Financial Institutions and Fintech Licensing in the EU
Comprehensive advisory on financial institution licensing, passporting and regulatory compliance across the European Union and beyond.
Secure your Estonian remote gaming licence with ECOVIS ProventusLaw to benefit from full EU credibility, end-to-end regulatory support, and a declining tax rate reaching 4.0% by 2029.
Secure your Estonian online gaming licence with the Baltic region’s leading licensing law firm. From corporate structuring to regulatory approval by the Estonian Tax and Customs Board, we deliver end-to-end licensing support for online casino, sports betting, and skill gaming operators — supported by a predictable tax roadmap under which the remote gambling tax rate decreases annually (5.5% in 2026, 5.0% in 2027, 4.5% in 2028, and 4.0% from 2029).
Estonia has built one of Europe’s most efficient digital-first regulatory environments for remote gambling operators. It combines full European Union credibility with a cost-effective, modular licensing structure, opening doors to payment processors, software providers, and institutional banking partners across Europe.
Estonia’s world-leading digital infrastructure allows foreign founders to register a company entirely online through the e-Residency programme. Combined with flexible server location rules, cryptocurrency payment compatibility, and no physical office requirement, Estonia is purpose-built for the modern iGaming operator. Founders should note, however, that e-Residency does not automatically guarantee banking access: gambling entities face rigorous Anti-Money Laundering (AML) and Know Your Customer (KYC) scrutiny from financial institutions.
From 1 January 2026, the remote gambling tax rate was reduced to 5.5%, with a structured path down to 4.0% by 2029 (5.5% in 2026, 5.0% in 2027, 4.5% in 2028, and 4.0% from 2029). This declining trajectory makes Estonia increasingly competitive as a licensing jurisdiction for international operators planning for the long term.
Unlike Malta (10-year renewal) or the Isle of Man (5-year), the Estonian Activity Licence is valid indefinitely. Operating Permits are issued for up to 5 years (games of chance, skill, and lotteries) or 20 years (totalizator and betting), offering long-term regulatory stability without the cost and disruption of frequent relicensing.
Estonia does not apply classical annual corporate income tax on retained earnings. This means that earnings remain untaxed for an indefinite period at the corporate level insofar they are accumulated in the company or invested for business purposes. The corporate income tax (at the rate of 22% of the net amount) is charged only at the moment the dividends are distributed from the Estonian company. This structure is a significant advantage for operators who plan to reinvest revenue into platform development, technology, market expansion or other business ventures.
The Estonian Tax and Customs Board (EMTA) issues three categories of gambling Activity Licences under the Gambling Act 2008. A critical compliance requirement for 2026 is that share capital must be paid up in full — merely registering the amount is no longer sufficient for approval. For modern founders, this capital can be infused via cryptocurrency, provided that strict identification protocols and valuation standards are met during the process.
online casino, slots, roulette, live dealer, poker tournaments and remote games of chance
sports betting, horse race betting, totalizators
skill-based gaming platforms
Note: A single remote gambling Operating Permit can cover multiple Internet sites.
Estonia uses a sequential two-stage licensing framework. The Activity Licence must be granted before the Operating Permit application can be submitted. This structure is strategically designed to support scalable growth: by separating the Activity Licence (which assesses corporate and shareholder fitness) from the Operating Permit (which addresses technical and product compliance), the framework allows operators to expand into new verticals — moving from sports betting into online casino, for example — without needing to re-litigate their entire corporate structure.
Focuses on “Fit and Proper” assessments of Ultimate Beneficial Owners (UBOs) and directors, verification of source of funds, and the robustness of the AML framework.
Statutory decision window: 4–6 months
Focuses on technical infrastructure, Random Number Generator (RNG) certifications, and integration with the Electronic Gambling Reporting System (EHMA).
Statutory decision window: 2–4 months
While the statutory decision window for the initial licence is relatively short, the realistic launch timeline — including technical integration and banking onboarding — is typically 8–12 months. The two stages are sequential and cannot run in parallel.
From 1 January 2026, the Gambling Act and Other Acts Amendment Act marks a significant escalation in Estonia’s compliance standards. The Estonian Financial Intelligence Unit (RAB — Rahapesu Andmebüroo) has assumed a formal gatekeeping role in the licensing process, conducting granular scrutiny of ownership chains and management suitability. This enhanced oversight is designed to solidify Estonia’s reputation as a white-listed jurisdiction of the highest integrity, providing a strategic shield against de-risking by global financial institutions.
Every new applicant must designate an FIU/RAB contact person and establish a documented AML/CTF governance structure. Depending on the operator’s internal organisation, this may be combined with a broader MLRO or compliance function. Existing licence holders must align their procedures, internal controls and contact-person arrangements by 1 January 2027.
Existing licence holders must use the 2026 calendar year to align their AML/CTF procedures, internal-control rules, governance documentation and FIU/RAB contact-person arrangements. The final deadline for full compliance with the new standards is 1 January 2027.
The “Fit and Proper” assessment now includes exhaustive reviews of indirect beneficial owners. Key personnel must demonstrate a history free from mismanagement errors or insolvency caused by grave professional negligence.
Lower tax rates are set to make Estonia highly competitive for licensed online casinos, betting operators, and remote gambling groups. The reduction timeline is structured as follows:
| Timeline | Remote Gambling Tax Rate |
|---|---|
| From 1 January 2026 | 5.5% |
| From 1 January 2027 | 5.0% |
| From 1 January 2028 | 4.5% |
| From 1 January 2029 | 4.0% |
Existing Estonian gambling licence holders have a practical remediation window throughout 2026. Our team can conduct a gap analysis against the new FIU/RAB standards and prepare all required documentation before the deadline.
New applicants should build a compliant AML framework into their application from day one. This avoids delays at the FIU review stage and ensures a smoother path to authorisation.
The January 2026 reform elevated the FIU’s formal gatekeeping role. All new applicants — and existing licence holders by 1 January 2027 — must meet the following requirements:
AML/CTF and sanctions risk assessment
Written, Estonia-specific, and signed off at board level.
CDD, EDD, source-of-funds, and reporting procedures
Fully documented and operationally deployed.
FIU contact person / MLRO structure
An Estonia-based MLRO function is now mandatory for all licensed operators.
Internal AML rules
Tailored to the operator’s business model and reviewed against FIU/RAB sector guidance.
Shareholder, UBO, and management suitability files
Full ownership transparency with complete background documentation.
Payment flow and crypto-asset arrangements
Documented, compliant payment rails and crypto policies where applicable.
Audit-ready tax and operational data
GGR reporting aligned with Gambling Tax Act requirements.
Responsible gambling and player protection measures
Self-exclusion, deposit limits, and reporting obligations.
Legal basis: Gambling Act and Other Acts Amendment Act (RT I, 30.12.2025, 2); Gambling Tax Act; Money Laundering and Terrorist Financing Prevention Act; FIU/RAB sector feedback to gambling operators 2024.
All licensed operators must connect their electronic recordkeeping and control system (EAKS) to EMTA’s electronic gambling reporting system (EHMA) via the X-tee data exchange layer. This infrastructure enables automated, real-time data exchange with the Tax and Customs Board, effectively replacing the burden of traditional periodic reporting.
Connection to the EMTA information system is mandatory. Integration must be validated before an Operating Permit is granted.
Operators must implement a control system meeting the K1T2S2 security class, as defined by Government of the Republic Regulation No. 121 of 9 December 2022. This system registers all bets and winnings in real time.
All data registered in the EAKS must remain accessible via the reporting system for a minimum of 400 days following registration. After this period, data must be archived and retained for a further five years.
Servers must be located in Estonia, in a state that is a party to the Convention on Cybercrime, or in a jurisdiction whose competent authorities have concluded a formal cooperation agreement on the exchange of information on gambling supervision with both the Tax and Customs Board and the Financial Intelligence Unit.
Gaming software must hold certifications from laboratories with ISO/IEC 17025 accreditation, recognised in the European Union and specifically accepted by EMTA.
Selecting a licensing jurisdiction requires weighing regulatory prestige against speed to market and fiscal burden. Please see a side-by-side comparison:
The optimal choice for ambitious tech-first scalers interested in reinvesting earnings into platform growth.
Regulatory Status: EU Member / Tier-1
Effective CIT Rate: 0% (until the distribution of dividends)
GGR Tax Rates: 5.5% (Scaling to 4%)
Banking Access: Excellent
Setup (Realistic): 8–12 Months
UK/EU Credibility: High / EU Trusted
Preferred for legacy institutional branding, though ongoing maintenance costs remain significantly higher than the Estonian model.
Regulatory Status: EU Member / Tier-1
Effective CIT Rate: 5% (Effective)
GGR Tax Rates: 5% + Compliance Levies*
Banking Access: Excellent
Setup (Realistic): 12–18 Months
UK/EU Credibility: High / EU Trusted
The strategic choice for B2B network models and operators requiring whitelisted status for the UK market.
Regulatory Status: Tier-1 (Offshore)
Effective CIT Rate: 0%
GGR Tax Rates: 0.1% – 1.5%
Banking Access: Good
Setup (Realistic): 4 Months
UK/EU Credibility: High / UK Whitelisted
Viable for rapid market entry, though it does not meet Estonia’s server location or info-exchange criteria. Operators cannot host Estonian-regulated infrastructure here, nor does it provide a direct pathway to EU banking.
Regulatory Status: Tier-3 (Offshore)
Effective CIT Rate: 2% (E-Zone)
GGR Tax Rates: 0%
Banking Access: Limited
Setup (Realistic): 2–4 Months
UK/EU Credibility: Low
ECOVIS ProventusLaw is a top-tier business law firm operating across all three Baltic states—Lithuania, Latvia, and Estonia—and is part of the ECOVIS International network. We have supported financial services and regulated business operators since 2014, combining deep Baltic regulatory knowledge with the global reach of a consultancy present in more than 90 countries.
Our FinTech and regulatory practice is consistently ranked by Chambers and Partners, The Legal 500, and IFLR1000 in FinTech, Banking & Finance, and related practice areas.
We design and execute the full licensing roadmap — from jurisdictional assessment and corporate structuring through Activity Licence and Operating Permit applications, EHMA integration, and post-licensing compliance support.
We draft and upgrade your AML/CTF and international sanctions documentation, conduct risk assessments, establish CDD and EDD procedures, and prepare your UBO and management suitability files for direct FIU/RAB review.
We manage all direct communication with the Estonian Tax and Customs Board (EMTA) and the Financial Intelligence Unit (FIU/RAB), representing your interests throughout the entire licensing review period.
We coordinate the onboarding of an Estonia-based MLRO or FIU contact person, including organisational support and integration into your compliance infrastructure.
For existing licence holders facing the 1 January 2027 compliance deadline, we provide a comprehensive regulatory gap analysis and remediation plan covering AML, payment flows, governance, and audit readiness.
We assist with opening bank accounts and establishing payment infrastructure for your licensed Estonian entity, including guidance on cryptocurrency payment integration and e-Residency banking compatibility.
Obtaining an Estonian gambling licence requires a two-step legal process managed by the Estonian Tax and Customs Board in coordination with the Financial Intelligence Unit (FIU/RAB).
Activity Licence (tegevusluba): examines the applicant company’s financial stability, legality of share capital, and the reputation of its management and beneficial owners.
Operating Permit (korraldusluba): granted for each specific gaming platform, website, or type of gambling activity before live operations may commence.
Yes. Estonia is highly recommended as a transparent, white-listed EU gambling jurisdiction. Its primary strategic advantages include: full cross-border credibility and compliance within the European Union market; advanced e-government infrastructure accelerating corporate setup and reporting; a highly competitive corporate tax system; and a predictable, decreasing remote gambling tax rate (5.5% in 2026, dropping to 4.0% by 2029), which significantly optimises long-term operational costs compared to other European jurisdictions, and favorable CIT system (no CIT charged until earnings are withdrawn from the Estonian company as dividends).
The latest regulatory overhaul formally positioned the Financial Intelligence Unit (FIU/RAB) as a direct, active gatekeeper in the licensing process, introducing rigorous pre-licensing suitability checks for management and beneficial owners. On the commercial side, the reform introduced a structured tax reduction timeline, lowering the remote gambling tax rate to 5.5% and establishing a path to 4.0% over the coming years.
Existing licensed operators have a practical remediation window throughout 2026. Full regulatory alignment is mandatory by the strict deadline of 1 January 2027, covering all operational activities, payment setups, and compliance documentation. Every operator must also establish a local AML function, including a resident FIU contact person or MLRO — a requirement that applies to all applicants going forward.
New applicants must present a fully compliant framework at the application stage. The core operational setup must include: an Estonia-based FIU contact person or MLRO function; comprehensive internal control rules tailored to remote gambling risks; and exhaustive shareholder, UBO, and management suitability files prepared for direct FIU/RAB review.
Yes. Infusion of share capital via cryptocurrency is permissible, but it is a high-compliance event. The process requires proper identification protocols during the payment processing stage to satisfy the FIU’s source-of-wealth and source-of-funds mandates.
No, they are legally identical. The Gambling Act 2008 uses the term “gambling”, while the industry colloquially refers to “gaming”. EMTA issues a single authorisation that covers all relevant activities under the Act.
Have a question or need more information?
Send us an email!