INDUSTRIES · GAMING
The UAE has opened one of the world's newest regulated gaming markets, with the GCGRA as its sole federal authority. Where a game issues a tradable token that qualifies as a virtual asset, VARA's regime applies to that layer too. Operating unlicensed is a criminal offence. Know your model? Start here.
Confidential & non-binding · Same-day response in UAE hours
GCGRA
The sole federal gaming authority
VARA
Where a game token is a virtual asset
GLI
Technical certification, verified RNG
New
A market opening now
—— THE ONE AUTHORITY
Every commercial gaming activity in the UAE — internet gaming, sports wagering, lottery, land-based facilities and the vendors who supply them — sits with the General Commercial Gaming Regulatory Authority. Licences are granted on independently certified technical integrity (GLI-19 / GLI-33), a working AML/CFT and responsible-gaming programme, and fit-and-proper assessment of every key person. Where a game issues a tradable token that qualifies as a virtual asset, VARA licenses that token layer in parallel. Unlicensed gaming is a criminal offence.
GCGRA
Regulator — federal, exclusive, nationwide
VARA
Token layer — if a game token is a virtual asset
5
Licence types — operator, wagering, lottery, vendor, people
GLI-19 / GLI-33
Independent certification, verified RNG
6–12 months
Indicative timeline to a Certificate of Operation
Criminal offence
Unlicensed activity — operators, suppliers and players
YOUR MODEL
Gaming is licensed by activity and role — operator, vendor, key person — while virtual-asset game tokens can pull in VARA. Find your model — each routes to the regulator that fits and the service that gets you there.
You run online casino games, poker, bingo or eSports for stakes — a GCGRA operator licence with certified systems.
GCGRA
See pathway →You offer betting on sports events through a licensed sportsbook, online or on-site.
GCGRA
See pathway →Your blockchain game has real-money mechanics and a tradable in-game token — often engaging both regimes at once.
GCGRA · VARA
See pathway →You supply equipment, software or platforms to licensed operators — a GCGRA vendor licence plus product certification.
GCGRA
See pathway →Directors, controllers and connected staff — each need their own GCGRA licence alongside the entity.
GCGRA
See pathway →—— THE UAE LANDSCAPE
The UAE moved from prohibition to a structured federal regime: the GCGRA now licenses and supervises all commercial gaming nationwide, the first integrated resort and lottery licences are live, and technical standards mirror the world's toughest. It is a genuine first-mover opportunity — but conducting, supplying or facilitating gaming without a licence is a criminal offence, so getting in correctly licensed is the only way in.
GCGRA
One federal authority, nationwide
GLI-19/33
Independent system certification
Live
First operator licences granted
Criminal
Unlicensed gaming is an offence
THE REGULATORS
The line runs between real-money gaming (GCGRA) and tradable virtual-asset tokens (VARA). Here is who governs what.
GCGRA
Federal · Gaming
The UAE's sole federal regulator for all commercial gaming — internet gaming, sports wagering, lottery and land-based facilities.
Explore GCGRA →VARA
Dubai · Virtual assets
Where a game issues or trades a token that qualifies as a virtual asset, VARA's regime applies to that token layer — separately from the gaming licence.
Explore VARA →THE COMPLIANCE REALITY
The GCGRA licenses on certified technical integrity and a working compliance programme — not on promises. These are the obligations we prepare and operate for you.
GLI
Technical certification
Independent GLI-19 (gaming) and GLI-33 (wagering) certification, certified RNG and geolocation — verified before a Certificate of Operation.
KYC
Player KYC & age checks
Identity, age and eligibility verification of every player at onboarding, on a risk-based cycle.
AML
AML/CFT programme
A working anti-money-laundering framework demonstrated before licensure — risk assessment, MLRO, monitoring and reporting.
RG
Responsible gaming
Player-protection controls — self-exclusion, deposit and loss limits, harm monitoring and education — embedded in the operation.
PEP
Sanctions & PEP screening
Continuous screening of players and counterparties against sanctions and PEP lists.
FIT
Fit-and-proper assessment
Ongoing suitability assessment of directors, controllers and connected staff — source of funds, integrity and track record.
LICENCE TYPES
The GCGRA licenses by role, not by brand. Most operators need more than one — the entity licence, plus a separate licence for every key person behind it. What each one covers, and what it takes:
| Licence | Who needs it | What it turns on | Indicative timeline |
|---|---|---|---|
| Internet gaming operator | Online casino games, poker, bingo, eSports for stakes | GLI-19 certification of the platform, certified RNG, UAE-only geolocation | 9–12 months |
| Sports wagering | Sportsbooks taking bets on sporting events, online or on-site | GLI-33 certification, event-integrity and pricing controls | 9–12 months |
| Lottery | Draw-based games and their retail distribution networks | Draw integrity and distribution-channel controls | 9–12 months |
| Vendor / supplier | Equipment, software and platform suppliers to licensed operators | Product certification and supplier suitability | 4–8 months |
| Key person / employee | Directors, controllers and connected staff — each individually | Fit-and-proper assessment, source-of-funds and background | 2–4 months, in parallel |
Indicative only. Timelines depend on licence type, technical readiness and how completely the file lands first time. GCGRA fees are set per licence type and are not published as a single tariff — budget in three layers: regulator fees, independent GLI certification, and the compliance build. We scope all three in the perimeter analysis before you commit.
HOW WE HELP
Knowing your model is the start. We confirm the regulator, build and defend the application, and keep you compliant after approval — three disciplines competitors outsource to three vendors, under one roof.
Perimeter analysis, entity, the full application and every round of regulator questions — through to approval.
Regulator-aligned, API-driven AML/KYT/KYB screening, monitoring and reporting — the controls you are approved on, running live.
Regulators hold cyber to a high bar. Our parent firm ITSEC delivers pen-testing, controls and audit evidence in-house.
Ready for the detail? See the full Gaming licensing service →
GO DEEPER
The industry routes here; the service gets you licensed. Read on.
The complete service — every licence type, the GLI-certification path and the steps to a Certificate of Operation.
The UAE's federal commercial-gaming regulator, licence types and the standards it enforces.
Advisory, RegTech and cybersecurity integrated — the GCGRA licenses on certified integrity, so security is built in.
FAQ
The GCGRA — the General Commercial Gaming Regulatory Authority — is the sole federal regulator for all commercial gaming: internet gaming, sports wagering, lottery and land-based facilities. Where a game issues a tradable virtual-asset token, VARA also applies to that layer.
Yes. Operating, supplying or facilitating commercial gaming without a GCGRA licence is a criminal offence in the UAE, extending to operators, suppliers and, in some cases, players.
If the token qualifies as a virtual asset — tradable, transferable or holding market value outside the game — VARA's regime applies alongside your GCGRA gaming licence.
Platforms are independently certified to GLI-19 (gaming systems) or GLI-33 (wagering), with certified RNG and UAE-only geolocation confirmed before a Certificate of Operation is issued.
The GCGRA does not publish a single tariff. Budget across three layers — regulator fees, independent GLI certification, and the compliance build — which we scope precisely in a perimeter analysis.
Yes, subject to entity structuring, fit-and-proper checks on directors and controllers, and meeting the same technical and compliance bar as any other applicant.
Indicatively 9–12 months for an operator or wagering licence, 4–8 months for a vendor/supplier licence, and 2–4 months (run in parallel) for key-person licences.
BUILDING TRUST IN A DECENTRALISED WORLD
Tell us what you're building. In one confidential call we will confirm which regime applies — GCGRA, VARA, or both — the technical and compliance bar, and the exact next steps.
