Paystack is a payment processor. It is not a gambling regulator, a licensing body, or a fitness-and-propriety check on the operator sitting on the other side of your deposit. That distinction matters more in Nigeria in 2026 than it did in 2023, because on 22 November 2024 the Supreme Court of Nigeria nullified the National Lottery Act 2005 and confirmed that authority over games of chance sits exclusively with the states. The NLRC's federal remit collapsed to the FCT that day. Whether the casino accepting your Paystack transfer holds a valid state licence is now the entire question — and it is a question the payment rail cannot answer for you.
We will walk through three composite scenarios. Each is hypothetical. We have not interviewed these people. They are illustrative reader profiles built from the payment mechanics, the state-by-state licensing map, and the certification disclosures on the public record. Each scenario is chosen because it maps to a decision most Nigerian readers of this piece are actually making. Read all three. One of them will be closer to your situation than the marketing copy on any casino's landing page will admit.
Scenario 1: The Lagos Weekend Punter Depositing ₦20,000 via Paystack
Picture a civil engineer in Ikeja, twenty-nine, who deposits ₦20,000 into a Nigerian-facing casino every Friday evening via Paystack. He plays slots for two hours. He notices the operator's homepage carries a "licensed in Nigeria" badge. He has never checked which state issued that licence. He has never had to. Until November 2024, the NLRC seal at the bottom of the page was the answer. It no longer is.
Here is where the numbers start to matter. His annual notional stake, before any bonus rebate, is roughly ₦1,040,000 across 52 weekly sessions. The 2022 Finance Act attached federal VAT at 7.5% to betting stakes, applied at the point of the transaction rather than the point of winnings. That is a fixed drag on his gross flow no matter which slot he chooses. On top of that sits the game's own RTP. If the slots he plays are supplied by NetEnt, the range on public product disclosures is 94.00–96.70%, documented on the studio's own game pages. If they are supplied by Pragmatic Play, the disclosed range is 94.00–97.00%. Assume he lands mid-range at 95.5%. His mathematical expected loss on wagered volume, before VAT, is 4.5%. Compound the two frictions and the expected annual erosion is closer to ₦120,000, not the ₦47,000 that a 4.5% headline would suggest.
None of that is the interesting question. The interesting question is whether the operator holds a live licence from the Lagos State Lotteries and Gaming Authority — because Lagos, not the federal government, is the entity that can pull the plug on the operator's ability to hold his money. The Lagos State Lotteries and Gaming Authority publishes its licensee list. If the operator's name does not appear there, the "licensed in Nigeria" badge on the homepage is, at best, referencing an old NLRC permit that has no operative force outside the FCT. At worst it is referencing nothing at all. Paystack will still route the ₦20,000. The regulator will not underwrite the withdrawal.
The concession we owe this scenario is real: the operator's slot math is genuinely certified, in most cases, by GLI or iTech Labs. That is the strongest point in favour of trusting the platform. But a certified RNG at an operator without a valid state licence is a fair coin held by a counterparty you cannot sue in a Lagos High Court. The mathematics work. The recourse does not.
Scenario 2: The Abuja Slots Player Who Read That NLRC Still Regulates
Imagine a thirty-four-year-old civil servant in Wuse II, Abuja, who deposits ₦50,000 monthly via Paystack. He read a blog post from mid-2024 stating that the NLRC regulates all online gambling in Nigeria. He kept that assumption. He did not read the Supreme Court's 22 November 2024 judgment or the enforcement notices that followed. His operator's compliance page still cites an NLRC permit number. He treats that as sufficient.
Here is where the story gets awkward for the skeptic. Abuja is in the Federal Capital Territory. The Supreme Court did not strip the NLRC of the FCT. It confined the NLRC to the FCT. That is not the same thing. So an operator holding a live NLRC permit and serving a customer physically located in Abuja is, on the current reading, operating inside the one geographic zone where the NLRC still has statutory authority. The player's assumption is not, strictly, wrong.
But the primary document cross-reference is where the assumption starts to fray. Two documents are operative here. The first is the NLRC's own post-judgment enforcement posture, which limits its licence-issuance authority to the FCT. The second is the certification scope statement from the operator's testing lab. If the operator uses GLI, the scope published on GLI's certificates portal covers RNG statistical randomness, game math verification against paytable specification, and RTP empirical validation across 10 million simulated rounds. It does not cover the operator's licence status. It does not cover cash-out reliability. It does not cover complaints handling. The certificate is narrower than the marketing page implies. Both documents are correct. Neither of them, standing alone, tells the Abuja player what he thinks it tells him.
His monthly ₦50,000 becomes ₦600,000 annually. The VAT drag is the same 7.5%. If his slots run at a 95% RTP mid-range, his expected annual loss lands near ₦75,000 in game edge and another ₦45,000 in stake-VAT. Roughly one-fifth of the notional flow is gone before the first spin outcome is calculated in his favour. And this is the scenario where the operator is licensed. Where the compliance is legitimate. The math still works against him. The regulator can only confirm that the game is fair; the regulator cannot promise that the strategy is winning. Those are different guarantees and the Federation of State Gaming Regulators of Nigeria (FSGRN) — modelled loosely on the UKGC's public-register discipline — has not yet published the state-by-state harmonised register that would make this distinction obvious to a casual reader.
Scenario 3: The Port Harcourt Player Using an Offshore MGA-Licensed Casino
Picture a forty-one-year-old oil-sector consultant in Port Harcourt who deposits ₦100,000 monthly via Paystack into a casino headquartered in Malta. The operator's website prominently displays an MGA licence. The player takes this as the strongest possible endorsement, because his research told him MGA is a tier-1 regulator, comparable to the UKGC. His research is correct. His conclusion is not.
The MGA licence is a tier-1 licence for the jurisdictions it authorises. It does not authorise the operator to serve players in Rivers State, Nigeria. The Supreme Court's November 2024 ruling did not merely reassign federal authority — it made explicit that any operator serving a Nigerian player without the specific state licence for that player's state is operating outside the country's post-nullification framework. The MGA licence is real. Its geographic scope is not Nigeria. Paystack, again, will route the ₦100,000. The MGA will not adjudicate a Nigerian player's dispute against the operator, because the player was never inside the MGA's jurisdictional envelope in the first place.
The comparative cross-reference is worth running. When the UKGC fined Bet365 £582,120 in December 2022 for social-responsibility and AML failings, that fine only applied because Bet365's UK-facing entity was under UKGC scope. The action is on the public record at the UKGC's news release. When Entain settled a £585m Deferred Prosecution Agreement in December 2023, the DPA specifically covered the former Turkey-facing business — a jurisdiction where the operator had chosen to serve players, as Entain's own announcement documents. Regulators enforce inside their envelope. Outside it, they do not.
For the Port Harcourt player, the practical implication is stark. His ₦1.2m annual flow is inside a payment rail that Nigerian regulators can freeze, feeding an operator that Nigerian regulators cannot compel to pay out, licensed by a regulator that will not take his complaint. The math on the slot itself may be genuinely fair — the game supplier's RNG certification is a real thing. But the recourse question, the "what happens if the withdrawal does not clear" question, has no operative answer. The MGA responsible-gambling framework and equivalents like GAMSTOP's cross-operator UK self-exclusion register do not extend to a Rivers State player.
What All Three Share: The Rail Is Not the Regulator
All three players are using the same payment infrastructure. Paystack, Flutterwave, Interswitch, Monnify, Remita, and the USSD stack sit under the Central Bank of Nigeria's payments oversight. That is a real, functioning regulatory layer. It is a regulatory layer for payments. It is not a regulatory layer for gambling.
The pattern across the three scenarios is that each player has substituted a rail-level assurance for a licensing-level assurance. The Lagos player trusted a "licensed in Nigeria" badge without checking which of the thirty-six state authorities issued it. The Abuja player trusted an NLRC permit whose scope collapsed to a single territory in November 2024. The Port Harcourt player trusted an MGA licence whose geographic scope excludes Nigeria entirely. In every case, Paystack processed the transfer without objection. It has no reason to object. Its job is to move Naira from a bank account to a merchant account, and the merchant it is paying holds a Nigerian payments profile regardless of whether that merchant holds a gambling licence for the state the player is physically in.
The 2022 Finance Act's federal VAT on betting stakes still applies in all three scenarios and drains the same 7.5% from the top of the notional flow. The federation-level tax reaches the player even where the federation-level licence does not. That is the asymmetry the FSGRN is trying, slowly, to unwind through inter-state harmonisation. Until the harmonised register exists, the payment rail continues to look like a licence and continues not to be one.
Which Scenario Is You: A Direct Read on Your Own Deposit
Open the compliance page on the casino you are currently depositing into via Paystack. Look for the state licensing authority. If you find "Lagos State Lotteries and Gaming Authority" and a live licence number, you are in Scenario 1 — the math works against you, but the regulator can theoretically be reached. If you find "NLRC" and you are physically located inside the FCT, you are in Scenario 2 — legitimate, but with the certification narrower than you assume. If you find "MGA", "Curacao", "Anjouan", or any offshore-only reference, you are in Scenario 3 — payment rail carries the deposit, but licensing recourse is outside Nigerian reach.
If you find no licensing information at all, the operator is running a fourth scenario we did not need to walk through separately. The answer there is not to walk through the math. The answer there is to withdraw whatever balance is currently sitting in the account and stop depositing.
We would reverse the conclusion of this piece if the FSGRN published a real-time, cross-state register of licensed operators with active status and last enforcement action attached — the way the UKGC does at its public register and the way the Ontario iGaming framework does at AGCO. Until that register exists, the payment rail will keep looking like a licence, and the argument in this piece holds.
FAQ
Is it illegal to use Paystack to fund a casino account in Nigeria?
Paystack itself operates under CBN payments oversight and is not the entity a gambling regulator would sanction. The legal question is not about the rail; it is about whether the merchant on the other end holds a valid state gambling licence for the state you are physically depositing from. If the operator is licensed by the LSLGA in Lagos and you are a Lagos resident, the deposit is legally clean. If the operator holds no valid Nigerian state licence, the transaction is being processed but the underlying activity sits outside the post-2024 licensing framework.
Which Nigerian states currently license online casino operators?
Lagos is the most active licensing state through the Lagos State Lotteries and Gaming Authority. Other states operate their own gaming boards under state-level lottery acts, with authority confirmed by the Supreme Court's November 2024 nullification of the federal National Lottery Act 2005. The Federation of State Gaming Regulators of Nigeria (FSGRN) is working to harmonise these regimes, but as of 2026 the register remains fragmented — each state's licensing list must be consulted separately.
Does the NLRC still regulate anything?
Yes, but only inside the Federal Capital Territory. After 22 November 2024, the NLRC's remit was confined to Abuja and the surrounding FCT area. An NLRC licence displayed by an operator serving customers in Lagos, Rivers, Kano, or any of the 35 other states is not a licence with operative force in that jurisdiction. The badge may be historical residue from the pre-2024 federal regime.
What VAT applies to a Paystack deposit into a casino?
The 2022 Finance Act attached federal VAT at 7.5% to betting stakes, applied at the transaction level rather than on winnings. This is a federal tax and applies to every stake regardless of which state licences the operator. For a player depositing ₦100,000 monthly, the annual VAT drag on stakes alone is roughly ₦90,000 before any consideration of the game's RTP or the operator's own margin.
Can an offshore MGA-licensed casino legally accept Nigerian deposits via Paystack?
Payment mechanics and licensing scope are separate questions. Paystack can route the deposit; the MGA's licence scope does not extend to Nigerian jurisdictions. An operator serving a Nigerian player without a valid state gambling licence for that player's state is operating outside Nigeria's post-nullification framework, and any dispute the player later raises would fall outside both Nigerian state regulators and the MGA's own complaints framework.
How can I verify a Nigerian casino's state licence?
Consult the licensing authority for your state directly. For Lagos residents, this is the Lagos State Lotteries and Gaming Authority's published licensee list. Do not rely on the operator's own compliance page or a badge in the site footer — verify against the state regulator's own register. Where a state regulator has not yet digitised its register, request the licence number and cross-reference by written enquiry before depositing meaningful volume.
What happens to my balance if the operator's state licence is revoked?
This is the recourse question the payment rail cannot answer. State gambling regulators have varying enforcement postures on player-fund protection. Where the operator has segregated player funds under its licence conditions, revocation typically triggers a return-of-funds process. Where segregation was not enforced, the player becomes an unsecured creditor. The FSGRN harmonisation effort is intended to standardise player-fund rules across states, but standardisation has not yet been published.