Casino Licensing Explained: What a License Actually Does and How to Verify One

A casino license is a legal permit. It isn't a decoration sitting in a site's footer. A government or regulatory body issues it, and in exchange the operator has to keep player money separate from company cash, pay for independent testing of its games' random number generators, run anti-money-laundering checks on deposits, and submit disputes to an independent outside body for resolution. That's what casino licensing actually buys a player before a deposit ever lands. Skip the license and all four protections disappear at once, with no one to call if a withdrawal gets stuck. This guide covers the major licensing jurisdictions, what each one genuinely requires, and how to check whether a specific license is real.

What a Casino License Actually Does

Four things change the moment an operator holds a real license, and none of them are optional extras bolted on for show.

• Fund segregation. Player deposits sit in an account kept separate from the operator's working capital, so a casino running short on cash can't quietly dip into player balances to stay open.
• RNG and RTP testing. An approved lab checks that the game software produces statistically random outcomes and that the long-run payout matches the percentage advertised on the paytable.
• AML and KYC checks. The operator has to verify who's depositing and flag suspicious transaction patterns, the same obligation a bank carries on its own customers.
• Licensed dispute resolution. If a casino refuses a withdrawal or misreads its own bonus terms, a player can escalate to an independent adjudicator with real power to fine or suspend the operator.

An unlicensed site has none of this. There's no fund-segregation rule, so a cash-flow problem at the company can become a player's problem overnight. There's no outside lab checking the RNG, which means the only evidence the games are fair is marketing copy written by the people who'd profit from you losing. There's no AML obligation forcing basic checks on where money comes from. And when something does go wrong, there's no regulator to escalate to. You're stuck emailing a support inbox and hoping someone reads it. Gambling still carries risk under a real license, but it does guarantee that someone outside the casino is checking its homework.

The Main Casino Licensing Jurisdictions, Compared

A handful of regulators license most of the online casino market, and each one draws its authority from a different government with different rules. The table below lines up the four that matter most for an online casino player.

Not every licence sits at the same level, and the industry treats them that way. UKGC and MGA are generally considered the strictest tier, with the highest compliance cost and the most active enforcement. Kahnawake, along with the Gibraltar, Isle of Man, and Alderney family of regulators, sits in a respected middle tier that's lighter-touch but still has real teeth. Reformed Curacao is a newly tightened tier that replaced what used to be the loosest, cheapest major offshore option under the old sub-licence system. Where a licence sits in that tier tells you roughly how much scrutiny the operator went through to get it, and how much it stands to lose if it cuts corners afterward.

UK Gambling Commission (UKGC) License

Any operator that wants to accept bets from UK players, or even advertise in the UK, needs a UKGC remote gambling licence. That's true no matter where the company is incorporated. The requirement tracks the player's location, regardless of where the servers or company itself happen to sit.

Getting one isn't a rubber stamp. Applicants submit a 3-year financial business plan along with 6 months of shareholder bank statements, and every director and senior staff member goes through criminal-record and credit checks. The operator also has to prove its IT security and RNG testing meet the UKGC's standard and must run player-protection tools. These include self-exclusion, affordability checks, clear bonus terms, fund segregation, and a working complaints process. Licence numbers follow a 5-digit format with a year suffix (for example, 12345/2026). Check the regulator's own public register directly to verify any licence. Badge images can be copied, but an official register cannot. Brands holding one today are tracked separately on our UKGC-licensed casinos page.

Malta Gaming Authority (MGA) License

The MGA splits its licences by who's doing what. Operators facing the player directly hold a B2C Gaming Service Licence covering casino and slots, betting, peer-to-peer games (like poker), and skill games. Suppliers providing the platform, RNG, or game content behind the scenes hold a separate Critical Gaming Supply Licence instead.

Both licence types run for 10 years and are renewable for a further 10, which is a long horizon compared to most regulators and reflects how much up-front vetting the MGA does before granting one. Always check a brand's current licence against the live register, since an old review or an outdated badge can lag behind what's actually on file. The current list of operators holding one is on our MGA-licensed casinos page.

Curacao License, What Changed in the 2025 Reform

For years, "Curacao licensed" meant something fairly loose. A handful of master licence holders issued sub-licences to hundreds of operators, and a sub-licence could be resold or transferred between companies with limited public visibility into who actually held what.

That system is gone. The National Ordinance on Games of Chance, known as the LOK, took effect on 24 December 2024, and the old master-licence and sub-licence model was fully abolished on 1 January 2025. Every pre-2025 sub-licence expired that same month. Licensing authority moved to a new regulator, the Curacao Gaming Authority, which now issues licences directly to each operator. The intermediary model was fully eliminated. Every active licence sits on a public register, licences can't be sub-licensed or transferred, and physical presence in Curacao became mandatory starting in January 2026.

The practical upshot: a "Curacao license" named today is a different arrangement than it was before the reform. If a site points to a Curacao licence, check that it's a direct CGA licence recorded on the current register. A dangling reference to an old sub-licence issued before the reform and never replaced carries no legal weight at all. Our Curacao-licensed casinos page tracks operators against the current register.

Kahnawake and the Other Respected Mid-Tier Jurisdictions

The Kahnawake Gaming Commission, based in Mohawk Territory in Canada, issues what it calls Client Provider Authorizations to online casino, poker, and sportsbook operators. The base application fee runs around $30,000, and a new licence doesn't start at full term. It opens with a 6-month probationary authorization, and only after that does an operator move to a full 5-year term.

Before even provisional approval, the operator's RNG has to pass certification from an approved lab, typically GLI or eCOGRA. Every gaming server has to physically sit with Mohawk Internet Technologies in Kahnawake; remote hosting elsewhere isn't permitted. Operators also run AML and CFT identity checks and keep records the way a bank would. It's a smaller regulator than the UKGC or MGA, but the hosting requirement and probation period make it harder to game than its size suggests.

Gibraltar, the Isle of Man, and Alderney sit in a similar middle tier. They are respected within the industry and lighter-touch than UKGC or MGA, but still real regulators with genuine enforcement. None of the three get the deep-dive treatment here because the publicly verifiable detail on fees and process is thinner than for the jurisdictions above. That lack of public detail is itself worth knowing before trusting a badge from one blind.

US Online Casino Licensing Is State-by-State, Not Federal

There's no single federal gambling licence in the United States. A casino legal in one state can be entirely inaccessible, or outright illegal, in the state next door.

New Jersey built its market under the Internet Gaming Act of 2013, with a dozen master licensees fronting more than 30 branded skins in an open multi-operator structure. Pennsylvania, operating under its 2017 Gaming Expansion Act, charges a separate licence fee per vertical (casino, sports betting, fantasy sports). A company licensed for online casino games cannot offer sports betting without paying an additional fee and obtaining a separate licence. Michigan's 2019 Lawful Internet Gaming Act blends tribal and commercial operators under one regulator and spreads its licence cost over five years.

That cost gap is a big part of why multi-state US operators expand gradually, entering one state at a time. A simultaneous nationwide launch would be prohibitively expensive and legally complex. A licence from one state's regulator says nothing about legality in a neighboring state. Always check that a US-facing casino holds a licence specific to the state you're actually sitting in.

How to Verify a Casino's License Yourself (Step by Step)

Checking a licence takes a few minutes. Do this before your first deposit to avoid problems with future withdrawals.

1. Find the operating company name and licence number. Look in the site footer or an "About Us" page; a legitimate operator doesn't hide this.
2. Go directly to the regulator's own public register. Do not rely on a badge image on the casino's site. Badge images can be copied, but a regulator's official register cannot be faked as easily.
3. Search by company name, website domain, or licence number on that register, whichever field the regulator's search tool accepts.
4. Confirm the status reads Active or Current. Any status showing Revoked, Expired, or Not Found is disqualifying. These are not clerical errors or temporary glitches.
5. Match the registered company name to the one operating the site. A licence tied to a different company than the one taking your deposit protects you from nothing.

If a casino fails any of those five steps, treat that as the answer. The burden is on the casino to prove legitimacy; assume the failure is legitimate. Our broader safe casinos guide walks through the rest of the trust checklist beyond licensing alone.

Red Flags That Mean a License Is Worthless (or Fake)

Some warning signs show up before you even reach the regulator's register.

• No licence mentioned anywhere on the site, including the footer and terms.
• A licence number that returns "not found" when searched on the regulator's own register.
• A licence registered to a different company name than the one actually operating the casino.
• A licence badge that doesn't link to anything verifiable, or links to a generic homepage instead of a specific record.
• An expired or revoked status showing on the register, even if the badge on the casino's site still displays as active.
• A casino claiming a jurisdiction's licence while being headquartered somewhere with zero public record of that licence ever being issued.

Any single item on that list is enough reason to walk away. Spotting them only takes the five-minute check from the section above.

Why a License Still Isn't the Whole Picture

A license sets a baseline, not a ceiling. It forces an operator to meet minimum standards on fund protection, game-outcome testing, and dispute handling—genuinely valuable protections. A license does not guarantee good odds, fast payouts, generous bonus terms, or that you'll enjoy playing there. A license also leaves game math unchanged. A fully licensed slot with a 96% RTP still pays out less than it takes in over the long run, by design, regardless of which regulator sits behind the site.

Gambling is entertainment, not income. Budget for it as a leisure activity, with money you can afford to lose, regardless of how strict the casino's licence is. Players must be 18 or older, or the legal age in their jurisdiction if higher, to gamble at all. If a session stops feeling like entertainment, our responsible gambling page has tools for setting deposit limits, taking a break, and self-excluding if needed.