Bulgaria Gambling Regulation: NRA Powers Explained

Bulgaria Gambling Regulation: NRA Powers Explained

Bulgaria’s National Revenue Agency, or NRA, is the central authority responsible for gambling licensing, supervision and public claims under the Gambling Act. The previous State Commission on Gambling was dissolved in August 2020 and its functions transferred to the NRA.

For players, the key evidence is the current NRA register and whitelist of licensed gambling websites. A Bulgarian-language interface or local payment method does not prove authorization.

The NRA replaced the former State Commission

From 8 August 2020, state supervision in gambling moved to the NRA. The Director General of the agency exercises the relevant powers and can delegate them to an authorized deputy.

Historic references to the State Commission should be checked against current NRA records.

Separate licences apply to defined games. The NRA’s whitelist guidance states that a licence authorizes only the game explicitly identified in it. Different gambling products can require separate permissions.

An operator licensed for sports betting should not be assumed to hold an online-casino licence.

The official registers identify operators and decisions

The NRA maintains registers under Article 20 of the Gambling Act. These include gambling organizers and issued, refused, withdrawn or modified licences.

Official record What to verify
Organizer register Exact legal entity
Licence register Product, status and licence decision
Website whitelist Exact authorized internet domain
Equipment and supplier registers Approved manufacturing, distribution or service activity

The website whitelist is central for online players. The NRA publishes a list of internet sites through which licensed entities organize gambling. Domain matching is essential because copied licence numbers and similar names can be used by unrelated sites.

The official whitelist was updated in April 2026 according to the NRA page available during this review.

Licensing covers software and technical systems. The Bulgarian framework includes approval processes for gaming equipment, jackpot systems, gaming software, central computer systems, online betting systems and communication equipment.

This does not mean every supplier logo is itself a consumer licence. The player needs the operator and website authorization first.

Operators have recurring declaration duties

Online gambling organizers submit monthly declarations under the Gambling Act. The NRA’s English guidance lists online lottery, sports and event betting, slot-machine and casino products among the covered activities.

Electronic submission and qualified signatures create a documented reporting process.

Tax administration is part of NRA supervision. The NRA also administers gambling-related taxes and public claims. Operators must keep detailed records sufficient for revenue authorities to establish liabilities.

Tax supervision does not replace game fairness or consumer-protection review, but it creates financial accountability.

Remote casino and slot activity has specific tax reporting

The NRA’s tax guidance states that organizers of slot-machine and casino games, including games organized remotely, submit relevant quarterly declarations under the Corporate Income Tax Act.

Players should obtain local tax advice for their own winnings and residence rather than infer treatment from operator taxes.

Advertising rules have tightened. Bulgaria has changed gambling advertising rules in recent years, including significant restrictions on mass-media promotion. Operators and affiliates must follow the current national framework.

Advertising compliance does not prove that the underlying domain is licensed; the whitelist remains decisive.

Unlicensed websites can face blocking action

The regulatory system supports action against websites offering gambling without Bulgarian authorization. Mirror domains and changing web addresses make direct verification necessary each time.

A VPN or technical accessibility does not convert an unlicensed site into a legal one.

Ownership and financial suitability remain relevant. Licence review can examine the applicant, controllers, funding, technical ability and legal compliance. Changes in ownership or corporate status can affect the record.

Players should compare the legal entity in the terms and payment descriptor with the NRA register.

Game fairness depends on approved systems and live configuration. A licensed operator should offer games and systems within its approved permissions. The help screen should identify provider, rules and RTP where applicable.

A regulator logo alone does not prove the configured game version or correct settlement of one disputed round.

Player complaints need transaction evidence

A player should first use the operator’s written complaint route and preserve:

  • account and identity records;
  • deposit and withdrawal confirmations;
  • game round IDs;
  • bonus and general terms in force;
  • support correspondence;
  • the domain and licence record.

The regulator can investigate compliance more effectively when the alleged breach is specific.

Bulgarian licensing does not authorize every other market. A Bulgarian licence applies under Bulgarian law. Operators serving Great Britain, Ontario, Denmark or another locally licensed market may require separate permission there.

Likewise, a foreign licence does not replace Bulgarian authorization for a site targeting Bulgaria.

How to verify a Bulgarian gambling site

  1. Identify the legal operator in the terms.
  2. Search the NRA organizer and licence registers.
  3. Match the exact domain in the official whitelist.
  4. Confirm that the licence covers online casino or the relevant product.
  5. Check current status and any changes.
  6. Review payment, withdrawal and complaint terms.

The NRA’s official gambling information page explains the transfer of supervision, while the register portal provides the authoritative records.

The NRA’s public pages can be difficult to navigate without JavaScript, so verification should be documented carefully. Save the register date, operator name, licence category and exact domain rather than recording only that a search once returned a match. Current status can change after enforcement or corporate restructuring.

Players should also distinguish the tax authority’s supervisory role from an alternative dispute-resolution service. A regulator may investigate a breach without deciding every private contractual claim. Written operator escalation and local legal advice can still be necessary for a large unpaid balance.

Domain verification should include redirects. A listed address can send the user to another host, language subdomain or mobile application. The final account-opening domain should still be connected to the licensed entity. Save the redirect path when reporting a suspected clone.

Payment descriptors are another consistency check. A different group company can process funds legitimately, but its role should be disclosed. An unexplained recipient unrelated to the NRA record deserves clarification before further deposits.

Because the regulator also administers public claims, an operator’s financial reporting and tax status form part of the compliance picture. They do not, however, replace direct player protections. A site can meet tax obligations and still have poor withdrawal terms, weak complaint handling or an unsuitable bonus structure.

For that reason, the final review should combine licence verification with ordinary account due diligence: ownership of funds, withdrawal timing, identity rules, game version and the legal route available if the operator rejects a claim.

Current terms should also be checked against Bulgarian consumer and data-protection law where applicable. A licence identifies gambling authorization, but privacy, payment and contractual disputes can involve other authorities. The correct complaint route depends on the specific failure rather than the casino label alone.

For archived reviews, the date of verification should be prominent because the whitelist changes. A domain that was legal in 2025 can later be removed, transferred or redirected. Publishing the source date prevents a historical snapshot from being mistaken for a current recommendation.

Related GambleRoad guides explain regulator standards, licence verification, unregulated casino risks and operator audits.

♠ This article was created by GambleRoad Editorial Team on January 11, 2025, and the information was updated on July 19, 2026.