Gambling is fully legal and regulated in Gibraltar under the Gambling Act 2005<\/strong>, with a transition to the modernised Gambling Act 2025 underway. Every operator must hold a licence issued by the Gibraltar Licensing Authority (GLA)<\/strong> and supervised by the Gambling Commissioner<\/strong>. We classify Gibraltar as a tier-one regulator<\/strong> alongside UKGC, MGA, and Isle of Man under our licensing trust framework<\/a>.<\/p>\n The licensing structure splits across three actors. The Licensing Authority \u2014 the Minister of Finance \u2014 issues licences. The Commissioner heads supervision, investigates breaches, and imposes sanctions. The Gibraltar Regulatory Authority (GRA)<\/strong>, established under the 2000 Act, holds the public licensee register and operates the appeals tribunal.<\/p>\n Gibraltar’s online gambling sector dates back to 1998 and now anchors the territory’s economy alongside tourism and financial services. The British Overseas Territory \u2014 32,000 residents on 26 square miles at the southern tip of the Iberian Peninsula \u2014 hosts a disproportionate share of the world’s largest gambling brands.<\/p>\n The framework rests on three statutory aims: keep crime out of gambling, ensure fairness, and protect players. These translate into codes of practice covering AML, advertising, and game integrity. Brexit reshaped the trading context \u2014 Gibraltar left the EU with the UK in December 2020 \u2014 but UK market access was preserved through cross-recognition under the Gibraltar Tax (Acts of Parliament).<\/p>\n The Commissioner issues several principal licence types under the Gambling Act. The Remote Gaming B2C Operator<\/strong> licence covers online casinos and RNG-based gaming; Remote Betting B2C<\/strong> covers sportsbooks and fixed-odds betting; Remote B2B<\/strong> covers software platforms, data feeds, and payment processing supplied to licensed operators. Land-based casinos and bookmakers fall under separate non-remote licences.<\/p>\n The 2025 Gambling Act expanded the regulatory perimeter. A licence is now mandatory whenever a person or company based in Gibraltar is responsible for organising or managing remote gambling, regardless of where the servers sit or where the players are. A new category \u2014 Gaming Operator Support Services (GOSS)<\/strong> \u2014 formally captures marketing affiliates and customer-fund management entities that previously operated in regulatory grey areas.<\/p>\n Applicants face a notoriously selective fit-and-proper review. The Licensing Authority generally only considers companies with a proven gambling track record, an existing licence from another reputable jurisdiction, financial stability, and a credible business plan. Fees scale by activity type rather than a flat rate, and licences carry a 5-year initial validity \u2014 longer than UKGC’s annual cycle but shorter than MGA’s ten-year duration.<\/p>\n Licensees maintain audited financial accounts, file regulatory returns, and submit to ongoing compliance assessment under the Commissioner’s social responsibility code. The Commissioner can issue cease-and-desist orders, administrative fines, or licence suspensions for breach; appeals route through the GRA tribunal. Annual audit cycles plus public-register transparency make Gibraltar’s regulatory record verifiable from outside the jurisdiction.<\/p>\n Self-exclusion is mandatory at the operator level. Gibraltar-licensed casinos must honour self-exclusion requests for a minimum of six months, alongside time-out tools and deposit-limit settings on every account. The framework predates the UK’s GAMSTOP scheme and operates separately.<\/p>\n Integration with the UK’s GAMSTOP<\/strong> register is, however, optional for Gibraltar-only operators<\/strong>. Many major brands voluntarily integrate \u2014 especially those dual-licensed with UKGC, where GAMSTOP is mandatory \u2014 but a Gibraltar-only licensee is not compelled. We flag this as a structural gap versus UKGC mandatory cover; players wanting the strongest self-exclusion should verify GAMSTOP status before depositing.<\/p>\n Player funds segregation is mandatory. Operators hold customer balances in separate accounts and submit annual audited accounts to the regulator. The AML Code (2016)<\/strong> requires a nominated AML officer, enhanced due diligence on higher-risk profiles, 5-year record retention, and SAR filing with the Gibraltar Financial Intelligence Unit.<\/p>\n Advertising sits under the Commissioner’s Generic Code (2012), which mirrors UK CAP and BCAP standards: no misleading content, no under-18 targeting, accurate bonus disclosure. Operators dual-licensed with UKGC also follow the stricter 2023 CAP code update on under-25 influencers and football shirt sponsorship phase-out.<\/p>\n Complaint escalation works differently from UKGC’s approved-ADR-provider triad. Players complain to the operator first, then escalate directly to the Commissioner’s office rather than to a separate ADR provider \u2014 see Red Spins<\/a> for a Gibraltar-licensed brand that surfaces this path explicitly.<\/p>\n Compared with the UK Gambling Commission<\/a>, both are tier-one with overlapping technical standards. UKGC mandates GAMSTOP and runs an approved-ADR-provider triad (IBAS, ProMediate, Lindens). Gibraltar uses direct Commissioner escalation and treats GAMSTOP as optional. The two frameworks intersect at most major UK-facing brands, which carry dual licences under cross-recognition.<\/p>\nHow Gibraltar Licensing Works<\/h2>\n
Player Protection Under Gibraltar<\/h2>\n
Gibraltar vs Other Licenses<\/h2>\n