All insights
Methodology11 minute read

How to verify a gambling brand: company, domain and licence

A rigorous method for connecting a gambling brand to its legal operator, consumer domain, licensed activity and current regulator record.

Published 1 August 2026 · Updated 1 August 2026
By iGaming Atlas Research Desk4 primary sourcesReview cadence: 90 days

The short answer

  • A brand-name match is only the beginning: the legal entity, exact domain, licensed product and record status must also agree.
  • Regulator registers expose different fields, so the verification method must preserve what the source proves and what it does not.
  • A group licence or a licence for one domain cannot automatically be reassigned to every brand owned by the group.
  • The final research record should be reproducible by another reader using the same official source and a visible check date.

Why one licence check requires four linked records

Consumers usually start with a brand, while regulators often license a legal company and record one or more trading names, domains and activities. Those objects are related, but they are not interchangeable. A familiar logo can therefore produce a false positive if the researcher stops after finding the parent group or a similarly named company.

A defensible check builds a chain from the exact brand to the operating entity, from that entity to the consumer domain, and from the domain or trading name to a current licence covering the relevant product. The conclusion should be no broader than the weakest confirmed link in that chain.

Record one: the consumer brand or trading name

Start with the name visible to the user, but record spelling, local suffixes and any market-specific variation. Regulators may index a trading name separately from the account name, and inactive trading names can remain visible in historical data.

The UK Gambling Commission register illustrates this distinction by exposing account names, trading-name counts and the active or inactive status of trading names. A brand match should therefore be connected to the correct business record rather than treated as a licence in isolation.

Record two: the legal operating entity

Capture the exact company named by the authority, including corporate suffixes and any regulator account or licence identifier. Parent companies, platform providers and sister companies should remain separate unless the official record explicitly connects them.

This prevents a common error: finding one licensed company inside a corporate group and assigning that evidence to another group brand. Ownership can provide context, but it is not a substitute for the locally licensed entity.

Record three: the exact consumer domain

Check the hostname a user will actually visit, including the country-code domain where relevant. Redirects, mobile subdomains and international versions should not be assumed to inherit the status of a different listed domain.

The Portuguese SRIJ directory connects each licensed entity to its consumer website and then lists the products and licence records attached to that entry. The UK register separately records domain status, including active, inactive and white-label classifications. These fields show why a domain match needs its own status check.

Record four: licence, activity and current status

Confirm what the permission covers: betting, casino, poker, lottery, exchange or another regulated activity. Then inspect whether the licence is active, suspended, surrendered, expired, revoked or still pending. An operator can be active for one product while another activity is absent or suspended.

Record dates, amendments and expiry fields when the authority publishes them. A screenshot or old licence badge cannot establish current status when a live register or dated official download is available.

A reproducible nine-step workflow

Use a fixed workflow so that the result can be repeated and challenged. The order below reduces the risk of adapting the evidence to a preferred conclusion.

  • Define the exact jurisdiction and product before searching.
  • Open the regulator's register or the best available official verification route.
  • Record the source URL, dataset date and time of the check.
  • Search the brand, known trading names, legal entity and exact domain separately.
  • Connect the match to a unique account, licence or permit identifier where available.
  • Verify activity scope, domain status, amendments, suspension and expiry fields.
  • Check whether enforcement or regulatory-action fields modify the interpretation.
  • State unmatched fields and alternative names tested instead of hiding the gap.
  • Publish a jurisdiction-specific conclusion with the source and review date.

How register design changes the investigation

There is no universal register format. The UKGC supports searches by business, trading name, domain or account number and publishes downloadable data. The SRIJ presents consumer brands together with websites, operating entities, products, licences and amendments. Germany's GGL publishes a whitelist of permitted providers, while the Malta Gaming Authority exposes a searchable licensee register and dynamic authorisation records.

A strong method adapts to those structures without pretending they prove identical things. Where a source is a complete register download, a dated absence search may be meaningful. Where the authority publishes only selected examples or a general policy page, absence carries much less evidential weight.

Direct citation, register batch and legacy evidence

iGaming Atlas separates a direct record citation from a relationship matched during a documented review of an official register. A direct citation belongs to the individual operator-market relationship. A register batch reuses one official source and one reproducible method across several named matches, with its own check date and limitations.

Both can be primary-source evidence, but the provenance label remains visible. A legacy record has neither current route and is kept apart until it can be verified, corrected or removed.

False positives that survive a superficial search

The most dangerous mistakes often contain a true fragment: a real group licence, a genuine regulator logo or a domain once used by a licensed business. The error is extending that fragment to a different entity, product, date or jurisdiction.

Treat former brands, white-label domains, B2B suppliers, platform licences and pending applications as distinct records. Also distinguish a regulator's enforcement notice from a licence record; being named in an official document does not itself establish permission.

  • A parent company is licensed, but the consumer brand is not listed.
  • The brand is present, but the domain is inactive or belongs to a white-label arrangement.
  • The company has a casino permission, but the claim concerns sports betting.
  • The licence is genuine but suspended, surrendered, expired or revoked.
  • The match applies to one country and is reported as a worldwide status.

The minimum evidence record to publish

A useful research note contains the jurisdiction, brand, legal entity, domain, product, licence or account identifier, status, source title, source URL, source date, check date and a short explanation of any limitation. Preserve the exact wording used by the authority when a status has a technical meaning.

For absence findings, also record the names and domains searched, the apparent completeness of the register and the date of the dataset. The public conclusion should normally say 'not listed in the checked register' rather than infer a universal allegation.

When to repeat the check

Repeat the verification before publication, after a domain or company change, when a licence approaches expiry, and after a regulator publishes a new register snapshot or enforcement action. High-risk operator and market guides should carry a defined review cadence instead of an undated claim of being current.

The purpose of dating is not cosmetic freshness. It allows a reader to distinguish a later regulatory change from an error in the original research and gives editors a concrete queue for re-verification.

Frequently asked questions

Does a regulator logo prove that a gambling site is licensed? No. Open the authority's own register and match the entity, domain and activity. Is a brand licensed everywhere if its parent company holds a licence? No. Permission is jurisdiction- and entity-specific. Does a missing match prove illegality? Not by itself; report the scope and completeness of the search.

Can one domain cover several products? Sometimes, but each activity still needs to be supported by the relevant permission. Can a batch review be reliable? Yes, when the official source, method, checked records, date and limitations are published and reproducible.

Primary sources

These links are maintained by the named authority. Open the current source before relying on a status.