Panama

No market-size or operator-count data was located this cycle, so the commercial scale of the opportunity cannot be quantified; the directional signal is toward a more constrained, compliance-intensive market rather than an expanding one.

There is no formal standalone B2B agreement in Panama; software and platform suppliers are approved through operator technical certification and JCJ equipment and software registration, meaning B2B providers enter by contracting with a JCJ-licensed operator rather than by obtaining a direct regulatory authorisation. To obtain the licence, an applicant must form a Panamanian sociedad anonima, contract directly with the JCJ, pass a technical audit including third-party certification from a recognised body such as GLI, BMM Testlabs, or eCOGRA, and post a financial guarantee.

The probable entry timeline is six to twelve months, with advisory sources citing two to eight months for processing. The primary practical barrier to entry is not the regulatory process but the banking relationship: securing a correspondent-bank-connected Panamanian banking account for gambling flows is the gate condition that most frequently delays or blocks market entry.

Panama imposes limited marketing restrictions. Licensed operators may advertise across web, apps, social and search. Responsible-gambling messaging is mandated by JCJ resolutions (e.g. MEF-RES-2021-1968 and MEF-RES-2022-2900 approving 'Jugar Responsablemente también es parte del Juego' material and self-exclusion procedures). Affiliate marketing is common and unrestricted by the JCJ; the principal residual risk arises from host-market advertising rules where Panama licences are not locally recognised.

The durability of the eventual restriction is mixed: the enabling prohibition would be statutory and durable, while implementing detail on enforcement mechanics would likely arrive as more fragile secondary guidance. Confidence in the provision's substance is probable, based on secondary press and industry reporting rather than confirmed statutory text.

The JCJ's enforcement powers are grounded in the durable primary statute Decreto Ley No. 2 of 10 February 1998 and include licence revocation, financial fines, technical audit, and self-exclusion register oversight. The enforcement posture is assessed as moderate and licensee-focused, with the JCJ maintaining approved-operator oversight, technical and equipment registration, and mandatory self-exclusion register administration. No enforcement events were evidenced from the provided documents this cycle.

The UAF is separately active on AML enforcement against gambling operators as designated reporting entities under the in-force AML legislative stack. Licence revocation risk centres on three probable drivers: AML non-compliance with UAF designated reporting entity obligations, technical certification failure against JCJ software and RNG registration requirements, and self-exclusion scheme breach. The JCJ resolutions carrying the self-exclusion and responsible-gambling obligations are fragile instruments, meaning the JCJ can tighten requirements without primary legislative change, which represents a latent compliance-scope risk for operators.

The unregulated sector enforcement theory in Panama rests on the statutory licensing stack under Decreto Ley No. 2 of 1998: operating without a JCJ licence constitutes an unlicensed activity under the enabling statute, exposing operators to JCJ enforcement action including fines and blocking measures. No evidence of material unregulated sector activity was present this cycle.

The primary AML legislation comprises Laws 70, 116, and 123 of 2019, Laws 124 and 129 of 2020, and Law 254 of 2021, supplemented by Executive Decrees 905 of 2019, 721 of 2020, and Decrees 13, 15, and 35 of 2022, all in force and carrying durable status as primary and secondary legislation. The Unidad de Analisis Financiero (UAF) is the designated financial intelligence unit and is active on AML enforcement.

Gambling operators are designated reporting entities under this legislative stack, which imposes customer due diligence, suspicious transaction reporting, and compliance infrastructure obligations. The exact UAF reporting threshold for STR and CTR purposes was not retrieved from a T1 source this cycle and should be confirmed with local counsel. The practical burden of AML and CFT compliance is assessed as moderate following the FATF and EU delistings, reflecting a post-delisting compliance culture that is embedding but not yet at the intensity of AMLD-aligned EU jurisdictions. Correspondent-banking scrutiny for gambling flows remains elevated despite the improved AML posture.

Second, the bill mandates biometric identity verification for online gambling platforms, a requirement that will oblige operators to integrate new identity-verification technology ahead of the bill's effective date. Both requirements are tied to the same enacted-not-yet-effective legislative vehicle and therefore carry mixed durability and Probable confidence: they were passed by the National Assembly but awaited presidential signature as of the most recent, end-July 2026 reporting. Operators should treat both the monitoring-powers expansion and the biometric mandate as probable near-term technical-compliance obligations rather than confirmed, currently binding ones.

Both obligations are pending presidential signature and not yet in force, and both rest on probable-confidence secondary sourcing rather than confirmed statutory text. Once effective, these would represent a materially heavier operational compliance lift than the current regime imposes.

Panama taxes gambling on a GGR basis; advisory sources report 10% of GGR payable monthly for operations within Panama, due within the first 10 days of the following month. Panama's territorial tax system means income from non-Panama-resident players is generally outside Panama-source taxation — operators serving only foreign players can operate at very low effective tax. Online services to non-residents are exempt from ITBMS/VAT.

Advisory sources report a one-time state fee of approximately USD 40,000 on licence approval (cited under Cabinet Decree No. 462), an annual renewal fee of approximately USD 20,000, and a non-refundable investigation fee of USD 5,000–10,000 at submission. Mandatory financial guarantees apply. These are moderate relative to major jurisdictions; exact figures rest on T2 advisory sources pending JCJ primary confirmation.

Panama's dollarised economy and sophisticated banking sector (Banco General, BAC Credomatic, Banistmo, Global Bank) support card, bank-transfer and e-wallet rails, with Yappy dominant in mobile payments. SBP regulates banks and PSPs. Post-FATF, correspondent banks scrutinise Panama transactions more closely and debanking of new gambling operators remains an elevated, documented risk.

Panama has consolidated as a legitimate LatAm-facing licensing hub. Post-FATF delisting (October 2023) and EU AML delisting (March 2024), the trajectory is moderate AML/KYC tightening. The AML legislative stack (Laws 70/116/123 of 2019; 124/129 of 2020; 254 of 2021; Executive Decrees 905/2019, 721/2020, 13/15/35 of 2022) is in force. Market remains open to private operators.