Published: May 26, 2026 · Last verified: May 26, 2026
18+ only. Online gambling is restricted to adults. If gambling stops being fun, talk to BeGambleAware or GamCare.
The verdict in 75 words
LeoVegas Gaming plc holds MGA licence MGA/CRP/237/2013 (verified on the Malta register), UKGC operating account 39198, Spelinspektionen Sweden, DGOJ Spain, Spillemyndigheden Denmark, and ADM Italy. Wholly owned by MGM Resorts International since September 2022 (acquisition completed at approximately $607 million). 1,900+ employees, founded 2011. Two Swedish duty-of-care fines: SEK 2m in 2021 (AML), SEK 8m in March 2025. UK £600k 2021. No crypto. Cautious yes for tier-one regulated-market players. This review follows our casino-testing methodology.

We verified MGA/CRP/237/2013 on the MGA Licensee Register (direct verification page returns LeoVegas Gaming plc, Type 1+2+3, current version issued 1 August 2018), confirmed UKGC operating account 39198 on the UKGC public register, cross-checked the Apple App Store developer entity "LeoVegas Gaming plc," and pulled Spelinspektionen enforcement notices for the two duty-of-care penalties from trade-press reporting (iGB, SBC News, gamblingnews.com). No Have I Been Pwned breach record.
Licensing is genuinely multi-regulator, with a Swedish friction pattern
The licence portfolio is the strongest single point. MGA/CRP/237/2013 is a corporate group licence held by LeoVegas Gaming plc (Malta company C59314), registered at Level 7, The Plaza Business Centre, Bisazza Street, Sliema. Type 1 (casino), Type 2 (sports), Type 3 (peer-to-peer) authorisations all active. The MGA verification page returns the licence as fully active on 26 May 2026.
The UK presence runs under the same Maltese operator entity at UKGC account 39198, licence reference 039198-R-319450-021. The register's head office on file matches the Maltese registration. Status active, with no current sanctions surfaced on the public register (the £600k 2021 fine is historical and does not appear on the current sanctions tab).
Sweden's Spelinspektionen granted an initial five-year licence in October 2019. That licence is where most of the editorial complication sits: two duty-of-care penalties since the start of regulated trading, both documented and both material.
| Jurisdiction | Status | Player accessible? | Notes |
|---|---|---|---|
| EN global (UK) | UKGC 39198 — LeoVegas Gaming plc | Yes for UK | No current sanctions on UKGC register; historical £600k fine 2021 |
| Malta / MGA / ROW | MGA/CRP/237/2013 — LeoVegas Gaming plc | Yes most regulated markets | Type 1+2+3 authorisations active |
| Sweden (Spelinspektionen) | Active since October 2019 | Yes for SE residents (Spelpaus framework) | SEK 2m AML fine 2021 + SEK 8m duty-of-care penalty March 2025 |
| Spain (DGOJ) | Active since 2019 | Yes via leovegas.es | Separate Spanish operator surface |
| Denmark (Spillemyndigheden) | Active — LeoVegas Gaming plc | Yes | Spillemyndigheden licence-holder page confirms |
| Italy (ADM) | Active (legacy via Winga acquisition 2017 + LeoVegas branded) | Yes | Italian surface separate |
| Ireland (Revenue Commissioners) | Remote bookmakers licence ref. 1012453 issued 1 July 2025 | Yes | New 2025 addition |
| Ontario (AGCO Canada) | Via BetMGM partnership | Yes for ON residents | Through MGM Resorts JV |
| France (ANJ) | Not offered; ANJ does not regulate online casino at all | No | Structural |
| United States | Restricted on.com | No on.com | MGM Resorts has separate US-state product (BetMGM) |
| Russia / CIS | Restricted | No | Not in footprint |
MGM Resorts International (NYSE: MGM) acquired LeoVegas AB by 7 September 2022 at approximately $607 million. The Swedish parent LeoVegas AB delisted from Nasdaq Stockholm post-acquisition. LeoVegas now operates as MGM Resorts International's international online gaming arm, with revenue consolidated into MGM Resorts segment reporting (last standalone disclosure was €327.8m before acquisition). The MGM relationship is the structural reason BetMGM (the US-state product) and BetMGM UK exist as separate operations: BetMGM UK in the United Kingdom runs under the LeoVegas Gaming plc UKGC licence at the same account 39198; BetMGM US is BetMGM LLC, a separate corporate entity in MGM Resorts' US JV with Entain. They share branding and not much else.
Sub-brand portfolio under the same MGA licence: Royal Panda (acquired October 2017 for €60m), Winga (Italian ADM surface, March 2017 for €6m), Expekt (sportsbook brand, May 2021 for €5m), Pink Casino, BetUK, and Rocket X / 21.co.uk. The whole portfolio runs from the same operator entity and the same Apple App Store developer string. The CEO is Mattias Wedar; co-founder Gustaf Hagman led the company through the MGM acquisition and exit.
The welcome bonus, and the math that matters
The ROW casino-track headline runs 100% match up to €100 plus 50 to 200 free spins on the first deposit. Minimum qualifying deposit is €10. Wagering attaches at 35× on bonus funds and 35× on free-spin winnings. Validity: 30 days from activation. Free-spin winnings cashout typically capped at €100.

Here is what €100 looks like in practice. The bonus tops your balance to €200, plus 50 free-spin entries. Wagering = €100 × 35 = €3,500 turnover before bonus winnings clear to cash. Free-spin winnings = €X × 35 wagering before withdrawable. At a €1 average spin the bonus wagering is 3,500 spins over 30 days, about 117 spins per day.
The Swedish surface (leovegas.se / Roar Vegas) operates under Spelpaus framework rules: one welcome bonus per operator per customer across the operator's brand portfolio, with reduced promotional generosity overall. The UK surface follows UKGC LCCP 2025 rules: strict wagering caps, no max-win trickery on welcome offers. The DK and IT surfaces have their own regulator-specific bonus caps. The pattern across all regulated surfaces: smaller headline figures than offshore Curaçao competitors, with regulator-mandated transparency.
Payments cover cards, e-wallets, bank rails — no crypto
The cashier is broad on regulated fiat and silent on cryptocurrency. None of MGA, UKGC, Spelinspektionen, DGOJ, Spillemyndigheden, or ADM permit crypto on-ramps for licensed casino products.
Cards: Visa, Mastercard, Maestro (UK). E-wallets: PayPal (UK, ES, DK), Skrill, Neteller, MuchBetter, AstroPay. Bank: Trustly Pay-N-Play (Sweden), bank wire. Vouchers: Paysafecard. Local rails per surface: Trustly Pay-N-Play and Swish for Sweden; Bizum for Spain (via leovegas.es); MobilePay for Denmark. Minimum deposit: €10. Stated withdrawal times: e-wallets typically inside 24 hours, cards 1 to 3 business days, bank transfer 2 to 5 business days. UK and Scandinavian rails generally faster than the ROW baseline.
The "King of Mobile Casino" branding is structural to the product. LeoVegas was the first major operator to make mobile the primary surface, and the mobile experience remains the centre of gravity. Cashier flows are optimised for mobile-first deposit and withdrawal.
Withdrawal reality: what actually happens at cashout
The published timing is broadly accurate on the regulated surfaces. UK e-wallet withdrawals routinely clear within hours. Swedish Trustly Pay-N-Play is real-time both ways. Danish MobilePay clears inside 24 hours.

The ROW (leovegas.com international) surface is where reports diverge. Trustpilot signals show slower KYC completion for ROW users than for UK or SE users — the latter benefit from BankID and other instant-verification rails, the former go through standard manual document review. Withdrawal-stage KYC friction is documented on Trustpilot but at a lower volume than for sportsbook-led offshore competitors.
The same-method rule applies on every surface. First withdrawal returns to the deposit method, which catches players who deposited via Visa and request a payout to Skrill or back to their bank.
KYC: registration-time in regulated markets, withdrawal-time on ROW
In UKGC United Kingdom, KYC runs at registration with age verification and documentation on file. In Spelinspektionen Sweden, BankID identity verification at registration is mandatory. In DGOJ Spain, Spanish DNI cross-references the national gambling self-exclusion register (RGIAJ) at the cashier door. In Spillemyndigheden Denmark, MitID verification at registration.

On the ROW surface (international .com), KYC triggers at the first withdrawal request rather than at registration. Standard documents: government ID (passport or national card), proof of address dated within 90 days, selfie holding the ID. Enhanced source-of-funds documentation kicks in above an internal threshold LeoVegas does not publish.
The Swedish duty-of-care pattern. This is the most material editorial fact in the LeoVegas record. Spelinspektionen has now twice flagged LeoVegas for failing to intervene early enough with at-risk customers: SEK 2 million in 2021 (AML failings on 15 high-stakes customers from the first year of regulated trading) and SEK 8 million in March 2025 (duty-of-care failures across 3 of 12 sampled customers, trading via the "Roar Vegas" surface). Two separate Spelinspektionen actions, four years apart, suggesting the social-responsibility processes have not caught up with the regulator's expectations. Plan accordingly: set deposit limits at registration if you have any concern about play patterns.
Games and providers: tier-one studios, Evolution-led live casino
The catalogue runs approximately 3,500 titles on the ROW surface, with provider availability varying by GEO and regulator approval list. Major studios: Pragmatic Play, Play'n GO, NetEnt, Microgaming, Yggdrasil, Evolution (live), Red Tiger, Big Time Gaming (Megaways), NoLimit City, ELK Studios, Hacksaw Gaming, Push Gaming, Quickspin. Approximately 70+ providers integrated.
Live casino is Evolution-led: the full Evolution game-show suite (Crazy Time, Lightning Roulette, Monopoly Live, Funky Time), full table-rail blackjack and roulette, branded VIP studios. Pragmatic Play Live, Ezugi, and Authentic Gaming add depth. Single-provider concentration: heavy reliance on Evolution for live casino means that if you specifically want Playtech live or a non-Evolution dealer experience, LeoVegas will not have it. This is structural to the LeoVegas product strategy rather than an oversight.
Mobile: the original mobile-first operator, Apple developer verified
The iOS App Store lists the "LeoVegas" app with developer "LeoVegas Gaming plc" — same Maltese operator entity that holds the MGA licence and the UKGC account. Apple verifies developer identity before distribution, so the publisher string is third-party cross-confirmation of the operator entity. Available in UK, IE, SE, DK, DE, IT, ES, plus other regulated GEOs.
Android distribution through Google Play in regulated markets. The mobile-first product identity is real and structurally distinct from competitors who treat mobile as a port of the desktop product. The progressive web app on mobile browsers covers the full game library with no install required.
Complaints and reputation: the Swedish pattern matters
Five data layers on LeoVegas. The most material is the Swedish duty-of-care pattern.
Casinomeister Warnings forum: not listed as of 26 May 2026. No formal independent watchdog action.
Spelinspektionen Sweden: SEK 2 million fine plus warning in 2021 for AML failings across 15 high-stakes customers in the operator's first year of regulated Swedish trading (2019). SEK 8 million penalty plus warning in March 2025 for duty-of-care failures across 3 of 12 sampled customers, trading via the "Roar Vegas" surface (LeoVegas-branded Spelpaus product). Two separate enforcement events, four years apart. The pattern matters more than either fine in isolation.
UKGC United Kingdom: £600,000 fine in 2021 for misleading advertising and customer mistreatment during self-exclusion processes. The fine is historical and does not surface on the current UKGC sanctions tab, but is documented on Wikipedia and in trade-press reporting. Combined with the Swedish pattern, this is a third social-responsibility enforcement event in five years across two regulators.
Trustpilot: mixed sentiment. UK and Swedish users generally positive (instant local rails, BankID/MitID/Faster Payments). ROW users report slower KYC verification.
Have I Been Pwned: no breach record for any LeoVegas domain as of 26 May 2026. MGM Resorts International had a high-profile US-side cybersecurity incident in September 2023 (Scattered Spider ransomware), but the LeoVegas international product was not affected and the LeoVegas systems run on separate infrastructure.
What works and what does not
Pros
- MGA group licence MGA/CRP/237/2013 verified on the Malta register with Type 1+2+3 authorisations active; UKGC account 39198 confirmed with no current sanctions; Spelinspektionen, DGOJ Spain, Spillemyndigheden, ADM Italy, plus Irish Revenue 2025
- Wholly owned by MGM Resorts International (NYSE: MGM) since September 2022 — operator parent is a publicly listed US gaming major with audited financials
- Apple App Store developer "LeoVegas Gaming plc" verifies operator entity across the brand portfolio (Royal Panda, Expekt, Pink Casino, BetUK)
- Industry-leading mobile-first product design — "King of Mobile Casino" branding is structurally accurate
- ~3,500 games from 70+ providers; full Evolution live-casino suite; tier-one studio lineup
Cons
- Two Spelinspektionen duty-of-care fines (SEK 2m AML 2021 + SEK 8m March 2025) within four years suggest social-responsibility processes have not caught up with the Swedish regulator's expectations
- UKGC £600k fine 2021 for self-exclusion mistreatment — historical, but combined with the Swedish record is a pattern across two regulators
- No cryptocurrency rails anywhere in the regulated portfolio (structural under MGA/UKGC/Spelinspektionen/DGOJ/Spillemyndigheden/ADM)
- No France — francophone Europe cut off; ANJ does not license online casino at all
- Single-provider concentration on live casino — heavy Evolution dependence; if you want Playtech live, LeoVegas does not offer it
- Welcome bonuses comparatively modest vs. Offshore competitors (35× wagering, €100 ceiling on the ROW casino track), structurally regulator-capped
Verdict: who LeoVegas is for, and who should pass
For: UK residents on the UKGC product. Swedish residents who already have deposit limits set on Spelpaus. Spanish residents using leovegas.es. Danish residents using the Spillemyndigheden surface. Italian, Irish, and Ontario residents on their respective local surfaces. ROW players who want a publicly listed parent (MGM Resorts International), an MGA group licence with a verifiable number, and an Apple developer entity that cross-confirms ownership. Mobile-first players who actively want the mobile UX as primary surface.
Against: crypto-native players (zero crypto rails). US residents on the.com surface (BetMGM US is a separate product). French residents (online casino not legal under ANJ regardless of operator). Players who want Playtech live or alternative dealer studios (Evolution monopoly within LeoVegas). Players who have already had a friction experience with another regulator-flagged duty-of-care operator and want a cleaner social-responsibility record (the Swedish 2025 fine is recent).
If the priorities are tier-one regulator coverage, NYSE-listed parent, and verifiable Maltese operator entity, LeoVegas is competitive with Betsson and Betano in this set. If the priority is a clean social-responsibility record, the Swedish duty-of-care pattern is a documented friction that Betsson and Betano do not carry.
Play responsibly
If you feel your gambling is becoming a problem, set deposit and session limits inside LeoVegas (Account → Limits), self-exclude through the cashier, or contact these free, confidential services:
- BeGambleAware — 0808 8020 133 (UK)
- GamCare, UK-based, confidential helpline and chat
- Gambling Therapy: international, multilingual