Offshore guide

Costa Rica Gaming Company Setup: The 2026 Guide

How to set up the Costa Rica company behind an online gaming operation in 2026 — the data-processing permit, UBO checks.

Contents

Most people searching for a “Costa Rica gaming licence” are searching for something that does not exist. Costa Rica has no gambling regulator and issues no gaming licence — a fact worth stating plainly before you spend a cent. What you actually set up is a Costa Rican company plus a municipal data-processing permit, and understanding that distinction is the difference between a structure that survives a bank’s underwriting and a certificate you thought you bought but never did.

A Costa Rica gaming company is the lowest-cost structure we set up for an offshore-only operation, a Costa Rican company holding a permit rather than a licence: around $7,000 in the first year for the company, permit, policies and support, running in weeks, with no tax on gaming revenue. It is also lower-credibility than a real licence, and we will tell you exactly where that bites. This guide covers how the company and permit are built, who owns what, how you bank it, and why this same Costa Rican company is very often step one toward a fuller offshore licence rather than the whole story.

Key takeaways
  • Costa Rica has no gaming regulator — you set up a local company plus a municipal data-processing permit, and no licence is issued.
  • Company takes ≈3 weeks; the permit follows in ≈5 business days. Typical first-year set-up cost is ≈$7,000, with no tax on gaming revenue. Law 9050 adds a fixed annual tax, about US$58,000 at the lowest band in 2026, if bet data is processed in Costa Rica.
  • You bank through an EMI or neobank (never Wise, Stripe or PayPal) with a Cyprus payment agent where fiat cards demand an EU counterparty.
  • The same Costa Rica company is the applicant entity for Anjouan, Tobique, Kahnawake, Tuvalu and KUNAISA licences — so this is often step one.

What you are actually setting up

There is no central gambling authority in Costa Rica and no dedicated gaming licence to apply for. What operators obtain instead is a data-processing permit — a municipal authorisation confirming that the company processes betting-related data from its servers, rather than offering gambling to Costa Ricans. It is a legal interpretation built on general commercial law rather than a regulated gaming regime.

That framing has real consequences. Because the permit is about data processing and not about gambling, the model is strictly offshore: you must not offer betting to Costa Rican residents, and you geo-block them along with any regulated, sanctioned or FATF-listed territory. Get this wrong and the whole legal interpretation collapses — the permit only holds up if the activity genuinely stays outside Costa Rica. This is also why the data-processing permit itself deserves its own attention rather than being treated as a rubber stamp.

The upside is that the footprint is genuinely light. A Costa Rican company, a municipal permit and the right policies, and you are trading. There is no regulator to satisfy, no share-capital threshold, no local-substance test, and no tax on gaming revenue. For a cost-sensitive startup or an operator testing a market before committing real money, that combination is hard to beat — provided you go in with clear eyes about what you did and did not buy.

The setup, step by step

The build has two moving parts plus the compliance layer, and none of them is heavy. In our practice the sequence runs like this, with the policy work done in parallel so it does not extend the timeline.

Stage Timeline What happens
Company registration ≈ 3 weeks Incorporate the Costa Rican company that will operate the platform and sign every contract.
Data-processing permit ≈ 5 business days Apply for the municipal authorisation to process betting data from servers.
Policies & controls In parallel AML/KYC procedures, terms & conditions, responsible-gaming tools and working geo-blocking.
Go live On completion Launch to offshore markets only, excluding Costa Rican residents and restricted territories.

The company is the entity that matters, and it carries its own ongoing filings, which we list in the full set of Costa Rica operator requirements. It holds the permit, signs the studio, aggregator and platform contracts, employs any staff, and holds the corporate bank or EMI account, so everything else attaches to it. The permit is simply an attribute of that company. And the compliance layer, though not regulator-driven, is not optional either: basic AML and KYC, clean terms and privacy documentation, responsible-gaming tools and enforced geo-blocking are what keep the whole interpretation defensible and what payment partners will ask to see.

UBO, ownership and due diligence

No regulator means no one is vetting your ultimate beneficial owner on Costa Rica’s behalf — but that does not make ownership a free-for-all, and treating it that way is how operators get their banking pulled six months in. The bank, EMI or PSP that onboards you runs its own KYC on the corporate structure, and under the FATF standards those checks reach through to every shareholder, director and UBO: identity, proof of address, source of funds and clean-record screening for each of them.

Practically, this means the ownership of the Costa Rican company should be clean and documentable before you approach any payment partner. You can hold shares directly, through a holding company or through nominees. Nominees are a legitimate privacy tool that keeps your name off a public filing, but they only change public visibility and leave disclosure untouched. Any regulated counterparty that needs to see the real owner will see them. The structure should be built to survive that scrutiny rather than to dodge it.

Due diligence still applies.

The data-processing model removes the regulator but leaves the bank’s due diligence in place. Clean UBO records, real AML/KYC policies and working geo-blocking are what let a bank underwrite you — the same discipline we describe in the gaming company bank account guide. Operators who skip it tend to have their payment accounts closed.

Banking it: EMI, neobank and the Cyprus payment agent

Banking is what decides whether a Costa Rica operation actually trades, far more than the permit does. Gambling is a high-integrity-risk category to every card scheme and bank on earth, which is why you will never run a gaming operation through Wise, Stripe or PayPal — mainstream processors prohibit the category outright, and the Visa Integrity Risk Program treats high-risk gambling as a monitored merchant class with its own registration and controls. The realistic path is an EMI or specialist neobank that knowingly serves high-risk merchants.

For fiat card acquiring there is a second wrinkle: many acquirers and PSPs will not contract or settle with an offshore company, because their own risk and correspondent-banking rules push them toward an EU counterparty. That is the gap a Cyprus payment agent fills. It is a separate EU company that sits between the operator and the card rails — the name on the PSP agreement, the entity player payments settle into before funds move to the Costa Rica company under an intercompany arrangement. Within the EU’s PSD2 framework it acts as a payment-facing contracting party, and it holds no gaming permit of its own. You do not always need it: a crypto-first operator running deposits and withdrawals on-chain can often launch on the Costa Rica company and an EMI account alone, adding the Cyprus layer only when fiat cards enter the mix.

Here is the part that reframes the whole exercise. The Costa Rican company you set up for the data-processing model is the same entity we use as the applicant for a string of offshore gaming licences — Anjouan, Tobique, Kahnawake, Tuvalu and KUNAISA all permit (or require) a non-resident applicant, none of them needs local incorporation, and Costa Rica has become the default choice for all of them. So a Costa Rica setup is rarely a dead end; far more often it is step one toward a fuller offshore structure.

Entity Jurisdiction Role
Operating / applicant company Costa Rica Holds the data-processing permit, signs all contracts, holds banking — and becomes the applicant for an offshore licence later.
Gaming licence (optional upgrade) Anjouan, Tobique, Kahnawake, Tuvalu, KUNAISA The regulatory credential, issued to the Costa Rica company. Adds a verifiable register entry and broader banking reach.
Payment agent (where needed) Cyprus EU counterparty for card acquiring and fiat PSPs that won’t settle offshore. Holds no licence.

That continuity is the practical case for starting here even if you know you will scale. Nothing you build in year one is thrown away: the company, the ownership structure, the banking relationships and the compliance policies all carry forward. When credibility or banking reach starts costing you deals, you add a licence on top of the entity you already own — the exact structure we lay out in the corporate structure behind an Anjouan gaming licence, where the Costa Rica company sits at the centre and the licence sits on top.

The tax and credibility trade-off — read this before you choose

Costa Rica taxes on a territorial basis: income earned from activity carried on outside the country is generally outside the domestic tax net, which is why offshore gaming revenue is not taxed under this model. That is a genuine, structural feature of Costa Rican tax law. Law 9050 instead sets a fixed annual tax for companies that receive and process bet data in Costa Rica: 57 base salaries for up to 50 employees, 85 for 51 to 99 and 113 for 100 or more. It is qualitative guidance rather than tax advice on your specific facts, and it holds only for as long as the operation genuinely stays offshore.

The counterweight is credibility. Because there is no regulator and no public register, you cannot point a partner to a licence number they can look up. Some PSPs and banks weigh a data-processing operation lightly for exactly that reason, and a few will decline it outright. That is the real cost of the cheapest set-up, and it is why we are blunt about where a real licence is the better spend: if you need a verifiable credential, broader banking and market reach, the full cost comparison and our Costa Rica gaming guide walk through when to start here versus when to buy a licence outright.

Vantegris sets the Costa Rica company up correctly, tells you plainly where it does not work, and builds it so the upgrade path is already there when you need it. If you want the structure mapped to the markets you actually plan to serve, with a straight answer on whether Costa Rica or a licence is the right first move, see the Costa Rica gaming setup service or book a free consultation.

Frequently asked questions

Is a Costa Rica gaming company setup actually a gaming licence?

No, and it is important to be clear about that. Costa Rica has no gambling regulator and issues no gaming licence. What you set up is a Costa Rican company plus a municipal data-processing permit, which authorises processing betting-related data from servers rather than offering gambling inside Costa Rica. It is a legal interpretation under general commercial law, not a licensed regime — cheap and fast, but with no regulator's name behind you.

How long does it take to set up the company?

In our practice, incorporating the Costa Rican company takes about three weeks, after which the municipal data-processing permit follows in roughly five business days. So you are looking at a few weeks end to end, with AML/KYC policies, terms and geo-blocking put in place in parallel rather than adding to the timeline.

How much does the first year cost?

There is no government licence fee because there is no licence — the cost is company registration, the municipal permit, website policies and support. The typical first-year figure is around $7,000, though it moves with your model. That excludes the Law 9050 tax, which starts at about US$58,000 a year (2026) where the company receives and processes bet data in Costa Rica. If a real credential would serve you better, we say so rather than sell you the cheapest option by default.

Can I take card payments on a Costa Rica company?

You bank through an EMI or specialist neobank that knowingly serves high-risk merchants — never Wise, Stripe or PayPal, which prohibit gambling outright. Where card acquiring or fiat PSPs demand an EU counterparty, a payment agent incorporated in Cyprus sits between the operator and the rails. Crypto-first operators often launch on the EMI alone.

Is the Costa Rica company the same one used for offshore licences?

Yes — and this is the part most operators miss. The Costa Rican company we set up here is the same applicant entity we use for Anjouan, Tobique, Kahnawake, Tuvalu and KUNAISA licences, none of which require local incorporation. Setting up Costa Rica is often step one toward a fuller offshore structure, and the same company can later be the applicant for one of those licences.

When should I upgrade to a real licence?

When credibility or banking reach starts costing you deals. Because no regulator or public register stands behind the data-processing model, some PSPs and partners weigh it lightly. The upgrade path is clean: keep the Costa Rica company and add an Anjouan or Curaçao licence on top of it, so nothing you built in year one is wasted.

Sources

Vladyslav S.
Compliance & Legal at Vantegris

Vladyslav S. is part of the Vantegris team, which prepares and files licence applications across 40+ jurisdictions. This article was reviewed by Iryna H. (Gaming Licensing).

Related service Costa Rica gaming setup →

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.

Share
TG share on Telegram X In share on LinkedIn WA share on WhatsApp Reddit Mail share by email
Talk to a specialist.

We'll map the fastest route to a licensed, banked, live operation.

Book a free consultation →

Stay ahead of the rules.

Licence fees, rules and deadlines change through the year. Subscribe and we'll email you Vantegris licensing updates.

We use your email to send these updates and note where you signed up. Unsubscribe any time from any email. Privacy policy.

Licence, done right.

300+ operators licensed across 40+ jurisdictions. Book a free consultation.

Book a free consultation