PLAYBOOK · GAMING · GIBRALTAR
Card Acquiring for Gibraltar-Licensed iGaming Operators
B2C remote gambling, post-Gambling Act 2026
Gibraltar is a Tier-1 white-list jurisdiction with guaranteed UK market access, but the Gambling Act 2026 has redrawn the substance bar and the licence sits inside Visa's highest-risk integrity tier. This playbook covers what changes for card acquiring once you hold a B2C Gambling Operator's Licence under the Gibraltar Gambling Commissioner — and why acquirer matching needs to reflect both the post-2026 substance regime and your UK revenue mix.
WHY THIS COMBINATION IS HARD
What goes wrong when generalist acquirers see this profile.
Gambling Act 2026 substance test is now an acquirer underwriting question
The replacement of the 2005 Act shifted Gibraltar from a server-location test to a 'substantive decision-making' test, with an approved persons regime for senior managers. Acquirer underwriting now expects evidence that the controlling mind, key staff and decision-making sit on the Rock — not just a holding company.
Licensing Authority requires the merchant account to be controlled from Gibraltar
The Gibraltar Licensing Authority's policy is that the credit card merchant account, customer funds account and clearance flows must be controlled by the licensee and not held outside Gibraltar (or in a non-Gibraltar institution) without prior Authority approval. That constrains which acquirer/PSP structures will actually pass licence conditions.
MCC 7995 plus Visa VIRP Tier 1 classification
Gambling sits in the highest-risk tier under the Visa Integrity Risk Program, meaning the acquirer must run AHIR controls, quarterly certifications, enhanced UBO checks and crawler-based site monitoring. Generalist acquirers rarely carry those controls and decline Gibraltar gambling files on intake.
UK revenue concentration creates a dual-regulator overlay
A large share of Gibraltar sector revenue comes from UK players, which means the operator must also hold a UKGC remote licence to take UK business — and the acquirer has to be comfortable with UKGC credit card ban enforcement, GAMSTOP integration and affordability rules layered on top of Gibraltar's own conditions.
Post-Brexit loss of EU passporting narrowed the acquirer pool
Gibraltar payment institutions can no longer passport into the EEA, so EU-facing volume usually has to be routed through a separate EEA-licensed acquirer or PI. That forces a multi-MID structure that generalist acquirers typically won't build for a single merchant.
Chargeback ratios run materially above standard e-commerce
iGaming typically runs well above general e-commerce dispute ratios, driven by friendly fraud and loss-chasing behaviour. Acquirers price reserve, monitoring and VAMP exposure around that baseline, and Gibraltar files get extra scrutiny on responsible-gambling and self-exclusion controls.
WHAT TO EXPECT
Realistic terms for this combination.
ROLLING RESERVE
8-12% rolling reserve over 180 days, with 15%+ for new operators or those with limited trading history
SETTLEMENT
T+3 to T+7 for established files, T+7 to T+14 during the first 3-6 months
MCC CODES
7995 (betting and casino gambling); 7994 occasionally for skill-gaming overlays
Scheme reporting: Visa VIRP Tier-1 classification triggers AHIR acquirer controls, quarterly merchant certifications, and enhanced UBO/website monitoring. Mastercard scheme rules require documented licence evidence, geo-blocking of unlicensed markets and that the acquirer enforces the UKGC credit card prohibition where UK traffic is taken.
ACQUIRER LANDSCAPE
Who actually underwrites this combination.
The pool for Gibraltar B2C gambling files is concentrated among UK and EU principal members with a documented MCC 7995 programme and AHIR controls in place, plus a smaller set of specialist high-risk PSPs that front-end onto those principals. EU-facing volume typically routes through EEA credit institutions or e-money institutions with gambling permissions, while UK-facing volume needs an acquirer comfortable enforcing UKGC credit card and affordability rules. Generalist acquirers without a gambling programme will not underwrite the file regardless of how clean the Gibraltar licence is.
HOW ICETREE APPROACHES IT
Our approach for merchants in this combination.
- We pre-screen against acquirers with live, documented MCC 7995 programmes and AHIR controls — not generalists who 'sometimes look at gaming'
- We structure dual-MID routing where the operator needs both UK and EEA coverage, so post-Brexit passporting loss doesn't bottleneck settlement
- We negotiate reserve against the operator's actual dispute history, chargeback ratio and responsible-gambling stack — not a default Tier-1 number
- We package the Gambling Act 2026 substance evidence (approved persons, Gibraltar-resident key staff, decision-making locus) the way acquirer underwriting actually expects to see it
- We coordinate the file so it sits inside Visa VIRP and Mastercard BRAM expectations from day one, including geo-blocking, licence display and responsible-gambling disclosures
FAQ
Common questions answered.
Want IceTree on your side?
Run the Approval Predictor for a 2-minute estimate of your acquirer fit, expected reserve range, and what to prepare — specific to Gibraltar and Gibraltar Regulatory Authority.