Quick Answer: A gambling payment gateway for Spain must route deposits and payouts through DGOJ-licensed rails. Bizum, debit/credit cards, SEPA bank transfer, and PayPal are the dominant methods. DGOJ-regulated operators can’t accept direct crypto wallet deposits. DozyPay pairs this rail mix with high-risk underwriting built for casino, sportsbook, and social gaming merchants. That means approval for a casino merchant account doesn’t stall on Spain’s compliance requirements.
Spain is one of Europe’s most mature regulated online gambling markets. A single national regulator oversees roughly 80 licensed operators. Online gross gaming revenue reached EUR1.45 billion, and the player base tops 47 million residents. That maturity cuts both ways for payment processors. Player demand stays high and the rules stay stable. But the DGOJ also enforces a tight, well-defined set of payment, KYC, and deposit-control requirements. A generic payment gateway simply isn’t built to handle them.
This guide breaks down Spain’s regulatory framework for casino, sportsbook, and social gaming payments. It covers which rails actually move money in the Spanish market. And it shows how DozyPay keeps merchant approval fast without compromising DGOJ compliance.
Spain’s Online Gambling Regulatory Framework
Ley 13/2011 de regulacion del juego (the Spanish Gambling Act) regulates online gambling at the national level. The DGOJ acts as the sole licensing and supervisory authority for sports betting, poker, slots, and online casino games. Spain doesn’t run rolling licence applications like some markets do. Instead, it has issued General Licences only through periodic public tenders. The most recent tender closed in December 2018, and Spain hasn’t announced a new call as of 2026. In practice, the only route into the regulated market today is acquiring a company that already holds a General Licence. That deal still needs DGOJ approval of the change of control.
Spain’s 17 autonomous communities govern land-based gambling separately – casinos, bingo halls, betting shops – each with its own technical rules. Online operators, by contrast, answer to one national framework. That single framework makes Spain more predictable to plan a payment stack around than federated markets with state-by-state licensing.
2026 Player Protection Rules That Affect Payment Flows
Several DGOJ measures rolling out through 2026 directly touch how deposits, limits, and risk monitoring work at the payment layer:
- Joint (cross-operator) deposit limits: a Draft Royal Decree amending RD 1614/2011 introduces a voluntary system. Players can set a single deposit cap across every DGOJ-licensed operator they hold accounts with. Proposed benchmark tiers sit around EUR600/day, EUR1,500/week, and EUR3,000/month.
- Mandatory AI-based risk detection: a standardised algorithm identifies risky gambling behaviour. It becomes a mandatory operator obligation during 2026, replacing or supplementing the internal systems many operators already run.
- Safer-gambling environments under RD 176/2023 are now fully in effect. They cover self-exclusion via the RGIAJ national register and in-session deposit-limit prompts.
- Amendment 176 to the Customer Service Bill bundles new advertising restrictions with a mandatory gambling supplier register. Penalties for unlicensed suppliers range from EUR100,000 to EUR1,000,000, and that includes payment intermediaries operating without authorisation.
For a payment gateway, this means Spain isn’t just a KYC-at-signup market. Deposit-limit logic and risk-pattern reporting increasingly need to live at the transaction layer itself. That’s why generalist processors tend to struggle here.
Payment Rails That Actually Move Money in Spain
Spain’s payment mix looks different from most European gambling markets because of one dominant local rail:
| Rail | How it’s used | Notes for merchants |
| Bizum | Instant bank-to-bank transfer using only a phone number; deposits and withdrawals both supported | Backed by ~38 Spanish and foreign banks operating in Spain; no card or account number shared with the operator; commission-free for players |
| Debit / credit cards | Visa, Mastercard and other major networks; standard instant deposit | Withdrawal times typically slower than Bizum; issuer-level MCC 7995 declines still occur |
| SEPA bank transfer | Direct transfer or instant-transfer options at some operators | Traditional, still supported but losing share to Bizum and cards |
| PayPal | E-wallet deposit and withdrawal via existing PayPal account | Popular for fast, card-detail-free transactions |
| Crypto on-ramp intermediaries | Fiat conversion via licensed intermediaries before funds reach the operator | Direct wallet-to-casino crypto deposits are not permitted for DGOJ-licensed operators; withdrawals in that flow are fiat-only |
Bizum has become close to table-stakes for Spanish-facing gambling platforms. Players increasingly expect it as a deposit option. Its phone-number-only flow also reduces onboarding friction and card-data liability for the operator. A gateway that can’t route Bizum natively starts from a conversion disadvantage in this market.
Casino Merchant Account Approval in Spain
Casino merchant account approval for the Spanish market hinges on three underwriting factors that DGOJ’s regulatory posture makes non-negotiable:
- Verified DGOJ licence status: acquirers and payment partners decline operators that can’t show a valid General Licence or Singular Licence chain. That’s especially true post-2026, once the mandatory supplier register takes effect.
- AML alignment with the Spanish Prevention of Money Laundering Act: payment flows need to support the same identity-matching and transaction-monitoring standards DGOJ expects from operators.
- Chargeback and dispute-rate history: as in any high-risk gambling market, elevated chargeback ratios trigger a rolling reserve or account review fastest. This is especially true against Visa’s VAMP and Mastercard’s ECM dispute-monitoring thresholds.
DozyPay builds its underwriting process around exactly this profile. It evaluates licensed gambling and gaming merchants on their actual risk indicators – licensing status, transaction patterns, dispute history. Generalist processors, by contrast, often decline merchants outright just for sitting in a high-risk MCC category.
How to Get a Gaming Merchant Account for the Spanish Market?
For casino, sportsbook, and social gaming operators targeting Spanish players, the practical approval path looks like this:
- Confirm licensing structure first: real-money verticals need a DGOJ General Licence, held directly or acquired via the M&A route. Skill-based or subscription social gaming products need none.
- Document AML/KYC processes – identity verification standards that satisfy both DGOJ and the payment partner’s own compliance team.
- Provide processing history where available – prior chargeback ratios, settlement volumes, and dispute-resolution records speed up underwriting significantly.
- Match rail coverage to the market: a merchant account that can’t settle Bizum and SEPA transactions natively will underperform in Spain, regardless of card-network approval.
- Plan for deposit-limit and risk-flagging integration. Joint deposit limits and mandatory risk algorithms are rolling out through 2026. Payment infrastructure that can flag or cap transactions at the account level will be the safer long-term bet.
DozyPay packages this into a single onboarding flow. One underwriting process covers cards, Bizum, SEPA, and e-wallet rails. Merchants avoid stitching together separate processor relationships per payment method.
Social Gaming Merchant Account: The Lower-Friction Alternative
Not every gaming business needs a full real-money casino merchant account. Social gaming and skill-based platforms sit outside DGOJ’s real-money licensing requirements entirely. That covers free-to-play products with optional in-app purchases, subscription access, or virtual-currency models with no cash-out mechanism. The one condition: the product can’t convert in-game currency back to cash.
A social gaming merchant account still needs high-risk-aware underwriting. Payment processors frequently misclassify these platforms alongside real-money gambling by MCC alone. DozyPay evaluates social gaming merchants on their actual product mechanics instead, rather than defaulting to the same risk tier as a licensed casino. That keeps approval times and reserve requirements proportionate to the real exposure.
Cross-Market Context: Spain Alongside Other Regulated Markets
Operators expanding a Spanish gambling product often run parallel licensing and payment tracks in other EU and adjacent markets. See our dedicated breakdown of Gambling Payment Gateway for Ireland, where GRAI’s 2025-2026 licensing rollout echoes some of DGOJ’s supplier-register logic. Gambling Payment Gateway for Italy covers another mature Southern European market with its own national regulator and card-network restrictions. For operators active outside the EU, Gambling Payment Gateway for Canada covers a very different provincial licensing structure – worth comparing against Spain’s single-regulator model.
Related reading: DozyPay’s guide on how to improve checkout experience covers rail selection and localisation choices. Bizum in Spain is a direct example of that principle in practice. Our piece on why multi-channel payment strategies are no longer optional for high-risk businesses lays out the broader case for not relying on a single processor relationship. That holds true in any regulated gambling market, Spain included.
Frequently Asked Questions
What payment methods are most used for online gambling in Spain?
Bizum, debit and credit cards, SEPA bank transfer, and PayPal are the dominant rails. Bizum has become close to a default expectation for Spanish players because it only requires a phone number and settles instantly.
Is crypto accepted by DGOJ-licensed gambling operators?
Not directly. DGOJ-licensed operators cannot accept direct wallet-to-casino crypto deposits. The market workaround is licensed fiat on-ramp intermediaries that convert crypto to euros under full KYC/AML before funds reach the operator; withdrawals in that flow settle in fiat only.
How do I get a casino merchant account approved for the Spanish market?
Approval depends on verified DGOJ licensing status, AML alignment with the Spanish Prevention of Money Laundering Act, and a manageable chargeback or dispute history. A payment partner that underwrites gambling merchants specifically, rather than declining by MCC alone, moves this process faster.
Do social gaming platforms need a DGOJ licence to operate in Spain?
No, provided there is no cash-out mechanism converting in-game currency back to money. Social gaming and skill-based products without a real-money withdrawal path sit outside DGOJ’s licensing scope, though they still need high-risk-aware payment underwriting.
What are Spain’s new deposit-limit rules for 2026?
A Draft Royal Decree amending RD 1614/2011 introduces a voluntary joint deposit-limit system letting players cap spending across every DGOJ-licensed operator at once, with proposed benchmark tiers around EUR600 per day, EUR1,500 per week, and EUR3,000 per month.