As part of Brazil’s Ministry of Finance, the Secretariat of Prizes and Bets (SPA) is taking a proactive role in shaping Brazil gambling regulations and establishing clear standards for a transparent industry.

Key points:

• The legalisation of Brazil’s iGaming market includes stricter online gambling regulations. 
• There are three major focuses for operators, namely anti-money laundering (AML), counter-terrorism financing (CTF) and the prevention of the proliferation of weapons of mass destruction.
• The SPA has outlined a set of robust AML and KYC requirements to verify player identity and ensure compliance with relevant regulations.
• Data centres and servers now have specific requirements to keep them secure and compliant with Brazilian gambling regulations.

For betting operators, the message is loud and clear. You need to have strong systems in place to prevent financial crime. Brazil’s gambling regulator, the Secretariat of Prizes and Bets (SPA), is raising the bar on compliance. Betting operators must now have robust policies in place for three key aspects:

• Anti-Money Laundering (AML)
• Counter-Terrorism Financing (CTF)
• Preventing the proliferation of weapons of mass destruction (PLD/FTP). 

Compliance is about building a culture that runs through the entire organisation. These rules require you to assess the risk level of every customer when they register and how you apply the same checks to employees and suppliers. 

AML rules under Brazil’s federal online gambling licence

The SPA enforces AML and KYC obligations rooted in federal AML legislation and COAF standards. Through Ordinance No 1,143/2024, the SPA translates these national rules into sector-specific procedures that operators must implement as part of their licensing and oversight.

Licensed operators must follow a strict AML/CTF framework, which is established under federal law and COAF rules and enforced by the SPA through sector-specific ordinances, to prevent money laundering, terrorism financing and the proliferation of weapons of mass destruction. This involves:

• Registering with the Council for Financial Activities Control (COAF)
• Implementing clear internal policies
• Conducting annual risk assessments. 

Related article:

• How to get a Brazil gaming licence

In addition to this, Law No. 14,790/2023 states that the authorisation to operate fixed-odds betting is conditioned upon the implementation of strict policies aimed at preventing Anti-Money Laundering (AML), Financing of Terrorism (FT) and the Proliferation of Weapons of Mass Destruction (PLD/FTP). SPA/MF Ordinance No 1,143/2024 mandates the policies, procedures and internal controls for the three aspects. A few key points to note are as follows: 

• Annual internal assessment to identify risks for AML & FTP
• Records and documents must be kept for at least five years
• Designated responsible person for Integrity and Compliance
• Annual report to be submitted to the SPA
• Providing regular training on the prevention of AML/FTP and other related crimes

KYC standards at the core of Brazil gambling regulations

Brazil’s iGaming regulations set a high standard for security and player protection. Strict Know Your Customer (KYC) procedures require bettors to verify their identity using their Individual Taxpayer Registration (CPF) number and facial recognition technology upon signup.

Operators must go further by rating players according to their risk profile. You will need to prevent prohibited individuals, such as minors, from registering. Don’t forget that electronic payments must flow through institutions authorised by the Central Bank of Brazil. Credit cards, cash and cryptocurrencies are completely off the table. 

Furthermore, licensed operators must submit detailed AML and CTF policies. Reporting suspicious transactions and screening for Politically Exposed Persons (PEPs) is also required.

What is Customer Due Diligence (CDD)?

On the other hand, CDD is a part of the KYC process, which mandates betting operators to gather necessary customer information in line with Brazil’s federal AML legislation, COAF requirements and SPA Ordinance No 1,143/2024. Similarly, there are a few points to pay attention to in the ordinance:

• Identification and validation: Identity must be verified and validated upon registration.
• PEP screening: Operators must verify if the bettor is a Politically Exposed Person (PEP) or a close associate, following the rules issued in this regard by COAF.
• Risk classification: Bettors must be classified into risk categories defined in the internal risk assessment.

Technical compliance requirements for the Brazil betting licence

The Brazilian government is now trying to shape its fast-growing gambling industry with an increasingly rigorous regulatory framework. As Brazil builds out its regulated gambling market, the focus is expanding beyond AML and KYC obligations.

Regulators are now placing equal weight on technical compliance, introducing strict standards for system integrity, data protection and operational security.

Federal licences require not only robust AML controls and mandatory KYC checks with facial recognition but also adherence to data centre rules mandating local hosting in Brazil and ISO 27001-certified infrastructure.

The regulatory discussion also reflects wider social concerns. Despite ongoing complexities, the industry is striving to balance its growth with a safer and more accountable betting ecosystem.

IT security and technical controls for the federal licence

First and foremost, the betting system, including the sports betting platform and online gaming platform, must be certified by a recognised certifying entity, as stated in the SPA/MF Ordinance No 722/2024. 

The certifying entity has to be recognised by the SPA, for example, Gaming Laboratories International LLC, Trisigma BV, Quinel Limited, eCOGRA Limited and BMM North America Inc.

Operators must revalidate the certification assessment reports annually and whenever there are changes to critical components. Operators should also have assigned a designated director for the operational security of the betting system during the application. 

Data protection and maintaining data integrity

Operators are required to maintain their betting systems and related data in data centres located within Brazil, as set out in Normative Ordinance No 722/2024. There is some flexibility if systems and data are hosted abroad in a country that has a joint civil and criminal International Legal Cooperation Agreement with Brazil. You must also meet all the cumulative conditions outlined in the ordinance.

As mandated in the aforementioned ordinance, all recorded data must be maintained and backed up for a minimum of five years. Data must be stored redundantly to prevent loss in case of component failure. Operators must also adopt a business continuity policy and a disaster recovery plan and ensure all systems are supported by an uninterruptible power supply to allow safe shutdown and data retention during power loss.

Data centre and server requirements for operators

The data centres that host betting systems must hold ISO 27001 certification. You must also store servers hosting betting systems in secure facilities and equip them with surveillance systems. They must be protected against alteration, tampering or unauthorised access.

Network and communications security standards

For licensed operators, there is a specific domain requirement. Fixed-odds betting sites must exclusively use the “.bet.br” domain registration. Domain Name System Security Extensions, also known as DNSSEC, are also mandatory for the domain registration for DNS security. 

Furthermore, all critical communication data and sensitive information must also be encrypted and protected. In order to prevent attacks such as Distributed Denial of Service (DDoS), an Intrusion Detection/Prevention System (IDS/IPS) is required and communications must pass through at least one approved application-level firewall.

Ensuring fairness in online games and live studios

The SPA has also imposed measures to ensure fairness in online casino games and live studios. Firstly, all online game results must be determined by a Random Number Generator (RNG). Secondly, it requires physical security controls to run live game studios. It is also a must to operate a continuous surveillance and recording system during live games. Recordings are to be maintained for at least 90 days. 

Key personnel roles required under SPA rules

According to the SPA/MF Ordinance No 827/2024, an administrator refers to a person who holds a management position, who is a director or equivalent, or a member of the board of directors of the applicant company. When submitting your application, you will need to name specific individuals responsible for the below areas:

1. Relationship with the Ministry of Finance
2. Customer service and ombudsman 
3. Accounting and finance 
4. Integrity and compliance 
5. Personal data processing and data security
6. Operational security of the betting system

Per the same ordinance, the people responsible for areas 1 to 4 must hold the title of director (or equivalent).

On the other hand, the SPA does not allow dual roles for people responsible for areas 2 to 6. In principle, you will need:

• 1 director – Accounting & Finance
• 1 director – Integrity & Compliance
• 1 director – Customer Service & ombudsman
• 1 director – liaison with Ministry of Finance (can be one of the above)
• 1 person – data protection (DPO-type role)
• 1 person – betting system operational security

Enforcement powers shaping Brazil gambling regulations

Brazil’s new betting framework gives regulators broad authority to supervise, audit and penalise licensed operators, if necessary. Multiple government bodies share oversight, with each playing a distinct role in maintaining market integrity, consumer protection and AML compliance. 

Operators must follow rules covering licensing, taxes, advertising and data protection. Several government bodies are involved in enforcing these requirements. Together, they shape how betting companies can operate in Brazil.

The Ministry of Finance

The Ministry of Finance serves as the central governmental body responsible for regulating fixed-odds betting operators in Brazil. The Secretariat of Prizes and Bets (SPA), a department of the Ministry of Finance, is Brazil’s federal gambling regulator. It was established by Law No 14,790/2023 in December 2023. Also known as “Lei das Apostas” or “Betting Law,” the law regulates the iGaming market nationwide, including both fixed-odds betting, virtual casino-style games and lottery.

The Ministry of Sport (MESP)

MESP is the governmental body responsible for defining, maintaining and updating the list of specific sports modalities and entities eligible to be the subject of fixed-quota bets in real sporting events. 

MESP carries out this responsibility mainly through MESP Ordinance No 125/2024, which clearly names the sports that can be bet on and prohibits betting on categories or events exclusively involving young athletes. 

Furthermore, MESP plays a crucial role in the overall regulatory ecosystem by confirming their approval after the SPA’s review of a federal licence application, before authorisation is granted. It assists the SPA in ensuring the integrity of sporting events.

Special Secretariat of the Federal Revenue of Brazil (RFB)

The Special Secretariat of the Federal Revenue Service (RFB) of Brazil is centrally responsible for administering federal taxes and the active debt of the Union, including establishing collection codes. 

From the fixed-odds betting lotteries perspective, the RFB has the authority to audit operations to ensure they comply with tax obligations, regardless of any licence or authorisation issued by the SPA.

Council for Financial Activities Control (COAF) 

The COAF is the central authority for monitoring and analysing operations to prevent anti-money laundering (AML), terrorism financing (FTP) and the proliferation of weapons of mass destruction (PLD/FTP) in betting operations.

As stated in SPA/MF Ordinance No 1,143/2024, operators must develop internal procedures to detect and communicate suspicious activity to the COAF via the Sistema de Controle de Atividades Financeiras (Siscoaf). The council also defines compliance standards, for instance, the criteria for identifying PEPs, as mentioned in the above KYC section.

Central Bank of Brazil (BCB)

The Central Bank disciplines payment arrangements to prevent transactions intended for unauthorised operators. Moreover, it grants authorisation to financial institutions and payment providers to manage monetary operations. While cryptocurrencies are not accepted in gambling payments, the Central Bank also supervises virtual asset service providers (VASPs).

Related article:

• Crypto gambling in Brazil: What new rules mean for operators

State-level authorities 

A federal licence from the SPA allows operators to offer fixed-odds betting services across the country, with an application fee of BRL30 million for five years.

Some operators have chosen to apply for state-level licences, such as those issued by LOTERJ in Rio de Janeiro, where the authorisation fee is BRL5 million. However, these state licences restrict operations to their respective jurisdictions and their validity outside those states remains under legal and regulatory discussion.

Consumer protection bodies 

As licensed operators, you will need to pay attention to customer relationships, as all bettors are assured basic rights under the Consumer Defence Code (Law No 8,078/1990). Licensed operators must structure a specific channel to address demands originating from the public bodies that are part of the National Consumer Defence System (SNDC). 

SNDC includes the National Consumer Secretariat (SENACON), which sets national policy. On the other hand, the local Consumer Protection and Defence Programmes (PROCON) handle day-to-day complaints. 

These agencies step in to oversee disputes as well as ensure promotional transparency and adherence to advertising standards. They are also responsible for enforcing responsible gambling tools, such as mandatory limits, pauses and self-exclusion.

Conselho Nacional de Autorregulamentação Publicitária (CONAR)

CONAR, a.k.a. the National Advertising Self-Regulation Council, establishes additional restrictions and guidelines with which companies voluntarily comply. It also issues specific recommendations regarding communication, publicity and marketing activities. 

In particular, CONAR published Annex X to its Advertising Code to ensure betting advertisements are responsible, focusing particularly on the necessity of protecting children, adolescents and other vulnerable persons.

Agência Nacional de Telecomunicações (ANATEL)

ANATEL is responsible for regulating the Internet service providers and telecommunications. It cooperates with the SPA to regulate unauthorised betting activities.

When the SPA identifies betting websites run by unlicensed operators, ANATEL has the authority to block the illegal websites upon the SPA’s instruction.

Autoridade Nacional de Proteção de Dados (ANPD)

The ANPD, a.k.a. the National Data Protection Authority, oversees compliance with Brazil’s General Data Protection Law (LGPD), ensuring gambling operators handle user data responsibly.

It enacts requirements around user consent, data security and breach reporting. Licensed operators must comply with ANPD standards when processing personal data or risk fines and other penalties. This covers information such as player registration (KYC), payment and banking details as well as responsible gambling records.

How CPI investigations influence industry compliance

CPI in Brazil stands for Parliamentary Inquiry Commissions. For example, the betting CPI was established to investigate the growing influence of online gambling on Brazilian families’ financial spending. 

The investigations have been shaping industry practices as they drive debates for stricter Brazil gambling regulations. Key issues such as misleading influencer advertising and money laundering were covered. The CPIs indeed increased pressure on operators for compliance. 

How to stay compliant with Brazil gambling regulations

As a potential applicant or a licensed operator, it is also important to stay updated with the latest news of the licensing framework. The Ministry of Finance website is an excellent resource for keeping yourself informed on Brazil gambling regulations. The ministry provides regular updates on aspects such as legislation and authorised certification bodies.

If you are interested in receiving regular updates and expert analysis via email, you might find signing up for our newsletter resourceful. You could also visit our Legal & Compliance section or check back in The Rulebook for essential updates. 

Brazil gambling regulation FAQs

Key points:

• Gambling with cryptocurrency is no longer available according to Normative Ordinance No 615/2024. 
• H2GC pointed out that crypto gambling in Brazil accounts for only a minor share.
• The ban is part of the Brazilian government’s broader effort to create a structured and regulated gambling market.

Although the regulation closes the door on crypto payments, it also demonstrates Brazil’s dedication to fostering transparency and upholding market integrity. What does this complex and evolving situation mean for operators and players alike?

The status quo: Crypto transactions banned

Normative Ordinance No. 615/2024 states that operators must not accept payments in the form of cryptocurrency. The ban took effect alongside the launch of Brazil’s legal iGaming market. Operators can only accept payments via electronic transfer. 

The Brazilian government is committed to establishing an era of safer online betting. With the ban on cryptocurrency in online betting transactions, the government aims to gain better control over financial flows. 

Industry experts such as Dmitry Starostenkov note that crypto transactions provide less regulatory control than fiat payments despite being traceable. The ban is part of broader efforts to combat the black market in betting.

There is also concern that banning the use of crypto in betting could drive players back to unregulated offshore sites, while some might argue that an outright ban on crypto is more effective.

Related Article:

• Understanding Brazil’s regulated betting payment methods

Has cryptocurrency affected the Brazilian iGaming market?

Prior to legalisation, some operators in Brazil used cryptocurrencies for online gambling on offshore websites, facilitating peer-to-peer (P2P) transactions that circumvented local authorities’ verification.

Alongside Brazil’s high digital penetration, the lack of a regulated iGaming framework gave rise to crypto’s prominence. Crypto casinos quickly gained popularity in Brazil between the initial legalisation of sports betting in 2018 and the final framework, Law No 14,790, in December 2023.

However, as noted in Episode 14 of our podcast, “Right to the Source”, Ed Birkin from H2 Gambling Capital mentioned that crypto is not a significant part of the Brazilian gambling market. He reinforced it by stating that only 0.7% of transactions went through crypto.

Is crypto gambling in Brazil changing the industry?

Brazil appears to be moving toward a crypto-free market. The new regulatory framework has introduced targeted enforcement mechanisms against both illegal gambling and cryptocurrency use.

For example, the Central Bank now monitors crypto exchanges to flag suspicious payments linked to unlicensed platforms. Yet, some industry voices caution that the ban could drive players back toward offshore crypto sites.

Licensed operators, by contrast, are doubling down on localisation and strict KYC measures to build trust and channel players into the regulated ecosystem – a key goal outlined in Brazil’s new licensing framework. (See our Brazil gaming licence guide for details.)

Although the ban on online gambling with crypto marks a turning point in the industry’s operational and regulatory landscape, industry figures note this is not expected to set a global precedent in the near term.

In the same episode of the “Right to the Source” podcast, Birkin estimated the true size of the global crypto gambling market at roughly $3.5 billion based on actual crypto transactions, which is well below the often-cited $81.4 billion figure.

While crypto only makes up a small slice of gambling activity in Brazil, the government’s hard line reflects a broader effort to control financial flows and tighten control over the country’s illegal betting sector.

Frequently asked questions on crypto gambling

Key points:

• Brazil bans high-risk payment methods like credit cards, cash and cryptocurrencies to protect players and reduce fraud.
• The SPA only permits electronic bank transfers through Central Bank-authorised institutions. 
• Operators must use approved gateways such as Pix and TED to remain compliant.

The use of betting payment methods: Dos and don’ts

To ensure traceable payment methods are in play, Brazil’s iGaming regulations ban the use of the following for gambling transactions:

• Credit cards
• Cash
• Cryptocurrencies
• Cheques
• Payment slips 

Since electronic bank transfers are the only acceptable way for deposits and withdrawals, it means funds must move directly between players’ registered bank accounts and operators.

Accounts for both sides must be held with financial institutions authorised by the Central Bank of Brazil. This would create a closed payment loop, strengthening oversight and reducing risk.

In view of this, the regulator (the SPA) now restricts all transactions to bank-to-bank transfers. The intention is to reduce opportunities for fraud. The rules strengthen anti-money laundering safeguards and improve financial transparency by providing a clearer framework.

Why does the SPA ban credit cards in gambling?

Credit cards remain one of the most widely used payment methods worldwide. However, when it comes to gambling, this might no longer be the case.  

Credit card gambling can lead to debt as it depends on funds that are not yet available in your wallet. Debt situations might even spiral into worse financial problems for vulnerable individuals.

Therefore, the government has banned credit cards as one of the betting payment methods to protect players from financial harm. The ban now serves as a defining measure within the new online betting framework in Brazil.

In the eyes of regulators, it is of paramount importance to build a sustainable and trustworthy iGaming market. Therefore, restricting high-risk payment methods is more than a compliance rule. 

Approved payment systems for gambling in Brazil

Since only electronic transfers via Central Bank-authorised institutions are permitted for deposits and withdrawals, the majority of gambling operators use Pix, Brazil’s instant payment service controlled by the Central Bank.

It handles 96% of transactions in the market, since it is exclusively supported by platforms for legal operations. It is also a tool for the Brazilian government to combat illegal gambling in the black market. The Central Bank has the power and systems to communicate directly with commercial banks and licensed payment providers. 

Therefore, the government has the authority to halt Pix payments to operators not licensed by the Secretariat of Prizes and Bets (SPA). Because of this, betting transfers via Pix had increased by 200% in Brazil in 2024 alone.

How to offer the right online betting payment methods

As an operator, you are required to follow strict rules on permitted transaction types, set out in Normative Ordinance SPA/MF Nº615/2024.

Players must make payments for deposits, bets, and withdrawals exclusively through electronic transfers. The permitted methods include: 

• Pix
• Transferência Eletrônica Disponível (TED)
• Debit cards or prepaid cards
• Transferencia nos próprios livros (book transfer)

All deposits and withdrawals must take place between a bettor’s registered bank account and the operator’s transactional account. In that case, it ensures every transfer runs through a regulated channel, creating a closed-loop system to strengthen oversight and reduce fraud.

Related resource:

• Learn how to meet licensing requirements and obtain a Brazil gambling licence.

Frequently Asked Questions

Key points:

• To successfully start a gambling business in Brazil, you will need to secure a federal licence that costs BRL30 million.
• The licence allows a five-year operating period and up to three brands.
• Brazil gaming licence requirements include AML, KYC, CTF measures and use of ‘.bet.br’ domains.

An overview of Brazil’s online gambling market

It took nearly seven years to successfully legalise online gambling in Brazil. Indeed, the process of legalising Brazilian betting has been far from straightforward. After overcoming delays caused by shifting priorities and political uncertainty, the regulated online market finally launched on 1 January 2025. 

International betting operators appear to have a massive interest in Latin America’s largest regulated betting economy. The pace of growth in licensed operators has been remarkable. At the beginning, there were 14 licensed operators on the launch date. By August 2025, the number of licensed operators had increased to 78 already.

The large sports fan base in Brazil and high internet penetration rates give rise to a fertile environment for new entrants. If you want to start a betting business in Brazil but are new to the market, here’s a detailed beginner’s guide on how to properly set up a Brazilian gambling business.

Brazil gaming licence at a glance

The government has officially set the rules for its sports betting and online gaming industry. Operating as a department within the Ministry of Finance, the Secretariat of Prizes and Bets (SPA) is responsible for regulating the legal online betting market in Brazil. 

Not only does the SPA award federal online betting licenses, but it also plays a central role in the implementation and enforcement of Law No 14,790/2023.

Law No 14,790/2023 is pivotal in the development of Brazil’s gambling landscape. As the legal basis for regulation, it outlines how to apply for a Brazil iGaming licence. 

To apply for the licence, your company must be established in Brazil with at least 20% Brazilian capital and undergo a rigorous technical certification process for your betting systems. There will also be ongoing audits to maintain compliance. 

The application fee for a federal betting licence in Brazil is BRL30 million. It lasts for five years and allows for up to three brands. After getting your licence, you are also mandated to implement the following:

• Anti-Money Laundering (AML)
• Strict Know Your Customer (KYC)
• Counter-Terrorism Financing (CTF) 
• Exclusively ‘.bet.br’ domains
• Restricting payments to electronic transfers
• Prohibiting credit cards and cryptocurrency

Related Article:

• Understanding Brazil’s regulated betting payment methods

The development of the Brazil gaming licence

Historically, gambling has been considered illegal. For example, “jogo de azar” (games of chance) and the popular “jogo do bicho” remain explicitly illegal under Decree-Law 3,688/1941 and Decree-Law 6,259/1944.

Religion has also shaped the direction of Brazil’s gambling laws. It has influenced both historic bans and illicit modern-day debates. Reportedly, President Eurico Gaspar Dutra outlawed gambling in 1946 at the urging of his deeply religious wife, shutting down casinos and entertainment venues. 

Ever since, the betting scene in Brazil has largely existed in the shadows for 80 years. Decades later, Senator Eduardo Girão also claims online betting has “destroyed lives” and fuelled money laundering, as he called legalisation a “mistake” that should be reversed.

Fast forward, the Brazilian government put forward Law No 13,756 in 2018 to create fixed-odds betting as a legal option in the country. They later established Law No 14,790/2023, setting the regulatory framework for their sports betting and online gaming industry, as well as how to get a Brazil gaming licence.

Brazil gambling market snapshot

Brazilian players are the world’s largest source of gambling website traffic. As of 2024, they accounted for 15% of global visits. Before regulation, experts estimated the value of Brazil’s grey market for online betting and iGaming to be $3.4 billion (£2.6 billion/€3.0 billion) in November 2024.

After regulation, the Q1 2025 estimation of the legal market was around BRL3.1 billion per month. Supported by data from H2 Gambling Capital (H2GC), a market intelligence report by OKTO and iGB projects that the Brazilian online betting market could reach BRL64 billion in GGR by 2030 in view of the increasing competitiveness of the market.

Is online gambling legal now in Brazil?

Yes – online gambling is now legal in Brazil. The regulated online betting market officially launched on 1 January 2025 after an 80-year gambling prohibition. The legalisation of online gambling in Brazil has, in fact, faced several delays since its initial approval by the National Congress in November 2018. These delays include persistent political opposition and pushback from various sectors, including gambling addiction and religious opposition.

After seven years, the Brazil market finally received the final green light in December 2023 and is now open to regulated operators. Operators have to follow a strict licensing process and compliance audits to secure a Brazil gambling licence.

What are the different types of Brazil gambling licences?

There are currently three types of online gambling licences available in Brazil. Betting operators must also undergo strict certification processes to apply for and maintain the federal licence. To name a few:

• Technical certifications for betting systems and servers, such as ISO-27001
• Payment systems that meet Sicoaf/Bacen standards according to Portaria SPA/MF 1,143/2024
• Certifications issued by third-party certifying entities such as Gaming Laboratories International (GLI) and Gaming Associates Labs (GA Lab)

Type 1 – Federal licence

This is the primary licence issued by the SPA. The five-year licence allows operators to run up to three “skins” or brands. International betting brands, such as Bet365, Betfair and Betano, have all secured this licence early to take on the market. All licence applications are to be submitted via the SIGAP portal to the SPA.

Type 2 – Provisional licence

The SPA also grants provisional licences to companies that have paid the BRL30 million (£3.9 million/€4.7 million/$4.8 million) licence fee but are facing delays with their technical certifications or other application issues. These licences typically last 30 days. Further extensions are available if the companies require additional time to complete the full application.

Type 3 – State or municipal licence

Some state lotteries, such as the Rio de Janeiro State Lottery (Loterj) and certain municipalities like Bodó have also issued their licences. These state and municipal licences are generally less expensive than the federal licence issued by the SPA. Therefore, the final cost of a licence depends on the scope of your business.

How to obtain a Brazil gaming licence?

Unlike some emerging markets, Brazil allows a full suite of wagering products. Therefore, you don’t need separate licences for sports betting and online casino operations. Instead, a single federal licence covers both fixed-odds sports betting and online casino games. Games such as slots and crash games are also included. Below are the steps to obtain a Brazil gaming licence.

Brazil gambling licence requirements

You must meet strict requirements across legal, fiscal, financial and technical aspects in order to obtain a federal licence for fixed-odds betting in Brazil. You must demonstrate financial stability, technical proficiency and compliance with Brazilian law to operate an online betting business in Brazil.

How to submit the application?

To obtain a Brazil gambling licence, you will need to submit an application to the SPA. You must submit all application forms and supporting documents via SPA’s electronic platform, the SIGAP (Sistema de Gestão de Apostas). 

The application will then be reviewed and, if approved, a licence will be issued. It is important to comply with all regulations and requirements to ensure a smooth and successful licensing process.

The SIGAP has provided a step-by-step guide for you to complete your application. One thing to note is that you will need an e-CPJ or an e-CNPJ digital certificate to access or log into the portal.

What’s the timeline?

The official launch date of the legal market was 1 January 2025. The initial application window for the first batch of federal licences opened in May and closed on 20 August 2024.

The 90-day window of preference after the release of Ordinance 827 allowed applications to be prioritised and proceeded with before the market went live on 1 January 2025. 

Expect the process to take up to 180 days if you apply after the August deadline. The SPA usually replies within 150 days of submission through SIGAP. Once you get approval, you’ll have 30 days to pay the BRL30 million concession fee.

Another key deadline to remember is that if you are granted a provisional licence, you will have 30 days to submit your required documents to the SPA. 

You can apply through SIGAP whenever you like, but it’s important to plan ahead with the timeline above.

How much does a Brazil gaming licence cost?

Getting started costs BRL30 million for a five-year licence. After that, operators face a 12% tax on Gross Gaming Revenue (GGR) plus a 34% corporate tax on profits, along with other contributions. When you add GGR tax, corporate tax, social contributions and municipal levies, the total tax burden can climb to nearly 50%. 

Comparing Brazil’s gambling licences: Which one is the most affordable?

You might wonder – is it worth getting the federal licence in this case? Here’s a breakdown of the two main licences for betting operators.

Step-by-step application process

We know getting a licence could be an exhaustive process. Operators need to meet a high standard of requirements to get a licence approval. Here’s a breakdown of the key steps involved in obtaining a gambling licence in Brazil.

1. Register a business

This is the initial foundational step, as you must legally establish your company in Brazil based on the criteria we discussed above before commencing the licensing process.

2. Gather documents

The SPA will thoroughly evaluate your legal qualification as well as financial and technical setup to ensure adherence to its regulations.

You may refer to Portaria SPA/MF nº 827/2024 for the full list of required documents.

3. Submit your application

Once you have gathered all the necessary documents and met the prerequisites, you can then submit the application online. The SPA only accepts electronic submissions through the System for Management of Betting (SIGAP).

4. Review and verification

After you have submitted the electronic application, the SPA has up to 150 days to review the request. In case of insufficient and incomplete information, the SPA may request complementary documents at any point during the evaluation.

After the SPA’s preliminary review, the Ministry of Sport (MESP) has up to 45 days to approve the application.

5. Get the licence

The issuance of the licence marks the final stage of the application. Once the SPA has given the green light to the initial documentation, they will notify you to pay the licence fee of BRL30 million. You will then have up to 30 days to submit the payment receipt and any remaining pending documents.

The SPA would grant provisional licences to applicants that have met most requirements but have pending documents, such as technical certificates. The provisional licence usually lasts for 30 days. You may extend your authorisation once again for 90 days. However, if you do not meet the deadlines, the SPA may suspend or revoke your provisional authorisation.

The regulatory landscape in Brazil

Having gone through an 80-year grey period, Brazil’s online betting market has undergone a comprehensive regulatory overhaul. It has transformed a historically largely unregulated environment into a federally licensed and closely monitored industry.

What are the regulatory bodies and their respective functions?

The main regulatory bodies for online betting in Brazil and their key functions are as follows:

• The Ministry of Finance:

The central governmental body responsible for regulating and supervising fixed-odds betting operators in Brazil. The Secretariat of Prizes and Bets (SPA) serves as Brazil’s federal gambling regulator. It was established by Law No 14,790/2023 in December 2023. Also known as “Lei das Apostas” or “Betting Law”, the law regulates the iGaming market nationwide, including both fixed-odds betting, virtual casino-style games and lottery.

• The Ministry of Sport (MESP):

MESP must confirm their approval after the SPA’s review. They play a crucial role in upholding the integrity of sports events and betting. 

• Special Secretariat of the Federal Revenue of Brazil (RFB):

The RFB is responsible for revenue collection and tax codes related to lotteries and prizes.

• Council for Financial Activities Control (COAF): 

The COAF is responsible for collecting information regarding anti-money laundering (AML) and the prevention of terrorism financing (FTP). 

• Central Bank of Brazil (BCB):

The Central Bank disciplines payment arrangements to prevent transactions intended for non-authorised operators. 

• State-level authorities (e.g. LOTERJ):

LOTERJ, on the other hand, is a state-level licensing entity whose mandate was historically limited to state lotteries. On 2 January 2025, Brazil’s Supreme Federal Court (STF) barred Loterj-licensed brands from operating beyond Rio de Janeiro’s borders. It was a setback for certain operators, especially when it costs less at BRL5 million than the federal licence for the same timespan.

Why get a Brazil gaming licence?

Aside from the fact that it’s illegal to operate without a federal licence now, obtaining a gaming license in Brazil serves as a “stamp of approval” from the Brazilian government. As an operator, you can show your commitment to the market, which is vital for gaining customer trust. 

If you have eyes on sponsoring top football clubs in Brazil, getting a Brazil gaming licence is also a must for you. This is because only licensed operators with the required ‘bet.br’ domain are permitted to sponsor teams or sporting events.

The GGR projection of the Brazilian market

Brazil is one of the world’s largest economies and is anticipated to become a major global gambling hub. Its regulatory launch has opened up immense potential, driven by its large population, vibrant sports culture and expected substantial revenue generation. 

• Top Global Market: Brazil is poised to become a top-three global market for online betting.
• GGR Projection: H2 Gambling Capital (H2GC) forecasts the online Gross Gaming Revenue (GGR) of the regulated Brazilian market to reach $10 billion in GGR by 2029. 
• Sports Betting Dominance and iGaming Growth: Sports betting is the superior vertical currently, forecast to account for 55% of online GGR in 2025, with football driving 86% of the sports betting GGR, according to H2GC. 
• Land-Based Potential: There have been ongoing discussions regarding the legislative action to approve land-based casinos. 

Key consideration

Despite the vast potential in the Brazilian market, there are a few things you need to consider. The decision to apply for a Brazil gaming licence involves navigating a complex landscape defined by intense market competition and taxation unpredictability.

Profitability is also uncertain, as operators must contend with a non-refundable licence fee of up to R$30 million, mandatory financial reserves and an effective tax burden approaching 50%, which industry groups warn could push activity toward unregulated channels.

Brazil Gambling Licence FAQs

Key Takeaways

• Local KYC providers enhance user trust with user-friendly solutions
• Customer education and biometric verification are key amid regulatory shifts
• AI and data-sharing initiatives reinforce fraud prevention and self-exclusion efforts

Executives from leading operators agreed that partnering with local KYC providers is the most effective approach. Esportes Gaming Brasil’s Hugo Baungartner highlighted that Brazilian solutions tend to be more user-friendly and trusted by local players than international alternatives, a sentiment supported by Stake’s Barbara Teles and Betboom’s Laura Beatriz de Souza Morganti, who stressed that delegating complex KYC processes to specialized third parties allows operators to focus on their core betting experience.

Customer education has also proved essential amid the abrupt shift since January 2024, when extensive personal data and biometric verification became mandatory. Baungartner observed that operators faced initial friction and traffic declines, necessitating ongoing communication to ensure full KYC completion before deposits could be made. Morganti added that the regulator’s demands have spurred innovation aimed at simplifying the customer journey.

Fraud prevention remains a high priority as Brazilian customers demonstrate creativity in circumventing controls. Experts at SBC events have advocated for leveraging AI-driven fraud detection, behavioral analytics, and interoperability measures, such as Brazil’s planned self-exclusion database slated for 2025, to stay ahead of emerging threats. Teles noted, “In Brazil every day we see a new challenge being assumed. We have to be more creative… If we put [self-exclusion data] in the same database, everybody will be safer.”

The evolving regulatory environment, coupled with competition from unlicensed operators, underscores the need for continuous adaptation. Market participants are encouraged to draw on global best practices while tailoring solutions to Brazil’s unique cultural and regulatory landscape. This dual approach promises to reduce compliance risks, improve player trust, and sustain growth in this dynamic market.

Key Takeaways:

• BetConstruct to showcase Harmony YoFuture event in São Paulo on September 25th
• The platform integrates AI-driven CRM, regional partnerships, and modular solutions for Brazil
• Focus on real-time player engagement, retention, and adapting to land-based betting regulations

This practical innovation aims to convert data into real-time player engagement and measurable ROI, addressing Brazil’s demand for scale and speed through hyper-specific segmentation (300+ filters), multi-channel orchestration, and send-time optimization.

Harmony YoFuture reflects BetConstruct’s deep commitment to local partnerships, integrating trusted Brazilian companies such as Pay4Fun and Serasa to create an ecosystem combining world-class technology with regional expertise. The platform’s AI solutions proactively anticipate player behavior—including identifying potential churn or VIP players—enabling operators to deploy personalized, timely interventions that boost retention and lifetime value. Melges highlights that “our CRM AI has been able to predict churn up to two weeks in advance,” demonstrating tangible benefits for operators.

Beyond digital innovation, BetConstruct is preparing for Brazil’s impending inclusion of land-based betting, offering modular solutions like self-service kiosks and pocket terminals that align with local regulations and KYC requirements. The event also serves as a strategic networking platform, fostering relationship-building vital to success in Brazil’s relationship-driven, regulated market.

Harmony YoFuture underscores BetConstruct’s ambition to be a long-term partner supporting Brazilian operators with adaptive, compliant, and comprehensive tools that evolve alongside the market’s regulatory landscape and growth.

• Key takeaways:
  Celebrates 10 years of industry leadership with over 35,000 games from 300 providers
• Features like Tournament Tool and Jackpot Aggregator boost operator growth and player engagement
• Recognized globally with awards and expanding into Brazil and Peru markets

Driving Growth with Cutting-Edge Features and Market Expansion

The aggregator’s innovative features are central to its success, with tools like the Tournament Tool boosting daily bet volumes by an average of 22% and Jackpot Aggregator campaigns increasing player turnover by up to 50%. The platform’s flexibility supports operators across multiple brands and markets, delivering critical insights that help them stay competitive in a fast-changing industry. According to Ivan Montik, Founder of SOFTSWISS, “The Game Aggregator has become much more than [an access tool]. It’s a foundation for building sustainable iGaming projects, with data and engagement tools that directly impact business results.” Recently, a Kantar study affirmed SOFTSWISS’s leadership in client loyalty, highlighting reliability as a key driver.

Industry Recognition and Awards Highlight Ongoing Excellence

SOFTSWISS’s prominence is further validated by numerous accolades, including Best Aggregator awards at SiGMA Europe and GamingTech, as well as recognition as Latin America’s Best Game Aggregator at CGS Recife 2025. The platform supports over 1,250 brands globally, handling billions in monthly bets, and continues to set benchmarks in the iGaming aggregation space. Tatyana Kaminskaya, Head of SOFTSWISS Game Aggregator, emphasized, “Our uptime close to 100% gives operators the confidence to scale rapidly, while our tools empower them with data-driven decisions.” This milestone reflects not only past achievements but also a commitment to future innovation and market expansion.

Key Takeaways:

• Glory Casino offers a wide range of games with user-friendly setup and navigation
• Implements comprehensive responsible gambling tools, including self-exclusion and wager limits
• Emphasizes player safety and trust through industry-leading responsible gaming practices

Among the platform’s key responsible gambling features is the self-exclusion option, allowing users to voluntarily restrict their access for periods ranging from 24 hours to several months, or even permanently. Once initiated, self-exclusion cannot be reversed early, ensuring players fully commit to their break. This process is accessible through the Responsible Gambling section of the website, with clear instructions and confirmed via user consent. According to the casino’s responsible gaming page, support links and contact information for professional gambling help organizations are also provided to assist players facing difficulties.

“Responsible gaming is central to our mission,” a spokesperson for Glory Casino told a gaming industry publication. “Our tools, including self-exclusion and setting betting limits, empower players to enjoy gaming safely and with control.”

Glory Casino’s approach reflects industry best practices by combining entertainment with critical player protection measures, emphasizing the importance of understanding game odds and maintaining self-discipline. For executives and professionals navigating player engagement, the casino exemplifies how integrating robust responsible gambling options sustains long-term user trust and ensures compliance within the gaming sector.

Key Points:

• The legalisation of Brazil’s iGaming market includes stricter online gambling regulations. 
• There are three major focuses for operators, namely AML, CTF and PLD/FTP.
• The SPA has also outlined a set of robust AML and KYC requirements to verify player identity and ensure compliance with relevant regulations.
• Data centres and servers now have specific requirements to keep them secure and compliant with Brazilian gambling regulations.

For betting operators, the message is loud and clear. You need to have strong systems in place to prevent financial crime. Brazil’s gambling regulator, the Secretariat of Prizes and Bets (SPA), is raising the bar on compliance. Betting operators must now have robust policies in place for three key aspects:

• Anti-Money Laundering (AML)
• Counter-Terrorism Financing (CTF)
• Preventing the proliferation of weapons of mass destruction (PLD/FTP). 

Compliance is about building a culture that runs through the entire organisation. These rules require you to assess the risk level of every customer when they register, and how you apply the same checks to employees and suppliers. 

AML Requirements for the Federal Licence

Brazil’s gambling regulator is setting a higher bar for compliance. Licensed operators must follow a strict framework to prevent money laundering, terrorism financing, and the proliferation of weapons of mass destruction. This involves:

• Registering with the Council for Financial Activities Control (COAF)
• Implementing clear internal policies
• Conducting annual risk assessments. 

Brazilian iGaming industry KYC regulations

Brazil’s iGaming rules set a high bar for security and player protection. Strict Know Your Customer (KYC) procedures require bettors to verify their identity using their Individual Taxpayer Registration (CPF) number and facial recognition technology upon signups.

Operators must go further by rating players according to their risk profile. You will need to prevent prohibited individuals, such as minors, from registering. Don’t forget that financial transactions are limited to electronic bank transfers via institutions authorised by the Central Bank of Brazil. Credit cards, cash, and cryptocurrencies are off the table. 

Furthermore, licensed operators must submit detailed AML and CTF policies. You should also report suspicious transactions and screen for politically exposed persons (PEPs).

What are the requirements for data centres and servers?

Operators must maintain their betting systems and related data in data centres located within Brazil, as set out in Normative Ordinance No. 722.

There is some flexibility if systems and data are hosted abroad in a country that has a joint civil and criminal International Legal Cooperation Agreement with Brazil. All the cumulative conditions outlined in the Ordinance are also to be met.

Your data centres must hold ISO 27001 certification. Servers hosting betting systems must also be kept in secure facilities and equipped with surveillance systems. They must be protected against alteration, tampering, or unauthorised access.

Religion’s influence on Brazilian online gambling regulations

Religion has long shaped the direction of Brazil’s gambling laws, influencing both historic bans and modern-day debates. Reportedly, President Eurico Gaspar Dutra outlawed gambling in 1946 at the urging of his deeply religious wife, shutting down casinos and entertainment venues. 

Decades later, the moral debate remains central to the discussion. Senator Eduardo Girão, a vocal critic, claims online betting has “destroyed lives” and fuelled money laundering, calling legalisation a “mistake”. The Evangelical Parliamentary Front, led by Gilberto Nascimento, also insists that gambling does not align with Brazil’s values, pledging to mobilise against casino legalisation. 

How CPI investigations are shaping industry practices

CPI in Brazil stands for Parliamentary Inquiry Commissions. For example, the betting CPI were established to investigate the growing influence of online gambling on Brazilian families’ financial spending.

The investigations have been shaping industry practices as they drive debates for stricter online gambling regulations. They have also covered key issues such as misleading influencer advertising, money laundering. The CPIs indeed increased pressure on operators for compliance. 

The Brazilian government is now attempting to regulate its fast-growing gambling industry with an increasingly rigorous framework. Federal licenses now come with strict AML policies, mandatory KYC checks that include facial recognition, and data centre rules that often require local presence and ISO 27001 certification.

The regulatory discussion also reflects wider social concerns. Despite ongoing complexities, the industry is striving to balance its growth with a safer and more accountable betting ecosystem.

Online Gambling Regulation FAQs

• January 2025: 14 operators 
• February 2025: 35 operators
• August 2025: 78 operators

The large sports fan base in Brazil and high internet penetration rates give rise to a fertile environment for new entrants. If you want to start a betting business in Brazil, but are new to the market, here’s a detailed beginner’s guide on how to properly set up a Brazilian gambling business. 

Key Points:

• Online gambling in Brazil was legalised on 1 January 2025 after much delay since the green light in 2023.
• To successfully start a gambling business, you will need to secure a federal licence that costs BRL30 million.
• The licence allows a five-year operating period and up to three brands.
• Pay attention to the ongoing debate on the potential tax hike on GGR.

Applying for a Betting Licence: What Law No. 14.790/2023 Means for You

The government has officially set the rules for its sports betting and online gaming industry. Operating as a department within the Ministry of Finance, the Secretariat of Prizes and Bets (SPA) is responsible for regulating the legal online betting market in Brazil. 

Not only does The SPA award federal online betting licences, but it also plays a central role in the implementation and enforcement of Law No. 14.790/2023.

Law No. 14.790/2023 is pivotal in the development of Brazil’s gambling landscape. As the legal basis for regulation, it outlines how to apply for a Brazilian igaming licence. 

In order to apply for the licence, you must establish your company in Brazil with at least 20% Brazilian capital and undergo a rigorous technical certification process for your betting systems. There will also be ongoing audits to maintain compliance. 

The application fee for a federal betting licence in Brazil is BRL30 million. It lasts for five years and allows for up to three brands. After getting your licence, you must implement the below:

• Anti-Money Laundering (AML)
• Strict Know Your Customer (KYC)
• Counter-Terrorism Financing (CTF) 
• Exclusively ‘.bet.br’ domains
• Restricting payments to electronic transfers
• Prohibiting credit cards and cryptocurrency

Online Gambling Licences & Certifications in Brazil

There are currently three types of online gambling licences available in Brazil. You may also need certain certifications to obtain a licence. 

1. Federal Licence 

As discussed above, this is the primary licence issued by the SPA. The five-year licence allows operators to run up to three “skins” or brands. International betting brands such as Bet365, Betfair and Betana have all secured this licence early to take on the market. All licence applications are to be submitted via the SIGAP portal to the SPA.

2. Provisional Licence 

The SPA also grants provisional licences to companies that have paid the BRL30 million (£3.9 million/€4.7 million/$4.8 million) licence fee, but are facing delays with their technical certifications or other application issues. These licences typically last for 30 days. Further extension is available if the said companies require additional time to complete the full application. 

3. State or Municipal Licence 

Some state lotteries, such as the Rio de Janeiro State Lottery (Loterj), and certain municipalities like Bodó have also issued their licences. They are essentially cheaper than the federal licence issued by the SPA. Therefore, the final cost of a licence depends on the scope of your business.

Betting operators must undergo strict certification processes to apply for and maintain the federal licence. To name a few:

• Technical certifications for betting systems and servers, such as ISO-27001
• Payment systems that meet Sicoaf/bacen standards according to Portaria SPA/MF 1.143/2024
• Certifications issued by third-party certifying entities such as Gaming Laboratories International (GLI) and Gaming Associates Labs (GA Lab)

Brazilian Online Sports Betting Licensure 

Unlike some emerging markets, Brazil allows a full suite of wagering products. Therefore, you don’t need separate licences for sports betting and online casino operations. 

Instead, a single federal licence covers both fixed-odds sports betting (apostas de quota fixa) and online casino games. It also covers games such as slots and crash games. 

Key Dates & Deadlines for Brazilian iGaming Licence Applications

The official launch date of the legal market was 1 January 2025. The initial application window for the first batch of federal licences opened in May and closed on 20 August 2024. The 90-day window of preference after the release of Ordinance 827 allowed applications to be prioritised and proceed before the market went live on 1 January 2025. 

If you apply after the August deadline, expect the process to take up to 180 days. The SPA usually replies within 150 days of submission through SIGAP. Once you get approval, you’ll have 30 days to pay the BRL 30 million concession fee.

Another key deadline to remember is that if you are granted a provisional licence, you will have 30 days to submit your required documents to the SPA. 

You can apply through SIGAP whenever you like, but it’s important to plan ahead with the timeline above.

Brazilian Gambling Regulators: SPA vs LOTERJ

Established by Law No. 14.790/2023 in December 2023, The SPA serves as Brazil’s federal gambling regulator. Also known as “Lei das Apostas” or “Betting Law”, the law regulates the igaming market nationwide, including both fixed-odds betting, virtual casino-style games and lottery. 

LOTERJ, on the other hand, is a state-level licensing entity whose mandate was historically limited to state lotteries. On 2 January 2025, Brazil’s Supreme Federal Court (STF) barred Loterj-licensed brands from operating beyond Rio de Janeiro’s borders. It was a setback for certain operators, especially when it costs less at BRL5 million than the federal licence for the same timespan. 

How Much Does a Gambling Licence Cost in Brazil?

It costs BRL 30 million for a five-year license to start your operation in Brazil. After that, operators face a 12% tax on Gross Gaming Revenue (GGR) plus a 34% corporate tax on profits, along with other contributions. All in, once you add GGR tax, corporate tax, social contributions, and municipal levies, the total tax burden can climb to nearly 50%.  

Comparing Brazil’s Gambling Licences: Which One Is the Most Affordable?

Tips to Start an Online Betting Business in Brazil as a Foreign Operator

• Engage experienced local counsel to help set up the legal entity and register with federal and state tax authorities.
• Partner with approved certifiers and auditors who know SPA–SIGAP procedures and already have blueprint dossiers.
• Build responsible gaming and self-exclusion modules in Portuguese, and translate all customer-facing content and terms.
• Set up Pix-only receivables infrastructure and align legal contracts with local regulators’ fee and remittance frameworks.
• Hire Brazilian AML/KYC vendors for CPF/IP validation, PEP screening, and local geolocation services.
• Acquire .bet.br domain and geolocation stack early, to avoid IP/block scrutiny and show compliance.

What Legalising the Online Gambling Market Means for Brazil

Brazil’s online gambling market has eventually entered a new era after a while. iGB has partnered with OKTO to publish a new strategic market report, A New Era in Brazil, examining this pivotal moment for the country’s betting and gaming sector.

Arthur Silva, CEO of Alfa Entertainment: “We need to make this sector something we can be proud of.”

The legalisation of online gambling in Brazil on 1 January 2025 marks a transformative moment for the nation’s betting industry, with online revenues projected at $1.4 billion and total betting and iGaming GGR at $5.6 billion in 2025. 

Political opposition and public scrutiny remain intense on the legalisation. Some might argue that this brings significant social and economic benefits to the country. 

Antonio Forjaz, Entain: “The most important part is that we are now in a legalised and regulated market, which will ultimately benefit the customer and the whole industry.”

The legalisation attracted substantial investments, such as Flutter’s acquisition of NSX Group (operator of Betnacional) for $350 million. It would also foster a safer environment for bettors by combating the black market.

Online Gambling Licence FAQs