Online gambling: legalized since 2019, only for local operators
1) Summary
As of 2019, online casinos in Switzerland are only allowed as an extension of the local land-based casino license. Foreign brands can only be present through partnerships (content/platform providers, white-label/co-branding), while the Swiss licensee remains the record operator responsible for players, taxes and compliance. The market is small, but "white," technologically mature and with a high level of trust.
2) Legal Architecture (from 2019)
Basic law: The modern "money games" frame of 2019.
Supervision:- ESBK - casino/online casino licenses and controls.
- Gespa - lotteries, sports betting and skill games.
- Block lists: communication providers are required to restrict access to unlicensed sites.
- Goals: consumer protection, transparency of payments, sewerage of demand in the licensed sector, public benefit.
3) Who can work online
Only Swiss land-based casinos (type A/B licenses) that have been extended to online.
Foreign operators cannot work directly online; participation - through B2B swarms (platform, games, live content, risk management, hosting/CDN) and brand partnerships under the control of a Swiss licensee.
4) Formats of partnerships with foreign brands
1. Technology B2B (platform/content). International providers supply slot content, live tables, jackpot modules, payment/anti-fraud tools.
2. Managed Services. Support for trading (for bets), BI/anti-truck, risk scoring, KYC orchestration - within the framework of contracts and control rights ESBK/Gespa.
3. Co-branding/white-label. Let's say as a marketing frame, but the operator remains the Swiss casino: it is it that is responsible for RG, AML/KYC, payments, disputes and reporting.
5) Operator requirements (online loop)
Responsible play (RG): self-exclusion, deposit/time/loss limits, "pauses," proactive interventions for risk patterns.
AML/KYC: identification before admission to the game and payments, verification of sources of funds, monitoring of transactions, reporting on suspicious transactions.
Honesty of games: RNG certification, control of payment tables, version of builds, independent audits.
Technical security: segmentation of environments, logging, redundancy, SIEM, WAF/DDoS, IR plans, key management (HSM/MPC).
Geocontrol: access - only for players permitted by law (including age/location), with sustained geo-filtering.
Data and privacy: storage in accordance with local regulations, access control and retention.
6) Online Casino Product Matrix
Slots and board games (RNG + live).
Live casinos: roulette, blackjack, baccarat and show formats through certified studios/vendors.
Jackpots: local/network supervised and with transparent mathematics.
Integrity tools: Provable randomness for RNG, public rules and odds.
7) Payments and withdrawals
Fiat in the base, integration with verified payment/payment providers is allowed.
Speed and transparency: fixed SLAs for output, understandable statuses, protection against chargeback abuse.
Antifraud: behavioral rules, limits on attempts/unsuccessful deposits, sanction/PEP filters.
8) Advertising and promo
Moderation and truthfulness: prohibition of "promises of easy gain" and aggressive pressure.
Protecting vulnerable groups: age gates, targeting audits, prominent RG messages.
Bonuses: vager conditions, terms and restrictions - before activation; transparent "T&C" on one page.
9) Taxes and public benefits
Casino tax with GGR (including online) with contributions to the state pension insurance system (AHV) and budget.
Lotteries/rates (cantonal zone) direct net revenues to sports, culture and social projects.
Players: tax regime depends on the type of game; winnings in licensed casinos are traditionally discounted, lotteries/bets have an increased non-taxable minimum.
10) Launch: roadmap for local operator
1. Legal and compliance assessment: risk matrix, RG/AML policy, selection of product verticals.
2. Choice of partners: platform, content, payments, anti-fraud, hosting; hard due diligence and SLA with auditing rights.
3. Technical circuit and safety: segmentation, logs, monitoring, penetration test, IR plan; geo-filter integration.
4. Player procedures: KYC streams, limits, self-exclusion, support, dispute policy.
5. Coordination with ESBK/Gespa: approval of games/providers, demonstration of compliance with standards.
6. Marketing frame: moderate tone, RG communications, ban on aggressive offers.
7. Launch and control: KPI-panel on RG/AML/IS/payments, quarterly audits.
11) KPIs of maturity and trust
RG: proportion of players with active limits; speed and effectiveness of interventions; return after "pause."
AML: auto-approve KYC share at low false positives; timeliness of reporting.
IS: MTTD/MTTR; zero critical vulnerabilities in the product; magazine coverage.
UX/payouts: average withdrawal time; share of successfully autocorrected payments; NPS and complaints.
Finance: accuracy of GGR accounting, timeliness of taxes; the proportion of "gray" entry attempts blocked by geo-filters.
12) Why Switzerland chose a local model
Risk control: full supervision of the recording operator and the technological perimeter.
Social contract: part of the income - in AHV/community projects; high legitimacy of the industry.
Quality instead of scale: the market is small but stable, with high service and security standards.
13) The bottom line
The Swiss online gambling model is a local operator as the only legal front, and international brands as technology and content provider partners. This design provides a high level of player protection, financial transparency, sustainable social dividends and maintaining confidence in the industry.