Board Briefing
Gibraltar's gambling regulatory architecture was materially restructured this cycle by the Gambling Act 2025, assented 23 March 2026 and largely commenced 1 April 2026. The Act replaces the single-body model that had governed the sector since the 2005 Act with a split structure: a Licensing Authority that grants licences, and a Gambling Commissioner that supervises and enforces. This is a structural legal change of significant magnitude, arriving mid-transition, and it merits an amber posture pending the new framework's bedding-in. The change sits alongside, and is compounded by, external competitive pressure from the United Kingdom's Remote Gaming Duty rise, which bears directly on Gibraltar's overwhelmingly UK-facing gambling sector.
Summary
Strong first-tier hub with low tax, but rising substance/compliance cost and no EU passport — enter with genuine local presence and clear UK/EU market strategy.
Market Opportunity
Gibraltar's gambling sector remains economically significant to the jurisdiction, but this cycle's dominant market-opportunity signal is a headwind rather than a tailwind: the United Kingdom's Remote Gaming Duty rose to 40 percent, effective 1 April 2026, and this has already driven at least one major UK-facing brand, Sky Bet, to relocate from Gibraltar to Malta.
Since Gibraltar's gambling business is overwhelmingly UK-facing, this external tax pressure is assessed, probably, as now a more material near-term competitive threat to the sector than any domestic regulatory change. The Gambling Act 2025's restructuring of licensing and supervision does not itself alter market opportunity on this dimension; the pressure originates entirely from UK fiscal policy outside Gibraltar's regulatory control.
Licensing & Regulation
The Gambling Act 2025 introduces three new licence classes, B2C, B2B and GOSS, replacing the prior equipment-based licensing model entirely. A six-month transition window runs from April to October 2026, during which existing licensees continue under their prior authorisations while new applicants must apply under the 2025-Act rules with immediate effect. An online licence-application portal is being rolled out incrementally by category rather than all at once. This is a durable, primary-legislation change: the licence taxonomy and the transition arrangements represent a material but orderly restructuring rather than an emergency measure, and the framework is not yet fully bedded in as the transition period continues.
Entry requires a Gibraltar company, effective control and a local office, fit-and-proper checks and product testing. Approvals historically take c.2–6 months. The 2025 Act raises substance requirements (staff, offices, local tax contribution), increasing entry cost and demanding local leadership across compliance, risk, AML, finance and often trading/product. The tight local labour market is a practical bottleneck.
Regulated Activity Classes
All 20 canonical activity classes are shown for every jurisdiction so the grid is directly comparable. 14 carry an assessed status here. Where a class has no statutory activity-class assessment of its own, the status shown is the product-coverage position for that jurisdiction and is marked via product coverage — it describes whether the product can lawfully be offered, not that the regulator operates a separate licence class for it. Not yet assessed describes the state of our coverage and is not a statement that the activity is unregulated.
Player products
Supply roles
Settlement rails
Entry Pathways
New applicants seeking to enter the Gibraltar gambling market must apply immediately under the Gambling Act 2025's rules, structured around the new B2C, B2B and GOSS licence classes that replace the prior equipment-based system. Existing licensees continue operating under their pre-2025-Act authorisations during a six-month transition window running April to October 2026, preserving continuity while the new framework beds in.
The online licence-application portal supporting this pathway is rolling out incrementally by licence category rather than in a single release, meaning the practical application experience will differ depending on which category and stage of rollout an applicant encounters. This is a material but orderly restructuring of entry mechanics, not a suspension or tightening of market access.
Player Protection
No new player protection requirements were evidenced this cycle. The Gibraltar Gambling Act 2025 does not materially alter responsible gambling obligations relative to the prior framework. Gibraltar retains close alignment with UKGC standards via a longstanding memorandum of understanding, and the player protection practical burden is assessed as moderate, reflecting substantive self-exclusion and responsible gambling obligations without prohibitive cost barriers.
The GOSS licensing category now captures marketing and advertising services, meaning that the marketing perimeter is subject to licensing oversight, though no new content restrictions or advertising bans were evidenced this cycle. Operators should expect player protection obligations consistent with a UKGC-aligned framework, including self-exclusion mechanisms and responsible gambling tools, and should treat the moderate practical burden assessment as reflecting a well-established compliance environment rather than a light-touch regime.
Under the Gambling Act 2025, all marketing activities conducted 'in or from Gibraltar' fall within regulatory scope, bringing affiliates, group marketing hubs and creative agencies into the GOSS licensing perimeter. Marketing requires a support-service licence unless provided by a group company already licensed in Gibraltar. The regulator has signalled that marketing carried out from minimal-presence Gibraltar subsidiaries (often for VAT savings) would likely be refused a marketing support licence.
Distribution & Platform Rules
Marketing and affiliate promotion is newly regulated in Gibraltar as a standalone licensable activity under the Gambling Act 2025's new Gambling Operator Support Services Licence (GOSS). The GOSS category captures affiliate and marketing promotion directly, and also captures Relevant Company ownership structures associated with that promotional activity, bringing arrangements that previously sat outside the licensing perimeter under the Gambling Commissioner's direct authority.
This is a confirmed development sourced to enactment-stage legal commentary on the new Act, and it is treated as durable because it is fixed in the primary Schedule structure of the Act rather than in revocable guidance. For operators and their affiliate networks, the practical consequence is that promotional activity directed at Gibraltar-licensed product can no longer be treated as an unregulated marketing function; it now carries its own licensing dependency alongside the underlying gambling licence.
Enforcement
Enforcement powers under the Gambling Act 2025 moved from a binary suspend-or-revoke model to a graduated, proportionate sanctions regime, paired with personal licensing of senior managers and the establishment of a new Gambling Appeals Tribunal to review the Gambling Commissioner's decisions. This is a durable, structural change to the enforcement architecture, separating the Commissioner's supervisory and enforcement role from the Licensing Authority's licence-granting function. The reform is material, but one significant gap remains: the maximum sanction quantum under the new proportionate regime has not been quantified in sources reviewed this cycle, so the practical ceiling of enforcement exposure for operators cannot yet be stated with confidence.
The Gambling Commissioner holds materially expanded enforcement powers under the Gibraltar Gambling Act 2025, a durable primary statute. Confirmed powers include administrative fines, cease-and-desist orders, inspections, suspensions, and prohibition orders. A Gambling Appeals Tribunal has been introduced as a new durable statutory body to hear appeals against Commissioner decisions, providing a formal review mechanism that did not exist under the prior framework. No specific enforcement actions were evidenced in the collection window, so the enforcement-event pattern cannot be characterised from this cycle.
The expansion of Commissioner powers is confirmed at the highest evidence tier and represents a structural shift in enforcement capacity. Licence revocation risk drivers, assessed as Probable, include AML/CFT breaches, failure to hold local licences in markets targeted by the Gibraltar-licensed operator, and non-compliance with licence conditions. The local-licence expectation is grounded in parliamentary statements by Minister Feetham and should be treated as an active enforcement posture rather than aspirational guidance.
The unregulated sector enforcement theory centres on licence-breach under the 2025 Act and Proceeds of Crime Act 2015 criminal-property exposure for unlicensed operators. Section 30 of the durable statute means that B2B suppliers and GOSS-category providers serving Gibraltar-licensed operators without a Gibraltar licence face direct enforcement exposure from the Commissioner.
Extraterritorial Reach
Section 30 of the Gambling Act 2025 introduces a substantive-presence test that determines whether a business falls within Gibraltar's gambling licensing perimeter. The test captures businesses with real operational or management presence in or from Gibraltar regardless of where their technology infrastructure is hosted, replacing the prior server-location test that had previously anchored jurisdictional reach to the physical location of gaming servers.
The practical effect is to widen the regime's jurisdictional scope: an operator that previously relied on hosting infrastructure outside Gibraltar to avoid the licensing perimeter can no longer assume that structure is sufficient if its operational or management functions are exercised in or from Gibraltar. This is a probable reading based on law-firm analysis of the new Act rather than a primary-source confirmation, but it represents a materially broadened extraterritorial test compared with the 2005 Act regime.
AML / CFT
Gibraltar applies a UK-aligned AML/CFT framework grounded in the Proceeds of Crime Act 2015, a durable primary statute. The Gambling Commissioner is confirmed as the AML/CFT regulator for the gambling sector, with the Gibraltar Financial Intelligence Unit serving as the designated financial intelligence unit.
The framework reflects close alignment with UK AML/CFT standards, including customer due diligence, enhanced due diligence for higher-risk relationships, and suspicious transaction reporting obligations. The practical burden of AML/CFT compliance is assessed as moderate, reflecting a mature framework with substantive reporting obligations that are well-understood by operators already familiar with UK or MGA-equivalent standards, but without prohibitive structural barriers to compliance. No FATF grey or black list designation applies to Gibraltar as a structural matter.
The Gambling Commissioner exercises AML/CFT supervisory powers alongside its gambling regulatory functions, meaning AML/CFT compliance is integrated into the broader licence-condition framework rather than administered by a separate financial regulator. Operators entering Gibraltar should budget for a dedicated AML/CFT compliance function and should treat the Commissioner as an active AML/CFT supervisor, not merely a licensing body.
Cross-Monitor AML/CTF Signals
Cross-border AML/CTF signals are not shown in this report: the available data was last updated 55 days ago, beyond the 30-day limit this report applies to imported data.
Data Protection
Data protection obligations are not covered in this report. They are not specific to gambling licensing: the controller and processor duties that apply to a licensee are the same ones that apply to any business handling personal data in this jurisdiction, so this report links to the specialist source rather than restating it. Gambling-specific privacy duties -- player data retention, age and identity verification, marketing consent -- are covered in the player protection and operational obligations sections above.
Technical Compliance
Operators must use tested systems and approved test-house certifications; even cloud-hosted operators need robust, tested controls. Geolocation/age-verification (PASS scheme) and product testing form part of licensing. The 2025 Act's technical-standards and digitised-reporting requirements (AML, financial disclosures, safer gambling) are being phased in.
Operational Obligations
New operational obligations attach to Gibraltar licensees on relicensing under the Gambling Act 2025, principally the Sufficient Substantive Presence conditions under sections 31 to 54 and Schedule 2, which require demonstrable local economic contribution rather than minimal infrastructure presence.
Operators whose activities have been newly brought into the licensing perimeter — including affiliate and marketing promotion under the new GOSS licence, and overseas B2B suppliers to Gibraltar licensees — additionally carry the conditions attached to the six-month transitional licence available under section 176 and Schedule 8. Both sets of obligations are confirmed and durable, fixed in the primary Act and its schedules rather than in revocable regulator guidance. The practical operational consequence is a compressed compliance-and-requalification workload for the existing operator base running through the transitional period to approximately October 2026.
Cost to Operate
No new Gibraltar-domestic fee or tax data was identified this cycle. The material cost pressure on operators is external: the United Kingdom's Remote Gaming Duty rose to 40 percent, effective 1 April 2026, raising the cost of serving the UK-facing revenue base that dominates Gibraltar-licensed operators' business. This external duty rise is treated as a material commercial cost pressure on the dominant UK-facing revenue base even though it is not itself a change to any Gibraltar-domestic fee or tax instrument, and it should be weighed by any operator modelling total cost of operation from a Gibraltar licence.
Gambling duties are set by Schedule 1 to LN.2026/065 and charged under section 175 of the Gambling Act 2025 at 0.15% - a deliberately low rate by international standards - but on three distinct statutory bases rather than a single measure of yield. General betting duty is charged on gross betting profit, general gaming duty on gross gaming profit, and betting intermediary or agency duty on gross intermediary profit, being the commission received.
The first £100,000 is exempt for betting and gaming duty; that exemption is expressly not available for intermediary or agency duty, so intermediaries are charged from the first pound of commission. Free or discounted bets and promotional credit are not deductible in computing gross profit (regulations 3(4)(a) and 4(4)(a)), which raises the effective base for operators running heavy acquisition promotions above what a headline gross-revenue calculation implies.
Duty is paid in four quarterly instalments due on 1 April, 1 July, 1 October and 1 January, each payable by the last day of the month in which it falls due. Anti-avoidance provisions let the Licensing Authority disregard artificial or fictitious arrangements entered into to reduce duty or fees.
For non-remote operations, gaming machines carry a duty of £1,000 per machine made available for use per licensing year - payable whether the machines are supplied by the licence holder or a connected person - while B2B suppliers of gaming machines pay £250 per licensing year for the licence itself plus £1,000 per machine supplied for use on premises to which the public have access, with no fee for equipment used solely to facilitate the placing of bets that provides no gaming functionality (LN.2026/088, regulation 5). There is no VAT in Gibraltar.
Gibraltar's remote licence fees are set by the Gambling (Duties and Licence Fees) Regulations 2026 (LN.2026/065), made under sections 155(1) and 175 of the Gambling Act 2025 and in force from 1 April 2026, which revoke the 2018 Regulations that earlier guidance relied on. Annual B2C fees are banded on annual gross yield per licence rather than charged at a flat rate: £50,000 below £20m, £100,000 between £20m and £300m, and £200,000 above £300m (Schedule 3).
An operator holding both a betting and a gaming licence pays the sum of the two, not a single combined fee. Betting intermediaries pay £100,000 annually and betting agents £50,000.
B2B annual fees are tiered by the supplier's exposure to the Gibraltar market: gaming aggregators and platform suppliers pay £85,000 for a single vertical plus £15,000 for each additional one - with no double charge where a supplier performs both platform and aggregation functions, the higher principal fee applying instead - while direct-integration suppliers pay £85,000 (Tier 1), £50,000 (Tier 2) or £20,000 (Tier 3) according to gross sales to Gibraltar licence holders and the number of approved integrations - so the commonly-quoted £85,000 B2B figure is the ceiling, not the entry point.
Contracted-out fraud and risk, CDD and compliance, identity-verification and CRM functions attract £50,000 each. Application fees (Schedule 2) are charged per principal activity and are non-refundable: £30,000 for B2C betting or gaming, £20,000 for lottery, £15,000 for a betting intermediary or agent, £20,000 for gaming aggregation or platform supply and £10,000 for direct integration. Annual fees fall due on 1 April and must be paid by 30 April, apportioned from the start of the calendar quarter in which the licence takes effect (regulation 6(4)-(5)).
Separate schedules price change of control at £3,000 rising to a complexity-assessed maximum of £30,000 (Schedule 4), content-provider approval at £1,000 (Schedule 5), regulated-individual approval at £500 for a five-year first approval and £200 per material change (Schedule 6), and duplicate documentation at £50 (Schedule 7).
Non-remote operations are priced separately by LN.2026/088 (in force 7 May 2026, revoking the Gambling (Fees) Regulations 2016): a £150,000 application fee, £100,000 annually for non-remote gaming and £50,000 for the making or acceptance of bets, £5,000 for a material change to an approval, and £250 per approved betting premises per licensing year on top of the annual fee. No published annual fee cap exists under the current instruments; the £425,000 cap quoted in pre-2025 guidance was a feature of the now-revoked 2018 Regulations.
Prediction markets are charged separately under the Prediction Market (Fees and Duties) Regulations 2026 (LN.2026/316), in force 13 August 2026: a £30,000 application fee, a £100,000 annual fee, and a general prediction market duty of 0.15% of commission charged with no exemption threshold.
Payments & Money Flow
The Property (Digital Assets etc) Bill 2026 recognises crypto-tokens as personal property under Gibraltar law. This is a legal-property clarification rather than a gambling-sector-specific instrument, but it is directly adjacent to payment and prize structures used by gambling operators, since it establishes the legal status of tokens that may be used in crypto-denominated payments or prizes. The durability of this development is mixed: it clarifies underlying property law rather than creating a bespoke gambling-payments regime, and its practical effect on operators' payment structures will depend on how it interacts with existing licensing and AML obligations not evidenced in this cycle's research.
Gibraltar operates an open, UK-aligned financial system. Customer funds must move through company-controlled bank and merchant accounts. The Gambling Commissioner is the AML/CFT regulator for the sector under the Proceeds of Crime Act 2015 (Gibraltar). Banking access is generally available but operators must maintain disciplined controls; the Gibraltar Authorisation Regime (GAR) supports PSP/EMI access to the UK market post-Brexit.
Competitive Landscape
The United Kingdom's Remote Gaming Duty increase to 40 percent, effective 1 April 2026, has already driven at least one major UK-facing brand, Sky Bet, to relocate from Gibraltar to Malta. This observed relocation is a material competitive-landscape signal this cycle, pressuring Gibraltar's positioning relative to other licensing hubs.
It is judged, probably, that this external UK tax pressure now represents a more significant near-term competitive threat to Gibraltar's gambling sector than any domestic regulatory change, given the sector's heavy concentration on UK-facing business. Gibraltar's own regulatory framework did not change on this specific dimension; the competitive pressure originates entirely outside Gibraltar's control.
Reform Horizon
The active reform horizon for Gibraltar gambling regulation is the six-month transition window running from April to October 2026, during which the Gambling Act 2025's new licensing and enforcement framework continues to bed in and the online licence-application portal continues its incremental, category-by-category rollout. This dated, active transition process is itself a forward-looking material development this cycle, distinct from any as-yet-unannounced further reform. The practical experience of applying for and holding a licence under the new regime is likely to keep evolving as the portal rollout and transition period progress toward their October 2026 conclusion.
The outlook is positive-to-stable on Gibraltar's own regulatory settings but increasingly shaped by external tax pressure: the 2025 Act modernises the licensing and enforcement framework and repositions Gibraltar as a top-tier hub following its removal from the European Commission's high-risk list, while the pending Gibraltar-EU Treaty (Schengen access) could reshape labour and market-access economics via a probable phased transaction tax (15%/16%/17%) however this will not impact gambling services as the tax is on goods only.
The dominant commercial driver this cycle, however, is external: the UK Remote Gaming Duty rose from 21% to 40% with effect from 1 April 2026, materially compressing margins for the many Gibraltar-domiciled operators with high UK-revenue dependency (reportedly ~75% for some incumbents), and is a more immediate threat than the 2025 Act itself.
Gibraltar's response includes visible diversification signals — the jurisdiction's first prediction-market operator licence (issued under the outgoing 2005 Act, operator not named on current sourcing) and the Property (Digital Assets etc) Act 2026 (Act No. 2026-09, in force 23 March 2026) recognising crypto-assets as personal property — pointing to a deliberate strategic pivot toward non-UK, product-diversified revenue.
Compliance costs are rising (new tiered annual fees, a £10,000 per-licence-type application fee and a staged Change-of-Control fee of up to £30,000 under the Duties and Licence Fees Regulations 2026) and the GOSS/marketing-affiliate perimeter remains partly unclear pending Commissioner guidance and the awaited Part 5 (personal management licence) commencement.
Lateral & spillover risks
2 providers visible in the commercial data for this jurisdiction.
Trust & verification
1 contributor named on this record. 9 sections carry lawyer-locked wording.