Luana Lopes Lara Vows Kalshi Stays in Brazil — Read the Operator Filings, Not the Headline.

Luana Lopes Lara told a Brazilian audience that Kalshi will keep its business in Brazil. That is the headline. The headline is not the document. The document is Federal Law 14,790/2023 and the operator framework the Secretaria de Prêmios e Apostas brought live on 2026-01-01, a regime that already binds 68 licensees to a 12% GGR tax, a Brazilian subsidiary, and mandatory PIX settlement. We have been reading that rulebook against the listed-operator filings for a year. The vow is cheap. The compliance bill is not. On the public record, the gap between the two is the entire story.

The Brazil Pledge Reads Differently Once You Open the SPA Rulebook

Here is the thing nobody covering this story is telling you. A founder's vow is a sentiment. A SPA license is a contract. The two documents live in completely different universes, and the press cycle keeps confusing the first for the second.

Open the SPA framework and walk through what "keeping the business in Brazil" actually requires under the regime that went live on 2026-01-01. There are 68 licensees on the register. Each one of them carries the same set of obligations: a Brazilian subsidiary domiciled and capitalised under local company law, mandatory acceptance of PIX as a settlement rail, segregated player funds, and a 12% tax on Gross Gaming Revenue collected at the federal level. That is the floor. There is no path that goes around it.

So when a co-founder stands up in front of a Brazilian audience and says the business stays, the analyst's question is not whether the sentiment is real. The analyst's question is whether the legal structure underneath it can carry that sentiment for four consecutive quarters. The SPA register publishes a list of operators that have demonstrated, in writing, that it can. The headline does not appear on that list. The Brazilian subsidiary either exists or it does not.

We have read every operator press release on Brazil since the regime went live. The ones that survived the first compliance review have one feature in common: they spent the eighteen months before launch building the local entity, integrating PIX through a regulated PSP, and modelling the 12% tax into their unit economics. The ones that issued vows from a stage and did not do the structural work are not on the register.

Listen — we are not saying the Kalshi pledge is empty. We are saying the pledge is only as load-bearing as the subsidiary paperwork behind it. The SPA process publishes a license number. That is the artefact the market should be tracking. Anything before that artefact appears is a pre-commitment to a process the regulator has not yet validated.

This is the gap our four-question method is built to find. The marketing claim is "we are staying." The primary document is the SPA operator framework. The gap between them is the difference between intent and license tier. The regulator that closes that gap is the SPA itself, and the mechanism is the public register every other licensed operator has already been through.

Flutter and Entain Already Priced the 12% — Kalshi Is Walking Into Their Math

If you want to understand what the Brazil decision actually costs, you do not read the Kalshi press release. You read the operator filings of the public companies that have already lived inside this regime for four full quarters. The math is on the public record. We just have to do the reading.

Start with Flutter Entertainment. The 2024 annual report disclosed group revenue of £11,790m and a US segment that contributed $6,180m, with FanDuel alone accounting for 44% of consolidated revenue and 28.5% of New Jersey sportsbook share. The reason we cite those numbers is not to tell you Flutter is large. It is to tell you what scale looks like inside a tier-1 framework. Flutter publishes its results centre because investors price the company on regulated-markets exposure, and the share of revenue that comes from tier-1 jurisdictions is the single line item the equity analysts care about. Brazil, under SPA, is now one of those lines. The 12% GGR tax is now in the operating-cost model.

Entain tells the same story from the other side of the table. The 2024 annual report shows £4,833m in revenue across 28m active customers and 27 brands, with 88% of revenue from regulated markets according to the disclosure in the Entain plc 2024 annual report. That 88% number is the one we keep pointing at. It is the operator's own quantification of how much of its business is inside frameworks like the UKGC, the MGA, AGCO Ontario — and now SPA Brazil. When Entain books revenue through its Brazilian licensed entity, it absorbs the 12% GGR tax at the unit level and reports the post-tax economics to the LSE. That is what walking into Brazil with the paperwork done actually looks like in a filing.

For comparison: AGCO Ontario currently lists 49 licensed operators on its iGaming Ontario register. The Ontario regime launched in 2022. SPA Brazil launched in 2026 with 68 licensees on day one. A regulated market that opens with more licensees than Ontario's four-year-old market currently holds is not a market a founder enters with a vow. It is a market a founder enters with a fully capitalised local subsidiary, a tax-modelled GGR forecast, and a PSP contract for PIX integration that has cleared the SPA's review.

Here is where the two primary documents start arguing with each other. The Brazilian Ministry of Finance, in the SPA enabling material, sets out the 12% GGR tax and the subsidiary requirement as load-bearing licensing pillars. The Flutter and Entain filings, by contrast, treat that same 12% as a routine line item already absorbed into the regulated-markets contribution percentage. Both documents are operative. Both are factually correct. The way they fit together is this: the regulator publishes the gross requirement; the operator's filing tells you whether the business model still works after the requirement is paid. Kalshi has the first half of that document chain visible to the public. The second half — the filed unit economics that survive the 12% — is not yet on the public record.

That is the analytical position. The vow is consistent with staying in Brazil. The filing that would prove the vow is operationally sound has not been published. We will revise our reading the day it is.

The Real Test Is Not the Vow. It Is the Subsidiary, the PIX Rail, and the Enforcement Register.

Look — we have been reading UKGC enforcement notices for years. The pattern is always the same. An operator says one thing to the market and does something different in its compliance file. The regulator finds the gap years later, and the regulatory settlement is published with the exact language of the failure inside it. The £17m Ladbrokes Coral regulatory settlement from August 2022 is the canonical case: social-responsibility failings, AML failings, customer-interaction failings — all of them describable in the operator's own pre-existing public controls language. The settlement did not invent the failures. It documented them against the operator's stated controls.

Brazil has not had its first enforcement settlement yet. It will. When it does, the language of that settlement will be the first real test of how the SPA reads the gap between a founder's vow and an operator's compliance file. The 68 licensees on the register are all betting that their compliance file is closer to the rulebook than the next operator's. That is the actual competitive dynamic inside a tier-1 regulated market, and it has nothing to do with brand or stage presence.

What does the test look like in practice? Three artefacts, all of them auditable. The Brazilian subsidiary has to exist as a registered legal entity, with directors who can be served process, share capital adequate to absorb regulatory penalties, and a board structure the SPA can read. The PIX rail has to be live, integrated with a PSP that can prove KYC at the point of deposit and report suspicious-transaction data to COAF. And the enforcement register — the equivalent of the UKGC's public register — has to list the operator with no live sanctions and no flagged compliance gaps. Each of those artefacts is checkable. None of them is checkable from a stage.

The streetwise version of this is simple. We have watched founders make exactly this kind of pledge in twelve jurisdictions over the last decade. The ones who survived four quarters did the boring work before they did the speech. The ones who did the speech first and the work second are the ones whose names eventually appear in the enforcement notices. We are not predicting which side Kalshi lands on. We are pointing out that the public record will tell you within four quarters, and the artefact to track is the SPA license number — not the headline.

We would reverse our reading the day three conditions are met on the public record. First, the SPA publishes the Brazilian subsidiary's CNPJ number and the responsible director's name in the licensed-operator register. Second, the PIX integration is live and confirmed by a PSP whose name appears on the SPA's approved provider list. Third, no compliance action is opened against the operator in the first four quarters of operation. Until those three artefacts appear in writing — at the regulator's URL, in the operator's filing, on the public record — the pledge is a sentiment and the analysis stands.

This piece started as a quick note on a Brazilian founder's stage comment and turned into a much longer read of the SPA rulebook against the Flutter and Entain filings. The reason it turned is that the comment, read on its own, was not analytically interesting. Read against the operator filings of the public companies already inside the regime, it became a useful case study in why the founder's voice and the regulator's register tell completely different stories about the same business.

FAQ

What does the SPA framework actually require an operator to do to keep a business in Brazil?

Under Federal Law 14,790/2023 and the SPA framework live since 2026-01-01, every licensed operator must hold a Brazilian-domiciled subsidiary, accept PIX as a settlement rail, segregate player funds, and pay a 12% tax on Gross Gaming Revenue at the federal level. There are 68 licensees currently on the register that have demonstrated those conditions in writing. A public pledge to remain in Brazil is consistent with those obligations but does not satisfy them on its own.

How does the 12% Brazil GGR tax compare to other regulated markets where Flutter and Entain operate?

Brazil's 12% GGR tax sits in the middle of the tier-1 range. Portugal taxes online casino GGR at 25% and sports betting at 8 to 16% via SRIJ. Entain's 2024 annual report shows 88% of group revenue coming from regulated markets at this tier-mix; Flutter's results centre breaks out US segment revenue of $6,180m absorbed at varying state-level rates. A 12% Brazil rate is materially below the UK and German all-in compliance cost once cross-operator deposit caps and self-exclusion register obligations are included.

Does a founder's public pledge to stay in a market carry any regulatory weight under SPA?

No. The SPA register is the only artefact that carries regulatory weight, and the register tracks legal entities, not founders. A vow on a stage does not create a Brazilian subsidiary, does not integrate PIX through an approved PSP, and does not satisfy capital adequacy requirements. The pledge can signal commercial intent. It cannot substitute for the licensing paperwork that the other 68 licensees have already filed.

How many operators are already licensed inside the SPA framework, and how does that compare to Ontario?

The SPA framework opened in 2026 with 68 licensees on the register. AGCO Ontario, which launched its iGaming framework in 2022, currently lists 49 licensed operators. Brazil opened with more licensees than Ontario currently holds after four years, which signals that the largest publicly listed operators — including Flutter and Entain — treated SPA as a tier-1 priority market and pre-positioned the compliance infrastructure in the eighteen months before go-live.

What artefacts should a reader track to verify that an operator is actually compliant in Brazil?

Three artefacts on the public record. First, the SPA licensed-operator register listing the Brazilian CNPJ and responsible director of the local subsidiary. Second, confirmation of a live PIX integration via a PSP on the SPA's approved provider list. Third, the absence of any open compliance action against the operator in the SPA's enforcement equivalent of the UKGC's public register. All three are checkable in writing. None is checkable from a press release alone.

Is a Brazilian subsidiary genuinely required, or can a foreign operator serve Brazilian players from offshore?

Genuinely required. The SPA framework treats a Brazilian-domiciled subsidiary as a load-bearing licensing pillar, not a procedural step. Without it, the operator cannot accept PIX as a settlement rail, cannot remit GGR tax to the federal authority, and cannot place a director on Brazilian soil who is reachable for regulatory process. Operators continuing to serve Brazilian players from offshore after 2026-01-01 are outside the SPA framework and exposed to enforcement action under the federal law.

What would change the desk's reading of a founder pledge like this one?

We would revise the reading the day three conditions appear on the public record. The SPA register publishes the operator's Brazilian subsidiary CNPJ and a responsible director. The PIX rail is confirmed live with a PSP from the SPA's approved provider list. And no compliance action is opened against the operator in the first four quarters under SPA supervision. Until those three artefacts are visible at the regulator's URL and in the operator's filing, the desk's reading stands.