Kenya’s Gambling Control Regulations, 2026: Key Compliance Obligations for Gambling Operators

While the Gambling Control Act, 2025 established the legal foundation for regulating the industry, the Regulations operationalise the Act by prescribing the procedures, standards, licensing requirements and compliance obligations applicable to gambling operators.

The Regulations came into force on 30 June 2026 and introduce one of the most comprehensive regulatory regimes the Kenyan gambling industry has experienced. Collectively, they establish a modern framework governing licensing, operational conduct, advertising, foreign-based operators and dispute resolution, while strengthening oversight by the Gambling Regulatory Authority (GRA).

The Cabinet Secretary responsible for matters relating to gambling has introduced five sets of subsidiary legislation under the Gambling Control Act, 2025:

The Gambling Control (Licensing) Regulations, 2026;

The Gambling Control (Conduct of Gambling Operations) Regulations, 2026;

The Gambling Control (Foreign-Based Operators) Regulations, 2026;

The Gambling Control (Advertising) Regulations, 2026; and

The Gambling Control (Gambling Appeals Tribunal) Regulations, 2026.

Together, these Regulations provide detailed guidance on how gambling activities are to be licensed, conducted, supervised and enforced in Kenya.

Unlike the previous regulatory framework, the Regulations expressly address both land-based and online gambling operations, recognising the increasing digitisation of the gambling sector and introducing technology-driven oversight mechanisms.

Rather than a single licensing regime, separate licences are now required depending on the nature of the gambling activity being undertaken. These include licences for: Casinos; Bookmakers; Lotteries; Totalisators ;Bingo operators; Prize competitions; and Online gambling operators.

The Regulations also extend licensing obligations to several supporting participants within the gambling ecosystem, including: Gambling software providers; Equipment manufacturers and distributors; Testing laboratories; Repair and servicing providers; and Key gambling employees performing regulated functions

The Regulations also strengthen obligations relating to: Anti-money laundering and counter-terrorism financing compliance; Responsible gambling programmes; Record keeping; Customer identification procedures ;Internal reporting mechanisms; and Information security controls.

For gambling operators, investors, technology providers and other industry participants, the Regulations significantly increase compliance expectations and require a thorough review of existing business models and operational procedures.

Applicants are required to submit comprehensive corporate, financial and technical documentation, including evidence of minimum capital requirements, audited financial statements (where applicable), anti-money laundering policies, technical certifications and system compatibility with the Gambling Regulatory Authority’s monitoring infrastructure.

Existing licence holders are also required to transition to the new licensing framework within the prescribed timelines.

Operators are expected to maintain effective governance structures, establish internal compliance policies and implement comprehensive customer due diligence procedures.

In addition, operators are required to integrate their gaming systems with the Gambling Regulatory Authority’s central monitoring platform and other prescribed government systems, enabling real-time regulatory oversight.

These obligations demonstrate an increasing reliance on technology as a regulatory tool and require operators to ensure that their systems are capable of meeting prescribed technical standards

The Regulations reflect a shift from regulation by a single authority to a coordinated multi-agency oversight model. The Conduct of Gambling Operations Regulations introduce detailed operational obligations intended to improve transparency, accountability and regulatory monitoring

As the Gambling Regulatory Authority assumes its expanded supervisory role, businesses should proactively evaluate their governance structures, licensing status, technical systems and compliance programmes to ensure they meet the requirements of the new regulatory framework.