While gambling is technically a global industry, every business still needs a foundation to operate on and therefore is subject to local laws. A business spread across four different countries through servers, licenses, marketing, and equity is going to be crippled. The unfortunate reality that any operator of a system of this sophistication must face is that were a single local link to be squeezed by authorities: shutting off internet access, blocking bank cards, criminal prosecutions, etc. the entire system would seize up.
This fragmentation makes the gambling industry break down gambling markets by four operating models: regulated, grey, monopoly, and prohibited. The categorization of gambling markets goes beyond a legal classification. As detailed on our foundational Corporate Compliance & Regulatory Governance hub, they dictate whether a company can obtain a license, market its product, take payments, access local banking rails, or mount a defense to an action taken by regulators.
This guide focuses on the South Asia region, where blocking via network controls and restrictions on payments is increasingly used against unlicensed platforms. The key case to note is Nepal, where unlicensed platforms are being tackled by moving from simple illegality to infrastructure-led action through cabinet orders to block and disrupt payments through domestic wallets and banking rails, and by criminal culpability under the Muluki Criminal Code.
The business lesson for me was that a company that wants a future cannot be built off the back of unstable or illegal markets. The best is to simply expand where it is legal to do so, where payments are legal, and where all the steps from acquisition to payout can be documented. According to Tobin, this also means obeying the laws governing gambling in that sovereign territory, and encouraging clients to gamble responsibly in that country.
Chapter 1: How Global Gambling Law Works
The first mistake of companies is to think of online gambling as one global business. Usually, gambling regulation is determined by country, and sometimes by province, state, or special administrative zone within a country. For end users, the website is the only relevant thing, but for state licensing purposes, data transmissions, payments, advertising, consumer protection, and tax collection are all separate legal events.
Why jurisdiction matters
It is also important to remember that all markets are different. Some markets are licensing markets, while others are monopolies that only rarely or never issue licenses, which means that online gambling may have no legal framework at all. But licenses are not an empty formality in such a regulated economy: the license is the only “ticket” to legitimate action. The absence of a license inside closed markets is not an administrative delay. Closed markets are by definition structurally closed to unlicensed individuals and companies.
The five control layers
- 1. Licensing control: In cyberspace, blocking a website is only half the battle, the real killer blow is to block the flow of money. Any website can quickly change its domain name to get around a technical blockade, but if we block the e-wallet and the banking system, the users themselves will leave the website, because they will not be able to deposit or withdraw funds. That is the essential lesson of the Central Bank of Nepal’s story: when financial regulators want to, they are completely capable of pulling the platform’s “lifeline” without fully relying on one of the mainstays of internet censorship, internet blocking. Financial compliance is far more important in cyberspace than cyberspace loopholes.
- 2. Network control: If the government does want to take a hard line on gambling, you can block domains, manipulate DNS, shut down payment gateways, disable apps, and one whole business “ecosystem” can be shut down in a very short time. The most telling example of NTA Nepal’s campaign was that once an administrative order was in place, it was too late for businesses to comply. Businesses that aren’t compliant proactively will be erased from the market with a click of a button.
- 3. Payment control: Payment controls are often more effective than blocking sites altogether, since a web page will tend to lose players, whose ability to deposit or withdraw money will have been restricted. The Nepal Rastra Bank’s gambling warning against mobile wallets illustrates that a central bank can essentially block access, even when the internet layer is only part of the enforcement story.
- 4. Criminal liability: Several of these illegal markets make betting itself illegal. For example, in addition to the operators, in the National Penal (Code) Act of Nepal the players, people who help ease the act, advertisers and essentially anyone who offers the means for betting are also punished. Moreover, the code’s parts on conspiracy and abetment have the effect of expanding the risk for those who are participants in the activity.
- 5. Commercial pressure: Banks, payment processors, app stores, hosting partners, ad networks, all do their own kind of risk assessments. And even without the statute being formally changed, the market may see gambling as a kind of restricted sector and just drop it. Nevertheless, private sector pressure is easily able to turn a grey market into an unbankable market before any court decision arrives.
What borderless platforms must accept
Even technically global sites may be legally limited to certain jurisdictions. A gambling site operator may face blocking of the site, prosecution, blocking of payments, and other legal consequences by being present in jurisdictions where online gambling is banned or highly restricted. Thus the selection of markets is a question of legality, not only expansion.
Chapter 2: The Four Market Models
This four-market model provides a simple framework for operators to understand and choose jurisdictions. Although the categories are not perfect, and do not consider things like territory, they are useful because they reflect how the law, payment rails, and enforcement actually work in practice.
Regulated markets
Regulated markets allow gambling to operate openly under legal supervision through various types of licenses. Businesses operating in these markets must strictly adhere to regulations regarding products, operations, customer service, as well as financial obligations and periodic reporting. While compliance requires significant investment in human resources and processes, operators benefit from a clear, secure, and professional legal framework.
Denmark and Sweden, the Philippines, and several American states have also established their own licensing systems and consumer protection standards, allowing the licensed operators to build openly, to use local payment providers, and to market in accordance with the local rulebook. In return, they must also have strict internal controls such as AML monitoring, age checks, and responsible gambling procedures.
Well-regulated markets are always ideal destinations for long-term capital. This is because their operating mechanisms are more predictable, and legal risks are minimized due to regulators’ proactive compliance with regulations. Overall, these markets are not only more transparent in terms of auditing and convenient for banking transactions, but also provide a solid foundation for building trusting relationships with regulatory authorities.
Grey markets
Gray markets lie in the buffer zone between reasonable calculations and unexpected rules. In these areas, the legal framework often has gaps, errors, inconsistencies, and a lack of consistent enforcement. Typically, in some countries, the underlying gambling industry remains largely unregulated, with no formal legal framework established. Conversely, there are markets that are theoretically very restricted, yet enforcement has been largely absent until recently.
The biggest risk when entering the gray market is instability. A business may operate stably for a long time, but it faces difficult fluctuations from changes in banking policies or regulations, or political pressures. When these factors change, the entire ecosystem of the business can be dangerously threatened, from payment partner withdrawals and advertising channels being cut off to access to the local market being completely blocked.
The gray market is generally a good sign in terms of the numbers and short-term price signals. But the gray market is an underegulated one, and revenue coming from the gray market is largely unreliable and a barrier to scaling in a safe and sustainable way. Therefore, if your business is compliance-oriented, stay away from the gray market, and do not even think about making it a hallmark of your growth strategy.
Monopoly markets
For the government, monopoly is a means of controlling social inefficiencies and guaranteeing national revenue in a market that does not support multiple producers. For private firms, monopoly is effectively a market where the level of any foreign competition is closely controlled, and the legitimate producer has a strong position based on a license in a market that has no competitive environment.
However, whereas in some cases the state is simply the regulator, here it is also the owner of the market, which makes enforcement against offshore operators more likely, given the state has a clear economic interest in the continued monopoly and in ensuring activity is channeled through its public operator.
For private companies, monopoly markets can still be attractive, simply because consumer demand for the company’s product continues to exist, and the operator of these markets may be blocked from services or receive delayed payments (or have exclusivity rights revoked) if it isn’t allowed onto markets.
Prohibited markets
Additionally, there are restricted markets, which either prohibit gambling altogether or do not have any legal framework for online gambling operations. These markets are associated with high risk. It should also be noted that sanctions for violations here are not merely administrative but usually also include serious criminal, financial, and technical sanctions.
There are disadvantages to businesses in blocked markets, since the lack of either legal framework, or secure payment methods, means that actions such as blocking, freezing of financial services, and prosecutions can easily cripple any business that provides such a service. Nepal’s example is representative: it bans all forms of gambling, consistently blocks online gambling sites, its central bank restricts e-wallets, and its criminal code penalises both gamblers and those who ease gambling with them.
Market comparison table
| Market type | Legal structure | Access rules | Payment risk | Advertising posture | Operator outlook |
| Regulated | License-based and explicit | Open to licensed operators | Lower if compliant | Allowed under the rules | Best for long-term growth |
| Grey | Unclear or inconsistently enforced | Often tolerated, then tightened | Medium to high | Unstable or restricted | Use caution; never rely on it alone |
| Monopoly | State retains exclusive rights | Private operators blocked | High for offshore entrants | Usually limited or prohibited | Avoid without explicit permission |
| Prohibited | Banned or criminalized | Active blocking likely | Very high | High legal exposure | Do not target |
Chapter 3: South Asia Enforcement Shifts
South Asian countries have mostly shifted to other methods of anti-online gambling efforts that do not aim to punish users directly. The measures instead focus on building technical infrastructure. This infrastructure is used to close down gambling apps and monitor payment transactions to avoid social harm to users. This allows them to focus on the benefit and protection of the community rather than using punitive methods.
Why the region is changing
Mature and responsible gambling operators know for years, and know today, that South Asia has never been a legal “mid-region” for unregulated online gambling. South Asia’s governments are focused on protecting their citizens’ economic safety and are using telecommunications and financial controls to force real operational accountability out of the online gambling industry.
India
With the 2025 announcements of the Indian Government to ban real-money online gambling, they have taken the first steps to protect families and children. This is a clear indication that this legislative measure is not a one-issue law but that it will turn the entire digital space around. But now that lawmakers have started to take charge, and payment and advertising partners are beginning to recognise their responsibilities, the outlook is a little more positive.
Bangladesh
Bangladesh has taken a hardline stance on online gambling. It is trying to prevent its citizens from partaking of what it believes to be a scourge that can decimate lives. The government has put forward that this is a part of the country-wide effort, where banks, internet service providers, and government authorities come together to prevent inducements to financial ruin.
Pakistan, Myanmar, Sri Lanka, and nearby watch markets
Legal definitions for the rest of the region are murky, and although Pakistan and Myanmar may temporarily decriminalize some territories, these are not an indication of an online gambling-friendly locale. Sri Lanka’s most heated policy debates notwithstanding, those are no substitute for a sound legal framework. Thus, the business must both fight and observe local regulations, rather than simply look for opportunities to expand.
Nepal as the decisive case
Nepal has become a role model of efficient law enforcement by integrating the telecommunications, financial, and criminal laws of the country to protect its citizens, and the government is not resting on its laurels and is decisively blocking the offending services and warning the payment system. This is how they are creating a solid “wall” to protect the safety of their own citizens.
- Legal baseline: The law is not a code of conduct in Nepal. It is a gentle reminder to respect the peaceful personal space of every citizen. The 2017 Criminal Code of the country lays down a blanket prohibition against gambling and betting with much heavier punishments as a preventive measure against causing dispute in the family or contracting a loan, and human safety is always preferred to material gain in this market.
- Cabinet-level escalation: Setting a “24-hour” deadline for law enforcement authorities to make sure that websites and applications are blocked is a clear message of responsibility and readiness to make sure that the safety of citizens is not weakened. It is now difficult to break the security breach. The state prioritizes community safety above all else, and immediately and firmly curtails any negative impact on social life.
- NTA web blockades: The NTA has also been working to clean out the internet and make cyberspace a safe place. It has coordinated with internet companies and blocked thousands of gambling websites and apps to create a “shield” for citizens to protect them from falling into financial traps. The campaign will also send a message to operators who willfully engage in evasive behaviours such as changing their name in order to avoid regulatory scrutiny that the state has swift enforcement operations to curtail such actions.
- Mobile wallets and payment gateways: It is a responsible decision by the Central Bank of Nepal to stop e-wallets and digital payment channels from being used to provide gambling risk for daily activities. By freezing the accounts of those gambling on such platforms, the state is upholding the law and protecting our hard-earned money. Blocking these payment channels to illicit industries effectively prevents users from becoming involved in risky financial schemes and being exploited.
- Muluki Criminal Code liability: Criminal law in Nepal, codified in the Muluki Code, also protects citizens from being used to gambling to their financial disadvantage. Gambling is taken very seriously, and is punished by imprisonment and fines, and applied not only to those who gamble, but also to those who provide the necessary environment for it. Such laws may be passed to ensure that the community, families, and society as a whole are not drawn into the dangers of such schemes.
Why Nepal matters beyond Nepal
Nepal is a modern state. Instead of trying to catch digital ghosts from distant servers, it is protecting its citizens, whether within our own borders or not. The attempted control over everything, from the internet to financial resources, has made the promised land of platform gambling a no-go area. Security has grown to the extent that this kind of platform is a risk that any operator would have to fear when trying to enter this market.
Chapter 4: Compliance-First Operating Model
An ethical company does not ask itself, “How can we make the most profit from our activities this quarter?” It asks: “Is our presence something that brings meaning and peace of mind for the communities in which we operate?” The sustainable company must be one that goes far beyond the absolute minimum required by law. It must have a culture that promotes a transparent legal environment in the spirit of respect for customers and the marketplace.
Signals that a market is safe enough to enter
- A real license path exists: The government can use a market opening, with a clear licensing plan, to manifest its stated commitment to transparency and to help businesses reduce the intrinsic uncertainties and risks involved in investing time and other resources to develop secure, high-quality services. For willing companies, these regulated and monitored marketplaces are the best, safest place to add monetary value for the community.
- Payments are lawful and stable: As such, if banks and e-wallets are allowed to monitor gambling transactions all the time, then the original intention of the government is very clear, which is to protect the people. In payment, this will be more orderly and legal, and the government can control this to become a “shield” for people’s money. This is how businesses build long-term credibility, rather than engaging in short-term, opportunistic activities that damage the interests of the community at large.
- Access is not being blocked: The blocking of an app or the domain name of a site is an indication, given by the country, that gambling is bad for the community. This is the unmistakable “red light” for responsible operators to stop onboarding new customers. Stopping marketing campaigns at this point is not only an act of legal compliance, but also a practical protection to save people from unfortunate financial consequences in an environment where it is no longer permitted.
- Users are not criminalized: A market in which at least half of the participants in a gamble are forced to risk the penalty of a fine or imprisonment simply for betting is no proper form of a market. Responsible businesses will care far more for protecting customers from such risks than for profiting from participation in such intrinsically risky markets.
- Local partners are not exposed: Where the business partners and employees could possibly be co-conspirators, the line between business and crime is blurred, with not only the system being corrupted for money, but the people on both sides of the system being subject to risk. A smart business knows that association with criminal activity will irreparably tarnish the reputation of the brand with banks and local communities. Protection of life and of the brand must always come before revenue targets.
Corporate policy for expansion
Sustainable business is about making business interests and the safety of the community co-exist. We want to eradicate the gray market gambling mentality and build trust through transparency and standards in the areas and markets where we choose to do business.
- Access control: technical measures should be taken to avoid any geographical cross-border violations.
- Protect the payment ecosystem: Guard against local payment instruments being used for opaque or illegal services.
- For these reasons, we try to stop affiliate campaigns as soon as we see strong signs of enforcement interest.
- Pre-market approach: All new market plans are risk-assessed to some extent before advertising spend begins.
- Immediate impacts: Internal regulations that implement changes in law or public announcements are adopted without delay.
Why responsible gambling starts with market choice
For example, we always talk about tools to protect players, such as deposit limits or self-exclusion tools. However, that’s just the tip of the iceberg. The first principle deals with market selection: an operator should not seek to provide services in jurisdictions where gambling is illegal or where the operator is unsure about whether gambling is legal or not. Choosing a safe market is the first step towards responsible gambling.
Why stability beats scale
Don’t be fooled by the cheap numbers. Cheap is not always a good long-term business strategy. Legal risk in accounts getting frozen and arrested is a “growth trap” and can happen overnight. A good business is not a business built on opportunities rather than transparency. We’re not racing to be everywhere; we want to make sure that we operate legally, have the support of the banking system, and earn the community’s trust.
Strategic takeaway
As the telecommunications, banking and law enforcement sectors respond collectively to clean up the Internet, the lessons learned in Nepal serve to remind us that the fight against illegal gambling is, in fact, more than simply a matter of management. It is an effort in the fight for social safety. For commercial actors, the key lesson is that productive investments in transparent and stable markets create legal and economic value rather than reaching for easy short-term profits in deteriorating markets.