Romania’s ONJN: Licence Costs, GGR Tax, and the .ro Infrastructure Trap

Romania’s online gambling market is regulated under Government Emergency Ordinance no. 77 of 24 June 2009 (OUG 77/2009), administered by the Oficiul Național pentru Jocuri de Noroc (ONJN). The framework is point-of-consumption in character: any operator directing services at Romanian-resident players, regardless of where the company is incorporated, must hold a Romanian Class I licence and satisfy a set of local infrastructure requirements that go well beyond what most EU-hub licences demand. Operators entering or assessing the Romanian market need to understand not just the headline fee but the layered local obligations that make the cost of operation significantly higher than the licence fee alone suggests.

The Licence Structure: Class I, Class II, and What Each Covers

OUG 77/2009 divides gambling licences into three tiers. For online operators, the operative tier is Licenţa clasa I: the right to operate distance gambling services directed at players accessing the platform from Romanian territory. The annual fee is €300,000, payable in advance under Article 14(2) of OUG 77/2009. This covers the core operator, defined in the legislation as any entity organising and operating gambling activities and accepting wagers from players registering on its platform.

Licenţa clasa a II-a applies to service providers operating within the gambling supply chain rather than to end-player operators. Under OUG 77/2009, Part 79, the Class II category covers: platform hosting and management providers, software producers and distributors specialised in gambling, payment processors, affiliates, conformity assessment bodies, and auditors. Each category pays a separate annual fee of €20,000. A software supplier providing services to multiple Romanian-licensed operators requires one Class II licence, but an affiliate network operating distinct brands may face more than one registration obligation. Operators sourcing B2B services from Class II entities must verify that each supplier holds a valid ONJN Class II licence, as Law 141/2025 (Article LXII, published in Monitorul Oficial nr. 699 of 25 July 2025) now prohibits Class II licensees from providing any services to online gambling entities accessible from Romanian IP addresses that do not hold a valid Class I licence and operating authorisation from ONJN.

A Class III licence covers the state lotteries monopoly and is not available to private operators. There is no separate sports betting or casino vertical categorisation in the Romanian model. The Class I licence covers the operator entity, with the specific games authorised listed on the accompanying exploitation authorisation (autorizaţia de exploatare), which must be obtained separately and displayed on the operator’s website.

How Much Does an ONJN Licence Actually Cost?

The total annual cost of Romanian compliance has three distinct layers: the licence fee, the GGR tax, and the infrastructure and operational overhead. The €300,000 Class I fee is the entry point. The GGR tax at 27% of gross gaming revenue, following the 2025 legislative amendments, is the dominant recurring burden. A mid-size operator generating €20 million in annual online GGR from Romanian players faces a tax bill of approximately €5.4 million annually before licence fees and infrastructure costs. Operators must also pay the exploitation authorisation fee, assessed per game type and authorised domain, as a further direct charge.

The infrastructure obligations form the third and most often underestimated cost layer. Maintaining a compliant Romanian presence, including the mirror server, safety server, local banking relationship, and authorised representative described in the sections below, typically requires dedicated local technical staff or a managed service agreement with a Romanian infrastructure partner, plus ongoing legal counsel familiar with ONJN processes. Qualified legal and tax advice specific to each operator’s corporate structure is essential before finalising any cost model for Romanian operations.

As of the 2025 amendments, the 27% online GGR rate places Romania among the higher-tax online gambling markets in Central and Eastern Europe, and above the Netherlands’ pre-2025 rate, though the Dutch rate has since climbed to 34.2% and is set to rise further. Compliance teams modelling entry costs should treat the 27% figure as a current floor, given the active legislative pressure toward further increases described in the political risk section below.

The Local Infrastructure Obligation: Mirror Servers, Safety Servers, and the Romanian Bank Account

This is the section of the Romanian framework that surprises operators accustomed to EU-hub licensing models under the MGA or the Isle of Man GSC. Under Article 15(2)(B) of OUG 77/2009, online gambling operators must demonstrate before licensing that their central IT system includes a real-time mirror server (server în oglindă) and a safety server (server de siguranță), both located on Romanian territory, with uninterrupted, secure remote access provided to ONJN free of charge.

“Un organizator de jocuri de noroc la distanță licențiat în România, trebuie să furnizeze autorităților de monitorizare și control ale O.N.J.N. acces neîntrerupt, securizat, de la distanță, la serverul în oglindă și la serverul de siguranță, situat pe teritoriul României, inclusiv la baza de date de pe serverul central al organizatorului care conține informații cu privire la jocurile și participanții care intră sub incidența prezentei ordonanțe de urgență.”

In translation: a licensed online gambling organiser in Romania must provide ONJN’s monitoring and control authorities with uninterrupted, secure, remote access to the mirror server and safety server, located on Romanian territory, including to the database on the organiser’s central server containing information about games and participants covered by the ordinance.

The safety server must store all transaction data, covering player registration and identification, wagers placed, and winnings paid, for a minimum of five years from the date of collection. Data must be stored in the format in which it was created, for a period of five years from the expiry of the limitation period for public debt repayment obligations related to that data (OUG 77/2009, Part 46). This is not a data retention obligation that can be satisfied by a cloud storage service in Frankfurt: the physical or virtual server must be verifiably located within Romania.

EU-incorporated operators benefit from a partial exemption. Companies registered in an EU/EEA member state or Switzerland may locate their central IT systems in that member state, provided they connect to a centralised mirror system linked to a terminal at ONJN, placed free of charge at the regulator’s disposal. The safety server for data storage must still be on Romanian territory. In practice, operators attempting to run the Romanian licence from a pure Malta or Gibraltar infrastructure consistently encounter licensing delays at the documentation stage, because ONJN’s technical verification process checks server location against network evidence rather than relying on operator declarations.

A further mandatory financial obligation under Article 15(2)(B)(ii) of OUG 77/2009 is the maintenance of a dedicated bank account for player fund segregation, opened at a bank operating in Romania. For operators from non-EEA jurisdictions or operators using electronic money institutions, ONJN’s interpretation of this requirement requires early confirmation from legal counsel.

The .ro Domain Question

Romanian gambling legislation does not impose a blanket requirement that licensed operators serve players exclusively through a .ro country-code top-level domain. The operative obligation is that operators must display a copy of their licence and exploitation authorisation in a visible location on their website or on the specific website through which gambling activity is conducted (NORMĂ 24/02/2016, Article 12). The platform itself must be identifiable and verifiable against the ONJN public register of licensed operators, which lists the commercial name, registered address, game locations, and device identifiers for all authorised entities.

Where the issue arises is with multi-domain or multi-brand operations. ONJN’s public register is keyed to the specific entity holding the licence, not to the domain name. An operator running five brands from one Class I licence, each under a distinct domain, including a mix of .com, .ro, and country-specific domains, must ensure that each active domain serving Romanian players is covered by that licence and its exploitation authorisation. When ONJN conducts enforcement sweeps and generates content removal orders directed at ISPs, the identifier used is the domain or IP address. Operators whose brands share a parent entity but operate on separate domains have had unlicensed sub-domains caught in removal orders because the connection between the domain and the licensed entity was not declared or was not reflected in the ONJN public register.

The practical implication is that operators must explicitly register all active player-facing domains with ONJN and ensure each one is associated with the relevant licence record. A .ro domain carries no inherent licensing advantage, but it does carry one operational benefit: Romanian-resident players are culturally more familiar with .ro addresses, and in the event of an enforcement dispute, using a distinctly Romanian domain makes the association between the licensed entity and the served market harder to contest.

The Authorised Representative Requirement

For companies incorporated outside Romania but operating in the Romanian market under an EU/EEA establishment, OUG 77/2009 (Article 15(2)(A)(v), as confirmed in Part 39 of the annotated text) requires the appointment of an reprezentant autorizat: an authorised representative who must be domiciled on Romanian territory and hold representative powers sufficient to enter into contracts on behalf of the foreign entity and to represent it before Romanian state authorities and courts.

This requirement is more operationally significant than the superficially similar local representative obligations found in other EU markets, because the authorised representative in Romania is also the individual who interfaces with ONJN during audits, submits licensing documentation, and receives official correspondence. The representative must provide a police clearance certificate (avizul organelor de poliție) and a criminal record certificate (certificatul de cazier judiciar), and both the representative and the operator’s shareholders and administrators must satisfy ONJN’s fit-and-proper requirements. A change of authorised representative requires notification to and approval by ONJN before the change takes effect operationally. Operators relying on third-party managed representative services should document the scope of that representative’s authority with particular care, since ONJN’s Methodological Norms (HG 111/2016, relevant provisions on authorised representative obligations) specify that the contracts governing the relationship must expressly set out the representative’s principal duties as defined by the regulation.

Enforcement Under Law 141/2025: Blacklists, Criminal Complaints, and Licence Revocations

Romania’s enforcement posture shifted materially with the enactment of Law no. 141 of 25 July 2025, published in Monitorul Oficial nr. 699/2025. The amendments expanded ONJN’s authority to issue content removal orders directly to unlicensed online gambling providers and to demand monthly reports from Class II licensees on player attempts to access unlicensed platforms. The monthly reporting obligation for Class II operators is significant: it transforms suppliers and payment processors into active monitoring instruments within ONJN’s enforcement infrastructure.

ONJN’s activity report covering April 2025 to April 2026 quantifies the enforcement output from this expanded mandate. According to the report, as covered by iGaming Business on 27 April 2026, the regulator issued more than 60 illegal content removal orders and blacklisted over 300 unlicensed gambling websites during the twelve-month period. ONJN conducted approximately 11,000 control activities across the regulated market, issued roughly 10 million Romanian lei in financial penalties, disabled or confiscated 260 gaming devices, filed 70 criminal complaints, and revoked 60 licences.

ONJN launched investigations into alleged gross gaming revenue manipulation and unpaid tax discrepancies, filing 70 criminal complaints and revoking 60 licences in response to those infringements during the April 2025 to April 2026 reporting period.

The GGR manipulation investigations deserve particular attention. ONJN’s activity report explicitly identified GGR manipulation and unpaid tax discrepancies as enforcement targets. For compliance teams, this signals that Romanian tax reporting is subject to active analytical scrutiny rather than passive review. Operators whose GGR reporting methodology differs from ONJN’s expectations, particularly regarding how multi-currency player accounts or bonus deductions are treated, face the risk of classification as manipulation rather than a good-faith accounting difference.

The blacklist mechanism is separate from the content removal order process. Romanian ISPs and payment service providers operating in Romania are required to act on ONJN blacklist entries. Article 1(5^4) of OUG 77/2009, as amended by Law 141/2025, prohibits Class II licensees from providing any services to entities accessible from Romanian IP addresses without a valid Class I licence, creating a downstream compliance obligation that runs from operator to B2B supplier to payment processor. An operator whose licence lapses, even temporarily during a renewal period, risks triggering supplier termination obligations under this provision.

Player Protection Obligations and the Proposed Unified Self-Exclusion System

Romania’s current player protection framework under OUG 77/2009 (Articles 15^1 and 16) requires all licensed operators to maintain real-time access to ONJN’s centralised database of self-excluded and undesirable persons, and to deny those individuals access to gambling venues and platforms. Self-exclusion requests may be submitted directly to ONJN or to any licensed operator, who must transmit the request to ONJN within two working days of registration.

The existing system lacks mandatory identity verification at the point of self-exclusion and does not integrate seamlessly across online platforms. ONJN’s 2025-2026 activity report proposed a new unified self-exclusion framework with mandatory ID verification and penalties for non-compliance, targeted for implementation in Q2 2026. Once enacted, this will impose additional identity-check obligations at the point of self-exclusion registration. Compliance teams should review their KYC and self-exclusion workflows now to assess readiness for stricter verification requirements.

On responsible gambling funding, the Romanian government allocated €5 million to the ‘Aware and Free’ programme for prevention, infrastructure development, and research, the first formal state funding stream for problem gambling treatment in ONJN’s history, according to ONJN’s April 2026 activity report. Licensed operators are required under OUG 77/2009 to cooperate with ONJN’s oversight of responsible gambling and to transmit self-exclusion and undesirable persons data to the Foundation managing that database.

The Political Risk Layer: GEO 7/2026 and Tax Escalation

Romania’s regulatory framework is evolving under significant political pressure. Government Emergency Ordinance 7/2026 transferred authority to restrict or ban betting shops and slot halls to municipal councils, nine of which had already exercised that power as of early 2026, according to industry analysis published by iGaming Business in May 2026. While this directly affects land-based operators, the political dynamic it signals, combining strong anti-gambling sentiment with populist fiscal rhetoric, creates a credible risk of further online GGR tax increases.

The 2025 round of tax amendments raised online GGR tax to 27%. Proposals in the Romanian parliament have included rates significantly higher than the current level, and the centre-right Save Romania Union (USR) has at various points proposed dismantling ONJN entirely and replacing it with a different supervisory structure, according to reporting by iGaming Business in May 2026 covering Romania’s regulatory reform trajectory. A new pro-European coalition government is the most likely political outcome in the near term, making radical reversal unlikely, but compliance teams should model a tax scenario of 30% or above for planning purposes and maintain close monitoring of the Romanian legislative agenda.

This tax escalation dynamic has regional parallels. The Netherlands, where licensed market GGR tax has climbed to 34.2% and is set to rise to 37.8% from 2026, demonstrates that a regulator can lose channelisation by pushing rates above the level where the licensed market remains competitive with unlicensed alternatives, according to the KSA’s 2025 annual report. ONJN is clearly aware of this risk: its enforcement priority on illegal market suppression, with 300-plus domains blacklisted in twelve months, reflects an understanding that the licensed market’s value depends on channelisation, and channelisation depends on licensed operators actually outcompeting the black market on player experience as well as legality.

AML and KYC Obligations Under the Romanian Framework

Romanian gambling operators are subject to the national AML framework transposing the EU Anti-Money Laundering Directives, including Romanian legislation on preventing and combating money laundering and terrorist financing. Responsibility for AML supervision sits with the Romanian Financial Intelligence Unit (Oficiul Național de Prevenire și Combatere a Spălării Banilor, ONPCSB) in conjunction with ONJN’s oversight role over licensed gambling activity.

OUG 77/2009 requires operators to implement customer identification and verification systems as a prerequisite for licensing. The application documentation includes evidence of a functioning identity-registration and player-tracking system, covering geolocation of player IP addresses, date, time, and session duration, with data retained for a minimum of five years. Each player’s wagers and winnings must be recorded in real time on the safety server, providing a transaction-level audit trail that is simultaneously available to ONJN. This creates a de facto continuous transaction monitoring obligation: the safety server architecture means that every transaction is visible to the regulator as it occurs, rather than in periodic batch submissions.

For AML purposes, operators must implement customer due diligence, enhanced due diligence for high-risk players, and suspicious transaction reporting to ONPCSB. The interaction between ONJN’s real-time transaction access via the mirror server and the AML obligation to file suspicious transaction reports creates a compliance posture where under-reporting is particularly exposed: ONJN can independently identify high-transaction players whose profiles have not generated an AML report, creating an enforcement risk not present in jurisdictions where the regulator does not have real-time server access. For a broader treatment of AML obligations across regulated gambling markets, the AML and Financial Compliance hub covers FATF standards, transaction monitoring frameworks, and source-of-funds obligations.

Key Resources

Government Emergency Ordinance 77/2009 (OUG 77/2009), as amended through Law no. 239 of 15 December 2025, Monitorul Oficial nr. 1160/2025, the primary legislative instrument governing Romanian gambling regulation. Available via onjn.gov.ro.

Methodological Norms HG 111/2016, the implementing regulations setting out documentation requirements, operational standards, and licence application procedures under OUG 77/2009. Available via onjn.gov.ro.

Law no. 141 of 25 July 2025, published in Monitorul Oficial nr. 699/2025, the enforcement powers expansion amending OUG 77/2009, introducing content removal orders and the Class II monthly reporting obligation on player access to unlicensed platforms.

ONJN Activity Report, April 2025, April 2026, the regulator’s published account of enforcement actions, blacklist volumes, self-exclusion reform plans, and responsible gambling funding. Published at onjn.gov.ro.

For comparison with other European licensing frameworks, the UKGC vs MGA cost analysis models the five-year total cost of compliance across the two most common EU-hub and UK licences, including GGR tax rates, annual fees, and statutory levy obligations that sit alongside the licence fee.

Operators and compliance counsel should confirm all fee and tax figures against the current version of OUG 77/2009 and ONJN’s published fee schedules before making licensing or business planning decisions. Romanian gambling regulation has been amended repeatedly since 2023, and further changes are actively under discussion in the Romanian parliament. For ongoing guidance on regulatory developments in Romania and other European markets, review our Romania gambling regulation hub for updated amendments and compliance requirements.