Is Crypto Gambling Legal in Spain?

Regulatory authority	Dirección General de Ordenación del Juego (DGOJ), Ministry of Social Rights, Consumption and 2030 Agenda
Key legislation	Ley 13/2011 de Regulación del Juego (2011)
Regulated online market	Yes Online casino games, sports betting, and poker are legal under a single national licence issued by the DGOJ — roughly 80 licensed operators hold one as of mid-2026. That framework has no path for cryptocurrency: licensed operators are required to use traceable, KYC/AML-compliant payment rails, which rules out direct crypto deposits by design, not by omission.
Player explicitly banned	No
Penalty for players	None established Ley 13/2011's sanctioning regime targets operators and promoters, not individual players — no provision in the law makes playing at an unlicensed site itself a punishable offence for the player.
How it's enforced	ISP-blocking, administrative fines The DGOJ maintains a blacklist of unlicensed operators and can order Spanish ISPs to block domains. In 2025 alone it issued 58 sanctions totalling nearly €111 million. On 26 May 2026 the DGOJ opened sanctioning proceedings against prediction-market platforms Polymarket and Kalshi and ordered a precautionary block of both sites nationwide — the first time this specific enforcement tool was applied to a prediction-market product rather than a traditional casino or sportsbook. The proceeding was estimated at 3-4 months to a final resolution as of the order date.
Law mentions crypto	No Ley 13/2011 itself doesn't name cryptocurrency. The exclusion is structural: Article-level payment-method rules require traceable, identity-verified transactions, which crypto rails as used by offshore casinos don't provide. Separately, Spain's 2026 rollout of the EU's DAC8 crypto tax-reporting rules and MiCA licensing regime targets crypto service providers generally, not gambling specifically.

Spain is the odd entry in this series. Most of the countries we’ve covered either ban online gambling outright or have a law that predates crypto and never caught up. Spain has neither problem: online casino games, sports betting and poker are all legal, licensed and actively supervised under a single national statute. The catch is narrower and more structural. The licence that makes an online casino legal in Spain comes with payment requirements that crypto cannot satisfy — and the offshore sites that do take crypto are on the receiving end of the most aggressive enforcement year the regulator has had.

One National Law, One Regulator

Spain regulates online gambling federally, not region by region. Ley 13/2011, de 27 de mayo, de regulación del juego is the governing statute, and the Dirección General de Ordenación del Juego (DGOJ) — sitting under the Ministerio de Derechos Sociales, Consumo y Agenda 2030, headed by Pablo Bustinduy — is the regulator that issues licences and brings sanctions.[1] Roughly 80 operators held Spanish licences as of mid-2026. If a casino wants Spanish players legally, this is the only door, and there is no alternative regional or special-economic-zone route around it.

The Licence Rules Out Crypto by Construction, Not by Oversight

Read Ley 13/2011 cover to cover and you will not find the word cryptocurrency anywhere.[1] That silence is easy to misread as a gap. It isn’t one. Licensed Spanish operators are required to run player funds through traceable, KYC- and AML-compliant payment rails, with identity verification and an auditable money trail attached to every deposit and withdrawal. Direct crypto deposits fail that requirement by definition — not because someone forgot to write them in, but because the entire licensing architecture is built on the ability to trace a transaction back to a verified person.

This is a different failure mode from the rest of this series. In Cyprus there is no licence category for online casino games at all. In Spain there is one, it works, and roughly 80 operators use it — it simply cannot be a crypto product and remain compliant. So a Spanish player who specifically wants to gamble with Bitcoin is not choosing between a licensed crypto casino and an unlicensed one. They are choosing between a licensed fiat casino and an unlicensed offshore site.

The Player Is Not Named in the Sanctioning Regime

The enforcement side of Ley 13/2011 is pointed at operators and those who promote or advertise unlicensed gambling.[1] There is no provision making it an offence for an individual to place a bet on an unlicensed site. That is a real distinction from Cyprus, where the statute names the player explicitly and attaches a prison term and a fine to participation. Spain wrote its penalties for the supply side.

That is worth stating plainly, and it is also worth not overstating. Nothing about the absence of a player penalty makes an offshore site safe to use — it means the legal exposure in the transaction sits with the operator, while the practical exposure (a site that gets blocked mid-session, a withdrawal that never clears, no regulator to complain to) sits with the player.

What DGOJ Actually Does to Operators

The top sanction tier under Ley 13/2011 is a fine of up to €5 million plus a two-year exclusion from the Spanish market for very serious infringements, and the regulator uses it. In Q1 2026 alone, DGOJ issued nine sanctioning resolutions — two very serious, seven serious — totalling €10,290,500. Two of them, against Perfect Storm B.V. and Rossobash SRL, hit the ceiling exactly: €5,000,000 each plus a two-year market ban, in both cases for operating in Spain without a licence.[4]

That quarter was not an outlier. Across the whole of 2025, DGOJ issued 58 sanctions totalling close to €111 million in the online betting and gambling sector. The regulator also maintains a blacklist of unlicensed operators and can order ISPs to block their domains.

Spain Blocked Polymarket and Kalshi — and That’s the Signal

On 26 May 2026, DGOJ opened sanctioning proceedings against the prediction-market platforms Polymarket and Kalshi, and ordered the precautionary blocking of both sites across Spain before any final decision had been reached.[2] The legal basis in the official text is stated generically — the gambling regulations, without a specific article cited.[3] Notification went out through the Boletín Oficial del Estado, the state gazette, after attempts to notify the offshore operators directly at their known foreign addresses failed.[2]

The procedure was expected to run three to four months from the order, which would put a resolution somewhere around late summer 2026. As of this writing no final decision has been confirmed by any source — the blocks are in place, the proceedings are still open.

Crypto is not mentioned anywhere in that order. It is a licensing action, not a payments action. But the precedent matters more than the subject matter: Spain’s site-blocking machinery had previously been aimed at conventional unlicensed casinos and bookmakers, and in May 2026 it was pointed at an entirely new product category for the first time. Spain was also the fifth country in 2026 to block prediction markets, after Brazil, Indonesia, India and Portugal — a regulator willing to extend blocking to formats its statute never contemplated is not a regulator that will treat an offshore crypto casino as a harder case.

Europe Is Coordinating on This

On 25 November 2025, the regulators of Austria, France, Germany, the United Kingdom, Italy, Portugal and Spain issued a joint statement committing to coordinate enforcement against illegal online gambling.[5] The motivating numbers came from a Yield Security report: unlicensed operators took 71% of the EU market in 2024 — €80.6 billion against €33.6 billion for licensed operators — and 81 million of the 118 million Europeans who gambled online used unlicensed platforms.[5] Whatever the merits of those estimates, they are the figures European regulators are working from, and they explain the direction of travel: more enforcement, more blocking, more of it coordinated across borders.

Separately, Spain is implementing MiCA and DAC8 through 2026, the EU frameworks for crypto-asset regulation and crypto tax reporting respectively. Neither is a gambling rule, and neither changes the licensing analysis above — but together they mean crypto held and moved by Spanish residents is becoming considerably more visible to tax authorities than it was a few years ago.

Even the Casinos We Cover Treat Spain as a Risk

Twenty-eight of the 52 casinos we track already exclude Spain in their own terms of service — including Stake, BC.Game and BitStarz, three of the platforms we rate most highly elsewhere. That is more than half our tracked portfolio declining the market voluntarily, and it is a much higher share than we see for markets we do write best-of guides for. Operators looking at an €5 million ceiling, a two-year market ban and an active blocking list appear to have run the same arithmetic.

Why We’re Not Recommending Anything Here

The legal route in Spain exists and works, and it is not a crypto route — a licensed Spanish operator cannot take a Bitcoin deposit and stay licensed. The crypto route is offshore by definition, which puts it squarely inside the category DGOJ spent 2025 fining to the tune of roughly €111 million and spent May 2026 demonstrating it will block on a precautionary basis, before a case is even decided. The player is not the target of that regime, but the player is the one whose funds are sitting on the site when the domain stops resolving. If you’re wondering whether a VPN changes any of this, it doesn’t meaningfully — see our VPN legal risk breakdown. For the full country-by-country picture, see our crypto gambling legality guide.