Is Chumba Casino safe?
Chumba Casino
Chumba Casino lets adults play slots and table games with Sweeps Coins that can be redeemed for cash, under sweepstakes rules rather than a casino licence. New York made its owner VGW pay $8 million, Kentucky and Florida are suing, and the app tracks purchases, location and browsing for ads.
#36of 41 in Payments and money
Medium confidence- Operator
- VGW Malta Limited (VGW group, Perth, Australia); sweepstakes run by VGW Games Limited
- Model
- Gold Coins for play, Sweeps Coins redeemable for cash from 100 SC (about $100)
- Minimum age
- 21 (terms); 18+ on the App Store
- Sweepstakes excluded
- 16 states, including California, New York, New Jersey and Michigan (terms of 16 September 2026)
- Biggest penalty
- $8M to the New York Attorney General (September 2026)
- Pending state suits
- Kentucky AG (June 2026), Florida AG (August 2026); City of Baltimore suit (March 2026) is context
- App Store label
- Purchases, location, contact info, browsing history, identifiers and usage data used to track you
- Harm tools
- In-app purchase limits, 1–30 day breaks, 6-month to indefinite self-exclusion
How the score breaks down
The overall score is the weighted average of these factors. Scoring rules
Privacy30% of score
30 out of 100, PoorApple's label lists purchases, location, contact info, browsing history, identifiers, usage and other data as used to track you. The September 2026 policy adds ID scans, Social Security numbers, selfies run through Jumio and SumSub face matching, keystroke data and bank statements.
Security30% of score
46 out of 100, WeakWe found no reported breach of Chumba Casino. Its account-security page gives only password advice, with no two-step log-in, and we found no bug bounty. Identity checks use facial recognition and GeoComply location checks.
Transparency and control15% of score
50 out of 100, WeakPurchase limits, breaks and self-exclusion can be set in the menu, and limits rise only after 72 hours. Play and time limits need a contact form, Gold Coin purchases are never refunded, Sweeps Coins expire after 60 days, and the terms force individual arbitration unless you opt out.
Scams and harmful content15% of score
42 out of 100, WeakSlots, live roulette and blackjack with Sweeps Coins that pay out cash, bought at about one coin per dollar alongside Gold Coin packs (New York AG). Age 21 matches licensed casinos, though the App Store says 18+. Self-exclusion that cannot be undone early adds a few points.
Regulatory record10% of score
30 out of 100, PoorNew York's AG sent a cease-and-desist in June 2025 and took $8M in September 2026. Connecticut (2024) and Maryland (March and November 2025) ordered it to stop, Louisiana listed VGW, and Kentucky's and Florida's AGs filed suits in 2026.
Is Chumba Casino safe?
Chumba Casino carries more legal and money risk than its "social game" label suggests. You play slots, roulette and blackjack with coins that can be turned into cash, but without a state casino licence, so the audits and complaint channels of a licensed casino do not apply. Its owner VGW, which New York's Attorney General calls one of the largest operators of sweepstakes casinos, paid New York $8 million in September 2026, and the attorneys general of Kentucky and Florida are suing it. The new iPhone app, released on 14 October 2026, also tracks you heavily. We score Chumba Casino 40/100, below Fliff at 44.
The App Store listing calls it a "social game experience". The terms tell a different story: Sweeps Coins "are redeemable for real prizes", including cash paid to your bank account.
How Chumba's sweepstakes work
There are two currencies. Gold Coins are for play only and are what you buy. Sweeps Coins come free with Gold Coin packs, as daily log-in bonuses or by post, and can be played for more Sweeps Coins. New York's Attorney General found that in practice players received "approximately one coin for every dollar spent", the same as buying chips in a casino.
Once you hold at least 100 eligible Sweeps Coins, worth $100, you can redeem them after identity checks. VGW may cap redemptions at $10,000 a day, and Sweeps Coins expire 60 days after your last log-in. Every Gold Coin purchase is final. The terms say that if VGW became insolvent, there would be "no absolute guarantee" that unredeemed prizes would be paid.
The sweepstakes is open only from 21, and the terms of 16 September 2026 exclude 16 states, including California, New York, New Jersey, Michigan and Washington. Maryland is not on that list, although its gaming regulator has sent two orders.
Which states have acted against Chumba Casino?
The record is long. Connecticut's Department of Consumer Protection ordered VGW to stop in February 2024, and VGW left the state while saying it disagreed. Maryland's gaming agency wrote to "VGW d/b/a Chumba Casino and Luckyland Slots" on 12 March 2025 and again on 18 November 2025, saying Chumba's offerings contain "consideration, chance and prize; in other words, it is gaming". Louisiana's Gaming Control Board lists three VGW companies among operators sent cease-and-desist letters, and Delaware ordered VGW's LuckyLand brand out in April 2025.
New York's Attorney General sent a cease-and-desist in June 2025, after which VGW stopped selling sweepstakes coins there. On 9 September 2026 she announced that VGW would pay $8 million in disgorgement, penalties and costs, saying some New Yorkers had lost "tens of thousands of dollars" on its platforms. Kentucky's Attorney General sued VGW in June 2026, and Florida's sued VGW and its payment processors in August 2026. The City of Baltimore filed a consumer-protection suit in March 2026 alleging that Chumba and five other operators have minimal age checks and appeal to young users; the city sued for itself, so we count its suit only as context. These suits are allegations so far. Under our rules, repeated state orders plus a mid-sized penalty and pending attorney-general suits put the regulatory record at 30.
What data does Chumba Casino collect?
The App Store label is among the broadest we have seen on a gambling-style app. Purchases, location, contact details, browsing history, identifiers, usage data and other data are all listed as used to track you across other companies' apps and websites. The privacy policy adds what you hand over for prize redemptions: ID document images, Social Security number, selfies matched by Jumio and SumSub facial recognition, bank statements and source-of-funds checks. VGW's providers also collect keystroke data and precise location through GeoComply each time you log in.
VGW shares advertising identifiers with ad networks, uses Facebook App Events, and works with Neustar to build ad audiences. You can opt out through the "Do Not Sell or Share" link, but sharing is on by default.
Tools against gambling harm
Chumba's tools are better than many sweepstakes rivals'. From the Responsible Social Gameplay menu you can set a purchase limit per day, week or month, take a break of 1 to 30 days, or self-exclude for 6 months, 1, 3 or 5 years, or indefinitely. Raising or removing a limit takes 72 hours, and breaks and exclusions cannot be ended early. A session reminder pops up every hour by default. The gaps matter: limits on Sweeps Coin play and daily time need a contact form, and a self-exclusion covers Chumba only, not VGW's other sites, unless you ask support. Pulsz, by contrast, handles every tool by email.
How to use Chumba Casino more safely
- Check that sweepstakes play is legal where you live; Chumba's own list changes often and lags behind state orders.
- Set a purchase limit in the app before your first purchase, and leave it in place.
- Choose "Ask App Not to Track" on iPhone and use the "Do Not Sell or Share" link on the website.
- Redeem balances you want to keep before they expire, and before any self-exclusion.
- If play is getting out of hand, set an indefinite self-exclusion and ask support to apply it to every VGW site.
How we scored it
Privacy (30) and regulatory record (30) are the weakest factors: tracking across seven data types, ID and face checks, an $8 million New York payment and suits by two states. Scams and harmful content (42) reflects real-money casino games from 21 with solid in-app limits. Transparency and control (50) is the strongest, helped by self-service limits and exclusions. Security (46) suffers from the lack of two-step log-in.
Questions people ask
Is Chumba Casino legal?
Chumba runs as a sweepstakes, not a licensed casino, and argues that because Sweeps Coins are given away free, its games are not gambling. New York's Attorney General disagreed and took $8 million from its owner in 2026, and Connecticut and Maryland ordered it to stop. Its own terms bar sweepstakes play in 16 states. Kentucky and Florida are suing, and no court has settled the question nationally.
Does Chumba Casino pay real money?
Yes, if you are in an eligible state and pass identity checks. Sweeps Coins won in games can be redeemed once you hold at least 100 eligible coins, worth $100, and VGW can cap redemptions at $10,000 a day. Unused Sweeps Coins expire 60 days after your last log-in.
How old do you have to be to play Chumba Casino?
The terms and sweeps rules require you to be 21, or older if your state's age of majority is higher. The App Store rates the app 18+, so the store rating alone will not stop a 19-year-old from downloading it.
Why does Chumba ask for my ID and a selfie?
Before paying prizes, VGW verifies your identity with an ID document, your Social Security number and a selfie that Jumio or SumSub match against the ID photo. The privacy policy says these providers keep the face data only as long as the law requires. GeoComply checks your location each time you log in.
How do I self-exclude from Chumba Casino?
Open the Responsible Social Gameplay menu, choose Access Restrictions and pick 6 months, 1, 3 or 5 years, or indefinite. You cannot reopen the account early, and an indefinite exclusion lasts at least 6 months. It covers Chumba only, so ask support to extend it to VGW's other sites.
Sources
- 1.Chumba Casino App Store listing and App Privacy label (opens in a new tab) · Apple App Store, 2026
- 2.Chumba Casino Terms and Conditions, version 27.1 (16 September 2026) (opens in a new tab) · VGW Malta Limited, 2026
- 3.Chumba Casino Privacy Policy, version 9.2 (16 September 2026) (opens in a new tab) · VGW Malta Limited, 2026
- 4.Chumba Casino Sweeps Rules, version 26.0 (13 July 2026) (opens in a new tab) · VGW Games Limited, 2026
- 5.Chumba Casino Responsible Social Gameplay Policy, version 4.0 (opens in a new tab) · VGW Malta Limited, 2025
- 6.Seven tips to secure your account (archived 29 June 2026) (opens in a new tab) · Chumba Casino, 2026
- 7.Attorney General James secures $8 million from leading operator of illegal online sweepstakes casinos (opens in a new tab) · New York Attorney General, 2026
- 8.Attorney General James stops illegal online sweepstakes casinos (opens in a new tab) · New York Attorney General, 2025
- 9.VGW d/b/a Chumba Casino and Luckyland Slots business in Maryland (12 March 2025) (opens in a new tab) · Maryland Lottery and Gaming Control Agency, 2025
- 10.Chumba Casino notice to cease and desist (18 November 2025) (opens in a new tab) · Maryland Lottery and Gaming Control Agency, 2025
- 11.List of operators issued cease-and-desist letters (archived 21 April 2026) (opens in a new tab) · Louisiana Gaming Control Board, 2026
- 12.Sweepstakes operator VGW exits Connecticut after cease-and-desist (opens in a new tab) · NEXT.io, 2024
- 13.Kentucky AG takes aim at Kalshi, Polymarket and VGW (opens in a new tab) · Casino.org, 2026
- 14.Florida AG sues VGW, Stake and payment firms (opens in a new tab) · Casino.org, 2026
- 15.Baltimore sues major social casino operators for illegal online gambling (opens in a new tab) · CBS News Baltimore, 2026
- 16.Delaware shuts down illegal online slots (opens in a new tab) · State of Delaware, 2025