An online casino is not legal in the Philippines simply because it displays a PAGCOR logo, accepts GCash, appears in an app store, or claims to hold an international gambling license. The safest test is whether the exact website or app domain you are using appears in PAGCOR’s current official records. A legitimate brand can also be copied, so checking only the brand name is not enough.

The verification process takes only a few minutes. You should check PAGCOR’s official directory, compare the complete web address, confirm that the operator is authorized for the particular game being offered, and review the platform’s identity-verification and withdrawal rules before sending money.

Are Online Casinos Legal in the Philippines?

Some online casino and electronic gaming platforms are legal when they operate under valid Philippine authorization and comply with PAGCOR regulations.

PAGCOR, or the Philippine Amusement and Gaming Corporation, is the principal regulator of casino and electronic gaming activities within Philippine territory, subject to limited exceptions for activities regulated under other franchises or special laws. Its Electronic Gaming Licensing Department oversees local platforms offering electronic casino games, electronic bingo, sports betting, specialty games, online poker, numeric games, and related products. (PAGCOR)

The principal legal bases include:

Presidential Decree No. 1869, known as the PAGCOR Charter;
Republic Act No. 9487 of 2007, which amended and extended PAGCOR’s franchise and authority to operate, authorize, license, and regulate specified games of chance within the Philippines;
Presidential Decree No. 1602, which strengthened Philippine laws against illegal gambling;
Republic Act No. 10927 of 2017, which placed casinos, including internet-based casinos, within the coverage of the Anti-Money Laundering Act; and
PAGCOR’s regulatory manuals, licensing frameworks, responsible-gaming rules, and operator-specific approvals. (Lawphil)

The important distinction is between a PAGCOR-authorized local online gaming platform and an illegal or offshore platform merely accessible from the Philippines.

Local Online Gaming Is Different From POGO or Offshore Gaming

A Philippine Offshore Gaming Operator, commonly called a POGO and later referred to as an Internet Gaming Licensee or IGL, was designed to serve players located outside the Philippines. It was not the same as a locally authorized online casino intended for registered Philippine players.

Under Executive Order No. 74 dated November 5, 2024, all POGO, IGL, and other offshore gaming operations in the Philippines were ordered to cease operations no later than December 31, 2024. The order stopped new applications and renewals and directed law-enforcement agencies to intensify action against illegal offshore operations. It expressly distinguishes offshore gaming from online games conducted through PAGCOR-operated casinos, licensed casinos, and integrated resorts. (Lawphil)

This leads to a simple rule:

A website claiming in 2026 that it is legal because it holds an active Philippine “POGO license” or “IGL license” should be treated as highly suspicious.

The POGO ban did not automatically prohibit every form of locally regulated electronic gaming. PAGCOR continues to maintain official directories of authorized domestic online gaming websites and registered domains. (Pagcor Guarantee)

The Fastest Way to Check Whether an Online Casino Is Legal

What you find	What it usually means
Exact domain appears on PAGCOR’s official verification website	Strong evidence that the platform is authorized
Brand appears, but the domain is different	Do not deposit until PAGCOR confirms the different domain
Operator appears in a list, but the particular brand or game does not	Authorization remains uncertain
Site shows only a screenshot of a PAGCOR certificate	Not sufficient; certificates can be outdated or altered
Site claims only a Curaçao, Malta, Isle of Man, or other foreign license	Not proof of Philippine authorization
Site claims an active POGO or IGL license	Major red flag after the offshore gaming ban
Company has an SEC registration or mayor’s permit	Proof of business registration, not necessarily a gaming license
Site accepts GCash, Maya, bank transfers, or cryptocurrency	Payment availability does not establish legality

How to Verify a PAGCOR Online Casino Step by Step

1. Start With the PAGCOR Guarantee Website

Open the official PAGCOR Guarantee directory by typing the address yourself or entering through PAGCOR’s main government website.

PAGCOR launched this directory so the public could identify legitimate online gaming providers and avoid fraudulent sites. PAGCOR states that the directory contains authorized online gaming websites under its oversight and allows users to open the approved platforms directly from the directory. (PAGCOR)

Search for the casino’s:

Brand name;
Exact website address;
Type of game, such as electronic casino, sports betting, bingo, or poker; and
Operator or gaming system administrator, when shown.

If the website is not listed, do not assume that it is merely “new” or that PAGCOR has not updated its records. Ask PAGCOR to verify it before depositing.

2. Compare the Entire Domain Name

Scammers often copy the name, colors, graphics, and logo of a real licensed platform. The fake site may differ from the legitimate site by only one letter, symbol, or domain ending.

For example, these would legally and technically be different addresses:

samplecasino.ph
sample-casino.ph
samplecasino-vip.com
samplecasino.ph.example.com

In the last example, the true controlling domain is example.com, not samplecasino.ph.

Check:

Spelling;
Hyphens and added words;
Whether the domain ends in .ph, .com, .net, or another extension;
Subdomains appearing before the main domain;
Unexpected redirects after you click “register” or “deposit”; and
Whether the cashier or KYC page moves to an unrelated website.

The presence of HTTPS or a padlock means that the connection is encrypted. It does not mean the casino is licensed or trustworthy.

3. Cross-Check PAGCOR’s Detailed List of Registered Domains

PAGCOR also publishes a more detailed list of accredited gaming system administrators, registered brands, and approved domains.

The official list dated June 30, 2026 identifies gaming system administrators together with their approved:

Game offerings;
Main brands;
Sub-brands;
Main domains;
Subdomains; and
Additional URLs.

This detailed list is useful when a company operates several brands or mirror addresses. Search the PDF for the exact domain rather than relying only on visual inspection.

Pay attention to footnotes. In the June 30, 2026 list, an asterisk beside a game offering means that the offering has not yet commenced commercial operations. Therefore, the fact that an operator is accredited does not necessarily mean every game displayed beside its name is already available for lawful public play.

4. Confirm the Particular Game Being Offered

Authorization is not always unlimited. A platform may be approved for sports betting but not online poker, or for electronic bingo but not every form of electronic casino game.

Compare the website’s actual products with the categories appearing in PAGCOR’s records:

Electronic casino games;
Electronic bingo games;
Traditional bingo games;
Sports betting;
Specialty games;
Numeric games; or
Online poker games.

A casino should not rely on a license for one product to justify unrelated games.

5. Verify the Operator, Not Just the Marketing Brand

The public-facing casino name may be different from the corporation holding the regulatory approval.

Look in the platform’s footer, terms and conditions, privacy notice, or responsible-gaming page for:

Full corporate name;
Registered office;
PAGCOR-regulated operator or gaming system administrator;
Customer-support details;
Data-protection contact;
Complaints procedure; and
Rules governing deposits, bonuses, and withdrawals.

Compare that company with the operator identified in PAGCOR’s records.

An SEC certificate, DTI registration, BIR registration, or local business permit may show that a business exists. None of these documents, standing alone, authorizes it to conduct online gambling.

6. Examine the Registration and KYC Process

“KYC” means Know Your Customer. It is the process of verifying a player’s identity, age, and account information.

Because casinos are covered persons under the Anti-Money Laundering Act as amended by RA No. 10927, legitimate operations are expected to carry out customer identification and other compliance measures. (Lawphil)

A regulated platform will ordinarily ask for information such as:

Full legal name;
Date of birth;
Address;
Mobile number or email address;
Government-issued identification;
A photograph or facial-verification image; and
Proof that the deposit or withdrawal account belongs to the registered player.

KYC is not proof by itself. A fraudulent website can also request identification to steal personal data. Verify the exact domain with PAGCOR before uploading a passport, driver’s license, selfie, bank statement, or other sensitive document.

7. Read the Withdrawal Rules Before Depositing

Many disputes begin when a player accepts a bonus without understanding its conditions.

Check the rules on:

Minimum and maximum withdrawals;
Wagering or rollover requirements;
Identity-verification deadlines;
Dormant-account charges;
Maximum winnings from promotional funds;
Prohibited betting patterns;
Account ownership;
Use of VPNs or location-masking software;
Multiple accounts in one household; and
Circumstances in which funds may be held for investigation.

A legal operator may still impose contractual conditions, but those conditions should be clearly disclosed and consistently applied.

Be cautious when a supposed casino requires deposits to:

A constantly changing personal e-wallet;
An unrelated individual’s bank account;
A Telegram or Viber agent;
A cryptocurrency wallet with no formal cashier record; or
A payment page outside the verified domain.

8. Ask PAGCOR When the Records Are Unclear

For regulatory verification, use PAGCOR’s official contact information. PAGCOR lists its Electronic Gaming Licensing Department and general contact channels on its government website. (PAGCOR)

Include:

The full website address;
A screenshot of the license claim;
The brand and corporate name;
The game being offered;
The app-download link, when applicable; and
Any redirects or alternative domains.

There is no fee merely to ask whether a website is authorized. Response times can vary depending on the completeness of the information and whether PAGCOR must verify an operator’s current approval.

Who Is Not Allowed to Gamble?

PAGCOR’s responsible-gaming rules prohibit certain people from playing, even on an otherwise authorized platform.

The published restrictions include:

Persons under 21 years old;
Government officials and employees connected directly with government operations or government agencies;
Members of the Armed Forces of the Philippines and Philippine National Police;
Persons included in the National Database of Restricted Persons;
Gaming Employment License holders; and
Under PAGCOR’s Responsible Gaming Code of Practice Version 6.0, students enrolled in a school, college, or university in the Philippines. (PAGCOR)

A licensed casino should not allow a person to bypass these restrictions by using another person’s ID, e-wallet, mobile number, or player account.

PAGCOR also operates self-exclusion and family-exclusion procedures. Depending on the type of application, an exclusion may be requested for specified periods and enforced across PAGCOR-operated and regulated gaming facilities. (PAGCOR)

Warning Signs of an Illegal or Cloned Online Casino

Treat the platform as unsafe when several of these signs appear together:

It does not appear in PAGCOR’s official directories.
Its domain differs from the registered domain by one letter or added word.
It uses a PAGCOR logo but provides no verifiable operator information.
It displays a blurry, cropped, or expired license certificate.
It claims to have an active POGO or IGL license.
Customer service operates only through Telegram, Facebook Messenger, or Viber.
Deposits go to personal accounts with frequently changing names.
The site promises guaranteed winnings or risk-free gambling.
It asks for additional “tax,” “unlocking,” “clearance,” or “verification” payments before releasing winnings.
It threatens to confiscate funds unless money is sent immediately.
Its mobile app must be installed through an unknown APK file rather than a verified platform link.
It asks for your e-wallet PIN, one-time password, online-banking password, or remote access to your phone.
Its terms and conditions do not identify a Philippine operator or governing regulatory authority.

PAGCOR has repeatedly warned that unauthorized gambling platforms expose users to nonpayment of winnings, identity theft, payment fraud, and other criminal activity. It also states that participating in unauthorized gaming activities may be punishable under Philippine law. (PAGCOR)

Common Situations That Confuse Players

The brand is legitimate, but the link came from Facebook

A real casino may advertise online, but scammers can purchase advertisements using copied logos. Do not register through the advertisement. Open the PAGCOR Guarantee directory independently and use the official link appearing there.

The casino is listed, but the agent gave a different deposit website

A payment or registration domain that does not appear in PAGCOR’s records may be a clone, phishing page, or unauthorized agent portal. Stop the transaction and ask PAGCOR or the operator’s official support team to confirm the address.

The site has an international gambling license

A foreign license may authorize activities under another country’s laws. It does not replace the Philippine authorization required to lawfully offer regulated casino services within the Philippines.

The company is SEC-registered

SEC registration creates or records a corporation. It does not give the corporation permission to operate games of chance. Gaming authority must come from PAGCOR or another regulator having jurisdiction under a specific law or franchise.

The site pays small withdrawals quickly

Illegal platforms sometimes pay early or small withdrawals to build trust. Payment history does not establish legal status. The decisive evidence remains current regulatory authorization for the exact domain and game.

What to Do If the Casino Refuses to Pay

When the platform is PAGCOR-authorized

First use the operator’s formal complaints process. Submit a written complaint containing:

Registered account name and player ID;
Exact website or app used;
Date and amount of each deposit;
Game and transaction history;
Withdrawal request and status;
Relevant bonus terms;
Screenshots of the balance and error messages;
Emails and customer-service conversations; and
Bank or e-wallet transaction references.

Request a written explanation citing the specific rule used to delay or reject the withdrawal. If the operator does not resolve the issue, elevate the matter to PAGCOR with the same evidence.

Licensing does not mean PAGCOR guarantees every bet or automatically orders immediate payment. The regulator may need to determine whether the operator complied with its approved rules and whether the player breached any account or promotional condition.

When the platform appears illegal or fraudulent

Stop depositing immediately. Do not send an additional “release fee” merely because the site promises to unlock your balance.

Take these steps promptly:

Contact your bank or e-wallet provider and report the transaction as suspected fraud.
Ask whether the transfer can be held, recalled, traced, or flagged.
Preserve the website address, receipts, chats, account numbers, wallet addresses, and screenshots.
Report the website to PAGCOR.
File a complaint through the NBI online complaint channel or approach the NBI Cybercrime Division when the facts indicate online fraud, identity theft, or cyber-enabled estafa. Formal investigation may require a complaint sheet, sworn statement, identification, and supporting evidence. (National Bureau of Investigation)
When personal data has been misused or improperly disclosed, consider a complaint with the National Privacy Commission. A formal NPC complaint generally requires the prescribed complaint form or verified complaint, supporting evidence, and notarization. (National Privacy Commission)

Recovery is not guaranteed, particularly when money was converted into cryptocurrency or transferred through several accounts. Reporting quickly improves the possibility that a payment provider or investigator can preserve transaction records.

Rules for Foreigners and Filipinos Abroad

A foreigner physically present in the Philippines should apply the same verification test: the exact platform must be authorized for local operation, and the player must satisfy PAGCOR restrictions and the operator’s KYC requirements.

Foreign passports and immigration documents may be accepted for identity verification, depending on the operator. A foreigner should not assume that a license from his or her home country makes an unlisted website lawful in the Philippines.

For Filipinos or other users physically located abroad, two sets of rules may matter:

Philippine rules and the platform’s eligibility conditions; and
The gambling laws of the country or territory where the player is physically located.

A PAGCOR-authorized site may block access from certain countries. Using a VPN to evade geographic restrictions can lead to account suspension, loss of promotional benefits, or a disputed withdrawal.

Frequently Asked Questions

How can I check a PAGCOR license online?

Search the exact brand and domain on the PAGCOR Guarantee website, then cross-check the domain in PAGCOR’s detailed list of accredited administrators, brands, and URLs. Use the link supplied by PAGCOR rather than a link from an advertisement or private message.

Is every online casino illegal in the Philippines?

No. PAGCOR continues to regulate authorized local electronic gaming platforms. However, an online casino that is accessible from the Philippines is not automatically legal. Its exact domain and game offering must be covered by current authorization. (PAGCOR)

Is a PAGCOR logo proof that the casino is legal?

No. Logos, seals, and license images can be copied. Independently verify the exact website in PAGCOR’s current records.

Are POGOs still legal?

No active POGO or IGL operation should rely on the former offshore licensing system. Executive Order No. 74 required all covered offshore gaming operations to cease by December 31, 2024 and prohibited new licenses and renewals. (Lawphil)

Does a Curaçao or Malta license make an online casino legal in the Philippines?

Not by itself. A foreign license does not substitute for the Philippine authorization needed to offer regulated gambling services within Philippine jurisdiction.

Is GCash or Maya acceptance proof of legality?

No. Illegal operators and scammers may use e-wallets, bank transfers, payment agents, or cryptocurrency. Payment method and licensing status are separate questions.

What is the minimum legal gambling age in the Philippines?

PAGCOR-regulated gambling is limited to persons who are at least 21 years old, subject to other restrictions. (PAGCOR)

Can a casino ask for my ID and selfie?

Yes, identity and age verification are normal compliance measures. However, verify the domain first. Never provide an OTP, e-wallet PIN, banking password, or remote access to your device.

What should I do when a licensed casino delays my withdrawal?

Read the stated reason, complete legitimate KYC requirements, preserve all records, and submit a written complaint to the operator. If unresolved, send the evidence to PAGCOR’s Electronic Gaming Licensing Department.

Can I get my money back from an illegal casino?

Possibly, but recovery depends on how the payment was made, how quickly it was reported, whether the recipient account can be traced or frozen, and whether the operator has reachable assets. Contact the payment provider and law-enforcement authorities immediately rather than paying further fees.

Key Takeaways

A legal online casino should appear in PAGCOR’s current official records.
Verify the exact domain, not only the brand name or logo.
Cross-check the game offering, operator, subdomain, and additional URLs.
An SEC registration, app-store listing, e-wallet option, foreign license, or PAGCOR image is not enough.
POGO and IGL operations were ordered to cease by December 31, 2024.
Players must generally be at least 21 and must not fall within PAGCOR’s restricted categories.
Verify the site before submitting identification or depositing money.
Preserve screenshots and transaction records when a withdrawal or fraud problem arises.
Report unclear licensing claims to PAGCOR and suspected online fraud promptly to the payment provider and appropriate law-enforcement agency.