How to Get a Gambling License in 2026: Step-by-Step Guide + Checklist

Most operators follow seven main steps. They define the business model, choose a jurisdiction, set up the right
company, collect documents, prepare the platform, pass the regulator’s review and meet the rules after launch. Some
tasks can run at the same time, but none should be skipped.

To obtain a gambling license, prepare the business before you file the application. Clear ownership,
proven funds and working compliance controls matter more than a promise of fast approval.

Step 1. Define Your Business Model & Target Markets

Decide What You Will Operate

Start with the activity you want to run. A B2C operator deals directly with players. It usually carries the main
duties for player checks, safer gambling, funds, games and reporting. A B2B platform, game studio or sportsbook
supplier may need a different license, registration or approval.

The categories are not the same everywhere. For example, Malta places different products into gaming types under its
B2C framework. The UK issues remote operating licences for specific activities. Anjouan and Nevis publish B2C and
B2B options. In Kahnawake, an operator may need a Client Provider Authorization linked to an Interactive Gaming
Licence.

Write down the exact product: casino, sportsbook, poker, bingo, lottery or a mix. Add the payment model – fiat,
crypto or both – and list your platform, games and other suppliers. Also decide whether you need your own online
gambling license or will start under a white-label deal. A white label can make launch easier, but it does not
remove every legal duty from the brand owner.

Map Target and Restricted Markets

A license from one jurisdiction does not give access to every country. The UK, for example, requires a Gambling
Commission license if you offer remote gambling to consumers there. A Curaçao, Anjouan, Nevis or Kahnawake license
cannot replace that local permission.

Create a country list before you apply. For each market, check player access, advertising, local licensing, payments,
tax, geolocation and self-exclusion. The same list should be used in your business plan, website terms, affiliate
rules, PSP applications and platform settings.

Set the Budget and Launch Date

Calculate the full first-year gambling license cost, not just the regulator’s application or licence fee. Depending
on the jurisdiction and business model, the budget may include company incorporation, regulatory fees, minimum
capital, local directors or employees, office requirements, compliance policies, platform and game certification,
banking, payment reserves, tax, accounting, audit and legal support.

Split the launch schedule into preparation, regulator review, testing and commercial onboarding. A regulator’s target
time often starts only after the file is complete. Company setup, legalized documents, PSP checks and technical
fixes can add weeks or months.

Step 2. Choose the Right Gambling Jurisdiction

Ask Five Practical Questions

Before comparing jurisdictions, answer five questions about the project:

• Where will the players be located, and which markets require a local license?
• What can the company spend in year one, including working capital and compliance costs?
• When must real-money play begin?
• Will the business need card acquiring or mainly crypto payments?
• Is this license intended to be a long-term regulatory base or a first step before local-market licences are
  added?

A cheap or fast license may be of little use if banks, payment providers, game studios or target markets will not
accept it. A strict license can also be too expensive for an early-stage project.

Before applying for a gambling license, consider legal market access, total operating costs, regulatory
requirements and commercial acceptance together.

For a fuller comparison method, see How to Choose
a Jurisdiction for Your iGaming Business.

Compare the Shortlisted Licenses

Compare the exact license type, not only the country name. Record:

• activities covered by the license – casino, sportsbook, poker, bingo, lottery or B2B services;
• B2C and B2B licensing options;
• restricted and prohibited markets;
• company incorporation and local-presence requirements;
• official application and annual licence fees;
• estimated total first-year and renewal costs;
• minimum capital or financial requirements;
• UBO, director and key-person suitability checks;
• AML/KYC and responsible-gambling requirements;
• platform, game and technical certification requirements;
• reporting, audit and ongoing compliance duties;
• expected application process and regulatory timeline;
• banking, PSP and game-provider acceptance.

Do not choose a jurisdiction based on the licence fee alone. A lower-cost license can become more expensive if it
creates difficulties with banking, payment processing, suppliers or market access.

Before committing to a jurisdiction, ask your intended banks, PSPs, platform provider and major game suppliers
whether they accept operators licensed there. Their requirements can be as important to the commercial launch as the
regulator’s approval.

Check Possible Jurisdictional Conflicts

A jurisdictional conflict arises when the license, the player’s location, the applicant company, the product or a
supplier’s rules do not support the same operating model. A gambling licence may be valid but still be insufficient
for a particular market, product or payment route.

Examples of Jurisdictional Conflicts:

Avoid Prohibited and Unlicensed Markets

Do not assume that an offshore or international gambling licence allows you to accept players worldwide. Some
countries prohibit most forms of online gambling, while others allow only state-controlled activities or require
operators to obtain a local licence before targeting residents.

Markets such as Indonesia, Thailand, Singapore and several Middle Eastern jurisdictions can involve significant
restrictions or prohibitions on online gambling. The exact position can also depend on the gambling product,
operator location, player location and applicable local law.

Before accepting players from any country, verify whether the activity is permitted, whether a local licence is
required, and whether restrictions apply to advertising, payments or particular gambling products. Where the legal
position is unclear or local authorization is required, restrict access until appropriate legal advice or
authorization is obtained.

Short-term revenue opportunities in black markets often come with the highest legal and financial
exposure.

Step 3. Set Up the Company & Appoint Key People

Create the Right Applicant Company

Confirm which company may apply before you incorporate.

For example, Curaçao uses a local legal entity and expects resident management and substance. Malta has its own
applicant and establishment requirements. Isle of Man applications are built around an eligible Isle of Man company
and named local control roles. Nevis has its own entity and application rules. Gibraltar looks for a real operating
connection, not only a registered address. Kahnawake follows a different structure because a Client Provider
Authorization sits under an Interactive Gaming Licence.

The correct structure depends on the exact licence and business model. Do not copy a corporate structure from another
gambling project without checking whether it meets the requirements of your chosen jurisdiction.

Identify Owners, Controllers and Key People

Draw the ownership chain to the final natural persons. Include shareholders, voting rights, trusts, loans, options
and anyone who can control decisions. Then list the directors and people responsible for compliance, AML, finance
and technology.

Thresholds and job titles differ. For example, Kahnawake checks directors, key people and owners or controllers at
the levels set by its rules. Malta assigns approved key functions. Anjouan uses key person authorization for
selected roles. Gibraltar also regulates certain managers and owners. Use the regulator’s definitions instead of one
generic list.

Check Banks, PSPs and Suppliers Early

A license does not guarantee a bank account, card processing, games or a sportsbook feed. Share the real ownership,
markets, products, payment flows and expected volumes with the intended providers. Ask for written confirmation
where possible.

This step is especially important for newer routes such as Tobique, Nevis and Anjouan. A license can be valid under
local law while a bank or game studio still refuses it under its own risk policy. Malta, UK, Isle of Man or
Gibraltar approval can also fail commercial checks if the owners, markets or payment flows do not fit the provider’s
rules.

Step 4. Prepare the Gambling License Documents

Most applications need five groups of evidence. The list below is a practical starting point, but it is not
universal. Always use the latest forms and guidance for the chosen jurisdiction.

For example, the UK Gambling Commission may ask for ownership charts, policies, customer terms, bank statements,
forecasts, funding evidence and system diagrams. Isle of Man forms ask for named managers, financial information, a
business plan, a group chart and payment flows. Anjouan focuses on corporate records, the full UBO chain, key
people, financial standing and source of funds. Nevis also expects compliance policies and proof that the technology
is ready.

Personal Due-Diligence Documents:

• Passport or accepted identity document and recent proof of address
• Detailed CV with jobs, directorships and regulatory history
• Police clearance where required
• Professional, bank or character references in the required format
• Tax residence details, declarations and conflict disclosures
• Source-of-wealth evidence showing how each owner built their assets

Corporate Documents:

• Certificate of incorporation and other constitutional documents
• Shareholder register, share certificates and full group chart
• Management chart, key roles and board resolutions
• Trust deeds, loans, shareholder agreements, options and other control rights, if relevant
• Current and previous licences, applications, enforcement cases and insolvency history

Financial Documents:

• Source-of-funds evidence for all money placed into the applicant
• Bank statements, audited accounts, tax records and credit reports if requested
• Proof of capital, guarantees, liquidity and funds for player balances
• Profit-and-loss, cash-flow and balance-sheet forecasts with clear assumptions
• Funding agreements that match the ownership chart, bank trail and forecasts

Business and Commercial Documents:

• Business plan covering products, markets, marketing, staff, governance and growth
• Target-market and restricted-country review, including geoblocking rules
• Contracts or advanced drafts with platform, games, sportsbook, payments, KYC and hosting providers
• Customer terms, privacy notice, bonus terms, game rules and complaints process
• Domain list, brand structure, organization chart and launch plan

Compliance and Technical Documents:

• AML/CFT, KYC, sanctions, PEP screening, transaction monitoring and reporting procedures
• Responsible gambling, age checks, self-exclusion and customer protection controls
• Information security, access control, incident response, privacy, continuity and disaster recovery
• System diagrams, data flows, hosting, outsourced services and regulatory reporting design
• RNG, game, platform and laboratory certificates, plus the testing plan and completed fixes

Step 5. Build Compliance & Technical Readiness

Make AML and Player Checks Work in Practice

A written policy is not enough. Decide who checks identity and age, when enhanced due diligence starts, how sanctions
or PEP matches are reviewed, which transactions create alerts and who reports suspicious activity. Configure the
tools and test real examples before launch.

The regulator will also check the owners and their money. Malta, for example, reviews source of funds, source of
wealth, forecasts, policies and technical setup. The evidence must show where the wealth came from and how the
operating money reached the applicant company.

Rules differ across licences. For example, Curaçao expects a risk-based AML program. Anjouan publishes requirements
for customer checks, monitoring, reporting and a compliance officer. Tobique has separate AML regulations. Kahnawake
places AML controls in the approved control system. A group with several licences may need separate settings and
reports for each one.

Protect Players and Their Money

Set up age checks, self-exclusion, limits where required, risk monitoring, clear bonuses and a fair complaints
process. Decide how player balances will be separated, checked and returned if the business closes. The customer
terms must match the actual account setup.

For example, Anjouan publishes controls for age checks, self-exclusion and limits. Tobique has its own rules for
registration, verification, self-exclusion and complaints. The UK and Malta add detailed local duties. A tool that
works for one license may not be enough for another market.

Prepare the Platform for Testing

Technical work may include RNG and game certificates, a system or security audit, access controls, logs, backups,
incident response, change management and regulatory reports. Also configure the operational controls described
elsewhere in the application. This may include:

• geolocation and GEO-blocking for restricted markets;
• age and identity-verification integrations;
• AML and transaction-monitoring tools;
• self-exclusion and responsible-gambling controls;
• payment and withdrawal rules;
• player-fund reconciliation;
• regulatory logs and reports.

For example, Malta links technical review to system documents and an audit. The UK applies remote technical
standards. Kahnawake separates operator, software and live-dealer permissions within its own structure. These
examples show why the company, platform, suppliers and target markets must be planned together.

Step 6. Submit the Application & Pass Regulatory Review

File the Application and Pay the Fees

Submit through the regulator’s portal or approved channel. Pay the correct application and due-diligence fees and
note which payments are not refundable. Check whether documents need certification, notarization, an apostille or
translation.

Keep one file list with versions, owners and expiry dates. Never send sensitive documents to an unverified
intermediary.

Complete the Fit-and-Proper and Funding Reviews

The regulator checks identity, honesty, experience, finances, ownership, funding and the ability to run the business.
A past problem may not always cause refusal, but hiding it can create a more serious issue. Explain what happened
and what has changed.

The depth varies. For example, Kahnawake can review character, legal history, credit, references, finances and
technical ability. Anjouan reviews the company, key people, source of funds and sanctions risks. Malta separates
reviews of people, funding, the business plan, policies and technology. A faster process is not the same as no due
diligence.

Answer Questions and Report Changes

Questions from the regulator are normal. Give one person responsibility for replies, keep a question log and answer
the full request. Update every affected document when a fact changes. A new owner, source of funding, product,
market or platform may require approval or even a new application.

Step 7. Receive the License, Launch & Stay Compliant

Complete the Pre-Launch Conditions

Approval may come with conditions. Before accepting real-money play, complete the required audit, certificates,
domain registration, license display, payment setup, reporting access, key-person approvals and staff training.

Check the start date and the exact products, companies, brands, domains and markets covered. A certificate is only
one part of launch readiness.

Maintain the License

After launch, use a compliance calendar. Track fees, tax, reports, audits, AML reviews, complaints, incidents,
player-fund checks, training, renewals and policy updates. Create an approval process for changes to owners,
directors, key people, domains, games, platform, hosting and suppliers.

For example, Curaçao has local-substance and key-person duties. Anjouan requires reporting, approved-domain control
and notice of important changes. Tobique has ongoing reporting. Malta and the UK apply detailed compliance and
change rules. Kahnawake treats changes to directors, certain owners, key people and control systems as material. One
group may need a separate calendar for each license.

For a wider post-approval service map, see What
End-to-End iGaming Licensing Support Includes.

Complete Gambling License Checklist

Use this list to manage the project. Then replace it with the current forms and document list from the chosen
regulator. Final gaming license requirements always depend on the exact route.

• The business model covers B2C or B2B status, products, brands, domains and payments.
• Target, local-license, restricted and prohibited markets are mapped and dated.
• Market rules are built into geolocation, registration, payments, affiliates, SEO, advertising and CRM.
• The first-year budget includes the regulator, company, capital, people, substance, technology, testing, tax and
  a reserve.
• The applicant company, ownership chain, UBOs, controllers and group structure are clear.
• Directors, key people, compliance officers and MLRO are appointed or ready.
• Identity, address, CV, police, reference, tax, wealth and declaration documents are current.
• The source of funds is traced from its origin to the applicant’s account.
• The business plan, forecasts and funding model use the same assumptions.
• Platform, games, sportsbook, payments, KYC, hosting and security suppliers are mapped and checked.
• The license scope, target-market law, company, supplier contracts, PSP approval and domains have been checked
  for conflicts.
• AML, KYC, sanctions, monitoring, safer gambling, complaints, privacy, security and continuity controls work in
  practice.
• Customer terms, game rules, bonus terms, privacy notice and complaints process are ready.
• System architecture, data flows, access, backups, logs and reports are documented.
• RNG, games, platform, security and system testing are booked with accepted laboratories or auditors.
• Certification, notarization, apostille, translation and document-age rules are met.
• Forms, due-diligence files, fees, version list and submission owner are ready.
• The team has a question log and a clear owner for regulator replies.
• Launch conditions, renewals, fees, reports, audits, training and change approvals are in the calendar.

Why Gambling License Applications Are Delayed or Rejected

• Documents are incomplete or do not match. Names, dates, ownership, markets, forecasts,
  contracts or diagrams are different across the file.
• Ownership is unclear. The regulator cannot identify the people who own, fund or control the
  company.
• The source of money is weakly explained. A bank balance is shown, but the lawful origin and
  transfer path are not.
• Forecasts are unrealistic. Revenue, marketing, tax, reserves, player balances or staffing do
  not fit the plan.
• Policies do not match the platform. The written rules mention tools, limits, roles or reports
  that are not working.
• Testing is incomplete. Certificates, the live setup, change control or proof of fixes are
  missing.
• The market plan conflicts with the license. For example, the operator targets the Netherlands,
  the UK or Germany without the required local approval.
• The jurisdiction does not fit the business. The wrong company is used for Curaçao or Nevis, or
  a Kahnawake CPA is treated as a stand-alone global licence.
• Replies are slow or partial. The team misses deadlines or sends only part of the requested
  evidence.
• The project changes during review. New owners, funds, products, markets or technology may force
  a new assessment.

See also 8 iGaming Licensing Mistakes That Cause
Startups to Fail.

Frequently Asked Questions

How GamingLicensing Supports the Application

GamingLicensing can coordinate the licensing process as one project — from choosing the jurisdiction and setting up
the applicant company to preparing the application and supporting the business through regulatory review.

Support can include corporate structuring, document-gap analysis, business plans and compliance policies, supplier
and testing coordination, application preparation, responses to regulator questions and planning for ongoing
compliance.

The right licensing route depends on your products, target markets, ownership, budget, payment model and launch
plan.

Request a jurisdiction assessment and a tailored licensing checklist before forming the applicant company or
signing long-term platform and payment contracts.