Fixed-odds Betting Regulation in Brazil Under Lei 14.790/2023: What Operators, Platforms and Payment Firms Must Do

Brazil’s regulation of fixed-odds betting (“apostas de quota fixa”) has reshaped the country’s gaming landscape. The framework created by Lei 14.790/2023 and implemented by the Ministry of Finance’s Secretaria de Prêmios e Apostas (SPA/MF) governs the operation, offer, intermediation and advertising of fixed-odds betting throughout Brazil. Operators, platforms, app-store providers, advertisers and payment institutions face detailed and evolving compliance obligations, including licensing, technical certification, player-protection duties and advertising rules. This practitioner guide explains the scope, licensing regime, refund and payment mechanics, platform and payment obligations, and the strategic planning required for both domestic and international operators serving Brazilian users.

Executive summary: the framework and immediate actions for operators

Lei 14.790/2023 established the legal basis for the regulated fixed-odds betting market in Brazil, replacing the earlier provisional-measure framework (Lei 13.756/2018 and MP 846/2018) and setting out licensing, taxation, player-protection and advertising requirements. The regime is administered federally by the SPA/MF, with additional supervisory roles for the Banco Central do Brasil (in respect of payment flows) and consumer-protection authorities. The headline features are as follows:

• Federal authorisation required. Operating, offering or advertising fixed-odds betting to users in Brazil requires a federal authorisation granted by the SPA/MF; unauthorised operation is prohibited.
• Licence fee. A one-off grant fee is payable to obtain a federal authorisation, at the amount set by the applicable legislation and regulation.
• Corporate presence. Applicants must be incorporated in Brazil, with Brazilian-resident participation in their ownership structure as required by the regulations.
• Technical and player-protection duties. Operators must meet technical-certification, responsible-gaming, anti-money-laundering and player-fund-segregation requirements.
• Payment restrictions. Rules govern permitted funding methods and prohibit certain instruments (for example, credit cards and certain other channels) for placing bets.
• Advertising rules. Advertising and marketing of betting is permitted only within the limits set by regulation, including responsible-gaming messaging and restrictions on targeting minors.

The priority for any affected business is to confirm its authorisation status, align its technical, financial and compliance functions with current SPA/MF regulations, and maintain clean records to evidence compliance.

Scope: what the law covers and who it reaches

The regulatory framework is deliberately broad. It captures licensed operators and, through advertising and intermediation rules, elements of the wider ecosystem that enables, distributes or promotes fixed-odds betting to Brazilian users.

Definitions: fixed-odds betting, intermediation and advertising

The law targets “apostas de quota fixa”, fixed-odds betting, in physical and virtual (online) form, defined as a betting system in which the bettor knows the potential return at the time of placing the bet. Regulated conduct categories include the direct operation of betting; intermediação (intermediation), meaning the facilitation of bets between a player and an operator; and advertising or promotion of betting services. This wide framing means that entities such as payment providers, affiliate marketers, content publishers and technical intermediaries can be affected where their activity supports betting offered to Brazilian users, and unauthorised operation exposes them to enforcement.

Territorial reach for foreign operators

The framework applies to fixed-odds betting offered to users located in Brazil, regardless of where the operator is incorporated or where its servers are located. A foreign operator that wishes to serve Brazilian players lawfully must obtain a federal authorisation and comply with the corporate-presence and other requirements. Operators serving Brazilian users without authorisation are exposed to enforcement through the levers Brazil controls: site and app blocking, disruption of payment flows, and administrative sanctions. In practical terms, offshore incorporation does not create a lawful route to the Brazilian market absent authorisation.

Licensing and authorisation under Lei 14.790/2023

The single most important structural feature of the regime is federal authorisation. Operating without it is unlawful and exposes an operator and connected parties to sanctions.

Obtaining a federal authorisation

Authorisations are granted by the SPA/MF following an application process that assesses the applicant’s corporate structure, financial capacity, technical arrangements and integrity. Key features include:

• Corporate presence. The applicant must be a company incorporated under Brazilian law, with a registered office and administration in Brazil, and must include Brazilian-resident participation in its share capital as required by the regulations.
• Grant fee. A one-off authorisation fee is payable, in the amount established by the legislation and applicable SPA/MF regulation, and authorisations are granted for the term set by law.
• Brand limits. Each authorisation covers a defined number of commercial brands, as set by the regulation.
• Technical certification. Betting systems must be certified by accredited laboratories against the technical standards published by the SPA/MF.

Ongoing obligations of authorised operators

Authorised operators must comply with continuing obligations, including responsible-gaming measures, anti-money-laundering and counter-terrorist-financing controls, player-identity verification (KYC), segregation and safeguarding of player funds, reporting to the SPA/MF, and payment of the applicable taxes and contributions on gross gaming revenue as set by law. Operators should treat compliance as a continuous programme rather than a one-off licensing exercise, given the frequency of regulatory updates.

Player funds, refunds and payment mechanics

Player-fund protection and orderly handling of balances are central to the regime. Operators are responsible for safeguarding player funds, and payment execution runs through the banking and payment system.

Operator obligations for player funds

Operators must maintain accurate records of player balances and safeguard player funds in accordance with SPA/MF requirements. Where balances must be returned to players, for example on account closure, dispute resolution, or in a wind-down, compliance teams should:

• Establish a clean cut-off balance for each affected customer.
• Distinguish refundable player funds from non-refundable amounts such as settled winnings already paid, bonus credit subject to wagering conditions, and funds under legitimate dispute or investigation.
• Conduct a reconciliation between the internal wallet ledger and the payment-processor records to identify discrepancies before any payout list is submitted.
• Retain a full audit trail of the calculation methodology in case balances are later challenged.

Permitted payment channels

The regulations restrict the payment instruments that may be used to fund betting accounts. Certain instruments are prohibited for placing bets (for example, credit cards and certain other channels), and transactions are typically conducted through electronic transfer methods such as Pix. Operators must ensure that funding and payout channels comply with the current SPA/MF rules and with Banco Central do Brasil requirements applicable to payment flows.

Bank and payment institution roles

Where operators instruct payments to players, the operator’s file to the paying bank or payment institution should be machine-readable and complete. A practical player-payment file should contain, at a minimum, the fields below.

The Banco Central do Brasil supervises payment institutions and expects orderly execution consistent with funds-handling and consumer-protection duties. Payment firms should document each step of receipt, validation and settlement.

Platforms, app stores and internet application providers: duties

The regime and general Brazilian internet law affect the intermediaries that host, distribute and enable betting applications and content, particularly where unauthorised betting is involved.

Content policing and blocking

Regulators have taken steps to block access to unauthorised betting sites and applications, and app stores and operating-system providers may be required to remove prohibited or unauthorised betting apps from Brazilian storefronts. Providers should not treat third-party content as beyond their responsibility once put on notice. Enforcement in Brazil is governed by the applicable legislation and by court and regulator orders; providers should act on valid takedown and blocking notices from competent authorities.

Operational steps for app stores

Distribution platforms should implement a defined removal and geoblocking workflow:

• Establish a takedown-notice intake channel and a documented triage process for identifying unauthorised betting applications.
• Remove offending applications from Brazilian storefronts and block new installs and updates for affected apps on receipt of valid orders or notices.
• Apply geoblocking so that Brazilian users cannot access or download prohibited applications.
• Monitor for re-listing under new developer accounts or altered app metadata, and preserve records of enforcement actions.

Notice template to app stores

A concise takedown request should identify the application by name and store identifier, state that it offers fixed-odds betting to Brazilian users without a federal authorisation under Lei 14.790/2023 (or reference the relevant regulator/court order), request removal from Brazilian storefronts, request geoblocking of Brazilian users, and ask for written confirmation of the action taken and the date. Keeping these notices short and dated helps both the sender and recipient evidence compliance.

Payment institutions, banks and PSPs: operational and AML considerations

For payment firms, the framework creates a dual challenge: process betting-related flows efficiently while maintaining anti-money-laundering and fraud controls and complying with restrictions on permitted instruments.

Process flow

A typical payout flow is sequential: the operator submits a validated list; the payment institution validates beneficiary and identity data; it settles payments; and it reconciles settled payments against the original funding transactions. Clear customer communication should accompany the process so that players understand incoming payments and do not mistake them for erroneous credits.

AML and chargeback considerations

Rapid mass payouts can generate false positives in transaction-monitoring systems and may attract opportunistic chargeback or fraud attempts. Payment firms should reconcile payout programmes with their AML duties rather than suspend controls. Suspicious transactions must still be reported to the relevant authorities, and payments to accounts inconsistent with the original funding source should be flagged and investigated. Documenting the rationale for exceptions protects the institution if payments are later scrutinised.

Questions for compliance teams to ask

• Has the operator’s list been validated against our own transaction records before settlement?
• Are beneficiary accounts consistent with the original funding source, and if not, why?
• Do any payments trigger suspicious-activity thresholds requiring escalation?
• Is there a clear audit trail linking each payment to its cut-off balance and reference transaction?
• Have customer communications been prepared to explain the payments and reduce chargeback risk?

Advertising, affiliates and marketing: compliance steps

Advertising rules under the regime and SPA/MF regulations reach publishers, affiliates and ad platforms that promote fixed-odds betting to Brazilian audiences. Advertising is permitted only for authorised operators and within the limits set by regulation, including responsible-gaming messaging, restrictions on targeting minors, and constraints on certain placements and content. Marketing partners should confirm that any operator they promote holds a valid federal authorisation, that placements comply with the current advertising rules, and that affiliate arrangements are documented. Affiliate agreements should be examined for compliance, settlement and termination clauses so that outstanding commissions and liabilities are handled correctly, and self-regulatory advertising standards (such as those of CONAR) should also be observed.

Licences and concessions: transition and record-keeping

The move from the earlier legal position to the Lei 14.790/2023 regime, and subsequent SPA/MF regulation, has required operators to transition their operations onto the authorised footing.

Federal authorisations under Lei 14.790/2023

Federal authorisations under Lei 14.790/2023 are the lawful basis for operating fixed-odds betting in Brazil. State and district lotteries and concessions operate under their own legal frameworks. Operators should ensure that their activities are covered by a valid authorisation and by the correct regulatory permissions for the products and channels they offer.

Record-keeping for licence-holders

Licence-holders should maintain a complete evidentiary record, including proof of fees paid, authorisation documents, correspondence with regulators, technical-certification records, and financial records evidencing investment made in reliance on the authorisation. A clean audit trail is indispensable for supervisory reviews, disputes, and any future regulatory change. Record-keeping is the cheapest form of protection available.

Cross-border enforcement and jurisdictional risks for foreign operators

Foreign operators sometimes assume that offshore incorporation insulates them from Brazilian rules. It does not remove exposure to the levers Brazil controls where they serve Brazilian users without authorisation.

Enforcement levers

The realistic enforcement tools are commercial and market-access oriented: blocking of sites and applications, disruption of payment flows into and out of Brazil, and administrative sanctions. The state can degrade an unauthorised foreign operator’s ability to reach and monetise Brazilian users.

Recommended mitigation

• Engage local counsel to assess exposure and, where appropriate, pursue federal authorisation.
• Where an operator does not intend to seek authorisation, implement server and application geoblocking to exclude Brazilian users.
• Adjust payment routing to prevent unauthorised acceptance of Brazilian deposits.
• Update the corporate risk register to reflect the Brazilian legal position and enforcement exposure.

Planning scenarios: authorised operation, wind-down and disputes

Operators should plan for several scenarios depending on their authorisation status and commercial strategy.

Authorised operation

Operators holding a valid federal authorisation should maintain continuous compliance with SPA/MF regulations, technical-certification requirements, tax obligations, and responsible-gaming and AML duties, and should monitor for regulatory updates that may change technical or operational requirements.

Market exit or wind-down

An operator that chooses to exit the Brazilian market, or whose authorisation is not renewed or is revoked, should conduct an orderly wind-down: cease accepting new deposits, settle or return player balances, notify players and payment partners, preserve records, and comply with any regulatory instructions for surrendering the authorisation.

Disputes and litigation

Where an operator disputes a regulatory decision, remedies include administrative review before the SPA/MF and the Ministry of Finance, and judicial review, including constitutional challenges before the Supremo Tribunal Federal in appropriate cases. Operators should maintain compliance and preserve records while any challenge is pursued.

Whichever path applies, the safest posture is full compliance now, combined with evidence preservation that keeps future options open.

Practical checklist and templates for compliance teams

The following checklists translate the framework’s obligations into actionable tasks for each affected group.

Ten-step checklist for operators

1. Confirm the operator holds, or applies for, a valid federal authorisation from the SPA/MF.
2. Ensure Brazilian corporate presence and ownership meet the regulatory requirements.
3. Obtain technical certification of the betting system from an accredited laboratory.
4. Implement KYC, responsible-gaming and AML/CTF controls.
5. Segregate and safeguard player funds as required.
6. Ensure funding and payout channels use permitted instruments only.
7. Maintain accurate player-balance ledgers and reconciliation processes.
8. Comply with advertising rules and confirm affiliate arrangements are compliant.
9. File reports and pay applicable taxes and contributions on time.
10. Preserve authorisation, fee, certification and investment records; engage local counsel.

Eight-step checklist for payment firms

1. Confirm the operator holds a valid federal authorisation before processing flows.
2. Establish a channel to receive operator payout lists.
3. Validate beneficiary and identity data against internal records.
4. Screen payments against AML and fraud-monitoring thresholds.
5. Reconcile payments against original funding transactions.
6. Escalate and report suspicious transactions as required.
7. Communicate with customers to explain incoming payments.
8. Document each step for supervisory review.

Six-step checklist for app stores

1. Identify unauthorised betting applications on Brazilian storefronts.
2. Act on valid takedown or blocking notices from competent authorities.
3. Apply geoblocking to exclude Brazilian users where required.
4. Send and record takedown confirmations.
5. Monitor for re-listing under altered accounts or metadata.
6. Retain enforcement records to evidence compliance.

Sample templates

Teams should prepare three short template communications: a player notice explaining any wind-down and payout process; a bank instruction accompanying a payout list and referencing the applicable duties; and an app-store takedown request identifying the application and the legal basis. Each should be dated and retained.

Regulatory and judicial remedies, reporting and contact points

Where clarification or redress is needed, several official channels are relevant.

Where to seek clarifications

• The Secretaria de Prêmios e Apostas (SPA/MF) of the Ministry of Finance for authorisation and regulatory matters.
• The Diário Oficial da União (Imprensa Nacional) for the authoritative published text of laws and regulations.
• The Presidency’s Planalto legal repository for Lei 14.790/2023 and related legislation.
• The Banco Central do Brasil for payment-institution obligations and funds-handling guidance.
• The Secretaria Nacional do Consumidor (SENACON) for consumer-protection and refund complaints.
• The Ordem dos Advogados do Brasil (OAB) for professional guidance.

Administrative review versus judicial routes

Operators should distinguish administrative engagement, seeking clarification and raising objections through the SPA/MF and the Ministry of Finance, from judicial routes, including constitutional challenges before the Supremo Tribunal Federal. Immediate actions should focus on compliance and evidence preservation while legal strategy is developed with local counsel.

Key takeaways and recommended next steps

Brazil’s fixed-odds betting regime under Lei 14.790/2023 requires federal authorisation, technical certification, robust player-protection and AML controls, compliant payment channels and compliant advertising. The priority actions are: confirm authorisation status and align operations with current SPA/MF regulation; maintain accurate player-balance ledgers and use only permitted payment instruments; ensure app-store and platform duties are met where relevant; observe advertising rules and vet affiliate arrangements; and preserve all authorisation, fee, certification and investment records. Because the rules in this area are updated frequently, early, documented compliance is the most effective protection against sanctions. Operators, platforms and payment firms should obtain tailored advice from a Brazil-regulatory lawyer.

Sources

1. Lei No. 14.790/2023, Planalto
2. Secretaria de Prêmios e Apostas (SPA), Ministério da Fazenda
3. Diário Oficial da União, Imprensa Nacional
4. Banco Central do Brasil
5. Ministério da Justiça e Segurança Pública, SENACON
6. Ordem dos Advogados do Brasil (OAB)
7. Supremo Tribunal Federal (STF)
8. Ministério da Fazenda