Does tighter regulation actually shrink the black market?
Brazil is the best live test of that question anywhere in the world right now, and the early answer is uncomfortable. Brazil betting regulation went from a legal vacuum to one of the most prescriptive licensing regimes in the Americas in roughly two years. Yet SBC News reported a 74% rise in illegal operators active in the country following President Lula’s decree tightening the rules. That is the thesis of this piece: writing a strong law is the easy part. What determines whether liquidity sits onshore or offshore is the ratio between the cost of compliance and the cost of ignoring the regulator entirely.
For anyone drafting a framework in Africa, South Asia or the rest of Latin America, Brazil is not a template to copy. It is a case study to interrogate.
What Lula’s decree changes, and what it sits on top of
The Lula gambling decree is an executive instrument layered onto the primary statute, Law 14.790/2023, which legalised fixed-odds betting and online casino games and handed regulatory authority to the Ministry of Finance. Decrees and normative ordinances fill in the operational detail: advertising conduct, payment rules, enforcement powers and reporting duties. Because the exact wording is amended frequently, operators should read the current text as published in the Diário Oficial da União rather than rely on secondary summaries, including this one.
What is stable is the architecture. Three pillars matter.
Licensing framework
Brazil runs an authorisation regime, not a competitive tender. Any company meeting the criteria and paying the fee can apply, and the fee is the barrier: R$30 million for a five-year licence, covering up to three brands per licensee. Applicants must be incorporated in Brazil, with a Brazilian shareholder holding at least 20% of the share capital, and must meet a minimum capital requirement. Consumer-facing sites must run on a .bet.br domain, which makes unlicensed operators trivially identifiable to both regulators and players.
Operator obligations
The obligations are unusually granular for an emerging market. Deposits must come from an account in the player’s own name, credit cards are not accepted as a funding method, and identity verification is mandatory before play rather than at first withdrawal. Certain groups are barred outright, including under-18s, people involved in the sporting events on offer, and public officials with a conflict of interest. Promotional credits and bonuses are heavily restricted, which removes the acquisition tool most operators build their marketing around in a new market. Integrity reporting, anti-money-laundering controls and responsible gambling tooling, including self-exclusion and player-set limits, all sit inside the licence conditions.
Taxation structure
Licensed operators pay 12% of gross gaming revenue, earmarked across sport, social security, tourism, education and public security, plus ordinary corporate taxes. Players pay income tax on net prizes at 15%. Proposals to raise the GGR rate have circulated repeatedly in Congress since the market opened, which is itself part of the story: tax instability is a market-entry risk, and operators price it in.
Add it up and a three-brand entrant faces R$30 million up front, local incorporation, a local partner, certification costs and an effective tax load well above the GGR headline. Unlicensed sites face none of that. When enforcement lags, the arbitrage is obvious.
Brazil’s model against the rest of Latin America
Brazil chose a high-cost, nationally unified, heavily prescriptive route. Its neighbours made different trade-offs, and the comparison is instructive for anyone choosing a structure.
| Jurisdiction | Structure | Entry cost | Headline tax | Distinctive feature |
|---|---|---|---|---|
| Brazil | National authorisation via the Ministry of Finance | R$30m for 5 years, up to 3 brands | 12% of GGR plus corporate tax | Mandatory .bet.br domain and local incorporation |
| Colombia | National online licensing through Coljuegos, live since 2016 | Modest relative to Brazil, scaled to operator size | Levy on GGR (15% benchmark) | First regulated online market in the region; ISP and payment blocking used early |
| Argentina | Province by province; no federal online regime | Varies by province; multiple licences needed for national reach | Set provincially | Fragmented rules, separate tech and compliance per jurisdiction |
| Mexico | Federal permits under long-standing gaming law, administered by SEGOB | Often accessed by operating under an existing permit holder | Federal excise on games with bets plus state levies | Legacy framework predating online play; commercial access via permit partnerships |
| Peru | National online regime under Law 31557, enforced from 2024 | Low compared with Brazil | Tax on net gaming revenue | Purpose-built online law with a deliberately low entry barrier |
Market entry requirements
Brazil and Peru both built purpose-made national online regimes, but priced them very differently. Peru went for breadth: cheap enough that mid-sized operators channel voluntarily. Brazil went for filtration, using price to keep out undercapitalised operators. Both choices are defensible. Argentina’s provincial patchwork is the outlier nobody should copy deliberately; it multiplies compliance cost without multiplying player protection.
Revenue sharing models
A regulated betting market is fiscal policy as much as consumer policy. Brazil earmarks its 12% across named public funds, which builds political constituencies for the regime and makes repeal harder. Colombia routes gaming revenue toward health funding, another durable political anchor. The lesson is not the percentage, it is the earmarking: hypothecated revenue survives changes of government better than money that disappears into general treasury.
Consumer protection standards
Brazil’s protections are the most detailed in the region on paper: pre-play identity verification, own-name payments, no credit cards, restricted bonusing, mandatory self-exclusion. They only bite on licensed sites. An unlicensed operator offering credit card deposits, no verification and aggressive bonuses is not just cheaper to run, it is more attractive to a certain kind of player. Strict rules without matching enforcement can widen the gap in favour of the black market rather than closing it.
What online betting licensing in Brazil demands in practice
Application process
- Incorporate a Brazilian entity with local headquarters and secure a Brazilian shareholder holding at least 20% of capital.
- Meet the minimum capital requirement and prepare audited corporate, financial and beneficial-ownership documentation.
- Pass fit-and-proper scrutiny on directors and controlling shareholders, including criminal and regulatory background checks.
- Pay the R$30 million authorisation fee and nominate up to three brands, each on a .bet.br domain.
- Appoint responsible officers, including for AML and responsible gambling, before going live.
Technical standards
Betting and gaming systems must be certified by accredited testing laboratories, covering RNG integrity, game rules, payout reporting and data security. Systems must transmit operational and betting data to the regulator, with hosting arrangements that keep that data reachable by Brazilian authorities. Practically, that means local or approved infrastructure, real-time reporting pipes and a certification cycle that has to be repeated whenever the platform or game portfolio changes materially.
Ongoing compliance
Monthly tax remittance and revenue reporting. Continuous AML monitoring and suspicious activity reporting. Integrity alerts shared with authorities and sports bodies. Advertising sign-off against the marketing restrictions. Maintained self-exclusion registers and player limit tools. Periodic recertification and audit. None of this is exotic by European standards, but the combination of local entity, local data, restricted bonusing and a five-year fee cycle makes Brazil a market you enter for the long term or not at all.
What other regulating markets should take from this
Practices worth copying
Three elements of Brazil’s design travel well. First, the single national domain suffix: it turns black-market detection into a mechanical exercise and teaches players a one-second legitimacy test. Second, own-name payments and pre-play verification, which do more against underage and proxy betting than any advertising rule. Third, earmarked tax revenue, which gives the framework political durability.
Where the implementation strains
The reported 74% jump in illegal operators after the decree points at a calibration problem, not a drafting problem. If licence fees, tax and marketing restrictions push the compliant cost base far above the offshore cost base, and enforcement is slower than the rate at which new mirror domains appear, channelling stalls. Domain and payment blocking only work if they are continuous and fast. Any market planning gambling law changes should budget enforcement capacity in the same breath as licence revenue, and should treat tax stability as a channelling tool rather than a fiscal afterthought.
Effect on market development
Brazil still created one of the largest legal online betting markets outside Europe and the United States, with named licensees, taxable revenue and enforceable player protections where none existed. That is real progress. The open question for 2026 and beyond is what share of actual betting turnover sits inside that perimeter. Regulators in emerging markets should measure success by channelling rate, not by licence count or headline tax take.
Frequently asked questions
What is the Lula gambling decree?
It is an executive instrument tightening the rules around Brazil’s licensed betting market, layered on Law 14.790/2023, which legalised fixed-odds betting and online casino games. It addresses conduct, marketing, payments and enforcement rather than replacing the underlying statute.
How does Brazil regulate online betting?
Through a national authorisation regime run by the Ministry of Finance. Licensed operators must be Brazilian-incorporated, pay a five-year fee of R$30 million for up to three brands, operate on .bet.br domains, certify their systems, report data to the regulator and pay 12% of gross gaming revenue.
What are Brazil’s betting licensing requirements?
Local incorporation with a Brazilian shareholder holding at least 20% of capital, a minimum capital level, fit-and-proper checks on owners and directors, the R$30 million fee, laboratory certification of gaming systems, AML and responsible gambling functions, and continuous reporting to the regulator.
Official details change often. Verify current provisions against the Diário Oficial da União and the Brazilian Ministry of Finance before making entry decisions. Betting carries a built-in house edge and financial risk for players; licensed operators in Brazil are required to offer self-exclusion and deposit limits, and anyone gambling should use them.
