Strong first-tier hub with low tax, but rising substance/compliance cost and no EU passport — enter with genuine local presence and clear UK/EU market strategy.
Gibraltar is a regulatory export hub rather than a large addressable consumer market. The domestic population is confirmed at approximately 35,000, making the local consumer base negligible as a standalone revenue opportunity. The gambling sector is confirmed as contributing a probable 20 to 25 percent of GDP and employing between 3,200 and 3,500 people, reflecting the outsized economic weight of the sector relative to the territory.
The licensed operator population is predominantly UK-facing and European-facing online operators who use Gibraltar as a regulatory domicile rather than a consumer market. Market-size point GGR for the domestic consumer market is not separately published, and no structured claim supports a GGR estimate. The strategic value of Gibraltar as a market entry destination therefore lies in its regulatory and tax environment, its continued strong regulatory and legal alignment with the UK, and its post-Brexit UK market access arrangements, not in the size of the domestic addressable market. Operators evaluating Gibraltar should frame the opportunity as a licensing jurisdiction rather than a consumer market, and assess the cost-to-operate picture accordingly.
Licensing is governed by the Gambling Act 2025 (Act No. 2026-04, in force 1 April 2026), which replaced the Gambling Act 2005. The dual-body structure is retained: the Minister is the Licensing Authority and the Gambling Commissioner, supported by the Gambling Division, is the supervisory and AML/CFT regulator.
The statutory structure is best understood as three principal licence groupings — B2C, B2B and GOSS — with the new regime also recognising more granular activity-specific categories and support-service sub-types — including a standalone Marketing Affiliate/Agency Licence bringing affiliates and marketing agencies within the licensing perimeter for the first time. A statutory register of licence holders is now mandated. The Act broadens the licensing trigger from equipment location to a wide activity-based perimeter (§17/§19/§30), bringing marketing, managed trading, hosting/CRM, customer-fund management and 'Relevant Company' ownership (>25%) within scope. A six-month transitional window runs to ~1 October 2026 for new/reclassified categories; existing licensees are grandfathered. Part 5 (Regulated Individuals / personal management licences) was excluded from the 1 April 2026 commencement and awaits a separate notice. B2B licensing is required.
The Gibraltar Gambling Act 2025, a durable primary statute in force from 1 April 2026, establishes three operator licence categories. The B2C Gambling Operator licence covers consumer-facing gambling services. The B2B Gambling Operator licence, grounded in section 19 of the 2025 Act, captures platform and software provision, content aggregation, and managed trading services.
The Gambling Operator Support Services licence, introduced under section 17(1)(f), captures marketing and advertising, customer-fund holding and management, managed trading, hosting, CRM, and ownership of a Relevant Company above 25 percent. The Minister acts as Licensing Authority. Section 30 of the durable statute extends the licensing perimeter to services supplied from any location to a Gibraltar-licensed operator, meaning B2B suppliers and GOSS-category providers domiciled outside Gibraltar require a Gibraltar licence. A six-month transitional window, ending at approximately 1 October 2026, allows new licence category applicants to apply without immediate enforcement exposure. Existing licensees are grandfathered during this window. Part 5 personal management licensing was excluded from the 1 April 2026 commencement and awaits a separate commencement notice.
No new player protection requirements were evidenced this cycle. The Gibraltar Gambling Act 2025 does not materially alter responsible gambling obligations relative to the prior framework. Gibraltar retains close alignment with UKGC standards via a longstanding memorandum of understanding, and the player protection practical burden is assessed as moderate, reflecting substantive self-exclusion and responsible gambling obligations without prohibitive cost barriers. The GOSS licensing category now captures marketing and advertising services, meaning that the marketing perimeter is subject to licensing oversight, though no new content restrictions or advertising bans were evidenced this cycle. Operators should expect player protection obligations consistent with a UKGC-aligned framework, including self-exclusion mechanisms and responsible gambling tools, and should treat the moderate practical burden assessment as reflecting a well-established compliance environment rather than a light-touch regime.
Under the Gambling Act 2025, all marketing activities conducted 'in or from Gibraltar' fall within regulatory scope, bringing affiliates, group marketing hubs and creative agencies into the GOSS licensing perimeter. Marketing requires a support-service licence unless provided by a group company already licensed in Gibraltar. The regulator has signalled that marketing carried out from minimal-presence Gibraltar subsidiaries (often for VAT savings) would likely be refused a marketing support licence.
GI-licensed operators distribute via web, apps and search within UK/EU host-state rules. App-store distribution is generally available for licensed operators; advertising is governed by host-market rules plus the new GOSS marketing-licence perimeter for activity in or from Gibraltar. Affiliate marketing in or from Gibraltar now falls within GOSS scope.
Gibraltar has historically run a compliance-based, light-touch enforcement model with rare public actions, managing compliance via licence-condition reviews. The Gambling Act 2025 significantly bolsters the Commissioner's toolkit — administrative fines, cease-and-desist orders, inspections, suspensions and prohibition orders — and introduces a Gambling Appeals Tribunal. The stated posture remains compliance-led, with sanctions reserved for the most serious failures.
The Gambling Commissioner holds materially expanded enforcement powers under the Gibraltar Gambling Act 2025, a durable primary statute. Confirmed powers include administrative fines, cease-and-desist orders, inspections, suspensions, and prohibition orders. A Gambling Appeals Tribunal has been introduced as a new durable statutory body to hear appeals against Commissioner decisions, providing a formal review mechanism that did not exist under the prior framework. No specific enforcement actions were evidenced in the collection window, so the enforcement-event pattern cannot be characterised from this cycle. The expansion of Commissioner powers is confirmed at the highest evidence tier and represents a structural shift in enforcement capacity. Licence revocation risk drivers, assessed as Probable, include AML/CFT breaches, failure to hold local licences in markets targeted by the Gibraltar-licensed operator, and non-compliance with licence conditions. The local-licence expectation is grounded in parliamentary statements by Minister Feetham and should be treated as an active enforcement posture rather than aspirational guidance. The unregulated sector enforcement theory centres on licence-breach under the 2025 Act and Proceeds of Crime Act 2015 criminal-property exposure for unlicensed operators. Section 30 of the durable statute means that B2B suppliers and GOSS-category providers serving Gibraltar-licensed operators without a Gibraltar licence face direct enforcement exposure from the Commissioner.
Gibraltar applies a UK-aligned AML/CFT framework grounded in the Proceeds of Crime Act 2015, a durable primary statute. The Gambling Commissioner is confirmed as the AML/CFT regulator for the gambling sector, with the Gibraltar Financial Intelligence Unit serving as the designated financial intelligence unit.
The framework reflects close alignment with UK AML/CFT standards, including customer due diligence, enhanced due diligence for higher-risk relationships, and suspicious transaction reporting obligations. The practical burden of AML/CFT compliance is assessed as moderate, reflecting a mature framework with substantive reporting obligations that are well-understood by operators already familiar with UK or MGA-equivalent standards, but without prohibitive structural barriers to compliance. No FATF grey or black list designation applies to Gibraltar as a structural matter. The Gambling Commissioner exercises AML/CFT supervisory powers alongside its gambling regulatory functions, meaning AML/CFT compliance is integrated into the broader licence-condition framework rather than administered by a separate financial regulator. Operators entering Gibraltar should budget for a dedicated AML/CFT compliance function and should treat the Commissioner as an active AML/CFT supervisor, not merely a licensing body.
Operators must use tested systems and approved test-house certifications; even cloud-hosted operators need robust, tested controls. Geolocation/age-verification (PASS scheme) and product testing form part of licensing. The 2025 Act's technical-standards and digitised-reporting requirements (AML, financial disclosures, safer gambling) are being phased in.
No new operational obligations beyond the licensing perimeter expansion were evidenced this cycle. The 2025 Act does not introduce new reporting obligations or technical certification requirements beyond those carried forward from the prior framework during the transitional period. Part 5 Regulated Functions and Regulated Individuals, which will introduce personal licensing obligations for key management functions, was excluded from the 1 April 2026 commencement and awaits a separate commencement notice.
Until Part 5 commences, the approved-persons regime is not in force and the personal licensing module is recorded as not yet assessed. The Gambling Commissioner retains AML/CFT supervisory responsibility for the sector. Existing obligations under the prior framework continue during the six-month transitional window. Operators should treat the Part 5 commencement notice as a material operational milestone that will introduce new individual-level compliance obligations when it arrives.
Gibraltar's own gaming duty remains confirmed at 0.15% of gross gambling yield (GGY) across both betting and gaming licences, with the first £100,000 of GGY exempt — unchanged this cycle. Corporate income tax is 15% on Gibraltar-sourced profits under the Income Tax Act 2010 (this corrects an internal inconsistency between prior baseline entries citing 10-15% and 15%; 15% is the current standard rate). Annual licence fees remain tiered: B2C betting/gaming operators pay £50,000 (GGY under £20m), £100,000 (GGY £20m–£300m) or £200,000 (GGY over £300m) per licence per vertical; B2B annual fees start at £85,000 for a single-vertical licence (plus £15,000 per additional vertical). The new Duties and Licence Fees Regulations 2026 additionally introduce a £10,000 per-licence-type application fee and a staged Change-of-Control fee of up to £30,000 — these are application/event-driven fees layered on top of, not a replacement for, the annual licence fees. Separately, and materially, the UK Remote Gaming Duty applicable to UK-facing customer revenue rose from 21% to 40% with effect from 1 April 2026 — a UK, not Gibraltar, tax, but the dominant cost pressure on Gibraltar-domiciled UK-facing operators this cycle given high UK-revenue dependency.
Under the new regime annual licence fees rose substantially: c.£100,000 per B2C licence and c.£85,000 per B2B licence. Older guidance cited application/issue fees around £100,000 (B2C) and £75,000–£85,000 (B2B). Gaming duty is 0.15% of gross gambling yield with the first £100,000 exempt; pre-2025 published guidance referenced an £85,000 minimum and £425,000 annual cap.
Gibraltar operates an open financial system with no cross-border capital controls targeting gambling flows. No new payment restrictions were evidenced this cycle. The absence of capital controls is confirmed under primary evidence, distinguishing Gibraltar from prohibition-family jurisdictions where payment blocking is a systemic enforcement tool. AML/CFT oversight of payment flows is exercised by the Gambling Commissioner under the Proceeds of Crime Act 2015. The Gibraltar Authorisation Regime is confirmed as a durable framework enabling Gibraltar-based PSPs and EMIs to access the UK market post-Brexit, providing a stable payment infrastructure for operators serving UK players. No PRC-style gambling capital-chain severance applies. Operators should note that while the payments infrastructure is open and stable, AML/CFT obligations apply to payment flows and the Commissioner actively supervises compliance in this dimension.
Gibraltar operates an open, UK-aligned financial system. Customer funds must move through company-controlled bank and merchant accounts. The Gambling Commissioner is the AML/CFT regulator for the sector under the Proceeds of Crime Act 2015 (Gibraltar). Banking access is generally available but operators must maintain disciplined controls; the Gibraltar Authorisation Regime (GAR) supports PSP/EMI access to the UK market post-Brexit.
Gibraltar is a regulatory export hub with a licensed operator population predominantly composed of UK-facing and European-facing online operators. The exact licensed operator count under the new 2025 Act licence categories has not yet been republished, and the market concentration assessment is therefore Uncertain for this cycle.
The sector contributes a probable 20 to 25 percent of GDP and employs between 3,200 and 3,500 people, indicating a dense operator and service-provider ecosystem relative to the territory size. No material market exits or entries were evidenced during the transitional window. The expansion of the licensing perimeter under the 2025 Act, particularly the GOSS category and section 30 extraterritorial reach, may prompt some B2B suppliers and service providers to reassess their Gibraltar relationships during the transitional window. The competitive dynamics of the licensed market are shaped primarily by the regulatory environment and the UK relationship rather than by domestic consumer competition.
The outlook is positive-to-stable on Gibraltar's own regulatory settings but increasingly shaped by external tax pressure: the 2025 Act modernises the licensing and enforcement framework and repositions Gibraltar as a top-tier hub following its removal from the European Commission's high-risk list, while the pending Gibraltar-EU Treaty (Schengen access) could reshape labour and market-access economics via a probable phased transaction tax (15%/16%/17%) however this will not impact gambling services as the tax is on goods only.
The dominant commercial driver this cycle, however, is external: the UK Remote Gaming Duty rose from 21% to 40% with effect from 1 April 2026, materially compressing margins for the many Gibraltar-domiciled operators with high UK-revenue dependency (reportedly ~75% for some incumbents), and is a more immediate threat than the 2025 Act itself. Gibraltar's response includes visible diversification signals — the jurisdiction's first prediction-market operator licence (issued under the outgoing 2005 Act, operator not named on current sourcing) and the Property (Digital Assets) Bill 2026 recognising crypto-assets as personal property — pointing to a deliberate strategic pivot toward non-UK, product-diversified revenue. Compliance costs are rising (new tiered annual fees, a £10,000 per-licence-type application fee and a staged Change-of-Control fee of up to £30,000 under the Duties and Licence Fees Regulations 2026) and the GOSS/marketing-affiliate perimeter remains partly unclear pending Commissioner guidance and the awaited Part 5 (personal management licence) commencement.