Romania continues to attract both new entrants and established players in the iGaming sector. At the same time, recent activity report published by the National Gambling Office (ONJN) highlights an increased focus on supervision and enforcement, reminding iGaming businesses that legal and compliance extend well beyond obtaining a licence.

For those considering entering the Romanian market or are already active in it, the following key legal requirements deserve particular attention.

1. Licensing Requirements

Obtaining the necessary local licences and authorizations is a priority for operating in the Romanian market. Whilst there’s no limit to the number of licenses available, bad actors will not be issued a license if they had a previous licence revoked or has been sanctioned for organising unlicensed gambling, according to the Romanian Gambling Act. Moreover, licensees must also ensure ongoing compliance with the conditions attached to their licences and be on top of regulatory developments that may affect their day-to-day operations.

2. Anti-Money Laundering (AML) Requirements

Anti-money laundering obligations remain a key area of regulatory focus. Licensees are required to implement appropriate customer due diligence measures, transaction monitoring procedures, and internal reporting mechanisms to ensure compliance with applicable AML legislation. Today, Romania remains under MONEYVAL’s enhanced follow-up procedures, and the Romanian authorities implemented the National AML/CFT 2025–2030 Strategy, aiming to strengthen enforcement against financial crime.

3. Advertising and Marketing Requirements

Marketing activities, including affiliate partnerships, sponsorships, and promotional campaigns, must comply with the legal framework governing gambling advertising. Businesses should carefully assess their marketing strategies to mitigate regulatory risks, as unlicensed gambling advertising carries a fine of between RON50,000 and RON100,000 and confiscation of the amounts derived from the illegal activity, according to the Romanian Gambling Act.

4. Responsible Gambling Requirements

Responsible gambling measures are increasingly viewed as a core compliance obligation rather than a best practice. Licensees should ensure that appropriate player protection tools and procedures are in place and regularly reviewed in light of evolving expectations and industry standards.

5. Data Protection Requirements

Given the volume of personal and financial data processed by iGaming companies, compliance with data protection legislation, including GDPR requirements, remains a critical legal obligation. Appropriate cybersecurity measures should also be implemented to protect customer data and maintain regulatory compliance.

To conclude, recent ONJN enforcement activity demonstrates that regulatory scrutiny is increasingly focused on how iGaming businesses comply with their legal obligations in practice, not only on whether they hold the necessary licences. For both prospective entrants and established licensees, understanding and addressing these legal requirements is essential for operating successfully and profitably in Romania’s iGaming market.