Is online gambling legal in Ontario?

How Ontario turned that clause into a market

Ontario split the job between two bodies in April 2022. The Alcohol and Gaming Commission of Ontario is the regulator: it registers every operator and gaming supplier, writes the Registrar’s Standards for Internet Gaming, and enforces them. iGaming Ontario is the conduct-and-manage side: a separate entity that holds a commercial operating agreement with each registered operator and publishes what the market does. An operator needs both. Registration without an agreement puts nothing live, and an agreement is not available to anyone the AGCO has not registered.

As iGaming Ontario currently publishes it, the market runs to 49 operators offering 84 gaming websites. One site sits outside that structure: OLG.ca is conducted and managed by the Ontario Lottery and Gaming Corporation directly, which is the older route the province used before the open market existed. It is equally legal and it is regulated by the AGCO, but it does not appear on iGaming Ontario’s operator list, and its absence there says nothing against it.

Ontario was the first province to open this kind of market and is no longer the only one. Alberta’s regulated market went live on 13 July 2026 under Alberta Gaming, Liquor and Cannabis as regulator, with the Alberta iGaming Corporation in the conduct-and-manage role — the same constitutional architecture, built four years later. Elsewhere in Canada the only lawful online casino is still the provincial lottery corporation’s own site.

The age rule is the one people get wrong most often, because Ontario’s gambling floor is not the province’s drinking age plus a coincidence — it is 19 for both, while several other provinces set gambling at 18. Nothing about being 18 and legally an adult opens an account here. iGaming Ontario states the requirement in four words on its own player page: 19+, and you must be physically located in Ontario to play.

Location is enforced by geolocation rather than by an address field, and it is a live check. The Standards require games to be provided only within Ontario, operators to re-check location at intervals rather than once at login, and mechanisms to detect “software, programs, virtualization and other programs capable of circumventing player location detection”. Crossing into Quebec or Michigan with a session open does not make you a criminal; it makes the wager one the province is not conducting, which is exactly the state the operator is obliged to prevent. The practical form this takes is an account that refuses to load a game rather than a knock at the door.

The eligibility list runs wider than age and location. Anyone who has told an operator they are in a self-exclusion process is barred, as is anyone restricted from gambling by court order. So are the operator’s own directors and officers, employees of registered suppliers who service gaming equipment, members and employees of the AGCO, and — with a narrow exception — the people who run OLG and iGaming Ontario. Playing while ineligible does not only breach terms: it forfeits the prize.

What the legal status actually gets you

Legality is not a badge. It is a list of obligations someone can be penalised for breaking, and iGaming Ontario sets them out as six promises to the player: deposits are protected, winnings are paid out, personal information and data are secure, game play has fair competitive odds, responsible gambling resources are available, and there is a legal business behind the site that can be held to account.

The AGCO frames the same thing from the other end, describing what an unregulated site does not guarantee: game transparency is not ensured, payouts “may not be timely or accurate and could be withheld or delayed”, and your data “could be exposed to third parties or the public without your consent”. Those three sentences are the regulator’s own summary of what you give up, and they are worth more than any comparison table, because they describe failure modes rather than features.

There is a fourth thing the list does not spell out. A registered operator is inside a dispute system that ends somewhere. You work through the operator’s own complaints process first, using the transaction history it is obliged to give you, and if that fails the AGCO accepts internet gaming complaints directly. That escalation route does not exist for a site outside the market, at any price, and it is the practical difference between the two halves of the internet.

Where an unregistered site leaves you

The Criminal Code provisions above are aimed at the people who keep, operate, equip and profit from unlawful gaming — the house, not the customer. Ontario’s own messaging to players follows that logic: the AGCO’s player-support material is written in the language of risk and protection, not of prosecution, and the enforcement it publishes lands on operators and their marketing partners. The realistic exposure for an individual playing on an offshore site is not a charge. It is a balance nobody is obliged to release and a complaint with nowhere to go.

That exposure is easy to underrate while things are going well, because an unregulated casino behaves normally right up to the withdrawal. The failure appears at the point where money leaves — a verification request that never resolves, a bonus term applied retroactively, a maximum-payout clause discovered after a win, an account closed for “irregular play”. None of those is reviewable by anyone. The site is not registered, so there is no registration to place conditions on.

Checking a site in under a minute

• Look for the iGaming Ontario mark. The AGCO tells players to treat it as the sign that a site is being conducted and managed by iGaming Ontario, and permitted advertising in this market carries it.
• Match the brand against iGaming Ontario’s own list of operators and sites, not against a list published by whoever is recommending it.
• Read the advertising. A welcome bonus shouted at you before you have an account is the single most reliable tell that a site is outside the market, because Standard 2.05 forbids exactly that.
• Check the rails. Registered operators run on Canadian banking — Interac, debit, cards. A casino built around cryptocurrency deposits is almost never inside the regulated market.
• Check for the 19+ statement and the Ontario-only note. Their absence is not a design choice.

What the Canada Revenue Agency does with the winnings

Nothing, in the ordinary case. The CRA’s list of amounts you do not report and do not pay tax on includes “lottery winnings of any amount, unless the prize can be considered income from employment, a business or property, or a prize for achievement”. A slot payout, a table-game win or a settled bet at a regulated Ontario operator is a windfall. There is no threshold above which it becomes reportable, no form to file, and nothing withheld at source — the gross amount arrives in your account, which is the opposite of how a US casino treats a jackpot for a non-resident.

The exception in that sentence is the whole of the complication. Where gambling stops being a pastime and becomes a business carried on with an expectation of profit, the profits are business income and taxable. What decides it is how the activity is actually conducted — the degree of organisation and system behind it, whether skill rather than chance drives the outcome, whether it is pursued as a livelihood rather than for entertainment. The question comes up in practice for a small number of poker and sports-betting specialists and effectively never for someone playing slots, where no amount of system changes the mathematics.

Two consequences follow that people miss in both directions. Losses are not deductible for anyone whose winnings are not taxable, so a losing year does nothing for your return. And while the winnings themselves are not taxed, income they subsequently earn is: interest paid on a jackpot sitting in a savings account is interest income like any other, and has to be reported. The windfall is untaxed; the yield on it is not.

What enforcement looks like when it happens

The AGCO issues orders of monetary penalty against registered operators, publishes them, and lets the operator appeal to the Licence Appeal Tribunal. The figures are not symbolic. In March 2025 the regulator issued $110,000 in penalties to BetMGM Canada over three separate incidents: $100 in cash offered to new players who opened accounts with $15 deposits at a trade conference, and two affiliate campaigns that ran prohibited inducement marketing — one producing 377 sign-ups and $127,180 in commissions, the other 94 sign-ups and roughly $34,000.

Two standards were cited, and together they explain most of what an Ontario casino page is allowed to say. Standard 2.05 prohibits advertising and marketing materials that communicate gambling inducements, bonuses and credits, except on the operator’s own gaming site. Standard 1.19 makes operators “responsible for the actions of third parties with whom they contract for the provision of any aspect of the Operator’s business related to gaming in Ontario” — which is why an affiliate’s bonus banner is the operator’s penalty.

For a reader, that pairing has a practical use. It means the absence of a splashy offer on a compliant Ontario page is evidence the page is compliant, and the presence of one is evidence of the opposite. It is the rare case where the duller site is the safer one, and it is the reason the bonus material here explains mechanics instead of listing offers.

The one thing that changed recently

On 14 November 2025 the Ontario Court of Appeal answered a reference question about whether Ontario’s scheme could pool players with people outside Canada. Reference re iGaming Ontario held, 4–1, that section 207(1)(a) permits it. The majority read the provision broadly on the basis that it is silent on international linkages while other parts of the Code restrict them expressly, and rejected the argument that a lottery scheme must stay entirely inside provincial borders so long as no other province’s sovereignty is infringed.

The practical stakes are narrow but real, and they sit in peer-to-peer formats. Slots and table games are played against the house, so the size of the player pool changes nothing. Poker is the opposite: a segregated provincial pool means thin tables, few tournaments and dead hours. Access to international liquidity is what makes those games work. An appeal to the Supreme Court of Canada remains possible, and the connections themselves still have to be built.

The 19+ rule after sign-up

Age is not only checked at registration. Since 14 May 2026 Ontario has run BetGuard, a centralised opt-out available to anyone 19 or older, covering more than 75 regulated sites including OLG’s platform. A player enrols once, at BetGuard.ca, for six months, one year, five years or a custom term, and the exclusion applies across the whole regulated market rather than site by site. That single design decision is what closes the gap left by per-operator limits, which never travelled between brands.

It is also the clearest illustration of what the legal market buys. A province-wide exclusion is only possible because the province conducts and manages the scheme in the first place — there is no equivalent mechanism, and no way to build one, across a collection of offshore sites that answer to nobody here. The support side of this is set out separately.