Is Online Casino Gambling Legal in Brazil? How the Regulated Market Works

Yes — online casino games are legal in Brazil when offered by a federally licensed operator. Since 1 January 2025, slots, roulette, blackjack, and live dealer games have been permitted under the same fixed-odds framework that legalised online sports betting, regulated by the Secretariat of Prizes and Betting (SPA) within the Ministry of Finance.

That single sentence settles the headline question, but it hides most of what actually matters for players: which sites are legal, how to recognise them, what protections the regime provides, and where the boundaries still sit. Brazil built one of the world's most distinctive licensing systems, and several of its rules have no equivalent in Europe or North America.

How Brazil got here

Brazil spent decades as the largest grey market in gambling. A 1946 decree closed the country's land-based casinos, and for generations most gambling outside state lotteries and horse racing was formally illegal — while offshore sites served millions of Brazilians anyway.

The turn came in two steps. A 2018 law recognised fixed-odds sports betting in principle but left it unregulated for five years. Then Law 14,790 of December 2023 created the full framework: a licensing system, a dedicated regulator, taxation, and — decisively — the inclusion of "online games" alongside sports betting, which brought casino-style titles inside the legal perimeter. The regulated market opened on 1 January 2025.

The result is worth stating plainly: a market that was entirely offshore in 2023 became a licensed, supervised industry two years later, with land-based casinos still banned but their online equivalents legal nationwide.

What makes a Brazilian casino site legal

Brazil's regime gives players an unusually simple verification tool. Every licensed operator must run on the country-specific domain suffix, so the address bar does the first compliance check for you.

The .bet.br domain — authorised sites operate exclusively on bet.br addresses. A gambling site serving Brazil from a .com or .io domain is, by definition, outside the licensed system.
A five-year federal authorisation — operators pay roughly R$30 million for an authorisation covering up to three brands, valid for five years.
A local company with Brazilian ownership — licensees must be incorporated in Brazil, and at least 20% of the company must be held by Brazilian nationals. There is no remote-only licensing.
SPA supervision — the regulator maintains the public list of authorised operators, and telecoms authorities work to block unauthorised sites at the network level.

For players, the practical rule is one line long: if it is not on bet.br, it is not licensed, whatever the site itself claims.

The payment rules that surprise everyone

Brazil's framework is stricter about money movement than almost any established market, and two prohibitions stand out.

Credit cards are banned for gambling deposits. Licensed operators may only accept payment from accounts held in the player's own name, through electronic transfer — in practice dominated by PIX, the central bank's instant-payment system that already handles most consumer transactions in the country. The policy intent is explicit: gambling should be funded from money a player has, not money a player is borrowing.

Cryptocurrency is also excluded. Licensed Brazilian operators cannot accept Bitcoin, Tether, or any other digital asset. Combined with the own-name account rule, this makes the payment trail fully traceable — a deliberate anti-money-laundering design, and a sharp contrast with the crypto-friendly offshore sites that previously served the market.

The same closed loop applies on the way out: withdrawals return to the player's own account, which — one genuine upside of the PIX rail — typically means payouts arrive in minutes once the operator approves them, not days.

Taxes: what the operator pays, what the player pays

On the operator side, the headline levy on gross gaming revenue stands at 18%, before the ordinary corporate taxes that apply to any Brazilian company. Licence fees and inspection charges sit on top.

Players are not outside the tax net either. Net winnings above an exempt threshold are subject to income tax, applied to annual net prizes rather than to each individual win. The details are worth checking with current official guidance, but the principle players should retain is that large winnings in the regulated market are a declared, taxable event — another way the licensed system differs from the informal one it replaced.

Player protections built into the regime

The Brazilian rules import the responsible-gambling architecture familiar from mature markets, and in some places go further.

Registration requires full identity verification against national ID data, with facial recognition checks in use across the industry — under-18s are excluded at signup, not on the honour system.
Operators must provide deposit and loss limits, time-outs, and self-exclusion mechanisms.
Gambling advertising is restricted in content and targeting, with rules against messaging that presents betting as a path to income.
Certain groups are barred from betting entirely, including minors and individuals with access to inside information in sports contexts.
Bonus offers of the "free bet just for signing up" kind that fuelled the pre-regulation advertising boom face significant restrictions.

Enforcement is the regime's hardest ongoing job. Thousands of unauthorised domains have been referred for blocking since launch, and the offshore sector has not vanished — it has been pushed to the margins, where it competes on looser rules precisely because it offers none of the protections above. Independent review guides such as PeakyCasino draw the same line the regulator does: a casino's legal status in the player's own market is a threshold question, checked before bonuses, game libraries, or payout speeds are even considered.

What players give up on unlicensed sites

Offshore sites did not stop accepting Brazilians on 1 January 2025; they simply became the unregulated alternative to a regulated option. Understanding what the licensed system provides is easiest when you list what the unlicensed one does not.

No recourse — a dispute with a bet.br operator can be escalated through Brazilian consumer-protection channels and the regulator. A dispute with an offshore site governed by a distant licence, or none, ends wherever the site decides it ends.
No enforced limits — deposit caps, loss limits, and self-exclusion exist on unlicensed sites only if the operator chooses to offer them, and nothing compels the operator to honour them.
Payment exposure — offshore deposits run through crypto or intermediaries precisely because regulated rails refuse them. If money is lost in transit or confiscated at cashout, there is no closed-loop rule protecting it.
Blocking risk — an account on a domain that gets blocked mid-year turns a balance into a negotiation.

None of this means every offshore operator is a thief. It means the player carries every risk personally, which is the exact condition the licensing system was built to end.

The comparison with older markets is instructive. The United Kingdom and Ontario reached the same destination — licensed sites, identity checks, RG tools, taxed revenue — but Brazil arrived with two additions rarely seen elsewhere: the country-locked domain that makes legality visible in the address bar, and payment rules that exclude borrowed and untraceable money from day one. Newer regimes get to learn from older ones, and Brazil's designers clearly did.

Where the boundaries still sit

Two boundaries define the current settlement. Land-based casinos remain illegal — the online regime did not reopen the physical gaming floors closed in 1946, and separate legislation to do so has been debated in the National Congress for years without passage. And bingo halls, the "jogo do bicho" numbers game, and cross-border lottery sales all remain outside the law.

The regulated online market, meanwhile, has scale on its side: Brazil has more than 200 million people, near-universal PIX adoption, and a football-centred betting culture that was already enormous before legalisation. It is widely tracked as one of the largest newly regulated gambling markets anywhere, which is why global operators accepted the steep entry price.

For a Brazilian player in 2026, the practical summary is short. Online casino play is legal on bet.br sites licensed by the SPA; deposits run through your own bank account via PIX, never a credit card or crypto wallet; winnings above the exemption are taxable; and every licensed site must offer limits and self-exclusion. Reviews of licensed operators, payment testing, and market guides are published at peakycasino.net.