An online casino is a website or mobile app on which players stake real money on casino-style games: slot machines, roulette, blackjack, baccarat, poker variants, bingo-style games and live-dealer tables streamed from a studio. Players fund an account held by the operator, play against the house, and withdraw any remaining balance. Online casinos are the largest product category within online gambling (iGaming) in many markets, alongside sports betting.
Whether an online casino is legal depends on where the player is located. Some jurisdictions license online casinos (Great Britain, most EU states, a minority of US states, Ontario), some license betting but not casino games, and some prohibit both. Sites licensed only in a hub such as Curaçao and offered to players in countries where they hold no local licence are often described as offshore or unlicensed casinos. Online casinos are distinct from free-to-play "social casinos" in which no real-money prize can be won.
Online casino in plain terms
An online casino is a games arcade where every machine is quietly tilted a little in favour of the owner. Any single player can walk out a winner on a given night, but over thousands of plays the tilt ensures the arcade keeps a small share of everything put in. The tilt is not a secret trick; in regulated markets it is tested and published.
Online, the arcade is a computer program instead of a room. A tested random number generator plays the part of the spinning wheel or the shuffled deck, and a cashier desk on the website takes deposits and pays out winnings through banks and payment apps.
How the games and the house edge work
Most online casino content comes from specialist game studios that supply many operators. Slot and table outcomes are decided by a random number generator (RNG) that independent testing laboratories certify for regulators. Live-dealer games use real cards and wheels filmed in studios. A game's long-run payout to players is its return to player (RTP), and the operator's expected share is the house edge:
Here RTP is the average share of stakes returned to players over a very large number of plays, expressed as a decimal. European roulette has 37 pockets (1 to 36 plus zero), and a single-number bet pays 35 to 1, returning 36 units including the stake when it wins. On a 1-unit bet the expected return is , so the RTP is about 97.3% and the house edge about 2.7%. Slot RTPs are commonly set in a range of roughly 90% to 97%, depending on the game and the regulator's rules.
Some crypto-focused casinos advertise "provably fair" games, which publish cryptographic hashes so players can verify that an outcome was not altered after the bet. This addresses tampering, not the house edge, which still applies.
Licensing and player protection
A real-money online casino needs a gambling licence for casino games in each market it serves. Regulators such as the UK Gambling Commission (UKGC) and the Malta Gaming Authority (MGA) require certified games, published rules, segregated or protected customer funds, age and identity verification before play, and tools such as deposit limits, reality checks and self-exclusion. Some regulators restrict game design itself: Great Britain introduced stake limits on online slots in 2025 and bans features such as autoplay. Sites licensed only by the Curaçao Gaming Authority (CGA) or another offshore gaming license issuer may lawfully serve fewer markets than their marketing suggests, which is why regulators use geo-blocking orders and payment blocking against them.
Payments and financial crime
Casino deposits and withdrawals move through cards, e-wallets, bank transfers, local instant payment schemes, prepaid vouchers and, at many offshore sites, cryptocurrency and stablecoins. Card schemes classify gambling under a dedicated merchant category code (MCC), require acquirers to register gambling merchants and expect them to block transactions from countries where the operator is not licensed. Many banks treat casinos as a high-risk merchant category, and some operators rely on a high-risk acquirer or specialist providers described under gaming payments. Great Britain bans credit card gambling, and some countries limit deposits to accounts in the player's own name.
The FATF standards and EU law treat casinos, including online casinos, as businesses subject to anti-money laundering (AML) rules. Typical red flags include deposits withdrawn after minimal play, accounts funded by third parties or mule accounts, chip dumping between colluding players, and play with stolen cards that ends in a chargeback. Operators apply customer due diligence, check the source of funds of heavy spenders, run transaction monitoring and file suspicious activity reports.
Criticism and risks
Online casino games, especially slots, are associated with higher rates of gambling harm than many other products because play is fast, continuous and private. Public health researchers point to losses concentrated among a small share of heavy players. Other concerns include bonus terms that make withdrawals difficult, unlicensed sites that refuse to pay, and the use of offshore casinos to move criminal money. In the United States, "sweepstakes casinos" that use dual virtual currencies to resemble real-money play have drawn action from several states. When markets close or banks exit, unlicensed casinos often move to crypto and agent-based payments, part of the wider grey economy.