US Casino Regulations

Online casino regulation in the United States operates at the state level, not federally. There is no single national gambling authority. Each state that has legalized online casino play has its own licensing body, compliance requirements, and player protection mandates. Understanding this structure tells you exactly what legal protections you have — and what you lose when playing at an unlicensed offshore site.

Federal Law Sets the Floor, States Build the Framework

The Unlawful Internet Gambling Enforcement Act (UIGEA) of 2006 is the primary federal statute affecting online gambling. It does not make online gambling illegal for players — it prohibits financial institutions from processing payments to unlicensed gambling operators. This is why some credit cards decline at casino sites even in states where online gambling is fully legal: the bank's compliance system flags the merchant category code.

The 2011 Department of Justice opinion clarified that the Wire Act of 1961 applies only to sports betting, not casino games or poker. This opened the door for states to legalize online casino gambling independently. The Wire Act interpretation was contested in a 2019 DOJ reversal, but federal courts have consistently upheld the 2011 reading, leaving state-level legalization intact.

What UIGEA does not do:

• It does not make it illegal for US players to gamble online
• It does not apply to state-licensed operators
• It does not prohibit cryptocurrency transactions (crypto is not classified as a financial institution under UIGEA)

States Where Online Casino Gambling Is Legal

As of June 2026, seven states have active legal frameworks for real-money online casino play. New York passed online casino legislation in Q1 2026, adding the largest potential market in the country to the regulated space.

Sports betting is legal in 38+ states, but that authorization does not extend to casino games. A sportsbook license and an online casino license are separate categories in every state that has both.

Geolocation enforcement: All licensed operators use geolocation software to verify that players are physically within state borders at login. Your state of residence does not determine legality — your physical location at the time of play does. VPNs do not reliably bypass geolocation checks and violate operator terms of service.

What a State Gaming License Actually Requires

A state gaming license is not a rubber stamp. Each licensing body conducts background investigations, financial audits, and technical reviews before issuing a license. The process typically takes 6–18 months and costs operators hundreds of thousands of dollars in application fees and compliance infrastructure.

Licensing requirements common across all legal states:

• Background investigation of all principals and key employees
• Proof of financial solvency and segregated player funds
• Technical certification of all gaming software by an approved independent lab
• Anti-money laundering (AML) program documentation
• Responsible gambling program with mandatory player tools
• KYC (Know Your Customer) procedures for all account holders
• Ongoing quarterly or annual compliance reporting
• Physical presence or registered agent in the licensing state

Segregated player funds is a critical requirement. Licensed operators must keep player account balances in accounts separate from operating capital. If the operator becomes insolvent, player funds are protected. Offshore casinos without this requirement can — and do — freeze player accounts when they face financial difficulties.

Licensing Bodies and Their Jurisdiction

Each state regulator has specific authority, enforcement powers, and compliance standards. They are not interchangeable.

How to verify a license: Every licensed operator's license number is publicly searchable on the relevant state regulator's website. The NJDGE maintains a public database of all licensed internet gaming operators. The PGCB publishes a list of approved interactive gaming certificate holders. If a casino's license number does not appear in the state database, the license claim is false.

Player Protections Mandated by State Law

State licensing does not just authorize gambling — it mandates specific protections for players. These are not optional features that casinos choose to offer. They are legal requirements tied to the operating license.

Mandatory protections in all licensed states:

State self-exclusion registries are the most powerful tool available. Enrolling in New Jersey's program blocks access to all 30+ licensed online casino platforms in the state simultaneously — not just the one you're currently using. Pennsylvania, Michigan, West Virginia, and Connecticut have equivalent programs.

RTP transparency: Licensed operators must publish return-to-player percentages for all games, certified by an approved independent testing lab. The stated RTP is the audited figure, not a marketing estimate. Offshore casinos have no such requirement.

Independent Testing Labs: What Certification Actually Means

Games at licensed US casinos are certified by independent testing laboratories before they go live. The lab audits the random number generator, verifies the game math matches the stated RTP, and checks that the software cannot be manipulated.

A GLI or eCOGRA certification seal means the RNG has been independently audited. The 96% RTP displayed on a slot machine is the actual certified long-term payout rate — not a figure the casino calculated itself. Without this certification, the displayed RTP is unverifiable.

How to Verify a Casino's License Before Depositing

The verification process takes under five minutes and eliminates the risk of depositing at an unlicensed operator.

1. Find the license number displayed on the casino's website (usually in the footer) 2. Identify which state regulator issued the license 3. Go to the regulator's official website and search the public license database 4. Confirm the license is active, not suspended or revoked 5. Check that the operator name matches the casino you are looking at

Red flags that indicate an unlicensed operator:

• No license number displayed, or a license from an offshore jurisdiction only (Malta, Curacao, Gibraltar)
• License number that does not appear in the state database
• No independent testing lab certification
• No state self-exclusion registry link
• Customer support that cannot provide a verifiable license number on request

Offshore casinos operating without a US state license have no legal obligation to pay out winnings to US players. Disputes cannot be escalated to a state regulator. The only recourse is through the offshore jurisdiction's gaming authority, which has no enforcement power in the United States.

States Moving Toward Legalization

Several states have active legislative efforts as of mid-2026. The pace of legalization has accelerated since New York's passage.

The primary obstacles to legalization in remaining states are tribal gaming compacts (tribes with existing land-based casino rights often oppose online competition), tax rate disputes between operators and state legislatures, and responsible gambling framework negotiations.

Tax rates matter for market viability. Pennsylvania taxes online casino gross gaming revenue at 54% — the highest in the country. New Jersey taxes at 15%. Michigan at 20–28% depending on game type. High tax rates reduce operator margins, which can translate to lower RTPs and less competitive bonus terms for players.

FAQ

What is the difference between a US state gaming license and an offshore license?

A US state gaming license is issued by a state regulatory body (NJDGE, PGCB, MGCB, etc.) and carries legal enforcement power within that state. The operator must meet ongoing compliance requirements, submit to audits, maintain segregated player funds, and offer mandated responsible gambling tools. An offshore license — from Malta, Curacao, or Gibraltar — has no legal standing in the United States. An offshore-licensed casino operating in the US has no obligation to pay out winnings, protect player funds, or respond to player complaints through any US legal channel. If a licensed US casino refuses to pay a legitimate withdrawal, you can file a complaint with the state gaming board, which has the power to investigate and penalize the operator. With an offshore casino, you have no equivalent recourse.

Does the UIGEA make it illegal for US players to gamble online?

No. The UIGEA targets financial institutions, not individual players. It prohibits banks and payment processors from knowingly accepting transactions from unlicensed gambling operators — it does not criminalize the act of placing a bet online. Players in states without legal online casinos are not subject to federal criminal penalties for gambling online. State laws vary, but enforcement against individual players is essentially nonexistent. The practical risk for players in unlicensed states is not legal prosecution but the absence of consumer protections: no regulated dispute resolution, no segregated funds, no verified RTPs.

How does state self-exclusion work and can it be reversed?

State self-exclusion programs allow players to voluntarily ban themselves from all licensed gambling operators in a state simultaneously. In New Jersey, enrollment in the NJ Self-Exclusion Program blocks access to all 30+ licensed online casino platforms in the state. In Pennsylvania, the PA Voluntary Self-Exclusion Program covers all PGCB-licensed operators. Enrollment periods vary: most programs offer options of 1 year, 5 years, or lifetime exclusion. Lifetime exclusion is generally irrevocable. Time-limited exclusions can sometimes be lifted after the exclusion period ends, but the process requires a formal request and a waiting period. Enrolling in a state registry is more effective than self-excluding from individual sites because it covers all licensed operators at once and cannot be bypassed by creating a new account at a different casino.

What happens to my account balance if a licensed casino shuts down?

Licensed US casinos are required to maintain segregated player funds — your account balance is held in accounts separate from the operator's operating capital. If a licensed operator loses its license or ceases operations, the state gaming board oversees the wind-down process and ensures player funds are returned. When operators have exited the US market, state regulators have supervised the return of player balances. The process can take weeks to months, but the funds are recoverable. At an unlicensed offshore casino, there is no equivalent protection. If the operator closes, player funds are typically unrecoverable, and there is no regulatory body with jurisdiction to compel repayment.