KUNAISA Gaming Licence Requirements in 2026
Exactly what qualifies you for a KUNAISA gaming licence in 2026 — corporate documents, AML/KYC and responsible-gaming policies.
Contents
KUNAISA is one of the newest sovereign-territory gaming licences, and its appeal is speed: roughly four weeks from a complete file to a live product, at €19,500 a year including two domains. But that advertised window assumes the file is right the first time. Applications slip for the same reason they slip everywhere — a missing corporate document, a policy written for the wrong product, an unresolved source-of-funds question — not because the authority is slow.
This guide is the requirements checklist we work from, grouped the way KUNAISA reviews an application: Corporate, Compliance and Technical. It also covers the point most write-ups miss — there is no Panama-company substance requirement, because the applicant entity is incorporated in Costa Rica, not on the territory.
The three buckets, at a glance
KUNAISA — the Kuna de Wargandí International Services Authority in Panama — issues a single iGaming licence spanning virtual casino, sports betting, draws, eSports, poker, lotteries and fantasy, plus gaming-software supply. To secure it, your file has to satisfy three distinct sets of requirements at once. The authority reviews people, structure and technology together, so a strong corporate pack will not rescue a weak compliance file, and vice versa.
| Bucket | What it proves | Core items |
|---|---|---|
| Corporate | A properly structured, documented applicant entity | Articles of incorporation, clear ownership/control, director ID + references, financial documentation |
| Compliance | Fit-and-proper owners and a working AML programme | AML/KYC policies, responsible-gaming policies, source-of-funds evidence |
| Technical | Fair games and a secure, documented platform | Platform architecture + cybersecurity docs, RNG/RTP certification, team & technology detail |
The rest of this guide walks each bucket in the order you should assemble it. Costs sit outside scope here — for the full fee breakdown, including the two included domains and the €500 per extra domain, see the KUNAISA gaming licence cost guide.
Corporate requirements
International operators apply as a company, and the standard structure is straightforward: the applicant entity is incorporated in Costa Rica. KUNAISA derives its licensing power from the sovereign status of the Kuna de Wargandí territory, and its substance expectations are deliberately lighter than Panama’s national JCJ route — there is no need for a local Panama company, a physical office or three resident directors. That single fact is what keeps the file remote from start to finish, and it is the detail cheaper guides get wrong when they assume a Panama licence means a Panama company.
At application, KUNAISA expects a complete corporate pack for the applying entity:
- Articles of incorporation and corporate documents — the constitutional documents, share register and register of directors for the Costa Rica company.
- A clear ownership and control structure — a transparent chart showing who owns and ultimately controls the entity, with no opaque layers the authority cannot trace to real people.
- Director identification and references — certified ID for each director plus professional references that speak to their standing and experience.
- Financial documentation — audited statements or proof of minimum capital, demonstrating the operation is properly funded.
Pairing a KUNAISA licence with a Costa Rica applicant company is the norm, not a workaround — it is the same lean structure Vantegris uses across sovereign-territory regimes. For how the licence works end to end alongside these requirements, see our flagship KUNAISA gaming licence guide.
Compliance requirements: owners, policies and source of funds
This is the bucket that decides most timelines. KUNAISA runs fit-and-proper assessment on the ownership and management — not just the named applicant — and pairs it with the operable policies that will govern the business day to day.
Fit-and-proper ownership and management. Every beneficial owner and key manager behind the company is assessed for suitability: a clean background, no disqualifying history, and a demonstrable good reputation. The authority is confirming that the people who will actually run and profit from the operation are appropriate to hold a gaming licence — a written policy cannot compensate for an owner who does not clear this bar.
Source-of-funds evidence. Alongside the people, you evidence the money. Source-of-funds documentation shows where the capital behind the operation originates and that it is clean. This is where diligence most often stalls, because the authority will not proceed on an unexplained or partially documented funding trail.
AML/KYC and responsible-gaming policies. These are the programmes that govern the business in operation:
- AML/KYC policies — drafted to KUNAISA’s expectations and mapped to the FATF Recommendations, covering player identity and residence verification, transaction monitoring for suspicious activity, and record-keeping. Because KUNAISA also licenses crypto and VASP activity, an operator running crypto rails must extend these to the FATF Travel Rule for virtual-asset transfers.
- Responsible-gaming policies — self-exclusion, deposit limits, reality checks and firm controls to protect minors and vulnerable players.
The obligation does not end at issuance: you carry ongoing reporting to KUNAISA, must notify material changes, and — crucially — must actually operate the AML programme you filed, not merely possess it. A written policy no one runs is a licence risk, not a safeguard. Our primer on iGaming AML and KYC covers what an operable programme looks like in practice.
Technical requirements
The third bucket is about game fairness and platform integrity, and KUNAISA expects it documented at application rather than promised.
| Area | Requirement | Notes |
|---|---|---|
| Platform architecture | Documented platform architecture and hosting | How the platform, payments and support are organised |
| Cybersecurity | Cybersecurity controls documented at application | Encryption, secure connections, backups, access control |
| Game fairness | RNG/RTP certification for proprietary games | Third-party games rely on the studio’s testing + integration agreements |
| Team & technology | Details of the team and technology stack | Who builds and runs the platform, and on what |
| Data protection | Secure handling of player and financial data | Industry-standard controls across the stack |
If you run proprietary games, they must carry RNG/RTP certification from a recognised independent lab — game fairness has to be demonstrable, not asserted. If you integrate games from already-tested studios, you supply the integration agreements and rely on their certification. What KUNAISA will not accept is uncertified games with no documented provenance.
Around the games, the authority wants a clear picture of the platform itself: documented platform architecture and hosting, cybersecurity documentation describing your encryption, secure connections, backups and access controls, and details of the team and technology — who builds and operates the platform and on what stack. These are conventional expectations, but they must be written down and consistent with the operating model in your business plan.
Payments, VASP and forex under one authority
One requirement most guides omit is that KUNAISA is a one-stop authority. Alongside the iGaming licence it also issues payments, VASP and forex authorisations — so an operator running a wallet, an exchange or an FX product alongside the casino can hold the related permits under the same regulator instead of stitching them together across jurisdictions. That does not lighten the iGaming requirements above, but it does mean a multi-vertical file is planned as one structure from the outset.
The payment stack that sits around the licence follows the same rules as any high-risk operation. Mainstream consumer processors — the Wise, Stripe and PayPal tier — prohibit gambling, so the operating accounts run through an EMI or neobank, and where a gambling payment agent is used it is incorporated in Cyprus. If you are weighing KUNAISA against Panama’s national regulator, our KUNAISA vs Panama JCJ comparison sets the light, four-week route against the credible-but-heavier JCJ licence with its local company and 10% GGR tax.
Assembling the file in the right order
Requirements are one thing; sequence is another. The order that avoids rework is: incorporate the Costa Rica applicant company first, assemble the corporate pack and director files in parallel, draft the AML/KYC and responsible-gaming policies against the actual operating model, gather source-of-funds evidence for the owners early because it is the slowest item to resolve, then finalise the platform, cybersecurity and game-certification documentation before submission.
Filing with gaps — a missing source-of-funds letter, an uncertified game, a policy written for a different product — is what turns a four-week approval into a longer one. None of it requires a Panama company, and none of it requires setting foot on the territory; what it requires is a complete, internally consistent file that satisfies all three buckets at once.
Ready to assemble your file, or want a second opinion on documents you have already prepared? Our team handles the full KUNAISA requirements pack end to end and will review any file against the authority’s expectations before you submit. Book a free consultation and we will tell you exactly what is missing.
Frequently asked questions
What are the KUNAISA gaming license requirements?
They fall into three buckets. Corporate: articles of incorporation, a clear ownership and control structure, director ID and references, and financial documentation. Compliance: AML/KYC policies, responsible-gaming policies, fit-and-proper ownership and management, and source-of-funds evidence. Technical: platform architecture and cybersecurity documentation, RNG/RTP certification for proprietary games, and details of your team and technology.
Do I need a company in Panama for a KUNAISA licence?
No. KUNAISA is a sovereign-territory authority and the substance requirement is lighter than Panama's national JCJ route — there is no need for a local Panama company, office or three directors. The applicant company is set up in Costa Rica and the whole file is handled remotely, which is a large part of why the licence issues in roughly four weeks.
Is RNG/RTP certification mandatory?
For proprietary games, yes — you supply RNG/RTP certification proving the games are fair before the licence issues. If you integrate games from already-tested third-party studios, you rely on their certification and provide the integration agreements instead. Either way, KUNAISA expects documented game fairness rather than an assurance that the maths is sound.
What financial documentation does KUNAISA expect?
Financial documentation means audited statements or proof of minimum capital for the applying entity, plus source-of-funds evidence for the beneficial owners. The point is to show the operation is properly funded and that the money behind it is clean. Weak or missing source-of-funds files are one of the most common reasons a due-diligence review stalls.
Can KUNAISA also license my payments or crypto?
Yes. KUNAISA is a one-stop authority: alongside the iGaming licence it issues payments, VASP and forex authorisations. If you run casino or betting alongside a wallet, exchange or FX product, you can hold the related authorisations under the same regulator rather than assembling permits across several jurisdictions — a real reason multi-vertical operators choose it.
How current do my AML/KYC policies have to be?
They must be real, operable documents mapped to your actual products — not template filler — and you carry an ongoing duty to run the programme you filed. After issuance you keep AML/KYC and responsible-gaming policies documented and up to date, report to KUNAISA and notify material changes. A dedicated compliance function is strongly advised for anything beyond a single small brand.
Sources
This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.
Licence, done right.
300+ licences obtained across 40+ jurisdictions. Book a free consultation.
Book a free consultation