Gibraltar

Gibraltar is a premier online gambling jurisdiction, hosting many of the world's largest operators including Bet365, 888, and Entain. The jurisdiction benefits from its proximity to the UK, English-speaking environment, favourable tax regime, and a well-regarded Gambling Commissioner. The Gambling Act 2005 (Gibraltar) established the current framework, with a new Gambling Act expected to modernise the regime. Post-Brexit, Gibraltar operators serving UK customers must hold both a Gibraltar licence and a UKGC licence. Gibraltar's small size means the regulator maintains close relationships with licensees.

Gibraltar requires a licence for all remote gambling operations. The Gambling Commissioner issues licences covering B2C and B2B activities. Local incorporation and substance (directors, employees, servers) are required. Application timelines are typically 3-6 months. The jurisdiction is selective — the Gambling Commissioner has historically been cautious about issuing new licences, preferring quality over volume.

Gibraltar does not impose its own advertising restrictions on remote gambling — operators are expected to comply with the advertising rules of the jurisdictions in which they market. For UK-facing operators this means compliance with UKGC advertising codes.

The Gambling Commissioner takes a collaborative approach to enforcement, preferring dialogue and corrective action over punitive measures. Formal enforcement actions (public statements, sanctions) are relatively rare compared to the UK or Malta. The small number of licensees allows close ongoing supervision.

Gibraltar licence fees include an initial application fee and annual licence fee. Fees are modest relative to other premium jurisdictions. There is no specific capitalisation requirement tied to the gambling licence, though operators must demonstrate adequate financial resources.

Gibraltar levies a gambling duty of 0.15% of turnover (not GGR), capped at £425,000 per annum. This is one of the most favourable gambling tax regimes globally. Corporation tax is 12.5%. No VAT applies in Gibraltar.

Gibraltar is modernising its gambling framework with a new Gambling Act expected to replace the 2005 legislation. The new Act is expected to modernise licensing categories, strengthen consumer protection, and provide clarity on crypto/blockchain gambling. Post-Brexit arrangements with the UK are settled. The jurisdiction's future depends on maintaining its attractiveness as a premium hub while adapting to evolving international standards.

Gibraltar's payments environment is one of the more operator-friendly among smaller gambling jurisdictions. Gibraltar's banking sector has long been familiar with the online gambling industry given the jurisdiction's prominence as an early home to major operators such as bet365, William Hill, and Betfair. The main Gibraltar-based banks (including NatWest International Gibraltar, Barclays Gibraltar, and others) have experience onboarding gambling companies, making initial banking setup less arduous than in many competing jurisdictions. GBP is the primary settlement currency, though EUR accounts are also readily available given Gibraltar's geographic and commercial proximity to the EU. Major PSPs serving UK-licensed operators typically also serve Gibraltar Gambling Commissioner (GGC) licensees, especially where the operator holds a combined Gibraltar and UKGC licence — which is the dominant operating model for the large Gibraltar-based operators. Card acceptance (Visa and Mastercard), e-wallets (PayPal, Skrill, Neteller), bank transfers, and Open Banking methods are all broadly available. Credit card use is not banned under Gibraltar gambling rules, giving operators flexibility relative to the UK regime. Payment blocking against unlicensed operators is a tool available to the GGC but is rarely deployed, reflecting Gibraltar's generally supervisory rather than punitive enforcement culture. The primary risk for new entrants is the smaller size of the local banking market, which means fewer options than in larger jurisdictions.

Gibraltar's technical standards for remote gambling are broadly aligned with the UK's RTS framework, reflecting the jurisdiction's historical close relationship with the UKGC and the fact that most major Gibraltar licensees also hold UKGC licences and comply with UK technical standards as a matter of course. The Gibraltar Gambling Commissioner expects RNG certification from approved test houses; GLI, BMM Testlabs, eCOGRA, and other established test labs are accepted. Individual game certification requirements are lighter than MGA's regime, with a self-certification model available for operators who have undergone appropriate third-party testing. Geolocation is not formally mandated by GGC technical standards but is expected in practice to ensure operators serve only permitted markets. Gibraltar operates a GDPR-equivalent data protection regime under the Gibraltar Data Protection Act 2004 (updated to align with UK GDPR post-Brexit), with the Gibraltar Regulatory Authority (GRA) as the supervisory authority. There is no data localisation requirement — data may be hosted outside Gibraltar subject to appropriate transfer safeguards. Responsible gambling technology requirements include self-exclusion, deposit limits, and session reminders. Gibraltar does not operate a national self-exclusion scheme equivalent to GamStop, but operators holding UKGC licences are required to integrate with GamStop for UK customers. The technical compliance environment is considered proportionate and well-understood by the community of operators and advisers based in Gibraltar.

Gibraltar-licensed operators enjoy essentially the same app store and digital advertising access as UKGC-licensed operators, particularly where the Gibraltar licence is combined with a UKGC licence — which is the standard operating model for the major Gibraltar-based operators. Apple App Store and Google Play both permit real-money gambling apps from licensed operators, and the GGC licence satisfies the underlying licensing requirement that both platforms impose. Google Ads and Meta advertising are available to Gibraltar licensees subject to the same gambling advertiser verification process as any other licensed operator; restrictions on certain ad formats and targeting apply. Programmatic advertising is broadly available. Affiliate marketing is widely used by Gibraltar-based operators — some of the world's largest affiliate programmes are run by Gibraltar licensees — and is not specifically regulated by the GGC beyond the general principle that operators are responsible for marketing conducted on their behalf. Advertising standards in Gibraltar are governed by the Gibraltar Gambling Commissioner's advertising guidelines and, in practice, operators serving the UK market also comply with ASA/CAP codes for UK-facing content. Geo-gating is expected in practice for markets the operator is not licensed to serve, but is not formally mandated by GGC rules. The small size of the Gibraltar domestic market means the vast majority of Gibraltar-licensed operators are serving customers in other jurisdictions, primarily the UK.

Gibraltar is a compact, efficient licensing jurisdiction with a well-established professional services community experienced in gambling operator setup. The Gibraltar Gambling Commissioner's licensing process is known for being accessible and pragmatic relative to the UKGC, while maintaining substantive standards. Application timelines of 4-6 months are realistic for well-prepared operators. A Gibraltar company is required; the formation process is straightforward through Gibraltar's Company Registry. At least one director must be resident in Gibraltar, which is a practical constraint that typically requires engagement of a local nominee director service or appointment of a Gibraltar-based executive. The local adviser community is smaller than Malta's but experienced — a handful of specialist gaming law firms and compliance consultants serve the market. Banking setup is comparatively straightforward given Gibraltar banks' familiarity with the sector. The most common bottleneck is satisfying the GGC's fit-and-proper and source of funds requirements, particularly for less well-known applicant groups. The GGC prefers engagement and dialogue to enforcement — regulators are accessible and known to provide informal guidance to applicants, which reduces uncertainty. Gibraltar is often the preferred jurisdiction for operators that want a well-regarded licence with lower ongoing compliance burden than the UKGC, while maintaining access to the UK market (subject to obtaining a UKGC licence). Operator costs are generally moderate — lower than UKGC but with less availability of competing service providers than Malta.