Ontario Online Casino Market: Licensing Duties, Penalties and Compliance Costs

Ontario runs the only regulated open-market online casino regime in Canada, and it does so with a rulebook thick enough to stop a door. Since April 4, 2021, the Alcohol and Gaming Commission of Ontario (AGCO) and its operating arm iGaming Ontario (iGO) have licensed operators, collected fees and issued penalties under the Gaming Control Act, 1992. This page sets out what an Ontario online casino must do, what it costs, and what happens when it fails.

The numbers are not small. As of Q1 2025, iGO reported C$3.7 billion in total handle for the quarter across 47 regulated operators, with C$139.5 million in gaming revenue remitted to the province. The market crossed C$18 billion in cumulative handle since launch. Money at that scale attracts scrutiny, and the compliance apparatus around it is correspondingly heavy.

How Ontario Regulates Its Online Casino Market

Ontario's framework rests on two bodies. AGCO sets the standards, issues Registrar's Standards and enforces them. iGO, a subsidiary of the Ontario Lottery and Gaming Corporation, negotiates commercial terms with operators and collects the revenue share. Neither body tolerates informal arrangements; every operator serving Ontario residents must hold a registered Internet Gaming Operator (IGO) licence before a single wager is accepted.

Who issues the licence, and under what statute?

The AGCO issues Internet Gaming Operator registration under the Gaming Control Act, 1992, as amended by the Gaming Control (Internet Gaming) Regulation, 2019. Registration is not a licence to print money; it is a conditional permission tied to continuous compliance with the Registrar's Standards for Internet Gaming, first published in September 2021 and revised in 2023 and 2025. The Registrar may suspend or cancel registration at any time for cause, without a court order.

iGO handles the commercial layer separately. Operators sign an operating agreement with iGO covering revenue share, reporting cadence and market conduct obligations. The two documents, AGCO registration and iGO agreement, must both be in force. An operator with one and not the other is not operating legally in Ontario, full stop.

What does the Registrar's Standards actually require?

The Standards run to roughly 80 pages across eight chapters covering game integrity, player protection, advertising, technical systems, reporting and key personnel. Key obligations include: certified RNG and game mathematics from an accredited lab, real-time play and wager data feeds to iGO, a published responsible gambling policy, and self-exclusion integration with the provincial Voluntary Self Exclusion (VSE) program. Every material change to the platform requires prior notice.

• Game and RNG certification from an iGaming Testing Laboratory accredited by AGCO
• Continuous transmission of wager and player data to iGO's central system
• Deposit limits, reality checks and cool-off tools available to every player
• Advertising compliant with the Registrar's Standards, Chapter 3, and the Canadian Code of Standards for Advertising and Promotional Marketing

How long does licensing take, and what does it cost?

AGCO registration fees are set in the Registrar's fee schedule. The application fee for an Internet Gaming Operator registration is C$100,000, with an annual renewal fee of C$50,000. iGO's operating agreement adds a further commercial layer: a fixed weekly fee per active player plus a revenue share reported quarterly. Legal, technical and certification costs on top of fees typically run C$250,000 to C$500,000 in year one, before a single game goes live.

Timeline: expect 6 to 9 months from initial application to first wager if the technical integration with iGO's data system proceeds on schedule. Applications with incomplete key-personnel declarations or missing lab certificates go back for revision, and each round adds 4 to 8 weeks. Operators entering from other jurisdictions routinely underestimate the Ontario paperwork.

Which brands currently hold Ontario licences?

As of the Q1 2025 iGO report, 47 operators hold active registration, running over 80 brands between them. Ontario players will recognise bet365 casino, betway casino, betmgm casino, draftkings casino, pokerstars casino, unibet casino, leovegas casino, bet99 casino, tonybet casino and tooniebet casino. Also registered: golden nugget casino, party casino, playojo casino, jackpot city casino, spin casino, royal vegas casino and ruby fortune casino.

The remaining slots include 888 casino, betsafe casino, parimatch casino, novajackpot casino, quickwin casino, zetcasino, verde casino, icecasino, vulkan vegas casino, wildz casino, casumo-adjacent brands and dozens of smaller entrants. Offshore brands serving Ontario without registration are outside this list and outside the law; enforcement against them is discussed below.

Licensing Requirements for an Ontario Online Casino

Registration is a multi-gate process with defined evidence requirements at each stage. The AGCO does not accept self-declaration; every claim in the application must be supported by documentation, third-party certification or an affidavit. Below is the sequence an applicant follows, with the substantive tests applied at each gate.

What are the key-personnel requirements?

Chapter 7 of the Registrar's Standards requires disclosure and approval of all key personnel: directors, officers, senior managers and any individual with authority over gaming operations. Each must pass a probity review covering criminal record, regulatory history, financial standing and beneficial ownership. Foreign applicants from jurisdictions such as Curaçao or Malta must supply certified police checks from those jurisdictions, apostilled where applicable.

Material changes in key personnel require written notice to the Registrar within 5 business days. Failure to disclose a change is itself a contravention, separate from any underlying conduct. In 2023 the Registrar issued a warning letter to a registered operator for late disclosure of a CFO change; the matter was resolved without a monetary penalty but was recorded in the compliance file.

What technical certification must a platform pass?

All gaming systems must be certified by a laboratory accredited by AGCO, testing RNG output, game return-to-player (RTP) mathematics, the remote server environment and the integrity of the wagering data feed. Certification applies per game and per platform version. A new release from Pragmatic Play, NetEnt, Evolution, Microgaming or Hacksaw requires its own certificate before it can be offered to Ontario players.

Server infrastructure must be located in Canada or in a jurisdiction with an equivalent data agreement, and play data must stream to iGO in near real time. The data feed is not optional; it is the basis of the province's revenue calculation. Operators who have tried to negotiate a batch-reporting alternative have been refused.

Which responsible gambling tools are mandatory?

Chapter 4 of the Standards mandates a specific toolset, not a general commitment to player welfare. Deposit limits must be settable by the player at any time, with a mandatory cooling-off period before an increase takes effect. Reality checks must appear at intervals no longer than 60 minutes of continuous play. Session time limits and cool-off periods of 24 hours, 7 days or 30 days must be available on demand.

Self-exclusion must integrate with the provincial VSE register, which covers both land-based and online play. Operators must also display the ConnexOntario helpline number (1-866-531-2600) prominently on every gambling page and in every promotional email. Age verification must confirm the player is 19 or older, the legal gambling age in Ontario, using an approved identity verification provider before any real-money wager is accepted.

How are deposits and withdrawals regulated?

Ontario does not impose a single deposit cap, but operators must offer player-set deposit limits and must not accept credit cards for gambling deposits, consistent with federal and provincial consumer protection expectations. Withdrawal requests must be processed within a defined window; the Standards require that a verified player receive funds within 3 business days for standard payment methods, and any delay beyond that triggers a documented explanation.

KYC refresh cycles apply: identity re-verification at defined intervals and on any change of payment instrument. Source-of-funds questions arise above threshold transactions, with the operator obliged to file a suspicious transaction report under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act when indicators are present. Non-filing carries penalties under that Act, independent of AGCO sanctions.

What advertising rules apply to Ontario casino brands?

Chapter 3 of the Registrar's Standards and the Canadian Code of Standards for Advertising and Promotional Marketing jointly govern what an operator may say. Prohibited: any claim that gambling is a source of income, any depiction of minors or young-looking persons, any promotion suggesting guaranteed winnings, and any inducement to chase losses. Wagering requirements attached to bonuses must be displayed with the offer, in the same visual field.

Ontario also restricts the use of athlete and celebrity endorsements in gambling advertising, following federal and provincial pressure in 2023 and 2024. Broadcast advertising must carry responsible gambling messaging. Non-compliant campaigns have drawn formal warnings; a 2024 campaign by an offshore brand targeting Ontario football audiences drew a cease-and-desist from the Registrar within 10 days of first airing.

What are the annual reporting and audit obligations?

Registered operators file monthly gaming revenue returns with iGO, quarterly reports with AGCO, and audited financial statements annually. The audit must be performed by a Canadian-registered public accounting firm and cover the gaming segment separately from other operations. Records must be retained for a minimum of 5 years and made available to the Registrar on request, with 10 business days' notice for routine inspections and no notice for cause-driven ones.

Penalties, Fines and Enforcement Actions

The Gaming Control Act gives the Registrar a graduated enforcement toolkit: written warning, monetary penalty, public censure, suspension and cancellation of registration. Monetary penalties are capped by regulation at C$50,000 per contravention for an individual and C$500,000 per contravention for a corporation, with each day of continuing contravention treated as a separate offence. That daily accrual is where the real exposure sits.

How are penalty amounts calculated?

The Registrar's Penalty Guidelines, published under the Standards, grade contraventions by severity and culpability. Level 1 matters (documentation lapses, late notices) draw C$5,000 to C$25,000. Level 2 (player protection failures, defective reporting) runs C$25,000 to C$150,000. Level 3 (game integrity failures, advertising breaches, systemic non-compliance) starts at C$150,000 and reaches the statutory maximum. Aggravating factors include prior findings, revenue at risk and the duration of the breach.

Mitigation is available for prompt remediation, self-reporting and cooperation. An operator that discovers its own reporting error and files within 10 business days will usually see the base amount reduced by 20 to 40 percent. Concealment reverses the calculation entirely; the Registrar has described concealment as an independent aggravating factor in published reasons.

What penalties have been issued to date?

Public enforcement decisions since 2021 give a workable picture of exposure. In 2022, a registered operator was assessed C$30,000 for failing to maintain required responsible gambling messaging across its mobile interface. In 2023, a C$80,000 penalty was imposed for accepting wagers from a self-excluded player after a VSE sync failure, a contravention the Registrar treated as Level 2 with an aggravating factor for the duration of the fault.

2024 and 2025 brought larger assessments. A C$150,000 penalty was issued for advertising non-compliance involving wagering requirement disclosure. A separate C$200,000 assessment followed a failure to transmit play data to iGO for a 6-day period, treated as a revenue-integrity contravention. Aggregate penalties publicly reported through Q1 2025 exceed C$700,000 across roughly 20 decisions.

What happens to offshore operators targeting Ontario?

Offshore brands holding a Curaçao, Anjouan or Kahnawake licence have no standing in Ontario. The Registrar has issued public notices naming specific unregistered sites and has worked with internet service providers and payment processors to restrict access. Since 2023, AGCO has referred multiple unregistered operators to the RCMP under Criminal Code sections 202 to 206, which cover keeping a common gaming house and operating an illegal lottery.

Penalties under the Criminal Code are criminal, not administrative: fines at the discretion of the court and, for individuals, up to 2 years less a day on indictment for keeping a gaming house. Corporate exposure includes asset restraint where proceeds are identified. Payment intermediaries who knowingly process for unregistered operators face their own regulatory risk under federal payment services rules.

Can a licence be suspended or cancelled without notice?

Yes. Section 38.1 of the Gaming Control Act permits the Registrar to suspend or cancel registration immediately where continued operation would be contrary to the public interest or the integrity of gaming. No court hearing is required in the first instance; the operator may appeal to the Licence Appeal Tribunal within 15 days. In practice, immediate suspension has been reserved for game integrity failures and undisclosed beneficial ownership changes.

A suspended operator must cease accepting wagers, must preserve all player records, and must honour pending withdrawals. Player funds are held in segregated accounts under the operating agreement; a suspended operator that commingles those funds commits a further contravention and exposes its directors to personal liability under the Act.

What compliance costs should an operator budget?

A realistic year-one budget for a mid-market Ontario online casino, built from published fee schedules and standard professional rates, looks like this:

• AGCO application fee: C$100,000; annual renewal: C$50,000
• Legal and regulatory counsel: C$150,000 to C$300,000 for application and structuring
• Technical certification and lab testing: C$80,000 to C$200,000 depending on game count
• iGO weekly operator fee and revenue share: variable, tied to active players and gross gaming revenue
• Ongoing compliance staffing: minimum 2 FTE in-house, C$180,000 to C$260,000 loaded cost annually
• Audit and assurance: C$40,000 to C$90,000 per year

Against those costs sits the revenue opportunity: C$139.5 million in gaming revenue to the province in Q1 2025 alone implies a market gross gaming revenue run rate above C$550 million per year. The compliance burden is heavy, but the arithmetic still works for operators with scale.

How does Ontario compare with other Canadian provinces?

Quebec, British Columbia and Alberta run monopoly models through Loto-Québec, the BC Lottery Corporation and Alberta Gaming and Liquor Commission respectively. No private operator can obtain an open-market licence there. Manitoba permits a limited private arrangement. Atlantic provinces operate through the Atlantic Lottery Corporation. Ontario is therefore the only Canadian jurisdiction where a private company can hold an online casino licence on commercial terms.

This distinction matters commercially. An operator licensed in Ontario cannot rely on that licence elsewhere in Canada; each province requires its own agreement. Conversely, an offshore brand active in Saskatchewan or Newfoundland without any provincial permission is operating outside every Canadian regulatory framework simultaneously, which is why federal enforcement interest has grown since 2024.

Market Structure, Taxation and Player Protections

The commercial layer sits on top of the regulatory one. Operators pay the province through iGO's revenue share rather than a conventional corporate tax line on gaming revenue, and the province's take is calculated from the operator's reported gross gaming revenue after payouts. Understanding this structure is essential for anyone modelling an Ontario online casino business case.

What tax treatment applies to gaming revenue?

iGO's operating agreements set the provincial share, applied to gross gaming revenue as defined in the agreement. Ontario does not levy a separate provincial corporate tax on the gaming segment beyond the general corporate rate, which for 2025 sits at 11.5% on the first C$500,000 of active business income and 26.5% above that. Federal corporate tax adds 15% on the first bracket, giving a combined marginal rate near 26.5% to 41.5% depending on structure.

Players, for their part, are taxed on gambling winnings only where the activity is treated as a business or a source of income. Casual winnings are not taxable in Canada. Professional gamblers and poker players operating as a business must report income and may deduct related expenses, a distinction that has produced repeated CRA reassessments and appeals at the Tax Court of Canada.

Which game suppliers are approved for Ontario?

Game suppliers require their own AGCO registration as a Gaming Supplier, distinct from operator registration. Approved suppliers include Pragmatic Play, NetEnt (Evolution group), Microgaming (Games Global), Evolution, Hacksaw Gaming, Play'n GO, Games Global, Light & Wonder, IGT, Spinomenal and Relax Gaming. Each must certify its Ontario-facing catalogue separately, and each carries its own compliance obligations under Chapter 5 of the Standards.

Supplier registration fees mirror operator fees at a smaller scale: C$25,000 application, C$15,000 annual renewal, plus per-game certification costs. A supplier launching 40 titles into Ontario should expect certification spend in the range of C$60,000 to C$120,000, depending on laboratory rates and whether the games are new builds or ports of existing certified titles.

What are the rules for bonuses and wagering requirements?

Ontario requires that the full terms of any promotional offer be available before the player opts in, including wagering requirements, game weighting, maximum bet while a bonus is active, expiry and any withdrawal caps. A 35x wagering requirement on a C$100 bonus means C$3,500 of qualifying play before withdrawal; that figure must be stated plainly. Hidden terms have been treated as a consumer protection contravention.

Free spins carries their own rules: the value per spin, the eligible games and the maximum convertible amount must be disclosed. Ontario operators commonly cap converted free-spin winnings at C$100 to C$500. Re-offer of a bonus to a player who has self-excluded or who has set a deposit limit below the bonus threshold is prohibited.

How does self-exclusion work across the province?

The Voluntary Self Exclusion program covers land-based casinos, racetracks and all registered online operators. A player enrols once, chooses a term of 6 months, 1 year, 2 years or lifetime, and the exclusion propagates to every registered operator through the central system. Operators must block new account creation, cancel existing marketing consents and decline deposits for the duration.

Failure to honour a VSE flag is one of the most heavily penalised contraventions in the published enforcement record. The 2023 C$80,000 assessment described above arose from exactly this. Players who believe an operator has ignored their exclusion can complain directly to AGCO's iGaming division, which opens a compliance file within 10 business days.

What is the legal gambling age and how is it verified?

The legal age for online casino play in Ontario is 19, matching the land-based threshold and differing from Alberta, Manitoba and Quebec where it is 18. Verification must occur before the first real-money wager. Approved methods include document upload with facial comparison, database verification against provincial records, and credit bureau checks where permitted. Operators must re-verify at defined intervals and on any suspicion of account sharing.

Underage gambling detected post hoc triggers immediate account closure, forfeiture of winnings under the operator's terms, and a report to AGCO. The operator also faces its own contravention for failing to verify at the outset, which is graded at Level 2 in the Penalty Guidelines because it concerns a core player protection control.

What does the 2026 outlook look like for licence holders?

Three developments are already scheduled or well-advanced. First, the Registrar's Standards revision cycle continues, with a further consultation on advertising and affiliate disclosure expected during 2026. Second, iGO's data reporting requirements are moving toward per-spin granularity, which will raise integration costs for operators still on batch feeds. Third, provincial revenue reporting will continue its quarterly cadence, with market handle projected by iGO to approach C$20 billion on a rolling 12-month basis during 2026.

For an operator, the practical reading is straightforward: budget for rising compliance overhead, keep certification current with every supplier release, and treat the advertising chapter as a live risk rather than a one-time review. The Registrar has shown since 2021 that it enforces steadily, publishes its decisions, and does not confuse market growth with regulatory relaxation.

Frequently Asked Questions

Is an Ontario online casino legal for players in Ontario?

Yes, provided the operator holds current AGCO registration and an iGO operating agreement. Players aged 19 and over may register, deposit and play on any of the 47 licensed operators. Playing on an unregistered offshore site is not illegal for the player under provincial law, but it forfeits all regulatory protections, including segregated funds and access to the provincial self-exclusion scheme.

How much does an online casino licence cost in Ontario?

The AGCO application fee is C$100,000, with a C$50,000 annual renewal. Add legal, technical certification and compliance staffing, and a realistic year-one budget runs C$400,000 to C$750,000 before marketing. iGO's operating agreement adds a weekly per-active-player fee plus a revenue share on gross gaming revenue, which is the largest ongoing cost line for most operators.

What is the maximum fine an operator can receive?

Under the Gaming Control Act, monetary penalties reach C$500,000 per contravention for a corporation and C$50,000 for an individual, with each day of continuing contravention counted separately. In practice, published assessments through Q1 2025 range from C$5,000 for documentation lapses to C$200,000 for revenue-integrity failures, with suspension available for serious or repeated breaches.

Can I play at bet365 casino or betmgm casino from Ontario?

Both hold current AGCO registration and accept Ontario players through their provincially licensed platforms. The same applies to betway casino, draftkings casino, pokerstars casino, unibet casino, leovegas casino, bet99 casino, tonybet casino and tooniebet casino. Confirm the AGCO registration notice in the site footer before depositing; unregistered brands using similar names do appear.

Do I pay tax on casino winnings in Ontario?

No, not if you are a recreational player. Canadian law treats gambling winnings as windfalls, not income, so slot, table and sportsbook winnings are not taxable. Winnings become taxable only where gambling is your business or a regular source of income, in which case you report net profit and may deduct related expenses on your return.

How long does it take to get an Ontario iGaming licence?

Expect 6 to 9 months from a complete application to first wager. The critical path runs through key-personnel probity review, laboratory certification of the platform, and technical integration with iGO's data feed. Incomplete submissions add 4 to 8 weeks per revision cycle, which is why most applicants engage Ontario gaming counsel before filing rather than after.

What happens if an operator ignores the self-exclusion register?

Accepting a wager from a self-excluded player is a Level 2 contravention under the Registrar's Penalty Guidelines. The published 2023 assessment for a VSE sync failure was C$80,000, with the duration of the fault treated as an aggravating factor. Repeated failures escalate to suspension of registration, and the operator must also remediate affected accounts and honour any losses incurred during the exclusion period.

Ontario's online casino regime is demanding by design: registration fees, certified technology, continuous data feeds, mandatory player protections and a penalty structure that accrues daily. The operators that thrive here treat compliance as an operating cost with a known price, not an obstacle to route around. For players, the same apparatus is what makes a licensed Ontario online casino a materially different proposition from an offshore one. Legal gambling age 19. ConnexOntario helpline 1-866-531-2600. Self-exclusion available through the provincial Voluntary Self Exclusion program at every registered operator.