Qosvanta
Blog
List solutionGet started
Home/Blog/iGaming Payment Processing: Licensing, Fees and KYB Explained
iGamingHigh-RiskCompliance

iGaming Payment Processing: Licensing, Fees and KYB Explained

Deep dive into payment processing for iGaming operators — license types (MGA, UKGC, Curaçao, ANJ), typical acquirer fees and reserves, KYB requirements and how to structure your payment stack.

By Qosvanta Editorial·May 15, 2026·15 min read

Payment processing is the single hardest operational problem for online gambling operators. Card networks classify iGaming as the highest-risk MCC. Most banks refuse to underwrite it. The acquirers that do approve gambling charge premium fees, hold significant reserves and apply enhanced compliance scrutiny — all of which scales with the regulatory standing of your license. A UKGC-licensed operator pays different rates and faces different requirements than a Curaçao licensee, even if their products are identical.

This guide unpacks how iGaming payment processing actually works in 2026 — license types and how they affect your options, typical fee structures and reserves, the KYB documentation you'll be asked for, and how to structure a payment stack that survives chargeback monitoring, regulator scrutiny and seasonal volume spikes.

TL;DRiGaming payment processing requires specialized acquirers that understand the vertical. License jurisdiction drives most of the variation: UKGC and MGA licensees access mainstream EU acquirers at 2.5–4% rates with low reserves; Curaçao and offshore licensees pay 4.5–7% with reserves of 10–15% held for 6 months. Expect 4–8 weeks of KYB onboarding with extensive documentation — licensing, beneficial ownership, AML policy, responsible gambling controls. Build a multi-acquirer stack from day one — single-acquirer iGaming operations don't survive volume spikes or chargeback events.

License jurisdictions and what they mean for payments

Your iGaming license is the single biggest variable in your payment processing options. Banks and acquirers maintain internal scoring of license jurisdictions — well-regulated, well-supervised licenses unlock better acquirers, while permissive offshore licenses limit you to a smaller pool of specialized high-risk providers.

UK Gambling Commission (UKGC)

The UKGC is the strictest globally. UKGC-licensed operators must meet rigorous responsible gambling, AML, anti-fraud and player protection standards, including enhanced due diligence on high-spending customers, mandatory affordability checks above certain thresholds and strict marketing rules. The compliance burden is significant — but UKGC licensure unlocks the broadest range of UK and EU acquirers, with rates closer to standard high-risk (3.5–5%) and lower reserves (5–10%).

Malta Gaming Authority (MGA)

MGA is the most widely respected international iGaming license. Several thousand operators hold MGA licenses, and the license is recognized in many EU jurisdictions for B2B activities. MGA holds operators to high compliance standards (AML, RG, technical certifications). For payments, MGA license unlocks broad EU acquirer access at rates similar to UKGC. Many specialized iGaming acquirers explicitly state MGA-friendliness in their marketing.

Curaçao eGaming

Curaçao licenses are faster to obtain and significantly cheaper than UKGC/MGA — popular among newer operators and offshore brands. The trade-off: payment processing is harder. Many mainstream EU acquirers won't touch Curaçao licensees regardless of the operator's actual compliance practices. Specialized high-risk acquirers serve this segment at higher rates (5–7%) with larger reserves (10–15% for 180 days).

A reform of the Curaçao licensing framework was rolled out in 2024–2025, replacing the master/sub-license model with direct licensing under the new Curaçao Gaming Authority (CGA). Operators with the newer CGA license generally have an easier time with payments than those grandfathered under the old master-license system.

Other key licenses

  • ANJ (France) — required for operating in the French market. Specific products only (sports betting, poker, horse racing). Closed market with strict requirements.
  • DGOJ (Spain) — required for Spain. Comparable strictness to UKGC.
  • AAMS/ADM (Italy) — required for Italy. Closed market.
  • AGCO (Ontario, Canada) — required for the Ontario regulated market.
  • State licenses (US) — required state by state for online gambling in the US (NJ, PA, MI, NV and others). Each state has its own framework.
  • Isle of Man, Gibraltar, Alderney — respected B2C and B2B licenses, popular among European operators.
  • Kahnawake (Canada) — older offshore-style license, declining in popularity.
  • Anjouan, Vanuatu, Costa Rica — minimal-oversight offshore licenses, lowest acquirer acceptance.

Pricing: what to expect

License tierExamplesTypical rateReserveSettlement
Tier 1 (premium)UKGC, MGA, AGCO, US state licenses3.0–4.5%5–10%, released 90–180 daysT+3 to T+7
Tier 2 (recognized offshore)Isle of Man, Gibraltar, Alderney, CGA4.0–5.5%8–12%, released 180 daysT+7 to T+14
Tier 3 (general offshore)Curaçao (old master), Kahnawake5.0–7.0%10–15%, released 180 daysT+14 to T+30
Tier 4 (minimal-oversight)Anjouan, Vanuatu6.5–8.5%15%+, released 180–365 daysT+21 to T+45

These are approximate ranges before negotiation. Actual rates depend on processing history, vertical (sportsbook vs casino vs poker have different risk profiles), expected volume, geographic mix and the operator's chargeback track record. Card type also matters — credit cards typically pay more than debit; international cards more than local; commercial cards more than consumer.

Why the reserves are so high

iGaming exposure to chargebacks is structurally elevated. Common dispute scenarios:

  • Player loses, claims the transaction was unauthorized ("friendly fraud")
  • Family member uses the cardholder's account without permission
  • Player's spouse files dispute claiming "compulsive gambling"
  • Genuine card fraud (stolen card used to fund gambling account)
  • Account-related disputes (locked account, slow withdrawals)

Chargeback ratios in iGaming routinely run 1.5–3% versus 0.3–0.6% for e-commerce. Visa's CB monitoring threshold is 0.9%. When operators exceed it, the acquirer faces fines and program scrutiny — hence the rolling reserves, which protect the acquirer from being left holding losses if the operator can't pay.

KYB: the iGaming version

Onboarding for iGaming acquirers is more involved than for any other vertical. Expect 4–8 weeks from application to live processing, sometimes longer. The documentation package typically includes:

Company and licensing

  • Certificate of incorporation, articles of association, current corporate structure chart (often back to ultimate beneficial owners)
  • Operating gambling license(s) — certified copies, validity period, scope of authorized products
  • Verification with the issuing regulator (the acquirer will independently confirm with UKGC, MGA, CGA, etc)
  • Any prior licenses surrendered, declined or revoked — disclose proactively
  • For multi-license operators: clear documentation of which entity operates in which market

Beneficial ownership

  • UBO disclosure to 10% threshold (sometimes 5%)
  • Government ID and proof of address for all UBOs
  • Source of wealth declarations
  • PEP (politically exposed person) screening
  • Adverse media screening on UBOs and directors

Operational controls

  • AML policy (often required at the level expected by your license jurisdiction)
  • Responsible gambling policy — self-exclusion, deposit limits, affordability checks
  • KYC/CDD procedures — what documents you collect from players, at what thresholds
  • Transaction monitoring rules
  • Fraud prevention controls
  • Chargeback management procedures — how you handle disputes, prevention tooling, representment process
  • Player fund segregation arrangements (where required by license)

Financial

  • Audited financial statements (3 years for established operators) or business plan and projections (for newer)
  • Processing history from previous acquirers — 6–12 months of statements showing volume, refunds, chargeback ratio
  • Settlement bank account verification (the bank must be willing to receive iGaming-related settlements — itself a non-trivial requirement)

Technical

  • Website / platform technical security overview
  • Player platform certifications (where applicable: ISO 27001, eCOGRA, iTech Labs)
  • 3DS2 implementation details
  • PCI DSS attestation
Practical realityMost iGaming operators underestimate the document preparation effort. Building the full data room — organized, indexed, with clear cross-references — typically takes 3–4 weeks of focused work for a serious operator. Operators that rush this stage face longer onboarding (acquirers send back gap requests, each round adds 1–2 weeks) and often worse initial pricing (acquirers price uncertainty into the rate).

Player payment methods: what your stack should cover

Card processing is necessary but not sufficient for iGaming in most markets. A complete player payment stack typically includes:

  • Cards (Visa, Mastercard). Universal acceptance, but many issuers in regulated markets (UK, Australia) restrict gambling transactions. Auth rates can be 70–85% rather than 95%+ for standard e-commerce.
  • E-wallets. Skrill, Neteller, PayPal (where allowed), MuchBetter, ecoPayz. Critical for iGaming — many players prefer wallets specifically because card issuers block gambling deposits.
  • Bank transfers. SEPA, local instant rails (UK Faster Payments, Brazil PIX, India UPI). Often the cheapest method and high conversion for trusted brands.
  • Local methods. Country-specific: PIX in Brazil, UPI in India, iDEAL in Netherlands, BLIK in Poland, Trustly in Nordics.
  • Crypto. USDT, BTC and ETH acceptance is increasingly standard for offshore operators. Lower fees, no chargebacks, instant settlement. See our USDT payments guide.
  • Prepaid and voucher. Paysafecard, gift cards. Important for player-protection segments who prefer not to use bank rails.

Architecting a resilient payment stack

Multi-acquirer routing

Single-acquirer iGaming operations are fragile. Acquirers occasionally exit verticals, get acquired, hit internal volume limits or change risk appetite. A serious operator runs 2–4 acquirers concurrently, with routing rules based on:

  • Customer geography (acquirer A is strongest in EU, B in LATAM, C in Asia)
  • Card BIN (test which acquirer authorizes specific issuers best)
  • Transaction size (different fee structures favor different tiers)
  • Real-time success rates (route away from declining acquirers automatically)

Payment orchestration platforms (Spreedly, Primer, Gr4vy, IXOPAY) handle this. For operators above $5–10M monthly processing, the auth rate improvement from intelligent routing (typically 2–5%) more than justifies the orchestration cost.

Chargeback management

Chargeback prevention and representment is a critical capability — often the difference between an operator surviving a bad month and being terminated by their acquirer.

  • Prevention tools. Ethoca Alerts, Verifi RDR, Order Insight — these let you refund disputes before they become chargebacks, typically resolving 30–50% of potential disputes.
  • 3DS2 SCA. Strong Customer Authentication shifts liability for fraud chargebacks to the issuer. Use it on every card transaction where supported.
  • Representment. When chargebacks do occur, fight them with proper documentation. Established representment recovery rates are 20–40%. Many specialized iGaming acquirers offer representment-as-a-service.

Withdrawal infrastructure

Player withdrawals are operationally as critical as deposits — slow or failed withdrawals destroy retention faster than any other issue. Plan your stack with withdrawal in mind from day one:

  • Mass payouts via card refunds, OCT (Original Credit Transactions), SEPA, bank transfer, e-wallets, crypto
  • Automation to prevent manual processing bottlenecks during volume spikes
  • Funds segregation so player balances are always covered
  • SLA monitoring on withdrawal turnaround time

Regulatory considerations beyond payments

The acquirer assesses you partly on how you handle the regulatory landscape on the player side. Strong responsible gambling controls, robust AML/KYC for players, and clean affordability and self-exclusion frameworks all reduce your effective risk profile and improve your payment terms.

  • Affordability checks. Required by UKGC and increasingly by other major regulators. Verify players can afford their losses through documentation or open banking insights.
  • Self-exclusion. National schemes (GAMSTOP UK, ROFUS Denmark, OASIS Germany) — must be integrated and enforced.
  • Deposit limits. Player-set or operator-imposed limits per session, day, week, month.
  • Source of funds. Required for high-spending players. Builds the AML defense.
  • Marketing rules. Affiliate compliance, content standards, prohibition of targeting vulnerable groups.

Common operator mistakes

  1. Treating payments as a vendor relationship rather than a strategic partnership. Acquirer churn is expensive — every change adds onboarding time, requires reintegration and disrupts player experience. Pick fewer, deeper partnerships.
  2. Underinvesting in chargeback prevention. A 0.3% reduction in chargeback ratio can save 6 figures annually in fees and protect your acquirer relationship.
  3. Ignoring withdrawal experience. Players who can't withdraw don't return. Spend on withdrawal infrastructure proportionally to deposit infrastructure.
  4. Letting AML/KYC become a friction-only feature. Best-in-class operators use AML data to power VIP programs, personalization and responsible gambling — turning compliance investment into product value.
  5. Single-acquirer dependence. A surprise termination can mean weeks of lost revenue. Diversify from day one.
  6. Optimizing for headline rate. A 4.5% acquirer with 90% auth and excellent dispute handling is significantly better than a 3.5% acquirer with 75% auth and pass-through chargebacks.

Getting started: a structured approach

  1. Clarify your license stack and target markets. Different acquirers fit different combinations.
  2. Prepare the KYB data room. Single source of truth, version-controlled, organized.
  3. Shortlist 6–10 specialized iGaming acquirers covering your license, markets and product (sportsbook, casino, poker). Browse our high-risk payment providers directory for vetted options.
  4. Run a structured RFP. Same questions to each — vertical experience, geographic coverage, fee structure, reserve mechanics, chargeback handling, technical capability, support model.
  5. Sign with two acquirers minimum. Test live volume on both; gather real auth-rate and dispute data before scaling.
  6. Plan the orchestration layer and chargeback prevention tooling — these are not optional at any meaningful scale.
  7. Build operating cadence. Monthly acquirer reviews, quarterly stack assessment, annual full RFP refresh.

For a curated comparison of iGaming-friendly payment processors across license tiers, browse our high-risk payment providers directory. License-specific guides: Malta (MGA), UK (UKGC), Curaçao, Cyprus.

This guide is editorial reference and not legal, financial or compliance advice. iGaming licensing and payment regulation are highly jurisdiction-specific — always work with qualified counsel for your specific operation and target markets.

Find the right payment provider in minutes

Browse our curated directory of 200+ payment providers — filter by country, segment, method and fees. Or let Damir, our AI consultant, recommend a shortlist for your business.

Browse providers →Get matched

Related reading

  • High-risk payment providers directory →
  • Complete guide to high-risk payment providers →
  • Payment providers in Malta (MGA-friendly) →
  • Payment providers in Curaçao →
QosvantaQosvantaOne platform. Every option.

Global payment provider directory. Find, compare and connect with the right payment solutions.

EmailTelegram

Marketplace

  • All providers
  • Card acquiring
  • Crypto rails
  • Local methods
  • Bank transfers
  • High-risk solutions

Solutions

  • For merchants
  • High-risk businesses
  • Crypto gateways
  • Business providers
  • Alternative methods
  • For providers

Get in touch

  • Talk to Damir
  • Blog

Company

  • Partners
  • Legal
  • Privacy policy
  • Terms of use

© 2026 Qosvanta. All rights reserved.

Privacy PolicyTerms of UseLegal