Market verdict: Unregulated — Use CR only as a fast, low-cost temporary base with a funded migration plan; banking access is the binding constraint.
Last updated: 2026-06-07
AmberBoard Briefing
2026-06-07
Costa Rica is a registration-only offshore hub, not a regulated licence — viable as a fast, cheap first step but with declining banking access.
What has changed ›
PSP de-risking and US correspondent-banking pressure (FinCEN advisories and 2025 Section 311 gambling actions) have materially eroded the model's practical viability.
↗ CR-DECRETO-29643-MP-H
What to do now ›
Treat CR as a temporary base only; budget for crypto/alternative rails, maintain rigorous AML/KYC despite no local mandate, and start a migration plan to a regulated licence within 12–24 months.
↗ CR-EXP-17551
What to watch ›
Any revival of a CR licensing framework, further FinCEN Section 311 actions touching gambling rails, and FATF typology updates.
↗ CR-FEES-CASINOCITY
Overall posture
unregulated
Costa Rica runs the world's most unusual gambling jurisdiction model: registration-based rather than regulation-based. Operators incorporate a Sociedad Anónima or SRL and obtain a municipal 'data-processing' permit; there is no gambling regulator, no gambling licence, and no consumer-protection framework. The country has been an offshore hub since the 1990s, hosting hundreds of operators serving global players. The 'Costa Rica licence' is a corporate registration frequently misrepresented as a gambling licence. The JPS holds a domestic state-lottery monopoly, and CR residents may not play real-money at CR-unlicensed sites.
AmberSummary
2026-06-07
Use CR only as a fast, low-cost temporary base with a funded migration plan; banking access is the binding constraint.
Market status
conditional
Overall RAG
Amber
Regulatory posture
unregulated
Time to revenue
0-2
Capital req.
<50k
Confidence
Probable
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
No T1 market-size or growth figures were published for Croatia this cycle, leaving the market-opportunity picture dependent on structural inference from reform signals. The most material commercial signal is the industry projection — rated Uncertain, from a single-source HUPIS estimate — that the kladomati ban and venue-siting limits could force 50 to 70 percent of betting shops to relocate or close, threatening up to approximately 15,000 jobs.
· ~1 min read
This points toward near-term market-structure contraction and consolidation among private land-based operators rather than expansion. The state lottery operator Hrvatska Lutrija retains a favourable low-risk exemption from several of the new restrictions, structurally advantaging the state entity relative to private operators. The progressive winnings tax, projected to raise 50 to 70 million euros annually, signals a market of meaningful fiscal scale, but the reform's overall trajectory — tightening across fees, tax, marketing, and distribution simultaneously — suggests that near-term commercial opportunity for new private entrants is constrained rather than expanding. Absent T1 market-size data, the opportunity assessment is held at the Uncertain tier.
Growth Trajectory
declining
Market Size Band
small
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
No gambling licence exists in Costa Rica. Operators incorporate under the Código de Comercio (N.° 3284) and obtain a municipal data-processing permit; this is not a regulatory licence equivalent to MGA or UKGC. Decreto 29643-MP-H frames offshore-facing operations and requires non-service of CR domestic players absent a specific permit, but is poorly enforced. There is no B2B software licence pathway, no player-protection requirement, and gambling operators are not classified as AML-obligated entities by SUGEF.
Licensing required
no
Registration is trivially easy — reported setup as fast as 42 days, typically 2–4 weeks, at USD 30,000–50,000 first-year. The decisive practical constraint is payments: major PSPs are de-platforming CR-registered gambling operators and US correspondent-bank scrutiny has tightened materially. The model that worked from 2000–2015 is significantly less viable today; operators entering via CR should plan migration to a regulated alternative within 12–24 months.
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
The principal regulated pathway under the new Gambling Act requires a locally registered company that also holds a land-based licence to offer online gambling — a coupled structure grounded in DURABLE primary legislation that effectively forecloses pure-play online market entry for operators without a Croatian land-based footprint.
· ~1 min read
Separate licence categories exist for land-based casinos, betting shops, and arcades. Lotteries are operated by the state entity Hrvatska Lutrija under a low-risk gaming exemption that places them outside several of the new restrictions. The issuing authority is the Ministry of Finance, which retains licensing administration and the self-exclusion system pending the constitution of a new dedicated regulatory agency provided for under the Act but not yet confirmed as operational. No per-pathway capital requirements or fit-and-proper test detail were available in the structured evidence this cycle; those conditions remain a gap. The land-based coupling combined with approximately 50 percent higher annual licence fees materially raises the structural barrier to entry for any cross-border online operator.
Licence types
1 types
B2B licensing
1 services
Key conditions
2 conditions
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
Player protection tightened substantially under the new Gambling Act. The national Registar Igrača self-exclusion register, overseen by the Croatian Institute of Public Health, became operational from late 2025 and must be cross-referenced by all licences from 1 January 2026 — grounded in DURABLE primary legislation. Self-exclusion is requestable by the player, family members, doctors, or social-care workers, and can be requested on an indefinite basis, representing a notably broad access model. Mandatory one-to-one player identification applies at venue entry and online, with operators required to verify identity and maintain databases cross-referenced against the register. The advertising regime imposes operator accountability for preventing display to under-18 audiences, and a complete ban on celebrities, athletes, and influencers in gambling promotion applies. The socially responsible gambling charter tied to the National Strategy to 2030 adds an ongoing operational obligation layer. Collectively, these obligations represent a player-protection framework that is materially more demanding than the prior regime and comparable in ambition to leading EU member-state frameworks.
+1 paragraph · ~1 min read
No marketing restrictions apply to Costa Rica-registered gambling operators with respect to their offshore-facing activity. Operators market globally from CR with no responsible-gambling advertising requirement and no CR authority regulating offshore-facing gambling advertising. This is the most permissive marketing environment in the dataset; host-country advertising rules remain the operative constraint.
Self Exclusion Scheme
National self-exclusion register (Registar Igrača) overseen by HZJZ, operational from late 2025; mandatory cross-reference by all licences from 1 January 2026; self-exclusion requestable by player, family, doctors or social-care workers, including indefinitely
Confidence
Probable
Traffic Light
red
Narrative
Player protection tightened substantially under the new Gambling Act. The national Registar Igrača self-exclusion register, overseen by the Croatian Institute of Public Health, became operational from late 2025 and must be cross-referenced by all licences from 1 January 2026 — grounded in DURABLE primary legislation. Self-exclusion is requestable by the player, family members, doctors, or social-care workers, and can be requested on an indefinite basis, representing a notably broad access model. Mandatory one-to-one player identification applies at venue entry and online, with operators required to verify identity and maintain databases cross-referenced against the register. The advertising regime imposes operator accountability for preventing display to under-18 audiences, and a complete ban on celebrities, athletes, and influencers in gambling promotion applies. The socially responsible gambling charter tied to the National Strategy to 2030 adds an ongoing operational obligation layer. Collectively, these obligations represent a player-protection framework that is materially more demanding than the prior regime and comparable in ambition to leading EU member-state frameworks.
Player Protection Marketing Vulnerable Rules
The new Gambling Act imposes a near-total advertising restriction regime that functions as a de facto protection for vulnerable persons. A 6am to 11pm broadcast and internet advertising curfew applies, combined with a total ban on print and outdoor and public-space advertising. Celebrities, athletes, and influencers are completely prohibited from gambling promotion. Operators bear direct accountability for preventing gambling advertising from being displayed to under-18 audiences. These restrictions are grounded in DURABLE primary legislation.
Player Protection Marketing Minors Rules
The new Gambling Act imposes a complete ban on celebrities, athletes, and influencers in gambling promotion, a total ban on print and outdoor advertising, and a 6am to 11pm broadcast and internet curfew — all of which function as age-protection measures. Operators are directly accountable for ensuring gambling advertising is not displayed to under-18 audiences. These obligations are grounded in DURABLE primary legislation effective 1 January 2026.
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
Apple App Store and Google Play do not list CR-registered gambling operators because there is no recognised gambling licence; sideloading is the primary mobile channel. Google and Meta advertising certification requires licensed gambling-advertiser status, which CR registration does not satisfy. Distribution access is restricted and declining.
Narrative
Apple App Store and Google Play do not list CR-registered gambling operators because there is no recognised gambling licence; sideloading is the primary mobile channel. Google and Meta advertising certification requires licensed gambling-advertiser status, which CR registration does not satisfy. Distribution access is restricted and declining.
Geo Gating Requirements
ip_based
Traffic Light
red
Confidence
Probable
Venue Siting Rules
Kladomati (self-service betting terminals) banned from hospitality/leisure venues from 1 January 2026; venue-siting limits ~500m from educational/religious institutions and ~200m for betting shops
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
Costa Rican authorities do not enforce gambling rules against registered operators. SUGEF does not regulate gambling operators for AML, and there are no criminal sanctions for offshore-facing online gambling from CR. The Ministerio de Hacienda's engagement is limited to fees; SUTEL can technically order website blocks but has not done so for gambling. The only material enforcement risk arises in host jurisdictions where operators serve players.
+1 paragraph · ~1 min read
The new Gambling Act, grounded in DURABLE primary legislation, materially expanded the enforcement toolkit available to the Croatian regulator. Licence revocation and multi-million-euro fines are now available for non-compliance, and the regulator is empowered to impose direct penalties or suspend advertising for breaches — all statutory powers carrying DURABLE durability. The enforcement record to date centres on the IP-blockade regime: over 900 unlicensed gambling websites were blocked by government order ahead of the reform's full implementation, a probable enforcement action demonstrating the government's willingness to use administrative blocking at scale. Enforcement is now extending toward payment-level controls, with PSPs and financial entities compelled to halt suspicious transactions to unlicensed operators and banks required to block payments to blacklisted operators — a FRAGILE-durability obligation pending instrument citation. No individual enforcement actions against named licensed operators were confirmed this cycle. The unregulated-sector enforcement theory follows the civil-law statutory-licensing-stack model: unlicensed gambling offered to Croatian residents constitutes a primary offence under the Gambling Act itself, with secondary vectors of IP-blocking, payment blocking, and advertising prohibition. The EUROMAT and HUPIS TRIS non-notification complaint introduces legal-validity uncertainty over the reform's enforceability, but this does not constitute a safe harbour for unlicensed operators.
Enforcement Style
light_touch
Enforcement Targeting
both
Enforcement Summary Last 12M
low
Enforcement Style
light_touch
Enforcement Targeting
both
Enforcement Summary Last 12M
low
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
No MONEYVAL assessment or 6AMLD transposition material specific to Croatia surfaced in the structured evidence this cycle, leaving the AML/CFT posture assessed at the structural level only. As an EU member state, Croatia operates within the EU AML framework, which includes obligations under the successive Anti-Money Laundering Directives transposed into national law.
· ~1 min read
Gambling operators licensed in Croatia are designated reporting entities subject to customer due diligence, enhanced due diligence for politically exposed persons, and suspicious transaction reporting obligations under the EU AML framework. No jurisdiction-specific AML/CFT change was evidenced in the structured claims this cycle, and no MONEYVAL mutual evaluation result or national AML action plan was located. The practical burden of AML/CFT compliance for a Croatian-licensed operator is therefore assessed against the EU harmonised framework baseline, but the absence of fresh T1 AML evidence means the specific domestic implementation depth — STR thresholds, CTR requirements, beneficial-ownership register obligations — cannot be confirmed from this cycle's evidence. This gap is flagged for resolution in the next cycle.
Fatf Status
Costa Rica is a GAFILAT member; gambling operators are not designated AML-obligated entities under CR law.
Designated Reporting Entity
False
Aml Cft Obligations Band
low
Confidence
Probable
Traffic Light
amber
Narrative
No MONEYVAL assessment or 6AMLD transposition material specific to Croatia surfaced in the structured evidence this cycle, leaving the AML/CFT posture assessed at the structural level only. As an EU member state, Croatia operates within the EU AML framework, which includes obligations under the successive Anti-Money Laundering Directives transposed into national law. Gambling operators licensed in Croatia are designated reporting entities subject to customer due diligence, enhanced due diligence for politically exposed persons, and suspicious transaction reporting obligations under the EU AML framework. No jurisdiction-specific AML/CFT change was evidenced in the structured claims this cycle, and no MONEYVAL mutual evaluation result or national AML action plan was located. The practical burden of AML/CFT compliance for a Croatian-licensed operator is therefore assessed against the EU harmonised framework baseline, but the absence of fresh T1 AML evidence means the specific domestic implementation depth — STR thresholds, CTR requirements, beneficial-ownership register obligations — cannot be confirmed from this cycle's evidence. This gap is flagged for resolution in the next cycle.
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
No technical compliance requirements apply to gambling operators in Costa Rica: no RNG certification mandate, no game-fairness audit, and no data-localisation requirement. PRODHAB (Ley de Protección de Datos, Law 8968, 2011) exists but has limited gambling-specific application and enforcement.
Narrative
No technical compliance requirements apply to gambling operators in Costa Rica: no RNG certification mandate, no game-fairness audit, and no data-localisation requirement. PRODHAB (Ley de Protección de Datos, Law 8968, 2011) exists but has limited gambling-specific application and enforcement.
Game Approval Process
none
Data Localisation
none
Hosting Requirements
none
Traffic Light
green
Confidence
Confirmed
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
New operational obligations under the Gambling Act represent a substantial post-licence compliance build-out. Mandatory one-to-one player identification applies at venue entry and online, with operators required to verify identity, maintain databases, and cross-reference the national Registar Igrača self-exclusion register overseen by the Croatian Institute of Public Health, operational from late 2025 and mandatory for all licences from 1 January 2026.
· ~1 min read
Self-exclusion is requestable by the player, family members, doctors, or social-care workers, including on an indefinite basis. Operators must adopt a socially responsible gambling charter tied to the National Strategy for the Prevention of Gambling Addiction to 2030, developed with the Ministry of Health, the Croatian Institute of Public Health, and academic experts — an obligation grounded in an enabling Act with delegated detail carrying MIXED durability. These obligations collectively require investment in identity-verification systems, register-integration infrastructure, and ongoing compliance monitoring that did not exist under the prior 2009 and 2015 regime.
Confidence
Probable
Traffic Light
green
Narrative
New operational obligations under the Gambling Act represent a substantial post-licence compliance build-out. Mandatory one-to-one player identification applies at venue entry and online, with operators required to verify identity, maintain databases, and cross-reference the national Registar Igrača self-exclusion register overseen by the Croatian Institute of Public Health, operational from late 2025 and mandatory for all licences from 1 January 2026. Self-exclusion is requestable by the player, family members, doctors, or social-care workers, including on an indefinite basis. Operators must adopt a socially responsible gambling charter tied to the National Strategy for the Prevention of Gambling Addiction to 2030, developed with the Ministry of Health, the Croatian Institute of Public Health, and academic experts — an obligation grounded in an enabling Act with delegated detail carrying MIXED durability. These obligations collectively require investment in identity-verification systems, register-integration infrastructure, and ongoing compliance monitoring that did not exist under the prior 2009 and 2015 regime.
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
Cost-to-operate rose materially across every dimension under the new Gambling Act effective 1 January 2026. Annual licence fees increased by approximately 50 percent: the online licence is reported at approximately 398,168 euros, land-based casinos at 600,000 euros (up from 400,000 euros), and betting shops at 200,000 euros (up from 132,722 euros) — figures reported at the Probable tier with MIXED durability, pending Official Gazette confirmation. The winnings-tax structure shifted from a flat model in place since 2010 to a tiered progressive regime reported at 10 percent for lower bands rising to 30 percent for the highest bands, grounded in DURABLE primary legislation though exact band thresholds remain unconfirmed. Beyond fees and tax, the compliance build-out — mandatory one-to-one player identification, Registar Igrača integration, responsible-gambling charter adoption, and near-total advertising compliance infrastructure — represents a substantial additional operational cost layer that will weigh on the effective cost base for any licensed operator.
+2 paragraphs · ~1 min read
Costa Rica applies a territorial tax system: income from non-CR-resident players is not subject to CR corporate income tax. There is no gambling-specific GGR tax. CR-sourced income attracts standard corporate tax, and 13% IVA applies to CR-sourced services. This territorial exemption is the central tax advantage of the hub model.
Costs are registration-driven, not licence-driven. Company formation runs ~USD 1,000–2,000 plus notary; reported data-processing/licence fees include ~USD 5,000 permanent, ~USD 5,000 renewal, and ~USD 500 legal. Total first-year cost is typically USD 30,000–50,000 with agent and legal services. No bond or guarantee requirement applies, making CR among the lowest-cost entries globally.
Headline Rate Pct
0
Tax Basis
GGR
Confidence
Probable
Traffic Light
green
Narrative
Cost-to-operate rose materially across every dimension under the new Gambling Act effective 1 January 2026. Annual licence fees increased by approximately 50 percent: the online licence is reported at approximately 398,168 euros, land-based casinos at 600,000 euros (up from 400,000 euros), and betting shops at 200,000 euros (up from 132,722 euros) — figures reported at the Probable tier with MIXED durability, pending Official Gazette confirmation. The winnings-tax structure shifted from a flat model in place since 2010 to a tiered progressive regime reported at 10 percent for lower bands rising to 30 percent for the highest bands, grounded in DURABLE primary legislation though exact band thresholds remain unconfirmed. Beyond fees and tax, the compliance build-out — mandatory one-to-one player identification, Registar Igrača integration, responsible-gambling charter adoption, and near-total advertising compliance infrastructure — represents a substantial additional operational cost layer that will weigh on the effective cost base for any licensed operator.
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
Enforcement in Croatia is extending from IP-blocking toward payment-level controls under the new framework. PSPs and financial entities are compelled to halt suspicious transactions to unlicensed operators, and banks are required to block payments to blacklisted operators. This obligation is reported at the Probable confidence tier but carries FRAGILE durability, as no specific instrument citation has been located this cycle — the payment-blocking measures are reported via specialist press without a cited circular or statutory instrument. The extension of accessory liability to PSPs and banks serving Croatia-facing flows represents a material change from the prior IP-block-only enforcement model. No cross-border capital controls specific to gambling were evidenced beyond this payment-blocking regime. The absence of a specific instrument citation is flagged as a gap; a cited circular or statutory instrument would move this claim toward Confirmed and clarify the precise accessory-liability basis.
+1 paragraph · ~1 min read
Costa Rica has a well-developed banking sector with CRC and USD widely used and SINPE Móvil (national instant payment) ubiquitous. The structural weakness for gambling operators is that SUGEF does not classify them as AML-obligated entities, leaving CR-registered operators with minimal AML credibility before correspondent banks. International PSPs increasingly restrict CR-registered gambling entities, and US correspondent banks scrutinise CR gambling flows heavily under FinCEN advisories. Payment access is the critical and declining bottleneck.
Permitted Funding Methods
Enforcement extending to payment-level controls: PSPs and financial entities compelled to halt suspicious transactions to unlicensed operators; banks to block payments to blacklisted operators
Confidence
Probable
Traffic Light
red
Narrative
Enforcement in Croatia is extending from IP-blocking toward payment-level controls under the new framework. PSPs and financial entities are compelled to halt suspicious transactions to unlicensed operators, and banks are required to block payments to blacklisted operators. This obligation is reported at the Probable confidence tier but carries FRAGILE durability, as no specific instrument citation has been located this cycle — the payment-blocking measures are reported via specialist press without a cited circular or statutory instrument. The extension of accessory liability to PSPs and banks serving Croatia-facing flows represents a material change from the prior IP-block-only enforcement model. No cross-border capital controls specific to gambling were evidenced beyond this payment-blocking regime. The absence of a specific instrument citation is flagged as a gap; a cited circular or statutory instrument would move this claim toward Confirmed and clarify the precise accessory-liability basis.
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
No licensed-operator count or unlicensed market-share figure was published by a T1 Croatian source this cycle, placing the competitive-landscape assessment at the Uncertain tier. The state lottery operator Hrvatska Lutrija holds a favourable low-risk gaming exemption from several of the new restrictions, structurally advantaging the state entity relative to private operators — a differential treatment that EUROMAT and HUPIS allege distorts competition between gaming segments.
· ~1 min read
The kladomati ban and venue-siting limits have generated an industry projection — rated Uncertain, from a single-source HUPIS estimate — that 50 to 70 percent of betting shops may need to relocate or close, threatening up to approximately 15,000 jobs. This points toward near-term consolidation among private land-based operators rather than competitive expansion. The land-based coupling for online licensing means that the competitive landscape for online gambling is effectively limited to operators with an existing Croatian land-based presence, further concentrating the market.
Market Concentration
fragmented
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…
The hub model is under pressure from FATF/AML typology exposure, host-country regulator action, and accelerating PSP and correspondent-bank de-risking. CR has periodically discussed a proper licensing framework (a 2013 draft control board with a 0.5% GGR levy plus a 5% crime levy and USD 50,000 annual fee) but nothing has been enacted. Relative to regulated alternatives such as Malta or Curaçao, CR's attractiveness is declining.
Reform Stage
implementation
Regulatory Direction
mixed
Reform Horizon Scenario Outlook
The base scenario is continued phased implementation of the new Gambling Act through 2026 and beyond, with the National Strategy for the Prevention of Gambling Addiction to 2030 generating further implementing measures and the tightening direction persisting through the decade. The adverse scenario is that the European Commission finds Croatia failed to notify the reform under the TRIS procedure, rendering parts of the framework unenforceable and triggering infringement proceedings — a development that would introduce material legal-validity uncertainty and potentially require Croatia to re-notify or amend the Act, creating a period of regulatory instability. The favourable scenario is that the Commission closes the TRIS complaint without action, confirming the reform's legal validity and providing regulatory certainty for operators planning entry; separately, the constitution of the new dedicated regulatory agency could clarify and streamline the licensing pathway. The dominant uncertainty this cycle is the Commission's disposition of the TRIS complaint, which remains unresolved.
Outlook Status
negative
Reform Stage
policy_idea
Traffic Light
amber
Confidence
Probable
Claim · T3
Costa Rica gambling operators use a municipal data-processing permit, not a gamb…