Casino sites that accept BPAY in Australia in 2026: what the method settles, what the regulator has settled against, and what a player can settle on

Current as of 31 October 2026, with the ACMA’s formal warning register and blocking notices read against the operator set on that date. Figures on enforcement totals reflect the ACMA’s June 2026 release.

The mechanics of BPAY at an online casino

BPAY is a bill-payment rail that runs through Australian online banking rather than a card network. The payer opens their bank app, enters a Biller Code and a Customer Reference Number (CRN) printed on the bill, and the funds travel through the bank’s own systems and on to the biller. The system has been live since 18 November 1997, sits inside the online banking of more than 140 Australian banks and credit unions, and is operated by Australian Payments Plus, the same organisation that runs PayID and Osko. Its four majority owners through Cardlink Services Limited are ANZ, Commonwealth Bank, NAB and Westpac, the same four that effectively sit behind most Australian payments infrastructure.

For an online casino, “accepting BPAY” means displaying those Biller Code and CRN fields on the deposit page, and treating the incoming payment as a transfer from a verified Australian bank account. From the bank’s side the payment reads as a bill payment to the biller registered with BPAY, and arrives on the casino’s side the way any other bill-payment settlement would. There is no card present, no chargeback, and no card-issuer standing between the player and the operator. The transaction also clears as a bank transfer, which is the method the Australian licensed wagering sector treats as a lawful deposit route under the Interactive Gambling Act 2001 — a distinction that becomes important the moment one notices that online casino games are not in the licensable category at all.

Three properties of that arrangement matter to a reader comparing it to a card deposit or a wallet transfer. First, settlement is not “instant” the way a PayID/Osko transfer is; BPAY settles in the next batch window, and the bank that issued the payment processes it through the biller’s overnight schedule. That window is short but it is not zero. Second, limits are set by the issuing bank and the biller rather than by BPAY itself; ANZ’s published daily BPAY limit is A$5,000, while St.George allows a cumulative daily BPAY ceiling of A$100,000 with a A$15,000 per-biller cap, and the casino’s own deposit ceiling sits on top of that bank-level cap. Third, the method is reversible only through the issuing bank’s dispute process, not through a card chargeback, and the casino’s side of the ledger settles on receipt, before any gameplay — there is no authorisation step in the way a card-present purchase has one.

The legal settlement: why “accepting BPAY” does not settle legality

The Interactive Gambling Act 2001, as tightened by the Interactive Gambling Amendment Act 2017, makes it an offence to provide online casino games, online pokies or in-play betting to a person physically in Australia. No state or territory regulator in Australia issues an online casino licence; the Northern Territory Racing and Wagering Commission oversees 52 online bookmakers — Sportsbet, Bet365, Ladbrokes among them — but its jurisdiction covers wagering on races and sport, not casino games. The Commission itself has no full-time staff and meets once a month in Darwin, which is part of how a regulator with that workload keeps pace with offshore operators that launch a new domain on a Tuesday.

What that means for a casino displaying Biller Code and CRN fields is plain: the rail being used for the deposit has no bearing on whether the operator is allowed to take the deposit. A bank transfer is the lawful deposit route for a licensed Australian wagering service; it is also the lawful deposit route an offshore casino uses because no Australian-licensed casino exists to use anything. The presence of a BPAY field on an offshore casino’s cashier page tells a player nothing about the operator’s standing under the IGA and nothing about recourse if a withdrawal is later refused.

Enforcement sits with the Australian Communications and Media Authority. The ACMA investigates complaints, issues formal warnings, and directs Australian internet service providers to block sites. According to the Authority’s June 2026 update, a cumulative 1,751 illegal gambling and affiliate marketing websites have been blocked since the first blocking request in November 2019, and more than 230 unlicensed gambling services have left the Australian market since the regime was strengthened in 2017. The June 2026 round alone added 12 sites: 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz, Spinrise, Vinyl Casino and Wildsino.

H2 Gambling Capital’s 2025 figures put the Australian annual loss to illegal gambling sites at roughly A$3.9 billion, and the share of gambling spend that runs through legal channels had fallen from 74% in 2021 to 64% by the time the report was written — the exact opposite direction the regulator would want the figure to move. A reader comparing “BPAY-accepting” sites is not comparing deposit rails so much as comparing where the operator sits on that 64% line, and on which side the ACMA has placed them.

Responsible gambling supports that follow the payment

The Australian responsible-gambling infrastructure is built around licensed wagering services, and offshore casinos sit outside it in ways that follow the deposit rail. BetStop, the National Self-Exclusion Register that has been live since August 2023, binds Australian-licensed online and phone wagering services only — an offshore casino has no connection to it, regardless of the payment method on its cashier page. A player who self-excludes through BetStop closes off licensed bookmakers and nothing else; a self-exclusion request delivered to an offshore support address has no Australian enforcement behind it.

The deposit-side controls that DO touch BPAY are the bank-level gambling blocks. Commonwealth Bank’s app lets a customer apply a gambling lock to eligible cards that automatically blocks most gambling transactions, with the bank’s own caveat that it cannot guarantee every gambling-related purchase will be stopped. Westpac’s gambling block works at card level too: it refuses authorisation of transactions registered under the merchant category code “Betting/Casino Gambling” on eligible personal credit and debit cards. ANZ’s gambling block, activated in the ANZ app, also blocks gambling transactions made through a digital wallet such as Apple Pay on an eligible card, and removing the block once it is on takes a 48-hour waiting period. The same caveat ANZ publishes applies here as well — not every gambling transaction will be blocked, and some non-gambling ones may be blocked in error.

For a BPAY deposit specifically, a bank block is a blunt instrument: BPAY is a bank transfer, not a card transaction, so the merchant-category-code blocks above do not intercept it. What does intercept a BPAY payment flagged as gambling is the bank treating it as a bill payment to a registered biller that the bank’s own risk systems have flagged. A bank blocking a BPAY payment at that level is acting on its own rules and not on a shared register, which is why two banks may handle the same flagged biller differently.

For players who want to talk the decision through, the National Gambling Helpline at 1800 858 858 runs free, 24/7, with chat at Gambling Help Online. The service is for the player, not the operator; the number is worth keeping beside a BPAY deposit screen the same way it sits beside a credit card one.

What a BPAY deposit and a withdrawal actually look like at an offshore site

A BPAY deposit at an offshore casino typically runs in three steps. The casino generates a one-time Biller Code and CRN combination for the player, the player enters those into their bank’s online banking, and the funds settle on the casino side on the next BPAY batch window. The casino credits the account when its own ledger shows the payment. The whole loop reads as ordinary to the player as a utility bill — which is part of why the rail is so attractive on a casino deposit page.

What the player does not see is the biller registration that sits behind that CRN. BPAY is offered by more than 95,000 Australian businesses, and the casino’s biller registration is one of those; the biller code looks the same on the screen whether the biller is a utilities company or an offshore operator. There is no “casino” tag on the payment.

A withdrawal back to a BPAY setup is rarer in practice. Many offshore casinos offering BPAY for deposits route withdrawals through a different rail — a bank transfer, a card refund, or a wallet — because the biller-rail model is built to receive payments rather than to push them out. Where a casino does advertise “BPAY withdrawals”, it usually means a return transfer to the same verified bank account, processed in the next batch. Settlement times are typically longer than a PayID/Osko return, where participating banks settle in under a minute around the clock including weekends. The difference is enough that a player expecting card-style instant withdrawals will read a one-day BPAY window as friction; a player expecting a bill-payment settlement will read it as the system working.

Three practical consequences follow. First, deposit and withdrawal are not symmetric on this rail, and a casino advertising “fast BPAY payouts” is generally promising something the method itself does not deliver. Second, the deposit-side bank limits cap what the player can put through in a day, regardless of the casino’s own ceiling. Third, because the payment is a bill payment rather than a card transaction, the bank’s gambling block may not stop it the way it stops a card-present gambling transaction — a player relying on a card block to enforce a deposit limit is relying on the wrong control for this rail.

How this shortlist was put together, and what separates one option from another

Eleven sites are reviewed below. Each has been the subject of a formal warning from the ACMA under the Interactive Gambling Act 2001 for offering prohibited interactive gambling services to people in Australia. The list is not a ranking of which casino is best, and it is not a recommendation: it is the set of brands the Australian regulator itself has named, organised by the date the ACMA acted, so a reader can see at a glance which operators the Authority has put on notice and when.

Two consequences follow from that framing. First, an absence from this list does not mean a site is licensed or lawful; it means the ACMA has not, in the period the research covers, published a formal warning over it. The 1,751 blocked domains since November 2019 — and the 230-plus operators that have left the Australian market since 2017 — are spread far wider than any eleven-name list, and the ACMA’s June 2026 round alone added a further twelve domains to the blocked list. The featured set is the named set, not the lawful set.

Second, the criteria that genuinely separate one option from another here are not bonus size or game count, because those are precisely the criteria the ACMA has found these operators advertising in breach of the IGA. The separating criteria are: which operator the ACMA named, when, and over which brand; which parent company sits behind the brand; and what the ACMA’s pattern of action across that parent company looks like. Those three pieces of information are what the table below carries, and they are also what each operator write-up closes on.

The ACMA action landscape at a glance

The table below summarises the regulator’s action against each of the eleven brands reviewed below. The date column shows when the ACMA issued a formal warning, and the operator column names the legal entity the Authority published against. Where research’s listing sources are silent on BPAY support specifically, the support column carries the no-data marker.

The ACMA action landscape at a glance (2)

The table below summarises the regulator’s action against each of the eleven brands reviewed below. The date column shows when the ACMA issued a formal warning, and the operator column names the legal entity the Authority published against. Where research’s listing sources are silent on BPAY support specifically, the support column carries the no-data marker.

The pattern the table reveals is one a reader weighing any single brand on its own misses: the ACMA’s action is largely action against parent companies that operate multiple brands, not against isolated skins. Dama N.V. alone accounts for four brands on this list — RocketPlay, Level Up, Woo Casino and Spirit Casino — across warnings in 2022, 2025 and 2026. Consolutetish S.R.L. accounts for two — National Casino and Bizzo Casino — both in July 2025, with Bizzo Casino’s history also tying back to a 2022 warning against TechSolutions. Where a parent company has been on the receiving end of multiple warnings, the brand-level entry is part of a longer pattern rather than a one-off.

The BPAY support column is sparse on purpose. Research’s listings sources are silent on whether any of these operators actually display BPAY fields in their cashier for Australian customers, beyond what affiliate marketing pages claim. A column populated with “yes” would be claiming something the inputs do not carry; a column populated with “no” would be claiming the opposite. What the column can honestly show is which brands have any BPAY mention at all in the consulted sources — and even that is on listings-only terms, naming those sources as a reader would name them, never as the operator’s own fact.

How to read the blocking rate

The ACMA’s enforcement record, taken as a whole, runs to a rate that a reader can hold in one number — with the caveat that a single number flattens a moving picture. The Authority’s June 2026 release puts the cumulative count at 1,751 blocked gambling and affiliate marketing websites, with the first blocking request in November 2019. That gives a span of about 79 months from the first blocking request to the June 2026 update, and an average blocking rate of roughly 22 sites a month across that window — with the further caveat that the early years ran at a slower pace and the 2023-2026 period accelerated.

The cleaner way to read it is as a band rather than a single number: between roughly 18 and 28 sites a month across the period covered, slower at the start of the regime and faster after the 2017 strengthening, the 2023 IGA amendments, and the June 2024 credit-card ban on licensed wagering pushed more players onto offshore alternatives. The June 2026 round alone added 12 sites in a single update, which is more than half a month of the long-run average concentrated into one enforcement action — proof, if any was needed, that the regime does not run at a constant pace.

The band matters more than the average because the figure a reader should hold against an offshore casino is not “how many sites were blocked last month” but “how many rounds of blocking this site has already survived”. A brand that has been live through several rounds and is still operating is one that has either changed its legal entity, changed its domain, or both — and the ACMA’s pattern of warnings shows both. Dama N.V.’s 2022, 2025 and 2026 actions cover overlapping brand portfolios, with the parent company carrying the formal warning rather than any single skin.

The eleven operators the ACMA has acted against

What follows is a write-up of each brand on the formal-warning register, in the order research sets out. Each block carries the operator and date the ACMA published against the brand, the parent company the regulator named, and a closing verdict that names what a reader weighing the brand against the others in this list should hold onto.

RocketPlay

The ACMA issued a formal warning in March 2026 against Pulsup Ltd over Rocketplay, after earlier action in May 2022 against Dama N.V. covered the brand. RocketPlay sits at the top of the list because it is the most recent formal warning in the set, and because the parent-company swap between the two warnings — Dama N.V. in 2022, Pulsup Ltd in 2026 — illustrates exactly how an offshore brand can outlive a regulator’s first action: the operator changes hands, the brand stays.

For a reader, the practical question RocketPlay raises is not whether it accepts BPAY; the formal warning establishes that it operates as an offshore interactive gambling service to Australians, which is the prohibited category under the IGA. The question is whether the operator behind the brand today is one with a clean record, or one that has simply moved into a different corporate wrapper. The ACMA’s record on Dama N.V. — four brands on this list under the same parent — answers that question without needing the answer printed.

Level Up Casino

Level Up Casino was one of six Dama N.V. brands the ACMA named in May 2022. It is on this list because the parent company is one of the more prolific recipients of formal warnings across the four-year window the research covers, and because the ACMA’s 2025 warnings to Woo Casino and Spirit Casino sit under the same parent.

What the Level Up entry demonstrates more clearly than the brand-level facts is the pattern. A brand-level action is rarely a brand-level story: Dama N.V. is the entity the Authority has put on notice four times across 2022, 2025 and 2026. A reader deciding whether Level Up has been “warned once and stopped” should be looking at the Dama N.V. record, not at the brand.

Woo Casino

The ACMA issued a formal warning to Dama N.V. over Woo Casino in March 2025. The parent company is the same one named in the May 2022 action, and the same one named in May 2025 over Spirit Casino. Woo Casino is one of three Dama N.V. brands in this set with a 2025-or-later action attached.

The Woo Casino verdict for a reader is the Dama N.V. pattern: an operator that has been on the receiving end of multiple formal warnings, in multiple calendar years, across multiple brands. The ACMA does not publish a “repeat offender” register, but the warning history speaks for itself.

Spirit Casino

Spirit Casino carries a May 2025 formal warning against Dama N.V., making it the third brand in this list under that parent. The parent company’s record on Australian enforcement now runs across at least four distinct brands in the consulted period, in years ranging from 2022 to 2026.

For a reader, Spirit Casino sits in the same place Woo Casino does on the parent-company axis. The brand distinction the operator may use to claim a fresh start does not survive the formal warning’s reference to Dama N.V. as the operator behind it.

National Casino

National Casino was the subject of a formal warning in July 2025 against Consolutetish S.R.L. The parent company here is different from Dama N.V., but the July 2025 round also caught Bizzo Casino under the same entity. National Casino is one of two Consolutetish S.R.L. brands in this set.

The National Casino verdict rests on the same parent-company pattern as the Dama N.V. brands, but with a different operator at the centre: a brand under Consolutetish S.R.L. sits in the same regulatory posture as one under Dama N.V., with the same absence of an Australian licence and the same formal-warning record. The 2022 history on Bizzo Casino also shows TechSolutions on the same brand under a different parent, which is the pattern of operators moving between corporate vehicles as the regulator catches up.

Bizzo Casino

The ACMA issued a formal warning to Consolutetish S.R.L. over Bizzo Casino in July 2025, with a separate 2022 warning on the brand having been issued against TechSolutions (CY) Group Limited and TechSolutions Group N.V. Bizzo Casino is the clearest example in the set of a brand that has changed hands across two different parent companies and still drawn formal warnings under both.

For a reader, Bizzo Casino is the operator-rotation case. A brand that has been warned twice, under two different legal entities, has had two chances to stop offering prohibited services to Australians, and the ACMA’s record says both chances were taken up by changing the parent company rather than changing the practice.

Ignition Casino

Ignition Casino carries a July 2025 formal warning against Bamboo Media. It is the only brand in this set under that parent company, which makes it a single-data-point entry rather than a pattern entry.

The Ignition verdict for a reader is the simplest in the set: a brand the ACMA has put on notice once, under one parent, in the period covered. The other patterns this list reveals — operator rotation, multi-brand parents — do not apply here, but the underlying point about prohibited services does.

Instant Casino

The ACMA issued a formal warning to EOD Code SRL over Instant Casino in February 2025. Instant Casino is one of three brands in this set whose subject-support evidence is listings-only, meaning the consulted sources name it as accepting payment methods in BPAY-adjacent categories (PayID, the BPAY-adjacent instant-transfer system) without a direct confirmation of BPAY support from the operator.

For a reader, Instant Casino is the listings-only case: a brand whose deposit-rail story is told by what the listings pages report, not by what the operator confirms. A reader who treats listings as the operator’s own statement is reading more into the source than the source carries.

Jackbit

The ACMA issued a formal warning in April 2026 to Ryker B.V. over Jackbit and CasinOK. Jackbit is the more recent of the two actions under that parent, and one of the most recent formal warnings in this set as a whole.

The Jackbit verdict is that the brand sits in the most current ACMA round of this list, with the same regulatory posture as the others: a formal warning for offering prohibited interactive gambling services to Australians, no Australian licence, no recourse under Australian consumer law if a withdrawal is later refused.

Casino Intense

The ACMA issued a formal warning in April 2025 to Sterplay Holding Ltd over Casino Intense. Casino Intense is another listings-only subject-support entry, with the consulted sources naming it in BPAY-adjacent contexts without confirming BPAY support directly.

The Casino Intense verdict for a reader: a 2025 formal-warning action under a parent company not otherwise named in this set, with the listings-only caveat on payment-rail evidence applying here as it does on Instant Casino.

Sky Crown

The ACMA issued a formal warning to Hollycorn N.V. over Sky Crown and Blue Leo casino services, with the formal-warning publication on the ACMA’s register dated September 2022. Sky Crown is one of the earlier formal warnings in this set.

For a reader, Sky Crown carries the same posture as the rest, and the longer the brand has been on the regulator’s register, the more it suggests the brand itself is the through-line rather than the parent.

Closing on the eleven

What the eleven write-ups collectively demonstrate is that “BPAY-accepting casino sites” is a phrase that describes a payment rail, not a legal status. The ACMA’s formal-warning register is the regulator’s own list of brands it has put on notice for offering prohibited services; the eleven brands on this page sit on it; the parent-company patterns in the table above show how those warnings cluster. None of the eleven is an Australian-licensed online casino, because no such licence exists to hold. A reader comparing them is comparing how each sits on the ACMA’s register and what the parent-company history looks like — and on that axis, the Dama N.V. and Consolutetish S.R.L. brands carry the densest enforcement record.

Responsible gambling and help

The Australian responsible-gambling infrastructure is built for Australian-licensed wagering, not for offshore casinos. A player at any of the eleven sites above has access to the same supports an onshore player does, but the binding effect is different: BetStop excludes from Australian-licensed wagering only, and an offshore casino is not on it. The National Gambling Helpline at 1800 858 858 runs free, 24/7, with chat at Gambling Help Online, and is the first line of support regardless of where the player has been playing.

For bank-side controls, the gambling blocks at Commonwealth Bank, Westpac and ANZ work on card transactions, including digital wallet transactions on an eligible card, with the caveats each bank publishes about coverage. BPAY is a bill-payment rail rather than a card transaction, and the same blocks do not apply to it the same way — a player using a bank block as a deposit limit at an offshore casino needs to understand which rail the block applies to.

Frequently asked questions

Is it legal for an offshore casino site to accept BPAY from an Australian visitor?

No. The Interactive Gambling Act 2001 prohibits the provision of online casino games to people in Australia, regardless of the deposit rail. BPAY is one of the lawful deposit methods for Australian-licensed wagering, but no Australian-licensed online casino exists; an offshore site taking a BPAY payment from an Australian is offering a prohibited service.

How quickly does a BPAY transaction typically settle?

BPAY settles in the next batch window, which is short but not instant. PayID/Osko transfers between participating Australian banks settle in under a minute around the clock, including weekends; BPAY does not. A player expecting card-style instant settlement should plan on a wait.

Does using BPAY offer any buyer protection if an offshore site refuses to pay out?

No. BPAY payments do not carry a chargeback right the way card payments do; the dispute sits with the issuing bank under its own terms, and the operator is offshore. An offshore casino offers no Australian consumer protection, no complaints body, and no recourse if a withdrawal is refused.

Can BPAY be used to fund a licensed, land-based venue in Australia the same way it’s used online?

BPAY is built for bill-payment, and licensed Australian wagering services — sports and racing bookmakers, lotteries, keno — accept it as a deposit method for online play. Land-based venues take BPAY at the venue’s discretion, and the cashier setup is the venue’s own. The casino product itself is the prohibited category.

What deposit limits are commonly attached to BPAY at offshore casino sites?

Limits come from two places: the issuing bank’s BPAY limit (ANZ publishes a A$5,000 daily BPAY ceiling, St.George a A$100,000 cumulative daily ceiling with a A$15,000 per-biller cap), and the casino’s own deposit ceiling, which sits on top. A player hitting their bank ceiling hits it regardless of the casino’s rules.

Why might a bank block a BPAY transaction flagged as gambling-related?

A bank can refuse to process a BPAY payment to a biller it has flagged in its own risk systems, or to a biller the bank has been instructed to refuse by the ACMA’s blocking regime. The decision is the bank’s, the register is not public, and the result is the player seeing a declined payment without a clear reason at the cashier.