Estonia legal gambling sites: verify EMTA and MTR records

The Estonian Tax and Customs Board, or EMTA, publishes the clearest public starting point for a licence check. Its legal-operator page was last updated on 18 August 2026 and places the legal entity, visible brand, website and MTR link in the same table.

The online-games-of-chance table renders 60 body rows, but that is not an operator count. Fifteen rows contain only additional brand names such as Maria Casino, Jalla Casino, 22bet, Bizzo Casino and National Casino. Counting rows with an entity, website evidence and an MTR relationship produces 45 legal entities and 145 distinct domain strings.

Several EMTA entries use continuation rows because one entity operates multiple brands. LEXBYTE DIGITAL LIMITED occupies the main row for Unibet and a continuation row for Maria Casino. Moon Technologies OÜ has one entity row followed by separate brand labels for 22bet, Bizzo Casino and National Casino.

Treating each visible row as a company turns brand labels into extra licence holders. The safe method is to count only rows that retain the entity and MTR-link structure, then keep every brand and hostname attached to that entity.

EMTA is the best source for the question a player usually has: does this exact website appear in Estonia's positive legal list, and which entity stands behind it? The page separates online games of chance, land-based casinos, games on a ship, toto, games of skill and lotteries.

Those sections must remain separate. The online-games-of-chance table contains 45 entities. The toto table contains 31, of which 28 also appear in online games of chance. Three toto organisers do not appear in that first table, so adding both tables would double-count most of their overlap.

Each EMTA entity normally links to the Register of Economic Activities, or MTR. The company page displays its registry identity and active licence records. HKT numbers are activity licences, while HKL numbers are operating permits.

That distinction changes the result. Under section 16 of the Gambling Act, an activity licence only entitles its holder to apply for operating permits. It is indefinite and cannot be transferred. The current HKL must also say Kehtiv: Jah, meaning valid, and its dates and gambling type must support the claim being checked.

The Gambling Act requires separate activity licences for games of chance, toto and games of skill. An operating permit is then issued for a location or for a type or subtype offered as remote gambling. A remote operating permit may run for up to five years.

Since 1 January 2026, a remote-permit decision must also specify the Internet addresses from which participation is allowed. The domain is therefore an attribute of the operating decision. It is not licensed merely because the corporate group holds an HKT or operates another approved brand.

LEXBYTE DIGITAL LIMITED currently has separate indefinite activity licences for games of chance and toto. Its games-of-chance operating permit HKL000418 runs to 29 May 2028 and names unibet.ee and mariacasino.ee. Its separate toto permit HKL000273 runs to 28 May 2038 and identifies Unibet websites.

OB Holding 1 OÜ follows the same two-product pattern for OlyBet. HKL000510 covers games of chance through 30 November 2030, while HKL000340 covers toto through 30 November 2040. Both records expose olybet.ee and olybet.eu. One brand name therefore leads to two product permissions and two validity periods.

The two systems do not expose identical fields. EMTA lists Triogames OÜ with betsafe.ee and jallacasino.ee under online games of chance. Its current games-of-chance permit confirms Triogames and Betsafe but the inspected MTR website field does not display jallacasino.ee.

The PokerStars record has the opposite practical split. MTR confirms REEL Estonia Limited, its indefinite HKT000013 and current HKL000500, but the inspected permit detail does not expose a website field. EMTA provides the positive pokerstars.ee match. A blank field in one interface is a display limitation, not enough evidence to reverse the other official record.

Of the 145 exact domains in the online-games-of-chance table, 106 end in .com and only 31 end in .ee. The remaining eight use .eu, .io, .net, .win or .bet. Tonybet.com, coolbet.com and grandx.com are straightforward examples of non-.ee addresses in the positive table.

Twenty-eight of the 45 entities list more than one domain, and 10 have no populated brand field. Damagi Marketing Solutions Ltd alone has 18 domain strings in its row. The suffix, logo and apparent brand name are therefore poor substitutes for an exact entity-domain check.

Begin with the hostname shown in the browser, including the suffix. Search that exact value in EMTA's relevant product section, then retain the named legal entity and visible brand. Open the MTR link from the same row instead of searching for a group company from memory.

On MTR, confirm the entity and displayed registry code, find a current HKL, inspect its gambling type and validity dates, and check the supporting HKT. Where the permit detail exposes website addresses, compare them with EMTA. Record any mismatch as a limitation and do not repair it with a corporate website or another country's licence.

Several older toto records contain websites but display Kaughasartmäng: Ei, meaning remote gambling: no. That field should not be silently changed to yes because a domain is present.

The Gambling Act says electronic communication used only to receive bets, report outcomes or transfer payments is not necessarily remote gambling. This helps explain why an online-facing toto record may use a longer operating-permit term. The correct description is the product and status printed in MTR, together with the website evidence, not a new remote classification created by Atlas.

EMTA separately publishes domains it blocks because services are available in Estonia without the required activity licences and operating permits. The downloadable CSV contained 1,955 sequential, unique domain records when checked on 8 September.

The CSV has no embedded as-of date. The accompanying page was last updated on 8 May, while the PDF metadata indicates 31 July. The 1,955 figure should therefore be labelled as observed on the Atlas verification date, not as an officially dated market total.

A domain missing from the blocked file has not passed a positive licence test. Enforcement lists can lag, use another hostname or simply not contain every site a reader might encounter. Legality still requires the exact positive relationship in EMTA and a current operating authority in MTR.

The reverse also needs care. If a searched hostname is absent from EMTA, report that it was not found in the positive sources checked. Use an illegal or blocked label only when the exact hostname appears in the official negative file or another current authority decision supports it.

Vana Lauri OÜ has seven domains in the online-games-of-chance row but no populated MTR link there, although its toto row does link to MTR. Two displayed Njord domains, possu.com and shokki.com, use malformed http-only link targets. These are publication defects in the official interface, not evidence about the underlying permission.

MTR also warns that licences and notices are being migrated to the newer Tarvik system. EMTA's current legal-operator page still sends gambling users to MTR, so MTR remains the operational cross-check for this guide. Every review should confirm that those links and records still work.

Estonia does not apply one age threshold to every gambling product. The current Gambling Act bars people under 21 from games of chance, remote games of chance and remote games of skill. Toto and lotteries are restricted to people aged 18 or over.

The product section therefore matters for consumer protection as well as licensing. If a problem cannot be resolved with a listed organiser, EMTA provides its gambling contact address on the legal-operator page. A licence match does not remove the need to check game rules, complaint terms and self-restriction options.