US Online Casino Legal States 2026: Your Step-by-Step Launch Playbook

Which US states have legal online casinos in 2026?

As of 2026, seven US states have fully operational, regulated real-money online casino markets: New Jersey, Pennsylvania, Michigan, Delaware, West Virginia, Connecticut, and Rhode Island. Several others — including New York, Illinois, and Maryland — have active legislative proposals, but none have crossed the finish line. If a state isn't on this list, operating there is a federal Wire Act and state-law violation.

The map has barely changed since Rhode Island launched in March 2024, but the policy conversation is moving faster than at any point since New Jersey broke the seal in 2013. New York has introduced iGaming bills in consecutive sessions, and Illinois saw its first serious committee hearing in 2025. Neither is live yet, so don't let a lobbyist's optimism drive your capital allocation. Build your business plan around states that are already open.

Delaware was first to legalize in 2013 but remains a tiny market — the state lottery runs the platform and operators enter as skins, which limits upside significantly. West Virginia legalized in 2019 and Connecticut in 2021; both are smaller markets but easier to enter than New Jersey or Pennsylvania because competition is less entrenched. Rhode Island is the newest and smallest, operating through a single lottery-controlled structure similar to Delaware.

Michigan is the standout growth story. The Michigan Gaming Control Board (MGCB) issued its first licenses in January 2021, and the market hit roughly $2.1 billion in gross gaming revenue by 2024 — faster growth than any comparable state launch. If you're a first-time operator with a realistic budget, Michigan and Connecticut deserve serious attention before you default to chasing New Jersey's crowded market.

What is the land-based tethering requirement and how do you satisfy it?

Every US state that has legalized online casinos requires applicants to be affiliated with — or sponsored by — an existing brick-and-mortar licensed casino. This is the land-based tethering requirement, and it is the single most misunderstood barrier for first-time operators. You cannot apply for a standalone online license; you need a host casino partner before regulators will even open your application file.

Tethering exists because US gaming law evolved from land-based regulation. Legislators were only willing to extend licenses to entities already vetted by state gaming commissions. In practice, this means your route to market is almost always through a management agreement or a branded-skin deal with an existing licensee — a tribal casino, a commercial casino group, or a lottery-controlled entity depending on the state.

In New Jersey, an online gaming permit is issued to the casino licensee (the Atlantic City property), and operators run as 'Internet gaming affiliates' or platform partners under that permit. In Pennsylvania, the Pennsylvania Gaming Control Board (PGCB) issues iGaming certificates directly to licensed slot machine or table game operators — so again, you need a PA-licensed casino as your anchor. Michigan works similarly through the MGCB's internet gaming license, which requires a partnership with a Detroit commercial casino or a tribal gaming operation under a compact.

Negotiating a host casino deal is where first-time operators consistently underestimate complexity. Expect the host to want a revenue share (typically 5–15% of net gaming revenue), brand approval rights, and sometimes a minimum guaranteed payment. Some operators structure these as joint ventures; others take a management-company model. Either way, get an experienced gaming attorney — not a generalist — to review the agreement. The terms you accept here will shape your P&L for the life of the license.

Connecticut is a special case: the two tribal operators (Mohegan and Mashantucket Pequot) hold the online licenses under their federal tribal-state compact. Third-party operators can only enter as technology or platform partners to those tribes, which significantly limits the commercial model available to you. If you're targeting Connecticut, your pitch is a B2B platform deal, not an operator license.

How do you get a New Jersey online casino license — and what does it actually cost?

A New Jersey internet gaming permit flows through the Division of Gaming Enforcement (DGE) and is tied to an Atlantic City casino licensee. Expect the full process — finding a host, completing the multi-jurisdictional personal disclosure forms, and clearing the DGE investigation — to take 12–18 months. Direct costs to the regulator are modest; the real spend is on legal, compliance infrastructure, and the host casino deal.

The DGE application process starts with a Transactional Waiver or a full Internet Gaming Permit application, depending on your role (operator, platform provider, or gaming service industry enterprise). For a new operator entering as an affiliate of an AC licensee, you'll file the Multi-Jurisdictional Personal History Disclosure Form (PHDF) for all principals with 10%+ ownership, plus a detailed business entity disclosure. The DGE investigation is thorough — source of funds, criminal background, prior regulatory history across all jurisdictions. Budget $150,000–$400,000 in legal fees for a clean application with no complications; more if any principals have complex ownership structures or prior regulatory issues.

The permit fee itself is relatively small — New Jersey charges an initial internet gaming permit fee in the range of $400,000 for a new permit (figures are set by statute and subject to change; verify current amounts with the DGE directly). Annual renewal fees are lower. The bigger ongoing cost is the 15% gross revenue tax on online casino GGR, which is among the lowest in the US and one reason New Jersey remains attractive despite market maturity.

New Jersey has roughly 30 active online casino brands as of 2026, most backed by major groups like MGM (BetMGM), Caesars, DraftKings, and Golden Nugget. Breaking through as an independent brand is genuinely difficult. Your differentiation strategy — whether that's a specific game vertical, a loyalty program structure, or a niche player segment — needs to be locked in before you apply, not after. The DGE will ask about your business plan and your path to player acquisition, and 'we'll figure it out' is not a satisfactory answer.

Why does Pennsylvania's 54% slots tax change your entire business model?

Pennsylvania imposes a 54% gross revenue tax on online slot revenue — the highest rate of any legal US iGaming state and roughly three to four times what offshore operators pay under Curaçao or MGA frameworks. This single number reshapes your entire game mix strategy, your bonus budgeting, and your profitability timeline. Operators who model PA economics using offshore benchmarks consistently blow their projections.

To be precise: Pennsylvania's iGaming tax structure is tiered by product. Online slots carry the 54% rate. Online table games (blackjack, roulette, baccarat) are taxed at 16%. Online poker sits at 16%. This asymmetry creates a strong commercial incentive to push table games and poker in your marketing mix — but the reality is that slots drive 75–85% of online casino GGR in every market, so you can't simply engineer your way around the slot tax by promoting tables harder.

The PGCB also charges an iGaming certificate fee — $10 million for the initial certificate, which is non-refundable and valid for five years. That upfront capital requirement alone filters out underfunded applicants. Add legal fees ($200,000–$500,000 range for a complex application), technology build-out, and your host casino deal, and you're looking at a total market-entry cost of $12–18 million before you take a single bet. These are not figures I'm inventing to scare you; they're the numbers operators who've been through the PGCB process report consistently.

Despite the tax burden, Pennsylvania generated approximately $2.2 billion in online casino GGR in 2024, making it the second-largest US market. Volume matters. If you can build sufficient scale, the 54% rate is survivable — but your bonus strategy has to be tighter than in any other jurisdiction, your player lifetime value modeling has to be precise, and your game aggregation costs need to be negotiated hard. Operators running SoftSwiss or EveryMatrix platforms in PA have told me that platform fees and aggregator rev-share agreements that work fine offshore become margin killers at 54% tax. Renegotiate everything before you go live.

How does Michigan iGaming licensing work and why is it worth prioritizing?

Michigan's internet gaming license is issued by the Michigan Gaming Control Board and requires partnership with one of three Detroit commercial casinos or a Michigan tribal gaming operation. The application process is rigorous but faster than Pennsylvania's, and the 20–28% tiered tax rate is far more operator-friendly. For a first-time US operator, Michigan offers the best balance of market size, competitive dynamics, and regulatory clarity.

The MGCB's internet gaming framework, established under the Lawful Internet Gaming Act (2019), has processed dozens of operator and platform supplier licenses since January 2021. The license categories you need to understand are: Internet Gaming Operator License (for the casino partner), Internet Gaming Platform License (for the technology provider), and Internet Gaming Supplier License (for game studios and ancillary suppliers). As a new entrant, you'll typically operate under the operator license of your Detroit or tribal partner while potentially holding a platform or supplier license yourself depending on your tech stack.

Michigan's tax rate scales with GGR: 20% on the first $4 million, rising in tiers to 28% above $12 million annually. This tiered structure actually helps smaller operators in the early months — you're not paying the top rate until you've built volume. Compare that to Pennsylvania's flat 54% on slots from day one, and Michigan's economics look significantly more attractive for a new brand still building its player base.

The competitive landscape in Michigan is real but not yet as consolidated as New Jersey. BetMGM, FanDuel, DraftKings, and Caesars Palace Online are the dominant brands, but there are 15–20 active operators with meaningful market share. A well-positioned brand with a distinct loyalty program or a specific game library focus (live dealer, for instance) can carve out a sustainable niche. The MGCB is also regarded as one of the more communicative and process-oriented regulators in the US — they publish clear timelines, respond to pre-application inquiries, and have a reputation for consistency that operators in other states envy.

What is the step-by-step process to get live in a US legal state?

Getting live in a legal US state follows a predictable sequence, but the order of operations matters enormously. Most first-time operators try to build the product before securing the host casino deal — that's backwards. Lock in your land-based partner first, then build your regulatory application, then your technology stack. Reversing this sequence wastes capital and time.

Step 1 — Choose your target state and model the economics. Before any other action, run a full P&L model for your target state using the actual tax rate, realistic GGR per active player benchmarks, and your expected player acquisition cost. For Michigan, a reasonable benchmark for cost per depositing player runs $200–$400 in a competitive digital acquisition environment. For New Jersey, expect higher. If the model doesn't work at conservative assumptions, no amount of operational excellence fixes it.

Step 2 — Identify and negotiate a host casino deal. Engage a gaming attorney with state-specific relationships to introduce you to potential host casino partners. In Michigan, that means one of the three Detroit commercial licensees (MGM Grand Detroit, MotorCity Casino, or Hollywood Casino at Greektown) or a tribal partner. In New Jersey, it's an Atlantic City property. Negotiate the revenue share, brand rights, and exclusivity terms before you spend a dollar on technology. This deal is the foundation of everything.

Step 3 — File your regulatory application. Once your host deal is in place, engage a compliance consultant or gaming attorney to prepare your application. Gather all personal history disclosures for principals, source-of-funds documentation, business plan, and technical system descriptions. Submit and budget for a 6–18 month review period depending on the state and the complexity of your ownership structure.

Step 4 — Build or license your technology stack. While your application is under review, procure your platform. In the US, platform options are more constrained than offshore — you need a vendor that holds or can obtain a gaming system supplier license in your target state. SG Digital (now Everi), IGT PlaySpot, and GAN are established US-licensed platform providers. EveryMatrix and SoftSwiss have been pursuing US certifications but verify their current license status in your specific state before signing. Integrate your game content through a certified aggregator, and ensure every game title is individually approved by the state regulator — this is not a bulk-approval process.

Step 5 — Complete technical certification and go live. Your platform and all game titles must pass independent technical testing by a state-approved lab (GLI, BMM, or Gaming Laboratories International are the primary options). Budget 60–120 days for technical certification after your platform build is complete. Only after certification approval can you launch to real-money players.

What technology stack do you need for a US-licensed online casino?

US-regulated online casinos require a technology stack that is certified by a state-approved independent testing laboratory — not just CE-marked or MGA-compliant. Every component, from the RNG to the bonus engine to the geolocation module, must be independently tested and approved in each state you operate. This certification layer adds 60–120 days and $50,000–$150,000 in testing costs that offshore operators never encounter.

Geolocation is non-negotiable and must be active on every session. US state licenses require that players are physically located within state borders when they play — not just registered there. The two dominant geolocation providers for US iGaming are GeoComply and XPoint. GeoComply holds the dominant market position and is accepted by every state regulator; their technology uses a combination of IP, WiFi triangulation, and device-level signals to verify location with the precision regulators require. Budget for GeoComply integration as a line item — it's not cheap, but there's no credible alternative for US compliance.

For game content, you cannot simply deploy your offshore game library. Each title must be submitted to the state's approved testing lab and receive individual approval. This means your go-live game count will be significantly lower than your offshore catalog, at least initially. Prioritize the 30–50 highest-converting titles for initial certification rather than trying to certify 500 games before launch. Studios with established US certification pipelines — IGT, Scientific Games (Everi), Aristocrat, NetEnt (which holds NJ and MI approvals), and Evolution Gaming for live dealer — are your fastest path to a playable library at launch.

Responsible gambling tools are mandatory and more prescriptive than offshore requirements. New Jersey's DGE and the PGCB both require specific self-exclusion integration (NJ's self-exclusion list has over 14,000 registered users), deposit limit functionality, session time limits, and reality check prompts. These features must be tested and approved, not just present in your back office. Build them into your platform spec from day one, not as an afterthought before your compliance review.

How do payments work for US online casinos and what actually converts?

US iGaming payments are more restrictive than any offshore market, primarily because UIGEA (2006) created compliance friction for banks and card networks. Visa and Mastercard approval rates for online gambling transactions in the US run 40–60% — roughly half what you'd see in a well-configured EU market. Building a diversified payment stack with ACH, PayPal, Play+ prepaid, and online banking options is essential from day one.

Credit card acceptance varies by state and by issuing bank, not just by your payment processor. In New Jersey and Michigan, Visa and Mastercard deposits are technically permitted but approval rates are inconsistent because individual banks can still block gambling-coded transactions. Some operators report card approval rates as low as 35% in certain player segments. This is not a processor problem you can solve by switching acquirers — it's a bank-level decision that you have to work around with alternative methods.

ACH (bank transfer) is the backbone of US iGaming deposits. It's lower friction than cards for many players, processes at higher approval rates, and has no interchange cost. The downside is settlement timing — standard ACH takes 1–3 business days, which creates withdrawal delay friction that affects player experience. Same-day ACH and real-time payment rails (RTP via The Clearing House) are increasingly available and worth building into your payment roadmap. PayPal is available in New Jersey, Pennsylvania, and Michigan and converts extremely well — players trust it, and the approval rate is near 100% for verified PayPal accounts. Getting PayPal integration approved requires a direct commercial agreement with PayPal's gaming vertical team; it's not a standard merchant account.

Play+ (Sightline Payments) is the dominant prepaid card solution in US iGaming and is accepted by most state regulators as a compliant deposit and withdrawal method. It solves the card decline problem for players who want to use a card-like experience. VIP Preferred (ACH via Everi) is another widely-used option. Cryptocurrency is not an accepted payment method in any licensed US state iGaming market — don't let anyone tell you otherwise. Build your payment stack around ACH, PayPal, Play+, and cards, in that priority order.

What US states are likely to legalize online casinos next, and should you bet on them?

New York, Illinois, and Maryland are the most-discussed potential next movers as of 2026, but none have passed legislation. New York is the most consequential market by population, and its sports betting success has created real legislative momentum. However, 'likely to pass soon' has been said about New York iGaming for three consecutive years. Don't build your business plan around a market that isn't open yet.

New York's iGaming bill has gained traction in the state legislature, backed by a fiscal note projecting $1+ billion in annual tax revenue. The opposition is predictable: land-based casino operators worried about cannibalization, tribal gaming interests protecting their exclusivity compacts, and social conservatives. The same coalition killed the bill in 2023 and 2024. In 2025, the bill advanced further than it ever had — but still didn't cross the finish line. If New York legalizes in 2026 or 2027, it will be the largest single iGaming market launch in US history, larger than New Jersey and Michigan combined. The competitive dynamics will be brutal and the license costs will be high.

Illinois is interesting because it already has a mature sports betting market and a large commercial casino footprint, which means the tethering infrastructure is in place. The tax rate debate is the sticking point — Illinois legislators have floated rates as high as 40% for online casino slots, which would be a significant deterrent for operators. Maryland has a smaller market but a more straightforward regulatory path given its existing commercial casino structure.

My honest advice: if you're a first-time operator, don't wait for New York. The operators who will dominate that market when it opens are already building their brands and player databases in Michigan, New Jersey, and Pennsylvania today. By the time New York launches, they'll have the player acquisition infrastructure, the affiliate relationships, and the regulatory credibility to scale quickly. You want to be one of those operators, not the one scrambling to enter a new market from scratch against entrenched competition.

What are the most common mistakes first-time operators make entering the US iGaming market?

The mistakes that kill US iGaming launches aren't usually technical — they're strategic and financial. Operators consistently underestimate the tax burden, overestimate how quickly they can secure a host casino deal, and underestimate the time and cost of getting individual game titles certified. Every one of these errors is avoidable with proper due diligence before you commit capital.

The most expensive mistake is treating US market entry like an offshore launch with extra paperwork. It isn't. The regulatory depth, the technical certification requirements, the payment stack complexity, and the tax economics are categorically different. Operators who've launched successfully in Curaçao or Malta and assume those skills transfer directly to Pennsylvania are consistently surprised by the scope of what they don't know. Hire US-specific gaming counsel, not a generalist who 'also does gaming.' The difference in outcome is measurable.

Underestimating the host casino negotiation is the second major failure mode. Some operators spend six months building their technology platform before they have a host deal, then discover that the only available host in their target state wants 20% of NGR plus brand approval rights that effectively make them a white-label operator rather than an independent brand. The host casino deal defines your commercial model — negotiate it first, not last.

Game certification timelines are consistently underestimated. Operators plan for 30-day certification and get 90–120 days. This pushes launch dates, burns runway, and creates pressure to launch with a thin game library. The fix is simple: start the certification process earlier than you think you need to, and submit your highest-priority titles to GLI or BMM before your platform build is complete. Parallel-track these workstreams rather than sequencing them.

Finally, responsible gambling compliance is not a checkbox — it's an ongoing operational commitment. New Jersey's DGE and the PGCB conduct regular compliance reviews and have issued fines and license suspensions for failures in self-exclusion enforcement, advertising to excluded players, and inadequate problem gambling disclosures. Build a compliance function before you launch, not after your first audit finding.