When an entrepreneur first enters iGaming, they almost always frame the question too simply: "What license does an online casino need?" In practice the question doesn't work that way. An operator needs not "any license", but a suitable legal model for their market, payments, content, launch format and level of control over the business.
Publication date:
June 17, 2026
When an entrepreneur first enters iGaming, they almost always frame the question too simply: "What license does an online casino need?" In practice the question doesn't work that way. An operator needs not "any license", but a suitable legal model for their market, payments, content, launch format and level of control over the business. The same project may be looking toward White Label, its own B2C license or a B2B framework — if the company sells a platform, games or technology services rather than accepting bets from players.
The main mistake at the start is thinking that the license alone solves everything: payments, providers, compliance, GEO and partner trust. It does not. A license is a framework within which everything else has to align: the company, banking and payment logic, KYC/AML (identity verification and anti-money-laundering), responsible gaming, reporting, technical architecture and supplier contracts. Without this, even a "beautiful" license becomes an expensive document that does not help an actual launch.
If you are still just comparing launch scenarios — it is more logical to first break the project down by GEO, model and level of control through consulting, and only then choose a jurisdiction. This is cheaper than obtaining a license that poorly matches your product.
The first thing to understand: in iGaming it is not simply a "casino website" that is licensed, but a specific type of activity. In some jurisdictions B2C and B2B are separated, in others operators and suppliers of critical services, and in some cases game types, control systems, reporting and technical checks are formalized separately.
At MGA this is explicitly split into a Gaming Service licence for B2C and a Critical Gaming Supply licence for B2B. Under Curaçao's new LOK regime (Lands Verordening op de Kansspelen) there is also a distinction between an online gaming license for operators and a supplier license for suppliers of critical services and goods — for example, game- and sportsbook-software.
Hence the practical conclusion: if you accept deposits, manage players, run wallets, bonuses and withdrawals — you need a B2C framework. If you supply a platform, games, backend, payment modules or another technical service to a licensed operator — you are already looking toward a B2B license or a supplier model, if one exists in the chosen jurisdiction.
This is exactly why the question "do you need an online casino license?" always starts with another question: are you an operator or a supplier?
For an operator this is a critical distinction.
B2C is a license to work with the end player: accepting bets, maintaining accounts, wallets, payouts, bonus terms, player protection, disputes and reporting.
B2B is the licensing of a supplier that does not take money from the player directly, but provides infrastructure or content to another operator. MGA, for example, requires B2B licensees to submit monthly compliance reports specifying the client companies to which licensed services are supplied. This shows that B2B is not a "simplified license", but simply a different legal framework.
In practice this means the following. If a brand launches a casino with its own logic, its own frontend, its own traffic and its own economics — it needs a B2C scenario or a White Label model, where the B2C framework already sits on the provider's side. If a company is building a product business and selling a platform, PAM (Player Account Management — a unified account management system), CRM, game aggregation or other modules to other operators — it makes sense to look at B2B licensing.
For Betstore this is a fundamental point: different product scenarios — White Label, Turnkey and the technology framework — require completely different legal constructions. And we discuss this with clients even before any conversation about jurisdiction begins.
Curaçao remains one of the most discussed jurisdictions, but right now it is important to view it not as an "old offshore", but as a new system after LOK came into force. The official CGA portal states directly that the new law took effect on December 24, 2024, that the old NOOGH licenses were converted into provisional licences, and that new applications are now filed under the new law. The portal also explicitly separates an online gaming license and a supplier license.
For an operator this matters for several reasons.
First, the new model is significantly more formal and centralized. Second, only legal entities established under Curaçao law, with a statutory seat in Curaçao and a local management element — at least one resident director — may apply. Third, the CGA lists specific grounds for refusal: unverified UBO (ultimate beneficial owner), unclear source of funds, tax debts, absence of a policy for responsible gambling, insufficient liquidity for payouts, lack of an approved ADR (dispute resolution mechanism) and even lack of registration in goAML.
The process is two-phase. The first phase is verification of UBO and key persons, including their financial standing. The second phase is verification of compliance with the remaining requirements. The CGA aims for eight weeks per phase, with a possible extension of up to four weeks.
Practical conclusion: Curaçao suits those who want to operate in a more formalized and recognized offshore model, are ready to build a local corporate framework, and understand that "a fast entry without preparation" no longer works here. We have seen projects drag out their documents for three or four months and still receive a reject — because they came without a proper AML policy and without a clear source of funds. If a project is looking at Curaçao, it needs to plan the licensing process, the company, the payment structure and the AML logic in advance.
In 2026 Anjouan is often considered one of the most accessible entry points. The regulator's official website (AIRA — Anjouan Internet Gaming Regulatory Authority) states directly that the Authority licenses and supervises both B2C and B2B operators, maintains a public register, an enforcement section and separate pages on the application process, required documents and fees. This is no longer a "black box", but a formalized public regulatory infrastructure.
The key factor in its popularity is a transparent fee schedule and a comparatively low barrier to entry compared with heavy jurisdictions like Malta. At the same time, since 2025 Anjouan has introduced a separate B2B framework with its own fee schedule. The regulator warns that tariffs may be revised and that application fees are non-refundable. It is best to check current costs on the regulator's website or in a consultation.
For an operator this means the following: Anjouan really can be a lighter and clearer entry than heavy jurisdictions. But this does not remove the need for due diligence, corporate documents, payment logic and product compliance with the regulator's requirements. The mistake is to view Anjouan only as "cheap paper". It is more correct to see it as a jurisdiction that can be convenient if you need a working offshore B2C/B2B framework without an excessive barrier to entry.
➤ Not sure which jurisdiction fits your project? We break down the model, GEO, payments and launch structure — and only then select a license. Book a consultation → betstore.io/consulting
Malta remains one of the strongest jurisdictions by reputation. MGA still separates B2C and B2B, maintains an open register of licensees and formalizes the application process, fees, audit checklists and reporting requirements.
The cost of entry here is noticeably higher than in offshore jurisdictions — both the application fee and the annual compliance contribution depend on the type of license and annual gaming revenue. A separate scale applies to the B2B Critical Gaming Supply. It is best to check specific figures on the MGA website or in a consultation — they are revised regularly.
Why does this matter? Because Malta is no longer a story about "getting a license at the start at any cost", but about a mature business structure. Requirements here are higher for reporting, systems documentation, compliance and the quality of the operating model. MGA is often suited not to a first launch with limited resources, but to a project that already understands its economics, markets and management structure.
Practical conclusion: Malta is a strong option if reputation, institutional perception and a higher standard of supervision matter. But if a project is only testing a business model or is not ready for a serious compliance load, this jurisdiction may turn out to be heavier than necessary at the first stage.
Kahnawà:ke is not a "universal answer for everyone", but it is an old and still living jurisdiction with a formalized process for interactive gaming. The commission's website provides the application process, forms, costs, regulations and a list of permit holders. Within the jurisdiction a Client Provider Authorization (CPA) and a Casino Software Provider Authorization (CSPA) are used; the latter allows a licensed software supplier to supply casino software to a third party, but not to offer games to players directly.
What matters in practice: Kahnawà:ke is a genuinely working regulator, not just a historical name. This is evident from its enforcement activity: in March 2026 the commission publicly suspended the Client Provider Authorization of Einrai Ltd. after a Show Cause Notice. For an operator this is a good signal in one sense and an unpleasant one in another: the jurisdiction is not dead, but it is not merely formal either — the control is real.
Practical conclusion: Kahnawà:ke is worth considering if you understand the specifics of this particular model, rather than simply looking for "yet another offshore license". It is a working jurisdiction, but not one to choose just because of the name.
There are other jurisdictions too — Gibraltar, Isle of Man, Philippines (PAGCOR), Mwali (Comoros Islands). Each has its own logic, thresholds and target markets. We have covered the four that most often appear in B2B iGaming in the CIS market and in international launches.
This is where the grown-up part of the conversation begins. A license is only one layer. An operator also needs:
This is exactly where many fail. They choose a jurisdiction by price or by reputation, but do not match it to the product. As a result they get a licensing framework that does not align with payments, game integrations, the compliance process or the launch model itself.
For Betstore this is precisely the stage where it is important not to argue "which license is better", but to first break the project down by structure — payments, platform, launch model — and only then the jurisdiction. We help assemble this whole construction through licensing and consulting.
First mistake — choosing a license by price.
Yes, the fee schedule matters. But if a jurisdiction does not match your payment logic, company structure or supplier requirements, the savings at the start quickly turn into extra costs. We have seen projects that obtained Curaçao and then could not connect a single decent PSP — because they did not think through the payment architecture in advance.
Second mistake — confusing B2C and B2B.
A software supplier should not always take the same path as an operator. And vice versa: an operator cannot "hide" behind a B2B framework if it really accepts money from players and runs a consumer-facing product. The regulator sees this — and it is grounds for revoking a license.
Third mistake — thinking the license will solve everything for you.
It will not solve payments, will not fix a weak frontend, will not replace a CRM and will not fix technical debt. A license only sets the framework within which everything else has to work. If the framework does not match the product — you have simply spent money and time.
Fourth — going into a jurisdiction without a real understanding of timing and local substance.
This is especially visible with Curaçao: there the requirements for a local entity and resident management are stated directly, and the process itself is two-phase and formalized. Projects that arrive there without prepared documents get stuck for months.
Fifth — copying someone else's path.
"A competitor took Anjouan — so it'll suit us too." Not necessarily. The competitor may have a different model, a different GEO focus, a different payment logic. A license is always for a specific project.
A license is not a piece of paper for the wall. It is a framework within which everything else must work: payments, the platform, content, compliance, reporting. If the framework does not match the product — you have simply spent money and time.
If we strip away the extra theory:
The right question for an operator is not "where is a license cheaper", but "which construction actually launches and scales for my product".
➤ Need a license for your project? Betstore helps with licensing and the full launch construction — from platform to payments. Submit a request → betstore.io/consulting
If you are still at the stage of choosing a launch model — take a look at our materials: how to open an online casino and how much a launch costs.
Yes, if you are an operator and work with players, you need a legal B2C framework — either your own license or a White Label model, where the licensing framework already sits on the provider's side. "Just launching a website" without a legal construction is not a working model: payment providers, game suppliers and advertising platforms will not work with an unlicensed project.
B2C is working directly with the player: money, bets, payouts, a consumer-facing product. B2B is the supply of software, a platform, games or another critical service to another licensed operator. Regulators — MGA, CGA, Anjouan — separate these frameworks, and mixing them up when submitting an application means either a reject or an unsuitable license.
By the combination of requirements and barrier to entry, Anjouan looks like one of the most accessible and transparent offshore entry points for B2C and B2B. But accessibility of entry does not remove the need for due diligence and matching the model. A license that does not match your payments and GEO is not a saving, but extra costs. Current conditions are best checked in a consultation.
It is not suitable for everyone. After LOK it is a more formal system with local substance, a two-phase process and clearly described grounds for refusal. If a project is not ready for these requirements — the process will drag out or end in refusal. For those ready to invest in preparation, Curaçao can be a good choice with a growing reputation.
Because MGA has formalized supervision, an open register, a clear separation of B2C/B2B, an application framework and regular compliance reporting. This increases reputational value and the trust of institutional partners, but at the same time raises the barrier to entry — in terms of documentation, operational requirements and resources.
Yes, this path is common. But the migration is almost always more difficult than it seems at the start: payments, the legal framework, contracts, compliance processes and part of the technical logic all change. Betstore helps plan such transitions in advance — both through White Label and through the Turnkey model.
It depends on the jurisdiction. Curaçao — from 16 to 24 weeks (two phases of 8 weeks each + a possible extension). Anjouan — usually faster, within a few weeks. Malta — from 6 to 12 months, taking into account due diligence and compliance preparation. The real timelines depend heavily on how well the documents are prepared at the start.
Launching without a license almost always runs into infrastructure problems, not just the fact of operating "without paperwork." Serious payment providers and game aggregators usually won't connect without a legal framework and compliance in place — which means trouble accepting payments, accessing top providers' content, and earning partner trust. Add the risk of blocking, the absence of a KYC/AML setup, and legal liability in GEOs where the activity isn't permitted. Over the long run this is more expensive and riskier than choosing a suitable jurisdiction from the start: the project either fails to scale or has to be rebuilt on the fly.
