How to verify a gambling brand: company, domain and licence

Consumers usually start with a brand, while regulators often license a legal company and record one or more trading names, domains and activities. Those objects are related, but they are not interchangeable. A familiar logo can therefore produce a false positive if the researcher stops after finding the parent group or a similarly named company.

A defensible check builds a chain from the exact brand to the operating entity, from that entity to the consumer domain, and from the domain or trading name to a current licence covering the relevant product. The conclusion should be no broader than the weakest confirmed link in that chain.

Start with the name visible to the user, but record spelling, local suffixes and any market-specific variation. Regulators may index a trading name separately from the account name, and inactive trading names can remain visible in historical data.

The UK Gambling Commission register illustrates this distinction by exposing account names, trading-name counts and the active or inactive status of trading names. A brand match should therefore be connected to the correct business record rather than treated as a licence in isolation.

Capture the exact company named by the authority, including corporate suffixes and any regulator account or licence identifier. Parent companies, platform providers and sister companies should remain separate unless the official record explicitly connects them.

This prevents a common error: finding one licensed company inside a corporate group and assigning that evidence to another group brand. Ownership can provide context, but it is not a substitute for the locally licensed entity.

Check the hostname a user will actually visit, including the country-code domain where relevant. Redirects, mobile subdomains and international versions should not be assumed to inherit the status of a different listed domain.

The Portuguese SRIJ directory connects each licensed entity to its consumer website and then lists the products and licence records attached to that entry. The UK register separately records domain status, including active, inactive and white-label classifications. These fields show why a domain match needs its own status check.

Confirm what the permission covers: betting, casino, poker, lottery, exchange or another regulated activity. Then inspect whether the licence is active, suspended, surrendered, expired, revoked or still pending. An operator can be active for one product while another activity is absent or suspended.

Record dates, amendments and expiry fields when the authority publishes them. A screenshot or old licence badge cannot establish current status when a live register or dated official download is available.

Use a fixed workflow so that the result can be repeated and challenged. The order below reduces the risk of adapting the evidence to a preferred conclusion.

There is no universal register format. The UKGC supports searches by business, trading name, domain or account number and publishes downloadable data. The SRIJ presents consumer brands together with websites, operating entities, products, licences and amendments. Germany's GGL publishes a whitelist of permitted providers, while the Malta Gaming Authority exposes a searchable licensee register and dynamic authorisation records.

A strong method adapts to those structures without pretending they prove identical things. Where a source is a complete register download, a dated absence search may be meaningful. Where the authority publishes only selected examples or a general policy page, absence carries much less evidential weight.

iGaming Atlas separates a direct record citation from a relationship matched during a documented review of an official register. A direct citation belongs to the individual operator-market relationship. A register batch reuses one official source and one reproducible method across several named matches, with its own check date and limitations.

Both can be primary-source evidence, but the provenance label remains visible. A legacy record has neither current route and is kept apart until it can be verified, corrected or removed.

The most dangerous mistakes often contain a true fragment: a real group licence, a genuine regulator logo or a domain once used by a licensed business. The error is extending that fragment to a different entity, product, date or jurisdiction.

Treat former brands, white-label domains, B2B suppliers, platform licences and pending applications as distinct records. Also distinguish a regulator's enforcement notice from a licence record; being named in an official document does not itself establish permission.

Australia's 2026 blocking notices provide unusually clear counter-examples. ACMA described lightning-bet.com, pointsbetz.com and chromabet.org as imitating licensed services, while the positive register points to different domains and named licence holders. A one-letter change, hyphen or top-level domain can therefore separate a regulator-backed service from a blocked imitation.

Malta's regulator published a related warning on 16 July. It named three active casino domains and said their MGA references were false and misleading. The notice proves the regulator's finding about those URLs, but it does not identify their owners. The correct verification record preserves both the strong negative domain finding and the unresolved ownership field.

Brazil's consumer and digital-rights authorities have asked Google and Apple how they validate betting licences, monitor status changes and remove apps after an authorisation is suspended, revoked or expires. The published request is procedural rather than a sanction, but it exposes a useful infrastructure point: an app package is another consumer endpoint that must stay connected to the authorised entity and brand.

Finding an app in a mainstream store should therefore begin, not end, the check. Match the publisher and brand to the current official list, confirm the exact app or linked domain where the regulator publishes it, and keep store availability separate from the government licence conclusion.

A useful research note contains the jurisdiction, brand, legal entity, domain, product, licence or account identifier, status, source title, source URL, source date, check date and a short explanation of any limitation. Preserve the exact wording used by the authority when a status has a technical meaning.

For absence findings, also record the names and domains searched, the apparent completeness of the register and the date of the dataset. The public conclusion should normally say 'not listed in the checked register' rather than infer a universal allegation.

Repeat the verification before publication, after a domain or company change, when a licence approaches expiry, and after a regulator publishes a new register snapshot or enforcement action. High-risk operator and market guides should carry a defined review cadence instead of an undated claim of being current.

The purpose of dating is not cosmetic freshness. It allows a reader to distinguish a later regulatory change from an error in the original research and gives editors a concrete queue for re-verification.

Does a regulator logo prove that a gambling site is licensed? No. Open the authority's own register and match the entity, domain and activity. Is a brand licensed everywhere if its parent company holds a licence? No. Permission is jurisdiction- and entity-specific. Does a missing match prove illegality? Not by itself; report the scope and completeness of the search.

Can one domain cover several products? Sometimes, but each activity still needs to be supported by the relevant permission. Can a batch review be reliable? Yes, when the official source, method, checked records, date and limitations are published and reproducible.