UAE Gaming License in 2026: How to Get Licensed by the GCGRA
Last Updated: April 2026
Last Updated: April 2026
A country that banned gambling for decades has become one of the most talked-about gaming licensing destinations in the world. The United Arab Emirates established the General Commercial Gaming Regulatory Authority (GCGRA) in 2023, issued its first lottery license in 2024, approved the first casino resort in late 2024, and licensed its first online gaming platform in December 2025. Morgan Stanley estimates the UAE gaming market could generate between $3 billion and $5 billion in gross gaming revenue annually - making a GCGRA license potentially the most valuable regulatory permit in the industry right now.
But this is not an easy market to enter. The GCGRA operates to world-class standards from day one, with leadership drawn from former senior regulators and executives in New Jersey and Las Vegas. The licensing process is rigorous, the AML requirements are bank-grade, and the number of licenses available is deliberately limited. For operators, vendors, and investors who want to move early, the window for first-mover advantage is still open - but it is closing.
This article explains what the GCGRA licenses, who can apply, what the process looks like, and what compliance infrastructure you need to have in place before you submit an application.
But this is not an easy market to enter. The GCGRA operates to world-class standards from day one, with leadership drawn from former senior regulators and executives in New Jersey and Las Vegas. The licensing process is rigorous, the AML requirements are bank-grade, and the number of licenses available is deliberately limited. For operators, vendors, and investors who want to move early, the window for first-mover advantage is still open - but it is closing.
This article explains what the GCGRA licenses, who can apply, what the process looks like, and what compliance infrastructure you need to have in place before you submit an application.
Table of Content:
What Is the GCGRA and What Does It Regulate?
The General Commercial Gaming Regulatory Authority is the UAE’s exclusive federal regulator for all commercial gaming activities across all seven emirates. Established by Federal Law by Decree and headquartered in Abu Dhabi, the GCGRA holds jurisdiction over:
Any business or individual engaged in any aspect of commercial gaming in the UAE - whether as an operator, technology vendor, payment provider, content supplier, or key person - requires a valid GCGRA license. Operating without one is a criminal offense, and the authority has explicitly warned that this applies to facilitators of unlicensed activity as well, not just the operators themselves.
The General Commercial Gaming Regulatory Authority is the UAE’s exclusive federal regulator for all commercial gaming activities across all seven emirates. Established by Federal Law by Decree and headquartered in Abu Dhabi, the GCGRA holds jurisdiction over:
- Lottery operations and lottery retailers
- Internet gaming (online casino platforms)
- Sports wagering (online and land-based)
- Land-based gaming facilities (integrated resort casinos)
Any business or individual engaged in any aspect of commercial gaming in the UAE - whether as an operator, technology vendor, payment provider, content supplier, or key person - requires a valid GCGRA license. Operating without one is a criminal offense, and the authority has explicitly warned that this applies to facilitators of unlicensed activity as well, not just the operators themselves.
The Three License Categories
The GCGRA issues licenses across three main categories:
1. B2C Operator Licenses (Gaming Operator License)
These are issued to companies that directly provide gaming services to end users: casinos, online gaming platforms, sports betting sites, lottery operators, and lottery retailers. This is the most valuable - and most restricted - category.
As of early 2026, only a handful of B2C licenses have been issued:
The GCGRA is expected to follow a model of one B2C online gaming license per emirate, with not all seven emirates expected to participate. Industry analysts suggest no more than two or three emirates will issue online gaming licenses. This makes B2C operator licenses extraordinarily scarce and commercially valuable.
2. B2B Vendor Licenses (Gaming-Related Vendor License)
These are issued to companies providing products and services to licensed operators: gaming software providers, platform operators, payment solution providers, gaming equipment suppliers, content aggregators, live casino providers, sports data companies, and similar businesses.
The B2B regime is significantly more active. Over fifteen vendor licenses have already been granted to internationally recognized suppliers including IGT, Aristocrat, Konami, Sportradar, Hub88, and Live Online Gaming Services LLC (the Yolo Group’s Live88 brand). The GCGRA has made it clear that its priority is to build a robust B2B ecosystem before broadening B2C access.
For international gaming businesses without an existing UAE presence, a B2B vendor license offers the most realistic near-term entry point into the market - with the added benefit of positioning as an approved supplier to whichever B2C operators receive licenses next.
3. Key Person Licenses
These are required for individuals in significant roles within licensed gaming businesses, including executives, senior compliance personnel, affiliates, and key stakeholders. The GCGRA’s fit and proper assessment for key persons mirrors international best practice: background checks, financial integrity verification, and assessment of professional competence.
The GCGRA issues licenses across three main categories:
1. B2C Operator Licenses (Gaming Operator License)
These are issued to companies that directly provide gaming services to end users: casinos, online gaming platforms, sports betting sites, lottery operators, and lottery retailers. This is the most valuable - and most restricted - category.
As of early 2026, only a handful of B2C licenses have been issued:
- UAE Lottery - the first lottery license, granted to The Game LLC in July 2024
- Wynn Al Marjan Island - the first land-based casino license, issued to Wynn Resorts for a USD 5 billion integrated resort in Ras Al Khaimah, expected to open in 2027
- Coin Technology Projects LLC - the UAE’s first and currently only licensed online gaming operator, which launched the platforms play971 and TrueWin in December 2025
The GCGRA is expected to follow a model of one B2C online gaming license per emirate, with not all seven emirates expected to participate. Industry analysts suggest no more than two or three emirates will issue online gaming licenses. This makes B2C operator licenses extraordinarily scarce and commercially valuable.
2. B2B Vendor Licenses (Gaming-Related Vendor License)
These are issued to companies providing products and services to licensed operators: gaming software providers, platform operators, payment solution providers, gaming equipment suppliers, content aggregators, live casino providers, sports data companies, and similar businesses.
The B2B regime is significantly more active. Over fifteen vendor licenses have already been granted to internationally recognized suppliers including IGT, Aristocrat, Konami, Sportradar, Hub88, and Live Online Gaming Services LLC (the Yolo Group’s Live88 brand). The GCGRA has made it clear that its priority is to build a robust B2B ecosystem before broadening B2C access.
For international gaming businesses without an existing UAE presence, a B2B vendor license offers the most realistic near-term entry point into the market - with the added benefit of positioning as an approved supplier to whichever B2C operators receive licenses next.
3. Key Person Licenses
These are required for individuals in significant roles within licensed gaming businesses, including executives, senior compliance personnel, affiliates, and key stakeholders. The GCGRA’s fit and proper assessment for key persons mirrors international best practice: background checks, financial integrity verification, and assessment of professional competence.
Need help choosing the right UAE gaming license route?
Who Can Apply for a GCGRA License?
The GCGRA has not published a detailed public eligibility framework, and B2C regulations are still being developed. However, based on what has been disclosed and observed from existing licensees, applicants should expect to demonstrate:
Corporate structure and integrity
Financial strength
Operational capability
Compliance infrastructure
The GCGRA has not published a detailed public eligibility framework, and B2C regulations are still being developed. However, based on what has been disclosed and observed from existing licensees, applicants should expect to demonstrate:
Corporate structure and integrity
- A UAE-registered legal entity (or a credible plan to establish one)
- A clean beneficial ownership structure with clear UBO disclosure
- No adverse regulatory history across any jurisdiction in which the business operates
Financial strength
- Sufficient capital and financial reserves to cover operational risks
- Audited financial statements demonstrating stability
- Evidence of legitimate funding sources
Operational capability
- A detailed business plan covering the proposed gaming operations
- Qualified senior management with demonstrated experience in regulated gaming markets
- A local representative or designated point of contact for the GCGRA
Compliance infrastructure
- A documented AML/CFT framework aligned with UAE Federal Decree-Law No. 20 of 2018 and FATF standards - gaming operators are classified as Designated NonFinancial Businesses and Professions (DNFBPs) once transactions exceed AED 11,000, triggering bank-grade compliance obligations
- KYC and identity verification systems capable of processing Emirates ID, with age verification and geo-restriction controls
- Responsible gaming program including deposit limits, self-exclusion tools, and coolingoff periods
- Technical systems certified by a GCGRA-approved testing laboratory such as GLI or BMM Testlabs
The Application Process
The GCGRA application process is structured around a formal intake and suitability assessment model. While a complete public rulebook is still under development, the process generally follows these stages:
Stage 1: Intake and Pre-Assessment Submit the GCGRA Intake Form through the official licensing portal. This initial submission signals intent and allows the regulator to assess whether your business model falls within a licensable category. At this stage, you should be ready to describe your corporate structure, proposed activities, jurisdiction of incorporation, and key personnel.
Stage 2: Formal Application Submission Once the initial review is complete, a full application package is required. This typically includes: corporate constituent documents, organisational charts, key personnel biographies and background declarations, a detailed business plan, financial forecasts, AML/CFT policy documentation, responsible gaming framework, and technical compliance certifications.
Stage 3: Suitability Investigation The GCGRA conducts a rigorous background investigation covering the entity, its beneficial owners, and key personnel. This includes criminal record checks, financial integrity verification, and regulatory reference checks across all jurisdictions where the business has previously operated. The process is comparable to gaming licensing in New Jersey or the UK - thorough and non-negotiable.
Stage 4: Technical and Compliance Assessment For operator licenses, the GCGRA reviews the technical integrity of gaming platforms, RNG certification, cybersecurity posture, and compliance system capability. Independent testing laboratory certification is required before a Certificate of Operation is issued.
Stage 5: License Issuance and Ongoing Compliance Licenses are subject to ongoing compliance obligations: regular AML audits, responsible gaming monitoring, regulatory reporting, and incident notification. The GCGRA expects proactive engagement - if issues arise, operators are expected to address them immediately rather than wait for enforcement action.
The full process, from intake to license issuance, can take up to six months depending on the license category and the completeness of the application submitted.
The GCGRA application process is structured around a formal intake and suitability assessment model. While a complete public rulebook is still under development, the process generally follows these stages:
Stage 1: Intake and Pre-Assessment Submit the GCGRA Intake Form through the official licensing portal. This initial submission signals intent and allows the regulator to assess whether your business model falls within a licensable category. At this stage, you should be ready to describe your corporate structure, proposed activities, jurisdiction of incorporation, and key personnel.
Stage 2: Formal Application Submission Once the initial review is complete, a full application package is required. This typically includes: corporate constituent documents, organisational charts, key personnel biographies and background declarations, a detailed business plan, financial forecasts, AML/CFT policy documentation, responsible gaming framework, and technical compliance certifications.
Stage 3: Suitability Investigation The GCGRA conducts a rigorous background investigation covering the entity, its beneficial owners, and key personnel. This includes criminal record checks, financial integrity verification, and regulatory reference checks across all jurisdictions where the business has previously operated. The process is comparable to gaming licensing in New Jersey or the UK - thorough and non-negotiable.
Stage 4: Technical and Compliance Assessment For operator licenses, the GCGRA reviews the technical integrity of gaming platforms, RNG certification, cybersecurity posture, and compliance system capability. Independent testing laboratory certification is required before a Certificate of Operation is issued.
Stage 5: License Issuance and Ongoing Compliance Licenses are subject to ongoing compliance obligations: regular AML audits, responsible gaming monitoring, regulatory reporting, and incident notification. The GCGRA expects proactive engagement - if issues arise, operators are expected to address them immediately rather than wait for enforcement action.
The full process, from intake to license issuance, can take up to six months depending on the license category and the completeness of the application submitted.
Not sure if your business meets GCGRA eligibility standards?
AML Compliance: The Non-Negotiable Baseline
The GCGRA’s AML framework, updated in September/October 2025 through Federal Decree-Law No. 10 of 2025, now formally includes gaming operators as a regulated sector. The implications are significant.
Gaming operators become DNFBPs - Designated Non-Financial Businesses and Professions - when a single transaction, or linked transactions, reaches AED 11,000 (approximately USD 3,000). At that threshold, the full suite of UAE AML obligations applies: Customer Due Diligence, Enhanced Due Diligence for high-risk clients, Suspicious Transaction Reporting to the UAE Financial Intelligence Unit via goAML, and five-year record retention.
For online gaming platforms, this creates practical compliance requirements that must be built into the platform architecture from the outset:
The GCGRA’s leadership has signalled a zero-tolerance approach to compliance failures. A licensing compliance failure - particularly one involving money laundering or identity fraud - is expected to result in immediate license revocation.
The GCGRA’s AML framework, updated in September/October 2025 through Federal Decree-Law No. 10 of 2025, now formally includes gaming operators as a regulated sector. The implications are significant.
Gaming operators become DNFBPs - Designated Non-Financial Businesses and Professions - when a single transaction, or linked transactions, reaches AED 11,000 (approximately USD 3,000). At that threshold, the full suite of UAE AML obligations applies: Customer Due Diligence, Enhanced Due Diligence for high-risk clients, Suspicious Transaction Reporting to the UAE Financial Intelligence Unit via goAML, and five-year record retention.
For online gaming platforms, this creates practical compliance requirements that must be built into the platform architecture from the outset:
- Identity verification capable of reading and verifying Emirates IDs, including Arabic OCR and tamper detection, alongside international documents for tourist and expatriate users
- PEP and sanctions screening against UAE, UN, OFAC, and EU lists - with fuzzy matching for Arabic name variations
- Source of funds verification for high-value players, which in the UAE context means a VIP player base that includes large numbers of HNWIs from across the GCC
- Transaction monitoring with automated flagging of unusual deposit and withdrawal patterns
- Suspicious Transaction Reports filed through goAML within the required timeframes
The GCGRA’s leadership has signalled a zero-tolerance approach to compliance failures. A licensing compliance failure - particularly one involving money laundering or identity fraud - is expected to result in immediate license revocation.
The Market Opportunity: Why This Matters Now
The UAE gaming market is at an inflection point. Several factors make 2026 the critical window for market entry:
Scarcity of licenses. With a maximum of one B2C online gaming license per emirate, and most industry observers expecting only two or three emirates to participate, the total number of online operator licenses that will ever exist in the UAE is likely in single digits. The first mover position is genuinely limited.
B2B first-mover advantage. The GCGRA has consistently licensed B2B vendors ahead of expanding B2C access. Suppliers with a GCGRA vendor license are pre-positioned to serve each new B2C operator as licenses are issued. Over fifteen vendor licenses have been granted - but the market is still early.
FATF removal. In July 2025, the UAE was removed from the FATF grey list. This has substantially reduced banking and correspondent banking friction for UAE-based entities, making the business case for a UAE presence more compelling for international gaming operators.
Ras Al Khaimah as the anchor. Wynn’s USD 5 billion integrated resort on Al Marjan Island is the physical anchor of the UAE gaming market. Its expected opening in 2027 will drive significant tourist volume and media attention - and create substantial demand for the B2B ecosystem around it.
Regulatory credibility. The GCGRA is led by veterans of the New Jersey and Nevada regulatory systems, signed an MOU with New Jersey gaming regulators in April 2025, and has partnered with Gaming Laboratories International for technical standards. This gives UAE licenses genuine international credibility that a new emerging-market regulator would not typically have.
The UAE gaming market is at an inflection point. Several factors make 2026 the critical window for market entry:
Scarcity of licenses. With a maximum of one B2C online gaming license per emirate, and most industry observers expecting only two or three emirates to participate, the total number of online operator licenses that will ever exist in the UAE is likely in single digits. The first mover position is genuinely limited.
B2B first-mover advantage. The GCGRA has consistently licensed B2B vendors ahead of expanding B2C access. Suppliers with a GCGRA vendor license are pre-positioned to serve each new B2C operator as licenses are issued. Over fifteen vendor licenses have been granted - but the market is still early.
FATF removal. In July 2025, the UAE was removed from the FATF grey list. This has substantially reduced banking and correspondent banking friction for UAE-based entities, making the business case for a UAE presence more compelling for international gaming operators.
Ras Al Khaimah as the anchor. Wynn’s USD 5 billion integrated resort on Al Marjan Island is the physical anchor of the UAE gaming market. Its expected opening in 2027 will drive significant tourist volume and media attention - and create substantial demand for the B2B ecosystem around it.
Regulatory credibility. The GCGRA is led by veterans of the New Jersey and Nevada regulatory systems, signed an MOU with New Jersey gaming regulators in April 2025, and has partnered with Gaming Laboratories International for technical standards. This gives UAE licenses genuine international credibility that a new emerging-market regulator would not typically have.
What to Prepare Before Applying
Based on the GCGRA’s published requirements and what can be observed from the licensing process to date, operators and vendors entering the UAE gaming market should prepare the following before submitting an application:
1. UAE entity structure - a properly incorporated UAE legal entity with clean UBO documentation and no adverse regulatory history
2. Business plan - a detailed operational and financial plan covering the proposed gaming activities, target market, revenue model, and UAE market strategy
3. Compliance framework - a complete AML/CFT framework documented and ready for regulatory review, including policies, procedures, risk assessments, and reporting protocols
4. Key personnel - senior management with demonstrable regulated gaming experience, including a qualified compliance officer and MLRO capable of meeting the GCGRA’s fit and proper standards
5. Technical certification - for operators, RNG certification and security testing from a GCGRA-approved laboratory; for vendors, documentation of system integrity and data protection controls
6. Responsible gaming program - a complete player protection framework covering age verification, deposit limits, self-exclusion, and harm prevention
Incomplete applications are the primary cause of delays. Arriving at the GCGRA intake process with a complete, well-documented package signals operational maturity and significantly improves the credibility of your application.
Based on the GCGRA’s published requirements and what can be observed from the licensing process to date, operators and vendors entering the UAE gaming market should prepare the following before submitting an application:
1. UAE entity structure - a properly incorporated UAE legal entity with clean UBO documentation and no adverse regulatory history
2. Business plan - a detailed operational and financial plan covering the proposed gaming activities, target market, revenue model, and UAE market strategy
3. Compliance framework - a complete AML/CFT framework documented and ready for regulatory review, including policies, procedures, risk assessments, and reporting protocols
4. Key personnel - senior management with demonstrable regulated gaming experience, including a qualified compliance officer and MLRO capable of meeting the GCGRA’s fit and proper standards
5. Technical certification - for operators, RNG certification and security testing from a GCGRA-approved laboratory; for vendors, documentation of system integrity and data protection controls
6. Responsible gaming program - a complete player protection framework covering age verification, deposit limits, self-exclusion, and harm prevention
Incomplete applications are the primary cause of delays. Arriving at the GCGRA intake process with a complete, well-documented package signals operational maturity and significantly improves the credibility of your application.
How AML Zone Supports Gaming Market Entrants
AML Zone advises gaming operators, iGaming vendors, payment providers, and key persons on the compliance requirements for GCGRA licensing and ongoing regulatory obligations in the UAE.
Our services for gaming businesses include:
The UAE gaming market will reward early movers who arrive prepared. Those who treat compliance as an afterthought will find the GCGRA’s enforcement posture leaves little room for correction after the fact.
AML Zone advises gaming operators, iGaming vendors, payment providers, and key persons on the compliance requirements for GCGRA licensing and ongoing regulatory obligations in the UAE.
Our services for gaming businesses include:
- GCGRA licensing strategy and application support - structuring your application, preparing compliance documentation, and advising on regulatory positioning
- AML/CFT framework design for gaming operators - full policy and procedure development aligned with Federal Decree-Law No. 10 of 2025, FATF Recommendation 22, and GCGRA expectations
- MLRO and compliance officer support - providing qualified, experienced compliance leadership on a retained or interim basis
- KYC and CDD framework design - building customer onboarding, identity verification, and enhanced due diligence processes tailored to the UAE gaming market
- Ongoing compliance retainer - regulatory monitoring, AML audit preparation, goAML reporting support, and license renewal advisory
The UAE gaming market will reward early movers who arrive prepared. Those who treat compliance as an afterthought will find the GCGRA’s enforcement posture leaves little room for correction after the fact.
This article is provided for general informational purposes only and does not constitute legal or regulatory advice. Businesses should seek professional advice tailored to their specific circumstances.