What Does "Regulated" Mean?
A regulated online casino holds a licence from a recognised gambling authority and operates in compliance with that regulator's requirements. These typically cover: player protection, game fairness certification, anti-money laundering, responsible gambling, advertising standards, data protection, and financial reporting.
The contrast is with offshore or unregulated casinos — operators running under minimal or no meaningful oversight. See our offshore casino guide for a full breakdown of that model and its risks.
Why go regulated? Regulated casinos access mainstream payment processing, major game studio content, established advertising channels, and banking relationships. They carry significantly lower legal and reputational risk. The upfront investment is higher — but the long-term commercial position is substantially stronger.
Choosing a Licensing Jurisdiction
Jurisdiction selection is one of the most consequential decisions in launching an online casino. The key considerations are: which player markets you want to reach, the cost and complexity of licensing, the ongoing compliance burden, and what payment and banking access the licence enables.
| Jurisdiction | Target Market | Relative Cost | Complexity |
|---|---|---|---|
| UK Gambling Commission (UKGC) | UK | High | Very High |
| Malta Gaming Authority (MGA) | EU / International | High | High |
| Gibraltar Regulatory Authority | EU / International | Medium | Medium-High |
| Isle of Man GSC | International | Medium | Medium |
| Alderney AGCC | International | Medium | Medium |
| Sweden (Spelinspektionen) | Sweden | High | High |
| Denmark (Spillemyndigheden) | Denmark | Medium | Medium-High |
| New Jersey DGE (USA) | New Jersey | Very High | Very High |
| Ontario (iGO, Canada) | Ontario | High | High |
For operators targeting UK players, a UKGC licence is mandatory — no other licence permits marketing gambling services to UK residents. For a well-regulated EU base, the MGA is most commonly chosen. US state licences are the most expensive and complex in the world, often requiring a land-based casino partner.
The Licensing Process
Every jurisdiction differs in its specifics, but the licensing process broadly involves the following stages:
Corporate and Individual Due Diligence
Regulators conduct thorough background checks on the applying company and all key individuals — directors, significant shareholders (usually anyone holding 10%+ of equity), and senior executives. This includes criminal record checks, financial soundness checks, source-of-funds verification, and professional references. Any adverse history can result in application refusal, so preparation is everything.
Business Plan and Financial Review
A detailed business plan demonstrating market understanding, realistic projections, and sufficient capitalisation is required. Regulators want to see that the applicant has the funds to sustain operations and cover player liabilities — operators are typically required to hold player funds in segregated accounts.
Technical Systems Certification
The gaming platform and all key technical systems must be independently tested and certified by an accredited testing laboratory — such as eCOGRA, GLI (Gaming Laboratories International), or BMM. This typically covers RNG certification, game outcome verification, penetration testing, and player fund segregation architecture.
Policy and Procedure Documentation
Comprehensive internal policies must be drafted and submitted: AML policy, responsible gambling policy, complaint handling, KYC procedure, marketing standards, data protection policy, and operational security procedures. These documents must be detailed, implementable, and consistent with the regulator's requirements.
Personal Management Licences
In the UK and several other jurisdictions, key individuals must hold personal management licences (PMLs) in addition to the company licence. iGamingUK team members hold UKGC PMLs across 5 disciplines, which is why our team is uniquely positioned to support licence applications and ongoing compliance management.
Technology Platform Options
There are three main technology approaches to launching a regulated online casino, each with different cost, speed, and flexibility profiles:
White-Label Platform
The fastest and lowest-cost route to market. White-label providers — including EveryMatrix, SoftSwiss, Delasport, and Turnkey — supply a fully functional casino platform, integrated game content, and often a sub-licensed operating framework. Operators get to market in 3–6 months. The drawbacks are limited product differentiation and ongoing revenue share costs, typically 15%–25% of GGR.
Proprietary Platform
Building your own platform from scratch provides full control and maximum differentiation, but requires significant capital, engineering expertise, and 12–24 months of development time. This is the right approach for operators with long-term ambitions for a distinctive product or a B2B technology play. CSGOLuck's proprietary platform — built with iGamingUK's support — later became the technical foundation for Vegas Gems.
Hybrid Approach
Many successful operators launch on a white-label platform to get to market quickly, then migrate to proprietary technology as they scale revenue and team capability. This is often the most commercially rational path.
Game Content and Aggregation
A regulated online casino requires a certified game library. There are two ways to access content:
- Direct studio integration — negotiate directly with game studios (Pragmatic Play, NetEnt, Microgaming, Play'n GO, Blueprint). Requires minimum revenue guarantees and technical integration capacity. Generally only viable for operators with meaningful scale.
- Game aggregator — a single API integration that provides access to hundreds of studios through one contract. Leading aggregators include Relax Gaming, Pariplay, EveryMatrix CasinoEngine, and SoftSwiss Aggregator. Aggregator fees are typically 2%–5% of GGR on top of studio royalties.
For regulated markets — particularly the UKGC — only games certified by an approved lab can be offered. This naturally limits the available library to mainstream studios that invest in certification. Managing game content — ordering new titles, maintaining studio relationships, managing game performance — is a significant operational overhead that our casino managed services team handles for clients.
Payment Processing
Regulated casinos have better payment access than offshore operators, but payment acquisition remains practically challenging. A typical regulated casino payment stack includes:
- Card payments — Visa and Mastercard via a specialist gaming acquirer. In the UK, credit card gambling deposits have been banned since 2020 (UKGC requirement).
- Open banking / bank transfer — increasingly important in the UK and EU; Trustly and Pay By Bank providers dominate.
- E-wallets — PayPal (selective acceptance of gambling merchants), Skrill, Neteller, and regional options. E-wallets are a preferred method for many casino players.
- Prepaid vouchers — Paysafecard and equivalents; popular for anonymity-preferring players.
- Crypto — some regulated operators accept crypto deposits; regulatory treatment varies by jurisdiction.
Establishing the first banking relationship is typically the hardest part. Specialist gaming payment consultants and introductions are often required. iGamingUK maintains established relationships with gaming-friendly acquirers and PSPs across multiple jurisdictions.
KYC and AML Requirements
Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance are among the most operationally intensive aspects of running a regulated casino. Failures in this area result in the largest regulatory fines in the industry — the UKGC has levied penalties exceeding £100 million against operators in recent years.
KYC Requirements
Regulated casinos must verify player identity before allowing withdrawal, and typically before deposit above certain thresholds. KYC checks typically involve: government-issued photo ID, proof of address (utility bill, bank statement), and source-of-funds documentation for high-value players. Electronic verification (using credit reference agencies and ID document scanning technology) is now the standard approach.
AML Requirements
A regulated casino must have a documented AML programme covering: customer due diligence (CDD), enhanced due diligence (EDD) for higher-risk customers, transaction monitoring, suspicious activity reporting (SARs), staff training, and an appointed Money Laundering Reporting Officer (MLRO). The AML programme must be proportionate to the operator's risk profile and reviewed regularly.
Source of Funds
One of the most operationally challenging requirements in the UK is source of funds (SoF) verification. Operators must be able to demonstrate that player deposits come from legitimate income. This requires requesting payslips, bank statements, or other income evidence from players who deposit or lose above defined thresholds. Getting this process right — rigorous enough to satisfy the UKGC but not so intrusive that it destroys the player experience — requires genuine operational expertise.
Responsible Gambling Requirements
Regulated operators have extensive responsible gambling (RG) obligations. In the UK these include:
- Deposit limits — players must be able to set them; some regulators require operators to proactively offer them
- Loss limits and session time limits
- Self-exclusion — integration with GAMSTOP (UK national self-exclusion scheme) is mandatory for UKGC licensees
- Reality checks — prompts reminding players how long they've been playing
- Customer interaction — operators must actively monitor for signs of problem gambling and intervene
- Staff training on RG policies and escalation procedures
- Safer gambling messaging in advertising and on-site
The UKGC has significantly tightened RG requirements in recent years and continues to do so. Any new UKGC operator must treat responsible gambling compliance as a core operational function, not an afterthought.
Typical Costs to Launch a Regulated Online Casino
| Cost Category | Indicative Range | Notes |
|---|---|---|
| Licence application fee | £25,000 – £500,000+ | Varies enormously by jurisdiction; US state licences at top end |
| Annual licence fee | £5,000 – £150,000+ | Ongoing; scales with GGR in many jurisdictions |
| Legal and compliance setup | £50,000 – £200,000 | Drafting policies, application support, legal advice |
| Platform (white-label) | £20,000 – £80,000 setup + rev share | Platform providers charge setup fees plus ongoing GGR % |
| Platform (proprietary build) | £500,000 – £5,000,000+ | Full engineering team, 12–24 months minimum |
| Technical certification (RNG, pen test) | £15,000 – £50,000 | Per testing lab; ongoing costs as platform updates |
| Game content integration | £10,000 – £40,000 | Aggregator setup; individual studio minimums if direct |
| Payment processing setup | £5,000 – £30,000 | Multiple PSP integrations; rolling reserve requirements |
| Player fund segregation / float | £100,000 – £500,000+ | Working capital requirement; varies with anticipated scale |
| Marketing (launch period) | £100,000 – £1,000,000+ | Highly variable; affiliate deals, paid acquisition, promotions |
Total launch capital requirements for a regulated casino typically range from £300,000 (modest UK white-label operation) to £2,000,000+ (ambitious standalone brand in a competitive market). US state licensing can require $10M–$50M+.
Realistic Timeline
First-time casino founders frequently underestimate how long the launch process takes. A realistic timeline for a UKGC or MGA licensed white-label casino:
- Months 1–2: Legal entity setup, appoint legal counsel, begin licence application preparation
- Months 2–4: Submit licence application; begin platform selection and commercial negotiations
- Months 4–8: Regulatory review period (UKGC typically 4–6 months; MGA 3–4 months)
- Months 6–10: Platform integration, game content setup, payment processing onboarding, KYC/AML system implementation
- Months 8–12: Soft launch, compliance testing, RNG certification sign-off
- Month 10–14: Full public launch with marketing programme
The entire process from decision to launch is typically 9–18 months for a first-time operator working with experienced advisors. Without experienced casino launch consultants managing the process, timelines frequently extend significantly.
iGamingUK has managed dozens of regulated casino launches. Our casino launch consultancy covers the full process — from jurisdiction selection and licence application through to go-live and early operations. Talk to our team →