Brazil SPA Licensing Guide 2026: 18 Months In, Real Costs and Timeline

• The federal SPA license costs BRL 30M for five years and up to three brands — but the realistic all-in launch budget runs BRL 50M–90M once you add matching share capital, reserves, certification, and marketing.
• The process takes 9 to 14 months from decision to first legal bet. Anyone quoting 90 days is either wrong or selling you a sub-license.
• PIX is effectively mandatory — credit cards and cash are barred for gambling deposits, and slow withdrawals are the market's single biggest player complaint.
• Brazil's tax burden goes well beyond the 12% GGR headline: stack in corporate taxes and the player-side 15% levy before you model your margins.

BRL 30 million. That's the federal license fee an operator pays just to legally take a single bet in Brazil, and it buys you the right to run up to three brands for five years. Eighteen months after the regulated market switched on in January 2025, the picture's clear: Brazil isn't a market you walk into casually. It's a market you capitalize for, plan 12 months ahead for, and either commit to fully or skip.

The numbers justify the pain. Brazil's regulated betting and online gaming market is tracking toward roughly BRL 30 billion in annual gross gaming revenue, making it the largest regulated market in Latin America and one of the three or four biggest in the world (see Statista's Brazil online gambling data for the trajectory). The Secretaria de Prêmios e Apostas (SPA), the federal body under the Ministry of Finance that runs the whole thing, granted its first batch of licenses at the end of 2024 and has been processing, auditing, and occasionally suspending operators ever since.

Here's what the licensing process actually costs, how long it really takes, and why several well-funded operators still got rejected.

The federal license: what BRL 30M actually buys

The headline cost is the outorga, the authorization fee: BRL 30 million, paid once, valid for five years. For that fee you get a federal license covering both fixed-odds sports betting (apostas de quota fixa) and online casino. You can operate up to three commercial brands under one license, which works out to BRL 10 million per brand if you max it out. Most operators do plan for three from day one, because adding brands later means buying another full license.

That fee is non-refundable and it's due regardless of whether you ever turn a profit. So the math only works if you're confident in serious volume. An operator projecting BRL 100 million in annual GGR can absorb a BRL 30M license over five years comfortably. One projecting BRL 20M GGR is lighting money on fire.

On top of the federal track, there's a state and municipal layer. São Paulo, Rio de Janeiro, Paraná, and others have stood up their own state lottery licensing regimes, and Loterj (Rio's state lottery) famously fought a legal battle over whether its licensees could accept bets nationwide. The Supreme Federal Court (STF) eventually reined that in, confirming state licenses are geographically limited to the issuing state. For most international operators, the federal SPA license is the only route that makes sense. State licenses are a niche play.

You can read the official rules directly on the SPA's portal at gov.br, which publishes the regulatory ordinances (portarias) and the list of authorized operators.

Capital requirements and the reserve nobody talks about

The BRL 30M fee isn't your only capital commitment. The Brazilian entity has to be incorporated locally, with at least 20% Brazilian ownership in the operating company, and it needs to show minimum share capital of BRL 30 million as well. So before you even count marketing, you're looking at the license fee plus matching paid-in capital.

Then there's the financial reserve. Operators must maintain a reserve to cover player balances and prize payouts, scaled to volume, parked in a Brazilian financial institution. This catches first-timers off guard. You can't run player funds through a treasury in Malta and settle into Brazil monthly. The money has to sit domestically, ring-fenced.

Beyond the license fee and share capital, the other mandatory cost items are:

• Technical certification — accredited lab testing of your gambling platform, separate from any prior certification in another jurisdiction.
• Local server infrastructure — player and transaction data must be stored in Brazil; international cloud setups don't satisfy this requirement without significant reconfiguration.
• Responsible-gaming tools — deposit limits, self-exclusion, and player-protection features must be live before you take your first bet.
• Local incorporation and legal costs — notarization, registration, ongoing compliance filings, and local legal counsel add up quickly and run throughout the first year.

Stack it all together and the all-in cost of a serious Brazil launch lands between BRL 50M and BRL 90M depending on marketing ambition. Call it USD 9M to 16M to do it properly.

The tax stack: 12% GGR is just the start

The 12% GGR tax gets quoted everywhere as if it's the whole tax story. It isn't, and operators who modeled only that number got a nasty surprise.

Brazil's full tax burden on an operator stacks up like this:

The federal gaming tax is 12% of GGR. On top of that, the operator pays standard Brazilian corporate taxes: IRPJ (corporate income tax) and CSLL (social contribution), which together run around 34% on profit, plus PIS/COFINS on revenue. There's also a player-side tax: winnings above the income-tax exemption threshold are taxed at 15% in the player's hands, which affects player behavior and your effective payout perception.

Stack it up and the effective tax burden on a Brazilian operator is meaningfully heavier than the 12% sticker. Compare that to a market like Mexico, where the federal framework is older and the effective rates differ considerably. We broke down that contrast in our look at Mexico's market maturity in 2026, and the short version is that Brazil trades higher tax for far bigger regulated volume and legal certainty.

The lesson from 18 months in: build your P&L on the full tax stack, not the GGR headline. Operators who priced bonuses and CPA against a 12% assumption blew through margin inside two quarters. With acquisition costs climbing across every regulated market, that miscalculation is fatal, and we've tracked the wider squeeze in our piece on the player acquisition cost surge in 2026.

Realistic timeline: 9 to 14 months, not 90 days

Forget the "submit and launch" fantasy. From the moment you decide to enter Brazil to the day you take your first legal bet, plan for 9 to 14 months.

Operators who came in during the first 2024 wave with platforms already certified elsewhere still took the better part of a year. The ones who tried to shortcut certification, or whose ultimate beneficial owners couldn't pass the integrity check, stalled out completely.

If a consultant promises you a Brazil license in 90 days, they're either lying or they're selling you a sub-license under someone else's authorization, which is a different and riskier arrangement.

How to get a Brazil SPA license

1. Incorporate a Brazilian entity — Set up a local operating company with at least 20% Brazilian ownership. Budget 2 to 4 months for this step, especially if you're sourcing a local partner. Don't wait until this is complete before starting certification — run them in parallel where you can.
2. Inject minimum share capital — Deposit at least BRL 30M in paid-in capital into the Brazilian entity. This has to be in place before the SPA will approve your application, and it's separate from the license fee.
3. Certify your platform through an accredited lab — Submit your gambling platform for technical certification. Budget 2 to 5 months depending on the lab's queue and how clean your build is. If you're certified in another jurisdiction, plan for re-certification, not a rubber stamp.
4. Build compliant PIX payment infrastructure — Integrate account-matched PIX deposits and instant withdrawals before applying. SPA rules require that the player's deposit and withdrawal accounts match their registered identity, so your payment orchestration must enforce this at the platform level, not in back-office checks.
5. Prepare beneficial-ownership documentation — All shareholders and ultimate beneficial owners must pass source-of-funds and background vetting by the SPA. Gather full documentation well in advance — this is where well-funded applicants stall most often.
6. Submit the SPA application and pay the BRL 30M fee — File through the SPA portal at gov.br. The outorga fee is non-refundable and payable at submission. The SPA's own review then adds several more months.
7. Go live with all compliance infrastructure active — Data residency (Brazilian servers for player and transaction data), responsible-gaming tools, and AML controls must all be live on day one. The SPA has shown it will suspend licensed operators for post-launch compliance failures, not just pre-launch gaps.

PIX is not optional

In most markets, payments are a feature. In Brazil, payments are the market. PIX, the central bank's instant-payment rail, accounts for the overwhelming majority of deposits and withdrawals in Brazilian iGaming. If your platform can't do PIX deposits and, crucially, instant PIX withdrawals, you don't have a Brazilian product. You have a website Brazilians will abandon at the cashier. The Banco Central do Brasil's PIX statistics show why: it's the default way the country moves money.

The regulation actually mandates electronic transfers and bars certain payment methods (credit cards and cash are out for gambling deposits under SPA rules), which pushes nearly all volume onto PIX. Players expect withdrawals in seconds, not hours. An operator paying out in "up to 24 hours" gets buried in reviews and churns fast.

We went deep on the mechanics, the licensed-PSP requirements, and the withdrawal-speed arms race in PIX payments for Brazil iGaming. If you read one thing before drafting your Brazil launch plan, make it that. The single most common operational complaint from Brazilian players in 2025 wasn't game selection. It was slow PIX cashouts.

One more wrinkle: the SPA tightened anti-money-laundering rules around payments, requiring that the deposit and withdrawal account match the registered player (no third-party transfers). Your payment orchestration has to enforce that at the platform level, which is a real integration requirement, not a checkbox.

Localization beyond translation

Brazilian Portuguese isn't European Portuguese, and players notice instantly. But real localization for Brazil goes well past language. It means football-first sportsbook merchandising built around the Brasileirão and the Seleção, Carnival and regional promo calendars, customer support staffed in Brazilian hours and idiom, and game lobbies weighted toward the titles Brazilians actually play, crash games like Aviator above all.

Aviator deserves its own line. The Spribe crash title became a cultural phenomenon in Brazil, and any operator launching without a strong crash-game and instant-win section is leaving deposits on the table. Slots matter, live casino matters, but the Brazilian player's entry drug has been crash.

We covered why surface-level translation fails and what genuine market adaptation costs in hyper-localization for iGaming in 2026. Brazil is the case study that proves the thesis: the operators winning market share localized the product, the bonus structure, and the support, not just the copy.

Platform choices: who's actually delivering in Brazil

Your platform decision is more consequential in Brazil than almost anywhere, because the platform has to handle local certification, PIX orchestration, Portuguese-language player journeys, and the SPA's data-residency and reporting requirements. Three providers come up constantly in Brazil conversations.

SoftSwiss

SoftSwiss has been one of the most visible platform providers in the Brazilian regulated push, and for good reason. Its game-aggregation depth, established casino platform, and experience helping operators through new-market certifications make it a default shortlist entry for operators who want a proven turnkey or platform-plus setup. SoftSwiss has publicly leaned into Brazil with localized payment integrations and a sportsbook product to pair with casino. For an operator who wants one vendor handling casino, aggregation, and a chunk of the compliance plumbing, it's a strong candidate. The trade-off is the usual platform-provider one: you're tied to their roadmap and their commercial terms, and Brazil-specific customization can mean queueing behind their broader product priorities.

Salsa Technology

Salsa Technology is the Brazil-native option, and that matters here. Built in Latin America with a São Paulo footprint, Salsa understands PIX, local payment quirks, Brazilian Portuguese UX, and the regional content mix from the inside rather than as a market it's expanding into. For an operator whose Brazil play is the whole business rather than one market among many, Salsa's local-first positioning is a genuine edge. Its content aggregation and platform are tuned for exactly the crash-game-and-football audience that defines Brazil. The counterpoint: if your ambition is multi-market with Brazil as one node, a regional specialist may be less appealing than a global platform you can replicate across jurisdictions.

Soft2Bet

Soft2Bet brings a different angle, heavy on gamification and player engagement mechanics, with its retention-focused tooling that's earned attention in newer regulated markets. For operators competing on engagement and lifetime value in a market where acquisition costs are climbing fast, Soft2Bet's gamification layer is a real differentiator rather than marketing fluff. With Brazilian player-acquisition costs rising as the market crowds, owning retention is how you survive, and that's where Soft2Bet pitches itself. The question to ask is depth of local payment and certification support versus the bigger Brazil-focused players, so vet the PIX and compliance side carefully before signing.

The honest summary: SoftSwiss for proven breadth, Salsa Technology for local depth, Soft2Bet for engagement and retention. Most operators end up evaluating at least two of the three, and the right answer depends on whether Brazil is your whole strategy or one market in a portfolio. If you're weighing a build-versus-buy decision, our breakdown of white-label versus turnkey frames the same trade-off from the commercial angle.

Success stories and the ones that failed

The winners 18 months in share a profile: capitalized properly, certified early, PIX-fast, and football-native. The big international brands that already had Brazilian audiences from the pre-regulation grey-market years converted that recognition into licensed market share quickly. Bet365, the major Brazilian-facing brands, and a handful of well-funded operators took the bulk of the GGR. Brand equity built before regulation paid off enormously after it.

The failures cluster around predictable causes. Some operators were rejected at the SPA stage because shareholders or ultimate beneficial owners couldn't pass integrity and source-of-funds checks. Some never closed the capital gap and quietly withdrew applications. Several launched, underpriced the tax stack, and burned through reserves on unsustainable bonuses before the SPA's tighter advertising and responsible-gaming rules squeezed their funnel.

And the SPA has teeth. Through 2025 it blocked thousands of illegal betting domains and suspended or fined licensed operators for compliance breaches, including advertising violations and AML failures. This isn't a regulator that issues a license and looks away. Anatel and the Ministry of Finance have coordinated mass domain blocking against unlicensed sites, which is exactly what licensed operators wanted: enforcement that protects the people who paid BRL 30M to play by the rules.

Common rejection and suspension reasons

If you want to avoid the SPA's bad side, the recurring failure points are well documented:

• Beneficial-ownership and integrity check failures, the single most common hard stop.
• Insufficient or improperly documented share capital and reserves.
• Incomplete or failed technical certification from the accredited lab.
• Data residency gaps, player and transaction data not stored in Brazil.
• Payment non-compliance, especially third-party transfers and prohibited deposit methods.
• Advertising and responsible-gaming breaches post-launch, which trigger suspensions and fines rather than rejection.

Most of these are avoidable with proper preparation. None of them are negotiable after the fact.