How Online Blackjack Sites Get Licensed in the US

The United States has no federal online casino licensing authority, no federal register of approved operators, and no agency in Washington that inspects a blackjack game before it goes live. Congress has written statutes that criminalize certain gambling conduct, and federal prosecutors enforce them, but nobody at the Department of Justice signs off on a shoe of six decks running on a server in Atlantic City.

Seven states currently permit licensed online casino games, blackjack included: New Jersey, Pennsylvania, Michigan, West Virginia, Connecticut, Delaware and Rhode Island. Each built its own statute, its own regulations, its own fee schedule and its own investigative bureau. An operator that clears Pennsylvania does not thereby clear Michigan. It files again, pays again, and gets investigated again, though regulators do share findings and will accept work already done in a comparable jurisdiction as supporting evidence.

The broader question of what is and is not permitted where you live is covered in the guide to whether online blackjack is legal in the US and mapped state by state on the state-by-state index.

Delaware and Rhode Island run lottery models in which the state itself holds the gambling authorization and contracts the product out, so there is no published operator application fee to report.

Two patterns are worth pulling out of that table. First, the entry price varies by more than two orders of magnitude, from Michigan’s $150,000 to Pennsylvania’s $10 million, and the size of each state’s operator field tracks that difference closely. Second, the states that charge the most renew the least often. Pennsylvania and Michigan run five-year terms, while Connecticut and New Jersey renew annually, giving those regulators a scheduled chance every 12 months to reexamine a licensee without opening a disciplinary case.

Deeper treatment of each agency, its rulebook and its public docket lives on the individual regulator pages, and the regulators sub-hub compares their powers side by side.

Those duties convert commercial promises into enforceable ones. Pennsylvania’s regulatory structure is the easiest to read as a checklist, because each duty gets its own chapter:

• 809a: platform requirements.
• 810a: testing and controls.
• 811a: accounting and internal controls.
• 812a: player accounts.
• 813a: advertising, promotions and tournaments.
• 814a: compulsive and problem gambling requirements.
• 815a: self-excluded persons.
• 816a: the live dealer studios that stream human-dealt blackjack.

Regulated operators do not treat customer balances as working capital. Player funds must remain available on demand and must survive the operator’s own financial trouble, which is the single largest practical difference between a licensed account and an offshore one. Pennsylvania’s player account chapter runs from registration and account security through a single-account requirement, funding methods, player-imposed controls, withdrawals, statements, suspended accounts and dormant accounts.

Certification is not a one-time event. Any change to a game’s rules, math or software triggers retesting, and operators file monthly reports of handle, payouts, promotional credits and adjusted gross receipts broken out by game category. Michigan’s act requires exactly that breakdown, and its graduated tax on adjusted gross receipts, running from 20 percent up to 28 percent as revenue rises, only works because the reporting is granular. Those filings are what make published payout reports possible, and they are also how a regulator notices that a blackjack game’s actual hold has drifted away from its certified theoretical hold.

Every regulated state requires deposit, loss and time limits that the player sets and the operator cannot quietly override, plus participation in a state self-exclusion program. Michigan’s statute obliges operators to provide “both temporary and permanent self-exclusion,” to cooperate with the board’s responsible gaming database and to refuse accounts to anyone on the exclusion list. Pennsylvania devotes two chapters to the subject. Practical guidance sits on the responsible gambling hub, with detail on state self-exclusion programs and on deposit and loss limits.

Licensed operators must know who holds each account and where that person is sitting. Michigan requires mechanisms designed to verify that a participant is 21 or older and that wagering is limited to transactions initiated and received by someone located in the state, plus controls “designed to detect and prevent fraud, money laundering, and collusion.” Age and identity checks happen before an account is funded, not at the first withdrawal, which is a compliance requirement rather than a stalling tactic; the process is explained under KYC and ID verification.

Location checking is continuous rather than one-shot. Pennsylvania’s rule at 58 Pa. Code 809a.7 requires detecting location at login, blocking play until the player is in an authorized location, and monitoring dynamically during the session. Rhode Island’s statute similarly requires the system to detect physical presence and reject a wager it cannot confirm. The technology behind that is unpacked in how geolocation works.

Marketing is regulated content. States police claims about winnings, restrict targeting of minors and self-excluded people, mandate disclosures on bonus offers, and require that promotional terms be filed and honored as written. That last point is what gives a player leverage in a dispute; see bonus terms explained and the overview of blackjack bonus offers.

All of this sits on top of periodic audits, suspicious activity reporting, the security standards described under encryption and data handling, and the enforceable complaint process described under what you are entitled to in a regulated state. The overall case for regulated play is set out in the guide to whether online blackjack is safe for US players.

Those documents are real in the narrow sense that some registry issued them, but they confer no authority in any US state, and no US agency will take a complaint about a company that holds one.

Access is also less universal than the marketing suggests. One prominent offshore brand now blocks 19 states plus the District of Columbia, and its sister brands block different lists entirely.

What those overseas regimes do and do not require is examined on the offshore licenses page, and the practical comparison for a player deciding between the two is laid out under offshore versus licensed sites. The warning signs that a site is not what it claims are catalogued under red flags.

• 4 Pa.C.S. Chapter 13B, 58 Pa. Code Subpart L, the board’s interactive gaming licensing process document and the temporary regulations at 48 Pa.B. 7.
• Casino Control Act Article 6C, the DGE internet gaming page and its fee schedule.
• Michigan’s Lawful Internet Gaming Act, Public Act 152 of 2019.
• West Virginia Code 29-22E-6, 29-22E-7, 29-22E-8 and 29-22E-9.
• Conn. Gen. Stat. Chapter 229b, R.I. Gen. Laws 42-61.2-17 and 29 Del. C. Chapter 48, Subchapter I.

Licensing rules change when legislatures meet, and pending bills that would add states to the list above are tracked on the legislation tracker. This page describes how regulators operate; it is not a substitute for advice from a lawyer about your own situation.