An online gaming site is not legal in the Philippines simply because it displays a PAGCOR logo, accepts GCash, appears in Google results, or claims to hold a foreign gambling license. For a casino, sports-betting, bingo, poker, or similar real-money platform, the safest test is to match the exact website address and game offering against PAGCOR’s current official records before registering, uploading identification, or sending money.

When Is an Online Gaming Site Legal in the Philippines?

For PAGCOR-regulated gaming, a site should satisfy all of these conditions:

The operator or gaming system administrator is authorized by the Philippine Amusement and Gaming Corporation.
The exact domain name, subdomain, or additional URL appears in PAGCOR’s current published list.
The particular game being offered—such as electronic casino games, sports betting, electronic bingo, online poker, specialty games, or numeric games—is within the operator’s approved scope.
The site follows Philippine access, identity-verification, responsible-gaming, and payment rules.
The operator is not conducting a prohibited offshore gaming operation or using an expired, revoked, or fabricated license.

For PAGCOR-regulated platforms, the fastest starting point is the official PAGCOR Guarantee verification site. PAGCOR launched this service so players can identify licensed internet gaming platforms and enter them through verified links rather than advertisements, text messages, or social-media agents. (PAGCOR)

If a site cannot be found in the official verification system or published lists, treat it as unverified. Do not deposit money while waiting for confirmation.

Philippine Laws Governing Online Gambling

PAGCOR’s authority to license domestic gaming

Presidential Decree No. 1869, as amended by Republic Act No. 9487 of 2007, grants PAGCOR authority to operate and license casinos, gaming clubs, bingo, gaming pools, and similar gaming activities within Philippine territory, subject to exceptions for activities assigned by law to another government regulator.

PAGCOR’s Electronic Gaming Licensing Department currently oversees domestic electronic casino games, electronic bingo, sports betting, online poker, specialty games, numeric games, and related online platforms connected with authorized gaming operations. (Lawphil)

This means online gambling is not automatically illegal. It becomes lawful only when the relevant operator, platform, domain, games, and manner of operation are covered by valid Philippine authorization.

Unlicensed or out-of-scope gaming is illegal

Presidential Decree No. 1602 is the principal anti-gambling law covering unauthorized gambling activities. Republic Act No. 9287 of 2004 increased penalties specifically for illegal numbers games, such as jueteng and masiao; it should not be treated as the sole law governing every online casino or sportsbook.

Executive Order No. 13, series of 2017, further clarified that gambling-related activities are illegal when they:

Lack authority or a license from a duly empowered government agency;
Operate beyond the territory or scope covered by the license;
Violate the conditions imposed by the regulator; or
Use, share, lease, transfer, or otherwise misuse another operator’s authorization.

A legitimate company name therefore does not legalize every website using that name. The site must operate within the authorization actually granted to it. (Lawphil)

The POGO ban does not mean all domestic online gaming is banned

A common source of confusion is the ban on Philippine Offshore Gaming Operators or POGOs.

Executive Order No. 74, issued in 2024, ordered POGOs, Internet Gaming Licensees, and other offshore gaming operations to cease operations by December 31, 2024. Republic Act No. 12312, the Anti-POGO Act of 2025, then permanently banned offshore gaming operations conducted from the Philippines for offshore players. Previously issued POGO-related licenses were revoked, and government agencies lost the authority to issue new offshore gaming licenses. (Supreme Court E-Library)

The distinction is important:

Type of operation	Present legal position
PAGCOR-authorized domestic online gaming offered within an approved Philippine framework	May be legal if the exact operator, URL, games, and operations are approved
POGO or IGL operation based in the Philippines and catering to players abroad	Banned under RA 12312
Foreign website relying only on a Curaçao, Malta, Isle of Man, or other overseas license	Foreign license alone does not establish Philippine authorization
Site using a copied PAGCOR logo or old POGO certificate	Not proof of legality
Free-to-play game with no wager or cash-convertible prize	Usually outside gambling regulation, depending on its actual mechanics

RA 12312 carries substantial penalties for prohibited offshore operations, including imprisonment of six to eight years and a fine of at least ₱15 million for a first offense. It also penalizes defined forms of aiding or abetting offshore operations. (Supreme Court E-Library)

How to Verify an Online Gaming Site Step by Step

1. Copy the complete website address

Open the site in a browser and copy what appears in the address bar. Record the complete address, including:

Main domain, such as example.ph;
Subdomain, such as play.example.ph;
Domain ending, such as .ph, .com, .net, .vip, or .app;
Any spelling differences, added hyphens, numbers, or substituted letters; and
The address to which the site redirects after login.

A one-character difference can lead to a clone site. For example, approval of sample.ph does not automatically cover:

sample-ph.com;
samples.ph;
samplecasino.net;
sample1.ph; or
A Telegram or Facebook page using the same brand.

Do not rely on the brand name alone.

2. Search the PAGCOR Guarantee site

Visit the PAGCOR Guarantee verification platform by typing the address yourself or entering through PAGCOR’s official government website.

Search for the gaming brand. When possible, use the link supplied by PAGCOR rather than clicking a sponsored Google result, social-media advertisement, influencer link, text message, or QR code.

The verification page is intended to provide regularly updated links to licensed internet gaming platforms under PAGCOR oversight. (PAGCOR)

3. Cross-check both official PAGCOR domain lists

PAGCOR maintains separate records for different types of authorized operations. On the Electronic Gaming Licensing Department page, check at least these two documents:

List of PAGCOR-Accredited Gaming System Administrators and Registered Brands and Domain Names/URLs
List of Registered Brands and Domain Names/URLs of Licensed Casinos

At the time of writing, both public lists are dated June 30, 2026. One covers accredited gaming system administrators and their registered brands and URLs; the other covers PAGCOR-approved online brands and domains of licensed casinos and integrated resorts.

Compare all relevant columns:

Information to match	What it tells you
Gaming system administrator or integrated resort	The legal entity responsible for the operation
Game offering or suite of games	What forms of gambling the approval covers
Main brand	The primary consumer-facing brand
Root word and sub-brand	Approved brand variations
Main domain	The operator’s principal registered website
Subdomain	Approved sections or versions of the site
Additional URL	Other web addresses PAGCOR has expressly registered

The domain must match exactly. A site is not verified merely because its parent company or a similar brand appears somewhere in the list.

4. Check whether the particular game has started authorized commercial operations

In the June 30, 2026 list of gaming system administrators, some game offerings are marked with an asterisk. PAGCOR’s note states that these are game offerings that have yet to commence commercial operations.

This creates an important distinction:

The company or domain may already appear in the list;
Some of its games may be active and approved;
Another asterisked game under the same brand may not yet be commercially operational.

For example, approval to offer electronic casino games does not automatically permit sports betting or online poker. Match the game you intend to play against the exact approved offering.

5. Check the operator information shown on the site

A credible licensed site should clearly disclose:

Its registered corporate operator or gaming system administrator;
Its Philippine regulatory status;
Terms and conditions;
Privacy policy;
Withdrawal and account-verification rules;
Customer-service and complaint channels;
Responsible-gaming information;
Self-exclusion or account restriction tools; and
A clear statement that gaming is for persons aged 21 and above.

The corporate name on the site should be consistent with the PAGCOR record. A Securities and Exchange Commission registration, mayor’s permit, or BIR registration may show that a company exists, but none of these documents substitutes for gaming authorization.

6. Test whether the site uses proper KYC procedures

“KYC” means Know Your Customer, the process used to verify a player’s identity, age, and account information.

PAGCOR-regulated operators are expected to use identity-verification procedures to prevent minors and restricted persons from playing. A platform that permits unlimited gambling without meaningful identification checks should be treated with caution. (PAGCOR)

A normal KYC process may request:

A valid government-issued photo ID;
A live selfie or facial-verification check;
Date of birth;
Mobile number and email verification;
Address or source-of-funds information when required; and
Confirmation that the payment account belongs to the registered player.

KYC does not, by itself, prove that a site is legal. Scam sites also collect identification documents. Verify the domain first before uploading a passport, driver’s license, national ID, or selfie.

7. Examine how the site accepts deposits

Payment availability is not proof of legality. Illegal sites may use bank accounts, e-wallets, payment agents, QR codes, cryptocurrency, or personal accounts belonging to money mules.

Red flags include:

Deposits sent to an individual’s personal account;
A different recipient for every transaction;
Payment instructions given only through Telegram or private chat;
Requests to send cryptocurrency;
Credit-card betting;
An additional “tax,” “verification fee,” or “unlocking fee” before withdrawal;
Payments described as purchases, remittances, loans, or donations rather than gaming deposits; and
Instructions to conceal the real purpose of the transaction.

PAGCOR stated in December 2025 that licensed operators were subject to tighter payment controls and that credit cards and cryptocurrencies had been prohibited for betting. It also reported requirements for responsible-gaming tools such as self-exclusion and betting limits. (PAGCOR)

8. Ask PAGCOR for written confirmation when anything is unclear

Contact the Electronic Gaming Licensing Department through the official PAGCOR regulatory contact page.

Your inquiry should include:

The complete URL;
Brand name;
Name of the claimed operator;
Screenshot of the license claim;
Type of game offered;
Link from which you found the site; and
Any redirect or app-download address.

Ask whether the specific domain and game offering are currently authorized. Do not ask only whether the brand is “PAGCOR licensed,” because a real brand can be impersonated through an unregistered domain.

PAGCOR publishes its corporate address, regulatory email channels, and trunkline numbers on the contact page. (PAGCOR)

Warning Signs of an Illegal or Fake Gaming Site

Treat the following as serious warning signs:

The domain does not appear in PAGCOR’s verification system or current lists.
The site presents only a screenshot of a license.
The license refers to a POGO, IGL, or offshore operation.
The domain is slightly different from the approved domain.
The listed operator denies any connection with the site.
Registration is conducted entirely through Facebook, Viber, WhatsApp, or Telegram.
The app must be installed from an unverified APK file.
The operator accepts players below 21.
No identity verification is required.
The site promises guaranteed winnings or fixed daily returns.
Withdrawals require advance payment of a “PAGCOR tax.”
Customer service refuses to identify the licensed corporate operator.
The site continually changes domains after being blocked.
Deposits are sent to personal or unrelated accounts.
The platform uses copied government seals or misspelled regulatory language.

No legitimate Philippine regulator requires a player to pay a private agent to “release” winnings.

Age Limits and Restricted Players

PAGCOR’s responsible-gaming rules state that persons under 21 years old are not permitted to play. The rules also restrict certain other persons, including students enrolled in Philippine schools, members of the Armed Forces of the Philippines or Philippine National Police, certain government officials, gaming employees, excluded persons, and individuals appearing in PAGCOR’s National Database of Restricted Persons.

A site advertising “18+ Philippine casino games” is therefore a major red flag when it claims to be PAGCOR-regulated.

Licensed operators are also expected to maintain complaint mechanisms and responsible-gaming support. PAGCOR provides procedures for self-exclusion and family exclusion, with exclusion orders enforceable across PAGCOR-operated and regulated gaming facilities or sites under the applicable rules.

What to Do If the Site Is Not on PAGCOR’s List

Before depositing

Do not create an account, upload identification, or send a “small test deposit.” A small initial payment may expose your personal information and payment account to a larger fraud attempt.

Save the advertisement or message that led you to the site, then send the exact URL to PAGCOR for verification.

After depositing or being denied a withdrawal

Take these steps immediately:

Stop sending money. Do not pay alleged taxes, insurance, turnover requirements, verification fees, or account-unfreezing charges.
Preserve evidence. Take screenshots before the account, messages, or website disappear.
Contact the bank or e-wallet provider. Report the transaction through its Financial Consumer Protection Assistance Mechanism and ask whether the receiving account can be flagged or the transfer traced.
Change compromised passwords. Change passwords for your email, e-wallet, bank account, and any other service where you reused the same credentials.
Report the site to PAGCOR.
File a fraud or cybercrime complaint with the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or the appropriate local police cybercrime unit.
Report misuse of personal data to the National Privacy Commission when your identification, photographs, contact details, or financial information were improperly collected or used.

A useful evidence file includes:

Full URL and redirect URLs;
Screenshots showing the date and time;
Player username and account number;
Deposit and withdrawal history;
Bank or e-wallet transaction receipts;
Recipient name, account number, QR code, and reference number;
Chat messages, emails, and recorded support tickets;
Copies of advertisements and referral links;
The site’s terms and conditions;
Copies of identification submitted;
The claimed PAGCOR certificate; and
Names or phone numbers used by agents.

Do not edit screenshots. Keep the original files and export chat histories where possible.

Bank and e-wallet complaints

The first complaint should be made directly to the bank, e-money issuer, or other BSP-supervised institution. If its response is unsatisfactory, the matter may be escalated through the BSP Consumer Assistance Mechanism. BSP guidance requires consumers to use the institution’s internal complaint mechanism first and submit proof of that complaint when escalating. (bsp.gov.ph)

NBI cybercrime complaints

The NBI accepts online complaints and in-person requests for investigative assistance. Its citizen’s charter indicates that initial intake normally involves a complaint form, preliminary interview, sworn statement, and submission or examination of relevant evidence. The initial desk process may be completed relatively quickly when documents are ready, but the investigation, identification of account holders, coordination with banks, and recovery of funds can take substantially longer. (National Bureau of Investigation)

Fraud conducted through a website may involve estafa under the Revised Penal Code in relation to Republic Act No. 10175, the Cybercrime Prevention Act of 2012. Misuse of identifying information can also fall within the Act’s computer-related identity-theft provisions. (Lawphil)

National Privacy Commission complaints

If the operator misuses an ID, selfie, address, phone number, or financial data, a complaint may be filed with the National Privacy Commission under Republic Act No. 10173, the Data Privacy Act of 2012.

The NPC generally requires a properly completed complaint, supporting evidence, and verification or notarization. Its official procedure permits filing personally, by registered mail, courier, or authorized electronic submission. (National Privacy Commission)

Special Considerations for Foreigners and Filipinos Abroad

Foreigners physically present in the Philippines

A foreign passport does not create an exemption from Philippine gaming rules. A foreigner using a site while in the Philippines should verify that the platform is authorized for Philippine domestic gaming and that the operator accepts the player under its KYC, nationality, residency, and location rules.

A license issued in the player’s home country does not automatically authorize the website to operate in the Philippines.

Filipinos located abroad

A PAGCOR-approved platform is not automatically legal in another country. A Filipino overseas must also check the laws of the country or state where the person is physically located. Many jurisdictions use geolocation and residency rules, and some prohibit online casino games even when the operator is licensed elsewhere.

Using a VPN does not expand the operator’s license. It may also violate account terms, defeat location checks, and result in account closure or forfeiture disputes.

Complaints filed from abroad

A victim outside the Philippines can begin by preserving electronic records and contacting PAGCOR, the relevant financial institution, or law enforcement electronically. For formal affidavits, court filings, or representation in the Philippines, documents signed abroad may need proper notarization and, depending on the country and receiving agency, an apostille or Philippine consular authentication.

Common Verification Scenarios

The brand is listed, but the URL is different

Do not deposit. A legitimate brand may have multiple approved domains, but the particular URL must appear as a main domain, subdomain, or additional URL—or be confirmed directly by PAGCOR.

The listed domain redirects to another website

Check the final address in the browser. A routine technical redirect may be legitimate, but a redirect to an unlisted domain creates a clone-site or unauthorized-affiliate risk. Obtain PAGCOR confirmation before proceeding.

The app is available in a major app store

App-store availability is not a Philippine gaming license. Verify the developer, operator, website domain, privacy policy, and PAGCOR record independently.

The site accepts GCash, Maya, or a Philippine bank transfer

Payment acceptance does not prove legality. Scammers frequently use personal, rented, compromised, or money-mule accounts. Verify the gaming site separately.

The site shows an SEC certificate

An SEC certificate proves corporate registration, not authorization to conduct gambling. A corporation may legally exist while operating an unauthorized gaming website.

An influencer says the site is PAGCOR-approved

Advertising, sponsorship, affiliate links, and celebrity endorsements do not establish legal authority. Use PAGCOR’s records rather than the promoter’s statement.

Frequently Asked Questions

Is online gambling legal in the Philippines?

Some domestic online gambling is legal when conducted through a PAGCOR-authorized operator, approved platform, exact registered domain, and approved game offering. Unlicensed, out-of-scope, and offshore POGO operations are illegal.

How can I check a PAGCOR license online?

Start with the PAGCOR Guarantee site, then cross-check the current domain lists on PAGCOR’s Electronic Gaming Licensing Department page. Match the exact URL, operator, brand, and game.

Is a PAGCOR logo enough to prove that a site is legal?

No. Logos and certificate images can be copied. PAGCOR’s own website and current domain records are more reliable than anything displayed by the gaming site.

Is a foreign gambling license valid in the Philippines?

A foreign license may authorize operations in the issuing jurisdiction, but it does not by itself prove that the site is authorized to accept players or operate gaming activities in the Philippines.

Are POGOs still legal?

No. Offshore gaming operations covered by the POGO and IGL framework were ordered closed, and RA 12312 permanently banned offshore gaming operations conducted from the Philippines for offshore players.

Can an 18-year-old use a PAGCOR-licensed gaming site?

No. PAGCOR-regulated gambling is restricted to persons aged 21 and above. A site accepting Philippine players at 18 should be treated as suspicious.

Does using an e-wallet prove that the site is regulated?

No. Licensed and illegal sites can both attempt to use electronic payment channels. The exact gaming domain must still be independently verified.

What if the site asks for a tax before releasing my winnings?

Do not pay it. Demands for an advance “PAGCOR tax,” account-unlocking fee, insurance charge, or clearance payment are common fraud indicators. Preserve the demand and report it.

Can I use a VPN to access a blocked gambling site?

A VPN does not make an unauthorized site legal. It may also violate the operator’s terms, bypass geolocation controls, and create withdrawal or account-verification problems.

Can money sent to an illegal gaming site be recovered?

Recovery depends on how quickly the payment is reported, whether the receiving account can be traced or frozen, whether the operator is identifiable, and whether funds remain available. Notify the bank or e-wallet immediately, preserve all records, and report the matter to PAGCOR and law enforcement.

Key Takeaways

Verify the exact URL, not only the gaming brand or company name.
Use the PAGCOR Guarantee site and PAGCOR’s current official domain lists.
Match the operator, brand, domain, subdomain, game offering, and operational status.
A foreign license, SEC registration, app-store listing, endorsement, or payment option is not a Philippine gaming license.
POGOs and other Philippine-based offshore gaming operations are banned under RA 12312.
PAGCOR-regulated gaming is for persons aged 21 and above and requires proper identity verification.
Do not send money to an unverified site or pay additional charges to release winnings.
Preserve evidence and promptly report suspected fraud to the payment provider, PAGCOR, law enforcement, and the National Privacy Commission when appropriate.