Cookies managing
We use cookies to provide the best site experience.
Cookies managing
Cookie Settings
Cookies necessary for the correct operation of the site are always enabled.
Other cookies are configurable.
Essential cookies
Always On. These cookies are essential so that you can use the website and use its functions. They cannot be turned off. They're set in response to requests made by you, such as setting your privacy preferences, logging in or filling in forms.
Analytics cookies
Disabled
These cookies collect information to help us understand how our Websites are being used or how effective our marketing campaigns are, or to help us customise our Websites for you. See a list of the analytics cookies we use here.
Advertising cookies
Disabled
These cookies provide advertising companies with information about your online activity to help them deliver more relevant online advertising to you or to limit how many times you see an ad. This information may be shared with other advertising companies. See a list of the advertising cookies we use here.

License Migration in iGaming: Legal Guide with Practical Insights

License Migration in iGaming: Legal Guide with Practical Insights

by
8 July 2026
License migration used to be a last resort. Today, for a growing number of iGaming operators, it is a planned business decision – the kind that lives on board agendas alongside M&A and market entry. The regulatory landscape that made offshore licensing so frictionless has changed, and operators who built their compliance stack on the old Curaçao model are now traversing a very different path.

This guide is written for operators – not to scare you, but to give you a clear-eyed picture of what a license migration process involves: which jurisdictions are worth serious consideration; how the corporate, technical, and data layers interact, and what can go wrong if any one of them is treated as an afterthought.
EXPERT INSIGHT:
A license migration is a corporate restructuring event that simultaneously affects multiple operational aspects: entity structure, banking relationships, technical infrastructure, SEO equity, and data compliance.
— Vladyslav Y, CEO at Rikk Law Firm

In this article:

Why Operators Change Licensing Jurisdictions

The single biggest catalyst is Curaçao. For two decades, the jurisdiction's sublicensing model – built on a 1993 ordinance and administered by four private master license holders – gave operators a fast, low-cost path to market with minimal corporate-substance requirements. At its peak, over 1,200 active operators relied on it.

That era ended on January 31, 2025, when the legacy sub-licenses expired under the National Ordinance on Games of Chance (LOK). The new Curaçao Gaming Authority took over direct licensing authority, and the economics shifted sharply. The combined annual B2C licensing fee now sits at €47,450. Operators must maintain a physical office on the island, hire local staff from day one, and meet rigorous AML and UBO verification standards. Conservative estimates put realistic first-year operational costs above €120,000 – a multiple of what operators were accustomed to.

Governance instability added further uncertainty. The CGA's supervisory board saw mass resignations in late 2025. A July 2025 ruling blocked Curaçao-registered companies from holding foreign licenses under the same entity, eliminating the dual-framework strategies many operators had used as a hedge. The jurisdiction's largest operator, BC.Game, voluntarily surrendered its license in December 2024. Within a year, the operator count contracted from over 1,200 to roughly 300.

Curaçao is not the only pressure point. Brazil's new regulatory regime carries a one-off national license fee of approximately R$30 million. Canada and Mexico introduced new oversight frameworks for sports-betting advertising and suspicious-transaction reporting. The pattern is global: domestic markets are tightening, and the compliance bar to access them is rising.
The time of borderless, lightly regulated digital gambling has effectively ended. It is replaced by a compliance ecosystem in which jurisdiction selection is a long-term, strategic business decision. You don't want to approach this as a cost-arbitrage exercise.
— Vladyslav Y, CEO at Rikk Law Firm

The Jurisdictional Landscape in 2026

Operators evaluating a migration face a genuinely bifurcated market. Lean operators need speed and minimal capital lockup. Capitalized enterprises are using the disruption to upgrade their compliance posture. Neither group has a single obvious answer – the right jurisdiction depends on operator size, target markets, banking requirements, and growth horizon.

Tier 3: Agile Offshore

Anjouan (Union of the Comoros)
Anjouan absorbed much of the Curaçao exodus. Its licensee base grew to nearly 1,500 operators within two years of becoming a serious alternative. The commercial logic is straightforward: zero corporate tax on offshore earnings, zero tax on GGR, no local directors required, no physical substance mandates. First-year license cost is €18,000, and the Anjouan Gaming Commission processes compliant applications within 3 to 8 weeks.
The trade-off is geographic restriction. Over 45 jurisdictions are prohibited – including the US, UK, France, Germany, the Netherlands, and all FATF-blacklisted nations. Operators accepting traffic from these markets without robust geo-blocking risk immediate license revocation. Anjouan is the right fit for crypto-native operators, startups testing an MVP, and businesses running lean with a clearly defined addressable market.

Tuvalu (Tuvalu Gaming Authority)
Tuvalu is one of the fastest and leanest entry points in the market – a Pacific micro-jurisdiction built for speed. The tax position is clean: 0% GGR tax, no VAT on licensed online gaming, no jurisdictional capital reserve, and no mandatory local company formation. A single license covers the full product range – RNG casino, live dealer, sports and e-sports betting, poker, lottery, bingo, plus B2B platforms, game studios, and aggregators. The application fee of $1,200 is payable only after pre-approval, so operators confirm eligibility before committing capital; all-in setup starts around €21,900, with the license fee near $17,200 annually. The TGA issues a digital certificate within 3 to 4 weeks. Best fit: crypto-native operators, lean startups, and teams that need a compliant license live in under a month.

Liberia (National Lottery Authority)
Launched in 2025, Liberia's International Integrated Online Gaming License is a direct play for the Curaçao exodus – positioned as a low-cost license that still clears banking. One authorization covers online casino, sports betting, lottery, e-sports, and prediction markets, with no separate license per vertical. The decisive advantage is financial infrastructure: the standard package includes a registered local entity in Monrovia and a B2B SWIFT corporate account in USD and EUR, set up in parallel with licensing, so operators aren't chasing banks for weeks post-approval. Liberia sits on neither the FATF blacklist nor the grey list, removing the PSP friction that plagues grey-listed competitors. All-in setup starts at around €50,000 – roughly 40–60% below current Curaçao costs – with approval in about 20-30 business days. Best fit: operators who need real banking access and a clean regulator without midshore pricing.

Tier 2: Midshore – Credibility With Utility

Kahnawake (Canada)
The Kahnawake Gaming Commission provides North American credibility without domestic tax exposure – 0% on gaming revenues, no minimum capital requirement, and no local staff mandate. Operators apply for a Client Provider Authorization; the $40,000 fee covers the application and the first-year annual fee (refundable if denied). Each designated principal requires a Key Person License at an initial fee of $5,000 and an annual fee of $1,000. The timeline runs four to six months and includes a detailed review of business plans, financial projections, and software architecture.

Alderney (AGCC)
The Alderney Gambling Control Commission occupies a distinctive position: entirely gray-list-free, with absolute tax neutrality – zero gambling tax on gross gaming yield, zero VAT, zero corporate income tax, zero capital gains tax. It issues Category 1 licenses for B2C operators and Category 2 licenses for B2B suppliers. The fee structure is transparent: a £10,000 investigation deposit, a £17,500 introductory first-year fee, and annual fees that scale from £35,000 to £400,000 based on Net Gaming Yield. Approval typically takes four to twelve weeks. Alderney is particularly well-suited to B2B suppliers and operators who need pristine institutional credibility.

Tobique (Tobique Gaming Commission, Canada)
Issued by the Tobique First Nation in New Brunswick, the TGC delivers North American credibility on a startup budget – a leaner, faster alternative to Kahnawake. Taxation on gambling is zero. The framework is deliberately light: no director or shareholder residency requirements, no local office, no minimum capital, and no server mandate – cloud hosting is permitted. A single application covers five domains and grants broad market access, excluding the US, UK, Russia, New Brunswick, and a defined list of sanctioned states. An MLRO is required, but without residency. Regulatory fees run €36,000 for the license plus a one-time €7,000 compliance fee on issuance; from year two, renewal is €18,000 plus €7,000 compliance. The full process takes four to six weeks, compressible to 5–10 business days via fast-track. Best fit: operators who want a recognizable North American badge and a true zero-tax structure without Kahnawake's cost and six-month timeline.

Nevis (St. Kitts and Nevis)
Launched in mid-2025, the Nevis framework offers a meaningful upgrade in perception for operators who need better banking access without the setup cost of a midshore license. Leveraging four decades of financial services credibility and FATF whitelist status, Nevis enables operators to build stronger relationships with Latam, EU and Asian PSPs. Annual fees are approximately €28,000, with processing times of four to eight weeks.

Isle of Man
The Isle of Man is the most demanding Tier-2 jurisdiction – and the most respected. The Online Gambling Regulation Act (OGRA) framework requires genuine economic substance: a domestically incorporated entity, two locally resident directors, a locally approved Key Official, and server infrastructure hosted on the island. Corporate tax is 0%, but operators pay a tiered Gaming Duty on gross gaming yield: 1.5% up to £20m, 0.5% from £20m to £40m, 0.1% above that. Application fees start at £5,250 with a £36,750 annual fee for a standard full license. From incorporation to launch, allow three to six months. First-year capitalization routinely exceeds £60,000 to £100,000.

Tier 1: The Choice of Large Established Operators

Malta Gaming Authority
For operators targeting enterprise valuation, Tier-1 European acquiring banks, and integration with the industry's leading software providers, the MGA remains the benchmark. It functions as an institutional passport – the credential that opens doors across the industry's premium tier.

In 2025, the MGA shifted from checklist compliance to a proactive, evidence-driven model using data analytics to monitor sports betting integrity and enforce AML protocols. The compliance obligation is continuous and unforgiving – the MGA revoked one operator's license within six weeks of granting it for failure to meet basic regulatory requirements. Capitalization requirements range from €40,000 to €240,000, depending on license class. Realistic first-year operator costs range from €100,000 to €250,000. Timeline: twelve to twenty-four months.

Estonia
Regulated by the Estonian Tax and Customs Board (EMTA) through a two-stage system: an indefinite-term activity licence, then a separate operating permit per game type. The two stages can't run in parallel, minimum share capital is €1,000,000 for games of chance, and realistically it's 8–12 months from preparation to launch. The activity licence state fee is €47,940, and the operating permit fee is €3,200 per application, which can cover multiple sites. Tax rate I've given as 5–6% GGR since sources split between a flat 6% and a 5.5%-declining-to-4%-by-2029 schedule – both cited, but the 6% figure had more corroboration.

Romania
This is the more interesting find. Romania is the only jurisdiction that grants direct legal access to Romanian players — ONJN doesn't recognize any foreign licence, Malta included. Online operators pay an annual licence tax of €300,000, and following Law 141/2025 (effective 1 August 2025), the authorisation tax jumped from 21% to 30% of GGR with a floor of €480,000/year, plus a mandatory €500,000 annual responsible-gambling contribution. Add those up and Romania's fixed annual cost is higher than Malta's realistic running cost.

iGaming Jurisdiction Comparison Chart for License Migration (2026)

Fee data derived from regulatory publications and aggregate legal advisory frameworks as of 2026.

Corporate Structure and Tax Optimization

Where you hold the license is not the same question as where you hold the intellectual property. Sophisticated iGaming operators decouple the two – and for good reason. Housing platform technology, player databases, and a gaming license within a single entity concentrate legal, financial, and sovereign risk in one place.

The Cyprus IP Holding Structure

Cyprus has become the standard IP management jurisdiction for global iGaming operations. The combination of EU Directive integration, over 60 Double Tax Treaties, and the IP Box Regime makes it a natural hub for royalty income flows.

Under the IP Box, companies developing qualifying intellectual property – proprietary betting platform code, RNG algorithms, CRM architectures – can apply an 80% deduction on qualifying IP income. That reduces the effective corporate tax rate on royalty streams to approximately 2.5%-5%, compared with a standard Cypriot rate of 15%. The typical structure: a Cyprus entity owns the core software and licenses it to the offshore operating company. The operator pays royalties back to Cyprus, shifting profits from the operating tier to the tax-advantaged holding tier. Cyprus also imposes no withholding tax on outgoing dividends to non-resident shareholders.

The Hong Kong IP Holding Structure

Hong Kong has established itself as the premier IP holding jurisdiction for iGaming operators targeting Asia-Pacific markets. The combination of a territorial tax system, zero withholding taxes, and a robust network of Double Tax Treaties makes it an efficient hub for royalty income flows across the region.

Under Hong Kong's territorial tax principle, only profits arising in or derived from Hong Kong are subject to corporate tax. Corporate income tax from sources outside Hong Kong - 0%. Royalty income generated from IP licensed to offshore operating entities – proprietary betting platform code, RNG algorithms, player management systems – is typically treated as offshore-sourced and falls entirely outside the scope of Hong Kong Profits Tax. The typical structure is for a Hong Kong entity to own the core software and license it to operating companies in the EU or other target markets. The operator pays royalties back to Hong Kong, concentrating IP value in a low-friction, politically stable jurisdiction. Hong Kong imposes no capital gains tax, VAT, or withholding tax on dividends remitted to non-resident shareholders.

iGaming License Migration: The Legal and Structural Roadmap

Usually operators approach a license migration expecting disruption: revenue at risk, players lost, operations stalled. When the process is structured correctly, none of that happens. Players keep playing, payments keep processing, and the business never stops. The complexity is real – but it is entirely manageable, and it lives in the preparation, not in the transition itself. This is the framework Rikk applies.

Phase 1 – Preparatory: Timeline, Stakeholders, Technical Brief

The process begins well before any legal entity is formed or any regulator is approached. The preparatory phase serves three functions: mapping the full transition timeline, aligning internal stakeholders, and issuing a formal brief to the technical team.

At this stage, the operator and legal counsel define the target structure, the sequencing of each phase, and the dependencies between them. The transition calendar is built backward from the desired go-live date, with a buffer built into the re-onboarding phase – the most variable element in any iGaming license migration.

In parallel, the technical team receives a formal brief covering the scope of front-end changes required at go-live: license disclosure updates across all site pages, updated terms and conditions, revised privacy policy reflecting the new entity, and any in-session notifications or forced re-authentication flows triggered for active players at the moment of transition. This brief is issued early because front-end changes require QA cycles and regulatory pre-approval in certain jurisdictions. Initiating this work late is one of the most common causes of avoidable delay.
Phase 2 – Legal Structure and Payment Agent Strategy

Once the transition plan is confirmed, the legal structure is established. The guiding principle is to retain the same ultimate beneficial owner across old and new entities. This is not merely a convenience – it materially simplifies the regulatory narrative with the incoming licensor, accelerates payment agent re-onboarding, and avoids the additional due diligence burden that a change of beneficial ownership would trigger across every counterparty.
The structural model is selected from three options depending on the operator's existing payment infrastructure:

Model A – Full New Structure: A new operating company and a new payment agent entity are incorporated, both under the same beneficial owner. This is the cleanest model from a regulatory standpoint and is appropriate where the existing payment agent carries reputational or compliance risk, or where the incoming jurisdiction requires a local entity at the payment layer.

Model B – New Operating Company with Payment Agent Acquisition: A new operating company is incorporated. The new OpCo acquires the existing payment agent from the old operator – either outright or through a structured transfer – and re-onboards it under the new license. This model preserves existing PSP relationships and reduces re-onboarding time, but requires a formal transfer mechanism and written consent from payment providers.

Model C – Staged Partial Acquisition The new operating company takes a minority stake in the existing payment agent, completes re-onboarding as a partial owner, and subsequently acquires the remaining interest once the new license is operational. This is the most complex model, but is the appropriate solution where PSPs will not re-onboard a brand-new entity without an established track record, or where existing payment agent relationships cannot be replicated quickly.

The choice between models is driven by the current payment agent's counterparty agreements, the re-onboarding appetite of key PSPs, and the timeline available. Legal counsel should conduct a rapid audit of the existing payment agent's contracts before selecting the model.
Phase 3 – License Acquisition and Regulator Engagement

With the structure in place, formal engagement with the regulator begins. The regulatory conversation at this stage is straightforward when managed transparently: the operator discloses the existing operation, the current license holder, the transition rationale, and the proposed timeline. Regulators are accustomed to structural migrations and do not treat them as adverse events, provided beneficial ownership is consistent and the compliance record of the existing operation is clean.

The license application proceeds on the standard track for the target jurisdiction. Where the regulator permits, it is worth initiating a pre-application dialogue to confirm that the parallel operation of the existing site under the old license during the transition window will be treated as acceptable. This is standard practice but should be confirmed in writing.
Phase 4 – Re-onboarding: Payment Systems and Game Providers

This is the phase that determines the actual migration timeline. Re-onboarding payment systems is the primary operational dependency and the critical path of any iGaming license migration.

Game providers are generally more straightforward – existing aggregator relationships transfer with relatively little friction, though individual studio agreements occasionally require direct novation and can introduce delays. Payment system re-onboarding is structurally different: each PSP conducts its own KYC and compliance review of the new entity independently of the licensing process, and its timeline is not aligned with the regulatory calendar.

The correct approach is to begin PSP re-onboarding as early as possible – ideally concurrent with the license application – so that by the time the license is granted, the payment infrastructure under the new structure is already operational or near-operational.

During re-onboarding, the player-facing operation continues under the existing license without interruption. Players see no change. The new payment infrastructure is built and tested in parallel, beneath the surface, until it reaches the threshold required to support full operational continuity under the new license.

For large operators with extensive payment stacks, this phase runs two to four months. Smaller operators can complete re-onboarding in six to eight weeks. The variable is the number of PSP relationships requiring individual re-onboarding and the responsiveness of each provider's compliance team.
Phase 5 – Go-Live Transition

When payment re-onboarding is complete and the new license is issued, a transition date is selected. The cut-over is coordinated across legal, technical, and compliance functions:

  • The site is updated to reflect the new license holder across all regulated disclosure points.
  • Terms and conditions are updated and presented to active players for acceptance, with appropriate notice periods as required by the incoming license conditions.
  • Players are notified of the entity change through the communications channels required by the regulator – typically in-session notification, email, and updated footer disclosures.
  • Jurisdiction-specific formalities – mandatory regulator notification of go-live, submission of updated player-facing documents for pre-approval – are completed in advance.
  • The transition itself is operationally straightforward by this point. The legal and structural work has been completed, the payment infrastructure is live under the new entity, and the technical changes are largely cosmetic.

The complexity of an iGaming license migration is front-loaded into Phases 2 through 4. When those phases are executed correctly, go-live is a scheduled event, not a risk. This is the consistent outcome when the process is run correctly: no player churn, no revenue gap, no operational downtime. The business that enters the migration continues to operate without interruption – and exits it with a stronger, better-structured license.
Rikk has structured iGaming license migrations across multiple jurisdictions. If you are considering a license change – whether driven by regulation, structure, or growth – speak to our team before you start for the cleaner outcome.
Need guidance on an iGaming license migration?
Rikk Law advises iGaming operators on jurisdictional structuring, license acquisition, compliance frameworks, and migration strategy. We work across offshore, midshore, and Tier-1 jurisdictions.

Protecting SEO and Organic Traffic During License Migration

In markets where paid digital advertising is restricted or prohibited – which covers most regulated iGaming jurisdictions – organic search is the primary channel for player acquisition. First-time deposit conversion rates from organic traffic can reach 35%, significantly outperforming paid channels. That makes the domain a financial asset, one that carries years of accumulated link equity and algorithmic authority.

An improperly executed domain migration can destroy that asset. Recovery from a botched migration typically takes six to twelve months, a time during which revenue attrition compounds.

License migration carries a reputation for disruption that isn't always deserved. Operators often assume a new jurisdiction means starting over: new domain, new SEO history, new player trust signals built from scratch. With Rikk, the migration process is structured around retaining the existing website and its accumulated domain equity, so search rankings, backlink profiles, and player familiarity carry forward rather than resetting to zero. What changes is the regulatory foundation underneath the operation, not the storefront players already recognize.
EXPERT INSIGHT:
Operators who have done this before know it is not complicated – if it is structured correctly from the start. Two regulators, player data, AML obligations, existing players: each has a defined playbook. Rikk has run this process across multiple jurisdictions. Here is what it actually looks like.
— Vladyslav Y, CEO at Rikk Law Firm
  • GDPR and AML During a Licence Migration
    Player data does not stop being regulated because the licence changes. GDPR follows the data, not the licence – any operator processing EU resident data remains bound by it regardless of the new jurisdiction. In practice, this is manageable and for most offshore operators it creates minimal friction, provided the data classification is done correctly upfront.

    The core task is assigning the right legal basis to each category of data before migration begins. Financial records and KYC documents are retained under a legal obligation – AML law requires this for a minimum of five years in most jurisdictions, and that obligation overrides any player erasure request. Marketing profiles and behavioural data are held under consent and are deleted immediately if a player requests it. This distinction is simple in practice, and gets operators out of the apparent conflict between GDPR and AML without requiring any technical complexity.

    For offshore operators specifically: data transfer compliance between jurisdictions is far simpler than it appears on paper. The right structural decisions at the start – around hosting location and entity design – typically eliminate the issue before it becomes one. Rikk handles this as part of the initial migration setup.
  • Closing the Old Licence Cleanly
    The outgoing regulator needs to be engaged early and transparently. Most jurisdictions require formal notification of a structural migration – operating without that notification is a compliance breach, not a grey area.

    The communication is straightforward: here is the timeline, here is the new structure, here is how existing players are being handled, and here is when the old licence will be formally wound down. Regulators who receive this information proactively do not create obstacles. The operators who run into problems are the ones who notify late or not at all.

    Once the new licence is live and players have transitioned, the old entity is wound down in accordance with the outgoing jurisdiction's requirements – final reporting, settlement of obligations, and formal surrender of the licence. Rikk manages this process end-to-end.
  • What the New Regulator Needs to Know
    A licence application that discloses an existing live operation is not a red flag – it is evidence of real operational experience. Incoming regulators treat this positively, provided the disclosure is complete and the plan is credible.

    The pre-application briefing covers five points: the existing operation and its compliance record; the rationale for the migration; how existing player accounts will be transitioned; confirmation that the site will continue operating under the old licence during the application window; and a realistic go-live timeline. That last point – confirming parallel operation is acceptable – should be documented in writing before the application is submitted, not assumed after.

    Regulators respond to operators who have a plan. Transparency at the pre-application stage consistently shortens timelines and eliminates the most common sources of regulatory delay.
  • Existing Players: Nothing Stops, Nothing Is Lost
    Throughout the migration, players continue on the existing licence without interruption. Balances, deposit limits, bonus positions, and responsible gambling settings remain in effect. Players see no change until go-live.

    At go-live, three things happen: players are notified of the entity change via in-session notification and email; updated terms are presented for acceptance; and all responsible gambling records – self-exclusions, cooling-off periods, deposit limits – are carried over in full to the new entity. A player who was self-excluded on the old licence is blocked on the new one from day one. No gap, no re-registration window, no compliance exposure.

    In practice, most players notice one thing: the licence name in the footer has changed. Everything else remains exactly as it was.
EXPERT INSIGHT:
Rikk manages the full compliance workstream of iGaming licence migrations – data classification, AML framework, both regulators, and player transition. Operators who work with us do not stop operating. But the conversation should start before the application does.
— Vladyslav Y, CEO at Rikk Law Firm
Need guidance on an iGaming license migration?
Rikk Law advises iGaming operators on jurisdictional structuring, license acquisition, compliance frameworks, and migration strategy. We work across offshore, midshore, and Tier-1 jurisdictions.
This article is intended for informational purposes only and does not constitute legal advice. Regulatory requirements, fees, and timelines are subject to change. Operators should obtain qualified legal counsel before making jurisdictional decisions.
Vladyslav Yarovoi
Vladyslav Yarovoi acts as a managing partner at the esteemed Rikk law firm. With his Master of Law and expertise in a high-risk business, Vladyslav has become an authority on providing legal support for IT businesses; from ensuring their successful launch to making sure they are ready for IPO.
Contact the author:
About the author
Please contact us in any manner that is convenient for you.
Tell us about your project on a free meeting
Fill in the form so that we can study your case. We will respond within 1 business day.
Messengers
Email
Call
Frequently asked Questions
In our blog, we discuss a variety of helpful legal and business topics.