iGaming Payment Processing Guide
What an acquirer checks before it boards a casino or sportsbook: the license-to-market match, player KYC, the deposit and payout rails, and the dispute ratio.
- By the OpenGate underwriting desk
- Updated
- 10 min read
iGaming payment processing covers deposits into player accounts and payouts of winnings for online casinos, sportsbooks and betting platforms. Because operators are licensed, players are anonymous behind accounts, and money moves in two directions, iGaming acquiring sits in the highest risk tier of card processing and demands specialized infrastructure.
Why iGaming payment processing is built differently
A casino or sportsbook moves money in two directions at once. Deposits arrive in small amounts, thousands of times a day, and payouts leave just as fast, because a player who cannot withdraw winnings does not come back. Between the two directions sits a player account system, KYC checks and a compliance layer that blocks restricted countries before the transaction ever reaches the acquirer. That structure is unlike any other vertical, and it is why generic processors refuse it.
The second difference is the licensing layer. An iGaming operator holds a gambling license, and that license defines which markets it may take players from. The acquirer checks the license against the operator’s geo-blocking before it boards the file, and it checks again while the account runs. Payments follow the license. Where the license does not reach, the payments cannot go.
The player KYC layer
Between the deposit and the payout sits the player verification layer, and the acquirer grades it as part of the file. At a minimum, operators run identity checks at registration or first withdrawal, payment method ownership checks, and enhanced due diligence above regulatory thresholds. In regulated markets, the requirements are prescribed by the license; in less regulated ones, the acquirer imposes its own standard and will refuse files whose player KYC is decorative.
The layer also feeds the fraud defense, alongside the payment signals behind iGaming fraud detection. A sportsbook that verifies players before first payout makes stolen-card deposits pointless, because the fraudster cannot withdraw. Operators that pay out before verifying get hit twice: the deposit chargeback and the paid-out funds. The acquirer’s underwriter knows this and reads the withdrawal flow as carefully as the deposit flow. In iGaming, KYC is the payout gate.
Licenses the acquirers expect
Acquirers recognize a family of established gaming licenses. The Curacao gaming license has long been the most common entry license, historically cheaper and faster than the stricter regulators, although a new gambling law published in December 2024 reset its fees and its licensing process. It remains a frequent starting point for operators working out how to start an online casino. The Malta Gaming Authority and the UK Gambling Commission sit at the other end, with deeper scrutiny, and they open the tightly regulated European and UK markets. Other respected licenses exist in the Isle of Man, Gibraltar and several EU member states.
What matters for payments is not which license, but the match between license and markets. An acquirer will board an operator with a Curacao license for the markets that license covers. It will not board the same operator for UK players, because the license does not reach them. The file review asks one question first: which license, which markets, and does the geo-blocking enforce it. We list the licenses the acquirers expect for each file. The license itself is yours to hold.
Deposits: what players actually use
Cards remain the default for first deposits. Visa and Mastercard process iGaming through dedicated gambling merchant categories, with higher interchange and mandatory authentication expectations. 3DS2 routing matters here more than in most verticals: first deposits from new players are the highest fraud risk, and the 3DS2 guide explains how to challenge them without killing conversions.
Wallets and local methods carry the rest. E-wallets hold a large share of iGaming volume because players fund them once and move money without exposing card details. Alternative payment methods matter per market: Pix in Brazil, iDEAL in the Netherlands, bank transfers and open banking across Europe. The deposit mix is a market decision. A LatAm-facing operator without Pix loses deposits to competitors who have it.
Approval rates on first deposits run lower than retail averages, because issuers treat gambling categories with extra caution and because fraud screening on new players is deliberately tight. The operators who do well manage the retry layer: soft-decline recovery, alternative methods offered after a card fails, and deposit limits that match the player’s history. A dropped first deposit is usually a lost customer, so the deposit flow carries the same design weight as the game lobby.
Payouts and settlement mechanics
Payouts are the retention engine and the compliance checkpoint at the same time. A withdrawal triggers a KYC review before money moves: identity, payment method ownership and sometimes source of funds. Operators that automate that check pay out in minutes and keep players. Operators that run it manually lose players to the delay.
The rails depend on the market. Bank transfers and card refunds dominate regulated markets, wallets move money inside the ecosystem, and crypto handles payouts where the license permits. For the operator’s own settlement, iGaming files usually carry a rolling reserve, sized to the dispute exposure, and the mechanics are in the rolling reserves guide. Payout timing and settlement cycles are written into the offer before anything goes live.
Payout fraud deserves its own entry on the risk register. Withdrawals are where stolen-card deposits convert into cash, where bonus abuse cashes out and where money laundering moves through the book. The countermeasures are the KYC gate, withdrawal velocity limits and payout method matching, meaning winnings return to the method that funded the account wherever the rules allow. The acquirer reviews these controls at underwriting, and the operators with them on paper and in production hold their accounts longest.
Crypto plus fiat mixes
Most iGaming operators now run both rails. Crypto deposits in stablecoins or major coins arrive instantly, settle without chargeback risk and reach a segment of players that cards do not. Fiat cards and wallets carry the regulated mainstream. The mix is one deposit page with both paths, and a treasury decision about what to hold and convert.
The compliance side is where crypto gets careful. Crypto rails attract AML scrutiny, so the operator’s player KYC has to be solid before the crypto path goes live, and the settlement choice, stablecoins versus fiat conversion, gets agreed explicitly with the acquirer. Where the license and the jurisdiction allow it, crypto settlement runs through the same gateway as the card flow.
The treasury decision deserves a written policy, because the two rails settle differently. Fiat settlement arrives through the banking cycle; crypto settlement arrives on-chain and converts at market rates. Operators that document the split, the conversion policy and the counterparties in advance keep the audit trail clean, and a clean audit trail is what the acquirer checks when the account gets its periodic review.
Chargebacks and player disputes
iGaming disputes follow patterns that differ from retail:
- Friendly fraud dominates: a player disputes a deposit after losing, claiming the charge was unauthorized.
- Family disputes: another cardholder on the account, often a partner or parent, disputes charges the player made.
- Bonus and promotion disputes: players who claim terms were hidden when a bonus did not pay out.
- Regulatory refunds: some jurisdictions require refunds to self-excluded or problem players, and those arrive as forced refunds rather than disputes.
The discipline is the same as everywhere: monitor ratios, respond to alerts by refunding early, and keep evidence of gameplay, terms accepted and identity checks. The full math is in the chargeback guide. iGaming sits inside the scheme monitoring programs like any vertical, and sustained disputes end accounts.
The two numbers an iGaming account lives on are the approval rate and the dispute ratio, and they pull against each other. Loosening fraud rules lifts approvals and feeds friendly fraud. Tightening them protects the ratio and bleeds first deposits. The healthy middle is segmentation: known players move frictionlessly, new players get challenged, and high-velocity or geo-mismatched sessions get blocked outright.
The account health routine is monthly: dispute ratio against the scheme thresholds, chargebacks split by reason code and by game product, and approval rate split by market and payment method. When a single game or a single market drives the disputes, the fix is product-level, not gateway-level. The monitoring programs apply to iGaming like any vertical, and the operators who read their monthly numbers before the schemes do are the ones who stay boarded.
Multi-currency processing
An operator licensed in Curacao may take players from a dozen countries, each with its own currency. Presenting the local currency raises conversion: a Brazilian player funds in BRL, a European player in EUR. The gateway handles the multi-currency presentation and converts at settlement, or settles in the operator’s base currency, with the FX cost written into the offer. Multi-currency is the default condition of an iGaming business, and the acquiring setup has to be built for it from day one.
How onboarding works for an operator
- The file. License copy, corporate documents, ownership structure, processing history and the live site go to an underwriter.
- The vertical review. The underwriter checks the license against the markets, the geo-blocking, the responsible gaming tools and the bonus terms, then prepares the file for the acquirers.
- The offer. Rates, reserve structure, limits and settlement terms arrive in writing.
- Go-live. Integration, test deposits and payouts, then monitoring from the first transaction.
The iGaming review has one gate the generic process does not: the license-to-market check. The underwriter matches the operator’s license against its declared markets and then tests the geo-blocking on the live site, because a license that does not reach the market is the fastest decline in the vertical. Operators who prepare the license map, the market list and the geo-blocking evidence in one document move through this step in days.
The full process runs the same four steps for every vertical, and the casino and sportsbook page lists the documents specific to this one.
Before you apply, put the license, the market list and the geo-blocking evidence in one document, and add three to six months of processing statements if you have them. Then send your iGaming file. A person on the underwriting side reads it and answers within 1 business day with an offer, the list of what is missing, or a clear no. Applying is free.