Operator evidence file · India · 23 August 2026
How to investigate an online casino’s India licence claim
How to test an India licence claim without relying on marketing
Affgate was used only for discovery and priority. The verdict and findings come exclusively from the declared evidence sources.
An online casino may claim to be “licensed”, “regulated” or “available in India” without identifying an Indian authority, the legal entity operating the service or the exact domain covered. Those phrases are not interchangeable. A foreign credential does not by itself establish an India casino licence, and access from India does not prove local authorisation.
The supplied primary records do not establish a brand-specific Indian licence for an unnamed casino. They also do not prove that no relevant permission or record exists anywhere. The defensible result is therefore an amber signal: preserve the claim, identify precisely what was asserted and compare it with current official material before reporting or relying on it.
Start with the exact claim, not the brand’s reputation
A useful investigation begins with the wording visible to the user. “Licensed casino”, “internationally regulated”, “legal in India” and “accepts Indian players” are four different representations. Record the complete sentence, where it appeared and whether a named authority, licence identifier, legal entity or jurisdiction accompanied it.
Before interacting further, note the full hostname rather than only the brand name. Lookalike domains and unauthorised apps can reuse branding. If an APK, payment request or customer-care contact was received outside an official app store or established channel, follow the fake gaming app warning and phishing checks before submitting documents or money.
| Claim encountered | What it supports | What remains unproven |
|---|---|---|
| “Licensed” with no authority named | The brand displayed a general licence claim | Issuer, jurisdiction, licence status and domain coverage |
| Foreign authority and identifier shown | A specific foreign credential has been asserted | Authenticity, current status, entity match and Indian effect |
| “Available in India” | The service represents that Indians can access it | Indian approval, legality or consumer protection |
| “Legal in India” | A direct India-facing legal assertion was made | Its statutory basis, territorial scope and applicability |
What the 2025 Act source can establish
MeitY maintains the official source titled “Promotion and Regulation of Online Gaming Act 2025 and notifications”. The preserved record is an Act-and-notification hub and expressly requires legal review for interpretation. It is the correct starting point for checking the current central material, but its presence alone does not answer every brand-level or state-level question.
The official title should not be shortened into a claim that every online activity is treated identically. Nor should a casino’s use of words such as “gaming”, “social gaming” or “skill” be accepted as a classification without examining the actual product and current legal material. For a focused explanation of the central source, see the 2025 online gaming law guide. State-law context may also matter and should not be inferred from a central source alone.
Does an India casino licence claim match a primary record?
Ask the operator’s claim to supply five matching elements: issuing authority, licence number, licensee’s legal name, covered domain and current status. An assertion is materially incomplete when those elements cannot be connected.
The supplied evidence packet contains no captured brand claim and no brand-specific Indian licensing entry. That absence must be described narrowly. It means an exact local match has not been established from the accepted records; it is not proof that no record exists.
| Matching element | Evidence to preserve | Reason for checking it |
|---|---|---|
| Issuing authority | Exact name and jurisdiction displayed | Distinguishes an identifiable credential from generic wording |
| Licence identifier | Complete number or reference | Enables an exact-record comparison rather than a name search |
| Legal entity | Company name as displayed | Brand names may differ from the entity holding a credential |
| Domain coverage | Full hostname, including subdomain | A record for one host need not establish another host’s status |
| Date and status | Capture date and stated validity | Old, suspended or undated material may not establish current status |
If the site supplies none of these details, record “issuer and identifier not disclosed in the captured claim”. Avoid replacing that factual description with “unlicensed” unless a competent, current record supports that conclusion.
How to describe a foreign licence accurately
A foreign licence should be described by its stated jurisdiction, authority, licensee and identifier, once independently verified. Neutral wording is: “The operator asserts a licence from [foreign jurisdiction]; that assertion does not itself establish an Indian licence or resolve the service’s position under Indian law.”
Advertising claims and the MIB advisory
The Ministry of Information and Broadcasting source is an official advisory concerning offshore betting and gambling advertising. Its supported scope is advertising guidance only. It should not be presented as a casino licensing register, a list of every prohibited domain or a finding against an unnamed brand.
When an India-facing advertisement makes a licence claim, preserve the advertisement separately from the destination site. Record the publisher or platform, date and time, visible account name, full creative, landing hostname and exact legal or licence wording. Do not assume the advertiser, operator, payment recipient and app publisher are the same entity.
For an advertising-specific route, use the online money game advertising report guide.
Preserve evidence before the site or claim changes
Use the following checklist:
- Save the complete URL and hostname, including the path and any redirect destination.
- Capture the claim with the device date and time visible or recorded separately.
- Preserve the surrounding context so a cropped word such as “licensed” is not misleading.
- Record the claimed authority, licence number, legal entity and jurisdiction exactly as displayed.
- Save app-store details, APK filename or package identifier when an app is involved; do not install an unknown APK merely to gather evidence.
- Preserve payment requests, UPI IDs, merchant names, transaction references and bank alerts without publicly exposing credentials or OTPs.
- Keep emails, SMS messages and chat exports in their original form where possible.
- Write a short chronology covering first contact, account activity, payment events and discovery of the disputed claim.
- Note what could not be verified rather than filling gaps with assumptions.
The online gaming cyber-fraud evidence checklist provides a broader preservation path. If a suspicious brand is being compared across names, domains and apps, the claim-check submission route can help structure the material.
Choose the reporting route by the harm involved
A misleading licence statement, suspicious advertisement, cyber-enabled deception and unauthorised payment are related but distinct issues. Send each issue to the route competent to receive it, and retain acknowledgement numbers.
| Situation | Practical route | Important limit |
|---|---|---|
| Suspected cyber fraud, impersonation or deceptive site | National Cyber Crime Reporting Portal | Filing does not itself prove the allegation |
| Immediate financial cyber-fraud concern | Follow the cyber-fraud reporting steps, including the official portal route | Act promptly and preserve the transaction trail |
| Unauthorised electronic payment | Notify the bank or payment provider promptly and use the applicable RBI customer-protection process | Recovery is not guaranteed |
| Offshore betting or gambling advertisement concern | Preserve the advertisement and consult the MIB advisory context | The advisory is not a brand licensing database |
The consumer complaint and cybercrime comparison explains why a service dispute and suspected cyber offence may need different records. For urgent financial cyber-fraud reporting, consult the 1930 and NCRP guide.
Payment concerns require a separate record
RBI’s preserved source concerns customer protection for unauthorised electronic payment transactions. It supports a reporting and customer-liability process; it does not promise reimbursement. A casino’s licence wording and a payment dispute should therefore be documented separately, even when both arise from the same interaction.
Notify the bank or payment provider promptly if a transaction was not authorised. Preserve the amount, timestamp, transaction reference, beneficiary or merchant details, alerts and communication with the institution. Never share an OTP, PIN or password with a person claiming to arrange recovery. A voluntary payment followed by dissatisfaction is not automatically the same as an unauthorised transaction, and the distinction should be stated accurately.
Dated official sources
The accepted official records were checked on 23 August 2026:
- MeitY — Promotion and Regulation of Online Gaming Act 2025 and notifications: current Act and notification hub; legal review is required.
- MIB — Offshore betting and gambling advertising advisory: advertising-advisory scope only.
- National Cyber Crime Reporting Portal: official cybercrime reporting route.
- RBI — Customer protection for unauthorised electronic payment transactions: reporting and customer-liability process, with no guaranteed recovery.
These sources support different functions and should not be merged into a single verdict. The open questions for any specific casino remain the exact captured claim, the claimed issuer, entity and domain match, and any current competent record addressing them.
Frequently asked questions
Does India issue an online casino licence?
The supplied primary records do not establish a general Indian online casino licence that an unnamed offshore brand can claim. They also do not prove that no permission or relevant record exists in every legal context. Ask for the issuing Indian authority, licence identifier, legal entity and covered domain, then compare the claim with current competent records.
What does the 2025 Act cover?
MeitY’s preserved source is the official hub for the Promotion and Regulation of Online Gaming Act 2025 and its notifications. Determining how the Act applies to a particular product, operator or set of facts requires review of the current legal material; the source record alone does not support a brand-specific conclusion.
How should a foreign licence be described?
Describe it as a claimed or verified licence from the named foreign jurisdiction, depending on the evidence available. Do not call it an India licence. Even a verified foreign credential does not by itself establish Indian authorisation or settle the service’s position under Indian law.
Where can a suspect site be reported?
Suspected cyber fraud, impersonation or deceptive online conduct can be reported through the National Cyber Crime Reporting Portal. Preserve URLs, screenshots, messages and transaction references, and describe the conduct without presenting an allegation as proven. Notify the bank or payment provider promptly when an electronic payment was unauthorised.