GICNT-LS: Gamblig Licensing and Legal Status Requirements

Requirements for licensing and legal status open the GICNT framework because every other assessment depends on them. An operator that cannot evidence a valid licence, a disclosed corporate structure and a lawful market footprint gives the framework’s other compliance domains nothing stable to test. GICNT-LS sets out what must be documented, how each claim is verified, and when the picture is examined again.

Why Legal Status Sits Beneath the Other Five Standards

GICNT-LS is a gating standard. Player protection controls, anti-money laundering programmes and game certificates all presuppose a legal entity authorised to accept wagers somewhere, aware of where it may accept them. An unresolved legal position leaves the findings from the other five domains describing an operation that may not lawfully exist in the markets it serves.

This is also where the difference between certification and licensing becomes operational. GICNT is an independent certification body, not a public authority. It grants no permission to offer gambling, repairs no defect in an authorisation, and never substitutes for a regulator’s decision. A valid licence from a recognised authority is the precondition for assessment, and the conditions attached to that licence, together with its reporting obligations, form part of what the annual review examines.

Recognised Licensing Jurisdictions Under GICNT-LS

Recognition rests on observable criteria rather than reputation: a statutory basis for the authorisation, a supervisor with enforcement powers, a register a third party can query, and a complaints route open to players. The jurisdictions recognised for licensing purposes appear below, each with the source that settles a status question. Wider coverage of regimes outside this list sits in the reference table of gambling regulators by country.

Jurisdiction	Licensing authority	Principal instrument	Where status is confirmed
Malta	Malta Gaming Authority	Gaming Act 2018 (Cap. 583)	MGA Licensee Register, searchable by company, status, URL and gaming service
Great Britain	Gambling Commission	Gambling Act 2005; Gambling (Licensing and Advertising) Act 2014	Public register of licensees, with trading names and websites
Ontario	Alcohol and Gaming Commission of Ontario, with an operating agreement from iGaming Ontario	Gaming Control Act, 1992; Registrar’s Standards for Internet Gaming	AGCO list of registered operators and their gaming sites
Kahnawake	Kahnawake Gaming Commission	Kahnawake Gaming Law 1996; Regulations concerning Interactive Gaming	Commission list of authorised client providers
New Jersey	Division of Gaming Enforcement, with casino licences from the Casino Control Commission	Casino Control Act, N.J.S.A. 5:12, Article 6C	Division list of authorised internet gaming sites
Curacao (enhanced scrutiny)	Curacao Gaming Authority	National Ordinance on Games of Chance, in force 24 December 2024	CGA public register of direct licensees
Anjouan (enhanced scrutiny)	Anjouan gaming authority	Anjouan gaming legislation of 2005	Public register of licensed entities

How the Recognised Authorities Structure Their Licences

Recognition does not make the regimes equivalent. Each regime authorises different activities through different instruments, and a certification file has to match the scope an operator actually holds.

Malta

The Gaming Act 2018 (Cap. 583) replaced the old class system with two authorisations: a B2C Gaming Service Licence and a B2B Critical Gaming Supply Licence. One B2C licence can cover game types 1 to 4, running from RNG casino games through fixed-odds betting and peer-to-peer products to controlled skill games, and it is issued for 10 years. Issued share capital is EUR 100,000 for Type 1 and Type 2 B2C licensees and EUR 40,000 for Types 3 and 4, as well as for B2B licensees. Because the register records authorised URLs, MGA licence types answer only half the question: a domain absent from the register is outside the licence, whatever a footer claims.

Great Britain

The Gambling Act 2005 established three licensing objectives, covering the prevention of crime, fair and open gambling, and the protection of children and vulnerable people. Operating licences carry the Licence Conditions and Codes of Practice as their rulebook, in the edition effective 29 July 2026, and remote licensees additionally meet the Remote Gambling and Software Technical Standards. The Gambling (Licensing and Advertising) Act 2014 made the regime point of consumption, so an operator serving consumers in Great Britain needs a Commission licence wherever it is established. Participation in GAMSTOP is mandatory for every online licensee.

Ontario

Ontario splits the approval in two. The Alcohol and Gaming Commission of Ontario registers the operator, its key persons and its gaming-related suppliers through the iAGCO portal, and the Registrar’s Standards for Internet Gaming, in force since 4 April 2022, set the conduct requirements. A registered operator then signs an operating agreement with iGaming Ontario, which became a standalone Crown agency on 12 May 2025 under the iGaming Ontario Act, 2024. Each distinct gaming site requires its own registration, and games and critical gaming systems must be certified by a registered independent testing laboratory before launch.

Kahnawake

The Kahnawake Gaming Commission licenses under the Kahnawake Gaming Law of 1996 and its Regulations concerning Interactive Gaming. Operators hold a Client Provider Authorisation, software suppliers a Client Provider Authorisation for casino software, live studios a Live Dealer Studio Authorisation, and every controlling individual a Key Person Licence. Hosting sits inside the territory under the single Interactive Gaming Licence held by Mohawk Internet Technologies. Since 2025 the standard annual fee for a Client Provider Authorisation covers six domains, with a further USD 500 a year for each domain beyond that.

New Jersey

New Jersey issues no standalone online licence. Under Article 6C of the Casino Control Act, added in 2013, internet gaming runs on a permit held by an Atlantic City casino licensee or its internet gaming affiliate, with the Division of Gaming Enforcement investigating and auditing and the Casino Control Commission issuing casino licences. The permit fee is set at no less than USD 400,000, renewal at no less than USD 250,000, and a separate responsible internet gaming payment of USD 250,000 falls due annually. The primary internet gaming operation must sit within Atlantic City, and the permit reaches only players physically located in the state.

Where Enhanced Scrutiny Applies and What It Adds

Curacao changed regime rather than standard. The National Ordinance on Games of Chance entered into force on 24 December 2024, ending the system under which four private master licence holders sold sub-licences at their own discretion. Legacy sub-licences expired in January 2025, and the Curacao Gaming Authority now issues B2C and B2B licences directly and maintains a public register. Enhanced scrutiny applies to offshore licences of this kind because the transition remains unfinished: supplier registration is still running against a transitional deadline of 24 December 2026, and supervisory practice under the new ordinance is young. The reasoning is set out in full in the assessment of the Curacao LOK reform.

Anjouan sits at an earlier stage. Licensing runs under legislation dating from 2005, administered by the island’s gaming authority alongside its offshore finance body, with a public register and published licence conditions. In June 2026 that authority stated publicly that an Anjouan internet gaming licence has never been a universal authorisation and that no licensing body can exempt an operator from local law where local authorisation is required. That reading is correct, and it is precisely why additional evidence is required.

An operator licensed in a jurisdiction under enhanced scrutiny submits:

• the register entry for a licence held directly from the authority, not a legacy, intermediary or transitional authorisation
• confirmation that every live domain falls within the scope recorded against that licence
• registration status for critical suppliers wherever the regime imposes it, dated against the applicable deadline
• a written market policy naming accepted and blocked territories, with evidence that geolocation controls enforce it
• payment and banking arrangements identified by provider, since correspondent access to these regimes is uneven
• a complaints route a player can reach without depending solely on the operator’s own support function

Verifying a Licence Instead of Trusting a Footer Seal

Verification of a gambling licence is a documented procedure, not a visual impression. GICNT-LS treats the following sequence as the minimum standard of proof:

1. Query the authority’s own register by legal entity name and licence number. The company on the licence is frequently not the company behind the brand, and the mismatch is the first thing to reconcile.
2. Match the domain. Malta’s register is searchable by URL, the Commission’s register lists trading names and websites, and Ontario publishes the sites each registered operator runs.
3. Confirm status and scope. An entry can be live while the specific activity, product vertical or brand in question falls outside it, and suspension shows on the register before it shows anywhere else.
4. Follow the seal to its source. A genuine Maltese seal resolves to the authority’s verification page; a static image resolves nowhere. Malta additionally publishes a list of unauthorised URLs that claim the licence falsely.
5. Read the enforcement record. Published regulatory actions reveal conditions imposed, undertakings given and matters still open, none of which appear on the register entry itself.
6. Retain the evidence. The register entry, the date of the check and the person who carried it out belong on file, because the standard tests documented verification rather than stated belief.

For younger offshore regimes, offshore licence due diligence reaches beyond the register entry into supervisory practice, complaint outcomes and the verifiability of the authorisation itself.

Market Reach and the Limits of a Single Licence

Gambling authorisations are territorial, and gambling is excluded from single-market passporting in the European Union. A Maltese licence provides an EU-regulated base with the banking and supplier access that follows from it, and provides nothing at all in a market that runs its own licensing regime. Great Britain requires its own licence from anyone serving British consumers. A New Jersey permit stops at the state line. Ontario registration authorises play by people in Ontario.

The consequence for GICNT-LS is a documented market policy rather than an assumption. An operator states which territories it accepts, which it blocks, and on what legal basis each decision rests, then evidences that the geolocation and registration controls actually enforce the policy. Mismatches between the licence scope, the terms and conditions and the observed behaviour of the platform are the common finding here, and the trade-offs behind the original decision are examined further in the guidance on choosing a licensing jurisdiction.

Corporate Structure, Ownership and Financial Standing

Licensing regimes vet people as well as companies, and GICNT-LS reflects that in the evidence it collects:

• Legal entity identity. Registered name, company number, registered office and the entity named on each licence held.
• Group structure. Parents, intermediate holding companies, subsidiaries and affiliates with any role in the gaming operation, including platform and payment entities.
• Shareholding to the regulatory threshold. Ontario requires disclosure of holdings of 5% or more; Kahnawake requires a personal information form from every shareholder at 10% or more.
• Disclosure of ultimate beneficial ownership. Nominee arrangements and corporate layers are followed through to named individuals, each identified with supporting documentation.
• Key person vetting. Evidence of fitness and propriety checks completed by the licensing authority for directors, controllers and designated key persons.
• Financial standing. The capital requirement applicable in the licensing regime, where player balances are held, and how player funds segregation and the protection level are disclosed to players.
• Change of control. The internal process that notifies each regulator when ownership, control or key personnel change, with the timescales each regime sets.

Keeping Licence Status Current Between Annual Reviews

The status of an operator’s licences is reviewed once a year, the lightest cadence in the framework and a deliberate one: an authorisation is a more stable object than a player interaction policy or a monitoring rule set. That logic runs across the GICNT audit cycles, where review frequency follows the volatility of what is being examined.

Reporting runs on a shorter clock than the review. Certain events are notified when they occur:

• suspension, variation, surrender or revocation of any licence or registration held
• a change of control, a new ultimate beneficial owner or a change of key person
• the addition of a domain or brand, or the launch of a new product vertical
• entry into a new market, or withdrawal from one
• the opening of enforcement action or a licence review by any regulator
• a change to the rulebook that binds the operator, such as a new edition of the Licence Conditions and Codes of Practice
• lapse or refusal of supplier registration in a regime that requires suppliers to be registered

An operator whose licensing position has materially changed since its last review is assessed against the position that holds today, not the one on file.