Alderney Gambling Licence Requirements in 2026

An Alderney gambling licence requires a corporate applicant — an Alderney company for a Category 1 or 2 licence, or a foreign company under an Associate Certificate — with demonstrable substance and fit-and-proper owners. An Alderney gambling licence is one of the most respected credentials in online gaming — and the requirements file behind it is built to earn that reputation. The Alderney Gambling Control Commission (AGCC) regulates independently of the UK, at 0% gaming tax, and it is known for rigour: thorough probity work, a demanding systems review, and a document pack that expects a real operation rather than a nameplate.

In our practice, the operators who clear Alderney fastest are the ones who understand up front that the licence is won or lost on the Internal Control System. This guide is the requirements checklist we work from on our own desk. It covers exactly what the 2026 AGCC regime demands — the corporate applicant, fit-and-proper due diligence, the £10,000 investigation deposit, and the ICS-led document pack — so you can price the licence on what it actually takes, not on the headline fees.

The applicant and the licence categories

Everything starts with the applicant entity. The AGCC issues Category 1 (B2C) licences for full player-facing operations and Category 2 (B2B) licences for software, platform and hosting suppliers. Both are granted to an Alderney-registered company. Where an operator prefers not to incorporate on the island, the Commission issues an Associate Certificate to a foreign-based company, letting it operate in association with Alderney’s framework without a local company.

That flexibility is a genuine feature of the regime — but note it is Alderney’s own structure. The applicant is an Alderney company, or a foreign company under an Associate Certificate; this is not a Costa Rica shell applying from a distance. Whichever route you take, the corporate applicant must clear the same probity and financial-stability tests, and the same Internal Control System review. For where an Alderney licence sits against the alternatives, our flagship Alderney gambling licence overview maps the full picture, and the Alderney vs Malta gaming licence comparison covers when each regime wins.

Costs sit outside scope here — for the Category 1 first-year fee, the banded net-gaming-yield schedule and the year-one all-in, see the Alderney gambling licence cost guide. There is no gaming tax at any tier.

Eligibility and financial stability

The AGCC’s eligibility test is straightforward to state and demanding to satisfy. At application you must present:

• A corporate applicant — an Alderney company for a Category 1 or 2 licence, or a foreign company applying for an Associate Certificate. There is no route for an unincorporated applicant.
• Demonstrated financial stability — the business must be genuinely funded and able to meet its obligations to players and to the regulator. The Commission wants evidence, not assertion: funding sources, projections and the capital behind the operation.
• Fit-and-proper ultimate beneficial owners, directors and key persons — everyone in the ownership and control structure clears the probity bar, not just the named applicant.
• A robust Internal Control System — the ICS is the core submission, built to the AGCC’s Schedule 11 headings, and it is assessed as the heart of the whole application.

Financial stability is not a fee you write off — it is the demonstration, to a rigorous regulator and later to your banks, that the operation is real. Alderney’s reputation for scrutiny is exactly what gives the credential its weight, so the eligibility file is where that scrutiny begins.

Due diligence and the £10,000 investigation deposit

Under the AGCC’s regime, probity vetting is run by the Commission itself and applied to every ultimate beneficial owner, director and key person — the depth matches the licence’s reputation. This is the work the investigation deposit funds.

Detailed probity checks on owners and key staff. Identity is verified from certified documentation, and each individual is screened against criminal records, sanctions lists and adverse-media watch-lists. A single unresolved file — a missing document, an unexplained connection — holds the whole application.

No sanctions or disqualifying convictions. Anyone in the ownership or control structure carrying disqualifying convictions, sanctions exposure or watch-list hits will fail the assessment. There is no working around it, and the Commission’s independence means no shortcut around the standard.

Source-of-funds evidence. You must demonstrate not only that the business is funded, but where the money comes from. Vague or undocumented wealth is the single most common reason a probity file stalls, so this evidence should be assembled early rather than treated as a closing step.

A £10,000 investigation deposit. The AGCC charges a £10,000 deposit to fund the investigation behind your application — the due diligence, verification and systems assessment described above. It is separate from the licence fees and reflects how genuinely thorough the review is.

Because these files take the longest to assemble — especially source-of-funds evidence and certified documents from multiple jurisdictions — start them in parallel on day one.

The document pack and the Internal Control System

Alongside people and financial stability, the AGCC reviews a defined document pack, and the Internal Control System sits at its centre. Filing with any element missing, or written for a different product, is what turns a three-month approval into a six-month one. The core pack is:

The Internal Control System deserves the emphasis it gets. The AGCC requires it built to defined Schedule 11 headings — a documented set of controls covering operations, player management, security, AML and reporting — and the whole assessment turns on it. It is not template filler assembled for the application; it is the operating manual the Commission holds you to afterwards, and inspections check that you actually run it.

The customer registration, verification and AML controls must be operable, mapped to the FATF Recommendations, with real transaction monitoring and reporting behind them. Our primer on iGaming AML and KYC covers what an operable programme looks like in practice. The responsible-gaming and data-protection policies enforce self-exclusion, deposit limits and secure handling of player and financial data, and the RNG and technical documentation must demonstrate game fairness through certification by a recognised laboratory. Every one of these elements is assessed by the AGCC itself.

Ongoing requirements and payments

The requirements do not stop at issuance. Because Alderney is a direct-supervision, rigorous regime, you carry live obligations for as long as you hold the licence. You keep the Internal Control System, AML/KYC programme and responsible-gaming controls current with the Commission’s expectations — the ICS the AGCC assessed is the ICS it holds you to. You file ongoing reporting, notify the AGCC of material changes including change of control, and keep the certified RNG and technical systems subject to periodic assurance.

On the payments side, an Alderney credential earns premium standing that opens tier-1 banking — a door a pure offshore permit never opens. But the rails still have to be built correctly. Mainstream processors such as Wise, Stripe and PayPal prohibit gambling, so Alderney operators bank with tier-1 institutions and route payments through an EMI or neobank account and specialist high-risk acquirers, not consumer fintech. The licence earns you access to better rails; it does not exempt you from the fact that gambling remains a restricted category everywhere, and you still geo-block the markets you are not authorised in.

Assembling the file in the right order

Requirements are one thing; sequence is another. The order that avoids rework is: set up the corporate applicant — an Alderney company, or the foreign entity behind an Associate Certificate — and confirm financial stability first; assemble every fit-and-proper file, with source-of-funds evidence, in parallel because they take the longest; build the Internal Control System to the Schedule 11 headings alongside the accounting, AML, responsible-gaming and data-protection procedures; then finalise the RNG and technical documentation. Only then does the fully digital AGCC application go in, with the £10,000 investigation deposit.

None of this is the light-touch permit an offshore jurisdiction offers — and that is the point. The AGCC regime asks for a real corporate applicant, genuine financial stability, clean probity across everyone behind the business, and an Internal Control System built to survive rigorous review. In exchange it gives you an independent, respected credential at 0% gaming tax and the banking access that scrutiny makes possible. Get the file complete and the ICS right the first time and the 3–6 month window is achievable; file with gaps and it drifts.

Ready to assemble your AGCC requirements pack, or want a second opinion on a file you have already started? Our team builds the full Internal Control System, runs the fit-and-proper and document work end to end, and will review any application against the Commission’s expectations before you submit. Book a free consultation and we will tell you exactly what is missing.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.