Europe · ES
Spain
Online gambling in Spain is licensed by the Directorate General for the Regulation of Gambling (DGOJ); Banco de España and the CNMV supervise financial services.
At a glance
- Status
- EU member state
- Region
- Europe
- Regulated sectors
- GamingPaymentsCryptoInvestment
- Authorities
- DGOJ · Banco de España · CNMV · SEPBLAC
- Licensing routes
- 4
- See also
- EU / MiCA
Overview
The framework
Spain regulates online gambling at national level, with general licences for categories of games and singular licences for specific game types, granted by the Directorate General for the Regulation of Gambling (DGOJ).
Banco de España authorises payment and e-money institutions. The National Securities Market Commission (CNMV) supervises investment services and is the competent authority for crypto-asset service providers under MiCA. We plan the DGOJ licence set and prepare each application.
Authorities
Who regulates what
- Directorate General for the Regulation of Gambling (DGOJ)
- Licensing and supervision of online gambling at national level.
- Banco de España
- Banks, payment and e-money institutions.
- National Securities Market Commission (CNMV)
- Investment services, markets and crypto-asset services under MiCA.
- SEPBLAC
- Financial intelligence unit and AML/CFT supervisor.
Regimes
Licensing routes
General and singular gambling licences
DGOJ licences for categories of games and for specific game types.
Sectors: Gaming
Payment / e-money institution
Authorisation by Banco de España, passportable across the EEA.
Sectors: Payments
Investment firm
CNMV authorisation for investment services.
Sectors: Investment
MiCA CASP authorisation
Crypto-asset services authorised by the CNMV.
Sectors: Crypto
Our Regulatory & Licensing practice prepares the applications for these routes and manages them through to the regulator's decision.
Considerations
What to weigh up
- Plan marketing around the strict national rules on gambling advertising.
- Financial licences benefit from EU passporting; gambling licences do not.
This overview is general information, summarised at a high level. Requirements change and depend on the specific activity; seek advice on your circumstances before acting.
Industries
Relevant industries
- iGaming & GamingB2C operators, B2B suppliers, platforms, aggregators and affiliates.
- Fintech & PaymentsPayment and e-money institutions, PSPs and acquirers, payment facilitators and embedded finance.
- Crypto & Digital AssetsCASPs and VASPs, exchanges, custodians, wallets, token projects and crypto payments.
- Forex & InvestmentsForex and CFD brokers, investment firms, trading and investment platforms.
Across jurisdictions
Cross-jurisdiction capabilities
Services we support across the jurisdictions in our directory, described once on their own pages. We deliver each to the requirements that apply locally, coordinating local specialists where local law, registration, representation or professional requirements require it.
- Privacy & Data ProtectionExternal DPO services and working privacy programmes: GDPR and global privacy laws, DPIAs, data mapping, transfers and ISO/IEC 27701.
- Information Security & CybersecurityFractional CISO support, ISMS and security programmes, certification and audit readiness, DORA, NIS2 and customer assurance for enterprise sales.
- AI GovernanceGovernance that lets AI adoption scale: EU AI Act readiness, ISO/IEC 42001 management systems, AI risk and impact assessments, and vendor risk.
- AML & Financial Crime ComplianceAML/CFT programmes, MLRO-as-a-Service, independent AML/CFT audits, risk assessments, monitoring, sanctions and inspection support.
- IP Registration & ProtectionTrademark and patent registration, copyright, domain disputes and enforcement that protect your brand, software and content across markets.
- Legal OpinionsRegulatory, business model, perimeter, payment, gaming, crypto-asset and cross-border opinions that answer what banks and investors ask.
- Bank Account OpeningHelp organising your banking with banks and EMIs that fit your model, from the onboarding file and account structure to periodic reviews.
- Merchant Account / Acquiring SetupMerchant applications, acquiring structure and negotiated terms for online and high-risk merchants that need stable card and local payment acceptance.
Support
Spain: how we support your business
- Regulatory & LicensingStrategy, applications and regulator engagement for the gaming, payments, crypto and investment routes listed above.
- Corporate StructuringGroup architecture, incorporation, substance and governance built around your licences, banking and investors.
- Market Entry & Regulatory StrategyMarket prioritisation, regulatory roadmaps and launch readiness that let you expand into new jurisdictions in the right order.
- Information Security & CybersecurityDORA, NIS2 and the information security obligations that apply under EU law.
Spain: the right fit for your business?
We look at your product, target clients and banking needs to see whether this jurisdiction fits or another would serve you better, then send a written proposal with scope, timetable and fee.