino skins; FinCEN (31 CFR 1021). Online casino gaming not authorised. | Deposits to the bettor's account with a skin: ACH or electronic transfer from the bettor's personal bank account, debit card, cash or vouchers at the casino cage, promotional credits; credit cards capped at $2,500 a year (9 NYCRR). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | One account per bettor per skin, non-transferable (9 NYCRR). Withdrawals credited to the bettor's debit card or bank account, or at the cage; requested funds within 7 days. Self-imposed responsible gaming limits within each skin; age 21; prohibited-bettor checks. | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Cash reserve in the amount necessary to cover outstanding sports-pool liability, as approved by the Commission (9 NYCRR). | Commission access to servers, software and wagering data; the platform and servers located within a licensed New York casino; tax transmitted weekly by electronic funds transfer; transactional sports wagering data kept 5 years (9 NYCRR). | Researched |
| United States (Pennsylvania)Correct this profile: United States (Pennsylvania) | Pennsylvania Gaming Control Board (4 Pa.C.S. Part II, 2017 expansion; 58 Pa. Code interactive gaming regulations); interactive casino, poker and sports wagering by licensed operators; FinCEN (31 CFR 1021). | Deposits by credit or debit card, verified non-transferable reloadable prepaid card, bank transfer or cash (58 Pa. Code). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Accounts in the player's own name; no transfers of funds between players (58 Pa. Code). Deposit limits offered daily, weekly and monthly; age 21, self-exclusion and prohibited-person checks before play; account dormant after 2 years without activity. | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Player funds in a bank account separate from all other operating accounts, with a reserve (58 Pa. Code). | Daily reports per gaming day for taxable revenue to the Board; the Board may require interactive gaming system data to be maintained in the Commonwealth; records kept at least 5 years (58 Pa. Code). | Researched |
| United States (Michigan)Correct this profile: United States (Michigan) | Michigan Gaming Control Board (Lawful Internet Gaming Act and Lawful Sports Betting Act 2019, MCL 432.301 et seq.); internet casino gaming and sports betting by licensed operators; FinCEN (31 CFR 1021). | Funding methods under the Board's internet gaming rules (official state text not opened). Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Not found (official state rules not opened). | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Not found (official state rules not opened). | BSA records 5 years (31 CFR 1010.430(d)); state retention: not found. | Researched |
| United States (Delaware)Correct this profile: United States (Delaware) | Delaware Lottery runs internet gaming, including internet table games, through its agents (29 Del. C. ch. 48; 10 DE Admin. Code 206); FinCEN (31 CFR 1021). | Deposits into customer accounts only by card or bank transfer (10 DE Admin. Code 206). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | No transfers to another player's account or between agents (206). Age 21; identity and age verified at registration (29 Del. C. ch. 48). | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | The agency maintains a separate bank account holding the funds deposited into registered players' accounts (206). | Weekly, monthly, quarterly and annual reports and statistical data in the Director's format; the primary gaming server within the United States unless the Director authorises otherwise (206). BSA records 5 years (31 CFR 1010.430(d)). | Researched |
| United States (West Virginia)Correct this profile: United States (West Virginia) | West Virginia Lottery (Interactive Wagering Act, W. Va. Code ch. 29-22E; CSR 179-9); interactive casino gaming by licensed operators; FinCEN (31 CFR 1021). | Deposits by credit or debit card, verified non-transferable reloadable prepaid card, bank transfer or cash (CSR 179-9). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Accounts in the patron's name; no transfers of funds between patrons. Balances up to the amounts card-deposited in the preceding 90 days refunded to the funding card first. Deposit limits daily, weekly and monthly; age 21; self-exclusion and exclusion lists checked; account dormant after 16 months (CSR 179-9). | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Cash reserve in the amount necessary to cover the outstanding interactive gaming account liability (CSR 179-9). | Daily reports per gaming day for taxable revenue to the Lottery; data warehouse servers located in West Virginia; primary and backup equipment in-state; transactional wagering data kept 5 years (CSR 179-9). | Researched |
| United States (Virginia)Correct this profile: United States (Virginia) | Virginia Lottery (sports betting; Va. Code 58.1-4030 et seq.; 11 VAC 5-70 and 5-80); FinCEN (31 CFR 1021). Online casino gaming not authorised. | Player accounts funded by card, bank transfer or e-money, including verified non-transferable reloadable prepaid cards (11 VAC 5-70). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Accounts in the player's own name; no transfers of funds or credits between players. Withdrawals to the same holder's instruments, completed within 10 days of the request unless a dispute or investigation is pending. Deposit limits and self-exclusion from 72 hours honoured; age 21; bets only from within Virginia (11 VAC 5-70, 5-80). | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Bettors' funds held in trust in a segregated account or in a special-purpose segregated account, with a reserve; balances unclaimed for five years escheat (11 VAC 5-80). | Daily reports for adjusted gross revenue to the Lottery; records kept at least 5 years (11 VAC 5-70). | Researched |
| United States (Colorado)Correct this profile: United States (Colorado) | Division of Gaming and the Limited Gaming Control Commission (sports betting; C.R.S. Title 44 Art. 30; 1 CCR 207-2); FinCEN (31 CFR 1021). Online casino gaming not authorised. | Debit cards and other methods the Director approves; no account funded, directly or indirectly, by credit card as of 12 August 2026 (1 CCR 207-2). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Patron account limits and self-exclusion per operator; withdrawals paid within 24 hours; age 21; bets must originate in Colorado (1 CCR 207-2). | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Reserve in cash or cash equivalents segregated from operational funds, an irrevocable letter of credit, payment processor reserves and receivables, or a bond the Director approves, covering liabilities to patrons (1 CCR 207-2). | Monthly tax return to the Department of Revenue by the 15th of the following month; reports to the Division on request; the primary server located in Colorado (1 CCR 207-2). BSA records 5 years (31 CFR 1010.430(d)). | Researched |
| United States (Iowa)Correct this profile: United States (Iowa) | Iowa Racing and Gaming Commission (sports wagering; Iowa Code ch. 99F; IAC 491 chs. 5 and 13); FinCEN (31 CFR 1021). Online casino gaming not authorised. | Funding under the Commission's rules; no transfers between player accounts and no account sharing (IAC 491-13). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Payments from a player account directly to a financial-institution account in the player's name or made payable to the player (IAC 491-13). Player-set limits and notifications for deposits and wagers; age 21; statewide self-exclusion (Iowa Code 99F.4(22)); wagers only from within Iowa; accounts abandoned after 3 years without activity. | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Reserve in cash or cash equivalents segregated from operational funds, an irrevocable letter of credit or receivables covering liabilities, with a segregated account (IAC 491-13). | Monthly itemised accounting to the Commission in its format (IAC 491-5); no original record destroyed for three years without the administrator's approval. | Researched |
| United States (Nevada)Correct this profile: United States (Nevada) | Nevada Gaming Control Board and Nevada Gaming Commission (Regulation 5, Operation of Gaming Establishments, Rev. 09/26; Regulation 5A, Operation of Interactive Gaming, Rev. 02/26 - interactive poker only, online casino not authorised; Regulation 22, Race Books and Sports Pools, Rev. 1/26); FinCEN (31 CFR 1021). | Deposits: cash with the licensee, cards, bank and wire transfers, cheques and money orders; licensee credit, but not for interactive gaming (Regulations 5 and 5A). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Accounts in the patron's name, anonymous accounts prohibited; no transfers between patrons' wagering accounts; ACH only from another account verified as the patron's. Withdrawals credited to the patron's debit, prepaid or credit instrument (Regulations 5A and 22). Responsible gambling options include deposit limits; age 21, identity verified before the first wager; List of Excluded Persons (Regulation 28). Account suspended after 16 months without wagers. | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Reserve of at least $25,000 or the sum of all patrons' wagering-account funds, held in trust at a federally insured institution or as a bond; plus 25% in cash for interactive gaming (Regulations 5A and 22). | Monthly Book Wagering Report to the Board (Regulation 22); account wagering systems, call centres and records located in Nevada; Board and Commission access to any part of the operation on demand; records 5 years. BSA records 5 years (31 CFR 1010.430(d)). | Researched |
| United States (North Carolina)Correct this profile: United States (North Carolina) | North Carolina State Lottery Commission (sports wagering; Rules Manual for Sports Wagering and Pari-Mutuel Wagering, 24 NCAC 06A and 06B, updated 18 December 2024); FinCEN (31 CFR 1021). Online casino gaming not authorised. | Deposits by credit and debit cards, reloadable prepaid cards issued to the player, bank transfer or cash; no credit from the operator's affiliates or agents (Rules Manual, 24 NCAC 06A and 06B). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Wagering account only in the name of a registered player who is a natural person; one account per operator; accounts and balances not transferable. Withdrawal requests honoured within five days. Deposit limits offered daily, weekly and monthly; age 21; Voluntary Exclusion Program; identity verified before deposits. Accounts with no player activity for three years are closed. | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Reserve of at least $500,000 or the sum of liabilities, held at an FDIC-insured institution, with a monthly attestation (Rules Manual). | Monthly ineligible-person report and reserve attestation to the Director; remote read-only access for the Commission to the wagering systems; internet or cloud hosting allowed - no data-location rule; wagering data kept at least 5 years. | Researched |
| United States (Arkansas)Correct this profile: United States (Arkansas) | Arkansas Racing Commission (Casino Gaming Rules, 23 CAR Part 358, 2025 rulebook; casino gaming with mobile sports betting by licensed casinos); FinCEN (31 CFR 1021). | Deposits by cash at the licensee, cheques, money orders, wire and ACH transfers, debit, prepaid and credit cards (Casino Gaming Rules, 23 CAR Part 358). Virtual assets not listed. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Accounts in the patron's name; anonymous or fictitious accounts prohibited; one active account per patron; no transfers between patrons' accounts. Withdrawals to the same holder's instruments. Deposit limits per period; age 21, identity, age and address verified before any wager; licensee and Commission exclusion lists. Accounts suspended after sixteen months without wagers. | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Reserve of at least $25,000 or the sum of all patrons' funds, held in trust - cash, an irrevocable letter of credit, a bond or a combination (Casino Gaming Rules). | Net gaming receipts tax reported and paid monthly by the 20th to the Secretary of the Department of Finance and Administration; mobile gaming records kept and provided to Commission agents on request; sports-pool components run only at hosting centres registered with the Commission, wagers only from patrons in Arkansas; records at least 5 years. | Researched |
| United States (Mississippi)Correct this profile: United States (Mississippi) | Mississippi Gaming Commission (Administrative Code Title 13: Part 9, Racebooks and Sports Pools; Part 3, Operations; sports wagering on licensed premises, statewide mobile not authorised); FinCEN (31 CFR 1021). | Wagers only with cash, chips, tokens or other approved representatives of value, credits to a wagering account, or credit under the licensee's internal controls; books accept wagers only on their licensed premises (Administrative Code Title 13). Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Wagering account opened with the licensee and first verified in person at the casino (Title 13). Winning wagers paid no later than 10 days after presentment. Age 21 - no play, wagering or collection of winnings under 21; excluded persons kept out of every licensed establishment. No closed-loop or withdrawal-conditions rule set in the official texts. | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Cash reserve of at least $50,000 or the sum of patrons' balances, open wagers and unpaid winnings (Title 13). | Reports to the Commission within 15 days of the end of the month of the transaction; copies of filed reports kept at least 3 years (Title 13). BSA records 5 years (31 CFR 1010.430(d)). | Researched |
| United States (Nebraska)Correct this profile: United States (Nebraska) | Nebraska Racing and Gaming Commission (Rules for the Nebraska Racetrack Gaming Act, Title 296, effective 21 April 2026; land-based racetrack casino gaming, online betting prohibited); FinCEN (31 CFR 1021). | Sports wagering only in person at licensed racetrack facilities; online betting prohibited (Title 296, effective 21 April 2026). Bets with cash, vouchers, cash equivalents, chips, a patron account or debit cards; no credit from the operator. Payment systems identify and block restricted internet gambling transactions (Regulation GG, 31 CFR Part 132). | Gaming facilities open to patrons 21 or older; Commission self-exclusion and involuntary exclusion lists (Title 296). Other account rules: land-based regime, none set in the official texts. | Currency transaction report for cash in or cash out over $10,000 aggregated per gaming day, filed within 15 days; suspicious activity report from $5,000 within 30 days of detection; both to FinCEN by BSA E-Filing (31 CFR 1021.311, 1021.313, 1021.320). Federal withholding of 24% on winnings over $5,000 net of the wager (IRS Form W-2G rules). No separate state threshold report found. | Reserve of at least $25,000 or the sum of patrons' balances, open bets and unpaid winnings - a Nebraska bank account, letter of credit or bond (Title 296). | Weekly gaming tax report in the Commission's format and monthly reports to the Commission (Title 296). Retention beyond BSA records 5 years (31 CFR 1010.430(d)): not set in the official texts. | Researched |
| Kahnawà:keCorrect this profile: Kahnawà:ke | Kahnawà:ke Gaming Commission (Regulations concerning Interactive Gaming, as at 25 March 2026; Regulations concerning Anti-Money Laundering and Counter Terrorism Financing, 30 June 2021). | No cash from a player; funds received only by card, e-money, bank transfer or cheque; no credit from the operator unless the Commission authorises it (Regulations concerning Interactive Gaming, 25 March 2026). No mandatory hub, instrument origin-and-currency or payment-blocking rule set in the official texts. | One player account per website, in the player's name; funds standing to the credit of the account remitted at the player's request (Interactive Gaming Regulations). Deposit limits per day, week or month; age 18; Comprehensive Self-Exclusion register. No closed-loop routing or payout time limit set in the official texts. | Suspicious transactions reported to the Commission within 5 business days; large transactions from $10,000 within 10 business days (Regulations concerning AML/CTF, 30 June 2021). No due-diligence check threshold set in the official texts. | Liability for player balances separately identifiable at all times; balances, prizes and bonuses covered by liquid funds (Interactive Gaming Regulations). | Gaming operated from the licensed co-location facility wholly within the Mohawk Territory of Kahnawà:ke; gaming records kept 5 years after the transaction (Interactive Gaming Regulations). No submission-cadence or data-vault rule set in the official texts. | Researched |
| UruguayCorrect this profile: Uruguay | state-run model; online gaming and betting under Decreto No. 366/017; AML for casinos under Decreto No. 379/018 (SENACLAFT supervision; reports to the UIAF at the Central Bank); betting taxes under Ley No. 19.535. | Payment issuers regulated by the Banco Central del Uruguay may not authorise transactions of online gambling the State has not authorised; blocking ordered through the Lottery Directorate (Decreto 366/017). Permitted rails for authorised play: not set out in the instruments opened. | Casino closed loop: a sum received from the client is returned to the client the same way the casino received it (Decreto 379/018). Holder and payout rules for online: not set out in the instruments opened. | Casino due diligence from USD 3,000 or its equivalent (Decreto 379/018); unusual or suspicious operations reported to the UIAF at the Banco Central del Uruguay. | Not found in the instruments opened. | AML records at least 5 years after the relationship or occasional operation ends (Decreto 379/018). Tax of up to 0.75% on each bet at electronic gaming machines, paid by the player and collected by the operator (Ley 19.535). Reporting cadence: not set out in the instruments opened. | Researched |
Annex B releases
Revisions
Profile rows are re-verified and corrected in dated releases of the Standard. Rows an authority has reviewed carry the authority’s own wording; the full list of changes per release is in thechangelog.
- 2026-10-30Czech Republic — Row reviewed with the Ministry of Finance (Gambling Regulation Unit): monetary-only stakes; payout without undue delay, extendable to 60 days in justified cases; identification at account opening; security deposit per operator in four categories, CZK 20-300 million (§ 95).v1.1.0
- 2026-10-13Norway — Row reviewed with Lotteritilsynet; revised wording adopted as submitted (rails, identification, bet limits, separate gambling account per player).v1.0.2
- 2026-10-13Lithuania — Row reviewed with the Gaming Control Authority; LAKIS connection with transmission at least every 30 days, identification at EUR 1,000.v1.0.2
- 2026-10-1324 jurisdictions — Rows re-verified cell by cell against the primary instruments (acts, regulations, licence conditions, FIU rules), with corrections from figure level up.v1.0.2
- 2026-10-08Latvia — Row reviewed with the State Revenue Service; six clarifications adopted as submitted (rails, closed loop, player funds, reporting).v1.0.2
- 2026-10-08Canada — British Columbia part updated as submitted by the provincial authority; FINTRAC reporting deadlines corrected (15 days; LVCTR 5 working days).v1.0.2
For authorities
Correcting a profile
Use “Correct this profile” on the relevant row, or write to [email protected]. Please state the jurisdiction, the parameter concerned, the correct reading, and the published source. Corrections an authority makes to its own profile are adopted as submitted. Comments from operators, suppliers, auditors and associations go through the editor, and substantive changes are published for comment before adoption (§13).
Principal sources for each jurisdiction are listed in Annex B of the Standard.