Crypto Casinos: Licensing, Compliance Costs and Real Financial Exposure in Spain

Crypto casinos accept Bitcoin, Ethereum or USDT for deposits and withdrawals, and in Spain they operate under a strict legal frame. Since Ley 13/2011 and the 2020 update of Real Decreto 958/2020, every operator serving Spanish players needs a Dirección General de Ordenación del Juego (DGOJ) licence. Unlicensed sites face blocking and fines from €50,001 up to €50 million.

The Spanish market closed 2025 with roughly €1.7 billion in gross gaming revenue, of which online casino represented close to 40%. Crypto payments are not banned, but they are treated as real money under the anti-money-laundering rules of Ley 10/2010. That single sentence decides most of what follows in this guide.

What Counts as a Crypto Casino Under Spanish Law

Is a crypto-only casino legal in Spain?

No. A casino that accepts only crypto and holds no DGOJ licence cannot legally offer its games to residents of Spain. The DGOJ does not issue licences to operators whose sole payment rail is a digital asset, because the regulator requires a licensed credit institution or payment provider with a Spanish or EEA presence.

Practically, that means brands like Stake, BC.Game or Rollbit, which are crypto-first and licensed in Curaçao or Anjouan, sit outside the Spanish framework. They may be reachable, but they are not authorised, and any dispute with them has no Spanish legal channel behind it.

How does the DGOJ treat crypto as a payment method?

Crypto is treated as a means of payment, not as a separate currency. When a player deposits 0.05 BTC, the operator must convert it to euros at the moment of the transaction, record the euro value, and keep that record for 5 years. Failure to do so is an infringement of Ley 10/2010, with penalties starting at €6,001.

The conversion duty is where most offshore crypto casinos break Spanish rules without even noticing. They quote balances in mBTC or USDT, never fix a euro reference, and therefore cannot produce the transaction trail the Agencia Tributaria asks for during a routine inspection.

Which licences exist for online casino in Spain?

Three categories cover the market: general licences for operators (modality A for games of chance, modality B for betting), authorisations for each individual game, and technical certificates for the platform itself. The general licence costs €2.5 million per modality, non-refundable, and applies for a renewable 5-year term.

On top of that, each game needs its own approval. A slot title from Pragmatic Play or NetEnt must be certified by an accredited laboratory, tested for RNG fairness, and submitted with a theoretical RTP declaration. The DGOJ publishes the approved list monthly; unlisted games cannot be shown to Spanish players.

Compliance Costs: What a Spanish Licence Actually Costs

How much does a DGOJ licence cost in 2026?

The general licence fee is €2,500,000 per modality, paid to the Tesoro Público before the authorisation is granted. Modality A covers casino games, modality B covers betting, and an operator wanting both must pay twice. The fee is not an annual charge; it covers the full 5-year term.

Each individual game adds €50,000, and technical platform certification runs between €120,000 and €300,000 depending on the lab and the number of titles submitted. A realistic launch budget for a mid-sized online casino in Spain sits around €4 million before a single player signs up.

What does a Curaçao licence cost by comparison?

A Curaçao eGaming licence under the new 2023 framework costs around $20,000 in application fees plus an annual contribution of roughly $12,000, with a shared revenue tax of 2% on gross gaming revenue. Anjouan licence packages run from €17,000 per year. The gap against Spain is not subtle.

That gap explains why so many crypto casinos advertise themselves as "internationally licensed" without naming Spain. They are legal in their own jurisdiction, they are not illegal as companies, but they are not authorised to serve Spanish residents, and that distinction carries the fine.

Which ongoing costs hit every licensed operator?

Annual obligations include a gaming tax of 20% on gross gaming revenue, a 0.7% fee to the Consejo Coordinador de Juego, mandatory contributions to responsible gambling programmes, and independent audits of the random number generator each year. Legal counsel specialised in gambling law typically runs €60,000 to €120,000 annually.

Add a compliance officer, SEPBLAC reporting, KYC infrastructure and a Spanish-language customer support team, and the fixed annual cost floor for a licensed operator lands near €700,000. An offshore crypto casino with a Curaçao licence can run the same product for a fraction of that, which is precisely the competitive asymmetry regulators are trying to close.

Regulatory Penalties: What Unlicensed Operators Risk

What fines apply to unlicensed gambling in Spain?

Ley 13/2011 classifies infringements in four tiers. Very serious infractions, which include operating without a licence or facilitating access to unlicensed games, carry fines from €50,001 to €50,000,000. The DGOJ also orders immediate blocking of the website through Spanish internet service providers.

Blocking requests go to the Comisión Nacional de los Mercados y la Competencia and are executed within 15 days. Since 2021, the DGOJ has issued more than 120 blocking orders, and the register of blocked domains is public. A crypto casino landing on that list loses its Spanish traffic overnight.

Can directors be held personally liable?

Yes. Under Ley 40/2015 on the legal regime of the public sector, sanctions can reach the legal representatives of the offending company when the infringement is attributable to them personally. In practice, the DGOJ has fined individuals up to €600,000 for directing unlicensed operations aimed at Spanish players.

Criminal exposure exists too. Article 312 of the Código Penal punishes illicit organisation of gambling with 1 to 3 years of imprisonment, plus fines if the activity involves money laundering. In 2023, a case in Madrid ended with a 2-year suspended sentence for an operator running unlicensed slot halls through a shell company.

What happens to players using unlicensed crypto casinos?

Players are not fined. Spanish law targets operators, not customers, and there is no provision that penalises a resident for depositing Bitcoin into an offshore casino. The risk is financial: no segregated funds, no dispute channel, no maximum stake rule, and no guarantee the balance can be withdrawn.

When a Curaçao-licensed crypto casino shuts down or simply refuses a payout, the player's only recourse is a complaint to the Curaçao Gaming Authority, which historically resolves fewer than 40% of cases in the player's favour. Against a DGOJ-licensed operator, the player can escalate to the Dirección General de Consumo and, above €2,000, to the courts.

How fast does blocking actually work?

The DGOJ submits a motivated request to the CNMC, which notifies the access providers. Operators have 15 days to present arguments before the order becomes final. In urgent cases, provisional blocking is immediate, and the operator must then litigate to reverse it, a process that typically runs 8 to 14 months.

Several crypto casinos have tried. In 2024, one Curaçao-licensed brand challenged its inclusion in the blocked register before the Audiencia Nacional and lost; the court held that serving Spanish-language content with Spanish customer support constituted targeting the Spanish market. Language and support channels are evidence.

Licensed vs Unlicensed: Side-by-Side on the Numbers

Which brands actually hold a DGOJ licence?

Among the operators Spanish players recognise, the licensed list includes Codere, Bet365, Bwin, Sportium, William Hill, Betfair, 888 Casino, LeoVegas, PokerStars, Casino Gran Madrid Online, Betway, MiCasino (Luckia) and GoldenPark. All of them publish their DGOJ licence number in the footer of their websites.

None of them accept cryptocurrency as a deposit method. That is the direct consequence of the payment-provider requirement: a DGOJ licensee must route funds through an authorised institution, and no Spanish bank currently clears crypto-to-casino transfers. Licensed and crypto are, today, mutually exclusive in Spain.

Which crypto casinos target Spanish players without a licence?

Brands such as Stake, BC.Game, Rollbit, 1xBit, Bitcasino.io, Cloudbet and FortuneJack hold licences in Curaçao or Anjouan and offer Spanish-language interfaces. They are not on the DGOJ register, they are not in the blocked list yet, and they process deposits in BTC, ETH, USDT and sometimes Solana.

The pattern is consistent: high welcome bonuses (often 200% to 400% of the first deposit), no stake limits on slots, no deposit caps, and instant withdrawals in crypto. Everything a Spanish-licensed casino cannot legally offer, the offshore side offers freely, which is exactly why enforcement intensity has increased since 2024.

How do the two compare on player protection?

Licensed operators must integrate with the Registro Central de Autoexclusión (REJACE), allow players to self-exclude for 6 months, 1 year or 3 years, and enforce deposit limits of €600 per day, €1,500 per week and €3,000 per month. Reality checks appear every 60 minutes of play, and session time is displayed at all times.

Offshore crypto casinos have no obligation to any of this. Some offer a voluntary cool-off tool, but REJACE integration does not exist, deposit limits are optional, and the hourly reality check is almost never implemented. For a player with a gambling problem, that difference is not cosmetic.

Game Providers and the Certification Chain

Which providers supply licensed Spanish casinos?

The approved catalogue for the Spanish market includes titles from Pragmatic Play, NetEnt, Microgaming, Evolution, Play'n GO, Red Tiger, Playtech and Novomatic, among roughly 40 studios. Every single title carries its own DGOJ authorisation, and the theoretical RTP must be published in the game information panel.

Live casino in Spain is dominated by Evolution, whose studios in Riga and Malta serve Spanish tables with native-speaking dealers. The certification covers not just the RNG but the streaming latency, the bet settlement logic and the audit trail of every round, which is why live products take 6 to 9 months to clear.

What do offshore crypto casinos run instead?

The offshore side leans heavily on studios that either do not seek Spanish certification or operate under a different approval path: Hacksaw Gaming, Push Gaming, Nolimit City, Bgaming, Spribe (Aviator) and Turbo Games. Crash games and provably-fair titles are a category that simply does not exist in the licensed Spanish catalogue.

The provably-fair model deserves a note. It lets a player verify each round's outcome through a hash published before the bet. Elegant, yes, but it is not a substitute for third-party certification, because it proves the result was not manipulated after the fact, not that the underlying odds are the ones advertised.

How long does certification take in each case?

For the DGOJ route: submit the technical documentation, run the lab tests, wait for the Consejo Coordinador de Juego review, and expect approval in 4 to 6 months for a standard slot, longer for live or progressive products. The lab fees start at €12,000 per title.

For an offshore crypto casino, the same title can be live in a matter of days, because Curaçao and Anjouan accept the provider's own certification. Speed is the commercial advantage, and it is the reason an offshore site can launch 500 games while a Spanish-licensed operator launches 50.

Tax Treatment for Players and Operators

Do Spanish players pay tax on crypto casino winnings?

Yes. Gambling winnings in Spain are subject to a 19% withholding on the first €6,000, 21% on the next €6,000 to €50,000, and 23% above €50,000. Licensed operators withhold this automatically and report it to the Agencia Tributaria under model 190.

Offshore crypto casinos do not withhold anything. The player is then legally obliged to declare the winnings as income from capital gains or other gambling income in the annual return, converting the crypto to euros at the date of receipt. Not declaring is a tax infraction with surcharges from 50% to 150% of the unpaid amount.

How are operators taxed on gross gaming revenue?

The state tax on online gambling is 20% of gross gaming revenue, defined as stakes minus prizes, payable monthly. Autonomous communities add their own rates: Madrid applies an additional 10%, Andalusia 20%, Valencia 20%, and the Canary Islands 0% as a fiscal incentive.

An operator with €10 million GGR in Madrid therefore pays €2 million to the state and €1 million to the community, a 30% effective rate. Compare that with Curaçao's 2% and the financial logic behind the offshore migration becomes obvious, even before considering the €2.5 million entry fee.

What happens if a player cannot prove the origin of crypto funds?

The Agencia Tributaria can request the source of funds for any deposit above €3,000 in a single operation. Under Ley 10/2010, operators must identify transactions of that magnitude, and unexplained crypto inflows trigger a review under the anti-fraud law Ley 15/2022.

Penalties for unjustified wealth start at 35% of the undeclared amount, rising to 60% in cases of concealed assets abroad. Crypto held in a foreign exchange or a self-custody wallet used for gambling deposits is precisely the pattern that has produced a wave of inspections since the 2023 tax amnesty closed.

Responsible Gambling Obligations in Practice

What must a licensed casino do when a player shows risk signals?

The DGOJ requires operators to monitor play patterns and intervene when thresholds are crossed: deposit increases above 200% of the rolling average, sessions longer than 3 consecutive hours, or losses exceeding €1,000 in a single week. The intervention protocol starts with a message and can end with a temporary suspension of the account.

Every licensed operator must publish a responsible gambling policy in Spanish, display the helpline number 900 200 228 on every page, and link to the REJACE self-exclusion register. Missing any of these elements is a serious infringement with fines starting at €50,001.

How does self-exclusion work across the Spanish market?

REJACE is a single national register. A player who excludes themselves is blocked from every DGOJ-licensed site simultaneously, for a minimum of 6 months and up to 3 years, with no early reversal during the first 6 months. Registration takes about 5 minutes with a DNI or NIE.

Offshore crypto casinos are not connected to REJACE. A player excluded from Spanish sites can open an account at a Curaçao-licensed brand in under a minute, using only an email address. This is the single largest structural gap in the Spanish responsible gambling framework, and the DGOJ has said publicly it intends to close it through blocking rather than through cooperation.

What responsible gambling measures exist on the offshore side?

Some offshore crypto casinos offer voluntary deposit limits, session time reminders and a self-exclusion option inside the account settings. The quality varies enormously: the better-run brands have real tools, the smaller ones have a checkbox that does nothing.

The absence of an external register matters more than any individual tool. A self-imposed exclusion can be reversed by contacting support; a REJACE exclusion cannot. For a player managing a real problem, that difference decides outcomes.

Market Reality: Numbers Behind the Spanish Crypto Casino Scene

How big is the Spanish online gambling market?

The DGOJ reported gross gaming revenue of approximately €1.7 billion for the online channel in 2025, with online casino contributing around €680 million and betting around €1.02 billion. Total turnover exceeded €12 billion, and the number of active accounts passed 2.2 million.

Growth has been steady but not explosive: about 7% year on year in 2024, slowing to roughly 5% in 2025 as the market matures. Spain is the third-largest online gambling market in Europe after the UK and Italy, and the regulatory burden is a deliberate part of that profile.

What share of Spanish players use crypto casinos?

No official figure exists, because unlicensed operators are by definition outside the statistics. Industry estimates circulated at the 2025 Jornadas de Juego put the share of Spanish players who have used an offshore crypto casino at between 8% and 12% of the active online player base, based on survey panels rather than transaction data.

Read that carefully: it is an estimate, not a measurement. What is measurable is the volume of blocking orders, which rose from 14 in 2022 to 38 in 2025, and the number of new domains appearing each quarter, which suggests the offshore supply is expanding faster than the enforcement capacity.

Which payment methods do licensed casinos accept?

The approved list includes Visa, Mastercard, Bizum, PayPal, Skrill, Neteller, paysafecard and bank transfer via Redsys or SEPA. Bizum has become the fastest-growing method, processing around 35% of deposit transactions at major operators in 2025, thanks to instant settlement and native mobile integration.

Crypto is absent from every one of those lists. The DGOJ has not issued guidance prohibiting it explicitly, but the payment-provider requirement produces the same result indirectly, and no licensed operator has applied to add it. Until that changes, the Spanish licensed market and the crypto casino market remain separate ecosystems.

Practical Comparison: Top Operators in Both Categories

Which licensed Spanish casinos are worth registering with?

Codere runs a full casino with slots from Playtech and live tables, plus a strong retail network of betting shops. Bet365 combines casino and sports with a €50 welcome offer and 24/7 Spanish support. Sportium, a joint venture of Cirsa and Entain, offers around 900 slot titles and a native app rated 4.4 on the Spanish stores.

LeoVegas brings a mobile-first interface and a catalogue near 1,500 games, while PokerStars adds a poker client that no other Spanish operator matches. Casino Gran Madrid Online connects the physical venue in Torrelodones with its digital twin, and 888 Casino keeps a stable RTP average across its exclusive titles.

Which crypto casinos accept Spanish players today?

Stake is the largest by traffic, with a full casino, original in-house games and a sportsbook, all in Spanish. BC.Game offers more than 8,000 titles and a native token. 1xBit is crypto-only by design, with no fiat option at all, and Cloudbet focuses on high-limit sports betting alongside its casino.

Bitcasino.io markets itself as the first licensed Bitcoin casino, holding a Curaçao licence since 2014. Rollbit combines casino with crypto trading features, and FortuneJack has been operating since 2014 with a mixed fiat-crypto cashier. None of them appear on the DGOJ register.

What should a Spanish player check before depositing?

Three things decide everything: the licence number in the footer, the presence of REJACE integration, and the deposit limit settings. If the footer shows a Curaçao licence and no DGOJ number, the operator is not authorised in Spain, regardless of how polished the website looks.

Also check the game catalogue for DGOJ-approved titles. Licensed operators display the authorisation code next to each game; offshore sites do not, because those codes do not exist for them. It takes ten seconds and settles the question.

How do withdrawal times compare in practice?

Licensed Spanish casinos process e-wallet withdrawals within 24 hours and bank transfers in 2 to 5 business days, with identity verification required before the first payout. Crypto casinos advertise instant withdrawals, and in practice most settle within 5 to 30 minutes once the blockchain confirms.

The trade-off is verification depth. Licensed operators verify source of funds for large withdrawals; offshore sites often verify only email. Fast payouts are real, and so is the absence of the checks that protect both the player and the operator from a money-laundering investigation.

FAQ: Crypto Casinos in Spain

Are crypto casinos legal in Spain?

Crypto casinos without a DGOJ licence are not legal for Spanish residents. They are not criminal for the player, but the operator faces fines from €50,001 to €50 million and immediate domain blocking. Licensed Spanish casinos cannot accept crypto because no authorised payment provider clears those transactions.

Can I play at a Curaçao-licensed casino from Spain?

You can access the website, and Spanish law does not punish you for playing there. The operator is breaking Spanish rules by serving you, and if it gets blocked, your balance may be frozen with no local recourse. Your winnings remain taxable in Spain at 19% to 23% regardless of the site's licence.

What is the fine for running an unlicensed casino in Spain?

Very serious infringements carry administrative fines between €50,001 and €50,000,000, plus domain blocking and possible criminal charges under Article 312 of the Código Penal, which provides 1 to 3 years of imprisonment for illicit organisation of gambling activities.

Do I pay tax on crypto casino winnings in Spain?

Yes. Winnings are taxed at 19% up to €6,000, 21% up to €50,000 and 23% above that. Licensed operators withhold automatically; offshore ones do not, so you must declare the euro value yourself in your annual return, converting crypto at the date you received it.

Which Spanish casinos accept Bitcoin?

None of the DGOJ-licensed operators accept Bitcoin or any other cryptocurrency in 2026. The payment-provider requirement routes all deposits through authorised institutions, and no Spanish bank currently clears crypto-to-gambling transfers, so licensed and crypto remain mutually exclusive in this market.

Is my money safe at an offshore crypto casino?

There is no player fund segregation requirement, no Spanish dispute channel, and no maximum stake or prize cap. Large operators with long track records pay out reliably; smaller ones do not. The absence of a regulator with real enforcement power over your balance is the actual risk.

How do I self-exclude from gambling in Spain?

Register at REJACE with your DNI or NIE, choose a period of 6 months, 1 year or 3 years, and you will be blocked from every licensed Spanish site at once. Offshore crypto casinos are not connected to the register, so blocking them separately requires an ISP-level measure or personal discipline.

What is the maximum I can deposit at a licensed Spanish casino?

Deposit limits are €600 per day, €1,500 per week and €3,000 per month by default, adjustable downward but not upward without a cooling-off period. Slot stakes are capped at €1 per spin and prizes at €50,000. Offshore crypto casinos impose none of these limits.

Spain treats crypto casinos as a regulatory perimeter problem rather than a technology problem: the licence decides legality, the payment rail decides feasibility, and the fine decides behaviour, which is why the licensed market and the offshore crypto market continue to run on parallel tracks with very different rules and very different consequences.