The evolution of the Estonian iGaming regulatory framework

Key takeaways from this article

• Understand the legal foundation of Estonia’s gambling licensing regime
• Review the regulatory approach and the bodies with oversight of gaming market operations
• How local consumer protection, social responsibility and anti-money laundering work
• Review the possibility of Estonia as an international hub for legalized gaming

Introduction

In the landscape of European iGaming, Estonia has emerged as a distinct jurisdiction which hopes to combine rigorous regulatory oversight with high digital efficiency to become a strategic point of entry for international gambling operators. Following the global financial crisis of 2008 and the subsequent legislative overhaul in 2009, the Estonian legal framework transitioned from a localized, land-based focus to a sophisticated digital-first approach. This article analyzes the legal pillars of the Estonian gambling regime, specifically the Gambling Act of 2009 and the Gambling Tax Act. It explores the dual-licensing system, the technical requirements imposed by the Estonian Tax and Customs Board Estonian Tax and Customs Board (EMTA),[1] and the jurisdiction’s approach to anti-money laundering (AML) and responsible gambling.

The rapid digitalization of the gambling industry has forced European regulators to choose between protectionist measures and open-market frameworks. Estonia has opted for a path defined by transparency and technological integration. Often overshadowed by larger jurisdictions like Malta or the emerging markets in the Balkans, Estonia has carved out a “middle way” – a regulator that demands high compliance standards while offering a streamlined administrative process which compares favorably with the European Union and the rest of the world.

The modern history of Estonian gambling regulation is deeply rooted in the economic necessity of the late 2000s. The 2009 Gambling Act was not merely a reaction to the rise of online betting; it was a proactive effort to formalize an industry that could contribute significantly to the national treasury while ensuring player protection through centralized monitoring. Today, Estonia is not just a regional player but a hub for international operators who value the country’s advanced e-government infrastructure and predictable legal climate.

The legal foundation: The 2009 Gambling Act and the tax framework

The primary authority governing the sector is the Gambling Act (Haspelsõltuvuse seadus[2]), which came into force on January 1, 2009. This legislation replaced the outdated 1995 Act and was specifically designed to address “remote gambling” — a term used in Estonian law to encompass online casinos, poker, and sports betting.

Unlike many jurisdictions where the regulatory body is a dedicated “Gambling Commission,” Estonia’s oversight is managed by the Estonian Tax and Customs Board (EMTA). This choice of regulator underscores the state’s view of gambling as a fiscal activity that requires precision in reporting and tax collection. The legal framework is further supported by the Gambling Tax Act, which establishes a competitive yet sustainable tax environment. For remote gambling, the tax rate has traditionally been five percent of the Gross Gaming Revenue (GGR), although recent legislative discussions in 2024 and 2025 suggest a phased increase to six percent and seven percent respectively to align with broader fiscal goals.

The two-tier licensing system

One of the most practical aspects of the Estonian regime is its bifurcated licensing process. For a practitioner, understanding this distinction is crucial for any market entry strategy.

The first stage involves securing an Activity License (Tegevusluba), which essentially serves as a “fit and proper” check on the legal entity. The EMTA conducts a thorough investigation into the applicant’s reputation, financial stability, and the origin of capital. This license is granted for an indefinite period, provided the company maintains its compliance standing. It confirms that the entity is permitted to engage in gambling as a business activity in Estonia.

Once the activity license is secured, the operator must obtain an Operating Permit (Kasutusluba) for each specific type of gambling or for the provision of remote gambling. Unlike the activity license, the operating permit is tied to the technical infrastructure. It requires the operator to demonstrate that their gaming servers, software, and Random Number Generators (RNGs) meet Estonian standards. For remote gambling, these permits are typically valid for up to 20 years, providing operators with long-term investment security.

Technical compliance and the role of EMTA

The technical requirements for remote gambling in Estonia are stringent but logical. Operators are required to provide the EMTA with a “backdoor” or a reliable reporting interface that allows for real-time or periodic monitoring of gaming transactions. This system is designed to prevent fraud and ensure that tax liabilities are calculated with absolute accuracy.

The reliance on digital infrastructure is a hallmark of the Estonian model. Leveraging the country’s world-renowned e-government capabilities, the EMTA allows for a largely paperless application process. However, this ease of administration does not equate to a lack of rigor. The regulator requires detailed documentation on the technical security of the systems, the location of servers (which must be within Estonia or an EEA member state unless specific conditions are met), and the integrity of the game outcomes.

Player protection and social responsibility

A central pillar of Estonian “regulatory success” is its approach to social safeguards. The Gambling Act mandates several layers of protection:

1) The HAMPI system[3]

This is a centralized self-exclusion list managed by the EMTA. Individuals who feel their gambling habits are becoming problematic can register themselves on this list, which then legally obliges all licensed operators (both land-based and online) to deny them access to gaming services.

2) Age verification 

Estonia maintains strict age limits – 21 for most forms of gambling, 18 for lottery, and 18 for certain types of sports betting and totalizators. The integration with national ID systems allows for nearly infallible age verification for residents.

3) Responsible gaming warnings

Operators are legally required to display clear warnings about the risks of gambling addiction and provide information on where to seek help.

Anti-money laundering framework and the risk-based approach

The integrity of any iGaming jurisdiction is inextricably linked to its Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) protocols. In Estonia, the legal basis for these requirements is the Money Laundering and Terrorist Financing Prevention Act[4]. For iGaming operators, compliance is monitored by two distinct yet communicating bodies: the Estonian Tax and Customs Board (EMTA) and the Financial Intelligence Unit (FIU or Rahapesu Andmebüroo[5]).

Estonia has adopted a rigorous “risk-based approach,” which requires operators to conduct thorough internal risk assessments before commencing operations. Unlike a “tick-the-box” compliance model, the Estonian framework expects practitioners to categorize their customers based on specific risk profiles, considering factors such as the player’s country of origin, payment methods used, and patterns of betting behavior.

A critical practical element for legal practitioners in this jurisdiction is the requirement for a “Compliance Officer” (AML Officer). This individual must be appointed by the operator and must possess the necessary professional qualifications and an impeccable reputation. The FIU has the authority to interview these officers and vet their backgrounds. Amendments to AML legislation made in  2022-2024 further toughened requirements. Operators are increasingly expected to demonstrate a genuine management presence in the region or within the European Economic Area (EEA) to prevent the use of Estonian licenses by shell companies.

The reporting obligations are stringent. Any transaction exceeding €2,000 – whether in a single payment or through linked transactions – triggers enhanced Due Diligence (EDD) requirements. Operators must not only verify the identity of the player but also, in high-risk cases, establish the source of wealth and source of funds. Failure to maintain these records for at least five years after the end of the business relationship can result in significant administrative fines or the revocation of the activity license.

The cross-border context: Estonia within the EU internal market

Estonia’s relevance in the EU iGaming sphere is largely defined by its adherence to the principles of the Treaty on the Functioning of the European Union (TFEU)[6], specifically the freedom to provide services (Article 56 TFEU). While the European Court of Justice (ECJ) has consistently ruled that Member States have the right to regulate gambling at a national level to protect public order, Estonia has avoided the protectionist pitfalls seen in other jurisdictions.[7]

For international operators, Estonia serves as a highly compliant “White Label” alternative to offshore jurisdictions. While an Estonian license does not provide an automatic passport to operate in other regulated markets like France or Germany – as gambling remains non-harmonized at the EU level – it does provide a high degree of credibility. This credibility is essential for establishing relationships with Tier-1 banks, payment processors, and software providers who are often hesitant to work with companies licensed in non-EU territories.

As a mark of the country’s ambitions, Estonia’s legal environment has been designed to occupy a unique middle ground. The Estonian process is often perceived as faster and more digitally integrated than other offshore jurisdictions, though perhaps more focused on the fiscal and tax reporting aspects than the consumer-facing policy nuances. Conversely, when compared to the highly restrictive and expensive regimes seen in of some Member States, Estonia offers a more commercially viable environment for private operators while maintaining an equivalent level of player safety.

Advertising restrictions and the boundaries of market outreach

Operators face significant challenges in Estonia in navigating the restrictions set forth in the Advertising Act[8] and specific provisions within the Gambling Act[9]. The Estonian legislature has historically taken a conservative stance on the promotion of gambling services.

Under current law, advertising for gambling is generally prohibited, with several critical exceptions. It is permitted on the operator’s own website and within their physical premises. More importantly for the digital market, advertising is allowed on “relevant” channels, provided it does not encourage excessive gambling or target minors. However, the use of influencers and social media marketing has come under increased scrutiny by the Consumer Protection and Technical Regulatory Authority (TTJA).[10]

In 2024 and early 2025, discussions at the parliamentary level intensified regarding a further crackdown on gambling advertisements in public spaces and on television. The prevailing regulatory sentiment is moving toward a blanket ban on specific types of promotional bonuses (e.g., “loss-back” offers or aggressive sign-up incentives) that could be perceived as exploitative. Practitioners must advise clients to ensure that all marketing materials include the mandatory warning text: “Attention! This is a gambling advertisement. Gambling is not a way to solve financial problems. Read the rules and act responsibly.” The visibility and font size of this warning are strictly regulated.

The 2024-2026 fiscal shift and economic sustainability

One of the most pressing topics for the Estonian iGaming industry is the recent shift in the tax regime. For over a decade, the five percent tax on GGR for remote gambling made Estonia one of the most fiscally attractive jurisdictions in Europe. However, in response to broader economic pressures and the need for increased state revenue, the government implemented a phased tax increase.

The tax rate for remote gambling rose from five percent to six percent in 2024, with a further scheduled increase to seven percent in 2026. While this increase was initially met with concern by the industry, analysis suggests that Estonia remains competitive compared to the 18-20 percent rates seen in markets like the United Kingdom or Denmark. The predictability of this increase – announced well in advance – has allowed operators to adjust their financial models without destabilizing their operations.

This fiscal policy reflects the Estonian government’s strategy of “sustainable extraction.” The goal is to maximize the social and economic benefits of the iGaming sector without driving operators into the unregulated black market. The revenue generated is partially earmarked for cultural and sports projects, as well as for the funding of gambling addiction treatment programs, thereby creating a closed-loop social contract between the industry and the public.[11]

Technological integration and the e-Residency advantage

To complete the picture of Estonia’s iGaming environment it is necessary to consider the country’s digital infrastructure. Estonia was the first country to offer “e-Residency,” a government-issued digital identity that allows non-residents to incorporate and manage an Estonian company online.

For iGaming companies, this means that even if they are based in London, Berlin, or Singapore, they can manage their Estonian legal entity, sign documents digitally, and file tax returns via the EMTA portal without the need for a physical presence or a local notary for every administrative act. While e-Residency does not bypass the need for an Activity License or an Operating Permit, it significantly reduces the friction of doing business. The ability to interact with the regulator through a secure, encrypted digital environment is a sizeable competitive advantage that also reduces administrative overheads and professional services fees.

Estonia’s transition from a nascent post-Soviet market to a mature EU iGaming hub has been achieved through the power of clear, technology-driven regulation. By placing the Tax and Customs Board at the center of oversight, the state has prioritized transparency and fiscal accuracy. While the upcoming tax increases and stricter advertising rules indicate a tightening of the market, Estonia’s stability, digital efficiency, and EU credibility remain solid.

For the legal practitioner and the international operator, Estonia offers a roadmap for smaller jurisdictions looking to punch above their weight in a globalized industry. It serves as a reminder that success in iGaming regulation is not defined by the lowest taxes or the fewest rules, but by the predictability of the legal environment and the quality of the dialogue between the regulator and the regulated. As the EU continues to grapple with the fragmentation of the gambling market, the Estonian model provides a compelling argument for a digital-first, transparent, and pragmatic fiscal approach to oversight.

Roman Baranovskyi is senior lawyer at SBSB FinTech Lawyers | iGaming & Crypto & Investments & Corporate

More articles about Regulation and Compliance

[1] Estonian Tax and Customs Board (EMTA) https://www.emta.ee/en

[2] https://www.riigiteataja.ee/en/eli/507122016002/consolide

[3] https://www.emta.ee/en/business-client/registration-business/gambling-operators/reporting-and-access

[4] Money Laundering and Terrorist Financing Prevention Act (Rahapesu ja terrorismi rahastamise tõkestamise seadus) https://www.riigiteataja.ee/akt/RahaPTS.

[5] https://fiu.ee/

[6] https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:12012E/TXT:en:PDF

[7] CJEU Case Law: Case C-42/07 Liga Portuguesa de Futebol Profissional and Bwin International [2009] ECR I-7633. https://infocuria.curia.europa.eu/tabs/tout

[8] https://www.riigiteataja.ee/en/eli/515032016001/consolide

[9] https://www.riigiteataja.ee/en/eli/507122016002/consolide

[10] https://www.ttja.ee/en

[11] Estonian Tax and Customs Board (EMTA), Guidelines for Remote Gambling Operators (2024)