I. Introduction

Online gambling in the Philippines is not a free-for-all activity. It is a heavily regulated business sector governed by Philippine statutes, presidential issuances, tax rules, anti-money laundering laws, data privacy requirements, local government regulations, and, most importantly, the licensing and supervisory powers of the Philippine Amusement and Gaming Corporation, commonly known as PAGCOR.

PAGCOR is both a government-owned and controlled corporation and the country’s principal gaming regulator. It has historically operated casinos while also issuing licenses to private gaming operators. In the online gambling space, PAGCOR’s role has become especially important because digital wagering allows gambling services to reach players across borders, across devices, and outside traditional casino premises.

For any business intending to operate an online gambling website connected to the Philippines, the central legal question is this:

Can the website lawfully offer gambling services, and if so, under what PAGCOR license, to which customers, from what location, using what systems, and subject to what restrictions?

The answer depends on the type of gaming activity, the target market, the operator’s corporate structure, the location of gaming infrastructure, payment flows, marketing practices, and whether the activity is domestic-facing or offshore-facing.

This article explains the Philippine legal framework for PAGCOR licensing rules for online gambling websites, including the distinction between licensed and illegal gambling, licensing requirements, offshore gaming, domestic online gaming, prohibited activities, compliance obligations, taxes, anti-money laundering duties, advertising issues, payment controls, penalties, and practical considerations for operators.

II. PAGCOR’s Legal Authority

PAGCOR was created under Presidential Decree No. 1869, as amended. Its charter gives it broad authority to regulate and operate games of chance, gaming pools, and similar gambling activities in the Philippines.

PAGCOR’s legal authority generally includes the power to:

regulate gaming operations;
issue gaming licenses;
impose license conditions;
collect license fees and regulatory fees;
monitor gaming systems and operations;
approve gaming equipment, platforms, and service providers;
suspend or cancel licenses;
enforce responsible gaming rules;
prevent illegal gambling; and
coordinate with other government agencies.

PAGCOR’s regulatory power is not unlimited. It operates within the Philippine legal system and must be read together with laws on taxation, cybercrime, anti-money laundering, immigration, labor, data privacy, local government permits, and consumer protection.

Still, in practical terms, a gambling website connected to the Philippines generally cannot operate lawfully unless it falls under a recognized license, authority, or regulatory framework issued by PAGCOR or another legally competent gaming regulator.

III. The Basic Rule: Online Gambling Requires a License

The basic Philippine rule is straightforward:

Operating an online gambling website without proper authority is illegal.

A website that allows users to place bets, wager money, play casino-style games, participate in sports betting, play online slots, poker, bingo, lottery-type games, or other games of chance must be licensed if it has a Philippine regulatory connection.

A Philippine connection may exist where:

the operator is incorporated or operating in the Philippines;
the servers, platform, employees, agents, or customer support are in the Philippines;
the website targets Philippine residents;
the website accepts Philippine players;
the website uses Philippine payment channels;
the website markets to Philippine users;
the website is managed from the Philippines; or
the gaming activity is otherwise conducted within Philippine jurisdiction.

Even if a website is hosted outside the Philippines, Philippine authorities may still treat it as unlawful if it accepts Philippine players or operates through Philippine-based personnel, payment channels, marketing agents, or service providers without proper authorization.

IV. Types of Online Gambling Activities Covered

PAGCOR licensing rules may apply to several forms of online gambling, including:

1. Online casino games

These include digital versions of casino games such as baccarat, blackjack, roulette, poker, sic bo, craps, slots, electronic table games, and live dealer games.

2. Sports betting

This includes wagering on local or international sporting events, esports, racing, and similar events where odds are offered and bets are accepted online.

3. Online bingo

Online bingo may be regulated separately depending on the structure of the game, whether it is connected to land-based bingo operations, and whether it targets Philippine players.

4. Electronic games and e-games

PAGCOR has historically regulated electronic gaming sites and electronic gaming platforms, including games offered through approved physical outlets or remote systems.

5. Offshore-facing online gaming

This refers to operators based in or connected to the Philippines but offering online gambling services to players located outside the Philippines, subject to restrictions.

6. Platform and service provider arrangements

Even entities that do not directly accept bets may require approval if they provide gaming software, live studio services, payment processing, customer support, data hosting, game aggregation, odds management, fraud control, or other critical gaming services.

V. Domestic Online Gambling vs. Offshore Online Gambling

One of the most important distinctions in Philippine online gambling regulation is the difference between domestic-facing and offshore-facing operations.

A. Domestic-facing online gambling

Domestic-facing gambling refers to online gambling services offered to persons located in the Philippines or otherwise allowed to participate from within the Philippines.

This is more sensitive because Philippine gambling laws historically regulate where gambling can occur, who may participate, how access is controlled, and whether the activity is authorized by a government gaming body.

A domestic-facing gambling website must generally be specifically authorized to accept Philippine-based players. A foreign gambling website cannot simply offer online casino games to Filipinos without Philippine authority.

B. Offshore-facing online gambling

Offshore-facing online gambling refers to operators that are licensed in the Philippines to provide gambling services to players outside the Philippines. Historically, these were known under the framework for Philippine Offshore Gaming Operators, or POGOs.

The POGO framework allowed certain operators to be based in the Philippines while serving foreign markets, subject to PAGCOR licensing. However, this sector has been highly controversial because of concerns involving illegal operations, criminal syndicates, tax enforcement, labor violations, human trafficking, cybercrime, money laundering, and reputational risks.

By 2024, the Philippine government had moved toward ending or banning the POGO industry. Because the regulatory position on offshore gaming has changed significantly in recent years, any operator must verify the current status of offshore licensing directly with PAGCOR and relevant government agencies before relying on any prior licensing model.

VI. The End of POGO and the Shift in Regulatory Policy

For years, the Philippines allowed licensed offshore gaming operators under PAGCOR supervision. These operators were generally not supposed to accept bets from persons located in the Philippines. Their customers were meant to be overseas players in jurisdictions where such gambling was not prohibited.

However, POGO operations became associated with serious enforcement concerns. These included allegations of scam hubs, illegal detention, immigration violations, money laundering, prostitution, kidnapping, torture, trafficking, and fraudulent online schemes.

As a result, the Philippine government announced a policy direction to shut down or prohibit POGO operations. The practical consequence is that a business should no longer assume that the old POGO model remains available merely because PAGCOR previously issued offshore gaming licenses.

A modern legal analysis must therefore distinguish between:

historical POGO licensing rules;
any transitional wind-down rules;
currently valid PAGCOR licenses;
special rules for local electronic gaming;
licensed gaming system providers; and
outright prohibited online gambling activity.

The safest legal position is that no offshore online gambling website should be launched, marketed, staffed, or operated from the Philippines unless PAGCOR has expressly confirmed that the specific activity is currently licensable and the operator has obtained the necessary authorization.

VII. Who Needs a PAGCOR License?

A PAGCOR license may be required not only for the company whose brand appears on the website, but also for related entities involved in the gambling operation.

Entities that may require licensing, accreditation, registration, or approval include:

the online gaming operator;
gaming platform providers;
game content suppliers;
live casino studio operators;
sports betting platform providers;
payment service providers connected to gaming transactions;
customer relationship management providers;
call centers supporting gambling websites;
marketing affiliates;
junket or player recruitment agents;
odds providers;
game testing laboratories;
data hosting or server providers;
anti-fraud and risk management vendors;
corporate shareholders and beneficial owners; and
key officers, directors, and compliance personnel.

PAGCOR may require disclosure of corporate ownership, ultimate beneficial ownership, funding sources, related-party arrangements, technical systems, bank accounts, payment channels, gaming products, and third-party vendors.

A common mistake is assuming that only the front-facing gambling website operator needs a license. In reality, PAGCOR and other regulators may also scrutinize the broader operational ecosystem.

VIII. Corporate Requirements for PAGCOR Licensing

A company applying for a PAGCOR license or accreditation will usually need to comply with Philippine corporate and regulatory requirements.

These may include:

registration with the Securities and Exchange Commission if the applicant is a corporation or partnership;
appropriate capitalization;
disclosure of shareholders and beneficial owners;
articles of incorporation and bylaws;
board resolutions authorizing the gaming business;
audited financial statements;
tax registration with the Bureau of Internal Revenue;
business permits from relevant local government units;
proof of legal office address;
fit-and-proper review of directors and officers;
no adverse criminal or regulatory history;
source-of-funds documentation;
bank certifications or financial capacity documents;
organizational chart;
compliance manuals; and
contracts with technical and operational vendors.

Foreign ownership restrictions may also matter depending on the exact activity, corporate structure, and regulatory classification. Gambling is a regulated sector, and foreign participation may be subject to specific licensing approval even where general corporate law would otherwise permit foreign equity.

IX. Fit-and-Proper Requirements

PAGCOR licensing is not merely documentary. The regulator may assess whether the applicant, its owners, officers, and key personnel are fit and proper to conduct gaming operations.

Factors may include:

integrity;
financial capacity;
competence;
regulatory history;
criminal history;
tax compliance;
anti-money laundering record;
reputation;
transparency of ownership;
absence of links to illegal gambling or organized crime;
capacity to protect players;
ability to maintain accurate gaming records; and
willingness to submit to audits and inspections.

Applicants with opaque ownership structures, nominee shareholders, unexplained funding, offshore shell companies, or politically exposed beneficial owners may receive heightened scrutiny.

X. Technical Requirements for Online Gambling Websites

A licensed online gambling website must generally satisfy technical standards imposed by PAGCOR or its approved testing and monitoring bodies.

These standards may cover:

game fairness;
random number generator integrity;
payout percentage controls;
platform security;
player account controls;
geolocation restrictions;
age verification;
identity verification;
anti-fraud monitoring;
responsible gaming tools;
data retention;
cybersecurity;
audit logs;
financial transaction records;
system uptime;
disaster recovery;
server location or access requirements;
reporting interfaces to PAGCOR;
game change approval;
source code review or certification;
penetration testing; and
segregation of player funds where required.

PAGCOR may require operators to use approved gaming systems, submit platforms for inspection, integrate monitoring tools, and obtain certifications from recognized testing laboratories.

XI. Website Content and Display Requirements

A licensed online gambling website may be required to display or make available:

the operator’s legal name;
license number or authority;
PAGCOR authorization details;
terms and conditions;
game rules;
payout rules;
privacy policy;
responsible gaming policy;
age restriction notice;
self-exclusion procedures;
complaint channels;
customer support details;
anti-money laundering notices;
prohibited jurisdiction rules;
account suspension rules;
deposit and withdrawal procedures;
bonus terms;
dispute resolution procedures; and
warnings against underage gambling.

A website that falsely claims to be PAGCOR-licensed may expose its operator to enforcement action, criminal liability, domain blocking, payment blocking, and reputational harm.

XII. Player Eligibility Rules

Online gambling operators must control who can register, deposit, and play.

For Philippine-facing operations, restrictions commonly include:

no minors;
no excluded persons;
no banned players;
no self-excluded players;
no persons prohibited by law;
no employees of the operator where prohibited;
no persons using fraudulent accounts;
no accounts created through identity theft;
no use of multiple accounts to abuse bonuses;
no players from prohibited jurisdictions; and
no politically or legally restricted persons where applicable.

Age verification is crucial. The Philippines generally prohibits minors from gambling. Operators cannot rely only on a checkbox stating “I am of legal age.” A serious licensing regime requires know-your-customer controls.

XIII. Know-Your-Customer Requirements

Online gambling is vulnerable to fraud, money laundering, identity theft, bonus abuse, and payment crime. Licensed operators must therefore implement KYC procedures.

A proper KYC framework may include:

collection of full legal name;
date of birth;
nationality;
residential address;
valid identification document;
mobile number and email verification;
liveness or selfie checks where appropriate;
sanctions screening;
politically exposed person screening;
duplicate account detection;
source-of-funds review for high-value players;
enhanced due diligence for suspicious activity;
periodic account review; and
transaction monitoring.

KYC rules are not only a PAGCOR concern. They also connect to the Anti-Money Laundering Act, as amended, and rules issued by the Anti-Money Laundering Council.

XIV. Anti-Money Laundering Obligations

Casinos and covered gaming entities in the Philippines are subject to anti-money laundering obligations. Online gambling operators may be treated as covered persons where they fall within the applicable statutory and regulatory definitions.

AML obligations generally include:

customer due diligence;
enhanced due diligence;
recordkeeping;
suspicious transaction reporting;
covered transaction reporting where applicable;
risk assessment;
internal AML policies;
appointment of compliance officers;
employee training;
independent audit;
screening against sanctions lists;
monitoring of unusual betting patterns;
monitoring of rapid deposits and withdrawals;
detection of chip dumping or equivalent online behavior;
prevention of mule accounts;
reporting of suspicious linked accounts; and
cooperation with AMLC investigations.

Online gambling presents specific AML risks because funds can move quickly through e-wallets, bank accounts, crypto channels, prepaid cards, or third-party payment aggregators. A licensed operator should not treat gaming transactions as ordinary e-commerce payments. They require higher scrutiny.

XV. Payment Processing Rules

Payment systems are central to online gambling regulation. PAGCOR and financial regulators may scrutinize how money enters and leaves the gambling platform.

Operators must generally ensure that:

deposits come from verified players;
withdrawals go back to the verified player or approved account;
third-party deposits are restricted or monitored;
payment channels are legal and approved;
transaction records are retained;
suspicious payment behavior is reported;
chargeback abuse is monitored;
player funds are not mixed improperly;
bonus funds are accounted for;
tax and fee calculations are auditable;
cryptocurrency is not used unless expressly allowed; and
payment partners are properly licensed or registered.

Banks, e-wallets, payment gateways, and remittance companies may refuse to process gambling-related transactions unless the operator can prove valid licensing.

XVI. Advertising and Marketing Rules

Online gambling advertising is legally sensitive. Even a licensed operator may violate rules by advertising improperly.

Possible restrictions include:

no advertising to minors;
no misleading claims about winnings;
no representation that gambling is a source of guaranteed income;
no promotion of irresponsible gambling;
no use of unauthorized celebrity endorsements;
no false claim of PAGCOR approval;
no targeting of prohibited jurisdictions;
no spam marketing;
no deceptive affiliate marketing;
no illegal SMS blasting;
no unlicensed influencer campaigns;
clear bonus terms;
fair disclosure of wagering requirements;
responsible gaming messaging; and
compliance with platform-specific rules of social media companies.

Affiliate marketing can be especially risky. If an affiliate promotes an illegal gambling website to Philippine users, both the affiliate and operator may face exposure.

XVII. Responsible Gaming Requirements

PAGCOR-regulated gambling operators are expected to implement responsible gaming safeguards.

These may include:

age-gating;
self-exclusion;
cooling-off periods;
deposit limits;
loss limits;
session reminders;
reality checks;
time-out functions;
account closure tools;
problem gambling information;
referral to support services;
restrictions on VIP inducements;
monitoring of harmful gambling behavior;
customer support escalation procedures; and
employee training on responsible gaming.

A licensed website should not be designed purely to maximize betting activity. It must include tools that allow players to control or stop gambling.

XVIII. Data Privacy and Cybersecurity

Online gambling websites collect sensitive personal and financial information. Operators must comply with the Data Privacy Act of 2012 and regulations of the National Privacy Commission.

Key privacy obligations include:

lawful basis for processing;
transparent privacy notices;
purpose limitation;
data minimization;
secure storage;
access controls;
encryption where appropriate;
breach notification;
data subject rights;
retention policies;
cross-border transfer controls;
vendor data processing agreements;
privacy impact assessments;
appointment of a data protection officer where required; and
protection against unauthorized disclosure.

Cybersecurity is also essential because gambling platforms are attractive targets for account takeover, payment fraud, DDoS attacks, insider manipulation, and ransomware.

XIX. Game Fairness and Random Number Generators

For casino-style games, fairness is central to licensing. PAGCOR may require certification that games operate according to approved mathematical rules.

This may involve:

random number generator testing;
return-to-player percentage verification;
game rule review;
payout table approval;
volatility analysis;
source code inspection;
server-side audit;
anti-tampering controls;
version control;
change management approval;
game logs;
incident reporting; and
periodic recertification.

Operators cannot secretly adjust payout rates, manipulate odds, or deploy unapproved game versions.

XX. Sports Betting Integrity

For sports betting websites, additional integrity issues arise.

A regulated sports betting operator may need systems for:

suspicious betting detection;
odds movement monitoring;
event integrity alerts;
match-fixing detection;
prohibited bettor controls;
athlete and official restrictions;
bet limit management;
voiding rules;
settlement rules;
data feed verification;
dispute handling; and
reporting to regulators.

Betting on certain events may be restricted or prohibited, especially where integrity risks are high.

XXI. Prohibited Acts

An online gambling website may be unlawful if it engages in any of the following:

operating without a PAGCOR license or valid authority;
accepting bets from prohibited persons;
accepting Philippine players without authorization;
serving prohibited foreign jurisdictions;
using unapproved games;
using unapproved payment channels;
laundering funds through gaming accounts;
concealing beneficial ownership;
submitting false documents to PAGCOR;
manipulating game outcomes;
failing to pay regulatory fees or taxes;
failing to report suspicious transactions;
employing undocumented foreign workers;
operating scam-related or fraudulent websites;
using a PAGCOR license as cover for non-gaming fraud;
falsely claiming to be licensed;
running mirror sites to evade blocking;
advertising to minors;
allowing account sharing or identity fraud;
refusing regulatory inspection;
hosting servers or operations in unauthorized locations;
violating data privacy rules;
failing to protect player funds; and
continuing operations after suspension or cancellation.

XXII. Website Blocking and Enforcement

Illegal gambling websites may face several forms of enforcement, including:

PAGCOR cease-and-desist action;
coordination with law enforcement;
domain blocking;
IP blocking;
payment blocking;
takedown requests;
criminal investigation;
tax enforcement;
deportation proceedings for foreign nationals;
cancellation of permits;
freezing of bank accounts;
AMLC investigation;
prosecution for illegal gambling;
cybercrime charges where applicable;
data privacy enforcement; and
forfeiture or seizure of equipment.

The government may also target service providers, including payment processors, landlords, data centers, marketing agents, recruiters, and corporate officers.

XXIII. Taxation of Online Gambling Operations

Licensed gaming operators may be subject to several tax and fee obligations.

These may include:

PAGCOR license fees;
regulatory fees;
franchise taxes or gaming taxes where applicable;
corporate income tax;
withholding taxes;
value-added tax or percentage tax, depending on classification;
documentary stamp taxes where applicable;
local business taxes;
employee compensation withholding;
taxes on foreign employees;
taxes on service providers; and
audit and reporting obligations.

The tax treatment of gaming operators has been a major issue in the Philippines, especially for offshore gaming operators. Operators should not assume that payment of PAGCOR fees replaces all tax obligations. BIR compliance is separate and must be handled carefully.

XXIV. Local Government Permits

Even with PAGCOR authority, a business may still need local permits.

These can include:

mayor’s permit;
barangay clearance;
zoning clearance;
occupancy permit;
fire safety inspection certificate;
sanitary permit;
sign permit;
local business tax registration; and
special permits depending on the city or municipality.

Local government units may impose additional restrictions, especially where the business involves call centers, studios, employee dormitories, gambling premises, or foreign workers.

XXV. Labor and Immigration Issues

Online gambling operations often involve large workforces, including IT staff, customer support agents, dealers, streamers, translators, risk analysts, compliance staff, and marketing personnel.

Operators must comply with:

Philippine labor laws;
employment contracts;
minimum wage rules;
social security contributions;
tax withholding;
occupational safety rules;
work permits for foreign nationals;
visas;
alien employment permits;
anti-trafficking laws;
workplace safety standards;
no forced labor;
no illegal detention; and
lawful housing arrangements.

Labor and immigration violations have been among the most serious issues associated with the online gambling sector.

XXVI. The Role of Special Economic Zones

Some gaming-related businesses have historically located in special economic zones or business parks. However, being located in an economic zone does not automatically authorize online gambling.

A company may have:

PEZA registration;
local business permits;
tax incentives;
office leases; or
foreign investment approval,

but none of these substitutes for a valid gaming license.

Gaming authority must come from PAGCOR or another legally authorized gaming regulator.

XXVII. Difference Between PAGCOR-Licensed Gambling and Illegal Online Casinos

A lawful PAGCOR-regulated website should be able to show:

the identity of the licensee;
the scope of the license;
the authorized gaming products;
the approved website or domain;
the permitted customer base;
the validity period;
regulatory compliance mechanisms;
responsible gaming tools;
AML controls;
approved payment channels; and
complaint mechanisms.

An illegal online casino often shows warning signs such as:

no clear company name;
vague claim of being “licensed”;
foreign license irrelevant to Philippine players;
no PAGCOR license number;
no local complaint channel;
anonymous operators;
cryptocurrency-only deposits;
unusually aggressive bonuses;
no KYC before large withdrawals;
refusal to pay winnings;
changing domains frequently;
using social media agents instead of official registration;
targeting minors or students;
no responsible gaming controls; and
no clear terms and conditions.

XXVIII. Foreign-Licensed Websites Targeting Philippine Players

A gambling website licensed abroad is not automatically legal in the Philippines.

A Curacao, Malta, Isle of Man, Gibraltar, or other foreign gaming license may authorize the operator in that foreign jurisdiction, but it does not necessarily authorize the operator to accept players located in the Philippines.

If the website targets Filipinos, accepts Philippine pesos, uses local e-wallets, advertises in the Philippines, hires local agents, or maintains Philippine operations, Philippine authorities may treat it as operating unlawfully unless it has appropriate Philippine authority.

Foreign licensing is not a substitute for PAGCOR authorization where Philippine law applies.

XXIX. Cryptocurrency and Online Gambling

Cryptocurrency gambling raises additional concerns.

Unless expressly authorized, an online gambling operator should not assume that it may accept cryptocurrency deposits or withdrawals. Crypto-based gambling may raise issues under:

PAGCOR rules;
AML laws;
Bangko Sentral ng Pilipinas rules on virtual asset service providers;
securities regulations;
tax laws;
cybercrime laws;
sanctions rules;
fraud prevention rules; and
consumer protection standards.

Crypto gambling can be viewed as high-risk because of anonymity, cross-border transfers, sanctions evasion, and difficulty tracing beneficial ownership.

XXX. Social Casino Games, Sweepstakes, and “Play-to-Earn” Models

Not every game involving chance is automatically treated the same way, but operators must be careful.

A platform may fall into gambling regulation if it has the traditional elements of gambling:

consideration or payment;
chance; and
prize or thing of value.

Social casino games using only free virtual credits may be lower risk, but the analysis changes if players can buy credits, redeem prizes, exchange tokens, sell accounts, win cash, receive crypto, or participate in prize draws.

Sweepstakes models, loot boxes, fantasy sports, prediction markets, play-to-earn games, NFT games, and tokenized gaming platforms may trigger gambling, securities, consumer protection, AML, or tax issues depending on structure.

Calling a product “entertainment,” “rewards,” “skill-based,” “Web3,” or “social gaming” does not remove it from regulation if the substance is gambling.

XXXI. Skill Games vs. Games of Chance

Philippine gambling regulation often depends on whether the game involves chance, skill, or a combination of both.

A pure skill game may fall outside traditional gambling regulation, but many games involve both skill and chance. If chance materially affects the outcome and users pay to win money or something of value, the product may be treated as gambling.

Examples requiring careful legal review include:

fantasy sports;
esports wagering;
poker;
rummy-type games;
prediction contests;
paid tournaments;
prize competitions;
card games;
arcade-style games with cash prizes;
trading-style games; and
token reward games.

The legal classification depends on the actual mechanics, not the marketing label.

XXXII. Licensing Process: Typical Stages

Although exact requirements vary by license type, a PAGCOR licensing process may involve the following stages:

preliminary consultation;
submission of corporate documents;
disclosure of ownership and beneficial owners;
submission of business plan;
identification of gaming products;
technical platform review;
submission of system architecture;
payment of application fees;
background checks;
financial capacity review;
AML compliance review;
responsible gaming review;
inspection of premises;
testing of gaming systems;
approval of website domains;
approval of payment channels;
issuance of provisional authority, if applicable;
operational testing;
final license issuance;
periodic reporting;
renewal; and
ongoing audits.

No operator should launch before the relevant authorization is effective and all pre-operating conditions are satisfied.

XXXIII. License Conditions

A PAGCOR license is not a blank check. It usually contains conditions.

Common conditions may include:

operating only approved games;
using only approved domains;
accepting only permitted players;
using only approved payment systems;
maintaining required capital;
paying fees on time;
submitting reports;
allowing inspection;
maintaining AML controls;
maintaining responsible gaming tools;
keeping gaming records;
notifying PAGCOR of material changes;
seeking approval for ownership changes;
seeking approval for key personnel changes;
reporting cybersecurity incidents;
reporting suspicious activity;
maintaining local office or records where required;
complying with tax laws;
complying with labor and immigration laws;
refraining from unauthorized advertising; and
ceasing operations upon suspension, expiration, or revocation.

Violation of license conditions may result in penalties even if the operator initially obtained a license.

XXXIV. Renewal, Suspension, and Revocation

PAGCOR licenses are generally subject to renewal and continuing compliance.

Grounds for suspension or revocation may include:

non-payment of fees;
false statements in the application;
concealment of beneficial ownership;
illegal acceptance of players;
unauthorized games;
AML violations;
tax violations;
fraud;
criminal activity;
regulatory non-cooperation;
failure to submit reports;
unauthorized transfer of license;
change of control without approval;
use of unapproved websites;
involvement in scams or cybercrime;
harm to public interest; and
violation of government policy.

A license is a privilege, not a vested property right. PAGCOR may impose conditions, penalties, or cancellation where the licensee becomes unsuitable.

XXXV. Criminal Law Risks

Illegal online gambling may create criminal liability under gambling laws, cybercrime laws, anti-money laundering laws, anti-trafficking laws, fraud laws, tax laws, and immigration laws.

Potentially liable persons may include:

directors;
officers;
beneficial owners;
managers;
compliance officers;
payment facilitators;
recruiters;
agents;
technical operators;
website administrators;
marketers;
landlords knowingly hosting illegal operations;
foreign employees without proper permits; and
persons laundering proceeds.

The risk is not limited to the corporation. Individuals may face prosecution depending on participation and knowledge.

XXXVI. Consumer Complaints and Player Disputes

Licensed operators should maintain dispute resolution systems.

Common player complaints include:

unpaid winnings;
frozen accounts;
bonus disputes;
delayed withdrawals;
alleged cheating;
identity verification issues;
duplicate account accusations;
responsible gaming failures;
unauthorized transactions;
account hacking;
misleading advertising; and
unfair terms.

PAGCOR may require operators to respond to complaints and provide records. Operators should maintain clear rules and audit trails.

XXXVII. Terms and Conditions for Online Gambling Websites

A lawful online gambling website should have strong terms and conditions covering:

eligibility;
account registration;
KYC requirements;
prohibited accounts;
deposits;
withdrawals;
bonuses;
wagering requirements;
game rules;
sports betting settlement rules;
voided bets;
technical errors;
account suspension;
fraud investigation;
self-exclusion;
responsible gaming;
privacy;
tax responsibility;
governing law;
complaints;
limitation of liability;
force majeure;
intellectual property;
anti-money laundering;
sanctions compliance;
prohibited jurisdictions; and
regulatory disclosures.

Unfair, unclear, or hidden terms may create consumer protection and regulatory risks.

XXXVIII. Domain Names, Mirror Sites, and Platform Control

PAGCOR may require approval of the specific website domains used by a licensee.

An operator should not use unauthorized mirror domains, backup domains, mobile apps, Telegram bots, social media mini-apps, or white-label websites to avoid regulatory controls.

Each access point may be treated as part of the gambling operation, including:

main website;
mobile website;
iOS app;
Android app;
progressive web app;
agent portal;
affiliate portal;
mirror domains;
live dealer studio links;
API integrations; and
embedded gambling widgets.

Unauthorized parallel platforms may be considered illegal operations even if the operator has a license for another domain.

XXXIX. Mobile Applications

Mobile gambling apps raise special issues.

Operators may need approval for:

app name;
app package;
game content;
geolocation;
payment integrations;
age verification;
responsible gaming tools;
push notifications;
data collection;
app store disclosures;
cybersecurity controls;
version updates; and
app distribution methods.

Side-loaded APKs are risky because they may bypass app store controls and facilitate illegal distribution.

XL. White-Label and Franchise Models

Some businesses attempt to enter online gambling through white-label arrangements. Under this model, one company supplies the platform and license while another operates a branded website.

This structure is legally risky unless expressly approved.

Questions include:

Who is the actual operator?
Who holds the license?
Is sublicensing allowed?
Is the brand owner approved by PAGCOR?
Who controls player funds?
Who performs KYC?
Who reports AML issues?
Who pays taxes?
Who handles disputes?
Who owns the player database?
Who is responsible for illegal markets?
Is the arrangement an unauthorized transfer of license?

A PAGCOR license generally cannot be informally rented, lent, sold, or used as a shield for unapproved operators.

XLI. Affiliates, Agents, and Streamers

Online gambling businesses often use affiliates, agents, influencers, streamers, and social media recruiters. These arrangements create compliance risks.

Operators should control:

affiliate registration;
marketing content approval;
prohibited claims;
age-gated promotions;
jurisdiction restrictions;
commission structures;
no misleading bonus advertising;
no targeting minors;
no fake winning testimonials;
no unauthorized use of PAGCOR marks;
no spam;
no illegal payment collection by agents; and
termination for non-compliance.

An operator may be held responsible for the conduct of its agents or affiliates.

XLII. Use of PAGCOR Name and Logo

A website should not use PAGCOR’s name, seal, logo, or references in a misleading manner.

Permissible use, if any, should be limited to truthful regulatory disclosures. A statement such as “licensed by PAGCOR” must be accurate, current, and limited to the scope of the license.

Misrepresentation may occur if:

the license expired;
the license belongs to another company;
the website is not an approved domain;
the license covers a different activity;
the license is only for offshore operations;
the website accepts unauthorized players;
the operator uses a fake license number; or
the PAGCOR logo is displayed without permission.

XLIII. Recordkeeping Requirements

Licensed operators must keep detailed records.

These may include:

player registrations;
KYC documents;
login records;
IP addresses;
geolocation records;
deposits;
withdrawals;
bets;
game results;
bonus credits;
account adjustments;
complaints;
suspicious transaction reports;
AML reviews;
system logs;
game version histories;
tax records;
regulatory reports;
affiliate payments;
vendor contracts; and
board and compliance records.

Records must be available for audit and investigation.

XLIV. Reporting Obligations

PAGCOR licensees may be required to submit periodic reports, including:

gross gaming revenue;
net gaming revenue;
player numbers;
deposits and withdrawals;
game performance;
jackpot reports;
tax and fee calculations;
AML reports;
responsible gaming reports;
incident reports;
cybersecurity reports;
system downtime reports;
ownership change reports;
suspicious activity reports;
employee lists; and
vendor updates.

Failure to report accurately may lead to penalties.

XLV. Treatment of Bonuses and Promotions

Bonuses are common in online gambling but legally sensitive.

Operators should clearly disclose:

eligibility;
bonus amount;
wagering requirements;
expiration dates;
maximum withdrawal limits;
excluded games;
odds contribution;
account verification requirements;
anti-abuse rules;
cancellation rights;
effect of self-exclusion;
restrictions on multiple accounts; and
dispute procedures.

Misleading bonus offers can be treated as unfair or deceptive.

XLVI. Cross-Border Issues

Online gambling is inherently cross-border. A Philippine-connected website must consider both Philippine law and the law of every jurisdiction where players are located.

A PAGCOR license does not necessarily authorize gambling in another country. Operators serving foreign players may still violate the laws of those players’ home countries.

A compliant operator should maintain a prohibited jurisdictions list and use geolocation, KYC, payment controls, and IP restrictions to prevent access from restricted markets.

XLVII. Interaction with Other Philippine Regulators

PAGCOR is central, but not the only relevant authority.

Other agencies may include:

Bureau of Internal Revenue for taxes;
Anti-Money Laundering Council for AML compliance;
Bangko Sentral ng Pilipinas for payment and virtual asset issues;
Securities and Exchange Commission for corporate and securities matters;
National Privacy Commission for data privacy;
Department of Labor and Employment for labor rules;
Bureau of Immigration for foreign workers;
Department of Justice for criminal enforcement;
National Bureau of Investigation for cybercrime investigations;
Philippine National Police for enforcement;
Department of Information and Communications Technology for cyber-related coordination;
local government units for permits; and
courts for prosecution and injunctions.

A PAGCOR license does not exempt the operator from these other laws.

XLVIII. Practical Compliance Checklist for Operators

A business considering an online gambling website in the Philippines should complete at least the following checklist:

Identify the exact gaming products.
Determine whether the website targets Philippine or foreign players.
Confirm whether the activity is currently licensable.
Obtain written regulatory advice or confirmation.
Form the proper corporate entity.
Disclose beneficial ownership.
Secure PAGCOR license or approval.
Register with tax authorities.
Obtain local permits.
Build AML and KYC systems.
Implement age verification.
Implement responsible gaming controls.
Use certified games and platforms.
Obtain technical testing.
Approve all website domains.
Approve payment channels.
Prepare terms and conditions.
Prepare privacy policy.
Register or approve vendors.
Train employees.
Monitor affiliates.
File regulatory reports.
Pay fees and taxes.
Maintain audit logs.
Review compliance continuously.

XLIX. Practical Checklist for Players

A player should verify the legitimacy of an online gambling website before depositing money.

Important checks include:

Is the operator clearly identified?
Does the site show a valid PAGCOR license?
Is the license current?
Is the website domain covered by the license?
Does the site have responsible gaming tools?
Are terms and conditions clear?
Are withdrawal rules reasonable?
Does the site require proper KYC?
Are payment methods legitimate?
Are complaints handled transparently?
Are there warnings from PAGCOR or law enforcement?
Does the site frequently change domains?
Does it use suspicious agents or unofficial payment accounts?
Does it promise guaranteed winnings?
Does it pressure users to deposit more?

Players should be cautious of websites that claim to be “PAGCOR accredited” without verifiable details.

L. Common Misconceptions

Misconception 1: “A foreign gaming license is enough.”

Not necessarily. A foreign license does not automatically authorize gambling services in the Philippines.

Misconception 2: “If the website is hosted abroad, Philippine law does not apply.”

Philippine law may still apply if the operator, players, payment channels, agents, or management are connected to the Philippines.

Misconception 3: “Only the company taking bets needs approval.”

Vendors, platform providers, payment channels, affiliates, studios, and service providers may also require approval or scrutiny.

Misconception 4: “PAGCOR licensing eliminates tax obligations.”

No. Tax compliance is separate.

Misconception 5: “A license can be rented or borrowed.”

Gaming licenses are generally personal to the licensee and cannot be informally transferred, rented, or used by unapproved parties.

Misconception 6: “Crypto gambling avoids regulation.”

No. Crypto may increase regulatory risk.

Misconception 7: “Social casino games are always legal.”

Not always. If users pay and can win something of value, gambling rules may apply.

LI. Current Risk Environment

The Philippine online gambling environment has become stricter, especially after controversies involving offshore gaming operators. Government policy has shifted toward stronger enforcement, greater scrutiny of foreign-linked gaming businesses, and tighter action against illegal online gambling websites.

The most important modern risks are:

operating under outdated assumptions about POGO rules;
accepting Philippine players without authority;
using fake or borrowed licenses;
hiding beneficial ownership;
weak AML controls;
unlawful foreign worker arrangements;
crypto-based payment structures;
illegal affiliate marketing;
scam-related activities disguised as gaming;
failure to comply with tax rules; and
lack of technical certification.

Operators must treat PAGCOR licensing as only one part of a broader compliance structure.

LII. Conclusion

PAGCOR licensing rules for online gambling websites in the Philippines are complex, strict, and highly fact-specific. The legality of an online gambling website depends on the precise gaming activity, the identity of the operator, the location of players, the approved license scope, payment channels, technical platform, marketing practices, and compliance with AML, tax, privacy, labor, and cybersecurity laws.

The central principles are clear:

No online gambling website should operate in or target the Philippines without proper authority. A PAGCOR license must be real, current, specific to the activity, specific to the operator, and consistent with the website’s actual operations.

The historical offshore gaming model has changed significantly, and operators should not rely on outdated POGO assumptions. Any person or company considering an online gambling business connected to the Philippines should obtain updated regulatory confirmation, formal legal advice, and direct PAGCOR clearance before launching, advertising, accepting payments, hiring staff, or onboarding players.

This article is for general legal information only and is not a substitute for advice from Philippine counsel or confirmation from PAGCOR on current licensing rules.