Report Illegal Online Gambling Sites (Philippines): A Practitioner’s Guide

This article explains what counts as “illegal online gambling” in the Philippines, who regulates it, the criminal and administrative bases for action, and a step-by-step playbook for reporting, blocking, and building cases. It is general information, not legal advice.

1) What is “illegal online gambling”?

In Philippine practice, an online gambling operation is illegal if any of the following is true:

No Philippine license or authority. Only entities duly authorized under PAGCOR’s charter and regulations (and, for offshore-facing operations, special offshore gaming licenses and related approvals) may operate. Anything aimed at Philippine users without such authority is illegal.
Licensed, but violating core conditions. Examples: taking bets from minors, failing to enforce KYC/age/geofence controls, or using prohibited payment channels.
Local “skins” of foreign sites that target Philippine residents (e.g., peso deposits, local e-wallets/agents, Filipino-language promos) without proper authority.
Revoked/suspended operators that continue to accept play.
Banned verticals. Certain activities (e.g., government-ordered cessation of specific online wagering formats) are prohibited regardless of license status.

2) Legal Bases Commonly Invoked

Proceedings often combine criminal, administrative, and regulatory angles.

PAGCOR Charter & Regulations. PAGCOR is empowered to license, regulate, and sanction gambling operations; unauthorized operations constitute violations subject to administrative closure, seizures, and coordination with law enforcement.
Illegal Gambling Statutes. Traditional anti-illegal gambling laws (and penalty-increasing decrees/amendments) apply to taking/accepting bets without authority; online conduct is not exempt merely because it is digital.
Cybercrime Law. Enables warrants to search, seize, and examine computer data, domain/IP takedowns, and real-time collection orders, with inter-agency coordination.
Anti-Money Laundering Regime. Casinos and certain gaming service providers are covered persons; facilitating illegal gambling proceeds can trigger AML investigations, account freezes, and STR (suspicious transaction report) obligations for regulated intermediaries.
Consumer, payments, telecoms, and data regimes.
- BSP and payment-system rules prohibit use of regulated payment channels for unlawful transactions.
- NTC/telecom powers support blocking orders and dismantling of illegal communications facilities.
- Data protection rules apply to operators that collect personal data without lawful basis.

3) Who to Report To (and why each matters)

PAGCOR (Enforcement/Monitoring). First stop for licensing validation, cease-and-desist, and coordination with police, NBI, and regulators.
NBI – Cybercrime/Anti-Organized Crime Divisions. For criminal investigation, cyber warrants, digital forensics, controlled deliveries/entrapments (by authorities, not civilians).
PNP – Anti-Cybercrime Group (ACG). Parallel cybercrime enforcement; often partners with local police for on-ground raids.
DOJ – Office of Cybercrime / prosecution service. For inquest/review, warrants, and cross-border legal assistance.
NTC. For domain/IP blocking and actions against illegal communications supporting the site.
BSP / AMLC. If e-wallets/banks are used, reports can trigger account freezes, KYC reviews, and STRs from covered institutions.
DTI / SEC / LGU Business Permits. For websites or “front” entities misrepresenting their business or operating without corporate or local permits.
National Privacy Commission (NPC). If the site harvests personal data unlawfully (fake KYC flows, phishing inside “casino” UIs).

You do not need to choose only one. Multi-channel reporting is common and often effective.

4) Evidence to Gather (before you report)

Rule of thumb: Capture what proves (a) the site targets the Philippines, (b) gambling actually occurs, and (c) who/what facilitates it.

URL(s) and mirrors; page titles, whois/hosting snapshots (if accessible without breaching security).
Timestamps (Philippine time), screenshots/screen recordings of:
- Sign-up pages showing Philippine targeting (₱ currency, Filipino copy, PH promos);
- Deposit/withdrawal options (banks/e-wallets, OTC agents);
- Live betting lobbies/odds tables;
- Age/KYC prompts (or absence thereof).
Communications: SMS/Viber/Telegram/FB ads, affiliate codes, local agent instructions.
Payment trails (receipts, transaction refs, account nicknames/QRs).
Access data: resolving IP, CDN headers, tracker IDs (non-intrusively, without hacking).
Harm impact (if applicable): fraud losses, chargebacks, identity theft, minors affected.

Do not run entrapment or attempt unauthorized access. Preserve evidence in read-only form (PDF exports, hash the files if possible).

5) How to File a Report (step-by-step)

Triage and preserve. Collate evidence into a dated folder: /YYYY-MM-DD_IllegalGambling_Report/… with an index file listing items.
Check for a license claim. If the site purports to be licensed, note the license number and jurisdiction it cites and include a screenshot. (Many use fake badges.)
Prepare a concise affidavit or incident narrative (see template below).
Submit to multiple channels:
- PAGCOR (for licensing validation and administrative action);
- NBI-CCD or PNP-ACG (for criminal investigation and cyber warrants);
- NTC (request domain/IP blocking; include technical indicators);
- BSP/AMLC tip if specific banks/e-wallets are used;
- NPC if there’s data abuse; DTI/SEC if there’s corporate misrepresentation.
Ask for a case or ticket number and the unit/agent assigned; note follow-up dates.
Cooperate on follow-ups (further screenshots, witness statement, device imaging only upon request and with receipts/custody logs).
For workplace/schools, run a parallel internal report to IT/security to block domains at the network level and alert HR/Student Affairs.

6) Blocking the Money, the Ads, and the Pipes

Payments choke-point. Provide account names/handles/QRs used for deposits/withdrawals. Regulated institutions can freeze/close channels tied to unlawful activity; AML rules compel enhanced due diligence.
Ad/affiliate networks. Capture referral codes, ad IDs, and contact ad platforms with your evidence bundle. Many platforms have illegal-gambling reporting categories.
Telecom & DNS. NTC-coordinated actions can block domains/IPs; provide FQDNs, IPs, and observed ASNs if you have them.
Hosting/CDN abuse desks. Even if offshore, major CDNs/clouds accept abuse reports for illegal gambling targeting restricted jurisdictions.

7) Penalties and Exposure

Operators and agents (including local “cash-in” runners) face criminal penalties under illegal gambling laws; online facilitation can add cybercrime counts.
Advertising and promotion of illegal gambling can itself be punishable.
Property/asset forfeiture and immigration consequences (for foreign principals and staff) frequently follow.
Payment facilitators risk regulatory sanctions if they knowingly process illegal gambling transactions.
Players: Philippine law traditionally focuses on operators, but participation may still expose players to administrative or minor criminal liability in some fact patterns—especially where knowledge of illegality is evident.

8) Special Situations

Minors or vulnerable persons involved. Flag immediately; expect priority handling, potential welfare referrals, and heightened secrecy around the case file.
Corporate victims (chargebacks, fraud). Involve the BSP-regulated institution and law enforcement simultaneously; preserve server and device logs per legal hold standards.
Cross-border syndicates. DOJ-facilitated mutual legal assistance and Interpol notices may be used; expect longer timelines and layered warrants.
Offshore-licensed but PH-facing. A foreign license does not authorize targeting Philippine residents; treat as illegal domestically.

9) Practical Do’s and Don’ts

Time-stamp everything (Philippine time), keep hashes or at least unedited originals.
Use neutral, factual language in your affidavit.
Redact minors’ names and sensitive IDs when sharing beyond authorities.
For organizations, implement DNS filtering and payment blacklist rules.

Don’t

Pay “investigation fees” to anyone claiming to be an agent without official receipt and proper routing.
Probe the site beyond normal user flows (no credential stuffing, no code tampering).
Publicly dox suspected operators; it can compromise the case and expose you to liability.

10) Model Report / Affidavit Template

Copy-paste and adapt as needed.

Title: Affidavit/Report on Suspected Illegal Online Gambling Website

Affiant Information: Full name, address, contact, nationality, ID no.
Summary: “This report concerns the website(s) ___, which appear to offer online gambling services to Philippine users without proper authority.”
Discovery: When and how you encountered the site (date/time; device used).
Targeting of PH Users: Evidence of peso currency, Filipino language, local promos, or acceptance of Philippine payment channels (attach screenshots).
Gambling Activity: Describe betting lobby, sample markets/games, payout pages (attach media).
KYC/Age Controls: Note presence/absence of age gates or KYC; any acceptance of obviously underage details (no stings).
Payments: List accounts/handles/QRs, transaction references, amounts, timestamps.
Harms/Incidents: Losses, identity theft, minors involved (redact minors’ identities).
Other Technical Indicators: Domains, mirrors, IPs (if known), social/affiliate links.
Reliefs Requested:
- Validate licensing; if none, cease-and-desist/closure;
- Criminal investigation of operators/agents;
- Blocking of domains/IPs;
- Freezing of related payment channels;
- Data-protection enforcement for unlawful collection/processing.
Annexes: List of files (A-1 screenshots, A-2 receipts, A-3 chat logs, etc.).
Jurat: Sworn before a notary (or law enforcement officer authorized to administer oaths).

11) Organizational Playbook (for companies/schools/ISPs)

Policy & AUP. Ban accessing or facilitating illegal gambling on corporate/school networks/devices.
Technical controls. DNS/HTTP category blocking; SIEM alerts for known indicators; rate-limit or block payment keywords on expense systems.
Awareness. Micro-modules warning about illegal gambling signs and reporting channels.
Response SOP. Intake → Evidence preservation → Dual reporting (regulator + law enforcement) → Legal hold → Post-incident review.

12) FAQ

Q: I found a site claiming “PAGCOR accredited.” How do I verify? A: Treat it as unverified until confirmed by PAGCOR. Many sites misuse badges. Include the claimed license number in your report.

Q: Can I get my money back? A: Recovery is not guaranteed. Prioritize criminal/regulatory action; banks/e-wallets may help if promptly notified with transaction references.

Q: Is playing on such sites illegal for me as a user? A: The law targets operators, but players can face exposure in some scenarios. If you’ve interacted with such sites, seek legal advice and stop immediately.

Q: Can I stay anonymous? A: You can submit tips without publicity. If threats arise, discuss witness protection options with investigators.

13) Bottom Line

If a site targets Philippine users without proper authority, it’s illegal—even if it carries a foreign license.
Effective reporting is multi-pronged: PAGCOR (licensing/closure), NBI/PNP (criminal & cyber warrants), NTC (blocking), BSP/AMLC (payments), NPC (data).
Strong, well-organized evidence—not volume—drives fast action.
For organizations, blend policy, technical controls, and training to reduce exposure.

Disclaimer

This is a high-level guide based on Philippine legal and regulatory practice. Specific facts matter. For an active case, consult a Philippine lawyer or compliance officer to tailor filings, venue, and remedies.