Mobile App Betting (Brazil)
1) Jurrama: who allows and what exactly is legal
From the end of 2023, fixed odds betting and "online gaming" are regulated by Act No. 14. 790/2023; supervision and authorization is conducted by the Secretariat for Prizes and Rates (SPA) of the Ministry of Finance. This department is authorized to authorize, monitor and authorize operators and publishes the official register of admitted companies.
2) Payment loop in applications: only "white" methods
The order of payments and conclusions is fixed by Portaria Normativa SPA/MF nº615/2024. Operator applications allow:- Replenishment/withdrawal: PIX, TED, debit/prepaid cards and only from the player's registered bank account.
- Prohibited: cash, boletos, crypto assets, credit cards and any "alternative" schemes that make it difficult to identify the source of funds.
- Standard of service: payout of winnings - within 120 minutes after the end of the event/session.
3) User tax: 15% on net winnings
RFB Instruction No. 2 has been in effect since May 7, 2024. 191/2024: net gain on rates is subject to personal income tax of 15% (withholding at the source; there is a non-taxation threshold for small amounts). A clarification has been posted on the Recepita Federal website.
4) Where to check the legality of the application
Before installing or deposit, it is worth checking the official register SPA/MF: the page of the Ministry of Finance contains an up-to-date list of authorized and a separate list of those who work on court decisions - the update date and links to PDF/CSV are indicated.
5) App stores: what Google and Apple allow
Google Play (Android). In 2025, Google announced the admission of licensed betting and casino applications in Brazil, with requirements for compliance with local licenses and age restrictions; industry reports and specialized publications record changes in policy and admission conditions. Additionally, there are separate rules for advertising "gambling & games."
Apple App Store (iOS). In App Review Guidelines (Section 5. 3) applications with passion require a license, geo-restriction only to permitted regions and strict age control.
6) Safety and responsible play in mobile UX
KYC and entry. Licensed applications require CPF verification and identification of the owner of the payment instrument; turn on Face/Touch ID, 2FA and auto-lock PIN. (These requirements stem from SPA supervision and payment perimeter rules 615/2024.)
Limits and controls. Look in the settings: deposit/time limit, self-exclusion, transaction history and quick access to support. (Part of the measures is provided for by the regulatory agenda and the practice of responsible play in the "white" market.)
Payout transparency. The correct applications show the output status and the ≤120 minute timer; deviations - alarm signal.
7) What the user path looks like "in the application" (ideal scheme)
1. Checking the brand in the SPA registry → clicking on the official link to the store.
2. Registration and KYC (CPF, document, selfie/biometrics).
3. PIX/TED/Debit/Prepaid Deposit - only in your name.
4. Bid/live bid → app tracking.
5. Payment of winnings to the same "white" account within up to 120 minutes.
6. Tax (15% on net winnings) is withheld under Receita Federal rules.
8) For product and compliance teams of operators (short checklist)
Compliance 615/2024: turn off credit cards/boletos/crypto, leave only PIX/TED/debit/prepaid; set up payment SLA automation ≤120 min.
Player taxes: implement IN RFB 2 logic. 191/2024 (15% deduction from net winnings, non-deduction threshold) and the issuance of certificates in the application.
Storami: prepare a dossier for Google Play/Apple (SPA license, age/geo-gates, local legal texts).
Marketing: comply with gambling content advertising policies (Google Ads certification and age/target restrictions).
9) Frequent questions
Where to download the "official" application?
Authorized operators have pages in the SPA registry; from there go to the stor. Avoid. "Apk from third-party sites."
Can I replenish through crypto or boleto?
-No, it isn't. This is expressly prohibited by Portaria 615/2024 and a sign of a "gray" operator.
When will the money come after the victory?
In the "white" application, the guideline is up to 120 minutes after calculating the event.
Do I need to declare something?
15% withholding tax on IN RFB 2. 191/2024; see attached receipt/reference and clarification by Receita.
10) Safe play: 5 rules for mobile betting
1. Check the SPA registry and the date it was updated.
2. Use only PIX/TED/debit/prepaid within the application.
3. Turn on biometrics/2FA and set limits.
4. Monitor the payout SLA (≤120 min) and contact your support if it fails.
5. If you notice a loss of control, use self-exclusion and seek help (responsible play is part of the white standard).
In 2025, mobile rates in Brazil are a mature ecosystem: federal SPA authorization, white payment (PIX/TED/debit/prepaid), payment of ≤120 minutes, 15% personal income tax from net winnings and admission of licensed applications to Google Play and App Store. Security begins with two steps: check the brand in the SPA registry and play only through white replenishment/withdrawal methods. Everything else is a matter of UX convenience and your personal discipline.
Relevance: October 11, 2025 (Europe/Kyiv).