Online betting in Kenya: the complete legal guide, from account to payout

Is online betting legal in Kenya?

Yes, with one condition that decides everything else. Section 28(1) of the Gambling Control Act, 2025 says a person shall not offer any gambling activity or service unless it is licensed under the Act. Betting online is lawful when the site or app you use holds that licence, and every other rule on this page follows from it.

Section 2 of the Act defines online gambling as any gambling in which people take part by remote communication and on the internet. The short entry on what counts as online gambling under Kenyan law unpacks that definition and the words around it. The same section calls an online bookmaker someone who carries on betting by remote communications, including virtual games and virtual sports.

Section 67(1) then creates three online licences: an online bookmakers licence, an online lottery licence and an online casino licence. A football bet placed from a phone sits under the first of them. The longer answer, with the switch from the old Betting Control and Licensing Board to the new Authority, is in the explainer on whether online betting is legal in Kenya.

Who the offences are aimed at

The penalties for unlicensed gambling are written for the person offering it. Under section 98, operating without a valid licence carries a fine of up to KES 3,000,000, prison of up to three years, or both for a first offence, rising to KES 5,000,000 and five years for a repeat offence. Section 79(3) adds an offence for a foreign-based operator offering online gambling in Kenya without a licence: up to KES 2,000,000 or two years for a natural person, and up to KES 50,000,000 for a company.

The 2026 Conduct Regulations reach the businesses that keep an unlicensed site running. Regulation 102 of L.N. 112 calls any website, app or electronic system offering gambling without the required licence an illegal gambling platform. Hosting it, serving its domain or processing its payments is an offence, with a fine of up to KES 1,000,000, prison of up to six months, or both for an individual.

For you as a bettor the practical point is simpler. Payout deadlines, limit tools and complaint duties are written as duties of a licensee, so a site with no Kenyan licence sits outside them. A foreign-based operator licensed through section 79 must also use geo-blocking and identity checks so that persons resident in Kenya cannot reach its platforms, under regulation 7(1) of L.N. 113.

Which laws and which regulator apply?

The Gambling Control Act, 2025 was assented to on 7 August 2025, published in Kenya Gazette Supplement No. 141 on 12 August 2025 and commenced on 26 August 2025. Section 120 repealed the Betting, Lotteries and Gaming Act (Cap. 131), the law it replaced. Only its tax sections survive, for the reason given at the end of this section.

Section 6(1) creates the Gambling Regulatory Authority of Kenya, and section 6(3) makes it the legal successor of the Betting Control and Licensing Board. Section 10 gives it the job of regulating gambling, issuing licences and receiving and determining complaints from the public about games of chance. Under section 121 the old Board's rights, duties, assets and staff passed to the Authority on commencement.

The working detail sits in five sets of Regulations made on 29 June 2026, four under section 119 of the Act and the Appeals Tribunal Regulations under section 88(12), and gazetted on 30 June 2026. A sixth instrument, the national lottery regulations, is catalogued as L.N. 116 of 2026. The table lists the five, and the other statutes a bettor meets, with the part of each that matters most when you place a bet.

Two transition rules explain why older licences still turn up in records. Section 122 of the Act kept licences issued under the repealed Act valid for their term. Regulation 30 of L.N. 111 then limited them to sixty days from publication of the Regulations on 30 June 2026, and holders had to apply afresh within that window.

Tax sits outside the Gambling Control Act. Section 121(6)(a) keeps the betting, gaming, lottery and prize competition tax sections of the repealed Act in force until new provisions are enacted. Excise duty and withholding tax come from the Excise Duty Act and the Income Tax Act as the Finance Acts have amended them.

How do licences work, and how do you check one?

Section 28(2) lists the activities the Authority licenses, and bookmaking, online gambling and the provision of gambling software or platforms are all on it. Section 29 adds two conditions for any licensee. It must be a body corporate with at least 30% of its shares held by Kenyan citizens, and it must keep an account with a financial institution registered in Kenya into which all gambling money is paid.

Section 31(3) sets a default licence term of 36 months unless regulations prescribe another period. The Fourth Schedule to L.N. 111 does prescribe one: an online gambling licence runs for one year, new or renewed, while a casino licence or a land-based bookmaking licence runs for three years. Regulation 24 of L.N. 111 asks for a renewal application at least 90 days before expiry.

The Third Schedule to L.N. 111 sets minimum gambling capital of KES 100,000,000 for an online bookmaker or a casino. The Third Schedule to the Act fixes the security for an online gambling licence, an insurance bond or bank guarantee, at KES 100,000,000. An online licence application on Form 8 must also name the platform, the domain name and the games provider, under regulation 11 of L.N. 111.

Checking a licence yourself

Section 36(3) requires the holder of an online gambling licence to display that licence on its online platform. Note the licence number and the company name it shows. Those two details are what you compare with the regulator's own list.

The Authority's website publishes a table headed "Licensed Gaming Companies for the Trading Period 2025/26", last modified on 19 March 2026 according to the site's own content API. It holds 187 operator rows, numbered 1 to 188 with number 119 skipped. The STATUS column reads Renewal on 170 rows and New on 17.

The columns as published are No., Operators Name, Trading Name, BK, PG, PL, STATUS and DOMAINS. The page does not expand the abbreviations; the column headed BK carries bookmaker licence numbers, and the Act's licence categories are bookmaker, public gaming and public lottery. Match the domain in your browser bar against the DOMAINS entry character by character.

The online list shows no expiry dates. Section 39 of the Act separately requires the Authority to keep a register of licences that records each licensee, its activity, the expiry date and any suspension or revocation. That register is open to the public at reasonable times on payment of a prescribed fee.

Apps and app stores

Google Play allows real-money gambling apps in Kenya for online casino games, sports betting, horse racing and lotteries. The developer must hold a valid gambling licence for each country where the app is offered. Apple's App Review Guideline 5.3.4 requires real-money gaming and lottery apps to hold the necessary licences where they are used and to be geo-restricted to those places.

A betting app installed from a web link rather than a store skips those checks. On Android 8.0 and later, the phone blocks such installs until you switch on "Install unknown apps" for that source, and Google Play Protect, which is on by default, may offer to send the app to Google for analysis.

What does opening an account involve?

Section 72(1) lets you take part in a licensee's games only if you are registered and hold an account with that licensee. There is no guest betting. Regulation 83 of L.N. 112 also prohibits anonymous gambling, and the use of virtual assets such as crypto for gambling or withdrawals, unless the Authority approves it.

Gambling is for adults of the age of majority, which in Kenya is eighteen. Section 72(3) requires proof of age of majority before any player is registered, and the 2026 Conduct of Gambling Operations Regulations (r.92) bar persons under eighteen from gambling and from gambling promotion. Section 70(6) repeats the age check before a prize is paid.

Regulation 82 of L.N. 112 names three checks that must happen before an account is activated and before the first deposit: an identity check, location verification and age assurance. Regulation 41(c) requires online systems to use geo-location technology that blocks access from prohibited locations, which is why a licensed site asks for your location. Section 109 makes it an offence to bet with a child, take bets through a child or send betting material to one, with a fine of up to KES 1,000,000, a year in prison, or both.

The Regulations name the checks but not a list of documents. The practical side, including what an operator may ask for and what to do when verification stalls, is in the guide to opening a betting account in Kenya.

Your personal data

Those checks put personal data in the operator's hands. Section 26 of the Data Protection Act, 2019 gives you the right to be told how it will be used, to see it, to object to processing and to have false or misleading data corrected or deleted. Section 25(h) bars transfers outside Kenya without proof of adequate safeguards or your consent.

The Office of the Data Protection Commissioner publishes a searchable register of data handlers, so you can see whether a betting company is registered as a data controller. A complaint to the Data Commissioner under section 56 may be made orally or in writing, and it must be investigated and concluded within 90 days.

What are the rules on stakes, deposits and withdrawals?

Section 71(1) sets the floor: a player in an online gambling activity shall not bet less than twenty shillings in a competition. Section 71(2) says the KES 20 includes a savings component the Authority is to set. An operator that accepts a smaller online bet commits an offence under section 71(3), with a fine of not less than KES 3,000,000, prison of up to five years, or both.

There is no ceiling. No maximum stake, deposit or loss is set in the Act or the Regulations as gazetted. Instead, regulation 84 of L.N. 112 makes operators give you the tools to set your own limits, covered in the last section of this page.

Section 73(3) lets a licensee accept a wager only when your account holds enough funds to cover it and you have approved those funds for that wager. You cannot bet on account and settle later.

Odds, rules and game fairness

Regulation 23 of L.N. 112 requires a licensee to display the odds, rules and terms of each bet clearly, and it may not alter a bet's terms once the bet is accepted. Keep a screenshot of the bet slip if a dispute looks likely, since the terms at acceptance are the ones that bind.

For games of chance, such as casino titles, regulation 45 requires the random number generator to be certified by the Authority or its approved agent. The theoretical return to player of each game must be disclosed to the Authority.

No credit and no inducements

Section 72(7) bars a licensee from helping you bet by advancing credit, allowing credit cards or meeting your third-party costs, although free bets and bonus bets in the ordinary course of business stay lawful. Section 74 goes further. A licensee may not provide credit to a player or make an offer designed to get people to gamble or gamble more, on pain of a fine of up to KES 5,000,000, five years in prison, or both.

Paying in and taking money out

Section 73(4) allows deposits by debit card, electronic funds transfer, mobile money, cash or other approved methods. For M-PESA, Safaricom's Paybill service collects payments for businesses: through the app, the SIM toolkit or USSD *334# you enter a business number, an account number, the amount and your PIN. The business number should belong to the licensed company you checked on the regulator's list, and how an M-Pesa deposit to a betting account works covers the screens, the charges and the receipt.

Wallet limits come from the mobile money provider, not from the Gambling Control Act. Safaricom's tariff page caps a single M-PESA transaction at KES 250,000 and the daily total and account balance at KES 500,000 each, and Airtel Money publishes the same three figures. Safaricom PLC and Airtel Money Kenya Limited both appear in the Central Bank of Kenya's directory of authorised payment service providers.

For a payment sent to the wrong number, Safaricom's tariff page describes a self-reversal route: forward the transaction confirmation SMS to 456. Withdrawals in virtual assets are barred by regulation 83 unless the Authority approves them.

Your balance is protected on the operator's side too. Section 76(2) requires the money held for players to equal at least the total of their balances at all times. Any shortfall must be made good from the licensee's own money within thirty days of the end of the month in which it occurs.

Which taxes apply to a bet?

Two taxes touch your money directly: excise duty on money deposited for betting, and withholding tax on money paid out. A third, betting tax, falls on the operator's revenue rather than on your stake.

Excise duty comes from paragraph 4A of Part II of the First Schedule to the Excise Duty Act. Since 1 July 2025, when the Finance Act, 2025 took effect, the rate has been 5% of the amount deposited, replacing 15% of the amount wagered or staked. KRA's public notice on that Act shows the change and requires betting operators to remit the duty within twenty-four hours of the close of each day's transactions.

The Finance Act, 2026, assented to on 23 June 2026 and in operation from 1 July 2026 for these provisions, kept the 5% rate but changed the words. Section 36 of that Act makes the base the amount deposited for betting purposes and deletes the horse-racing exception. Its new definition of "amount deposited" covers money made available to a licensee for betting whether it comes from the player or the operator, and whether or not it sits in a wallet or is turned into credits.

The rate has moved often. KRA's notices record 20% of the stake from 7 November 2019 and 15% from 27 December 2024, and a 2025 High Court judgment records 7.5% under the Finance Act, 2021 and 12.5% under the Finance Act, 2023.

Withholding tax on what you take out

The Income Tax Act defines "withdrawals" as any money, cash equivalent or money's worth paid or disbursed to a player's account by a person licensed under the Gambling Control Act, 2025; the Finance Act, 2026 substituted that wording. Paragraph 5(i) of Head B of the Third Schedule taxes withdrawals at 5% for residents, and paragraph 3(i) applies 5% to non-residents. Under section 35 the payer deducts the tax, and section 35(5A) has the Commissioner pay it into the Sports, Arts and Social Development Fund.

"Winnings" is now the narrower word. Since the Finance Act, 2026 it means a pay-out from a lottery or prize competition by a licensee, taxed at 20% under paragraphs 5(r) and 3(y), while sports betting and casino pay-outs fall under withdrawals. KRA's undated FAQ page still describes a 20% tax on winnings in the older, wider sense, so read it with that history in mind.

Whether the 5% is a final tax is not spelled out. Section 76A of the Income Tax Act bars a second assessment only on income that has borne a final withholding tax. The Third Schedule items for withdrawals and winnings do not carry the words "final tax", so ask KRA directly if your own position turns on that point.

Illustrative example: you send KES 1,000 to a betting account. Excise at 5% of the amount deposited is KES 50, and the operator's terms show whether that comes off your balance or is borne by the operator. Later you withdraw KES 3,000, so withholding at 5% is KES 150 and KES 2,850 is paid to your wallet.

A single bet followed from deposit to withdrawal, with every deduction, is set out in how a bet is taxed from stake to payout.

When must winnings be paid?

Section 70(1) gives the operator two days to credit a monetary online prize to your betting account. A non-monetary prize must be delivered within seven days under section 70(2), or you must be told in writing where in Kenya to collect it. Section 70(5) ends claims for uncollected prizes six months after the winnings are declared.

Moving a prize from the betting account to your wallet or bank follows the Third Schedule to L.N. 112. It sorts online prizes into four tiers by size, each with its own checks and deadline.

Late payment costs the operator. Under regulation 101(1) of L.N. 112, a licensee that fails to pay winnings to a player within fourteen days is liable to a penalty of 5% of the total winnings, payable to the Authority.

Money left idle is covered as well. Section 77(1) requires a licensee to remit the balance to you when no transaction has been recorded on your account for three months. Under section 77(2), balances whose owners cannot be traced for five years are presumed abandoned and go to the Unclaimed Financial Assets Authority.

Which limits, exclusions and complaint routes protect you?

Regulation 84 of L.N. 112 obliges every operator to give you real-time tools. They include deposit limits set daily, weekly or monthly; loss, session and expenditure limits; reality-check pop-ups showing how long you have played; and self-exclusion of at least 24 hours linked to the national register. The law sets no figures for these limits, so the number is yours to choose.

Self-exclusion runs on two tracks. Section 115(1) of the Act lets a person who recognises that their gambling is harmful enter a voluntary self-exclusion agreement with a licensee, covering all gambling including online. Regulation 67(3) of L.N. 112 requires online platforms to offer a real-time self-exclusion mechanism.

The second track runs through the Authority. Under regulation 70 you apply on Form 1 with a copy of your national ID or passport, and the Authority acknowledges the application within seven days. The form offers six months, one year, two years or an indefinite period, and the period cannot be shortened before it ends.

Once you are registered, regulation 70(5) bars you from placing a bet, opening an account, receiving promotions or claiming winnings. Regulation 74(1) makes licensees deny you access, refund deposits taken in breach within seven days and cancel winnings so obtained.

Section 115(4)(c) of the Act requires removal from marketing lists within two days, and section 115(5) makes failure to act on a written request within seven days an offence. Every step is laid out in the step-by-step guide to self-exclusion from betting in Kenya.

If betting has stopped feeling like a choice, the regulator's website shows a toll-free line, 0800-723-770. Its older self-exclusion page still speaks of periods of six months to five years; that wording predates the Regulations, and Form 1 sets the current options.

What a lawful betting advert looks like

Section 87(1) bans gambling advertising on any medium without the Authority's approval, and section 87(2)(e) keeps it off TV and radio between 6am and 10pm except during a live sporting event. Regulation 8 of L.N. 114 requires each approved advert to show the licence number, the licensee's name and customer-care number, and a helpline. It must also carry the words "gambling is addictive" or "play responsibly", and the words "authorized and regulated by the Gambling Regulatory Authority".

Regulation 9 bans calls to action, links between gambling and celebrities or social success, testimonials, former winners, jingles and any picture of gambling as investment or income. An advert with no licence number, or one built around a past winner, falls short of those rules.

How a complaint moves up

Start with the operator. Section 68(8) requires every online operator to keep a customer care centre within Kenya, and regulation 9(2)(d) of L.N. 112 makes that centre report matters raised by the public to the Authority within two days.

If the operator has not resolved your complaint after 72 hours, or you ask in writing for escalation, regulation 9(2)(e) sends the matter to the Authority. Its complaints page describes a written form delivered to the offices at ACK Garden Annex, 7th floor, Nairobi. Write down dates, bet references and payment codes before you file.

Above the Authority sits the Gambling Appeals Tribunal created by section 88, and section 80 lets a party to an online gambling dispute appeal to it within fourteen days of the dispute. Regulation 18 of L.N. 115, however, gives the Tribunal no jurisdiction until the Authority's own mechanisms have heard and determined the matter, so watch both clocks. A Tribunal decision can be appealed to the High Court within fourteen days under section 90.

What this guide does not cover

This page sets out the law as published and is not legal or tax advice on your own case. It names no operator as a choice, and it touches casino game rules, advertising enforcement and the national lottery only in passing. Where a primary source gives no figure, the rule appears here without one.