What does a casino payment gateway actually do? It links your cashier to the payment providers behind it, so players can deposit. Withdrawals are another story. Some gateways handle them, plenty don’t, and it usually comes down to the provider and the methods it runs. If you’re comparing a few, start with the markets you’re licensed in. After that, look at who processes and settles each payment, what payout methods you’d get, and what the contract says about fees and reserves.

What Is a Casino Payment Gateway?

Put simply, a casino payment gateway is the link between the casino’s cashier and the payment infrastructure behind it. Deposits go through it. Payouts may too, but not every gateway supports them, so check that separately. Behind it sit acquiring banks that have agreed to take gambling risk, plus a heavier layer of fraud and compliance checks.

Stripe lists gambling among its restricted businesses. PayPal works only with approved gambling merchants in certain countries, so a standard account won’t do. A specialist casino payment provider works the other way round. It underwrites the business up front and bakes the risk into its fees and reserves. Pretty much everything downstream in an online casino payment gateway follows from that, including approval time and frozen reserve cash.

Card data adds one more rule. Any gateway that touches card numbers must meet PCI DSS. The standard is now on version 4.0.1, and its applicable future-dated requirements took effect on 31 March 2025. A hosted cashier or tokenisation can keep card data off the casino’s servers and shrink what auditors check. By how much? That hangs on where the card details get typed in and which servers they pass through on the way. Your acquirer will tell you which SAQ you fall under.

Gateway, PSP or Orchestrator: What Does a Casino Actually Buy?

A casino payment stack usually has three layers, and people mix them up all the time. That’s how you end up paying for infrastructure nobody uses.

  • The gateway’s job is moving card or token data to the acquirer. Some throw in fraud screening or routing as well.
  • A PSP (payment service provider) usually handles the money side. Sometimes it’s the acquirer itself, sometimes it works through a partner bank, and settlement and reserves can sit with either one.
  • On top sits the cashier orchestrator, which picks a PSP for each payment and gives players one cashier to look at.

Who Handles What in Practice?

Take a $100 card deposit. The gateway encrypts the card data and passes it on. In the simplest setup, that’s all it does. The PSP then gets the authorisation through its acquiring bank. The money reaches the casino whenever the settlement schedule says it should. If the contract has a reserve, a slice stays behind to cover chargebacks.

Where it gets messy is that plenty of vendors do both. A full-service PSP will often bundle its own gateway, fraud tools and payouts, then sell the lot as casino payment services. No wonder two quotes can look miles apart. One might include acquiring and settlement. The other could be the pipe and nothing else, and a gateway with no acquirer behind it won’t take a single deposit.

So whatever’s on the table, ask the vendor to spell out in writing who owns the checkout and who acquires. Same goes for who settles the funds and who sits on the reserve.

When Does a Casino Need a Cashier Orchestrator on Top of a PSP?

One PSP is plenty for an operator in a single market with a handful of payment methods. Add more markets, though, and the maths changes. These are the signs to look for.

  • Several licensed markets, each with its own local payment methods
  • Swapping a PSP shouldn’t mean rebuilding the cashier the player sees
  • A second route ready in case the main provider has an outage

Backup routing has limits. A frozen account is a tricky case. Don’t just flip the traffic over to your backup. Find out why it happened first, and only route what the second provider has actually signed off for your licence and markets.

Orchestration costs money on its own, too, with platform fees sitting on top of whatever the PSPs charge. Before buying it, work out how many independent routes you really need and which methods each market expects. Then see whether the extra layer pays for itself. No single vendor is the only way to build this.

Cashiers come in a few shapes. With a hosted redirect, the player leaves for the provider’s page. A hosted iframe keeps that page inside the site. Component-based cashiers give developers building blocks, so the casino gets its own look, with more work up front. Speed, styling and PCI scope vary by product, so compare the one you’re actually offered.

How Long Until a Casino Can Take Payments?

There’s no honest industry average. You’ll go through paperwork, underwriting, the technical build and a test run. Most of it comes down to your jurisdiction and how tidy your documents are. Ask each provider to put its timeline in writing.

Where Does the Time Go, Stage by Stage?

Someone at the bank actually reads each document, and gambling files get an extra pass on licences and AML programmes.

Stage What it involves What slows it down
Document submission Licence, corporate and ownership papers Missing licence copies, unclear ownership
Underwriting Risk, licence and AML review Wrong MCC, no processing history, extra jurisdictions
API integration Cashier, payment methods, webhooks No in-house developer, custom cashier
Test period Deposits, payouts, refunds, 3DS flows Failed 3DS tests, webhook errors

Providers do quote numbers for their own part. Unison Payments, for one, gives 7–14+ days for gaming underwriting. That’s the vendor’s own estimate for one stage. It isn’t a promise, and it isn’t the full integration time.

An incomplete file slows things down. So does an MCC that doesn’t match the business, or no transaction history to judge. Some operators apply to two or three providers at once so one slow reviewer doesn’t hold everything up. It won’t guarantee a faster yes, though. No provider can promise an approval date, and a casino shouldn't plan a launch around one that does.

What Speeds Up API Integration After Approval?

Integration goes faster if a few things are ready before the contract is signed.

  • A working sandbox from the provider, with test cards and test bank accounts
  • A developer or integrator on the casino side who owns the cashier
  • Webhooks for deposit and withdrawal statuses, so the casino doesn't have to poll the API
  • Test scenarios for 3D Secure 2.0, including frictionless approvals and challenges

Documents, MCC Codes and Underwriting: What to Prepare Before Applying

Applications get turned down for different reasons. The bank’s policy may exclude the vertical. The licence may not fit, the risk may be too high, or the file is incomplete. A wrong merchant category code is another one. An MCC is the four-digit code card networks use to classify a merchant. It decides which risk rules apply to every transaction.

Online gambling usually uses MCC 7995, which Visa defines as betting, including casino gaming chips and other games of chance with money prizes. Qualifying US state-licensed online gambling can use MCC 7801. Its neighbours aren’t interchangeable with it: 7800 covers government-owned lotteries and 7802 licensed horse and dog racing. MCC 7993 is a different code entirely. Visa uses it for video amusement game supplies, so a casino processing under 7993 is miscoded, and underwriters treat that as a red flag. This reflects Visa’s code definitions as of 03 Nov 2026.

Underwriting Document Checklist

Each provider sets its own list, and the law in its market shapes it too. The one below is a typical example, so ask for theirs before you start collecting.

  • Recent bank statements so the acquirer can see real cash flow (the period varies by provider)
  • Articles of incorporation and an ownership chart down to every beneficial owner
  • A gambling licence for each jurisdiction the casino takes players from
  • KYC documents for beneficial owners and anyone who controls the company. Ask how the provider identifies them, since the ownership threshold depends on the law it follows.
  • Processing statements from the previous provider, if there is one
  • A description of the site, games, bonus terms and responsible gambling tools
  • An AML and KYC policy for players
  • Financial statements or volume projections for a new business

What Do KYB and AML Checks Look At?

No account gets opened until the provider knows who really owns the casino and where the money came from. Every beneficial owner it identifies sends in ID and proof of address. Then come questions about the capital behind the business, plus a run of the owners and the company through sanctions and PEP lists.

Don’t confuse this with player checks. KYB is about you, the operator, and it happens before you go live. Verifying players is your own job, usually handed to a vendor such as Sumsub. How long will KYB take? Ask the provider, since it varies a lot. Offshore holding structures and owners linked to sanctioned regions stretch it out.

Who Shouldn't Use a Standard Casino Payment Gateway?

Big high-risk providers turn down some applicants as a matter of policy.

  • A casino with no valid gambling licence. No payment route fixes that. Get the licence first.
  • A brand-new casino with no transaction history. Ask whether the provider offers staged onboarding. Usually that means a low monthly cap that rises as the chargeback record builds, plus a bigger reserve early on.
  • An operator whose licence doesn’t cover the markets it serves. Most licensed acquirers will decline it, and a crypto processor or offshore PSP doesn’t change what the licence allows.

Check eligibility with the provider and a lawyer before you apply. A cheap workaround that gets frozen in month three costs more than doing it properly.

Common Mistakes That Get Casino Merchant Accounts Frozen

Some freezes come down to things the operator could have caught.

  • Letting the chargeback ratio drift past card-network limits with nobody watching it weekly
  • Tripling monthly volume without telling the acquirer first
  • Processing under an MCC that doesn't match the business
  • Ignoring compliance team requests for documents or explanations
  • Skipping responsible gambling controls at the payment level

Volume spikes deserve a word of their own. Blow well past the monthly volume you declared, and the acquirer may hold settlements, bump up the reserve or reopen underwriting. Clean transactions don’t change that. Planning a big promotion? Check the volume limits in your contract and send the acquirer a fresh forecast beforehand.

Even a spotless record won’t keep an account open forever. Acquirers leave the vertical or rethink their risk appetite now and then, which is why a backup provider is money well spent.

What Chargeback Ratio Counts as a Red Flag in iGaming?

A chargeback is a card transaction the cardholder disputes through their bank. If it goes against the merchant, the money comes back off its account. In gambling, one example is a deposit the player didn’t authorise. Another is a player who loses, then claims the deposit wasn’t theirs. A complaint about a slow payout is a different thing and goes to the operator or regulator.

Card networks watch the ratio of disputes to transactions. Visa’s Acquirer Monitoring Program has flagged Excessive Merchants at a fraud-and-dispute ratio of 1.5% (150 basis points) since 1 April 2026, down from 2.2%. That applies in the regions the fact sheet lists, the US and EU included, and only from 1,500 fraud and dispute cases a month. Mastercard works on its own scale. Per Moneris, which is an acquirer itself, a merchant becomes an Excessive Chargeback Merchant (ECM) at 1.5% with at least 100 chargebacks a month. Hit 3% and 300 or more, and it’s High Excessive (HECM). The fines land on the acquirer, not on you directly. Whether they end up on your bill is down to the merchant contract.

So what happens when you cross a line? Usually the acquirer comes back with a remediation plan. Higher fees or termination can follow, depending on what you signed. The networks do move these thresholds now and then, so double-check the current figures with your acquirer.

Which Responsible Gambling Controls Must a Gateway Support?

Several licences now expect responsible gambling limits to work at the payment level, not just in the casino's interface. A gateway should be able to:

  • Block a deposit that would push a player over the limit they set
  • Block deposits during a cool-off period the player chose, while payouts and refunds go through as the licence requires
  • Refuse deposits from a self-excluded player

Spotting a new account opened by the same person is mostly the operator’s job, because it depends on player identification. Write down what the cashier handles and what the PSP handles.

The exact rules come from your licence. In the US, the American Gaming Association keeps a state-by-state guide to responsible gaming rules. Handy, but you’ll be held to the regulator’s own text.

How to Verify a Payment Provider Is Licensed for High-Risk Gaming

A lot of the companies selling high-risk merchant accounts turn out to be brokers. Fine, but a broker isn’t an acquirer, and a few quick checks will tell you which one you’re dealing with.

  • Ask for the licence or registration number, then look it up yourself in the regulator’s public register.
  • Ask outright: are you the acquirer, or are you placing my account with someone else?
  • Find out which bank does the acquiring, and make sure that agreement is still current.
  • Call two or three casinos already live on the platform.

That check matters more for an online casino payment provider found through ads than for a name every operator already knows. A broker isn't automatically bad. It does add a middleman who can't control what the bank decides. Have a payments lawyer review the contract before signing either way.

How Much Does a Casino Payment Gateway Cost?

The total cost of a casino payment platform goes well past the per-transaction fee. Comparing casino payment solutions on headline rate alone misses most of it. Get a quote that covers every line below.

Cost component What to ask for Notes
Setup fee One-off amount and what it covers Sometimes waived
Card transaction fee Rate by card type, region and risk Cross-border usually costs more
E-wallet and pay-by-bank fee Rate per method Compare method by method
Payout, FX and dispute fees Each one as its own line Often left off headline quotes
Rolling reserve Percentage and hold period Count the cost of cash locked up
Hidden terms Monthly minimums, early exit fees Check the termination clause

Providers rarely publish gambling pricing, and every number above depends on the operator. Get a written quote that lists each line separately. A figure that promises fixed savings without seeing your volume and markets isn't worth much.

What Is a Rolling Reserve and How Is It Calculated?

A rolling reserve is a share of daily card volume the acquirer holds in a separate reserve account to cover future chargebacks. Each day's held amount comes back after a fixed period, so the reserve keeps rolling forward.

The percentage and hold period are set per operator. Take a casino with $500,000 of monthly card deposits, a 10% reserve and a 180-day hold, with steady volume and no deductions:

  • $50,000 goes into reserve each month.
  • Nothing comes back for the first six months.
  • By month six, about $300,000 sits in reserve.
  • From month seven, each month's release roughly matches the new hold.

Keep an eye on chargebacks, because the percentage climbs with them, and some contracts let the acquirer raise it without warning. Once you’ve built some clean history, pull the reserve terms out again. That record is your case for a lower rate. No provider applies the same percentage to everyone.

Why Does a US Casino Payment Setup Differ From the EU or UK?

There’s no federal US online casino licence. States decide for themselves. By 03 Nov 2026, seven had live real-money online casinos: Connecticut, Delaware, Michigan, New Jersey, Pennsylvania, Rhode Island and West Virginia. Maine has authorised internet gaming, but rulemaking was still under way when we checked. Nevada’s interactive gaming covers poker only.

Great Britain has one regulator, the Gambling Commission. It banned gambling on credit cards from 14 April 2020, and online casinos fall under the ban. The EU leans on payment law rather than gambling law for this. PSD2, together with Commission Delegated Regulation (EU) 2018/389, has required strong customer authentication (SCA) on in-scope payments since 14 September 2019, with set exemptions. SCA is the legal rule. For card deposits it’s usually met through EMV 3D Secure, but whether it applies depends on the payment flow.

The US has no SCA law. Some casinos use 3DS anyway, partly for the liability shift where network rules provide one. Responsible gambling rules also differ state by state, so check each target state's regulator directly.

Talk to a compliance specialist with real practice in your target state or country before launch.

Multi-Currency IBAN Accounts and Crypto Rails: When Does a Casino Need Both?

A multi-currency IBAN account covers fiat settlement. A crypto rail adds another method where the licence and local rules allow it. Some operators run both.

An IBAN is just the account identifier. What counts is the payment product behind it and the schemes it supports. SEPA reaches beyond the EU. Inside it, a standard credit transfer usually lands within a business day, and SCT Inst in seconds. SWIFT payouts outside SEPA vary by route, so ask the bank for its fees and timing.

Crypto can work as an extra method where the licence and local law allow it. It isn’t a way around a bank block, which often reflects a legal ban. Stablecoin transfers can’t be charged back the way card payments can. Speed and cost depend on the network, its load and the operator’s own payout process, so compare network fees, processing time and finality one by one. Crypto processors such as 0xProcessing, NOWPayments or CoinsPaid handle this side, each with its own compliance model.

Crypto needs its own compliance process. That means wallet screening, source-of-funds checks and rules that differ from the fiat side. Some licensing regimes don't allow crypto at all.

Casino Payment Gateway Integration Checklist: API, 3DS and Webhooks

Casino payment integration usually runs through steps like these, though the order shifts with the model.

  • Get API keys and set up the sandbox environment.
  • Turn on 3D Secure 2.0 and test frictionless, challenge, failed and exempted flows. Ask the acquirer when the liability shift applies, because that depends on the network, the authentication result and the dispute reason.
  • Configure webhooks for deposit and withdrawal statuses. Verify signatures, handle repeat deliveries without crediting twice, and reconcile against the provider’s reports, since a webhook can arrive late or more than once.
  • Test with the provider's test cards and real player journeys, including refunds and declines.
  • Move to full volume in stages, starting with a small share of traffic.

Own API Integration or a Ready-Made Provider Module?

The choice comes down to three questions. Does the casino have its own developers? If not, a ready-made module or hosted cashier is the realistic option. Does the brand need a cashier that looks and behaves exactly its way? That pushes towards a custom API build.

Then there's time. A hosted module is usually quicker to launch than a custom integration. Take the real timing from the provider’s plan. The provider's casino payment gateway integration services can close that gap for teams that want custom without the hiring.

Which Payment Providers Fit Which Gambling Business?

No single provider is the best payment gateway for gambling across every case. Every payment gateway casino operators shortlist fits some scenarios and fails others. The right category depends on where the casino operates and how its players pay.

  • Launching in one licensed jurisdiction? Look for a PSP already approved for online casino payments there. Paysafe, for example, serves US iGaming, but check the register for each state, entity and product.
  • An operator spread across several jurisdictions, each with its own local methods, usually ends up with a cashier orchestrator over two or three PSPs.
  • Where crypto is allowed and players use it a lot, a dedicated crypto processor with its own wallet screening makes sense. 0xProcessing is one built around iGaming, with 100+ crypto assets and mass payouts at a 0% payout processing fee, network fees aside.

Poker rooms follow the same logic, with two extras. A poker payment gateway must handle frequent small cash-outs, and its fraud rules need to catch collusion and multi-accounting at the same table.

Picking a provider still needs a proper tender and legal review. A brand that's right for one operator can be wrong for the next.

How to Choose a Casino Payment Gateway: Criteria and Checklist

The right choice comes from checking five things in writing before signing.

  • The status of the entity you’d sign with and of its acquirer, checked in the regulator’s register where one exists (New Jersey’s, for example), and approvals that cover your market and payment flow
  • Payment methods that cover the casino's actual target markets
  • A clear breakdown of setup fee, transaction fees and rolling reserve, with no surprises in the exit clause
  • Responsible gambling controls that work at the transaction level
  • An approval and integration timeline backed by references from current clients

Run a legal and compliance review before the contract goes out for signature. And be wary of anyone, comparison sites included, calling one provider the best for everyone.

Compare casino payment providers side by side in the iGamingHub provider catalog, scored with the published methodology.

Report an error: contact@theigaminghub.io.