Turnkey Online Casino for Sale: What Every Operator Must Verify Before Buying in 2026

What exactly is a turnkey online casino for sale?

A turnkey online casino for sale is an operational gambling business packaged for acquisition: platform software, domain, brand, game library, payment integrations and, sometimes, an active gambling license. The buyer steps into a running product rather than building from scratch, but they also inherit every contract, liability and technical compromise the seller made.

The phrase gets used loosely in vendor marketing, so it is worth being precise. At the cleaner end of the market you have a fully operational site running on a licensed platform, with a live player base, active payment processor relationships and a game aggregator contract already in place. At the messier end, someone is selling a domain, a WordPress skin layered over a rented SoftSwiss or EveryMatrix instance, and a CSV of email addresses they are calling a "player database." Both get listed under the same label.

The distinction matters because the price drivers are completely different. A real acquisition targets the license, the player lifetime value, the payment stack and the regulatory standing. A shell sale is really just a white-label setup fee dressed up in acquisition language. I have reviewed term sheets where the "turnkey casino for sale" was literally a 30-day-old site with zero depositors and a Curaçao sub-license the seller did not actually own outright. The asking price was $180,000. The underlying setup would have cost $40,000 to replicate independently.

Before you engage with any listing, force the seller to clarify three things in writing: who holds the gambling license and whether it is transferable, who is the contracting party on the platform and game aggregator agreements, and what the last 12 months of gross gaming revenue (GGR) actually looked like with bank statements to support it. If any of those three answers arrive vague or delayed, treat that as a hard signal about what the rest of due diligence will look like.

Which jurisdictions allow a gambling license to be transferred to a new owner?

License transferability varies sharply by jurisdiction. Curaçao and Anjouan generally require a new application rather than a transfer when ownership changes materially. The MGA in Malta permits a change of control but triggers a full fit-and-proper review. Most US state licenses are non-transferable entirely. Knowing this before you price the deal can save you the cost of the license itself.

Curaçao is the most common license attached to offshore turnkey sales, and it is also the one most likely to create a post-acquisition headache. Under the Curaçao Gaming Authority (CGA) framework that took effect in 2023, a change of ultimate beneficial owner (UBO) requires notification and approval. The CGA has been tightening enforcement, and operators who assumed they could just swap corporate documents have found themselves operating in a gray area for months while the regulator processes the change. Budget three to six months for that process and do not assume continuity of the existing license during the review period.

The MGA in Malta is more structured but more demanding. A change of control triggers a fit-and-proper assessment of the incoming shareholders, directors and key function holders. The MGA will review source of funds, criminal records and prior regulatory history across all jurisdictions. That process typically takes four to six months and costs real money in legal and compliance fees. On the upside, an MGA license that survives a change of control is genuinely valuable because it opens EU markets and gives payment processors confidence.

Anjouan (COMOROS), which has become a popular offshore alternative since 2022, handles ownership changes on a case-by-case basis. The regulator is smaller and more responsive, but the license carries less commercial weight with tier-one payment processors. If the asset you are buying relies on an Anjouan license to access European banking, verify those processor relationships independently before closing.

US state licenses are almost categorically non-transferable. New Jersey, Pennsylvania, Michigan and the other regulated states require a new applicant to go through the full licensing process regardless of whether they are buying an existing operation. If someone is selling a "licensed US online casino," what they are usually selling is a market-access agreement or a management services arrangement, not the license itself. Get a gaming attorney in that specific state to review any such deal before you spend a dollar on due diligence.

How do you audit the platform before buying a turnkey casino?

Request server-side access or a third-party technical audit before signing any LOI. You need to confirm the platform is not a resold white-label with hidden monthly fees, that game RTP logs are intact and unaltered, and that the codebase has no outstanding security vulnerabilities. A two-week technical review by an independent firm typically costs $8,000 to $20,000 and is the best money you will spend in this process.

Most turnkey casino listings are built on one of a handful of B2B platforms: SoftSwiss Game Aggregator with a custom front-end, EveryMatrix CasinoEngine, Slotegrator, or a proprietary build from a smaller regional provider. Each has different implications for what you actually own after the acquisition. If the site runs on a platform-as-a-service model, you may be buying a brand and a player database but not the software itself. The platform provider retains the code, and your ongoing fees to them continue unchanged. That is not necessarily a dealbreaker, but it needs to be priced correctly.

Ask for the following documents before you commission a full technical audit: the original platform service agreement and all amendments, the game aggregator contract including revenue share rates and minimum guarantee commitments, the payment processor agreements (merchant IDs, rolling reserves, chargeback history), and the hosting and CDN contracts. I have seen acquisitions where the seller was paying a $15,000 per month minimum to their aggregator that the buyer had no idea about until month two of operations. That kind of contractual obligation does not appear in a demo walkthrough.

On the technical side, the audit should cover three things specifically. First, RTP integrity: pull server-side game logs for the last six months and cross-reference them against the certified RTP ranges for each game title. Discrepancies are rare but they do happen, and an operator who inherits a site with manipulated RTP data inherits the regulatory liability that comes with it. Second, KYC and AML record completeness: every depositing player should have a verified identity file. Missing KYC records are a compliance timebomb. Third, payment processor standing: request a direct reference from each processor confirming the merchant account is in good standing, the rolling reserve balance, and whether any fraud or chargeback investigations are open.

What should you look for in the game library of a turnkey casino acquisition?

The game library is only as valuable as the underlying aggregator contract. Verify that the game access agreements transfer to the new owner, check whether any direct studio deals exist and whether those studios will honor them post-acquisition, and confirm that all game certifications are current for your target markets. A library of 3,000 titles means nothing if half of them are geo-blocked in the markets you plan to operate.

Most mid-market turnkey casinos access their game content through a single aggregator: Relax Gaming, Pariplay, Slotegrator, or similar. The aggregator contract is typically with the original license holder or platform operator, not with the brand. When ownership changes, the aggregator may require a new KYC and compliance review before they extend the contract to the incoming operator. Some aggregators, particularly those with MGA or UKGC obligations, have explicit change-of-control clauses that give them the right to terminate on 30 days notice if the new owner does not pass their own compliance checks.

Direct studio deals are a different situation. If the casino has a direct integration with a studio like Pragmatic Play, Evolution (for live casino), or Play'n GO, those agreements are almost always non-transferable without the studio's written consent. Evolution in particular has a rigorous onboarding process for new operators, and they will not simply reassign a live casino contract to an incoming buyer. Budget time and legal fees to renegotiate those agreements from scratch, or price the deal assuming you will lose those direct integrations and need to access the same content through an aggregator at a higher revenue share.

For market-specific certification, this is where operators get burned most often on LATAM and LatAm-adjacent acquisitions. A casino certified for Curaçao does not automatically have its games certified for Colombia (Coljuegos), Peru (MINCETUR) or Brazil's emerging regulated market. Each jurisdiction has its own technical standards and RNG certification requirements. If your growth plan depends on expanding into regulated LATAM markets, audit the certification status of the top 50 game titles specifically against those regulatory requirements. The cost of recertification per game per market can run to several thousand dollars, and it takes time.

How do you value the player database in a turnkey casino sale?

Player databases are almost always overvalued in turnkey listings. The only number that matters is verified active depositors in the last 90 days, not registered accounts. Demand a cohort analysis showing retention, average deposit value and chargeback rate. Registered accounts without KYC verification are a compliance liability, not an asset, and should be excluded from any valuation calculation.

Sellers love to lead with total registered users because it sounds impressive. A site with 200,000 registered accounts sounds like a mature business. But in my experience reviewing these deals, the active depositor base is typically 2 to 5 percent of that figure, and the genuinely valuable segment, players who deposited in the last 90 days and have a positive lifetime value, is smaller still. I have seen listings where 180,000 of the 200,000 accounts were either dormant, failed KYC, or acquired through incentive campaigns that produced zero-margin players.

Ask for the following data in structured format before any valuation discussion: monthly unique depositors for the last 12 months, average revenue per user (ARPU) by cohort, bonus cost as a percentage of GGR, and chargeback and fraud rates by payment method. If the seller cannot produce this data, or produces it in a format that cannot be cross-referenced against payment processor statements, that is a serious red flag. Legitimate operators have this data. Operators who built a site to flip it in 18 months often do not.

There is also a GDPR and data privacy dimension that catches operators off guard. If the casino operates in or markets to EU residents, the player data is subject to GDPR. A transfer of that data to a new data controller requires either a legitimate legal basis or explicit re-consent from affected players. In practice, this means that a significant portion of an EU-facing player database may not be legally usable by the incoming operator without a re-engagement campaign and fresh consent collection. Factor that cost and the likely drop-off rate into your valuation model.

What does a turnkey casino acquisition actually cost in 2026?

Pricing ranges from $50,000 for a shell with minimal player activity to well over $2 million for a licensed, revenue-generating operation with a clean compliance record. The most common mid-market deals I see land between $150,000 and $600,000. The multiple on GGR varies by license quality, market focus and platform dependency, typically 1x to 3x annual GGR for offshore assets.

The asking price is only one part of the total acquisition cost. Add legal and compliance review ($15,000 to $50,000 depending on jurisdiction complexity), technical audit ($8,000 to $20,000), license transfer or new application fees (highly variable, from $5,000 for Anjouan to $25,000 or more for MGA), and a post-acquisition integration and remediation budget. That last item is the one operators consistently underestimate. Inherited platforms almost always need payment processor renegotiation, KYC system upgrades, and front-end work to bring the product up to competitive standards. Budget $40,000 to $120,000 for the first 90 days of operations assuming you are not starting from a clean build.

Revenue multiples for offshore turnkey casinos have compressed slightly since 2023 as Curaçao enforcement increased and several large payment processors tightened their offshore casino merchant policies. In 2021 and 2022, sellers were getting 2.5x to 4x annual GGR for reasonably clean assets. Today, 1x to 2.5x is more realistic for Curaçao-licensed operations, with MGA-licensed assets commanding a premium at 2x to 3.5x because of the processor access and EU market credibility the license provides.

Be skeptical of any deal priced primarily on projected or potential GGR rather than actual trailing revenue. Some sellers will present a "run rate" based on a strong recent month or a bonus-inflated spike. Always use the trailing 12-month average, and discount any month where a significant promotional campaign distorted the numbers. If the seller resists this framing, that tells you something about what the real numbers look like.

What are the biggest red flags in a turnkey casino listing?

The clearest red flags are a license the seller cannot prove they own outright, a player database with no KYC documentation, payment processors on rolling reserves above 15 percent, open regulatory investigations, and platform agreements that cannot be assigned to the new owner. Any one of these alone can make an otherwise attractive deal worthless.

Sub-license structures deserve special attention. A significant portion of Curaçao-licensed casinos are not licensed directly by the CGA but operate under a master license held by a third-party operator. If the seller holds a sub-license rather than a master license, the actual license holder is a separate company with its own contractual rights over the business. In the worst cases, the sub-licensor can terminate the arrangement on 30 days notice, taking the license with them. I have seen acquisitions close on this basis and then fall apart within 60 days when the master license holder decided not to extend the sub-license to the new owner. Always verify the license chain of custody directly with the regulator, not just through documents the seller provides.

Payment processor health is another area where sellers obscure bad news. Rolling reserves above 10 to 15 percent signal that the processor considers the merchant high-risk, usually because of elevated chargebacks or fraud rates. Some processors hold reserves for 180 days after account closure, which means the incoming operator may not have access to a significant chunk of working capital for months after acquisition. Request the most recent processor statement for every active merchant account, confirm the reserve percentage and release schedule, and ask directly whether any chargeback investigation or account review is currently open.

Undisclosed liabilities are the category that causes the most post-acquisition surprises. These include unpaid affiliate commissions (affiliate programs often have large outstanding balances that the seller has stopped paying), unresolved player bonus disputes, tax liabilities in jurisdictions where the casino has economic nexus, and outstanding invoices from game providers or platform vendors. A proper acquisition involves a representations and warranties clause in the purchase agreement that covers these, but enforcement is difficult especially in offshore structures. The better approach is to surface these liabilities during due diligence rather than relying on contractual remedies after the fact.

How does buying a turnkey casino compare to building one from scratch?

Building from scratch with a white-label provider like SoftSwiss or EveryMatrix takes four to eight months and costs $80,000 to $250,000 all-in for an offshore launch. Buying a turnkey operation can compress that timeline to 30 to 90 days post-closing, but the acquisition premium and remediation costs often exceed the build cost. The real advantage of acquisition is the existing player base and payment processor relationships, not speed.

The timeline argument for acquisition is real but overstated. Yes, you can theoretically be operating under an acquired brand faster than you can build one. But the due diligence process for a proper acquisition takes six to twelve weeks minimum, and the post-acquisition remediation work adds another two to three months before the product is genuinely competitive. A clean white-label build with SoftSwiss or EveryMatrix, starting from their turnkey packages, can go live in four to five months with none of the inherited liability. The timelines are closer than the acquisition pitch suggests.

Where acquisition genuinely wins is in markets where payment processor relationships are hard to establish from scratch. A casino with an existing merchant account at a processor that has since tightened its onboarding criteria is a real asset. The same applies to affiliate relationships: an established casino with active affiliate traffic has something a new build cannot replicate quickly. If the acquisition target has strong organic SEO rankings and a working affiliate program, those are the assets worth paying a premium for.

The cost comparison is not straightforward because it depends heavily on what you are actually acquiring. A clean build on EveryMatrix with a Curaçao license costs roughly $80,000 to $150,000 all-in for a competent offshore launch. A mid-market acquisition with real players costs $200,000 to $700,000 including due diligence and remediation. The delta is the price of the player base, the processor relationships and the market history. Whether that premium is justified depends entirely on the quality of those assets, which is exactly what the due diligence process is designed to establish.

What legal structure should you use when acquiring a turnkey casino business?

Most offshore casino acquisitions are structured as asset purchases rather than share purchases, specifically to avoid inheriting undisclosed liabilities. However, if the license is held by the target company and is not transferable to a new entity, a share purchase may be unavoidable. Get a gaming attorney and a tax advisor involved before you choose a structure, because the implications for both liability and taxation are significant.

The asset purchase versus share purchase decision is the most consequential structural choice in any casino acquisition. In an asset purchase, you buy specific assets: the domain, brand, player database, software licenses and contracts, leaving the legal entity and its liabilities behind. In a share purchase, you buy the company itself, inheriting everything including liabilities you have not discovered yet. For offshore casino acquisitions, where financial and regulatory history is often opaque, the asset purchase structure is generally preferable from a risk management standpoint.

The complication is the license. Gambling licenses are issued to legal entities, not to assets. If the license is held by the target company and the regulator requires continuity of the licensed entity, a share purchase may be the only way to preserve the license through the transition. This is common in MGA acquisitions and in some US market-access structures. In that scenario, your representations and warranties coverage and the escrow structure become critical risk management tools. Work with a gaming-specialist law firm, not a generalist M&A attorney, because the regulatory nuances are not something a generalist will catch.

Tax structure matters more than most operators think at the LOI stage. The jurisdiction of the acquiring entity, the location of the servers, and the residence of the beneficial owners all affect the tax treatment of the acquisition and the ongoing operation. Some offshore structures that looked tax-efficient in 2018 have become significantly more complicated following OECD BEPS implementation and the EU's list of non-cooperative jurisdictions. Get a tax advisor who works specifically with iGaming businesses before you finalize any structure. The cost of that advice is trivial compared to the cost of restructuring a poorly designed acquisition two years later.

How should you handle payments and banking after acquiring a turnkey casino?

Assume that at least one payment processor relationship will need to be renegotiated or replaced post-acquisition. Processors conduct their own due diligence on ownership changes, and some will terminate accounts rather than extend them to a new beneficial owner. Build a 90-day payment continuity plan before closing, and identify backup processor options for each payment method the casino currently supports.

The payment stack is often the most fragile part of a turnkey casino acquisition. Processors that approved the original operator based on their specific compliance history, nationality and corporate structure will not automatically extend the same terms to you. Some will require a full new merchant application, which takes four to eight weeks and may result in a higher rolling reserve or lower processing limits. Others will simply terminate the account when they learn of the ownership change, particularly if the new beneficial owner is from a nationality the processor considers higher risk.

Crypto payment integration has become a meaningful part of many offshore casino stacks, and it carries its own transfer considerations. If the casino uses a crypto payment processor like CoinsPaid or BitPay, confirm that the wallet addresses and settlement accounts can be transitioned to the new entity's control. More importantly, verify that the casino's crypto payment flows are compliant with the AML requirements of the license jurisdiction. Curaçao's 2023 framework has explicit crypto AML requirements, and a casino that was processing crypto informally under the old regime may need a compliance overhaul before the new operator can continue those operations safely.

Build your payment continuity plan around three scenarios: best case, where all existing processor relationships transfer smoothly; base case, where one or two processors require re-application and you have a 30 to 60 day gap in those methods; and worst case, where you lose two or more processors simultaneously and need to rely on backup options. Having relationships with at least two alternative processors lined up before you close the acquisition is not paranoia, it is basic operational planning. Nuvei, Payvision and Trustly are worth having conversations with in parallel to the acquisition process, so you are not starting from zero if the worst case materializes.