If you are about to deposit money, send a copy of your ID, or link an e-wallet to an online gaming site, pause first. In the Philippines, a site is not “legit” just because it has a PAGCOR logo, a flashy certificate, a celebrity endorser, or a .ph domain. The safer test is whether the exact website, brand, and type of game can be verified through official Philippine regulators, especially the Philippine Amusement and Gaming Corporation or PAGCOR. This guide explains how to check if an online gaming site is legal in the Philippines, what red flags to watch for, what laws apply, and what evidence to save if you think you have been scammed.

The short answer: check the exact site against PAGCOR’s official list

For most online casino, e-bingo, sports betting, poker, specialty game, and similar online gambling platforms operating for Philippine players, the main regulator to check is PAGCOR.

PAGCOR maintains an official page for PAGCOR-authorized online gaming websites, described as a gateway to PAGCOR-approved online electronic games. The page lists categories such as electronic casino games, electronic bingo games, sports betting, specialty games, online poker games, licensed casinos, traditional bingo games, and numeric games. (PAGCOR)

The most important point is this:

Verify the exact domain name, not just the brand name.

For example, a legitimate brand may have one approved website, while scammers may create look-alike domains using extra numbers, hyphens, misspellings, Telegram links, Facebook pages, or shortened URLs. If the official PAGCOR list shows one domain but you are being asked to deposit through a different domain or private agent, treat that as a serious warning sign.

What “legit online gaming site” means under Philippine law

In practical terms, a “legit” online gaming site in the Philippines should meet all three conditions:

It is authorized by the proper Philippine regulator for the specific type of game being offered.
The exact website or app is connected to that authorization, not merely using the name of a licensed company.
It follows basic regulatory safeguards, such as age restrictions, identity verification, responsible gaming measures, and lawful payment practices.

A Philippine business registration is not enough. SEC or DTI registration only proves that an entity may exist as a business. It does not by itself prove that the company can legally operate online gambling.

A payment option is also not enough. The fact that a site accepts bank transfer, GCash, Maya, crypto, or card payments does not prove that the site is licensed. Payment access can be abused by illegal operators and agents.

Legal basis: why PAGCOR matters

PAGCOR’s authority comes mainly from Presidential Decree No. 1869, known as the PAGCOR Charter, and Republic Act No. 9487 of 2007, which amended and extended PAGCOR’s franchise.

PD 1869 declared a State policy to centralize and integrate games of chance under a government-controlled entity, and it created PAGCOR to implement that policy. (Supreme Court E-Library)

RA 9487 extended PAGCOR’s franchise and gave it authority to operate and license gambling casinos, gaming clubs, gaming pools, bingo, and similar recreation or amusement places within the territorial jurisdiction of the Philippines, subject to legal limits and exceptions. (Lawphil)

PAGCOR’s general mandate is commonly summarized as having three parts: to regulate, operate, authorize, and license games of chance, games of cards, and games of numbers; to generate revenue for government programs; and to help promote Philippine tourism. (Integrated Corporate Reporting System)

This is why a site claiming to offer online casino games or sports betting to Philippine players should not merely say “licensed.” It should be traceable to PAGCOR’s official records.

Important: POGO and offshore gaming claims are now a major red flag

Many scam sites still use old language such as:

“PAGCOR offshore license”
“POGO licensed”
“Philippine Offshore Gaming Operator”
“Internet Gaming License for foreign players”
“PAGCOR international casino license”

Be careful. In 2024, President Ferdinand R. Marcos Jr. issued Executive Order No. 74, imposing an immediate ban on Philippine Offshore Gaming Operators and Internet Gaming Licensees, commonly known as POGOs or IGLs. The Presidential Communications Office stated that all POGOs, IGLs, and offshore gaming-related operations with licenses or permits were expected to cease operations by December 31, 2024 or earlier. (Presidential Communications Office)

That does not mean every PAGCOR-authorized domestic online gaming site disappeared. It means that a site relying on a supposed offshore or POGO/IGL authorization after the ban deserves extra scrutiny.

A simple rule:

Claim made by the website	What it may mean
Listed on PAGCOR’s current authorized online gaming page	Stronger sign of legitimacy, but still check the exact URL and game type
Uses PAGCOR logo only	Not enough
Shows a “PAGCOR certificate” image only	Not enough; certificates can be fabricated
Claims to be POGO/IGL after 2024	Major red flag
Says “Philippine licensed” but targets players abroad	Check both Philippine status and the player’s local law
Uses a private agent, Telegram wallet, or personal bank account	High-risk warning sign

PAGCOR itself has warned the public about illegal offshore gaming websites claiming to be licensed or accredited by the agency and using the PAGCOR logo with fabricated license certificates. (PAGCOR)

Step-by-step guide: how to check if an online gaming site is legit in the Philippines

1. Copy the exact website address

Do not rely on what the ad says. Copy the exact URL from your browser.

Check for:

Misspellings
Extra numbers
Extra hyphens
Unusual endings such as random .vip, .cc, .xyz, or mirror domains
Links that redirect several times
Shortened links from Facebook, TikTok, Telegram, Viber, or SMS

A scam site may look almost identical to a real brand. The difference may be one letter or one added number.

2. Go to PAGCOR’s official website yourself

Do not click the “PAGCOR verified” badge inside the gaming site. Open PAGCOR’s website separately and look for its official authorized online gaming list.

PAGCOR’s authorized online gaming page lists approved electronic games and brands by category, including e-casino, e-bingo, sports betting, specialty games, online poker, licensed casinos, traditional bingo, and numeric games. (PAGCOR)

When checking, compare:

Brand name
Exact domain
Game type
Related operator or administrator, if shown
Whether the site you are using is the same site listed by PAGCOR

3. Check whether the site is authorized for the game it offers

A site may be authorized for one type of gaming activity but not another.

For example:

If the site offers	Check whether it is listed for
Online slots or live casino	Electronic casino games or licensed casino
Online bingo	Electronic bingo or traditional bingo
Sports betting	Sports betting
Poker	Online poker games
Perya-style or arcade betting games	Specialty games or numeric games, depending on the game
Lotto	PCSO, not merely PAGCOR
Horse racing betting	The relevant racing/gaming regulator, not just a casino license

Do not assume that one license covers everything. A site that is authorized for one game category may not be authorized to operate a different product.

4. Do not treat a PAGCOR logo as proof

A PAGCOR logo is easy to copy. So is a PDF certificate.

Weak proof includes:

A logo in the footer
A screenshot of a license
A “verified” badge that links back to the same gaming site
A customer service agent saying “yes, legit kami”
An influencer saying the site is safe
A Facebook page claiming “PAGCOR accredited”
A private Telegram agent sending a certificate image

Stronger proof is when the exact domain appears on an official PAGCOR source.

5. Look for age verification and KYC

“KYC” means Know Your Customer. It is the process of verifying a player’s identity through documents such as a valid ID, date of birth, and account information.

Legitimate gaming operators generally need player verification because Philippine gaming rules restrict who may gamble. PAGCOR’s responsible gaming page states that persons under 21 years of age are not allowed to gamble, and it also identifies other restricted persons, including certain government officials, AFP and PNP members, persons in the National Database of Restricted Persons, and Gaming Employment License holders. (PAGCOR)

Be cautious if a site:

Lets anyone play without age checks
Allows minors to register
Refuses to explain its KYC process
Accepts deposits instantly but demands excessive documents only when you withdraw
Asks for your ID through a private chat instead of a secure account verification page

KYC should protect the player and the platform. It should not be used as an excuse to trap winnings.

6. Review withdrawal rules before depositing

Many disputes start because players deposit first and read the rules later.

Before sending money, check:

Minimum and maximum withdrawal amounts
Processing time
Bonus wagering requirements
Whether your deposit method must match your withdrawal method
Account suspension rules
Dormancy fees
Required identity documents
Dispute or complaint process

A strict bonus rule is not automatically illegal, but a site that hides its rules, changes terms after you win, or demands a “tax,” “clearance,” or “unlocking fee” before release of winnings is suspicious.

7. Check the payment flow

Legitimate operators normally use traceable payment channels connected to the player’s account.

Be extra careful if you are told to:

Send money to a personal bank account
Send crypto to an individual wallet
Transfer to a random e-wallet number
Send proof of payment to a Telegram agent
Use multiple rotating accounts
Pay an extra “verification fee” to withdraw
Deposit again before an existing withdrawal is released

In 2025, the Bangko Sentral ng Pilipinas ordered BSP-supervised institutions to suspend in-app gambling access in mobile payment apps and websites due to concerns over online gambling transactions and financial health risks. (Bangko Sentral ng Pilipinas) This makes it even more important not to treat e-wallet availability as proof that a gambling site is lawful.

8. Search for official warnings

Search the exact domain together with words like:

“PAGCOR warning”
“scam”
“fake license”
“withdrawal problem”
“illegal offshore gaming”
“NBI”
“PNP ACG”

PAGCOR has issued warnings about fake offshore gaming websites using its logo and fabricated license certificates. (PAGCOR)

A single complaint online does not always prove fraud, but repeated complaints about frozen withdrawals, fake KYC, unreachable support, or forced “fees” are warning signs.

Other laws that may apply to illegal online gaming and scams

PD 1602 and illegal gambling

Presidential Decree No. 1602 prescribes penalties for illegal gambling. It works alongside older gambling provisions in the Revised Penal Code and later special laws. The Supreme Court has recognized that gambling is generally prohibited under Philippine law except when allowed by law or proper authority. (Lawphil)

A 2025 Supreme Court press release also emphasized that for an illegal gambling conviction, law enforcement must present clear and specific details of the gambling activity, including the game, the persons involved, the bets, and the money used. (Supreme Court of the Philippines)

For ordinary players, the practical lesson is that evidence matters. Screenshots, payment records, account IDs, chat logs, and exact URLs are important if a complaint is filed.

RA 9287 and illegal numbers games

Republic Act No. 9287 of 2004 increases penalties for illegal numbers games, such as jueteng, masiao, and last two. It defines an illegal numbers game as an illegal gambling activity using numbers or combinations as factors in giving out jackpots. (Lawphil)

This can matter when a site offers online number-based betting but cannot show authorization from PAGCOR, PCSO, or another proper regulator.

RA 10175 and cybercrime

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may apply when deception, identity theft, computer-related fraud, or other crimes are committed through websites, apps, or online accounts. The law covers cybercrime offenses and may also apply when crimes under the Revised Penal Code or special laws are committed through information and communications technology. (Lawphil)

If a fake gaming site takes deposits, steals identity documents, locks accounts, impersonates a legitimate operator, or uses phishing links, the issue may be more than a gaming violation. It may also be a cybercrime complaint.

RA 10173 and data privacy

Republic Act No. 10173, the Data Privacy Act of 2012, applies to the processing of personal information. It covers natural and juridical persons involved in personal information processing, including certain entities outside the Philippines that use equipment located in the Philippines or maintain an office, branch, or agency in the country. (National Privacy Commission)

This matters because online gaming sites often collect sensitive information: IDs, selfies, birthdays, addresses, mobile numbers, bank details, and transaction records. A fake site can use those documents for identity theft or loan-app fraud.

RA 10927 and anti-money laundering rules for casinos

Republic Act No. 10927 of 2017 amended the Anti-Money Laundering Act by designating casinos, including internet and ship-based casinos, as covered persons under the AMLA framework. (Anti-Money Laundering Council)

This is one reason legitimate gaming operators may ask for identity verification and transaction monitoring. A site that proudly says “no ID needed, unlimited cash-in and cash-out” may be trying to avoid compliance.

Red flags that an online gaming site may be illegal or unsafe

Treat these as warning signs:

The site is not on PAGCOR’s official authorized online gaming list.
The site uses a PAGCOR logo but gives no verifiable license details.
The domain is different from the one shown on official sources.
The site claims to be a POGO or offshore licensee after the 2024 ban.
Customer service communicates only through Telegram, Viber, or Facebook Messenger.
Deposits go to personal accounts.
Withdrawals are delayed until you pay “tax,” “verification,” “unlocking,” or “anti-money laundering” fees.
The site refuses to give its registered operator name.
The site has no clear terms and conditions.
It allows underage play or no KYC at all.
It asks for your ID through an unsecured chat.
It uses high-pressure messages such as “deposit now or your account will be frozen.”
It promises guaranteed winnings.
It changes website domains frequently.

One red flag may be explainable. Several red flags together usually mean you should not deposit money or submit personal documents.

What to save if you think the site is fake or refused your withdrawal

If you may need to complain, save evidence before the site deletes your account or chat history.

Evidence	Why it matters
Exact URL and screenshots	Shows the site you actually used
Account username or player ID	Connects your complaint to the platform account
Deposit receipts	Proves the amount and destination
Withdrawal request screenshots	Shows that you tried to withdraw
Chat logs with support or agents	Shows promises, excuses, or demands for fees
Terms and conditions at the time you played	Helps show if rules were changed later
Copy of the license claim or certificate	Useful if the site used a fake PAGCOR claim
Bank/e-wallet account names and numbers	Helps trace recipients
Dates and times	Helps investigators reconstruct the transaction
IDs or documents you submitted	Helps assess data privacy and identity theft risk

Do not edit screenshots except to make copies. Keep original files where possible. If a complaint may be filed, prepare a simple written timeline: when you registered, when you deposited, what game you played, when you requested withdrawal, what the site said, and how much remains unpaid.

Where to report a suspicious online gaming site

Different offices handle different parts of the problem.

Problem	Where to start
Checking whether a gaming site is licensed	PAGCOR, especially its Electronic Gaming Licensing or regulatory contact channels
Fake PAGCOR logo or fake license claim	PAGCOR
Online scam, phishing, identity theft, or hacked account	PNP Anti-Cybercrime Group or NBI Cybercrime Division
Personal data misuse	National Privacy Commission
E-wallet or bank transfer dispute	Your bank or e-wallet provider, plus law enforcement if fraud is involved
Illegal numbers games	Police, local authorities, and the relevant regulator depending on the game

PAGCOR’s contact page lists its corporate contact details and official inquiry channels, while its regulatory contact page lists departments including the Electronic Gaming Licensing Department. (PAGCOR Support)

For cybercrime incidents, complaints are commonly brought to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. The DOJ also has an Office of Cybercrime that coordinates cybercrime policy and reporting information. (CyberSecurity.PH)

In practice, expect investigators to ask for:

Valid government ID
Complaint affidavit or written narrative
Screenshots and transaction records
Device or account details
Contact details of the suspect, if known
Bank or e-wallet records

For people abroad, a complaint affidavit executed outside the Philippines may need notarization and, depending on where it is signed, apostille or consular authentication before it is used in Philippine proceedings.

Practical reminders for foreigners and Filipinos abroad

Foreigners should not assume that a PAGCOR-related claim automatically makes online gambling lawful in their own country. PAGCOR authorization is a Philippine regulatory issue. A player outside the Philippines may still be subject to the gambling, tax, banking, or online betting laws of the country where the player is physically located.

Filipinos abroad should also be careful with sites that claim “Philippine licensed” but target overseas players through mirror domains. After the POGO/IGL ban, offshore gaming claims should be checked very carefully.

For foreigners physically in the Philippines, legitimate operators may require passport information, proof of age, local contact details, and payment verification. Refusal to provide basic KYC may lead to withdrawal problems even with legitimate platforms, but the process should be secure, documented, and connected to the player account—not handled by a random agent in a private chat.

Common scenarios

“The site has a PAGCOR logo. Is that enough?”

No. PAGCOR has warned that fake offshore gaming websites have used the PAGCOR logo and fabricated license certificates. (PAGCOR) Always verify the exact website through official PAGCOR sources.

“The site is registered with the SEC. Does that mean it is legal?”

No. SEC registration is not the same as a gaming license. A company may be registered as a corporation but still lack authority to operate online gambling.

“The agent said I need to pay tax before withdrawing my winnings.”

Be very careful. Legitimate taxes and regulatory deductions are not usually paid by sending extra money to a personal account before releasing a withdrawal. Requests for “tax clearance,” “unlocking,” or “AML fee” payments are common scam patterns.

“The app is on Google Play or available as an APK. Is it safe?”

Not necessarily. App availability does not prove Philippine gaming authorization. APK downloads from links or Telegram are especially risky because they can contain malware or steal login details.

“The site accepted my deposit but now wants KYC before withdrawal.”

KYC is normal for legitimate gaming operators, especially before withdrawal. The issue is whether the site is actually authorized, whether the KYC process is secure, and whether the requested documents are reasonable. If the site asks for repeated documents, rejects valid IDs without explanation, or demands payment to “verify,” save evidence.

Frequently Asked Questions

How do I know if an online casino is legit in the Philippines?

Check whether the exact website appears on PAGCOR’s official authorized online gaming list. Do not rely only on the logo, certificate image, social media ads, or customer service statements.

Is PAGCOR the only regulator for all online gaming?

No. PAGCOR is the main regulator for many casino-style online games, e-bingo, sports betting, specialty games, poker, and licensed casino online platforms. PCSO-related lottery products and other special gaming activities may fall under different rules or agencies.

Are POGO sites still legal in the Philippines?

POGO and IGL operations were covered by the 2024 ban under Executive Order No. 74, with operations expected to cease by December 31, 2024 or earlier. A site claiming a POGO or offshore Philippine license after that date should be treated as high risk unless verified through official government sources. (Presidential Communications Office)

Is it illegal for me to play on an unlicensed online gaming site?

Illegal gambling laws can apply to unauthorized gambling activities. The bigger practical risks for ordinary users are losing deposits, non-payment of winnings, identity theft, and being drawn into cybercrime or money-laundering investigations. Avoid sites that cannot be verified.

Can a site be legitimate if it uses GCash, Maya, or bank transfer?

Payment access does not prove legitimacy. Regulators have raised concerns about online gambling access through digital payment platforms, and BSP-supervised institutions were directed to suspend in-app gambling access in 2025. (Bangko Sentral ng Pilipinas) Always verify the site separately.

What should I do if my withdrawal is locked?

Save screenshots, transaction receipts, chat logs, the site URL, your account ID, and the withdrawal request. Check if the site is on PAGCOR’s official list. If it appears unauthorized or fraudulent, report to PAGCOR and consider a cybercrime complaint with PNP ACG or NBI Cybercrime Division.

Can I recover money lost to a fake online gaming site?

Recovery is difficult but not impossible. It depends on how you paid, whether the recipient account can be identified, how quickly you reported, and whether the operator is within reach of Philippine authorities. Report quickly to your bank or e-wallet provider and preserve all evidence.

Is a `.ph` domain proof that a gaming site is Philippine-licensed?

No. A .ph domain is not a gaming license. The site must still be authorized by the proper regulator for the specific gaming activity.

Are foreigners allowed to use Philippine online gaming sites?

It depends on the operator’s rules, Philippine regulatory requirements, KYC, and the law of the country where the foreigner is located. A foreign player should not assume that Philippine authorization overrides the gambling laws of another country.

Why do legitimate sites ask for ID?

Legitimate operators may need ID checks for age verification, anti-money laundering compliance, account security, and responsible gaming restrictions. Under PAGCOR responsible gaming rules, persons under 21 and certain restricted persons are not allowed to gamble. (PAGCOR)

Key Takeaways

The safest first check is PAGCOR’s official authorized online gaming list.
Match the exact domain, not just the brand name.
A PAGCOR logo, certificate image, influencer ad, app listing, or e-wallet option is not proof of legitimacy.
POGO or offshore gaming license claims after the 2024 ban are major red flags.
Legitimate platforms should have age checks, KYC, responsible gaming safeguards, clear withdrawal rules, and traceable payment channels.
Save screenshots, receipts, chat logs, URLs, and account details before reporting a suspected scam.
For fake sites, report the licensing issue to PAGCOR and cybercrime or fraud issues to PNP ACG or NBI Cybercrime Division.