All 171 Brazilian standards,
organised by theme

Decree-Law 9.215 of 30 April 1946 banned games of chance across Brazil and shut the licensed casino sector that had existed under Decreto-Lei 6.259/1944. The 1946 prohibition has never been formally repealed and continues to outlaw land-based casinos, bingo and similar games; the modern federal regime only authorises specific lottery modalities.

Law 14.790 of 29 December 2023 is the primary statute for online sports betting and online gaming in Brazil. It amends Lei 13.756/2018, vests the Ministry of Finance with authorisation, supervision and sanctioning power and sets out player rights, prohibited bettors, taxation, integrity duties and the sanctions ladder.

In September 2020 the STF judged ADPFs 492 and 493 together with ADI 4.986 and held that the Union's exclusive competence under article 22 of the Constitution covers legislating on lotteries, but not the material exploitation of them. The decision allowed states to operate their own lottery services within their territory, opening the door to state betting permissions parallel to the federal regime.

The Procuradoria-Geral da República filed an action at the STF challenging aspects of Lei 14.790, focused on the alleged failure of the statute to safeguard low-income bettors and adequately limit advertising. The action is pending and may force amendments or stricter implementing rules.

Resolution 5.298 of the National Monetary Council, in force from 4 May 2026, prohibits derivative contracts whose underlying is a sports event, online game, election or any political, social, cultural or entertainment event. Derivative contracts may only reference economic-financial variables. SPA/MF and the Ministry of Finance treat prediction-market platforms as fixed-odds betting subject to Lei 14.790.

Portaria Mesp nº 36 of 17 April 2025, issued by the Ministério do Esporte under article 5 of Law 14.790/2023, updates the list of sports modalities that may receive fixed-odds bets in Brazil. The instrument adds and removes specific competitions, codifies the criterion of organised competition with a recognised governing body and clarifies the interface with SPA on event-integrity monitoring.

Resolução CMN nº 5.298 of 24 April 2026 sets the parameters of the Brazilian derivatives market and expressly prohibits offering or trading derivative contracts whose underlying is a sports event, an online game, a political, electoral, social, cultural or entertainment event that is not representative of an economic or financial benchmark. The rule came into force on 4 May 2026 and forms the legal basis on which the CVM, the CMN and SPA blocked Polymarket, Kalshi and twenty-five further prediction-market sites at the end of April 2026.

Article 5 conditions the commercial exploitation of fixed-odds betting on a federal authorisation granted by the Ministry of Finance through SPA/MF. The authorisation is non-transferable, attaches to a specific corporate entity and may not be sublet or franchised.

Article 6 limits authorisation to legal entities incorporated under Brazilian law with headquarters and administration in Brazil. At least 20% of the share capital must be held by a Brazilian-resident partner.

Lei 14.790/2023 art. 7 (VII-VIII) requires authorised operators to maintain minimum integralised share capital of R$ 30 million and minimum net equity of R$ 30 million, plus a technical reserve dedicated to player liabilities and operational continuity. Reserves must be reconstituted whenever drawn down, under parameters set by SPA/MF regulation.

Directors, de facto managers and qualifying shareholders must demonstrate honourability, technical competence and absence of disqualifying convictions. Administrators must show at least three years' professional experience in gaming, betting or lotteries, or compatible academic qualifications.

Portaria SPA/MF nº 754 of 8 April 2025 extends by 90 days the deadline for authorised fixed-odds operators that previously expressed interest in forming associations to centralise payment of image rights to athletes and sports entities. The Portaria allows operators to provision the corresponding resources during the extended window and clarifies the interface with Portaria 1.231/2024 article 56 on athlete-image use in advertising.

The Ministry of Finance maintains a live register of every legal entity holding a Despacho Autorizativo SPA/MF, updated as Despachos are published in the Diário Oficial da União. The 13 May 2026 cut lists approximately 85 administratively authorised entities; including operators running under judicial determination, the universe of active .bet.br brands sits at around 187. The register publishes the Portaria number, razão social, CNPJ, commercial brands and .bet.br domains for each entity.

Article 8 requires full and accurate registration of every bettor before any wager is accepted. Mandatory fields include full name, date of birth, CPF, residential address, contact data and a payment account held in the bettor's own name.

Article 9 limits each bettor to a single active account per authorised brand. Operators must reconcile registration data centrally to detect and close duplicates.

Portaria 722 requires facial-biometric verification with liveness detection at account opening, before the first deposit may be processed. The biometric template must be retained and used for ongoing re-authentication.

Portaria SPA/MF 722/2024 requires multifactor and biometric re-authentication of the bettor at defined intervals and after extended inactivity, as well as at registration-data changes and at cash-out events meeting risk-based thresholds. The cited art. 8 instead governs the 90-day post-authorisation technical certification report, so the obligation is mapped to the authentication provisions of the same Portaria (art. 6 area on identity verification / authentication controls).

Identity verification at account opening must include a real-time CPF validity and name-match check against Receita Federal data. Accounts opened with invalid, suspended or third-party CPFs must be refused or closed.

The platform must detect and block VPN, remote-desktop, virtualisation and rootkit tools that mask bettor geolocation. Detection must occur and the bet must be refused before settlement.

Article 26 prohibits a series of categories from betting: minors under 18, persons declared judicially incapable, owners and qualifying staff of the operator, public officials with regulatory duties over the sector and persons listed on the centralised self-exclusion register. Operators must implement controls to detect and refuse prohibited bettors.

Article 27 prohibits athletes, coaches, referees and other integrity stakeholders from betting on competitions in which they participate or have privileged information. Operators must implement screening against confederations' lists.

Article 22 requires the operator to implement procedures to identify suspicious accounts; patterns such as duplicate biometric matches across different CPFs, coordinated transaction patterns or shared devices. Suspicious accounts must be reviewed and, where confirmed, closed.

Operators must publish a bettor contract / terms of use in Portuguese covering registration, deposits and withdrawals, RG controls, complaints, bonuses and dispute resolution. Material changes require advance notice and an option to close the account without penalty.

Operators must maintain a bettor-account ledger that records every credit, debit, bet, win, bonus and adjustment. The ledger must reconcile to the bettor-funds account at all times and be available for SPA/MF inspection.

Article 5 obliges every operator to adopt a formal responsible-gambling policy covering risk identification, monitoring, customer interaction, training, governance and reporting. The policy must be approved by the board, reviewed annually and published in summary form on the operator's website.

Article 9 requires operators to offer prudential limits on deposit value, loss value, time spent and session length at the moment of registration. Limits must be configurable by the bettor and must be effective in real time.

Increases to deposit, loss or time limits take effect only after a cooling-off period. Decreases take effect immediately. Operators must record the bettor's choice and the timing of each limit change.

Operators must deliver periodic reality-check messages displaying elapsed session time and net win or loss, with bettor acknowledgement required before continuing play, as part of the mandatory responsible-gaming educational and preventive measures.

Operators must monitor each bettor for harm markers (rapid stake escalation, chasing losses, prolonged sessions, deposit-decline patterns, age-of-account vs spend) and trigger a documented customer-interaction protocol when thresholds are reached.

Operators must conduct educational campaigns warning bettors against chasing losses and must not deploy bonuses, free bets, or messaging that encourages a losing bettor to continue playing.

Bettors must be able to suspend their account immediately (take-a-break) for periods between 24 hours and six months without contacting customer service. A one-click access path must be present in the bettor account.

All customer-facing and risk staff must complete responsible-gambling training before going live and refresh it annually. Training records must be retained for SPA/MF inspection.

The bettor portal must provide each bettor with real-time, downloadable access to their deposits, withdrawals, stakes, winnings and net losses over rolling periods, in a machine-readable format.

Operators must conduct educational campaigns on responsible gambling and prominently display the public helpline / problem-gambling support contact across bet.br touchpoints, including footer placement and customer-interaction messaging.

Operators must file an annual responsible-gambling report with SPA/MF summarising harm-marker performance, intervention volumes, self-exclusion uptake and helpline referrals. The report must be retained for at least five years.

Instrução Normativa SPA/MF nº 22 of 30 September 2025 sets the procedure operators must follow to prevent registration or use of betting systems by beneficiaries of the Bolsa Família Programme and the Benefício de Prestação Continuada (BPC). Operators must query the Bolsa Família and BPC base inside SIGAP at registration and every fifteen days for the entire active user base, and block any positive match.

Instrução Normativa SPA/MF nº 24 of 29 October 2025 amends IN 22/2025 by extending the implementation deadline by thirty days. Operators that had not yet wired their systems to the SIGAP query for Bolsa Família and BPC beneficiaries received additional time to complete the integration, after representations that the API specification had only stabilised in mid-October.

On 13 November 2024 Min. Luiz Fux, rapporteur of ADIs 7.721 (proposed by CNC) and 7.723 (proposed by Solidariedade), granted a partial cautelar determining the immediate application of measures preventing participation in fixed-odds betting with resources originating in social and welfare programmes such as Bolsa Família. The cautionary order remained in force throughout 2025 and the merit judgment was pending as of May 2026. The decision is the direct trigger for Portaria 1.231/2024 article 14, for IN SPA/MF 22/2025 and for the SISCOAF reporting practice on welfare-funded flows.

Article 9 of Lei 14.790/2023, in its parágrafo único, establishes the statutory obligation that operators make self-exclusion available to bettors and honour exclusions registered with other authorised operators. This is the legal anchor for the centralised cross-operator self-exclusion register subsequently implemented by SPA/MF.

Operator-specific (autoexclusão específica) self-exclusion blocks the bettor from the operator's platform only. The bettor can choose a fixed term or an indefinite term; reactivation requires an explicit request after a minimum reflection period.

Portaria SPA/MF 2.579/2025 establishes the centralised self-exclusion register (autoexclusão centralizada). Once a CPF is listed, the bettor is blocked from every authorised operator in Brazil. Operators must consume the register in real time and refuse account opening or login for any listed CPF.

Every login and every bet acceptance must include a real-time check against the centralised register. Cached or stale data is not acceptable; the system must fail safe if the register is unreachable.

Reactivation from a fixed-term self-exclusion requires an explicit request from the bettor after the term has elapsed plus a regulator-defined reflection period. Indefinite-term self-exclusion may only be lifted on a documented request with at least the same reflection period.

Operators must suppress all marketing, bonus offers, push notifications and email contact directed at self-excluded bettors for the duration of the exclusion, including by ceasing prohibited advertising directed to vulnerable persons.

Portaria SPA/MF 2.579/2025 amended the RG rules to require operators to implement mandatory prudential autolimits on time and value at the moment of registration. Operators had 90 days from publication to adapt their registration flows.

When a bettor self-excludes, the operator must return all available balance promptly via the registered payment account, net of any pending settled obligations. Pending wagers settle in the normal way; new wagers are refused.

Portaria SPA/MF nº 2.579 of 7 November 2025 amends Portaria 1.231/2024 and creates two parallel mechanisms. The first is a centralised self-exclusion register, operated by Serpro and integrated to SIGAP, which blocks an excluded user from every authorised operator simultaneously; operator-specific self-exclusion continues to coexist. The second is a mandatory prudential autolimit set at account opening, covering time spent, total stake, number of bets per period, session alerts and pause windows.

Instrução Normativa SPA/MF nº 31 of 7 November 2025 sets the operational procedure for the centralised self-exclusion register created by Portaria 2.579/2025. It defines the API contract with Serpro, the matching logic, the deadlines for inbound and outbound synchronisation, the user-facing communications and the audit-log retention rules.

Article 22 sets the principles: social responsibility, protection of minors, transparency, prohibition of suggestions of easy enrichment, mandatory responsible-gambling messaging. Every advertising or marketing action by the operator or its affiliates is attributable to the operator.

Article 23 requires every commercial communication to display the 18+ restriction and a responsible-gambling warning. The warning must be visible and audible in audiovisual content.

Article 24 prohibits content directed at children or adolescents, the use of child or adolescent images and any element particularly appealing to under-18s. It also prohibits suggesting that betting is a means of easy enrichment, financial independence or social belonging.

Talent featured in betting advertising must be at least 21 years old and must appear to be at least 21. Active athletes, coaches and referees may not endorse betting operators, and celebrities may not present betting as part of an everyday lifestyle.

Operators are jointly and severally liable for advertising and promotional conduct carried out by influencers, affiliates and other third parties acting in their commercial interest. The Portaria defines affiliates broadly to capture any third party compensated by reference to traffic, registrations or revenue generated for the operator.

Promotional bonuses, free bets and welcome offers must be presented with complete and prominent terms (wagering requirements, expiry, eligibility and withdrawal conditions). Advertising may not obscure these conditions and the grant of a bonus may not be conditioned on the bettor's acceptance of marketing communications.

Betting advertising on broadcast and audiovisual media is restricted from programming targeted at minors and within scheduling windows defined by the regulator. Advertising on platforms with a predominantly under-18 audience is prohibited.

Operators may not sponsor children's or adolescents' teams, junior categories, or events directed at minors. Sponsorship of senior competitions remains subject to the responsible-gambling and advertising principles set out elsewhere in the Portaria.

Authorised operators must monitor and act against unauthorised use of their brand by illegal sites, including misleading imitations and affiliate links that direct to non-bet.br destinations.

Every betting commercial communication must include a responsible-gambling message in clear language. The message must be displayed for a regulator-defined minimum duration in audiovisual content and be legible in static formats.

The Brazilian advertising self-regulatory body CONAR adopted Anexo X to its code in 2023 specifically for betting. It mirrors and complements Lei 14.790 and the Portarias and is the basis for CONAR's complaint-driven enforcement.

Article 4 requires every electronic channel offering authorised betting in Brazil to use a domain under the .bet.br second-level domain. The use of .com, .com.br or any other domain for the authorised activity is prohibited.

The betting system and bettor data must be hosted in data centres located in Brazil. Hosting outside Brazil is exceptionally permitted only in countries with bilateral civil and criminal cooperation treaties with Brazil and only where LGPD obligations are observed.

Every bet placed, every account event and every administrator action must be recorded in an immutable, time-synchronised audit log. The log must be retained for at least five years and made available to SPA/MF on demand.

Operators must feed the SIGAP (Sistema de Gestão de Apostas) regulatory data system in near real time with bet, account and integrity data. The feed must meet SPA/MF technical specifications and be available 24/7.

Material changes to the betting system, RNG, payment integration or RG controls require a documented change-management process and re-certification by an accredited laboratory before deployment.

Information-security incidents that affect bettor data, bettor funds or system integrity must be notified to SPA/MF promptly with a documented incident report. ANPD notification under LGPD remains required in parallel.

The Lei Geral de Proteção de Dados applies in full to bettor data. Lawful bases, minimisation, retention, data-subject rights, breach notification and international-transfer rules apply alongside Portaria 722.

Under Portaria SPA/MF 722/2024 art. 30 and the SIGAP Manual de Envio e Validação dos Dados (rev. 03), each authorised operator must transmit three daily files (operator aggregate, sports bets per bettor, online-game bets per bettor) within six hours of the start of the day following the reference day, plus a monthly legal-obligations file. SIGAP is operated by Serpro for SPA/MF.

Portaria Normativa 300 of 23 February 2024 sets the procedure for recognising the operational capacity of certification laboratories for betting systems, live game studios and online games. Only labs recognised by SPA/MF may issue certifications used in the authorisation regime.

Every online game, live studio, RNG instance and material variant must be certified by an accredited laboratory, with re-certification required at each material change.

Each game must offer a theoretical RTP of at least 85% over its expected useful life. The theoretical RTP must be published or made available to bettors on request.

An RNG must not adjust its theoretical RTP based on prior payouts. Outcome generation must be statistically independent of the player, the time of day and the session history.

Where more than one RNG is used to determine different outcomes in the same game, each RNG must be evaluated separately. Each implementation of a generic RNG inside a game must be evaluated separately.

Live game studios (casino studios delivering live dealer content to Brazilian players) must be certified for room layout, dealer training, equipment, camera positioning and outcome capture. Studios outside Brazil must satisfy data-localisation conditions for the bettor data feed.

Every game session must be logged in sufficient detail to reconstruct the bet, the RNG outputs and the outcome. Logs must be retained for at least five years and accessible to SPA/MF.

Instrução Normativa 3 of 2025 updated and clarified technical requirements for online games, including stake displays, spin durations and the implementation of in-game responsible-gambling tools.

Online slot-style games must surface clear stake displays, allow the bettor to set a maximum-loss stop and provide visible session timers. Autoplay must be configurable to stop on configurable triggers.

Article 30 requires bonus rounds, free-spin features and other RTP-affecting mechanics to be evaluated as part of the certification. Any change to feature mathematics is a material change requiring re-certification.

Every game and platform component must synchronise to an authoritative time source. Clock skew must be monitored; any skew beyond the regulator-set tolerance must trigger an incident.

Instrução Normativa SPA/MF nº 3 of 10 January 2025 standardises how authorised operators submit technical certifications through SIGAP. Provisionally authorised operators had until 30 January 2025 to upload certificates for the Betting System, the Sportsbook server, the Remote Game Server and the integration layer. Definitively authorised operators must thereafter file a monthly refresh of the General Index Document and the Online Games Index Document whenever any certificate is updated.

Portaria SPA/MF nº 1.082 of 16 May 2025 homologates Lean Lab Company Limited, trading as RiskCherry, as a certifying entity for fixed-odds betting systems, online game platforms and live-game studios, under the requirements set by Portaria Normativa SPA/MF nº 300/2024. The instrument is part of the rolling 2025-2026 homologation pipeline that progressively expanded the panel of accredited certifiers beyond GLI, BMM and eCOGRA.

Portaria SPA/MF nº 1.453 of 3 July 2025 homologates BMM North America Inc. as a certifying entity for fixed-odds betting systems, online game platforms and live-game studios in Brazil. BMM joins the panel of accredited certifiers and is permitted to issue the technical certifications required by Portaria 1.207/2024 and Instrução Normativa 3/2025.

As of May 2026 the SPA/MF has issued recognition Despachos to a small set of certifying entities: eCogra Limited (Portaria 588/2024), BMM Spain Testlabs (Portaria 603/2024), Gaming Associates Europe Ltd (Portaria 749/2024), Quinel Limited (Portaria 1.132/2024) and Trisigma B.V. (Portaria 1.775/2024). Gaming Laboratories International (GLI) is also commonly reported as recognised. The SPA/MF maintains the live list on its Entidades Certificadoras page.

Article 3 limits payment instruments to Pix, TED, debit or pre-paid card and book transfer (where both accounts are in the same institution). Every other instrument is prohibited.

Article 3 §2 of Portaria Normativa SPA/MF 615/2024 expressly prohibits the use of cash, boleto bancário, credit cards, any post-paid payment instrument and crypto-assets (including virtual assets covered by Lei 14.478/2022) as channels for deposits or withdrawals between bettors and licensed operators.

Deposit and withdrawal accounts must be held in the bettor's own name; the CPF of the originating or receiving account must match the bettor's CPF. Third-party deposits are prohibited.

Operator transactional accounts and bettor counterparts must be held in financial or payment institutions authorised by the Banco Central do Brasil. Unlicensed intermediaries may not interpose themselves in the bettor flow.

Withdrawals to the bettor's named account must be processed promptly within the regulator-set service level. The bettor must be entitled to at least one free withdrawal per period and must not be charged fees that effectively block low-value withdrawals.

Operators must block deposits originating from accounts that receive social-benefit programmes (notably Bolsa Família) where the regulator publishes the blocked-account markers. The aim is to keep social-benefit cash out of the betting flow.

Bettor funds must be segregated from operator working capital, held in an identified account with a BCB-authorised institution and reconciled daily to the bettor ledger.

Every Pix transaction in the bettor flow must carry the originator CPF and the receiver CPF on the SPB message. Operators must reject or hold transactions where the data is missing or inconsistent.

Operators must implement maximum-deposit and maximum-withdrawal limits per period, configurable by the bettor inside the responsible-gambling controls. Default limits, where the bettor has not configured a value, follow the regulator's safe defaults.

On account closure, the operator must settle pending wagers in the normal cycle, refund any unutilised bonus subject to terms, and return the available balance via Pix to the bettor's named account within the regulatory deadline.

Portaria SPA/MF nº 566 of 20 March 2025 operationalises article 21 of Law 14.790/2023 by setting the procedures that financial institutions, payment institutions and payment arrangement instituters must follow when SPA/MF formally notifies them that an operator is unauthorised. The institutions cannot keep transactional accounts of illegal operators and cannot execute deposit or prize-payment operations on their behalf.

Article 31 subjects bettor net prizes; annual net winnings above the IRPF exemption band; to a 15% income tax. The exemption band is the first bracket of the annual IRPF progressive table (R$ 2,824 per month / approx. R$ 33,888 per year at the cut-off date).

Instrução Normativa RFB 2.299/2025 sets the operational mechanics of the 15% prize tax, including reporting cycles, the calculation period and the duty to issue a tax statement to the bettor. It is the Receita Federal companion to Lei 14.790 art. 31.

Article 34 requires the operator to retain and remit the bettor's IRPF on prizes above the exemption band where the operator is the source. Withholding is a defence to the bettor's later DIRPF position only to the extent of the amount withheld.

Article 4 limits the authorised perimeter to fixed-odds bets on real sports events, online games and virtual events. The single paragraph prohibits offering bets on competitions or categories that involve exclusively athletes under 18 years of age.

Article 28 requires operators to cooperate with the integrity bodies of sports federations, to report suspicious betting patterns and to suspend markets where the integrity of an event is in doubt.

Operators must report bettor-funds positions to SPA/MF at the cadence and in the format the regulator publishes, alongside reconciliations to segregated accounts.

Lei Complementar nº 224 of 26 December 2025 attributes joint and several liability for the taxes and contributions levied on fixed-odds betting operations and on net prizes to two categories of facilitator. The first is financial and payment institutions that, after formal notification by the competent federal authority, fail to adopt restrictive measures and continue to process flows for unauthorised operators. The second is individuals and legal entities (advertising agencies and influencers) that disseminate commercial advertising on behalf of unauthorised operators. The regime takes effect on 1 January 2026.

Instrução Normativa RFB nº 2.312 of 2026 consolidates the rules governing the personal income tax (IRPF) on net winnings from fixed-odds betting and fantasy-sport contests. It institutes the ComprovaBet document that authorised operators must issue to bettors by the last business day of February of each year, sets the bettor's duty to compute annual net result by bet type, fixes the 15 percent rate on the amount exceeding the exemption band and creates a dedicated app for payment by the last business day of April.

Under Instrução Normativa RFB 2.299/2025 the operator must issue the ComprovaBet (Comprovante de Resultados em Apostas em Loterias de Quota Fixa) to every bettor by the last working day of February each year, covering the prior calendar year. The bettor then self-computes 15% IRRF on net annual winnings exceeding the first IRPF progressive bracket (R$ 28.467,20 for tax year 2025) and pays via DARF 6313-01 by the last working day of April. For tax year 2025 the bettor deadline is 30 April 2026.

SPA/MF and ANATEL operate a cooperation arrangement (TCA of 9 October 2024) under which SPA/MF identifies illegal betting sites and ANATEL orders connectivity providers to block the domains and IPs. By H1 2025 the regime had blocked more than 15,000 domains, with cumulative blocking surpassing 18,000 sites by September 2025.

The Controladoria-Geral da União, the Secretaria Nacional do Consumidor (SENACON) and the Ministério Público participate in cross-agency operations against illegal operators, consumer-protection breaches and integrity violations.

Article 37 obliges operators to maintain an ombudsman channel (canal de ouvidoria) for complaints, with documented SLAs and escalation to SPA/MF where the bettor and operator cannot resolve the issue.

CGU, Polícia Federal and SPA/MF have run joint operations against illegal operators and their payment chains, including asset freezes, criminal investigations and coordinated takedowns. The pattern is now an established enforcement modality.

Under the Technical Cooperation Agreement between SPA/MF and ANATEL, the agencies blocked more than 25,000 URLs of illegal betting and pirate-streaming sites between October 2024 and December 2025. SPA identifies the irregular platforms and feeds the list to ANATEL, which orders internet service providers to block access. In parallel SPA closed 412 enforcement procedures against illegal advertising, removed 324 influencer profiles and triggered 1,255 SISCOAF reports leading to 550 bank-account closures.

On 10 April 2025 the SPA/MF, by Portaria 787, suspended the provisional authorisations of Pixbet Soluções Tecnológicas Ltda (brands Pixbet, Flabet, Bet da Sorte), Caixa Loterias S.A. (Betcaixa, Megabet, Xbet Caixa), 7MBR Ltda (Cbet) and TQJ-Par Participações Societárias S.A. (Baú Bingo, Tele Sena Bet, Bet do Milhão) for up to 90 days. The ground was non-compliance with art. 3 of Portaria SPA/MF 2.104/2024, which requires submission of mandatory technical and operational certifications. The 2nd Federal Court of the Federal District subsequently stayed the Portaria as to Pixbet by writ of mandamus, restoring its operation pending review. Flamengo removed the Pixbet shirt-sponsor mark while the suspension was in force.

On 30 May 2025 the SPA/MF suspended seven authorised operators covering 17 brands for failing to deliver the betting-system security-evaluation report required by art. 8 of Portaria SPA/MF 722/2024 within 90 days of authorisation. The operators were: Bell Ventures Digital Ltda (bandbet.bet.br); Bet.Bet Soluções Tecnológicas S.A. (betpontobet.bet.br, donald.bet.br); Betesporte Apostas On Line Ltda (betesporte.bet.br, lancedesorte.bet.br); EA Entretenimento e Esportes Ltda (bateu.bet.br, hanz.bet.br, esportiva.bet.br); Logame do Brasil Ltda (lider.bet.br, geralbet.bet.br, b2x.bet.br); Pixbet Soluções Tecnológicas Ltda (pix.bet.br, fla.bet.br, betdasorte.bet.br); and Sortenabet Gaming Brasil S.A. (sortenabet.bet.br, betou.bet.br, betfusion.bet.br). A daily astreinte of R$ 40,000 applies if the precautionary measure is breached, and a sanctioning administrative process is opened if non-compliance persists.

In November 2024 the Secretaria Nacional do Consumidor (SENACON, Ministério da Justiça) issued a precautionary decision suspending nationwide all betting advertising offering bonuses, advances or anticipated rewards, and suspending nationwide all advertising of fixed-odds betting aimed at children and adolescents. Operators were ordered to file a transparency report within 20 days describing measures adopted to comply. Breach attracts a daily fine of R$ 50,000. The measure is grounded in the Consumer Defence Code (Lei 8.078/1990) read with Lei 14.790/2023 art. 5, which places the bettor-operator relationship within the CDC.

In the first year of the regulated market (October 2024 to December 2025) ANATEL, acting on SPA/MF determinations, blocked more than 25,000 illegal betting URLs. In parallel 203 irregular applications were removed from the Google Play and Apple App Store, and 412 regulatory processes against illegal social-media advertising were concluded, removing 324 influencer profiles and 229 posts. By the end of 2025, 54 financial and payment institutions had filed 1,255 communications to the SPA covering 1,687 individuals with signs of transfers to unauthorised operators.

As reported by Finance Minister Dario Durigan in connection with the Polymarket/Kalshi action of April-May 2026, the cumulative number of illegal betting and prediction-market sites blocked by ANATEL on Ministry of Finance determination reached approximately 39,000 by Q2 2026. The blocking operates via ANATEL notifications to all internet access providers in Brazil and is the standard enforcement channel for unauthorised supply.

By Resolution 5.298 of 24 April 2026 the Conselho Monetário Nacional prohibited the offer or trading in Brazil of derivative contracts whose underlying is sporting events, online games or political, electoral, cultural or social outcomes, allowing only derivatives linked to predefined economic and financial indicators. The Resolution, signed by Banco Central do Brasil president Gabriel Galípolo, took effect on 4 May 2026. On SPA/MF determination ANATEL notified internet access providers to block prediction-market platforms including Polymarket and Kalshi; 27 sites were blocked in the initial action.

On 13 May 2026 the Polícia Federal instituted the Grupo de Investigação para Repressão à Manipulação de Resultados Esportivos, Fraudes em Apostas e Crimes Correlatos, known as Base Apostas. The group sits under the Coordenação-Geral de Repressão à Corrupção, Crimes Financeiros e Lavagem de Dinheiro, with a one-year initial mandate renewable on directorate review. It is composed of officers specialised in financial intelligence, data analysis, asset recovery, digital-platform monitoring and organised-crime investigation, with a minimum staffing of one delegado, one clerk and three police analysts. Its mandate covers Lei 14.790 art. 36 (illegal betting), Lei 9.613 (money laundering), private corruption, fraud and related offences.

On 28 May 2026 the São Paulo Civil Police, the Ministério Público de São Paulo and the Receita Federal launched Operação Falsa Las Vegas against an illegal betting and money-laundering scheme allegedly linked to the Primeiro Comando da Capital (PCC). The judicial action authorised five preventive arrests, 22 search-and-seizure warrants and the blocking of assets and financial resources exceeding R$ 5.2 billion, with seizure of 76 properties and a helicopter. The scheme used the Aposte Fácil platform as a façade and Black Vegas as the clandestine front, offering games prohibited in Brazil including the so-called Tigrinho slot mechanic and numbers-game modalities. The operation is an offshoot of Operação Falso Mercúrio.

In December 2025 the Polícia Federal launched Operação Opções Binárias against an organised criminal group suspected of having diverted more than R$ 50 million through illegal management of binary-options platforms and unauthorised betting houses. The PF executed 11 search-and-seizure warrants. The investigation describes three operating arms: Chinese-based contacts supplying platform-manipulation services, contracted digital influencers promoting the platforms, and a proprietary binary-options platform created to capture clients.

Operação Penalidade Máxima, run by the Ministério Público de Goiás with Polícia Federal support, opened in April 2023 with the arrest of bettors and expanded in May 2023 to Série A matches. In September 2023 the MP-GO indicted 16 individuals for match-fixing in 13 matches, eight of them in Série A. Investigators identified that players were recruited to commit specific in-match actions (committing penalties, taking yellow or red cards) which mapped directly to in-play bets. Estimated losses to betting houses exceeded R$ 4.8 million in nine of the suspect matches. The case is the leading precedent for the application of Lei 14.790 art. 31 (integrity duties) and Código Penal art. 171 (fraud) to in-play sports betting.

By Portaria SPA/MF 566 of 21 March 2025 the SPA/MF set the rules under which financial institutions and payment institutions must refuse to open or maintain accounts used to receive bets on behalf of operators that do not hold a SPA/MF authorisation. Non-compliant institutions are themselves subject to sanction under the SPA/MF regulatory regime read with Banco Central rules. The instrument operationalises the joint enforcement perimeter SPA/MF + BCB + ANATEL against unauthorised supply.

Lei Complementar 224 of 2025 established joint and several liability for those who promote unauthorised betting operators. Influencers, affiliates, media outlets and financial institutions that, after formal notification, continue to promote operators without SPA/MF authorisation may be called to answer for the taxes owed by the illegal operator. The provision entered into force in January 2026. Several taxpayers obtained TRF injunctions challenging downstream effects of LC 224/2025 on the lucro presumido regime.

On 19 December 2025 Minister Luiz Fux, rapporteur of ADI 7.721, kept in force the SPA/MF prohibition on new registrations of beneficiaries of the Bolsa Família programme and of the Benefício de Prestação Continuada (BPC) on fixed-odds betting platforms, but suspended the operational obligations to block existing accounts and to close accounts already opened by those beneficiaries pending a conciliation hearing scheduled for 10 February 2026.

In the joined judgements of ADI 4.986, ADPF 492 and ADPF 493 the Supreme Federal Tribunal held that the Union does not hold a monopoly on the operation of lottery services and that states may operate their own lotteries, while the Union retains exclusive legislative competence to define the framework. The decision is the constitutional underpinning of the subsequent federal-state coexistence model and conditions the legality of state-level fixed-odds frameworks that have proliferated since 2024.

The Ministério da Justiça e Segurança Pública, via SENACON, notified Google and Apple to remove illegal betting applications from their Brazilian app stores, following coordinated SPA/MF enforcement against unauthorised operators. The notification operationalises consumer-protection obligations under the Código de Defesa do Consumidor and Lei 14.790, and complements the ANATEL URL-blocking pipeline by removing the app-distribution channel.