How to Open an Online Casino in 2026: Steps, Costs and Timeline

Plan on four to nine months and somewhere between €150,000 and €500,000 before your first real-money bet. Those are typical ranges, not promises: a white-label brand on a Curaçao licence lands at the bottom of both, a turnkey build aimed at Malta near the top, and a custom platform past both. The spread comes down to the sequence of decisions you make in the first eight weeks, and how many you get right the first time.

This guide is for investors and founders who want the actual roadmap: what each step costs, how long it takes, who does it, and what has to be true before you accept a deposit. It closes with the pre-launch sign-off list, because a launch plan without one is only half a plan.

What it costs and how long it takes

Three delivery models cover almost every launch, and the one you pick sets the budget for the rest.

A white-label casino rents a finished platform, usually under the provider's licence. Typical setup runs €20,000 to €60,000, plus a revenue share that commonly lands between 30% and 50% of GGR in the first years. Time to market: 4 to 8 weeks once the contract's signed. Best for a first brand or a market test.

A turnkey casino licenses the software and runs it under your own licence and entity. Setup is typically €80,000 to €250,000, with lower ongoing fees and full control of the brand, data and payments. Time to market: 3 to 6 months after the licence is issued. Best for teams with market experience and capital.

A custom build starts around €500,000 and 12 to 18 months and only makes sense for groups already running several brands. White-label vs turnkey: real costs and hidden fees works through the numbers in detail.

All in, a compliant white-label launch on an offshore licence runs about €200,000, and a turnkey launch with a serious first-quarter marketing plan €350,000 to €500,000. Much below €200,000 usually means compliance's been skipped or the provider's taking 40% or more of GGR.

The nine steps from licence choice to go-live

Each step lists a typical time and cost. Steps 2 to 6 run in parallel, and the critical path is usually whichever track you started last.

1. Pick the model and the first market. Decide where your first 1,000 players will come from before anything else: the market drives the licence, the licence drives the payment options, and both drive the platform shortlist. Write down the top three countries, their languages, payment methods and advertising rules. Time: 1 to 2 weeks. Cost: your own hours, or €5,000 to €15,000 for a market study.

1. Choose the licence and start the application. The licence decides which markets you can serve, which acquirers will take you and how studios see you. The new Curaçao Gaming Authority regime issues direct licences with tighter AML and reporting duties than the old master-licence model; budget roughly €25,000 to €40,000 for year one including the local company and advisors, and 2 to 4 months in practice (approximate). Anjouan is cheaper and faster, typically €15,000 to €20,000 and a few weeks, but carries less weight with banks. The Malta Gaming Authority charges a €5,000 application fee plus a fixed annual licence fee starting at €25,000 and a GGR-based compliance contribution; expect 4 to 6 months and a full key-function team. Isle of Man sits close to Malta on cost and time. The UK Gambling Commission is the strictest and rarely a sensible first licence: 6 to 12 months and £80,000 or more in fees and compliance work. The offshore licensing comparison lines them up. Time: 3 weeks to 6 months by regulator. Cost: €15,000 to €80,000 for year one.

1. Incorporate, open accounts and appoint key people. Every licence needs a legal entity acceptable to the regulator, a corporate bank account (often harder to open than the licence itself) and named people behind it. Malta and the UK require a Money Laundering Reporting Officer before the first deposit; most regulators want segregated player funds. Have an iGaming lawyer write the terms, privacy policy and affiliate agreement now, not the week before launch; €3,000 to €8,000 is cheap insurance. Time: 4 to 8 weeks, running alongside the licence. Cost: €10,000 to €25,000 including legal.

1. Sign the platform provider. The platform runs accounts, wallet, bonus engine, game integration, payment routing, reporting and CRM, so it's the decision that costs most to reverse. iGamingHub tracks launch timelines across the platform catalog: SoftGamings lists a white-label window of 1 to 8 weeks on a fixed-fee model, NuxGame offers both white-label and turnkey at 3 to 8 weeks on revenue share, Slotegrator quotes 4 to 10 weeks for white-label on fixed fees, Softswiss runs turnkey projects in 4 to 12 weeks on a hybrid model, and GR8 Tech plans 8 to 16 weeks for a turnkey build. Get the SLA in writing (uptime, penalties, how downtime's measured), check which licences the provider has gone live under, and confirm whether KYC, AML and RG tools are included. How to choose a platform provider has the full criteria list. Time: 2 to 4 weeks to select, 1 to 16 to deliver. Cost: €20,000 to €60,000 setup for white-label, €80,000 to €250,000 for turnkey.

1. Build the game lobby and clear certification. Slots carry 60% to 70% of GGR at a typical casino and live dealer 20% to 30%, so launch with 1,000 to 3,000 slots from tier-one studios plus one live supplier. An aggregator gets you hundreds of studios through one integration; direct deals only pay off at volume. Then game certification: regulated markets require every game and the RNG to be tested by an approved lab such as GLI or iTech Labs, and a studio's certificate only covers the jurisdictions it was issued for. Check coverage against your licence before you switch a game on. Time: 3 to 6 weeks for integration, 4 to 12 weeks for any fresh certification. Cost: content's usually bundled into the platform's revenue share; certification runs from a few thousand euros per game to €30,000 or more for a platform audit (approximate).

1. Set up payments. Acquiring banks class gambling as high-risk, so mainstream processors are out and specialist acquirers charge 3% to 5% against 1.5% for normal e-commerce. Expect a rolling reserve of 5% to 10% held for around 180 days, so model that into working capital. Launch with two acquirers, two e-wallets, the local methods your first market runs on (PIX in Brazil, UPI in India, bank transfers across LatAm) and crypto rails if your licence allows them; the high-risk acquiring guide and the crypto casino guide cover both tracks. Contracted isn't live: push a real deposit and withdrawal through every method before launch. Time: 6 to 12 weeks; acquirer onboarding is the most common cause of a slipped date. Cost: €15,000 to €40,000 setup plus 3% to 8% per transaction.

1. Wire up KYC, AML and responsible gambling. Know Your Customer checks at registration or first withdrawal, enhanced due diligence for high-value players, transaction monitoring with documented thresholds, a suspicious activity report procedure, and the full RG set: deposit, loss and session limits, reality checks, cooling-off and self-exclusion. If your licence requires a national register, integrate it now: GAMSTOP in the UK, CRUKS in the Netherlands, Spelpaus in Sweden. Time: 3 to 6 weeks. Cost: €5,000 setup plus €1,500 to €5,000 a month for verification volume.

1. Prepare marketing inside the rules. Affiliates bring 40% to 60% of new depositors at most operators, so the programme, tracking and terms need to be live before the first link goes out; typical deals are €100 to €300 CPA or 25% to 45% of NGR. Have a lawyer read the welcome bonus terms (wagering, max win, expiry, game restrictions) and confirm the platform enforces them. Google and Meta gate gambling ads by licence and country; check each channel per market. Time: 4 to 8 weeks. Cost: €50,000 to €150,000 for the first three months of acquisition.

1. Load test, smoke test, sign off, go live. Load test at five times expected peak concurrency; one streamer mention can send 5,000 players at once. Benchmark mobile speed on a three-year-old Android on 4G and test backup and restore. One week out, run the legal, compliance, payments and technical sections of the checklist below; every red item blocks launch. Three days out, run content and marketing. The day before, walk a fresh account through the full journey: register, verify, deposit, take the bonus, play a slot and a live table, withdraw, receive. On launch day watch payment acceptance, registration conversion and chat queue depth live, with platform and acquirer contacts on standby. Time: 2 to 3 weeks. Cost: €5,000 to €15,000 for load testing and QA, or bundled with the platform.

Stages, timelines, costs and owners

All figures are typical ranges, not quotes; the platform and licence lines swing the most.

Go-live checklist

Work through every line before the first real-money transaction. Red items block launch; yellow items get an owner, a deadline and a weekly review.

Licence and legal

• Licence issued, not applied for, covering every product you'll offer
• Licence number and regulator displayed as the regulator requires, with a verification link where mandatory
• T&Cs, privacy policy and affiliate agreement reviewed by an iGaming lawyer
• RG page describes only tools that actually work
• Cookie consent compliant; age check blocks underage dates of birth rather than warning
• Geoblocking tested by VPN from every restricted country
• Domain owned by your entity, trademark filed in the main markets

Compliance and KYC

• KYC tested with passport, ID card and driving licence, on desktop and Android, including poor scans; vendor live, not just contracted
• AML thresholds defined, documented and switched on; SAR procedure written (who receives, who files, by when)
• MLRO appointed where required; player funds segregated where required
• Self-exclusion tested by re-registering with the same email, device and card; all three blocked; national register integrated where required
• Every RG tool tested; limit reductions apply instantly, increases wait the cooling-off period
• Support team trained on RG escalation

Payments

• At least two acquirers live, with a real deposit and withdrawal through each and every method shown on the cashier
• Withdrawal flow tested end to end through the KYC trigger, and timed against the advertised SLA
• Anti-fraud rules set: velocity limits, one card per account, multi-account detection
• Chargeback process documented; currency conversion fees disclosed before deposit
• Bonus flow tested from credit to wagering to withdrawal, with the wagering gate confirmed connected to withdrawals

Technical and content

• SSL valid for every subdomain; load test passed at five times expected peak
• Mobile Core Web Vitals green on 4G; games load on a mid-range Android
• RNG and game certificates cover your licence jurisdiction
• Backup restore tested, backups encrypted, key stored separately; platform SLA signed
• Every game category has live games behind it; rules in the player's language; RTP shown where required
• Live casino tested at peak hours for table availability

Marketing and operations

• Bonus terms legally reviewed; bonus-abuse and device-fingerprint detection on
• Affiliate tracking tested from click to registration to FTD to commission
• Transactional emails land in the inbox, not spam
• Support channels tested with realistic queries and timed
• Analytics reconciled against manual calculation on day one

Common mistakes

Choosing the licence before the market. Operators pick Curaçao for speed, then find their first market's banks won't touch it, or pick Malta for prestige when their players sit in a market Malta doesn't cover. Start from the market and work backwards.

Confusing "contracted" with "live". The biggest cause of a slipped launch is a payment provider or KYC vendor that signed but never finished onboarding. If real money hasn't gone through it, it isn't ready.

Skipping the bonus wagering gate test. One operator lost about €23,000 in its first weekend because the welcome bonus wagering requirement wasn't connected to the withdrawal check. The provider said it was configured correctly. Test it yourself.

Underfunding month four. The rolling reserve, first chargebacks and affiliate invoices land before revenue does. Keep at least €50,000 beyond the launch budget.

Launching with a broken self-exclusion path. Blocking the email but not the device or card is a regulatory failure from day one. The re-registration test takes twenty minutes.

Launching on a Friday. Your platform, acquirer and KYC contacts are hardest to reach exactly when you need them. Launch on a Tuesday.