A compliance lead at a HGC-licensed operator told me, over coffee at a Lisbon iGaming side-event last autumn, that the question Greek players actually ask isn't "is it legal." It's "legal for who, and how long does this version of legal last." He wouldn't let me quote him by name. The framing stuck.
That is the uncomfortable truth nobody at OPAP, Stoiximan, or Novibet puts on a landing page: Greek online gambling has been legal since 2022 under a licence framework that is already being rewritten. On 1 July 2026, if the overhaul bill passes as drafted, player taxation and session reporting shift again. Here is what the HGC licence covers, in plain language, right now.
So Is Online Casino Actually Legal in Greece in 2026?
Yes — for you, the player, if you are using a site holding a Hellenic Gaming Commission (Επιτροπή Εποπτείας και Ελέγχου Παιγνίων, ΕΕΕΠ) licence. The HGC issued the first Greek-jurisdiction online licences in 2022 under Law 4002/2011, as amended. Before that window opened, every operator serving Greek residents was doing so under a "transitional regime" that was treated as tolerated rather than authorised.
Listen, here's where most explainers stop. The legality applies asymmetrically. The operator needs the licence. You, as a resident playing on a non-licensed site, are not committing a criminal offence in the same direct sense — but your deposits sit outside the consumer-protection envelope the HGC is built to enforce. By December 2025, the HGC had blocked roughly 11,000 unlicensed domains at the ISP level. That number tells you how the regulator views the legality question in practice.
What Does the HGC Licence Actually Authorise (Type A vs Type B)?
The Greek framework splits online into two licence types, and the split matters more than the marketing suggests. Type A authorises online betting — sports, virtuals, betting-shaped products — with a regulatory fee of EUR 3 million. Type B authorises online casino and online poker, fee EUR 2 million. An operator wanting the full deck needs both. Stoiximan, Novibet, Winmasters, Bet365's Greek-licensed entity — they all hold both because the product they sell Greek users would be incomplete without both.
What the licence does NOT do is give the holder a blank cheque on game catalogue. Each title — RNG slot, live dealer table, video poker — is enrolled into a per-game certification chain. The HGC accepts test reports from named labs; Gaming Laboratories International sits in that accepted list alongside iTech Labs, eCOGRA and BMM. The certificate the operator points to is title-specific, not operator-wide. That distinction is the whole story when something goes wrong.
How Much Does an HGC Licence Actually Cost an Operator?
The headline numbers are the EUR 3M (Type A) and EUR 2M (Type B) initial fees. The number that matters more is the 35% Greek State levy on Gross Gaming Revenue — uniform across online and land-based, applied at the operator level before any other corporate tax. That is what determines which brands can credibly run a Greek-licensed business and which decide it is not worth the build.
For comparison: Portugal's SRIJ takes 25% on online casino GGR and a sliding 8-16% on sports betting. Germany sits at 5.3% of stakes for slots, applied through the new GGL regulator. Greece's 35% GGR is one of the harder regulated-market tax loads in Europe. The implication for players is dull but real: bonus generosity on HGC-licensed sites is structurally lower than on MGA-licensed sites serving other EU markets, because the operator margin is thinner before the marketing budget is set. When you see a "EUR 20 no-deposit, 30x wagering" promo on a Greek-licensed casino, the wagering requirement is doing the work the GGR tax already did upstream.
How Are My Winnings Taxed Right Now?
Player-side, the 2026 regime in force at time of writing is the sliding scale most Greek players already know. The first EUR 100 of winnings is tax-free. The bracket EUR 100.01 to EUR 500 is taxed at 15%. Above that the rate climbs further. The tax is withheld at source by the licensed operator before the withdrawal hits your account, which is one of the underrated reasons the HGC framework matters: the operator does the reporting, not you.
I want to flag this because Greek-language forum threads still recycle pre-2022 advice. The "you have to declare your winnings to the AADE yourself" framing is wrong for licensed-operator winnings under the current regime — it remains true for any winnings off the HGC perimeter, which is exactly why the perimeter exists.
What Changes on 1 July 2026?
A 2026 overhaul bill is in motion that, if enacted on the timeline currently signalled, introduces a per-session tax structure on online winnings — explicitly including poker and live casino, which the older scheme treated less granularly. The drafted bands: first EUR 100 tax-free, up to EUR 500 at 20%, above EUR 500 at 30%.
Two things to understand about this. First, the framework is moving from per-withdrawal accounting toward per-session accounting, which materially changes how grinder-style players (poker, blackjack volume) interact with the tax. Second, the bill is not yet final law as of mid-2026, and Greek gambling legislation has a track record of slipping its own deadlines. Watch the Government Gazette (ΦΕΚ) for the actual publication date of the implementing decree — that is when the rate changes bind, not the political announcement.
What Happens If I Play on a Non-HGC Site From Greece?
Three things, in order of how often each actually bites. One — the site progressively becomes harder to reach. The HGC issues blocking orders to Greek ISPs, and the registry of blocked domains now sits in the five figures. Two — deposit and withdrawal rails degrade. Greek banks and local payment rails (Viva Wallet, IRIS) increasingly refuse merchant codes flagged as unlicensed gambling. Three — dispute resolution disappears. You have no recourse to the HGC complaints process for a site the HGC has no licensing relationship with. The MGA can't help you either, even if the operator holds an MGA licence, because MGA enforcement applies inside its own perimeter.
This is the practical asymmetry. Greek law does not jail you for playing on a non-licensed site. It just systematically degrades the experience and removes every consumer protection lever you would otherwise have. The HGC enforcement model is not punishment of the player. It is removal of the player's safety net.
Is OPAP Still the Only Operator That Matters?
For VLTs and land-based, mostly yes — OPAP S.A. holds the exclusive Greek VLT concession, capped at 25,000 machines, which is the partial-monopoly position older Greek explainers describe. For online, no. The 2022 licensing round broke the historical OPAP monopoly position online, and the live HGC-licensed online roster includes Stoiximan (Kaizen Gaming), Novibet, Winmasters and Bet365's Greek entity alongside OPAP's own online product.
Where it gets interesting is on what each holds. Compare the UK Gambling Commission's public register approach, where every licensed operator is searchable by name with current status — the HGC publishes equivalent material in Greek, but in less navigable form. The reader-side workflow is the same: never trust the operator's claim, check the regulator's list. The list is the document.
How Do I Actually Verify That a Casino Is HGC-Licensed?
Open the HGC website (gamingcommission.gov.gr), find the published list of licensed providers, and match the operator's legal entity name — not the brand name — against it. The brand name and the licence holder often differ. Stoiximan is the brand, Kaizen Gaming is the licensee. Bet365 in Greece is a separately registered Greek entity, not the Stoke-on-Trent parent. This is a common operator structure across regulated EU markets and it trips Greek players who assume the global brand they recognise is the legal counterparty.
Three quick sanity checks. The HGC licence number should appear in the website footer. The operator's terms of service should name a Greek-jurisdiction entity. The withdrawal flow should route through a Greek-accepted payment rail (Visa/Mastercard, Skrill, Trustly, IRIS). If any of those three are missing or vague, you are not on an HGC-perimeter site, regardless of what the marketing implies.
What Player Protections Does the HGC Framework Actually Give You?
A national self-exclusion register that binds every HGC-licensed operator simultaneously. Mandatory KYC and source-of-funds checks at deposit thresholds. Operator-side responsible-gambling tooling — deposit limits, session limits, reality checks — that the regulator audits rather than the operator self-reports. Player fund segregation requirements that put your balance outside the operator's general creditor pool if the operator fails.
The self-exclusion mechanism is structurally similar to GAMSTOP in the UK and to the cross-operator deposit caps Germany enforces via its GGL regulator's OASIS system — single registration, all licensed brands blocked. The Greek register is the binding mechanism, not the operator's own "responsible gambling" page. If you ever need it, you go to the regulator's process, not the operator's account-settings panel.
Signals to watch over the next twelve months, if you care about how Greek online actually evolves: (1) the Government Gazette publication date for the 2026 overhaul implementing decree — until that prints, the new tax bands do not bind; (2) the HGC's monthly blocked-domain count — accelerating blocks signal harder enforcement posture, decelerating ones signal political slowdown; (3) the licensee roster on gamingcommission.gov.gr — every new addition or quiet exit tells you which operators believe the 35% GGR plus 2026 overhaul math still works; (4) the first publicly reported HGC enforcement action against a licensed operator for social-responsibility failings, which would be the Greek equivalent of the UKGC's settlement register and would establish what compliance under this framework actually demands in practice.
FAQ
Can I play on an HGC-licensed casino as a tourist visiting Greece?
HGC licensees are built for Greek residents, and account opening typically requires Greek tax ID (AFM) and address verification. As a visiting tourist you generally cannot register a fresh account on an HGC-licensed site. If you already hold an account with the same operator's brand in your home jurisdiction (Stoiximan's Cypriot or Portuguese version, for example), you should use the home-jurisdiction wallet rather than trying to play the Greek site.
Is using a VPN to access non-HGC operators from Greece illegal?
Using a VPN itself is not illegal in Greece. Using one to access a gambling site the HGC has blocked puts you outside every consumer protection the licensed framework provides. There is no realistic prosecution risk against the individual player — but you have no complaint path, your deposits sit on a site Greek banks may refuse to settle to, and your winnings are off the licensed taxation rail, which creates its own AADE exposure if amounts are material.
Does the HGC licence cover online poker the same way as casino?
Yes, online poker sits under the Type B (online casino and poker) licence, EUR 2 million fee. The 2026 overhaul is notable because it explicitly brings poker session winnings into the new per-session tax bands, which changes the economics for serious grinders. Cash-game and tournament results both fall inside the per-session reporting model under the drafted rules.
What payment methods actually work on HGC-licensed casinos?
Visa and Mastercard are the default. Skrill, Neteller, Trustly and Viva Wallet are widely supported. IRIS Online Payments — the Greek instant bank-to-bank rail — is increasingly accepted and has the cleanest reconciliation with Greek banks. Crypto deposits are generally not supported on HGC-licensed sites because the licensing framework requires identifiable banking-rail provenance for source-of-funds compliance.
How quickly does the HGC actually act against unlicensed operators?
Faster than the older "tolerated grey market" period suggested but not instantly. The blocking pipeline runs on a rolling cadence — the ~11,000 domain figure represents cumulative action through late 2025, not a single sweep. New unlicensed sites typically take weeks to months from launch to block order, which is why the user-side guidance ("verify the licence, do not trust the brand") matters more than waiting for the regulator to catch every offender.
What is the minimum age to gamble online in Greece?
- Greek law sets the minimum gambling age at 21 for both land-based and online, higher than the EU norm of 18. HGC-licensed operators enforce this at the KYC step — your ID document and AFM are verified against the age requirement before deposit. This is one of the bright-line operator obligations the HGC audits, and failure to enforce it has been a focus area in regulator communications heading into the 2026 framework rewrite.