House odds

There is a supreme, quiet irony in retiring a piece of legislation after 159 years with barely a week’s notice to the businesses it governs. On July 1, 2026, the Gambling Prevention Act quietly replaced the colonial-era Public Gambling Act of 1867. Most executives in Dhaka’s boardrooms likely missed the exact moment the law was gazetted. 

They will inevitably feel its consequences soon enough. The Victorian predecessor was drafted for a world of card tables and backroom dice games. It was entirely silent on Curaçao-registered betting portals, crypto wallets transacting in Tether, and Telegram channels selling odds on the Bangladesh Premier League. 

That legislative vacuum had been closing informally for years through ad hoc domain blocking by telecom regulators and voluntary tightening of internal bank controls. But Parliament has now handed the state a purpose-built statute that treats gambling primarily as a financial crime and cybersecurity threat rather than a mere moral infraction. 

For financial institutions, mobile financial service providers, telecom operators, and media agencies, this conceptual shift matters vastly more than the updated vocabulary suggests.

The statutory architecture does something its 1867 ancestor never attempted: it explicitly criminalises nearly two dozen modern activities, ranging from virtual casinos and remote bookmaking to totalisators, VPN-enabled betting, and cryptocurrency transfers involving Bitcoin, Ethereum, or stablecoins. 

It also establishes standalone criminal penalties for match-fixing, addressing the integrity scandals that have routinely dogged domestic cricket. Yet the most far-reaching statutory evolution is a spatial one. The law drastically expands the definition of a gambling premises. 

A site of illicit betting is no longer confined to a physical room with a table; it now legally encompasses websites, application servers, domains, data centres, and private social media groups. This single definitional tweak allows law enforcement to breach Facebook groups and encrypted channels with the same legal authority once reserved for raiding physical dens. 

Under the old regime, operating an unlicensed betting scheme through a mobile wallet occupied a murky regulatory grey zone. That ambiguity has been wiped away. The exact same conduct now sits simultaneously within the crosshairs of gambling statutes, anti-money-laundering regimes, and cybersecurity frameworks.

The section of the statute that demands the most immediate scrutiny from bank compliance officers concerns capital flows. The law explicitly classifies the transfer, concealment, or laundering of gambling proceeds through commercial banks, digital wallets, or informal hundi networks as a predicate offence under the Money Laundering Prevention Act of 2012. 

Suspicious-transaction reporting obligations now apply to gambling-linked capital by explicit statutory mandate rather than regulatory interpretation. The central bank and the Bangladesh Financial Intelligence Unit no longer need to stretch general powers to seize illegal betting flows. 

The real-world backdrop to this legislative tightening is stark: the BFIU suspended over 21,000 mobile accounts in 2023 alone over suspected links to digital gambling and illicit remittance channels. Consequently, penalties for laundering gambling proceeds are the harshest in the new law, reaching up to ten years’ imprisonment and fines of 50m taka ($420,000). 

Operating an unlicensed platform carries up to seven years, while individual bettors face up to five. The distinct grading of penalties reveals the state's true priorities: the target is not the casual punter, but the complex financial machinery that cleans the money.

A surprising element for those outside the gaming sector is that operating a platform is no longer required to trigger criminal liability; promoting one is sufficient. The statute creates a dedicated offence for media outlets, digital influencers, artists, and athletes who market, sponsor, or run affiliate campaigns for gambling operators, punishable by up to three years in prison. 

Combined with the expanded definition of premises, this produces a potent pincer effect: the channel used to broadcast odds can be designated as illegal infrastructure, while the talent paid to promote it faces direct criminal exposure. 

This directly targets the informal marketing ecosystem that drives domestic betting traffic— closed social media pages, YouTube shout-outs, and private messaging groups distributing referral links. The rule formalises a zero-tolerance policy announced in late 2025, providing administrative directives with sharp criminal teeth.

Enforcement is structured around an interagency taskforce uniting the Home Ministry, telecom regulators, central bankers, crime investigators, and the National Cyber Security Agency, complete with international cooperation mandates and mandatory public reporting. 

The technical arsenal granted to this apparatus is formidable. The state is legally authorised to deploy artificial intelligence, deep packet inspection, and predictive transaction analytics to track illicit gaming. It also mandates a national digital blacklist database compiling identity numbers, SIM registrations, bank details, and hardware identifiers. 

Paired with integrated biometric verification systems, this creates a persistent monitoring network spanning the nation’s entire digital architecture—a system unlikely to remain restricted to gambling oversight alone once fully operational.

This expansion of executive capability ignited fierce parliamentary debate. While the statute generally requires investigators to obtain warrants from Cyber Tribunals before seizing digital devices, it carves out an exception for warrantless searches and arrests whenever police suspect digital evidence faces imminent destruction. 

Opposition lawmakers warned that unchecked powers to block domains and seize hardware without prior judicial sign-off could easily be repurposed to censor political dissent or independent reporting. Government ministers countered that digital evidence can be erased in seconds, rendering prior judicial approval impractical for fast-moving cybercrime. 

Both arguments carry weight. Law enforcement genuinely requires agile tools to confront borderless digital networks, yet deploying such tools without strict judicial checks creates obvious constitutional tensions regarding privacy and civil liberties. 

The operational reality is that a significant gap has opened between the stated purpose of the law and the technical capabilities of its administrative tools.

For commercial entities, compliance cannot be deferred. Banks and digital wallet providers must rapidly update transaction monitoring typologies to flag micro-transfer patterns typical of betting settlement and scrutinize synthetic identity risks associated with freshly issued SIMs. 

Telecom firms require internal protocols to document and process incoming domain-blocking orders, while media agencies and sports bodies must scrub sponsorship books and player contracts for indirect promotional exposure. 

Underpinning all of this is a broader institutional omission: Bangladesh currently lacks a comprehensive data protection statute to govern how this massive central blacklist database will store, secure, or correct citizen data. Until such a framework exists, individual protections rely almost entirely on internal administrative discretion. 

The regulatory timer began ticking on July 1st. Firms that audit their operations immediately will find themselves on far firmer ground than those waiting for a high-profile prosecution to demonstrate how the state intends to exercise its expansive new powers.

—

Barrister Ahammed A Khan is an Advocate of Supreme Court of Bangladesh