Brazil's iGaming Enforcement Era: How the SPA Is Reshaping Latin America's Largest Regulated Market
Brazil's iGaming grace period ended in January 2026. The SPA is now enforcing strict licensing, KYC, and B2B supplier rules across Latin America's biggest market.
From Grey Market to Regulated Arena
For nearly eight decades, gambling in Brazil existed in a legal grey zone. Offshore operators accepted bets from millions of Brazilian players, the state collected little in tax revenue, and players had no formal protections. That era is now firmly closed.
Law No. 14,790/2023, known informally as the "Lei das Apostas" or Betting Law, established the current legal framework for online sports betting and casino-style gaming. The regulated market officially launched on January 1, 2025, and a transitional period gave operators time to apply for licences and align their operations with the new rules.
That transition period expired at the start of 2026. Brazil's iGaming sector has entered what industry observers are calling an enforcement era, where the question for operators is no longer how to obtain a licence but how to keep it.
The SPA Takes Centre Stage
The body responsible for overseeing this new landscape is the Secretaria de Premios e Apostas (SPA), a department of Brazil's Ministry of Finance. Established under the Betting Law, the SPA has the authority to issue licences, conduct audits, impose fines, and revoke operating permissions.
Since January 2026, the SPA has issued its first wave of fines targeting platforms with weak identity verification protocols. Violations of Ordinance SPA/MF No. 722 are treated as grounds for immediate licence suspension, not merely administrative corrections. The regulator has made clear that compliance failures carry serious commercial consequences.
Two failure points have drawn particular attention in early enforcement actions: platforms allowing users to register with valid tax identification numbers but without completing biometric liveness checks, and platforms failing to block self-excluded players from the National Register in near real time. Both categories have resulted in documented penalties.
Brazil's gross gambling revenue reached approximately 5.96 billion euros in 2025, according to available estimates, which underlines just how much is at stake for operators seeking to maintain their foothold in the market.
Licensing Requirements and Costs
Brazil operates a single federal licence structure. The Fixed-Odds Betting Operator Licence covers sports betting, online casino games, virtual games, and crash games under one unified authorisation. Operators do not need separate licences for different product verticals.
The financial threshold for entry is significant. The licence fee is reported at R$30 million (roughly equivalent to 5.2 million US dollars or 6 million euros) for a five-year term, with an additional R$5 million in required reserves. Operators also face a 12% gross gaming revenue tax, and must withhold 15% on player winnings above a defined threshold.
Foreign companies can apply, but only by establishing a Brazilian legal entity with at least 20% local capital participation. Wholly foreign-owned structures without local representation are not eligible. The application process, including company formation, technical certification, and regulatory review, typically takes between eight and twelve months.
A single licence permits operators to run up to three distinct brands under one corporate entity, which offers some flexibility for groups managing multiple products in the market.
KYC, Payments, and the PIX-First Economy
Brazil's compliance framework places heavy demands on identity verification. Operators must verify every player using their individual taxpayer registration number (CPF) combined with facial recognition technology at the point of registration. Risk profiling of players is also required on an ongoing basis.
On the payments side, Brazil has become what some compliance specialists describe as a "PIX-first" economy. PIX, the country's instant payment system, dominates transaction flows in the iGaming sector. Credit cards, cash, and cryptocurrencies are prohibited under the Betting Law, and all deposits must originate from accounts registered to the player's verified CPF. Third-party deposits are strictly prohibited.
The Sigap monitoring system requires operators to make player activity and financial flow data available to the regulator in near real time, with daily reporting batches as a baseline and on-demand query capability as a standing obligation. Operators whose compliance infrastructure cannot meet these technical standards face both financial penalties and reputational risk.
B2B Suppliers Enter the Regulatory Perimeter
One of the most significant regulatory developments of early 2026 concerns the supply chain. For the first eighteen months of the regulated market, B2B supplier relationships were treated as an operator compliance matter. If a supplier was not certified, the operator's licence was at risk, but the supplier itself had no direct relationship with the regulator.
That arrangement is changing. The SPA opened a public consultation on a draft B2B Supplier Recognition Ordinance in February 2026, with the consultation closing in March. The draft brings five categories of B2B supplier into direct scope for SPA recognition, including game providers, platform suppliers, and payment-adjacent companies.
Recognition would be granted by individual SPA Ordinance for a three-year renewable term. Once the framework takes effect, licensed Brazilian operators will only be permitted to engage suppliers who hold formal SPA recognition. The final rules had not yet been published as of the time of writing, but the direction of travel is clear.
Industry analysts note that Brazil's move toward direct supplier oversight is novel in the Latin American region. Colombia's Coljuegos has a supplier registration process, but not the operational capacity recognition model the SPA is implementing. If Brazil's framework proves workable, other regional regulators may adopt similar structures in the coming years.
Political Pressure and the Road Ahead
The regulatory picture is not without political complexity. In February 2026, President Luiz Inacio Lula da Silva publicly expressed concerns about the social risks associated with the rapid expansion of online betting platforms. His comments signalled that policymakers remain actively engaged with questions around advertising restrictions, responsible gambling measures, and the broader social impact of a newly legalised sector.
Brazil's advertising rules already require that only licensed operators may promote their services, that advertising must not target minors or vulnerable groups, and that promotional content must not promise certain gains or create illusions of control over outcomes. Further tightening of these rules remains a possibility as the market matures.
The licensed operator count grew from 14 companies at the initial list stage to 78 by August 2025, reflecting strong commercial appetite for the market despite its demanding entry requirements. Forecasts from industry analysts suggest that gross revenue could approach 10 billion dollars by 2029, making Brazil one of the most closely watched iGaming jurisdictions globally.
For operators and suppliers already in the market, 2026 is a year defined by enforcement rather than expansion. For those still considering entry, the compliance architecture is now well-defined, even if the political and regulatory environment continues to evolve. Brazil has moved decisively from potential to reality, and the SPA shows no sign of easing its standards.
Daniel Kovacs is a seasoned online casino reviewer known for his analytical approach and no-nonsense writing style. With a background in digital marketing and a long-standing interest in probability and game mechanics, he built his reputation by breaking down complex casino systems into clear, practical insights for everyday players. He started his career freelancing for niche gambling blogs before launching his own review platform, where he focuses on transparency—testing bonuses, verifying payout speeds, and digging into terms that most players overlook. Daniel is particularly respected for his deep dives into slot RTPs, customer support responsiveness, and real user experiences.
More iGaming News
Read more
Finland Opens Its Gambling Market to Private Operators as Licence Applications Surge
Finland's shift away from its gambling monopoly is drawing strong industry interest, with 50 licence applications already filed ahead of the 2027 market opening.
New Zealand Launches Online Casino Licensing Framework as Regulations Take Effect in July 2026
New Zealand has published detailed regulations under its Online Casino Gambling Act 2026, with a competitive licensing process set to begin in July 2026.
Fake-FIAT Crypto Rails Under Scrutiny as Offshore Casinos Migrate to Georgian Payment Gateway Nylo
Investigators flag a pattern of offshore casinos migrating from ChainValley to Nylo, a Georgian gateway using fake-FIAT crypto deposit flows.