Best Online Casinos in Spain

Licensing of online casinos in Spain

In 2011 Spain unified online gambling nationwide with Law 13/2011. Since then the Dirección General de Ordenación del Juego (DGOJ) — now part of the Ministry of Social Rights, Consumer Affairs and the 2030 Agenda — regulates the market, issues licences, supervises and, where necessary, sanctions operators across the country; it also runs player services ranging from self‑exclusion to identity‑theft alerts. Lotteries are administered separately by SELAE and ONCE.

A Spanish licence is not a box‑ticking exercise. Operators must serve Spain on a .es domain and redirect all Spanish traffic from other corporate sites to it. Technically, they must implement a Central Game Unit and an Internal Control System (Sistema de Control Interno) that records every session, bet, payment and balance change; the regulator has secure access and a real‑time data feed. Random number generators and all critical components are certified and re‑audited every two years under Real Decreto 1613/2011; licensing and accounting rules are defined in Real Decreto 1614/2011.

Player identification and responsible gambling are built in by default. Every account is verified; access is blocked for minors and for people listed in the Registro General de Interdicciones de Acceso (RGIAJ); issuing gambling credit is prohibited. Spain applies default deposit limits of €600 per day, €1,500 per week and €3,000 per month (you can set stricter personal limits; increases require enhanced checks and are uncommon). In the «Other Games» category (casino games), you must set a maximum session length and a loss limit in advance; hitting either ends the session automatically, with mandatory periodic summaries shown on screen. If you request a withdrawal of available balance or winnings, the operator must initiate the transfer within 24 hours.

Advertising is tightly regulated (Real Decreto 958/2020). Commercial messages must be clearly labelled, may not target minors or romanticise gambling; promotions, including «welcome» offers, are allowed only for verified active customers and under specific conditions. Operators must provide a prominent responsible‑gaming area («Juego más seguro»), a free helpline and staff training. A 2023 decree (Real Decreto 176/2023) strengthened protections for young adults and players showing risky or «intensive» behaviour: a ban on promos, no VIP perks, stricter payout rules and, if the player does not respond to the operator within 72 hours, a suspension of activity until a reply is received.

When rules are broken, the DGOJ can step in. For very serious offences (for example, operating without a licence, bypassing the .es domain or tampering with certified software) fines range from €1 to €50 million, along with licence revocation and bans of up to four years; for serious offences — fines up to €1 million and suspension. The DGOJ also publishes sanction decisions and can compel payment services, media and telecom operators to stop servicing illegal offers.

Protection of funds and data. Operators keep player money in segregated accounts at Spanish banks, separate from company funds, and fully apply AML/KYC procedures. Players also have national tools: the RGIAJ self‑exclusion register blocks access at all licensed operators, and the «PhishingAlert» service warns you if someone attempts to open an account using your details.

Cryptocurrencies. The framework favours traceable payment methods that comply with PSD2 and instruments with verified ownership. Methodological guidance assesses the risk profile of any payment method (including those that allow account top‑ups via crypto); however, consumer rules do not allow deposits directly in cryptocurrency. In practice, .es‑licensed sites use regulated payment gateways with name matching.

Restrictions and taxes

Player limits operate on two levels. First, statutory deposit caps apply: €600/day, €1,500/week, €3,000/month, unless you set tighter personal limits; any increase is subject to responsible‑gaming checks and can be approved no more than once every three months. Second, casino sessions under the «Other Games» licence start with explicit time and loss limits; reaching either automatically ends the session. For live betting, your exposure cannot exceed the available balance at the start of the event (interim winnings can be reused within the same event).

Taxation in Spain primarily falls on operators, not directly on players. Law 13/2011 imposes a gaming tax, with rates depending on the product and tax base. Examples from the law: «other types of games» are taxed at 25% of net gaming revenue; contests at 20% of gross revenue; fixed‑odds sports bets and other fixed‑odds wagers at 25% of the net base; pari‑mutuel bets at 15–22% of the gross base. Autonomous Communities may add a surcharge to the portion attributable to their residents (up to 20% of the basic rate). The annual budget law may adjust bases and rates. This section does not describe personal income tax on players’ winnings.

How to verify a Spanish licence

Start with the casino itself. Legitimate operators run on a .es domain, publish clear licence information (often in a «Juego autorizado» section or in the footer), display the «Juego Seguro» and RGIAJ/18+ marks, and provide a prominent «Juego más seguro» section. Be cautious with brands that operate on .com or promote apps without the warnings required in Spain.

Then check the operator in the official register. The DGOJ maintains an up‑to‑date list of licensees with their brands and approved domains. See the register here: Licensed operators (DGOJ). Find the company by legal name or domain and make sure the details match the site you plan to use. For lotteries, remember: only SELAE and ONCE are authorised to sell state lotteries.

If a brand or domain is not in the register, treat that site as unauthorised for Spain — regardless of any references to foreign licences.

How to file a complaint against a DGOJ‑licensed online casino

Step one. Give the casino a chance to resolve the issue. Use its official complaints channel, ask for a written explanation (what was done, why, and under which clause of the contract) and keep all correspondence. If there is no answer within a month, or the problem is not resolved, contact the regulator.

Complaint to the DGOJ. The DGOJ accepts player submissions about state‑licensed operators. The entry point is the regulator’s page: Denuncias y reclamaciones — DGOJ. You can file online via the electronic office (a digital certificate is required) or on paper to: C/ Atocha, 3, 28012 Madrid. Attach your correspondence with the casino and supporting evidence (screenshots, statements).

What to expect. The indicative review time is up to two months. The regulator may request data from the operator and, if violations are found, open sanction proceedings. The DGOJ does not act as a civil arbiter in purely contractual disputes; for those you may need the courts or an ADR scheme, if the operator participates. Separately, if you suspect illegal activity (unlicensed sites, .com domains targeting Spain), submit a «denuncia» via the same portal; this supports enforcement but is not a claim for personal compensation.