iGaming Payment Solutions

Card networks classify online gambling as high-risk (MCC 7995). That means higher chargeback exposure, regulatory complexity across jurisdictions, and reputational risk for the acquiring bank. Stripe, Square and standard e-commerce processors won’t onboard you. PayPal will shut you down mid-transaction if they detect gambling activity. To process iGaming payments you need a provider with dedicated high-risk acquiring relationships, gambling-specific compliance infrastructure, and experience navigating MGA, UKGC, or Kahnawake requirements. That’s why iGaming-specialized PSPs exist as a separate market.

A rolling reserve means your payment provider holds 5-10% of every transaction for 90-180 days before releasing it to you. It’s their insurance against chargebacks and fraud. At €1M monthly volume with a 10% reserve and 180-day hold, that’s €600K of your money sitting in their account earning them interest. Every iGaming PSP requires one because chargeback rates in gambling run 2-4x higher than e-commerce. The percentage and hold period are negotiable once you build processing history. New operators get the worst terms. After 6-12 months of clean processing, push to renegotiate.

Card acquiring runs 2.5-4.5% per transaction depending on your volume, chargeback history, and how badly the acquirer wants iGaming merchants that month. Open banking through Trustly or Brite costs 0.3-1.0% with no chargebacks. Crypto gateways charge 0.5-1.0% with instant settlement. On top of processing fees, budget for setup costs (€0-5,000), monthly minimums (€500-2,000 at some providers), rolling reserves (5-10% held for months), and currency conversion markup (1-3% above mid-market rate). The cheapest payment method is almost never the one your players prefer, so cost optimization means offering multiple methods and routing each transaction to the cheapest rail that works.

A PSP (Payment Service Provider) processes your transactions. They have the acquiring bank relationship, they take on risk, they move money from the player’s account to yours. Nuvei, Worldpay, Paysafe are PSPs. A gateway is a connection layer that sends transaction data between your platform and a processor but doesn’t process anything itself. An orchestrator sits on top of multiple PSPs and routes each transaction to the one most likely to approve it based on region, card type, amount, and historical success rates. IXOPAY, Corefy, Primer are orchestrators. You always need at least one PSP. You need an orchestrator when you’re running multiple PSPs and want to optimize approval rates across them.

iGaming chargeback rates typically run 1.5-3.0%. Visa’s VAMP threshold (it replaced VDMP in April 2025) is 1.5% combined fraud-plus-disputes in North America, Europe and APAC from April 2026, at $8 per disputed transaction; Mastercard’s ECM trips at 1.5% plus 100 chargebacks, with monthly fines that start around $1K and escalate. Three things actually move the needle. First, use clear billing descriptors so players recognize the charge on their statement and don’t file a dispute by mistake. Second, implement velocity checks and deposit limits to catch problem gambling behavior before it turns into “I didn’t authorize this” disputes. Third, use providers with built-in chargeback prevention tools like Verifi or Ethoca alerts, which let you refund a transaction before it becomes a formal chargeback. Open banking and crypto eliminate card chargebacks entirely because there’s no card network to dispute through.

They hold your rolling reserve for the full contract period (usually 90-180 days after termination), deduct any pending chargebacks and fines, and release what’s left. Some providers have been known to stretch this process or dispute the final amount. You have very little leverage once they’ve decided to terminate. The contract you signed dictates everything. Before signing with any provider, read the termination clause. Specifically: how much notice they give you, how long they hold funds after termination, whether they can freeze your account before formal termination, and what counts as a breach on your side. The best protection is processing through at least two PSPs so a single termination doesn’t shut down your entire deposit flow overnight.

PCI DSS Level 1 is the baseline. Every provider handling card data needs it. Beyond that, look for payment institution licenses from regulators in your target markets. FCA authorization matters for UK operations. In the EU, authorization comes from national competent authorities (BaFin in Germany, DNB in the Netherlands, the CSSF in Luxembourg) with EEA passporting on top. MAS licensing covers Singapore and parts of Asia. For crypto providers, MiCA compliance is becoming the European standard since 2025. The provider’s license determines which markets they can legally process in and what level of regulatory protection you have if something goes wrong. A provider without proper licensing in your target jurisdiction puts your own gambling license at risk. Check the regulator’s public registry directly. Don’t take the provider’s word for it.

Start with one PSP that covers your primary market. Add a second PSP when you expand to a region your first one doesn’t cover well. Once you’re running two or more PSPs, add an orchestrator to route transactions between them automatically. Layer in open banking for European markets where card conversion is dropping post-PSD2. Add a crypto gateway if your player base demands it. Add a LATAM specialist like AstroPay or PayRetailers when you enter Brazil or Mexico because your global PSP will not clear local methods there. The mistake operators make is trying to build this stack on day one. Start lean, add layers when you hit the specific problem each layer solves, and make sure every new integration goes through your orchestrator so you’re not managing five separate dashboards.