Spain

Spain regulates online gambling through the Dirección General de Ordenación del Juego (DGOJ), established under the Gambling Act 2011 (Ley 13/2011). The market is significant in size and fully regulated, but operates under substantial restrictions particularly around advertising and marketing. Spain requires operators to obtain a licence from the DGOJ and to ring-fence Spanish players on .es domains. The regulatory environment has tightened considerably since 2020 with the Royal Decree on Commercial Communications (RD 958/2020) imposing some of the strictest gambling advertising rules in Europe.

The DGOJ issues general and singular licences. A general licence authorises the operator for a category of gambling; singular licences are required for specific games within that category. Local incorporation is not required but a fiscal representative in Spain is. Applications can take 6-12 months. All online gambling must be conducted on .es domains with player accounts ring-fenced to Spain.

Spain has some of the strictest gambling advertising rules in Europe. Royal Decree 958/2020 bans gambling advertising in most media between 6am and 1am (effectively restricting to 1am-5am). Sponsorship of sports teams and events by gambling operators is banned. Affiliate marketing is heavily restricted. Welcome bonus advertising is prohibited. Only brand advertising with responsible gambling messaging is permitted during restricted hours.

The DGOJ conducts enforcement through sanctioning procedures published on its website. Penalties can be substantial. The regulator targets both unlicensed operators (IP blocking) and licensed operators (compliance failures). Spain has an active IP blocking regime for unlicensed gambling sites.

DGOJ licence fees include application fees and annual maintenance fees. The fee structure is moderate. No specific capitalisation requirement is tied to the gambling licence, though financial solvency must be demonstrated.

Spain levies gambling tax at 20% of GGR for most products, with betting taxed at 25% of GGR. These are among the higher rates in Europe. VAT does not apply to gambling stakes. The tax regime, combined with advertising restrictions, creates a challenging commercial environment despite the market's size.

Spain's regulatory trajectory is toward continued restriction. The advertising ban is established and unlikely to be reversed. Tax rates may increase further. However, the market continues to grow as online penetration increases. The DGOJ is considering frameworks for new product types. Spain's approach influences other Spanish-speaking markets in Latin America.

Spain's payments environment for online gambling operators is materially more constrained than in Malta, Gibraltar, or the Isle of Man. Domestic payment methods are strongly preferred by Spanish players, and the DGOJ (Dirección General de Ordenación del Juego) has shaped an environment that favours established Spanish payment infrastructure. Critically, credit cards have been banned for online gambling deposits in Spain since 2020 — one of the earliest credit card bans in European gambling regulation, pre-dating the UK equivalent. This significantly limits the deposit method mix available to operators. Debit cards, bank transfers, and e-wallets (PayPal, Skrill, Neteller — though availability of certain e-wallets varies) are the primary available methods. Bizum, Spain's widely adopted instant bank-to-bank payment solution, is increasingly important for gambling operators and is supported by a growing number of DGOJ-licensed operators. Spanish banks can be cautious about gambling relationships, though licensed operators generally find at least some Spanish or international banks willing to provide EUR accounts. PSP availability for DGOJ-licensed operators is more restricted than for MGA or UKGC licensees — fewer specialist PSPs have built out full Spain-compliance capabilities. Settlement is in EUR. The DGOJ has an established payment blocking mechanism targeting unlicensed operators: Spanish ISPs and payment providers are directed to block unlicensed sites and their associated payment flows. This is actively deployed and reduces the commercial pressure on licensed operators from grey-market competition.

Spain has among the most stringent technical compliance requirements in European online gambling regulation. The DGOJ mandates RNG certification exclusively from DGOJ-accredited test laboratories — this is a closed list of accredited bodies and differs from the more open lists accepted by the MGA or UKGC. Operators cannot simply present certification from GLI or eCOGRA unless those labs have obtained specific DGOJ accreditation. All games must be individually certified before being offered to Spanish players, creating substantial ongoing certification overhead for operators with large catalogues. Geolocation is required to ensure the gambling platform is only accessible from Spanish territory where the operator is licensed. Data protection falls under the EU GDPR as implemented in Spain through the Ley Orgánica de Protección de Datos (LOPDGDD), with the Agencia Española de Protección de Datos (AEPD) as the supervisory authority. Spain imposes data retention and storage requirements that are more prescriptive than many EU member states — player data must be retained for defined periods, and while outright data localisation requiring servers on Spanish soil is not mandated, data must be stored within the EU. Responsible gambling technology requirements are extensive and among the most demanding in the EU: the DGOJ's player protection framework mandates deposit limits, loss limits, session limits, cooling-off periods, self-exclusion (integrated with the national RGIAJ — Registro General de Interdicciones de Acceso al Juego), reality checks, and time limits. The RGIAJ integration is mandatory and operators must check players against this register in real time before allowing play. Affordability-style interventions are present through the mandatory limit-setting framework. Technical integration with DGOJ monitoring systems (including real-time reporting via the Sistema de Información sobre el Juego, or SIGJ) is required, creating a significant ongoing technical infrastructure obligation.

Spain's online gambling distribution environment is among the most restrictive in the EU. App store availability is limited: while Apple and Google permit real-money gambling apps from DGOJ-licensed operators in principle, practical access is subject to each platform's Spain-specific gambling policy and the operator's ability to satisfy verification requirements. Geo-targeting to Spanish users within apps requires DGOJ licence verification by the platform. Google Ads has historically applied strict restrictions to gambling advertising in Spain, requiring DGOJ licence certification and restricting certain ad formats and targeting parameters; overall digital advertising spend by gambling operators in Spain is tightly constrained by both platform policies and DGOJ advertising regulations. Meta applies similar restrictions. Spain's broader advertising regime for gambling is highly restrictive: the Real Decreto 958/2020 (gambling advertising royal decree) severely limits when and where gambling advertising may appear — a near-total ban on television gambling advertising, strict watershed rules, prohibitions on celebrity and sports personality endorsements, restrictions on bonus advertising, and a ban on advertising to under-25s (where verifiable). Affiliate marketing is heavily constrained under this framework — affiliates are considered advertising channels and subject to the same restrictions as direct advertising, with operators bearing responsibility for affiliate compliance. Programmatic advertising is available but significantly restricted in practice by both DGOJ regulations and platform policies. Geo-gating is required — operators must implement IP-based geo-restriction to ensure the platform is only accessible from Spain (and other jurisdictions where the operator is separately licensed). The Spanish lottery monopoly (operated by ONCE and LAE/Loterías del Estado) protects the state-licensed lottery vertical, which is legally closed to private commercial operators.

Spain is one of the most complex and time-consuming market entry processes among regulated European gambling jurisdictions. The DGOJ applies a rigorous, document-intensive licensing process with a typical timeline of 12-18 months from application submission to licence grant. The process requires a Spanish company (Sociedad Anónima or Sociedad de Responsabilidad Limitada) with a physical office in Spain and Spanish-language documentation throughout. The bureaucratic complexity is significant — applications involve multiple government bodies, extensive technical certifications, Spanish-language legal and compliance documentation, and repeated rounds of information requests. An experienced local legal and compliance adviser is not optional — it is essential, and Spain-specialist gaming lawyers command a premium. The DGOJ has a defined fee schedule and capital adequacy requirements. Post-licence, operators must manage ongoing compliance reporting to the DGOJ's monitoring systems (SIGJ real-time data feeds), annual audits, and regular renewal processes. The restricted advertising regime (Real Decreto 958/2020) significantly limits customer acquisition options, which compresses the commercial return on the substantial entry investment. Market GGR has grown but is dominated by a small number of large operators (bet365, Codere, Betfair, Betsson, 888/William Hill) that invested early. New entrants face a high adviser cost band and a long payback period. The complexity is partially offset by Spain's large population (47 million), high digital engagement, and the DGOJ's active enforcement against unlicensed operators, which limits grey-market competition. Operators already holding MGA or UKGC licences will have relevant compliance frameworks as a starting point but should not underestimate Spain-specific incremental requirements.