Legal Blackjack Sites for USA Players

New Jersey

The deepest and oldest market, and the template the rest of the country copies. The Division of Gaming Enforcement, housed in the Office of the Attorney General, investigates and enforces while the Casino Control Commission handles licensing. Internet gaming opened in November 2013. Nine Atlantic City casino hotels hold permits, each able to carry several consumer brands, and the permit runs a single year at no less than $400,000 to issue, the shortest term anywhere. All 10 major brands operate here. July 2026 internet gaming win was $276.9 million, up 12.0 percent, taxed at 19.75 percent since July 1, 2025.

Pennsylvania

Number one by revenue. Interactive gaming certificates from the Pennsylvania Gaming Control Board run five years, with renewal papers due six months before expiry under 58 Pa. Code Chapter 803a. Eleven casinos booked iGaming revenue in July 2026, a month that produced $249,007,485 statewide, up 9.09 percent, alongside $115,548,069 in tax. The tax split matters at a blackjack table. Online table games are taxed at 16 percent where slots are taxed at 54 percent, and that gap is why Pennsylvania operators keep building live studios. Nine of the 10 major brands are live, all but Hard Rock Bet.

Michigan

The most structurally interesting of the seven. The Michigan Gaming Control Board seats five members on four-year terms, no more than three from one party under MCL 432.204, and its internet gaming licenses number exactly 15: three held by Detroit casinos, 12 by federally recognized tribes. Every slot is filled, so a brand enters only when an incumbent leaves, which is how bet365 arrived April 17, 2026 in the place PokerStars vacated. Tax is tiered from 20 to 28 percent of adjusted gross receipts, July 2026 receipts were $302.77 million, and all 10 major brands compete here.

West Virginia

Small, and capped by statute. HB 2934 reached the books unsigned by Gov. Justice on March 9, 2019 and took effect that June. W. Va. Code 29-22E-6 limits the state to five interactive licensees at $250,000 to enter and $100,000 to renew on five-year terms, while rule 179 CSR 10-20.1 allows each licensee three branded skins, so five licenses can support 15 brands. That reconciles press counts of 10 or 11 West Virginia Lottery casinos with a statutory ceiling of five. Tax is 15 percent, paid weekly. Eight of the 10 major brands are live, missing bet365 and Hard Rock Bet, and live blackjack streams in from Evolution’s Pennsylvania studio.

Connecticut

Connecticut has exactly two online casino operators and will keep having two unless the compacts change. Rather than open commercial licensing, the state amended the Mashantucket Pequot and Mohegan compacts, which left the master wagering licenses with those two tribes and the resulting product under the Department of Consumer Protection. DraftKings runs under the Mashantucket Pequot Tribal Nation and FanDuel under the Mohegan Tribe, the latter also branded as Mohegan Sun Casino. Every other major brand is shut out permanently, and BetMGM is not here, an error repeated constantly elsewhere. Live blackjack comes from an Evolution studio in Fairfield.

Delaware

Delaware went first, in November 2013, and is still the smallest genuine market in the country. Authority rests with the Delaware Lottery, three video lottery agents supply the product, and one technology stack carries all of it under an exclusive Rush Street Interactive deal announced Jan. 3, 2024. Because Delaware Park and Harrington Raceway push their casino games out through the BetRivers app, BetRivers is the state’s only major brand, while Bally’s Dover fields a separate app on identical technology. Evolution live tables, blackjack included, went live July 2, 2024.

Rhode Island

A monopoly, and worth describing as one. The Rhode Island Lottery holds the interactive gaming license itself, Bally’s runs the consumer product under contract, and the Department of Business Regulation oversees both. Play began March 5, 2024, four days after a technical trial, and the online poker the statute authorizes has never opened. None of the 10 major brands is available. Bally Casino is the whole market, and the fiscal 2025 lottery audit shows the scale: 272 online slots against six live tables covering blackjack, roulette and speed baccarat. Rhode Island is also the only state where the ages differ, 18 in person and 21 online.

Maine: Authorized, Not Live

Maine is the lone state to finish a bill in the 2025 and 2026 sessions, and it still has nothing to play. Gov. Mills declined to sign LD 1164, which became chapter 538 on Jan. 11, 2026 without her, and it now sits at Title 8, chapter 39, sections 1401 to 1417. Its definition of internet gaming names blackjack explicitly. The right is exclusive to the four Wabanaki nations, which may contract with platform operators, and operators forward 18 percent of adjusted gross receipts to the state. Proposed Chapter 70-84 went out from the Gambling Control Unit on July 15, 2026 with comments closing July 27, and the applications page says submissions are not yet accepted. Nobody is playing legal Maine blackjack. Our Maine page tracks it.

No online blackjack is licensed in 42 states or the District of Columbia. That includes every large state except New Jersey, Pennsylvania and Michigan, and it includes Nevada, whose interactive license covers poker. More than 85 percent of American adults live somewhere on that list, which is why the honest version of this page describes what those readers can actually reach rather than pretending the question does not arise.

Travel is the only fully legal route. Licensed states check physical presence, never residency, so a Texan standing in Atlantic City can register, verify, deposit and play, and will watch the app refuse to deal the moment geolocation places the phone outside the line. The account survives the state border; only play stops. Land-based options at home are narrower than people assume. The Oklahoma model compact reaches only card games the house does not bank, which leaves tribal blackjack there pooled among players with a fee charged per hand, and Washington’s licensed card rooms hold any single blackjack wager to $400 under WAC 230-15-140.

Offshore sites are what most people in these states actually use. That market predates UIGEA, signed Oct. 13, 2006, and predates New Jersey’s licensed launch by more than a decade, and friction sustains it: an offshore account opens in minutes with nothing uploaded, while a licensed one takes no deposit before identity is settled and deals no hand before your location is proven. A letter from all 50 state attorneys general to the US attorney general on Aug. 5, 2025 asked for injunctive relief and sized the illegal market at $400 billion, with roughly $4 billion a year in state tax going uncollected.

These five are here because American blackjack players use them. None of them is licensed in the United States and none is presented as equivalent to a state-licensed site. Every fact below comes from the operator’s own pages or a regulator’s filing, and where nothing of that kind could be found, the hole is described rather than filled.

Legalization has stalled. Two full sessions produced exactly one finisher, Maine, which got there by handing exclusivity to its tribes instead of opening commercial licensing. That is one authorization in two years, from legislatures that passed 10 sweepstakes bans in the same period.

Eight jurisdictions came closest and none crossed.

The unglamorous forecast is that the next new market is Maine switching on rather than a ninth state authorizing. Legislation is reviewed here every month on the bill tracker.

A well-played hand returns about 99.5 percent of the wager while a slot returns 94 to 96 percent, so clearing a bonus at blackjack on slot terms would cost the house several times what a slot costs it. Weighting is the industry’s fix. A slot dollar usually counts in full toward a wagering requirement while a blackjack dollar counts a dime or less, and often nothing.

Do the arithmetic once and you will not need to again.

More in our blackjack bonus guide.

Apple’s guideline 5.3.4 requires such apps to hold licensing in the locations where they are used, to be geo-restricted to those locations and to be free, and it separately bars card counters as gambling aids. Guideline 5.3.3 blocks in-app purchase for real money gaming credit, which is why you fund a casino account at the cashier and never through your Apple ID.

In a legal state the app usually beats the mobile browser, because the operator’s location software runs natively on the handset, where a browser must borrow an operating system permission and, on desktop, a separate plugin. So the false out-of-state rejections cluster in browsers, along state lines, and on handsets whose battery saver is throttling location. Precise location is mandatory and camera access is legitimate at the identity step. Treat requests for contacts, SMS, call logs or Android’s accessibility service as red flags, because none has any role in taking a blackjack bet. Offshore apps reach neither store, so what they offer is a web wrapper or a package you install by disabling the protection that would have stopped it. More in our mobile blackjack guide.

Two currencies run side by side on the same games. Gold Coins have no cash value and convert to nothing. Sweeps Coins are used in promotional play and can be redeemed for prizes, and they arrive free with a Gold Coin purchase or by mailing a request. Most state gambling definitions need prize, chance and consideration together, and the model concedes the first two while resting everything on the third: no purchase is required, so this is a promotional sweepstakes rather than a casino. That explains why not one of these companies has ever applied for a US gaming license. The age is 18, where every licensed operator sets 21.

Legislatures have declined to argue about consideration and have drafted around it. Montana’s SB 555 is the template, banning online casino games “by whatever name known” using “any form of currency” while expressly permitting sites that allow no currency of any kind, without ever using the word sweepstakes. Nine such bans are in force and a 10th arrives Nov. 1, 2026.

For a blackjack player the category is thin and got thinner, because it is structurally slots-first and the suppliers who build live blackjack have walked away. September 2025 brought Pragmatic Play’s formal exit from the US sweepstakes market, and Evolution withdrew 14 live titles from Stake.us, which took that live lobby from roughly 30 options down to 12. Redemption carries its own floor: Chumba’s terms set a $100 minimum, so a player holding $80 of Sweeps Coins can take out nothing, where a $20 blackjack balance at a licensed casino is $20. The same document lists 14 excluded states and waives class claims. Enforcement has meanwhile moved to the payment rails, with Florida naming four processors as co-defendants on Aug. 19, 2026. More at sweepstakes blackjack.

The padlock proves less than people think. Domain-validated certificates cost nothing, issue automatically inside a few minutes, and involve no human checking the applicant, which is why a cloned login page carries one as readily as a casino. Licensed operators run current TLS, and assessors work from the federal benchmark in NIST Special Publication 800-52 Revision 2, but the control that matters is New Jersey’s demand for an independent security assessment every year, not once at the licensing stage.

Identity rules are narrower than most sites claim. New Jersey requires a player to be 21 with identity established before funding, and 13:69O-1.3(b)3 gives the operator a choice between checking two credentials with at least one government issued or using another approved remote authentication method, while the Social Security number is recorded only if voluntarily provided.

The instructive account-security case is DraftKings in November 2022, when attackers reached roughly 60,000 accounts and took about $600,000 from around 1,600 of them. Nothing was breached and no encryption was defeated; the passwords had been stolen elsewhere and replayed. The regulatory answer targets visibility instead of cryptography, and 58 Pa. Code 812a.3 requires operators to display your previous login date and time, offer access notifications and re-authenticate after 15 minutes idle. New Jersey adds a suspension after three failed logins and an acknowledgment once lifetime deposits reach $2,500. Offshore, none of this has a counterpart: no annual assessment filed with anyone, no published retention floor, so paperwork capable of settling a dispute three years from now is under no obligation to survive that long.

Why Game Rules Are a Legal Matter, Not Just a House Matter

Under N.J.A.C. 13:69O-1.5(m)2 a server-based table game must function in accordance with the approved rules for its corresponding authorized live table game. Tethered that way, the online game cannot invent procedure of its own, and departing from the approved version is an enforceable violation rather than a service complaint. It also explains a common misreading. A variant offered in New Jersey and absent in Michigan is rarely an operator holding it back, since approval happens separately in each state.

Mandatory Payout Disclosure Requirements

Payouts are filed terms, not marketing. N.J.A.C. 13:69F-2.5(e) states that a winning blackjack pays “3 to 2, or at odds of 6 to 5 for the 6 to 5 blackjack variation,” and the paytable forms part of the approval and has to be shown. Duties to the player travel with it. The player-protection page must explain how to get the terms and your own play record under 13:69O-1.2(l)14, and 13:69O-1.5(r) makes a game hold the last five results and the amounts staked on them, your only dispute tool before contacting anyone.

Rule Changes Requiring Regulatory Approval

Since the approved prototype is the legal object, altering it means a return trip to the regulator. No operator may quietly move a payout, change dealer behavior on soft 17 or rework a side bet, because the approval cycle covers the change. Enforcement is documented: New Jersey’s docket 20-1212-NV penalized IGT for failing to disable Single Hand Blackjack across all platforms in December 2020. No rigged game and no cheated player, simply a title that was supposed to be off and stayed reachable.

Posted-Rules Requirements at the Table and on Screen

The land-based duty to post a table’s rules and limits where a player can read them before wagering carries online through the prototype tether. That is why every licensed game has a rules panel listing deck count, dealer action on soft 17, doubling and splitting, surrender, side bet paytables and the payout. The panel is the disclosure mechanism, not a courtesy feature. The panel tells you whether that means six decks paying 3:2 with the dealer standing, or a single deck paying 6:5.

Side Bet Approval Processes

Side bets are separately approved wagers with filed paytables, under the same prototype rule as the base game, which is why one branded table carries different side bets in New Jersey and in Michigan. The paytable on screen binds the operator, so declining to pay a listed 21+3 straight flush breaks a rule rather than opening a policy argument. The cost is knowable too, since regulators clear edges of 4 to 15 percent for the reason they clear 6:5: disclosure. One carries tax weight, because a payout of 300 times the wager triggers a W-2G.

RNG Certification Standards for Online Blackjack

N.J.A.C. 13:69E-1.28G lists what a generator must survive, naming chi-square, mono-bit and runs tests and demanding demonstrable unpredictability. The provision protecting you most is not statistical: the rule bars a secondary selection for the purpose of displaying the outcome, meaning the software may not pick a result and then show a different one. Accreditation of the labs is itself regulated. A testing laboratory under 58 Pa. Code 469a.3 needs ISO/IEC 17025 accreditation issued by an ILAC mutual-recognition signatory, and it must stay independent of the operators whose games it examines.

Shuffle and Deck Penetration Requirements

Penetration is usually treated as a counter’s concern, and New Jersey wrote it into rule. N.J.A.C. 13:69F-2.5 puts the cut a minimum of 10 cards in and places the cutting card no less than approximately a quarter of the stack from the back, which fixes the deepest legal penetration at roughly 75 percent. In the other direction 13:69F-2.6(l) allows a reshuffle after any round, so the ceiling sits in rule while the floor is whatever the house wants. Online it is moot, because an RNG game rebuilds the shoe every hand.

Live Dealer Studio Licensing and Location Requirements

There is no national rule here, and the two clearest states disagree. New Jersey requires a casino operator’s primary internet gaming equipment to sit in a restricted area within the territorial limits of Atlantic City under N.J.A.C. 13:69O-1.2(n). West Virginia is the counterexample, with no in-state studio, its live blackjack permitted to stream from Pennsylvania as table game simulcasting. Individual dealer licensing is enforced regardless: Pennsylvania fined Evolution US $7,500 on March 22, 2023 because an unlicensed employee dealt blackjack.

Continuous Shuffling Machines and Disclosure

Shuffling equipment is regulated as equipment, and the sharpest rule concerns what a shuffler may not do. Card-recognition shufflers fall under N.J.A.C. 13:69E-1.28X, which provides that such a device must not supply real-time information aiding the projection of an outcome. Any machine reading the stack knows what is in it, and live access to that knowledge would tilt the game toward the house. On disclosure, the procedure a game uses is the approved one and belongs in the rules panel, but no regulator requires a warning about continuous shuffling.

The operative words settle it. The Wire Act, 18 U.S.C. 1084, from 1961, punishes a person “engaged in the business of betting or wagering,” and the long argument about it has been whether it stops at sports. The Office of Legal Counsel said it did on Sept. 20, 2011, said the opposite on Nov. 2, 2018, and the First Circuit ruled in New Hampshire Lottery Commission v. Rosen, 986 F.3d 38, on Jan. 20, 2021, that its prohibitions cover only bets on sporting events or contests. Two qualifications get dropped: the 2018 opinion was never formally rescinded, and a First Circuit ruling binds one circuit. UIGEA, 31 U.S.C. 5361 to 5367, created no new gambling offense and pushed compliance onto banks. The Illegal Gambling Business Act, 18 U.S.C. 1955, needs five or more people running a business that violates state law.

Geolocation is not an operator preference but the condition the market rests on, because UIGEA’s intrastate carve-out is available only where state law includes age and location verification designed to block players outside the state. That is why a licensed site drops a session rather than let it run unverified. Which is also why a VPN fails three ways: it breaches terms that give an operator clean grounds to void winnings, it does not work against a vendor stack cross-referencing GPS, Wi-Fi and cell signals, and it does not move you, since Michigan’s statute deems an internet wager to occur at the operator’s in-state casino and provides that intermediate routing does not determine location. Pretending to be in New Jersey places an unlicensed bet wherever you are actually sitting.

The framework opens with California v. Cabazon Band of Mission Indians, decided Feb. 25, 1987, and the congressional answer 20 months later, the Indian Gaming Regulatory Act, 25 U.S.C. 2701, enacted Oct. 17, 1988. Gaming is sorted into three classes, and the class determines who holds authority. Blackjack banked by the house is Class III, which puts it behind a tribal-state compact carrying the interior secretary’s approval. A tribe cannot simply decide to deal it.

Five states show five consequences.

Those compacts were bargained for and pay the state a revenue share, so a commercial online casino can cost more in forgone compact money than it earns.

Licensing comes first, and a footer badge is not evidence. The operator’s exact domain has to appear on the state regulator’s published roster; absent from it, the site is labeled offshore no matter what it calls itself. For offshore brands we log the license claimed, the entity holding it, and whether the issuing authority runs a register anyone can search. A claimed license that matches no real authority is disqualifying.

Then blackjack quality, which is not the same as variant count. What gets weighed is the payout, dealer action on soft 17, doubling after split, deck count, surrender, whether live tables exist, and whether the rules panel spells all of it out before your first bet. Thirty titles paying 6:5 make a worse lobby than five paying 3:2, because that rule adds roughly 1.4 points to an edge near half a percent: at a $25 average bet and 200 hands an hour, about $70 an hour on top of the game’s own $25. Rules not disclosed before you bet are disqualifying.

After that we record published withdrawal methods, limits, processing periods and fees, treating the absence of any of them as a rating input rather than a blank; the state’s player-funds rule and dormancy period behind the marketing; bonus terms as they apply to blackjack, where a contribution chart hidden until after you fund is disqualifying; responsible gambling tools, weighing a binding state self-exclusion list against a switch that stops at one brand; and what happens when the operator says no.