iGaming in Asia 2026: Markets, Bans, Regulators and Where to Host

As of September 2026, the two markets that anchored most Asia entry plans two years ago are closed in the form operators knew them. The Philippines shut its offshore licensing regime (POGO) at the end of 2024 after President Marcos announced the ban in July 2024. India, the market everyone modelled on population, prohibited every online money game from 1 May 2026 under the Promotion and Regulation of Online Gaming Act, 2025 (PROGA) and its April 2026 rules. Thailand's casino bill stalled in 2025. What's left is a region where the regulated openings are small and domestic, the grey markets are large and mobile, and where you host matters as much as which licence you hold.

Key facts

• 22 July 2024: President Marcos announces the end of Philippine Offshore Gaming Operators in his State of the Nation Address; Executive Order 74 set the wind-down deadline at 31 December 2024. PAGCOR still licenses domestic online gaming (e-games and PIGO) for Philippine residents.
• 1 May 2026: India's PROGA and the Promotion and Regulation of Online Gaming Rules, 2026 (notified by MeitY on 22 April 2026) come into force, prohibiting all online money games, skill-based or not, with up to 3 years' imprisonment and INR 1 crore fines for operators.
• 2025: Thailand's Entertainment Complex bill, cleared by cabinet in January 2025, was pulled from the House agenda in July 2025 and hasn't returned; no regulated casino or online framework exists in Thailand as of this refresh.
• 2024: Macau's six concessionaires reported MOP 226.8 billion (about USD 28 billion) in casino GGR under the ten-year concessions that started on 1 January 2023; online gambling remains illegal in Macau.
• Asia-wide: iGaming GGR across all formats is still estimated at USD 100 billion or more a year (industry estimates, approximate); most grey-market volume comes through agent networks, not affiliates.

Philippines and PAGCOR after the POGO ban

The Philippine Amusement and Gaming Corporation ran two online regimes: POGO licences for operators serving players abroad, and PIGO plus e-games licences for operators serving residents. The POGO half is gone. The ban was announced on 22 July 2024, formalised by Executive Order 74 in November 2024, and took effect on 31 December 2024. The service-provider hubs and their offshore-facing workforce were told to leave, and deportations ran through 2025.

The domestic half is alive and, by PAGCOR's own reporting, growing. E-games licences (online casino, e-bingo and sports betting for residents) became the largest contributor to PAGCOR's regulated GGR during 2025, the same year the regulator pulled outdoor gambling ads and the central bank began drafting e-wallet gambling limits. Senators filed bills in mid-2025 to ban or restrict domestic online gambling; iGamingHub couldn't verify any being enacted as of September 2026. Regulated, but politically exposed.

The Cagayan Economic Zone Authority still exists as a separate licensing body in northern Luzon. Its interactive gaming licences historically served Chinese-facing operators; it's the one Philippine licence still pitched offshore, and whether its scope survives the national ban is a question for counsel before you pay a fee.

India after PROGA

India was the region's largest grey market until 1 May 2026. The Promotion and Regulation of Online Gaming Act, 2025, passed by Parliament in August 2025, and the Rules notified by the Ministry of Electronics and Information Technology on 22 April 2026 prohibit "online money games", defined as any game where a player pays a fee or deposits money expecting a monetary return, whether or not skill dominates. That clause ended the skill-game carve-out fantasy sports, rummy and poker had relied on for decades. Stake-free social games and esports get a registration path under the new Online Gaming Authority of India (OGAI), an attached office of MeitY.

The penalties are criminal. Offering a prohibited game carries up to 3 years' imprisonment and a fine of up to INR 1 crore (about USD 120,000); repeat offences carry up to 5 years and INR 2 crore with mandatory minimums, and the offences are cognisable and non-bailable. Advertising carries up to 2 years and INR 50 lakh. OGAI can order banks and payment intermediaries to block flows, and the Act covers "both domestic and offshore platforms accessible within India". Constitutional challenges are consolidated before the Supreme Court of India; the Act stays in force while they're pending.

For an offshore operator the answer is binary: geofence India at the IP, payment and marketing layers, drop UPI and INR rails, and cut Indian affiliates, who now carry direct liability. The cricket-first products built for India are being redirected to Bangladesh, Sri Lanka and the Gulf diaspora, a far smaller pool.

Japan and Korea

Japan's regulated opening is land-based and slow. The Osaka integrated resort was certified in April 2023 and is scheduled to open around 2030; a national Casino Regulatory Commission exists to license it. Online casino play by residents is illegal, and in 2025 the Diet amended the gambling addiction countermeasures law to ban promoting or linking to online casinos, which cut the affiliate channel feeding offshore brands. Japanese banks block gambling merchant codes, so what offshore flow remains runs on crypto and agents. Japanese players are still among the highest-value in the world per deposit; the exposure for anyone serving them from abroad has only grown.

South Korea is stricter. Residents may only gamble in the Kangwon Land casino, Sports Toto and the state lotteries; every other casino serves foreigners only. Prosecutors go after foreign operators and their local agents. Both belong on a default block list unless local counsel says otherwise.

Southeast Asia grey markets

Outside the Philippines, Southeast Asia has no regulated online market for residents and none on a visible timeline; each market below is a grey market.

Thailand made the loudest attempt. The cabinet approved the Entertainment Complex bill in January 2025 (casinos inside resort complexes, not online); it was withdrawn from the House agenda in July 2025 during the change of government and has stayed shelved. Gambling remains illegal apart from the state lottery and horse racing; football betting runs on PromptPay, TrueMoney and crypto.

Vietnam permits casinos for foreigners plus a limited pilot for locals; online gambling is illegal and football betting dominates. Indonesia prohibits gambling outright and its communications ministry blocks gambling domains by the million; USDT is the working deposit method. Malaysia lets non-Muslims gamble at Genting's monopoly; online casinos serving Malaysians are unlicensed.

In all four the acquisition channel is the agent hierarchy: master agents recruit sub-agents, sub-agents recruit players through Telegram, WeChat, Zalo and Line groups, and agents handle deposits, credit and first-line disputes for 30 to 50 percent of the margin on their players. An agent-management module is the deciding platform feature here, ahead of anything in the lobby. The hyper-localisation guide covers language, payment and content work per market.

Macau and Hong Kong context

Macau is the largest land-based casino market in the world and closed to online play. The six concessions run for ten years from 1 January 2023; the Gaming Inspection and Coordination Bureau (DICJ) publishes monthly GGR, which totalled MOP 226.8 billion in 2024. Macau's gaming law prohibits online gambling and the concessionaires run no online products. The relevance is the player base: high-value players across Guangdong, Hong Kong and Macau who know baccarat and increasingly play it offshore on their phones.

Hong Kong is a statutory monopoly. The Hong Kong Jockey Club holds the only licences for horse racing, football and, since 2025, basketball betting; everything else is an offence under the Gambling Ordinance. Enforcement targets bookmakers and promoters, not players, so Hong Kong keeps showing up as a high-value grey market. Mainland China is a hard no: illegal, enforced, with payment blocking and cross-border prosecutions.

Hosting and infrastructure for Asia-facing operators

Where the servers sit. Singapore is the default: AWS ap-southeast-1, Google Cloud asia-southeast1 and Azure Southeast Asia are all there, submarine cables from every SEA capital land there, and Singapore's own online gambling ban targets operators serving Singapore residents, not infrastructure. Hong Kong (AWS ap-east-1, GCP asia-east2) is the second choice for Greater China and Vietnam traffic. Tokyo and Seoul regions exist, but hosting a grey-market casino in a jurisdiction that prosecutes it is a bad trade for a few milliseconds. Alibaba Cloud has regions in Manila, Bangkok, Jakarta and Kuala Lumpur, useful for edge caching more than as a primary.

Latency to expect. From Singapore, round trips run roughly 20 to 35 ms to Jakarta, Kuala Lumpur, Bangkok and Ho Chi Minh City, 45 to 60 ms to Manila, 55 to 70 ms to Mumbai, and 65 to 80 ms to Tokyo, Seoul and Hong Kong (approximate; measure your own). The last mile matters more: players in Indonesia, Vietnam and the Philippines reach you over 4G with high jitter, so time to interactive on a mid-range Android phone is the metric to budget for, not ping. Live dealer is the sensitive product; a studio in Manila or Cebu streaming to a Singapore-hosted lobby is a common, workable setup. The mobile-first architecture article covers the front end.

CDN and DDoS. Asia-facing gambling sites get hit before big football fixtures and the Lunar New Year peak; volumetric attacks with ransom notes are routine. Run always-on scrubbing (Cloudflare, Akamai and the cloud providers' own shields cover the region), hide the origin IP behind the CDN, and put the API and static front end on separate origins. Mainland China is unreachable through a normal CDN without an ICP licence, which a gambling operator won't get.

Licence rules on where you host. This is where hosting stops being an engineering choice. PAGCOR's domestic e-games regime requires the licensed operation and its gaming system to be in the Philippines and connected to PAGCOR's monitoring and audit infrastructure; check the current regulatory manual for the exact server-location clauses before you architect around them. The Isle of Man historically required primary gaming servers on the island (relaxed through its network services licence). Curaçao's 2024 regime imposes local key persons and reporting, not a server location, which is why Curaçao-licensed platforms run from Singapore. Anjouan and Kahnawake have no practical server-location rule. If a regulated Asian market opens to offshore hosting again, expect a Philippine-style local-presence condition, not a Malta-style passport.

What the catalog shows. iGamingHub tracks 12 platforms serving Asia out of 44 in the catalog. SoftSwiss lists Europe, LatAm and Asia with MGA, Curaçao, ONJN, Kahnawake and Brazil licences, a 99.999% uptime SLA and 4 to 12 weeks to launch. EveryMatrix lists Europe, Asia, LatAm and Africa with MGA, Curaçao, Denmark, Argentina and Brazil, a 99.95% SLA and 6 to 15 weeks. NuxGame is the quickest of the Asia-facing set at 3 to 8 weeks, with Curaçao, Anjouan and Isle of Man among 14 listed licences and a 99.9% SLA. Digitain lists Europe and Asia at 10 to 24 weeks. All four list crypto support, a requirement rather than a feature for Indonesia, Japan and mainland-adjacent traffic; the MiCA compliance article covers what that means if your entity sits in the EU.

Payments across the region

There's no regional rail. UPI is off the table since May 2026. The Philippines runs on GCash and Maya, Vietnam on MoMo and ZaloPay, Thailand on PromptPay and TrueMoney, Indonesia on GoPay and OVO, Malaysia on bank transfer and Touch 'n Go. Mobile money wallets are the deposit layer almost everywhere, USDT on Tron is the settlement layer wherever banks block gambling, and agents collect cash where neither works. That last part is what European boards underestimate: the operator never touches the fiat, but the AML obligation under its licence doesn't go away.

Key numbers

Milestones ahead

• Supreme Court of India on PROGA. The consolidated challenge is the only event that could reopen India; on the usual 12 to 24 month timeline a judgment lands in 2027 or 2028. Until then the ban stands.
• Philippine Senate and central bank. Whether any mid-2025 bill to restrict domestic online gambling moves, and whether the Bangko Sentral finalises e-wallet gambling limits. Either changes the region's only regulated online market.
• Thailand. No revived casino bill as of September 2026; any new draft would be land-based and a year or more from a licence.
• Japan. Osaka IR toward a 2030 opening; enforcement of the 2025 promotion ban against affiliates and streamers.
• Macau and Hong Kong. DICJ monthly GGR as the demand signal; any HKJC expansion beyond basketball.
• Hosting. New AWS, Google and Alibaba regions in the Philippines, Thailand and Malaysia will shift SEA latency; check the providers' region pages for the current list.

Primary sources

• Philippine Amusement and Gaming Corporation (PAGCOR), e-games and PIGO rules, POGO wind-down notices.
• Cagayan Economic Zone Authority (CEZA), interactive gaming licensing.
• Ministry of Electronics and Information Technology (MeitY), Promotion and Regulation of Online Gaming Act, 2025 and the 2026 Rules.
• Supreme Court of India, consolidated challenges to PROGA.
• Gaming Inspection and Coordination Bureau, Macau (DICJ), monthly gross revenue statistics.
• Platform facts come from the iGamingHub provider catalog, as listed by the vendors.