How Online Casino Licensing Actually Works

Key takeaways

A gambling licence is meant to confirm fund segregation, fair-game certification, dispute resolution, and identity/anti-fraud checks — not just "permission to operate."
Malta (MGA), Alderney (AGCC) and Kahnawake all publish searchable public registers you can check against a licence number in minutes.
Curaçao's newer Gaming Control Board (GCB) framework, used by Crocoslots, publishes citable licence numbers like OGL/2023/176/0095.
Some regulators — including a few older Curaçao "master licence" arrangements and smaller jurisdictions — don't offer an easily searchable public register, which is a real transparency gap worth weighing.

What a licence actually checks

A real gambling licence isn't a rubber stamp — it's an ongoing regulatory relationship. The strongest licensing bodies require an operator to keep player funds in accounts segregated from operating capital (so a casino's cash-flow problems can't touch your balance), submit its random number generator and payout percentages to independent testing labs like eCOGRA or iTech Labs, maintain a formal dispute-resolution process a player can escalate to if a complaint goes unanswered, and run anti-money-laundering and know-your-customer checks on withdrawals. When we review a casino, this is the checklist a "licence" is actually supposed to satisfy — not just a logo in the footer.

Not all regulators are equal

Licensing jurisdictions sit on a spectrum of oversight strength and transparency. At the top, the Malta Gaming Authority (MGA), the UK's Alderney Gambling Control Commission (AGCC), and the Kahnawake Gaming Commission all publish a public, searchable register where you can type in a licence number and see the operator it belongs to, its status, and often its licensing history. Spin Casino holds all three at once — the only casino we review with that level of overlapping verification. All Slots and Lucky Nugget each hold two of the three. JackpotCity holds a single Alderney licence (155 C1), which is still independently verifiable, just from one body rather than several.

Curaçao's regulatory framework changed materially in 2023, moving from a "master licence" sub-licensing model to a centralised Curaçao Gaming Control Board (GCB) issuing its own numbered licences directly — Crocoslots' OGL/2023/176/0095 is an example of this newer, more citable format. Older-style Curaçao arrangements, along with smaller jurisdictions like Tobique Gaming Commission (used by Oshi and Bitkingz) and Anjouan, don't offer the same easily searchable public lookup as far as we've been able to establish, which doesn't necessarily mean the operator is unsafe, but it does mean you're taking more on trust.

How to verify a licence yourself

Find the licence number

It's usually in the footer of the casino's homepage, or on a dedicated "Licensing" or "About" page.

Go to the regulator's own register, not a third-party site

The MGA, AGCC and Kahnawake all run their own public licence-lookup tools on their official websites.

Match the operating entity name, not just the brand

Casinos are often licensed under a holding-company name that differs from the consumer-facing brand — check that the register entry actually names the brand you're using or its known parent.

Note what you can't verify

If a regulator doesn't offer a public search tool, write that down as a genuine unknown rather than assuming the licence is fine because a number was quoted.

Red flags in licensing claims

Three patterns are worth treating as warning signs. First, a licence claim with no number at all — just the regulator's name mentioned in passing. Second, a number that doesn't resolve to anything when you check the regulator's own register; we ran into exactly this with Spirit Casino's "Curaçao eGaming" citation, which we couldn't match to a specific, publicly searchable entry. Third, and most serious, no named regulator whatsoever — Kiwi's Treasure is the only casino among the nine we review where we couldn't locate any disclosed licensing body in its terms at all. None of these automatically means a casino is a scam, but they do materially change how much of your safety is resting on the operator's word alone versus an independently checkable fact.

Frequently asked questions

Is an unlicensed online casino automatically unsafe?

Not necessarily unsafe in every case, but it does mean you have no independent third party to escalate a dispute to if something goes wrong, and no external audit of the games' fairness. We treat licensing transparency as one of the heaviest-weighted factors in our own scoring for exactly this reason.

Which regulator is considered the strongest for player protection?

The Malta Gaming Authority and the UK Gambling Commission are generally regarded as having the most rigorous ongoing compliance requirements, followed closely by Alderney and Kahnawake. All four publish public registers you can check yourself.

Why do some casinos use smaller jurisdictions like Curaçao or Anjouan?

Cost and speed. Smaller jurisdictions typically charge lower licensing fees and have faster approval processes than the MGA or UK Gambling Commission, which makes them attractive to newer or smaller operators — but the trade-off is usually less rigorous ongoing oversight.

Responsible gambling

Licensing strength is one input into responsible play, not a substitute for your own limits. Even a triple-licensed casino can't protect you from your own bankroll decisions — set a deposit limit before you start, regardless of who regulates the casino.

Written by Daniel Ashworth

Editor-in-Chief & Licensing Lead

Daniel spent eight years auditing operator compliance documentation for an offshore iGaming consultancy before relocating to New Zealand in 2019. He oversees licence verification and sets the review standards every casino on this list is measured against.

Read full bio & other reviews →