Gibraltar

About the Gibraltar Gambling Commissioner

Gambling is fully legal and regulated in Gibraltar under the Gambling Act 2005, with a transition to the modernised Gambling Act 2025 underway. Every operator must hold a licence issued by the Gibraltar Licensing Authority (GLA) and supervised by the Gambling Commissioner. We classify Gibraltar as a tier-one regulator alongside UKGC, MGA, and Isle of Man under our licensing trust framework.

The licensing structure splits across three actors. The Licensing Authority — the Minister of Finance — issues licences. The Commissioner heads supervision, investigates breaches, and imposes sanctions. The Gibraltar Regulatory Authority (GRA), established under the 2000 Act, holds the public licensee register and operates the appeals tribunal.

Gibraltar’s online gambling sector dates back to 1998 and now anchors the territory’s economy alongside tourism and financial services. The British Overseas Territory — 32,000 residents on 26 square miles at the southern tip of the Iberian Peninsula — hosts a disproportionate share of the world’s largest gambling brands.

The framework rests on three statutory aims: keep crime out of gambling, ensure fairness, and protect players. These translate into codes of practice covering AML, advertising, and game integrity. Brexit reshaped the trading context — Gibraltar left the EU with the UK in December 2020 — but UK market access was preserved through cross-recognition under the Gibraltar Tax (Acts of Parliament).

How Gibraltar Licensing Works

The Commissioner issues several principal licence types under the Gambling Act. The Remote Gaming B2C Operator licence covers online casinos and RNG-based gaming; Remote Betting B2C covers sportsbooks and fixed-odds betting; Remote B2B covers software platforms, data feeds, and payment processing supplied to licensed operators. Land-based casinos and bookmakers fall under separate non-remote licences.

The 2025 Gambling Act expanded the regulatory perimeter. A licence is now mandatory whenever a person or company based in Gibraltar is responsible for organising or managing remote gambling, regardless of where the servers sit or where the players are. A new category — Gaming Operator Support Services (GOSS) — formally captures marketing affiliates and customer-fund management entities that previously operated in regulatory grey areas.

Applicants face a notoriously selective fit-and-proper review. The Licensing Authority generally only considers companies with a proven gambling track record, an existing licence from another reputable jurisdiction, financial stability, and a credible business plan. Fees scale by activity type rather than a flat rate, and licences carry a 5-year initial validity — longer than UKGC’s annual cycle but shorter than MGA’s ten-year duration.

Licensees maintain audited financial accounts, file regulatory returns, and submit to ongoing compliance assessment under the Commissioner’s social responsibility code. The Commissioner can issue cease-and-desist orders, administrative fines, or licence suspensions for breach; appeals route through the GRA tribunal. Annual audit cycles plus public-register transparency make Gibraltar’s regulatory record verifiable from outside the jurisdiction.

Player Protection Under Gibraltar

Self-exclusion is mandatory at the operator level. Gibraltar-licensed casinos must honour self-exclusion requests for a minimum of six months, alongside time-out tools and deposit-limit settings on every account. The framework predates the UK’s GAMSTOP scheme and operates separately.

Integration with the UK’s GAMSTOP register is, however, optional for Gibraltar-only operators. Many major brands voluntarily integrate — especially those dual-licensed with UKGC, where GAMSTOP is mandatory — but a Gibraltar-only licensee is not compelled. We flag this as a structural gap versus UKGC mandatory cover; players wanting the strongest self-exclusion should verify GAMSTOP status before depositing.

Player funds segregation is mandatory. Operators hold customer balances in separate accounts and submit annual audited accounts to the regulator. The AML Code (2016) requires a nominated AML officer, enhanced due diligence on higher-risk profiles, 5-year record retention, and SAR filing with the Gibraltar Financial Intelligence Unit.

Advertising sits under the Commissioner’s Generic Code (2012), which mirrors UK CAP and BCAP standards: no misleading content, no under-18 targeting, accurate bonus disclosure. Operators dual-licensed with UKGC also follow the stricter 2023 CAP code update on under-25 influencers and football shirt sponsorship phase-out.

Complaint escalation works differently from UKGC’s approved-ADR-provider triad. Players complain to the operator first, then escalate directly to the Commissioner’s office rather than to a separate ADR provider — see Red Spins for a Gibraltar-licensed brand that surfaces this path explicitly.

Gibraltar vs Other Licenses

Compared with the UK Gambling Commission, both are tier-one with overlapping technical standards. UKGC mandates GAMSTOP and runs an approved-ADR-provider triad (IBAS, ProMediate, Lindens). Gibraltar uses direct Commissioner escalation and treats GAMSTOP as optional. The two frameworks intersect at most major UK-facing brands, which carry dual licences under cross-recognition.

Against Malta’s tier-one framework, the post-Brexit divergence matters most. Malta retains EU passporting; Gibraltar lost EU access but kept UK market access. Malta licences run ten years; Gibraltar runs five.

Versus Curaçao’s offshore framework, the recourse depth differs meaningfully. Gibraltar enforces segregated funds and direct Commissioner escalation with a multi-decade record. Curaçao’s 2024 LOK reform is improving but the public enforcement history is shorter. Operator density also differs — bet365, William Hill, 888, and Entain choose Gibraltar.

How to Verify a Gibraltar License

Verifying a Gibraltar gambling licence takes three steps: scroll to the casino’s footer, check for a Gambling Commissioner seal or RGL licence number reference, and cross-check the operator on the Gibraltar Regulatory Authority licensee register at gra.gi. Most Gibraltar-licensed operators also hold a UK Gambling Commission licence — checking both registers confirms tier-one status from two independent authorities.

1. Locate the Commissioner seal or “Licensed by the Government of Gibraltar” disclosure in the casino footer — most operators include the RGL number.
2. Search the operator name or RGL number on the GRA licensee register at gra.gi to confirm active status.
3. If the casino also markets to UK players, verify the parallel UKGC licence on the UK public register — a dual entry confirms cross-recognition and tier-one coverage on both sides.

Warning signs are familiar: a footer claiming “Gibraltar licensed” without an RGL number, a missing register entry, or a seal that doesn’t link or match any active licensee. Operators transitioning between the 2005 and 2025 Acts should still appear on the register — absence is the red flag.

Frequently Asked Questions

Final Take

Best for players who want tier-one oversight from a UK-aligned framework and value operator-density trust signals — bet365, William Hill, 888, and Entain anchor here. Brexit-era cross-recognition keeps UK access intact and the 2025 Act tightens the regulatory perimeter.

Consider another framework if you require mandatory GAMSTOP from the licence itself — UKGC is the cleaner choice. EU-facing operators should prefer MGA’s retained passporting. Gibraltar’s smaller formal ADR layer suits players valuing flexibility over arm’s-length recourse.