Casino apps in Australia: what the install actually costs you

18 October 2026 · licence-claim checks done against the ACMA’s formal-warning register.

A hand tapping a smartphone screen showing generic app icons, none of them branded.
The ACMA issued formal warnings over Woo Casino in March 2025 and Spirit Casino in May 2025.

An Australian typing “best casino apps” into a phone is looking for something that does not, in the strict sense, exist. Online casino games and online pokies cannot be licensed anywhere in Australia; the Interactive Gambling Act 2001 makes the provision of them a civil offence, and no state or territory issues a licence for them. What the search returns is the offshore version of the same product, marketed to Australians from Curaçao, Cyprus and a handful of other jurisdictions, paid into through PayID or Bitcoin and walked out of the moment the ACMA notices. The interesting question is not which one is best. It is what the install actually costs the person holding the phone.

This page lays that out. It describes how a casino app is typically built, what an offshore bonus really requires in turnover, what the ACMA has done to specific brands in 2026, and where the legal alternative sits for someone who would rather not fund an unenforceable account. It is not a place to find a casino app to install. No brand on this page is one an Australian should be playing at.

How money moves in and out of a casino app in Australia

The first thing an offshore app costs an Australian is a working path for the deposit. None of the local rails a person would use for anything else — debit card, PayID, Osko, BPAY — is offered because the offering side chose to offer it. They are offered because the operator’s payment processor can route them, and the processor’s tolerance for an Australian counterparty is what decides whether the deposit button works on a given afternoon.

A tidy desk with a laptop open on a plain search-results page, a notebook and a coffee cup beside it, no screens showing any casino branding.
In July 2025 the ACMA issued formal warnings over Ignition Casino, National Casino and Bizzo Casino, the last of which had already been warned in 2022.

PayID and Osko are the parts of Australia’s New Payments Platform that move money between participating banks in under a minute, around the clock, and they are increasingly the rail an offshore casino app asks for. The transfer is fast and the recipient’s name appears before the send is confirmed, which is the only built-in safeguard. Australian Payments Plus warns that a request to send money to a PayID on an illegal gambling site is, almost without exception, a request to send it to a scam. The fact that the deposit arrives instantly does not change that. It just makes the loss instant.

BPAY, the bill-payment service that has been part of Australian online banking since 1997 and is offered through more than 140 banks, is not a deposit rail. It is built to send money to a Biller Code with a Customer Reference Number, and what it can do for a casino app is nothing — which is why no legitimate offshore operator asks for it.

The credit-card side of the picture is more pointed. Since 11 June 2024 the Interactive Gambling Act 2001, as amended, has banned the use of credit cards and credit-related products for any online wagering that an Australian-licensed provider can offer. The amendment does not, on its face, reach an offshore site, because the site is not licensed in Australia. What it does reach is the card issuer and, increasingly, the wallet. Westpac’s gambling block refuses authorisations against the merchant category code that covers betting and casino gambling on eligible cards; ANZ’s gambling block, switched on through the ANZ app, extends the same refusal to gambling transactions made through Apple Pay or Google Pay on an eligible card. Turning the ANZ block on takes a tap; turning it off requires a 48-hour wait, which is the period the bank puts between an impulse and a regretted deposit.

CommBank offers the same idea as a gambling lock in its app, with the same caveat the others carry: the block catches most gambling transactions, not all of them, and the bank does not guarantee it stops every one. Apple Pay itself charges nothing to the consumer, and any surcharge at a merchant is the merchant’s card-processing fee, not Apple’s. None of that changes the underlying picture, which is that the deposit rail a casino app would prefer is the one a person’s own bank is increasingly declining to honour.

A point worth noting for anyone reading this from outside the payments stack: digital wallets and the credit-card ban are not the same thing. Holding an eligible debit card in Apple Pay, then trying to use it at a casino app, runs into the bank’s block on the underlying card, not into the IGA’s credit-card rule, because the wallet itself is not a credit product. The effect looks the same to the person trying to deposit. The legal route that catches it is different.

Crypto sits in the same grey zone for a different reason. The IGA’s payment ban applies to digital currency on Australian-licensed wagering services, and that is the only place the rule reaches. An offshore site accepting Bitcoin is not governed by Australian law, and the deposit arrives because the transfer settles on a blockchain, not because anyone in Australia approved it. The deposit is fast. The recourse, when the site refuses to pay out, is the site’s own dispute procedure, mediated by a regulator in a jurisdiction the depositor has no practical presence in. That asymmetry is the part that costs.

What a casino app bonus really requires

The bonus a casino app offers an Australian on first deposit is, in marketing terms, a free gift. In the contract behind the marketing it is a turnover obligation with a cap on what can be taken out, dressed up in language designed to make the obligation look smaller than it is.

A red triangular warning sign icon on a laptop screen next to a stack of legal papers, symbolising an official caution rather than any specific website.
In February 2025 the ACMA issued a formal warning over Instant Casino.

The standard shape is a percentage match on the deposit, sometimes paired with a number of free spins on a named slot, and it is always paired with a wagering multiple. The multiple is the figure the marketing copy buries. A 100% match bonus of A$200 with a 40x wagering multiple on the bonus only is, on its face, A$200 free. The turnover it carries is A$8,000 — A$200 multiplied by 40 — and that turnover has to be worked through the casino’s games at the stake the bonus terms specify, within the window the bonus terms specify, before any of the winnings can be withdrawn. A typical slot spin in the calculation sits at A$0.20 to A$1.00. At A$0.50 a spin, A$8,000 in turnover is 16,000 spins. At five seconds a spin, that is roughly 22 hours of play. The bonus is the gift. The 22 hours is the price.

The cap on what can be taken out is the part the marketing copy tends not to mention at all. A “max cashout” clause on a free-spin win, or on a no-deposit bonus, sets a ceiling — sometimes A$100, sometimes A$500, occasionally the entire bonus amount — below which the winnings sit and above which they simply do not exist. There is no recourse for the player who clears the wagering and then finds the cap lower than expected, because the operator holds the terms in the same window as the gameplay and the player accepted them by playing.

What makes the picture worse is the house edge hiding under the turnover. A 96% return-to-player slot, which is close to the upper end of what the offshore market offers, returns A$0.96 for every A$1 turned through it on average. The A$8,000 turnover above carries, on that assumption, an expected loss of A$320 — A$8,000 multiplied by the 4% house edge. That is the statistical cost of clearing the bonus before any of the bonus money itself is taken into account. The bonus is not a discount on play. It is a discount on the house edge of the play it forces the player through.

A no-deposit bonus — the small cash gift or handful of free spins an app gives a new account before the first deposit — is the most expensive thing on the page in percentage terms. The cash gift is small, often A$10 to A$50, the wagering multiple is high, often 50x or 60x, and the cap on what can be taken out is low, often A$100. A$20 in bonus money at 60x is A$1,200 in turnover, which is 2,400 spins at A$0.50 and, on the same 96% RTP assumption, an expected loss of A$48 — to win A$20. The arithmetic of a no-deposit bonus is the arithmetic of paying the house to chase its own money.

The free spins on their own, attached to a deposit bonus, are a different case. The winnings from the spins are usually treated as bonus money, which means they go into the same turnover pool as the matched deposit. A hundred free spins at A$0.20, on a 96% slot, return about A$19.20 on average. That A$19.20, treated as bonus money at 40x, requires A$768 in further turnover. The “free” spins are not free in any operational sense; they are the entry fee for another A$768 of play.

This is the part of the page where the marketing language earns its deflation. “Free bonus” is the term the marketing uses. The arithmetic the term refers to is bonus × wagering multiple in turnover, an expected loss on that turnover at the house edge, and a cap on what the player can actually take out at the end of it. None of those three numbers is the marketing number.

How a casino app is laid out on a phone

A casino app in the offshore sense is a thin wrapper around a website, optimised for a touchscreen. The marketing calls it a “native app”, and a small number of offshore operators do ship something close to one through a direct download from the operator’s own site. The vast majority of what an Australian searching for “casino app” will find, in practice, is one of three patterns.

The first is a Progressive Web App — a mobile website that behaves like an app when added to a phone’s home screen, full screen, with the browser chrome hidden. Apple does not allow a real-money gambling app of any kind in the Australian App Store, and Google has tightened its own rules around real-money gambling apps over time. The offshore operator’s answer is to put the same product behind a web URL and let the player add it to the home screen. It looks like an app. It is not in any store. It can be removed by the ACMA’s blocking request to the player’s ISP without ever touching the device.

The second is a download hosted on the operator’s own domain. The user follows a link, accepts a profile install (iOS) or an APK download (Android), and the resulting icon is added outside the App Store or Play Store’s review. iOS requires a developer certificate the operator has signed; the certificate expires, the app stops opening, and the player is redirected to the web version. Android requires sideloading an APK the operator signs; the install works, but Google Play Protect can flag it, and the app updates itself through the operator’s own infrastructure rather than through a store.

The third, increasingly common, is the mobile browser tab with a “Add to Home Screen” prompt. It is the same product as the Progressive Web App, dressed slightly differently. None of the three patterns changes the legal situation in Australia, because none of them changes who is offering the service. The IGA reaches the offer, not the channel.

Inside the app, the layout is consistent across operators. A bottom or top bar carries the casino’s main lobbies — slots, live dealer, table games, sometimes a sports tab — with the cashier and the player’s profile behind a separate icon. A search field sits at the top. Bonuses and tournaments are pushed as banners above the lobby. The deposit and withdrawal flows are stacked behind the cashier icon and typically include the same rails: card, sometimes a voucher, occasionally crypto. Withdrawal requests sit in a pending state for a period the operator sets, often 24 to 72 hours, before any processing happens.

Two things are worth knowing about that pending window. The first is that an offshore operator is under no Australian obligation to release a withdrawal within any specific timeframe. The second is that the same operator can, and some do, hold a withdrawal on the grounds that the player’s bonus playthrough was incomplete, the player’s verification documents were insufficient, or the player’s account is being reviewed for “irregular play” — a phrase broad enough to cover almost any refusal. The verification step, when it happens, asks for photo ID, proof of address and sometimes a photo of the card used to deposit. For a player who passed those steps at signup, the second pass is usually where a withdrawal quietly dies.

The games inside the app come from a small number of studios — Pragmatic Play, Evolution for live dealer, BGaming, Nolimit City, a handful of others — and the same titles appear across most offshore apps. The RTP printed on a game’s help screen is the RTP the studio ships; whether that is the version the operator actually runs is a different matter, and one the player has no way to check. Independent testing houses — eCOGRA, GLI, iTech Labs — certify the games at the studio level, but the certification covers the studio’s build, not the build the operator has deployed. The gap between the two is exactly the gap the player is being asked to trust.

The eleven brands the ACMA has acted against

This page is not a ranking. Online casino games are prohibited in Australia and no operator of them is licensed here. The brands below are listed because the Australian Communications and Media Authority itself issued a formal warning over each of them for offering prohibited services to Australians, and the warnings are public on the ACMA’s own register. The pattern is what the page is interested in, not the comparison.

Brand ACMA action and date Operator named by the ACMA Subject support
RocketPlay Formal warning, March 2026 (Pulsup Ltd); earlier May 2022 (Dama N.V.) Pulsup Ltd; Dama N.V. listings-only — see Gambling Insider
Level Up Casino Formal warning, May 2022 Dama N.V. listings-only — see Westpac
Woo Casino Formal warning, March 2025 Dama N.V. —
Spirit Casino Formal warning, May 2025 Dama N.V. —
National Casino Formal warning, July 2025 Consolutetish S.R.L. listings-only — see acma.gov.au, austrac.gov.au, betstop.gov.au
Bizzo Casino Formal warning, July 2025 (Consolutetish S.R.L.); earlier 2022 (TechSolutions) Consolutetish S.R.L.; TechSolutions listings-only — see Gambling Insider
Ignition Casino Formal warning, July 2025 Bamboo Media —
Instant Casino Formal warning, February 2025 EOD Code SRL listings-only — see EcoPayz, PayID
Jackbit Formal warning, April 2026 Ryker B.V. —
Casino Intense Formal warning, April 2025 Sterplay Holding Ltd listings-only — see Gambling Insider
Sky Crown Formal warning, September 2022 Hollycorn N.V. —

The operator names are the ones the ACMA put on the formal warning, not the brand names on the marketing site. Dama N.V. runs six brands under the same corporate umbrella and has been warned twice by the ACMA in five years. TechSolutions ran Bizzo Casino before Consolutetish S.R.L. took it over; the warning travels with the corporate entity the ACMA names, not with the brand. The marketing brand is what an Australian sees on the page; the corporate entity is what the ACMA addresses the warning to, and the two are often different.

What the register does not show is the number of brands that have appeared and disappeared between the warnings. A brand that the ACMA warns in 2022 can be wound down and the same customer base served by a new brand on a new domain twelve months later, with no formal warning ever attached to the new brand. The blocking of websites, of which the ACMA reports 1,751 since November 2019 in the round from June 2026, runs in parallel: 12 more domains were added to the ISP block list in that round alone. The pace is roughly one round a month, and the gap between a brand appearing and the brand being blocked is short enough that an offshore app’s life in Australia is typically measured in months.

What the blocking rate actually means

The arithmetic of the ACMA’s enforcement is the measure of the offshore market’s scale. Between November 2019 and the round reported in June 2026 — roughly six and a half years — the ACMA asked Australian ISPs to block 1,751 illegal gambling and affiliate marketing websites, at a rate that sits in a band of roughly 20 to 30 new blocking requests a month across the years the rounds have been published. That is the running total at the moment the page is written; the next round will add to it, and the rate has held, with some variation, through the period the register covers. The figure is best read as a band rather than a single point: the lower bound of the band is the months when a small number of domains was added, the upper bound is the months when a larger round cleared a backlog of affiliate marketing sites. Either way, the order of magnitude is the same — hundreds of offshore gambling domains a year, blocked or shifted to other domains, with the same handful of operators cycling through brand names.

The block list is the most concrete measure of what the offshore casino app market looks like from the Australian side. It is not the only measure. The ACMA’s formal warnings, of which the eleven above are a subset, name the operators that the ACMA considered worth the procedural step of a written warning. The blocking requests name the domains. The two lists overlap but do not coincide. The aggregate of the two — the warnings, the blocks, the 230-plus unlicensed services the ACMA says have left the Australian market since 2017 — is the shape of a market that the regulator is engaged with at industrial scale, and the Australian player is in the middle of it.

H2 Gambling Capital’s 2025 estimate puts the money that Australians lose to illegal gambling sites at about A$3.9 billion a year, and notes that the share of gambling going through legal channels in Australia fell from 74% in 2021 to 64%. The share going to illegal sites is the residual. The size of the residual is what makes the blocking rate necessary and, from the regulator’s point of view, what makes the blocking rate modest. The page is not in a position to verify the H2 estimate and presents it as the source presents it.

What “online casino app” actually means in Australia

The phrase “casino app” is doing more work than it looks like it is. On one reading it means a downloadable application, installed through a store, with a publisher of record. On another it means a web wrapper on a phone’s home screen. On a third it means any of the above, plus a tablet, plus a browser on a laptop. The legal picture does not depend on which reading is correct. The Interactive Gambling Act 2001, as strengthened in 2017 and amended in 2023, makes it an offence to provide online casino games — slots, table games, live dealer, online pokies, in-play betting — to a person physically in Australia. The provider is the target of the law, not the player. The device, the store, the payment rail and the location of the corporate entity do not move the offer outside the prohibition.

The licensed side of Australian online gambling is narrower than the marketing copy suggests. Wagering on sports and racing, placed before the event, is licensable. Lotteries and keno are licensable. Online casino games and online pokies are not. The licensed online bookmakers — Sportsbet, Bet365, Ladbrokes and others — are regulated by the Northern Territory Racing and Wagering Commission, which oversees 52 such operators from a meeting room in Darwin that meets once a month. The Commission’s lack of full-time staff is a real feature of the regulatory architecture, not an editorial flourish. It is the body that decides what the licensed half of the market can offer, and it does so at the cadence of a monthly meeting. The same operators cannot, under the law they are licensed under, offer an Australian a slot spin.

The licensed operators are subject to the rules the offshore operators are not. Credit cards and credit-related products are banned as payment methods on Australian-licensed wagering services. The change took effect on 11 June 2024 and carries penalties of up to A$247,500 per breach. Digital currency is banned on the same services for the same reason. PayID, Osko and BPAY — the fast-payment rails of the New Payments Platform — sit alongside debit card as the legal deposit routes for the licensed wagering side. A licensed Australian wagering operator asking for a credit card or a crypto deposit is, by definition, not the operator it claims to be. An offshore casino app asking for one is, by the same token, operating outside the rules that the legal alternative is held to.

What this means in practice is that there is no casino app for an Australian to install that is licensed to do what a casino app does. The licensed alternative is a sports and racing bookmaker, regulated by the NTRWC, with the credit-card and crypto prohibitions built into the deposit flow. The unlicensed alternative is one of the brands below the line, regulated by the regulator that issued its licence — Curaçao, Anjouan, occasionally Cyprus — and reached through a channel the ACMA can block at the ISP layer.

What “responsible gambling” looks like when the product is illegal

The responsible-gambling frame on a casino app page usually centres on the operator’s own tools: deposit limits, time-out periods, self-exclusion buttons. On an offshore site those tools exist in name. In practice, they are tools the operator can choose to honour, on an account the operator can close, with no external body to appeal to.

BetStop, the National Self-Exclusion Register, has been live since August 2023 and binds every Australian-licensed online and phone wagering service. A person who registers with BetStop is excluded from every licensed operator at once; the licensed operators are required to refuse the registration and to close the account. The mechanism works because the licensed operators are reachable through Australian law and through a register that connects them.

An offshore casino app is not connected to BetStop, because it is not licensed in Australia and not subject to the rules that would require the connection. A person who has registered with BetStop and then opens an account with an offshore operator is, on the offshore operator’s side, a fresh account that the operator has no reason to refuse. The self-exclusion has not been breached — the offshore operator never agreed to honour it. The protection the register offers simply does not extend.

That is the cleanest argument for the licensed alternative that this page can make. The licensed wagering operators carry a regulatory cost — credit-card prohibition, advertising rules, the BetStop binding, monthly oversight by a commission that does not always look like it has enough staff — and the cost is the price of the protection. The offshore operators carry none of that cost and offer none of that protection. The trade is not subtle.

For anyone who is in the early stages of thinking that the play has gone past the point of choice, the help available does not depend on which side of the line the play was on. Gambling Help Online is free, confidential and staffed around the clock. The National Gambling Helpline — 1800 858 858 — is free, 24/7, and runs chat and callback alongside the voice line. Both services take calls from people whose gambling is legal, people whose gambling is not, and people who are not sure which it has been.

The bank-side tools described above are part of the same architecture. Westpac’s card-level gambling block, ANZ’s gambling block in the ANZ app (with the 48-hour off-ramp), CommBank’s gambling lock in the CommBank app — all of them are blunt instruments, and none of them is a substitute for the help lines above. They are useful in the moment, and they have the same limitation as every other block on this page: they cover the licensed side cleanly and the offshore side only as far as the bank’s own payment rails can reach.

Crypto at an offshore casino app

The case for paying a casino app in Bitcoin, from the marketing side, is anonymity. The case from the operator’s side is that the payment settles without going through a bank that might refuse it, and the operator can hold the funds in crypto until the player asks for a withdrawal, at which point the operator’s exchange risk sits on the player rather than on the operator.

The legal frame on the Australian side is plain. The Interactive Gambling Act 2001, as amended, bans digital currency as a payment method for Australian-licensed wagering services. An offshore operator is not an Australian-licensed service, and the IGA’s prohibition does not, on its face, bind the player. What it does is place the payment outside the rules the licensed side is held to, and therefore outside the protections those rules carry. The licensed side cannot take a crypto deposit; the offshore side can. The licensed side has to honour BetStop and process withdrawals through Australian rails; the offshore side has neither obligation.

The practical effect for the player is that the crypto deposit is fast and irreversible, which is the same property that makes it useful to the operator. A mistaken deposit is unrecoverable; a deposit to a scam site is unrecoverable; a withdrawal refused by the operator can be appealed only to the operator and, in some cases, to the regulator that issued the operator’s licence. None of those bodies is Australian. The reverse is also true: a withdrawal that the operator releases will arrive in the player’s wallet, and from there the on-ramp back to Australian dollars is the player’s problem, with the exchange rate and the on-ramp fee sitting between the win and the bank account.

The risk picture is not symmetric. The operator’s risk on a crypto transaction is small. The player’s risk is large, because the player carries the full credit risk of an offshore counterparty that the player cannot reach in any jurisdiction that will take the complaint seriously. AUSTRAC’s threshold-transaction-report rule, which requires reporting of cash transfers of A$10,000 or more, applies only to physical cash. Ordinary electronic transfers — including crypto on-ramps and off-ramps through an Australian exchange — are not subject to the per-transaction reporting rule, regardless of size. That is not a clearance to send. It is the absence of an automatic flag.

What it costs in 2026, end to end

The install of an offshore casino app on an Australian phone costs nothing at the point of download. The cost the player pays is paid in turnover, in house edge, in the cap on what can be withdrawn and in the absence of any Australian recourse if a withdrawal is refused. The arithmetic the marketing copy hides is the arithmetic the page has been working through.

A A$200 matched deposit with a 40x wagering multiple on the bonus, played through a 96% RTP slot at A$0.50 a spin, requires A$8,000 in turnover. That is roughly 16,000 spins. At five seconds a spin, it is about 22 hours of play. The expected loss on the turnover alone, on the 96% RTP assumption, is A$320 — before the A$200 bonus is even counted as a win. The marketing calls this a bonus. The numbers call it an expensive way to lose A$120.

A A$20 no-deposit bonus with a 60x wagering multiple, played through the same slot, requires A$1,200 in turnover. That is roughly 2,400 spins, about three and a half hours of play, and an expected loss of A$48. The cap on what can be withdrawn from a no-deposit bonus is typically A$100. The arithmetic of a no-deposit bonus, in plain terms, is paying A$48 on average to win at most A$100, with no guarantee of winning at all.

The expected-loss figures here are statistical estimates — averages over many spins under the stated assumptions, not predictions for any single session. They are useful as a way of pricing the offer, and they promise no win, no payout and no return to the player who happens to be lucky on the day.

The legal picture adds a cost the operator’s arithmetic does not capture. An account at an offshore operator is an account the ACMA can ask the player’s ISP to block, sometimes with a balance still on it. A blocked account is not a refunded account. The terms the operator holds do not include an Australian complaints body, and the operator’s own regulator — in Curaçao, in Anjouan — has no practical reach into a complaint from an Australian player about a withdrawal refused in euros or Bitcoin.

For a player who has decided that the play is what they want to do, the licensed wagering side is the place that costs what it says on the price tag. The credit-card prohibition, the crypto prohibition, the BetStop binding and the NTRWC’s monthly oversight are not free. They are the price of an account the player can complain about if something goes wrong. The offshore side has none of that cost and none of that protection, and the trade is the one this page is interested in.

Frequently asked questions

Is there a casino app on any device app store that’s legal for Australians to use for real money?

No. Apple does not allow real-money gambling apps of this kind in the Australian App Store, and Google has tightened its own rules around real-money gambling apps in Australia over time. The Interactive Gambling Act 2001 prohibits the provision of online casino games and online pokies to a person in Australia, and no state or territory issues a licence for them. An “app” an Australian finds outside those stores is an offshore product reached through a sideload or a home-screen shortcut, not a legal local one.

How would an offshore casino app even reach an Australian device without an official app-store listing?

The common pattern is a mobile website built to behave like an app when added to the phone’s home screen — a Progressive Web App — or a direct download from the operator’s own domain. iOS users follow a link and accept a profile install; Android users sideload an APK. In both cases the install happens outside the App Store or Play Store review, the app updates itself through the operator’s own infrastructure, and the ACMA can block the underlying domain at the ISP layer without ever touching the device.

Does installing a casino app get around the ACMA’s website blocking measures?

Not in any durable way. The ACMA’s blocking requests run against domains and, increasingly, against the affiliate marketing sites that promote them. An app installed on a single device is reachable through one of those domains. When the domain is added to the block list, the app stops connecting and the player is bounced to a web address that may also be blocked. The same operator typically rotates to a new domain within weeks, but the player is on the back end of that rotation, not the front.

Are the games inside a casino app independently tested for fairness?

The games come from studios — Pragmatic Play, Evolution, BGaming, Nolimit City, a handful of others — and the studios’ builds are certified by independent testing houses such as eCOGRA, GLI and iTech Labs. The certification covers the studio’s build of the game, not necessarily the version the operator has deployed. The player has no way to verify which build is running on the app. The gap between the studio’s certified version and the operator’s deployed version is exactly the gap the player is being asked to trust.

What is the legal alternative to a real-money casino app in Australia?

Online wagering on sports and racing, placed before the event, is licensable in Australia and is regulated by the Northern Territory Racing and Wagering Commission. Lotteries and keno are also licensable. Online casino games and online pokies are not. The licensed bookmakers — Sportsbet, Bet365, Ladbrokes and others — cannot legally offer slot spins to an Australian, but they can offer the wagering product they are licensed for, under the rules the licence carries: no credit-card deposits, no crypto deposits, BetStop binding on every licensed operator.

Does installing an app instead of using a browser change the legal picture in Australia?

No. The Interactive Gambling Act 2001 targets the offer of online casino games to a person in Australia, not the channel through which the offer is reached. The same product offered through a browser, a Progressive Web App, a sideloaded APK or a profile install on iOS is the same product for the purpose of the Act. The provider is the target of the law, and the provider is the same in each case.