Crypto Casino: How Licences Are Won, Audited and Lost

A crypto casino accepts Bitcoin, Ethereum, USDT and other digital assets for wagers, and pays winnings back in the same currency. The appeal for players is speed: deposits clear in minutes, sometimes seconds, without a card issuer sitting in the middle. The appeal for operators is obvious too, but the licence is where the story gets interesting.

Unlike a fiat-only brand, a crypto-facing casino answers to two sets of rules at once: the gambling regulator that issued the licence, and the financial-intelligence regime that treats every token transfer as a movement of money. Miss either and the licence goes. This article walks through exactly what it takes to get and keep one, market by market, in 2026.

What Actually Counts as a Crypto Casino in 2026

Which assets do UK-facing brands actually accept?

Very few. Under the Gambling Act 2005 as amended, the Gambling Commission does not permit stake-withdrawal in crypto for Great Britain customers, so bet365 casino, William Hill casino, Sky Bet casino and Ladbrokes casino run purely on GBP. Crypto rails appear at offshore-licensed brands such as Mystake casino, Goldenbet casino, Donbet casino and NineWin casino, where USDT and BTC sit alongside Visa.

Is a crypto casino the same as a Bitcoin-only casino?

No. A Bitcoin-only site holds one asset and prices every game in it, so a 0.5 BTC deposit swings in fiat value with the market. A multi-asset crypto casino typically lists 12 to 40 coins, quotes a stablecoin balance in USDT or USDC, and converts at the cashier. Paddy Power casino, Coral casino and Betfred casino hold no crypto rails at all.

Who regulates the operators that do take crypto?

Three regimes dominate: Curaçao under the new Curaçao Gaming Authority framework that replaced the individual sub-licence system in March 2024, the Isle of Man Gambling Supervision Commission, and the Malta Gaming Authority. Anjouan and Kahnawake still license a long tail. Each demands a documented AML programme, a named compliance officer and periodic independent testing.

Do fiat brands ever touch crypto behind the scenes?

Settlement, yes; cashier, no. Gala Bingo, Sky Vegas casino and Ladbrokes casino process deposits through Open Banking and card networks, but their payment partners may clear in crypto on the back end. From the player's side nothing changes: you deposit pounds, you withdraw pounds, and the regulator's reporting obligations attach to the fiat leg.

What is a tokenised bankroll?

Some operators fund player balances with an ERC-20 token pegged 1:1 to their wallet reserves, then burn it on withdrawal. PartyCasino and Grosvenor Casinos have trialled internal ledger tokens for loyalty points, not for stakes. Where the token is redeemable for real play it falls under e-money rules, which in the EU means registration under MiCA before 30 December 2024.

Why did stablecoins take over the cashier?

BTC volatility kills a bankroll. A player who deposits 0.05 BTC on Monday can be down 12% by Friday without losing a single hand. USDT on Tron and USDC on Base now account for the bulk of crypto casino volume because the balance holds still, network fees stay under $1, and confirmations land in under a minute.

Licence Routes and What They Cost

How much does a Curaçao crypto casino licence cost?

The Curaçao Gaming Authority's 2024 framework set an application fee of $40,000 for a B2C licence, plus an annual fee scaled to gross gaming revenue. Add local substance: a Curaçao-registered entity, a resident director, and a compliance officer who passes the authority's fit-and-proper test. Total first-year outlay usually lands between $90,000 and $150,000.

What does an Isle of Man licence demand?

Substantially more. The Isle of Man GSC expects a physical office, key-person approvals for directors and the MLRO, a source-of-funds policy covering every deposit above £5,000, and integration with the island's blockchain analytics provider. Brands like PlayOJO and Videoslots have used the jurisdiction for exactly this reason: banks lend to IOM licensees more readily.

Is a UK Gambling Commission licence possible for crypto play?

Only for the fiat side. Sky Bet casino, Betfair casino, William Hill casino and Coral casino all hold GC licences and run GBP-only cashiers. A crypto-facing product aimed at GB customers would fail the Commission's requirement that transactions be traceable through regulated payment institutions, and the licence application would not clear due diligence.

Which offshore brands UK players actually see?

A long list, all operating under second-jurisdiction licences: Mystake casino, Goldenbet casino, Donbet casino, NineWin casino, Fat Pirate, Velobet casino, Rolletto casino, Roobet casino, Gamdom casino, Rainbet, Mega Riches, Kinghills casino, Lottomart, NYSpins casino and Dream Vegas. Each publishes its licence number in the footer; if the number does not resolve on the regulator's register, treat it as decoration.

What is the difference between a white-label and a direct licence?

A white-label operator rents another company's licence and pays 15% to 30% of net gaming revenue in platform fees. A direct licensee keeps the margin and the liability. talkSPORT BET and Kwiff casino went direct in the UK market; several crypto brands on Anjouan licences still run white-label through aggregators to avoid building their own compliance desk.

How long does renewal take?

Curaçao renews on a five-year cycle with an interim compliance return each year. The MGA issues ten-year licences but requires a full submission at year five, including audited accounts and a refreshed AML risk assessment. Miss the return window and the licence lapses; Ladbrokes casino's parent has publicly described regulatory reporting as a standing quarterly workload rather than an annual scramble.

AML Obligations for Crypto-Facing Operators

What does an AML programme actually contain?

Five documents, minimum: a business-wide risk assessment, a customer due diligence procedure, a source-of-funds and source-of-wealth policy, an ongoing transaction monitoring rulebook, and a suspicious activity reporting pathway to the local financial intelligence unit. The Gambling Commission's guidance and the Curaçao AML ordinance both require the set; the difference is how hard they audit it.

How is blockchain monitoring done in practice?

Operators route every deposit address through a analytics provider such as Chainalysis, Elliptic or TRM Labs before crediting a balance. The tool scores the address against known mixer output, darknet market flow, sanctioned wallets and ransomware clusters. A score above the operator's threshold triggers manual review; a hit on a sanctioned wallet triggers an immediate freeze and a report.

Unusually high-risk patterns get escalated. A player depositing from a fresh wallet funded moments earlier through Tornado Cash-style privacy tooling will sit in a review queue for hours, sometimes days, while compliance traces the origin. That friction is the price of accepting crypto at all, and every serious operator prices it into withdrawal times.

What triggers KYC on a crypto casino?

Thresholds vary but converge. Most Curaçao and IOM licensees require full identity verification before the first withdrawal, and enhanced due diligence above $10,000 cumulative or any single deposit over $5,000. PlayOJO, MrQ casino and 888 Casino apply similar rules on the fiat side, asking for photo ID, proof of address dated within three months, and a liveness check.

Do crypto casinos report to tax authorities?

The licence holder reports suspicious activity to its own regulator. Player-level tax reporting sits with the player in most jurisdictions, though the EU's DAC8 directive, applying from 1 January 2026, obliges crypto-asset service providers to report user transactions to tax authorities automatically. Offshore casinos outside the EU scope remain outside that net, which is part of their draw for some players.

What happens when a player refuses to verify?

The balance freezes. Operators including bet365 casino, Grosvenor Casinos and Goldenbet casino state plainly in their terms that withdrawal is conditional on completed verification, and that refusing it forfeits the right to cash out. Regulators back this: the Commission has repeatedly fined operators for allowing play to continue after red flags appeared.

Which coins are hardest to accept under AML rules?

Privacy coins. Monero, Zcash shielded transactions and Dash PrivateSend are declined by the overwhelming majority of licensed crypto casinos precisely because analytics cannot trace them. Where a site does list XMR, it typically caps deposits at a low threshold and applies manual review to every withdrawal. Bitcoin, Ethereum, Litecoin, Solana and the major stablecoins pass screening routinely.

KYC, Audits and the Ongoing Cost of Staying Licensed

What does a compliance audit look like for a crypto casino?

An external firm reviews twelve months of transaction logs, samples 30 to 50 player files against the CDD policy, tests the screening tool's alert handling, and interviews the MLRO. Findings are graded; a critical finding can suspend the licence pending remediation. Fees run from $25,000 for a Curaçao review to well over $100,000 for a UK GC compliance assessment.

How often do licence holders get tested?

Curaçao requires an annual independent AML audit under the 2024 ordinance. The Isle of Man adds thematic reviews, often on a specific risk such as VIP onboarding or crypto wallet exposure. The MGA schedules a full compliance audit at least every two years. Operators running multiple licences, as bet365 casino and Unibet casino do, maintain separate reporting calendars for each.

What are the penalties for failing an audit?

Escalating. A first-tier finding usually means a remediation plan within 30 to 90 days. Persistent failure brings a fine, and in the UK the Commission has issued penalties in the millions for AML breakdowns. Licence revocation is the last step, but it has happened: the register shows operators losing authorisation each year for exactly this reason.

Which brands hold licences in several jurisdictions at once?

The larger groups. Entain's portfolio covering Ladbrokes casino, Coral casino and Gala Bingo spans the UK, Malta and multiple EU states. Flutter runs Sky Bet casino, Paddy Power casino and Betfair casino under a similar multi-licence structure. 888 Casino, William Hill casino and Betway casino each maintain separate licences per market, with local compliance teams attached to each.

Offshore crypto brands rarely match that footprint. Mystake casino, Donbet casino, Fat Pirate and Goldenbet casino typically hold one Curaçao licence covering all markets, which keeps overhead low and scrutiny narrow. The trade-off shows up in disputes: there is one regulator, in one small jurisdiction, and its enforcement capacity is finite.

What is a responsible gambling toolkit under these licences?

Deposit limits, loss limits, session timers, reality checks, cool-off periods and self-exclusion registration, all reachable within two clicks of the cashier. The UK licence adds mandatory GamStop integration, affordability checks at thresholds set by the Commission, and a ban on features that accelerate play. Offshore sites offer similar controls voluntarily, but enforcement depends on the operator, not the regulator.

Do crypto casinos publish return-to-player figures?

Licensed ones do. The MGA and Isle of Man both require RTP certification by an approved test lab such as eCOGRA, iTech Labs or GLI, with published monthly averages. Typical figures: 96% to 97.5% on slots from Pragmatic, NetEnt, Hacksaw and Evolution's table range. A site that will not show its RTP certificate is telling you something.

What happens to player funds if a licence is lost?

Segregated accounts are supposed to protect balances. In the UK, the Commission requires ring-fenced customer funds with a grading published in the operator's terms. Offshore, segregation is a policy statement rather than a statutory guarantee, which is the sharpest practical difference between holding an account at bet365 casino and one at a single-licence Curaçao brand.

Comparing the Major Operators on Licence and Crypto Terms

Which of the top brands accept crypto at all?

Among the household names, effectively none for GB customers. Sky Vegas casino, Virgin Games casino, JackpotJoy casino, Gala Casino, Rainbow Riches Casino, Monopoly Casino, Double Bubble Bingo, Heart Bingo and Foxy Bingo all run GBP-only. The crypto-facing entries in the wider market are Mystake casino, Goldenbet casino, Donbet casino, NineWin casino, Rolletto casino, Velobet casino, Roobet casino and Gamdom casino.

How do licence terms differ between UK and offshore brands?

UK brands carry a five-year licence, published customer-fund grading, mandatory dispute resolution through IBAS or the Commission's own process, and enforced affordability checks. Offshore crypto brands carry a five-year Curaçao licence or a one-year Anjouan licence, voluntary responsible-gambling tools, and dispute handling through the operator's own complaints team first.

What game libraries do crypto casinos carry?

Parity with fiat sites. Mystake casino and Goldenbet casino list 4,000 to 6,000 titles from Pragmatic Play, NetEnt, Hacksaw, Nolimit City, Evolution and Play'n GO, alongside in-house crash games. Grosvenor Casinos and Genting Casino run smaller libraries built around live tables from Evolution and their own venues' branded rooms. Volume is not the differentiator; the cashier is.

Do crypto casinos offer the same bonuses?

Nominally yes, structurally different. A typical offshore welcome offer runs 100% up to 0.5 BTC or the USDT equivalent, with wagering of 30x to 40x on the bonus. UK brands such as Coral casino, Ladbrokes casino and Betfred casino cap offers lower, publish wagering in plain figures, and must show key terms before opt-in under the Commission's bonus rules.

Which brands pay out fastest?

Crypto withdrawals clear in 5 to 30 minutes once approved, because there is no card network. Fiat e-wallets take 1 to 24 hours; bank transfers take 1 to 5 working days. MrQ casino, PlayOJO and Sky Vegas casino have built reputations on same-day fiat payouts, which is about as fast as regulated GBP processing gets.

How do the bingo-first brands fit in?

They sit firmly on the fiat side. Gala Bingo, Sun Bingo, Double Bubble Bingo, Fabulous Bingo, Lucky Pants bingo and Heart Bingo run under UK licences with GBP cashiers and no crypto option. Their compliance load is identical to a casino's: same AML rules, same verification triggers, same self-exclusion obligations through GamStop.

What about the newer entrants like Mr Vegas casino and Pub Casino?

Both launched under UK Gambling Commission licences with fiat-only cashiers, targeting the same audience the crypto brands chase with faster onboarding instead of a different currency. LiveScore Bet, talkSPORT BET and DragonBet followed the same playbook: sports-led, GBP-only, verification pushed to the first withdrawal rather than the first deposit.

Is there a hybrid model emerging?

Yes, and it is worth watching. Some operators hold a UK licence for their GBP product and a separate Curaçao entity for crypto, with entirely separate domains, terms and support teams. The separation is deliberate: it keeps the UK licence clean while still serving players who want to deposit in USDT. Whether regulators close that gap is the live question for 2026.

Practical Checks Before You Deposit

Where do you find and verify a licence number?

Footer of the site, then the regulator's public register. Curaçao publishes licence holders on the Curaçao Gaming Authority site; the Isle of Man and Malta both maintain searchable databases. Type the number in, confirm the legal entity name matches, and check the status reads active rather than suspended or expired. Two minutes, and it rules out most problems.

What terms matter most in the fine print?

Four clauses decide most disputes: maximum withdrawal per day or per week, the verification documents required before payout, bonus wagering multipliers, and the jurisdiction that hears complaints. Crypto casinos commonly cap withdrawals at $5,000 to $15,000 per week unless VIP status is granted, a limit worth reading before you plan a large cash-out.

Should you prefer a multi-licence brand?

Usually. An operator holding both a UK GC licence and an MGA licence, as 888 Casino, Unibet casino and Betway casino do, answers to two regulators with real enforcement budgets. A single-licence Curaçao brand answers to one. That is not a verdict on any individual site, but it does change what happens when a complaint goes sideways.

How do you self-exclude from a crypto casino?

Two routes. In the UK, register with GamStop, which blocks every GC-licensed operator at once for a minimum of six months. Offshore, request exclusion directly through support; the better sites apply it permanently on request and honour it across sister brands. Keep the confirmation email, because offshore enforcement relies on your own record-keeping.

What should you check about the wallet layer?

Network compatibility. A USDT deposit sent on Ethereum to a Tron address is gone, and recovery is at the operator's discretion, if offered at all. Confirm the network shown in the cashier matches the one you are sending on, send a small test amount first, and keep the transaction hash until the balance credits.

Is a crypto casino legal for UK players?

Playing at an offshore-licensed crypto casino is not illegal for the individual in Great Britain, but it sits outside the UK regulatory perimeter, meaning no Gambling Commission protection, no IBAS adjudication and no GamStop coverage. Depositing at a UK-licensed brand with crypto is not possible at all, because no GC licensee accepts it.

Which regulator is strongest on AML enforcement?

The Gambling Commission, by a distance. Its published enforcement register runs to dozens of cases with penalties reaching seven figures, and it publishes the reasoning behind each decision. Curaçao's 2024 framework is a genuine step up from the old sub-licence era, but its enforcement record is thin and still being built in public.

What is the realistic cost of running a compliant crypto casino?

Counting licence fees, annual audits, analytics subscriptions, a compliance officer and legal retainer, a single-jurisdiction operation spends roughly $200,000 to $400,000 a year to stay clean. Multi-licence groups spend several times that. It explains why the cheapest offshore sites cut corners where players never look: the audit file.

Frequently Asked Questions

Is a crypto casino safe to play at?

It depends entirely on the licence. Check the footer number against the Curaçao, Isle of Man or Malta register, confirm the entity name matches, and read the withdrawal limits. A verified licence plus published RTP certification from eCOGRA or iTech Labs puts a crypto casino on comparable footing with most offshore fiat brands.

Do crypto casinos pay faster than fiat casinos?

Yes, once verification clears. Crypto withdrawals settle on-chain in 5 to 30 minutes, while card and bank payouts take 1 to 5 working days. The verification step is identical either way: photo ID, address proof, and sometimes source-of-funds evidence above $10,000 cumulative deposits.

Which cryptocurrencies are accepted most often?

USDT on TRC-20 and ERC-20, BTC, ETH, LTC, SOL and USDC cover the vast majority of cashiers. Privacy coins like Monero are usually declined because blockchain analytics cannot trace them, and regulators expect traceability on every deposit an operator accepts.

Can I use a crypto casino from the UK?

You can access offshore sites, though they operate outside the UK Gambling Commission's remit, so GamStop, IBAS and affordability checks do not apply. UK-licensed brands including bet365 casino, William Hill casino and Sky Vegas casino accept only GBP, and that will not change under current Commission rules.

What happens if a crypto casino loses its licence?

Player balances should sit in segregated accounts, but recovery depends on the jurisdiction. UK-licensed operators publish a customer-fund grading and fall under the Commission's process. Offshore, you deal with the operator first and the regulator second, which is why licence verification before depositing matters more than any bonus on offer.

Do I pay tax on crypto casino winnings?

In the UK, gambling winnings are untaxed for the player regardless of currency, and that has not changed. Elsewhere the position varies, and from 1 January 2026 EU crypto-asset service providers report user transactions to tax authorities under DAC8, though offshore casinos outside the EU remain outside that reporting net.

Licence checks take two minutes and decide everything that follows: where disputes go, how funds are protected, and what happens when something breaks. Verify the number, read the withdrawal limits, and pick the operator whose regulator you would actually want on your side.