Brazil’s regulated betting market demands operators meet strict licensing standards set by the SPA (Secretaria de Premios e Apostas). If you plan to operate in one of Latin America’s largest gambling markets, your brazil betting license requirements 2026 checklist starts here. The SPA’s 2026-2027 regulatory agenda continues to refine operator authorization procedures, payment controls, and enforcement protocols.
Getting licensed is not optional. Operators without SPA authorization face payment blocking, domain seizure, and criminal exposure. This guide breaks down every requirement you need to clear before going live.
What You Need to Know Before Applying
- The SPA requires a R$30 million (approx. $6 million) license fee per authorized brand
- AML and responsible gambling controls must be embedded in your platform before application
- Only Brazilian legal entities or authorized foreign branches qualify for authorization
- Technical certification from SPA-approved labs is mandatory before launch
- Payment processing must route through locally licensed PSPs connected to Pix and domestic card networks
Brazil Betting License Requirements: Legal Entity Setup
You must establish a Brazilian legal entity or register a foreign branch with full corporate transparency. The SPA reviews beneficial ownership chains and expects clear documentation of every shareholder holding 5% or more.
Directors and key persons undergo background checks covering criminal records, financial standing, and prior regulatory sanctions. The SPA cross-references applicants against international AML watchlists.
Your corporate structure must include a designated compliance officer based in Brazil. This person signs off on all regulatory filings and acts as the primary contact for SPA correspondence.
Technical Certification and Platform Standards
Your platform needs certification from an SPA-approved testing laboratory. The certification audit covers random number generators, bet settlement accuracy, player account integrity, and data storage practices.
Geolocation enforcement is required. Your platform must verify that each session originates from within Brazil and block connections routed through VPNs or proxies.
Server infrastructure must comply with Brazilian data residency preferences. While the SPA has not mandated full onshore hosting, operators that store player data in Brazil face fewer compliance questions during the review process.
Responsible Gambling Platform Controls
The SPA expects your platform to support deposit limits, session time alerts, cooling-off periods, and self-exclusion. Brazil’s centralized self-exclusion system, which went live on December 10, 2025, requires every licensed operator to integrate with the national registry.
Your product must suppress marketing to excluded players within 24 hours of a registry match. Failure to connect with the self-exclusion platform is a blocking issue during authorization review.
Operators underestimate the self-exclusion integration timeline. Testing against the SPA’s centralized platform takes weeks, not days. Start this early in your technical certification process.
AML, KYC, and Financial Controls
You must implement tiered KYC at registration. Identity verification, document authentication, and sanction screening run at onboarding. Enhanced due diligence triggers for players exceeding defined deposit or loss thresholds.
Transaction monitoring must flag structured deposits, rapid withdrawal-deposit cycles, and unusual geolocation patterns. Your AML compliance program needs documented policies, a named compliance officer, and an annual external audit.
Brazil’s financial intelligence unit, COAF, expects operators to file suspicious activity reports directly. Build your reporting pipeline before your first player registers.
Brazil Betting License Requirements 2026: Payment Processing
All payment flows must route through locally licensed PSPs. Pix is the dominant deposit and withdrawal method, with over 170 million individual users as of late 2025. Your cashier must support Pix natively.
The SPA’s 2026-2027 agenda includes continued review of payment-blocking procedures for unauthorized operators. Licensed operators benefit from clearer banking relationships, but you must maintain records of every transaction for a minimum of five years.
Deposit and Withdrawal Controls
- Deposit limits must be configurable by the player and enforced in real time
- Withdrawals to the same method used for deposits are preferred for AML traceability
- Payout processing times must meet SPA-defined service-level expectations
- Bonus funds and wagering requirements must be disclosed before deposit
Advertising and Marketing Compliance
Brazil restricts betting advertising to adults only. Your campaigns must carry responsible gambling disclosures. Influencer marketing requires documented agreements proving compliance awareness and disclosure practices.
Targeting minors through social media, gaming content, or music sponsorships draws regulatory action. The SPA audits operator advertising records during periodic reviews.
Common Application Delays and How to Avoid Them
Applications stall most often on incomplete corporate documentation, missing technical certifications, and untested self-exclusion integration. Operators who prepare all three in parallel cut months from their review timeline.
Hire local legal counsel familiar with SPA filing procedures. Use a pre-application review to identify gaps before formal submission.
Track the SPA’s regulatory agenda for procedural updates. The 2026-2027 cycle includes revisions to authorization procedures that affect pending applications.
Your 2026 Brazil Licensing Checklist
- Establish a Brazilian legal entity with transparent ownership
- Appoint a local compliance officer
- Complete platform certification through an SPA-approved lab
- Integrate with Brazil’s centralized self-exclusion system
- Connect to locally licensed PSPs with Pix support
- Build AML/KYC pipelines with COAF reporting capability
- Prepare advertising compliance documentation
- Engage local counsel for pre-application review
Brazil’s regulated market rewards operators who invest in compliance infrastructure early. The SPA’s review process is thorough. Shortcuts do not exist. Build your compliance stack before you apply, and you position your brand for a faster path to market.
