Finland - Veikkaus monopoly reform

(Section: "Markets and Jurisdictions")

1) The essence of reform and goals

Finland is moving from a monopoly model to a licensing system for online casinos/slots and betting. The goal is to increase sewerage (the share of the game in the regulated perimeter) and reduce the harm from gambling. The project is being led by the Home Office.

2) Timeline: When what will work

From the 1st quarter of 2026 - the beginning of accepting applications for licenses (phased launch). Until the end of 2026, the previous rights of Veikkaus are valid.
From January 1, 2027 - the start of the licensed market: permitted private B2C operators can launch online casinos/slots and bets (including sports).
Who licenses: in 2026, applications are accepted by the National Police Council; from 2027, the powers will be transferred to the new Finnish Supervisory Agency.

3) What opens up and what remains a monopoly

Competition opens (B2C, from 2027): online casino, online slots, online betting (including sports; the project also covers online betting in a broad sense).
It is retained by Veikkaus (monopoly): lotteries, instant lotteries (scratch), land machines and land casinos. The structure of Veikkaus will be divided: monopoly and competitive parts in different companies of the same group.

4) Licensing architecture and market roles

License terms: the project provides for five-year licenses with the possibility of extensions (a guideline of law enforcement practice).
B2B circuit: licensing of software/content suppliers is provided; for work without risks - mandatory legalization. The expected deadline for B2B is 2028.
Oversight and enforcement: Enhanced powers to block off-licence sites/payments and control advertising.

5) Taxes and fees (benchmarks for planning)

Online verticals (B2C): a single rate of 22% of GGR (government project proposal; final wording approved in law/by-laws).
Supervisory fees: annual fee on a scale of approximately €4,000- €400,000 depending on scale (benchmark for public materials on reform).

Corporate tax/VAT: according to general Finnish rules; game GGR tax separate. (Check current rates before budgeting.)

6) Regulatory processes and who interacts with whom

2026: Application Acceptance and Primary Licensing - National Police Board

From 2027: supervision, monitoring and sanctions - Finnish Supervisory Agency (new body).
Policy and methodology: Ministry of the Interior, coordination of interdepartmental blocks (advertising, consumer protection, payments).

7) AML/CFT and KYC (expected "minimum")

Full identification before admission to the game and payments; sanctions/POP checks; source of funds by triggers.
Transaction monitoring: limits, atypical patterns, account/payment means connections; formalized STR/SAR.
Retention and GDPR: storage of KYC dossiers/logs by time, secure processing of personal data (European standards).

B2B vendors are required to ensure data compatibility and traceability. (Specifics are fixed in the texts of the law/guides when entering the regime.)

8) Responsible Gaming (RG) and advertising

Mandatory player limits (deposits/losses/time), timeouts and self-exclusion; UX mechanics of "cooling."

Advertising: prohibition of aggressive inductions, targeting minors; RG markings; compliance with the "watershed" and the frequency of placements; block lists for unlicensed brands and their payment routes.

9) Technical requirements and supervision access

WORM logs and time synchronization; exact chain "rate → calculation → payment → adjustment."

Interfaces for the regulator: API/uploads, test accounts, secure channels.
Reliability/security: DR/BCP with target RPO/RTO, encryption at rest/in transit, RBAC/SoD, pentest regulation.
Anti-circumvention: interaction with banks/PSPs and telecom operators to comply with blocking orders.

10) Entry Roadmap (B2C/B2B)

1. Strategy: vertical portfolio, target unit economy at 22% GGR tax and supervisory fee.

2. Licensing: preparation of dossiers for Q1-Q2 2026, admission - through the National Police Board.

3. IT circuit: RNG/platform certification, WORM logs, API/uploads, GGR/NGR calculation showcases.

4. AML/KYC/RG: data providers (sanctions/PEP), SoF procedures, limits/timeouts/self-exclusion, RG logs.

5. Marketing: pre-moderation of creatives, self-exclusion filter, off-limits inductions.

6. UAT: test cases for exceeding limits, correctness of bonus accounting, STR/SAR flow.

7. Go-Live (2027): freeze configurations, runbook incidents, SLAs with providers/payments.

1. License B2B (landmark - mandatory by 2028).

2. Compatibility: reporting formats/data schemas, version control.

3. Security: secure SDLC, pentests, encryption, secret management.

4. Marketing: no promotion of unlicensed B2C for Finland (risk of ad/bypass sanctions).

11) Compliance checklists

Licensing and Finance

• Ready document package; accounting for 22% GGR and annual supervisory fees.
• Separate vertical reports; reconciliation otchetnost↔billing <0.5%.
• Submission/Payment Calendar and Responsible Roles.

AML/KYC & RG

• KYC/KYB policies, sanctions/PEP, SoF triggers; check logs.
• Deposit/loss/time limits, timeouts, self-exclusion; magazine of RG cases.
• STR/SAR procedure, CCM/log storage time.

Supervision technique and access

• WORM logs, time synchronization, DR/BCP tests.
• RNG/Module Certification; API/uploads and test accounts for the regulator.
• Payment/domain block list-controls and interaction with PSP/communication.

Marketing & Affiliates

• Pre-moderation of creatives, RG labeling, frequency caps.
• Self-excluded filters; rejection of aggressive inductions.
• Compliance log (screenshots/URLs/dates).

12) KPI for the first year

Fiscal: timely reporting ≥99%; discrepancy otchetnost↔billing <0.5%.
AML/KYC: average verification time, share of false positives, SLA STR/SAR.
RG: proportion of players with active limits; Self-exclusion TTR <1 min; the proportion of RG complaints.
Information base: MTTR on incidents, pentest coverage, closure of critical vulnerabilities on time.
Marketing: 100% self-excluded filtering; 0 violations of advertising restrictions.

13) FAQ

When will the market really open for private B2C operators?
Acceptance of applications - from 2026, launch of licensed services - from the beginning of 2027.

What exactly will remain the Veikkaus monopoly?
Lotteries, Instant Lotteries, Land Machines and Land Casinos; online casinos/slots and betting are moving to a licensed model.

What is the target tax rate being discussed for online verticals?
The project provides for a benchmark of 22% of GGR + supervisory fees (the range was published in the reform materials). Specify the final text of the law/regulations.

Who will license and supervise?
In 2026 - National Police Board (acceptance of applications). From 2027 - the new Finnish Supervisory Agency (licensing/supervision).

When will B2B vendors need a license?
According to public materials of the reform - from 2028. Follow the final text of the norms.

Ad notata

The draft and by-laws are being adjusted (including details on advertising, block measures, fee scale and B2B mode). For legally significant decisions, check the official publications of the Ministry of Internal Affairs and the Government of Finland - the section on gambling reform and press releases on the bill.