Crypto Casino: What It Takes to Get and Keep a Licence
A crypto casino settles bets in Bitcoin, Ethereum or USDT instead of euros, and that single design choice reshapes everything downstream: who supervises it, how it proves solvency, and what happens when a regulator knocks. This guide walks through the accountability chain, operator by operator, licence by licence, with concrete numbers from 2025 and 2026.
Between Curaçao's 2025 reform, Malta's ongoing enforcement and Anjouan's fast-track regime, the gap between a licensed crypto casino and an unlicensed one has never been wider. We map which brands hold what, what each licence actually obliges them to do, and where the audits bite hardest.
What Defines a Crypto Casino in 2026
Is a crypto casino just a casino that accepts Bitcoin?
No. Accepting Bitcoin as a deposit option next to Visa is a payment feature, not an identity. A crypto casino is built around digital-asset settlement: balances held in crypto, withdrawals processed on-chain, and often a native token or on-chain proof of reserves. Bets, bonuses and jackpots are denominated in BTC, ETH, USDT or USDC rather than fiat.
The distinction matters for regulation. A fiat-facing operator with a crypto rail still answers to its payment regulator and card-scheme rules. A pure crypto casino answers to whoever issued its gaming licence and to blockchain analytics firms that trace wallets. Stake, Roobet, Lucky Block, Mega Dice, BetFury, Vave, Cloudbet, Shuffle, Rainbet and Casinobit sit in that second category.
Some brands split the difference. BC.Game and Gamdom run crypto-first with fiat off-ramps; 1win and Mystake accept both but price bonuses in fiat. The practical question for a player is simpler: does your balance move on-chain, and can you verify it?
Which coins do the largest crypto casinos actually support?
The support list has stabilised around a core of about eight assets. Bitcoin and Ethereum remain standard everywhere; Tether on TRC-20 is the default for deposits because fees run under $1 on Tron versus $2–8 on Ethereum mainnet. USDC, Litecoin, Ripple, Dogecoin and Solana round out most cashier pages.
| Coin | Typical deposit fee | Typical confirmation time | Where it's standard |
|---|---|---|---|
| Bitcoin | Network only | 10–60 min | All crypto casinos |
| Ethereum / ERC-20 | $2–8 | 15 sec – 5 min | Vave, Cloudbet, Stake |
| USDT (TRC-20) | Under $1 | 1–3 min | Mega Dice, Lucky Block, BetFury |
| Solana | Under $0.01 | Under 40 sec | Shuffle, Rainbet, Casinobit |
| Dogecoin | Under $0.10 | 1 min | Gamdom, Roobet, 1win |
Fees are worth watching. Ethereum gas swings between $0.50 and $25 depending on network load, so a $20 deposit can quietly lose 5% to fees. Casinos that batch withdrawals or use layer-2 rails such as Base and Arbitrum pass those savings on; others absorb them and hide the spread in exchange rates.
Do crypto casinos publish proof of reserves?
Some do, most don't, and the quality varies enormously. A credible proof-of-reserves report uses a Merkle tree over user balances, an independent auditor's wallet attestation, and a block height timestamp you can verify yourself. Anything less is marketing. Lucky Block and Stake have published periodic attestations; many mid-tier brands publish nothing at all.
Since the FTX collapse in November 2022, players have learned to ask for three things: the Merkle root, the auditor's signature, and the date. A report without all three proves nothing. For context, the FTX hole was later sized at roughly $8 billion in customer funds, which is why the burden of proof now sits on operators.
Ask directly in live chat. A licensed operator with clean books answers within a day. An operator that stalls, changes subject or sends a marketing PDF is telling you something useful.
How Licensing Works for Crypto Casinos
Which jurisdictions license crypto casinos today?
Curaçao remains the volume leader after its January 2025 overhaul under the National Gaming Authority. Malta's Gaming Authority is the prestige licence but historically reluctant toward pure-crypto operators. Anjouan in the Comoros, Kahnawake, Isle of Man, Gibraltar and, for sports-adjacent brands, Estonia's Tax and Customs Board fill out the field.
Curaçao's new regime replaced the four sub-licences with a single B2C licence. Applications opened in 2024,过渡期 ended in mid-2025, and by January 2026 every operator serving Curaçao-licensed markets needed a direct grant. That consolidation cut the field: the previous system carried well over a hundred sub-licensees; the new register is materially shorter.
Anjouan moved the opposite direction. Its licence costs roughly €15,000–25,000 per year plus setup, issues in 4–8 weeks, and imposes lighter ongoing reporting. Several of the brands on our list — including Lucky Block, BetFury and Mega Dice — operate under Anjouan or Curaçao papers.
| Jurisdiction | Indicative cost | Time to grant | Ongoing audit duty |
|---|---|---|---|
| Curaçao (NGA, post-2025) | €40,000+ initial | 4–9 months | Annual independent audit |
| Malta (MGA) | €25,000 licence fee + 1.25% GGR | 6–12 months | Annual compliance report |
| Anjouan | €15,000–25,000/year | 4–8 weeks | Basic reporting |
| Kahnawake | CA$40,000 + fixed levy | 3–6 months | Annual review |
| Isle of Man | £35,000+ | 6–10 months | Quarterly returns |
Numbers above are indicative ranges compiled from public fee schedules and industry reporting as of early 2026; individual applications vary with corporate structure and payment volume.
What does a crypto casino have to prove to get a licence?
Four things, in order of difficulty. Corporate probity: beneficial owners disclosed, no disqualifying convictions, source of funds documented. Technical integrity: the platform RNG tested, wallet infrastructure audited, and a working connection to self-exclusion registers. Financial capacity: paid-in capital typically €50,000–150,000 plus segregated player funds. And a written AML programme with a named Money Laundering Reporting Officer.
Curaçao's 2025 rules added a real test: applicants must show they can identify and freeze suspicious transactions within 24 hours of detection. Malta has required this for years, which is partly why MGA licencees carry higher compliance overhead and why their bonus terms tend to be tighter.
The technical audit is where crypto-native startups stumble. Regulators want evidence that hot-wallet exposure is capped, that cold storage ratio exceeds an agreed threshold, and that withdrawal whitelists cannot be altered by a single employee. Multi-signature schemes with 3-of-5 or 4-of-7 quorums are now the market standard at operators like Stake, Roobet and Cloudbet.
Can a crypto casino lose its licence?
Yes, and it happens. The MGA has cancelled or suspended several licences since 2020 for failures in player-fund segregation and reporting. Curaçao's NGA has used its new powers to refuse renewals where AML controls were found wanting. A licence is a renewable privilege, not a certificate you frame and forget.
Triggers are consistent across jurisdictions: late or falsified audit submissions, failure to honour self-exclusion requests, inadequate KYC on high-value accounts, and allowing sanctioned jurisdictions to register. In 2024 the UK Gambling Commission fined a crypto-adjacent operator £19.5 million for AML and responsible-gambling failures — a useful reminder that enforcement budgets have grown.
For players, suspension risk is a practical concern. If an operator's licence is pulled mid-balance, withdrawal routes narrow fast. Keeping small balances, cashing out on a schedule, and checking the regulator's public register quarterly are cheap insurance.
AML and KYC: The Compliance Engine
When does a crypto casino ask for identity documents?
Most licensed crypto casinos run a three-tier flow. Tier 1: email and password, deposit and play, usually capped at €2,000–5,000 cumulative. Tier 2: government ID plus proof of address, triggered around €2,000 in deposits or any withdrawal above €1,000. Tier 3: source-of-funds evidence, triggered above €10,000 or by risk signals.
Winamax, PokerStars Casino and bwin casino apply stricter thresholds because they also operate under French and European sports-betting regimes where identity checks start earlier. Pure crypto brands like Shuffle, Rainbet and BetFury historically allowed larger anonymous play, though most have tightened since 2024 to keep payment partners and licence renewals intact.
Ask yourself one question before depositing: are you comfortable uploading a passport? If the answer is no, verify the operator's policy first. Discovering a KYC wall at withdrawal time, with €4,000 locked, is a bad evening.
What is a travel rule and does it apply to casino withdrawals?
The FATF Travel Rule requires virtual-asset service providers to pass originator and beneficiary information above a threshold when transferring funds. In practice, crypto casinos apply it at €1,000 or $1,000 for withdrawals to external wallets, matching the EU's Transfer of Funds Regulation which began applying to crypto-asset transfers in December 2024.
Compliance tools from Chainalysis, Elliptic and TRM Labs screen deposit addresses against sanctions lists and darknet clusters before a balance is credited. A flagged deposit can freeze an account within minutes. This is why a "no-KYC" claim on a marketing page rarely survives first contact with a real withdrawal.
Expect to provide the destination wallet address, its on-chain history, and sometimes a signed message proving ownership. Operators that skip this step expose themselves to licence revocation, and the ones worth playing at know it.
How much does AML compliance actually cost an operator?
Industry estimates put annual AML programme costs for a mid-sized crypto casino at €300,000–800,000 when you include the MLRO salary, screening software licences, independent audits and regulator fees. Chainalysis enterprise pricing alone runs into six figures. That overhead explains why thin-margin operators cut corners and why the licence register shrank after Curaçao's reform.
Those costs scale with transaction volume rather than headcount. An operator processing €50 million a month in crypto flows needs more screening throughput, more analysts reviewing alerts, and more frequent independent testing than one processing €5 million.
Players feel this indirectly: stricter AML means slower big withdrawals, but also fewer account takeovers and fewer chargeback-driven bonus abuses. The trade-off is real, and most regulated markets have decided which side they prefer.
Which crypto casinos are known for fast, low-friction KYC?
Speed varies more than marketing suggests. Instant-play brands such as Instant Casino, Instant withdrawals at Vave and Cloudbet are frequently cited for completing standard verification in under 15 minutes using automated document scanning. Traditional operators like Partouche Online, NetBet and Casino Partouche-backed brands tend toward manual review, which can run 24–72 hours.
| Operator | Licence | Typical KYC time | Notable policy |
|---|---|---|---|
| Vave | Curaçao | Under 15 min | Automated ID scan |
| Cloudbet | Curaçao | 15–30 min | Withdrawal-triggered checks |
| Winamax | France (ANJ) | Up to 48 h | Bank-ID first |
| PokerStars Casino | MGA / UKGC | 12–24 h | Document upload portal |
| Lucky Block | Anjouan | Under 10 min | Light tiered KYC |
| Partouche Online | MGA | 24–72 h | Manual review |
Times are indicative ranges reported by players and operators in 2025–2026; your experience depends on document quality, time of day and account history.
Audits, RNG and Ongoing Accountability
Who tests a crypto casino's games for fairness?
Independent testing labs do: eCOGRA, iTech Labs, BMM Testlabs, GLI and NMi are the names that appear in most licence conditions. They verify that the random number generator produces statistically unbiased outcomes over millions of simulated spins, then re-test on a cycle, usually quarterly or annually depending on the jurisdiction.
Game studios carry their own certifications. Pragmatic Play, NetEnt, Evolution, Microgaming and Hacksaw each hold multiple lab certificates, which is why their titles appear across licensed operators from Betclic casino to Betsson casino to Nine Casino. Studios that skip certification rarely get listed by regulated platforms.
Provably-fair systems add a second layer: the server seed hash is published before a round, the player seed is client-generated, and the result can be recomputed afterward. Shuffle, Roobet, Stake and Gamdom expose this interface directly. It's a genuinely useful check, though it only covers in-house titles, not third-party slots.
What does an annual licence audit cover?
Scope is broader than most players expect. Auditors walk through financial statements, player-fund segregation, bonus-liability reserves, AML alert handling, self-exclusion register integration, complaint logs, and the accuracy of published RTP figures. They sample withdrawal times and compare them against advertised terms.
Findings feed directly into licence renewal. Under Curaçao's post-2025 regime, an operator that fails to file an audited report on time can be suspended while the file is remediated. Malta requires the annual compliance certificate before the next licence year opens.
Some operators publish audit summaries. Others keep them confidential. Neither is inherently suspicious — audit reports contain commercially sensitive data — but a brand that cannot name its auditor at all is worth a second look.
How do self-exclusion registers interact with crypto casinos?
Licensed operators must connect to at least one self-exclusion scheme. In France, ANJ's national register blocks access across all ANJ-licensed sites including Parions Sport, ZEbet and Genybet. In the UK, GamStop covers 90+ operators. In the MGA space, operators link to the Malta Gaming Authority's own exclusion mechanism.
Crypto casinos licensed in Curaçao or Anjouan have historically been outside these national schemes, which is a genuine gap. Several now offer in-house exclusion with 24-hour activation and cooling-off periods of 24 hours, 7 days, 30 days or 6 months. Always confirm the exact duration before relying on it.
Self-exclusion is one area where jurisdiction choice has direct player consequences. If you need a hard stop, prefer an operator under ANJ, UKGC or MGA oversight, where the block is enforced centrally rather than at the discretion of a single brand.
Which top operators hold which licences?
The list below maps the brands most frequently searched by French-speaking players against their publicly stated regulatory status as of early 2026. Always verify on the regulator's register before depositing, because licence status changes.
| Operator | Stated licence | Crypto support | Accountability note |
|---|---|---|---|
| Winamax casino | France (ANJ) | Fiat only | National self-exclusion |
| Parions Sport casino | France (ANJ) | Fiat only | ANJ complaint route |
| PokerStars casino | MGA / UKGC | Limited | Annual eCOGRA reports |
| bwin casino | MGA / national | Fiat only | Public audit summaries |
| Stake / Roobet | Curaçao | Full crypto | Published proof of reserves |
| Lucky Block | Anjouan | Full crypto | On-chain settlement |
| Vave / Cloudbet | Curaçao | Full crypto | Multi-sig withdrawals |
| Mega Dice / BetFury | Anjouan / Curaçao | Full crypto | Tiered KYC |
| Wild Sultan / Winoui | Curaçao | Hybrid | Standard KYC at €2,000 |
| Instant Casino | Curaçao | Hybrid | Fast-track verification |
Hybrid means fiat rails alongside crypto; limited means crypto accepted only through third-party processors rather than native on-chain settlement.
What should a player check before depositing crypto?
Run a five-minute checklist. Confirm the licence number on the regulator's public register. Look up the auditor's name and verify the certificate is current. Read the withdrawal terms for maximum daily limits and pending periods. Check whether the operator publishes proof of reserves with a recent date. Finally, search the brand plus "withdrawal" and read what happened to real players in the last six months.
Operators like Betclic casino, Unibet casino, NetBet casino and Zebet casino publish licence details prominently because their regulators require it. Offshore-facing brands vary: Betify, MADNIX, Alexander Casino and Lucky8 display licence numbers but the depth of disclosure differs.
Numbers matter here. A crypto casino with a €5,000 daily withdrawal cap, a 24-hour pending window and a documented escalation path behaves very differently from one with vague "internal review" language. Read the terms before the bonus.
Responsible Gambling
Jeux d'argent et jeux en ligne interdits aux moins de 18 ans. Les jeux d'argent comportent un risque de perte financière et peuvent être addictifs. Jouer doit rester un divertissement, pas un moyen de gagner de l'argent.
En France, le service national d'écoute est Joindre les Joueurs, au 09 74 75 13 13 (appel non surtaxé). Le registre d'auto-exclusion de l'ANJ permet de vous exclure de tous les opérateurs agréés, sur une durée de 6 mois à 3 ans, gratuitement et sans justification.
Si vous ou un proche montrez des signes de perte de contrôle, faites un test sur joueurs-info-service.fr ou contactez une association agréée. La prise en charge est confidentielle et sans jugement.
Frequently Asked Questions
Is a crypto casino legal in France?
Crypto casinos licensed only in Curaçao or Anjouan are not authorised to offer services in France. The ANJ licenses Winamax, Parions Sport, ZEbet, Genybet and PMU's online arm, none of which accept crypto natively. Playing offshore exposes you to no national complaint route and no ANJ self-exclusion coverage.
Do I owe taxes on crypto casino winnings in France?
Winnings from ANJ-licensed operators are generally exempt from income tax for recreational players. Offshore crypto winnings are less clear: gains from crypto-asset disposals are taxable at 30% flat rate under the PFU, and professional-scale winnings may be treated as income. A fiscal adviser is money well spent.
Can a crypto casino refuse my withdrawal?
Yes, if KYC is incomplete, bonus terms were breached, or AML flags are unresolved. Licensed operators must document the reason in writing. Unexplained refusals are a red flag: check the licence register and file a complaint with the issuing regulator if the operator holds one.
What happens if a crypto casino loses its licence while I hold a balance?
Regulators typically allow a wind-down period of 3–6 months during which existing balances can be withdrawn. Funds should be held in segregated accounts. If the operator becomes insolvent, players holding crypto on-chain are treated differently from fiat depositors, and recovery depends on the licence terms.
Are provably fair games safer than licensed slots?
They're verifiable, not safer. Provably fair mechanics let you check that a specific round wasn't tampered with, but they don't guarantee the operator's solvency or the game's long-term RTP. Licensed slots from Pragmatic Play, NetEnt or Evolution carry independent lab certification covering statistical fairness across millions of spins.
How fast should a crypto casino pay out?
On-chain withdrawals to a whitelisted address typically clear in 5–30 minutes once approved. First-time withdrawals add KYC time. Anything beyond 24 hours without a documented reason warrants escalation to the regulator's complaint channel if the operator is licensed.
The licence is the floor, not the ceiling, and everything above it — AML discipline, RNG testing, segregated funds, a working self-exclusion route — is what separates an operator you can complain about from one you simply have to trust. Check the register, verify the auditor, and play only what you can afford to lose.