A licence is not a certificate of good behaviour
Bet365 held valid Swedish licences during the entire period that Sweden’s regulator found it had broken duty of care and deposit limit rules, and it still holds them today, after losing its appeal against fines totalling more than €3.5m. That single fact is the most useful thing a player can learn about casino licensing compliance: the licence badge in a site footer tells you which rules apply and who enforces them, not whether the operator was following those rules last Tuesday.
Most guides to picking a casino stop at “check it’s licensed”. That advice is right as a minimum and wrong as a conclusion. The Bet365 case is worth reading closely precisely because it involves one of the largest, most established operators in the business, in one of Europe’s stricter regulated markets. If compliance gaps can sit inside that, “it has a licence” cannot be the end of your due diligence.
What Sweden actually found
According to reporting by Focus Gaming News, Bet365 lost its appeal against sanctions imposed by Sweden’s gambling regulator, Spelinspektionen, with the courts upholding findings that the operator committed serious and systematic breaches of duty of care rules and deposit limit requirements between 2019 and 2022. The penalty came to SEK40m (around €3.5m) plus a further SEK4m.
The specific failure is the instructive part. Bet365 allowed customers to select a “no limit” deposit option. Swedish law requires players to set a deposit cap, and regulators took the view that offering “no limit” as a choice did not satisfy a requirement to set a specific amount. A box that technically existed, but which let the player opt out of the protection the law was built around.
Bet365 kept its Swedish licences. Focus Gaming News reports that the operator avoided losing them after introducing stronger responsible gambling controls, including manual reviews of high-loss customers and enhanced monitoring of higher-risk players. So the outcome was a fine plus mandated improvement, not expulsion from the market. That is a normal regulatory outcome, and knowing it is normal helps you read these stories without either panicking or shrugging.
What casino licensing compliance means in practice
Casino licensing compliance means an operator continuously meets the standards attached to its licence, covering game fairness, segregation of player funds, anti-money-laundering checks and player safety measures. It is an ongoing obligation audited and enforced over time, not a one-off approval. A licence can be held while rules are being broken, which is exactly why regulators run inspections and issue penalties.
Think of it as a lease with conditions rather than a diploma. The operator agreed to specific duties when it was licensed: verify identities, offer and respect limits, monitor for signs of harm, report suspicious activity, advertise within set rules, submit games for testing. The regulator checks performance against those duties and can act when it finds gaps. A deeper explanation of what the approval process itself examines sits in our guide to what an online casino licence actually means for player safety.
Why player protection rules exist at all
Player protection rules exist because gambling products are designed to be played repeatedly, and the mathematics guarantees the operator profits over time. Every game carries a house edge, so sustained play produces losses on average. The regulatory question is not whether players lose but whether they lose more than they intended, or more than they can absorb, without anything in the system noticing.
Sweden’s deposit limit requirement is a clean example. A mandatory cap does not make gambling safer in the abstract; it forces a decision at a calm moment, before the session, rather than in the middle of one. Offering “no limit” removes that moment. The rule survives only if the operator cannot hand the player an easy way out of it.
The measures regulators usually require
- Deposit, loss and session limits that players can set themselves, with increases delayed and decreases applied immediately
- Self-exclusion and cool-off tools, often linked to a national register that blocks the player across all licensed operators
- KYC checks confirming identity, age and address before withdrawals, and often before significant play
- AML compliance, including source-of-funds questions and reporting of unusual transactions
- Affordability or duty-of-care monitoring, where heavy losses or unusual patterns trigger a human review rather than an automated upsell
- Reality checks, visible balance and time reminders during play
These look like paperwork from the outside. From the inside they are the only parts of an operator’s system whose purpose is to slow a customer down.
Fines are one rung on a ladder, not the whole of enforcement
A financial penalty is the middle of a regulator’s range, not its ceiling. Depending on jurisdiction, a regulator can issue warnings, impose conditions on a licence, require independent audits, suspend operations, or revoke the licence entirely. Bet365’s Swedish outcome, a substantial fine plus remediation while keeping the licence, reflects a regulator deciding the breach was serious but fixable.
Enforcement strength varies enormously by licensing jurisdiction, and this is where players most often misread the signal. Regulators such as the UK Gambling Commission and the Malta Gaming Authority publish enforcement actions and maintain searchable registers. Offshore regimes, with a Curacao licence as the usual reference point, have historically been lighter on public enforcement and disclosure. Comparing one operator’s clean record under a quiet regulator with another’s fine under an active one tells you almost nothing about which treats customers better.
Here is the uncomfortable corollary. A long enforcement history can mean an operator behaves badly, or it can mean it operates in markets where regulators look hard and publish what they find. No enforcement history can mean a well-run business, or a regulator that does not inspect. You cannot separate those two readings from the fine alone. What you can do is check whether the regulator in question publishes anything at all.
How to check a site’s licence before you sign up
Verification takes about five minutes and is the single highest-value thing a new player can do.
- Find the licence number and named licensing authority in the site footer. A brand name with no licence number is not a licensed operator.
- Go to the regulator’s own website directly, by typing the address or searching for it, rather than clicking the operator’s link.
- Search the public register for the licence number and confirm the legal entity name matches the one in the site’s terms and conditions.
- Check the status field. Registers show active, suspended, surrendered and revoked licences, and a surrendered licence still displays a real number.
- Look for an enforcement or public statements section on the regulator’s site and search the operator’s name there.
- Open an account page or the responsible gambling section and confirm that deposit limits, self-exclusion and time-out tools actually work before you deposit anything meaningful.
The signals worth weighing, in both directions:
| Signs of a properly regulated operator | Red flags worth walking away from |
|---|---|
| Licence number verifiable on the regulator’s own register | Licence claimed in text or image only, with no number |
| Working deposit, loss and session limits in the account area | Limit tools missing, buried, or offering an unlimited option |
| KYC requested before withdrawal, explained in the terms | No identity verification at any stage |
| Clear bonus terms with stated wagering requirements and max cashout | Vague bonus terms or rules that change after you claim |
| Named legal entity, address and complaints or ADR route | No company details, support only via chat widget or Telegram |
| Games from testable, identifiable providers | Unbranded games with no provider attribution or RTP disclosure |
Operators running entirely outside any licensing regime show a different and sharper set of warning signs, which we cover separately in our breakdown of how to spot illegal casinos and the licensing red flags that expose them.
Where this leaves your own responsible gambling setup
Choosing a licensed operator in a jurisdiction with active enforcement is a responsible gambling decision, because it determines whether limits, self-exclusion and a complaints route exist at all. It does not determine whether you use them. Sweden had to compel deposit caps precisely because operators and players, left to themselves, frequently skip that step.
So do what the regulation was trying to force. Set a deposit limit on the day you open the account, before any session gives you a reason not to. Decide in advance what a month of play is worth to you and let the cap enforce it, since a cap you set while calm is the only one that survives a bad run. If gambling has stopped feeling like entertainment, the self-exclusion tool exists for that, and national helplines are free and confidential.
The Bet365 case does not tell you whether Bet365 is a good place to play. It tells you that compliance is a moving record rather than a fixed badge, and that the only version you can personally verify is the one on the regulator’s register, on the day you check it.