VPNs and crypto casinos: what the terms actually say

Most crypto casinos I have reviewed forbid VPNs in their terms, and the few that tolerate them still forbid play from the countries they restrict. The clause rarely matters at sign-up. It matters at the cashier, where a location problem becomes a document request, a frozen balance or a forfeiture written into the terms in advance. This guide quotes what the operators publish about VPNs, proxies and restricted territories, and what each one says happens to your money. It covers risks only. It does not explain how to use a VPN, and it does not recommend using one to reach a site that excludes your country.

What the terms say, operator by operator

I read the terms of every operator in the table below between 5 and 7 October 2026. The wording is quoted or closely paraphrased, with the section number the operator uses.

The Bovada row covers four casinos because their terms use the same sentence under the same section number. That is a template, not a coincidence, and it tells you the clause is standard practice rather than one operator’s quirk.

Silence is not permission

Several operators have no VPN sentence at all. That does not make them VPN-friendly, because the restricted-territory clause does the same job.

• Roobet: I found no VPN or proxy clause in two full searches of its terms. §8.11 makes you warrant that you are “not accessing the Website from a Restricted Territory”, and §6 allows closure and voiding of bets after a breach.
• Cloudbet: no VPN clause either. Its restricted list in 7.1.3 applies by physical location, including when you withdraw, and 7.1.5 reserves location checks. casino.guru, a third party, says Cloudbet “doesn’t allow its players to use VPNs”.
• Sportsbet.io: no VPN clause found. Under 3.3, an account from a restricted jurisdiction has its winnings and rewards confiscated and the balance returned.
• BC.Game: no VPN or proxy clause in the sections I expanded (4, 6, 10, 11, 12, 15), but ToS 4.3 restricts twelve territories plus FATF-blacklisted countries.

Part of the reason sits in the licences. BC.Game’s Anjouan seal validator lists the territories where its licence does not apply: Australia, the Comoros, France, the Netherlands, Spain, the UK and the USA. Thunderpick’s validator shows the same list. An operator that pays a player in one of those places is acting outside its own licence, so it has a reason to look hard at where winners connect from.

The breach is where you are, not which software you run. A player in a listed country breaks the terms whether or not a VPN sentence exists, and the consequence clause applies either way.

The operators that say a VPN is allowed

Three operators say something softer, and each sentence comes with a limit.

Thunderpick‘s T&C 3.1 says “We allow the use of VPNs to help secure your connection”, adds that performance may suffer, and then says connections “from all non-restricted locations” can use the site normally. Its 3.2 lists the restricted territories and says the balance of an account accessed from one “may be considered void”. The permission is for privacy, not for location.

20Bet‘s terms say a VPN “is not forbidden, however it may cause game malfunctions or connection problems”. The same terms say that picking another country at registration to get around a restriction “is strictly forbidden” and can lead to confiscation of winnings and permanent closure.

TrustDice is the case that worries me most. Its terms have no VPN clause, its region notice tells blocked visitors to “try changing VPN”, and its help centre runs an article on VPNs that says one “helps you access websites blocked in your country”. Its T&C 3.6 still forbids residents of its restricted jurisdictions, the United States and the United Kingdom among them. A player who follows the help article is the player the terms allow it to refuse.

Two more send mixed signals. WinSpirit‘s deposit help says “if you use VPN — change or disable it”, while its T&C §12.13.5 allows blocking an account that tries to access the site from a country where gambling is prohibited. Super Slots has no general VPN clause, but its refer-a-friend terms exclude accounts “not considered genuine (VPN’s)”.

Where the clause bites: the cashier

Most of these sites let you register and deposit with very little friction. The checks arrive with the first sizeable withdrawal, and every operator above has reserved the right to run them.

• Roobet may ask for “any KYC documentation we deem necessary to determine Your identity and location”, at any time, and can restrict deposits and withdrawals until you comply.
• Rainbet reserves the right to request “photo ID, address confirmation or perform additional verification procedures” before granting a withdrawal (§8.3). Its AML policy lists proof of address among the documents.
• Cloudbet requires identity verification once cumulative deposits reach USD 2,200 (21.1.5), and its withdrawal documents can include proof of address and a dated selfie.
• Sportsbet.io may request KYC on the first withdrawal “regardless of the amount” (6.5).

Proof of address is a location check. If your documents, your payment history or your login records point to a restricted country, the consequence clause in the table applies. The no-KYC guide explains why “no KYC” marketing never removes these rights, and the guide on frozen balances covers what to do once a withdrawal stalls.

What you stand to lose

The terms describe three different outcomes, from mild to total.

1. Winnings only. Sportsbet.io confiscates winnings and rewards and returns the balance. BitStarz and RocketPlay say confiscation of winnings is possible.
2. Withdrawals refused or frozen. Rainbet may refuse the withdrawal; Duelbits may freeze the account. Monkey Tilt‘s terms say the company can “decide unilaterally on the payment of deposits, balances, and any other funds from the blocked accounts”.
3. Everything. Bovada, Ignition, Cafe Casino and Slots.lv forfeit all balances, deposits included. Thunderpick says the balance “may be considered void”.

You also lose the dispute. The licence guide quotes the Curaçao and Anjouan regulators: neither adjudicates player complaints, and Anjouan’s process excludes players in a territory the licence does not cover. A complaint that starts with “I connected from a restricted country” has nowhere to go.

Prediction markets geoblock the same way

Polymarket’s help centre, updated 14 August 2026, says it “strictly prohibits the use of VPNs or similar tools to bypass geographic restrictions” and calls them a violation of its Terms of Service, section 2.1.4. It lists 39 countries as completely restricted, plus Alberta, British Columbia, Ontario and Quebec in Canada and three occupied regions of Ukraine. Permissions follow physical location, not residency. Kalshi’s card-deposit article asks users to make sure “any active VPN is disabled”.

Regulators act too. France’s ANJ ordered Polymarket blocked in July 2026, and Belgium’s gaming commission blacklisted it on 30 January 2025, according to press reports. The prediction-market guide has the country detail.

Why no site on this directory carries the VPN-friendly flag

The VPN-friendly feature page exists because people search for it. My rule for the flag is strict: the operator’s terms must not forbid VPN use, and third parties must confirm that players using one get paid. On 7 October 2026 none of the 43 operator records in my dataset met both conditions, so the flag is off everywhere. Thunderpick and 20Bet come closest on wording, and I found no independent confirmation for either.

Even a site that passed would only be VPN-tolerant for players in countries it accepts. No clause I have read permits play from a restricted territory.

What I check before I list a site

1. The restricted-territory list in the current terms, with the date I read it. The crypto casino list shows it on every review.
2. Any sentence containing “VPN”, “proxy”, “mask” or “location”, and the section it sits in.
3. The consequence clause: winnings, withdrawals or the whole balance.
4. When location is checked: at sign-up, at a deposit threshold or at the first withdrawal.
5. Whether the help centre contradicts the terms, as TrustDice’s does.

The short version

Most operators forbid VPNs outright, the rest reach the same result through a territory clause, and the few that “allow” VPNs limit it to countries they already accept. The clause is enforced at withdrawal, with proof of address, and the stated penalties run from confiscated winnings to forfeiture of every deposit. If a site restricts your country, that is the answer. Read the no-KYC guide next for how verification actually works.