No Deposit Bonus Codes Australia 2026: Free Spins, Player Rights, and the Cost of “Free”
No deposit bonus codes look like free money. Type a string, land free spins or a small cash credit, and chase a withdrawal. That is the sales pitch. The working reality in 2026 is thinner: codes are acquisition tools with hard wagering, game weightings, max cashout caps, and identity checks that arrive the moment a balance looks withdrawable. For Australian players, the second layer is legal and financial. Many sites pushing these codes sit outside Australian licensing. When a payout stalls, the path back to your money looks less like customer service and more like a dispute with an unregulated counterparty.
This guide breaks down how no deposit bonus codes actually function, which structures still show up on the AU-facing market, how to model expected value before you touch a spin, and what rights you realistically have if an operator freezes a balance. You will also get a clear read on why treating offshore casinos like a casual side hustle is closer to dealing on a black market stall than banking with a licensed bookie. No cheerleading. Just mechanics, maths, and the uncomfortable bits operators prefer you skip.
What a no deposit bonus code really is
A no deposit bonus code is a promotional string that credits free spins, a bonus balance, or occasionally a small cashable chip without requiring a first deposit. Typical ranges in 2026 sit around 10–50 free spins, or A$5–A$30 bonus credit. Larger figures in ads (A$50, A$100, even A$200) almost always hide max cashout caps of A$50–A$100 and wagering of 40x–70x on the bonus amount.
The code is not a gift. It is a customer acquisition cost. Operators budget a few dollars of expected loss per activated account, then rely on a percentage of players depositing after the free credit dies. Call it a “welcome present” if you like. In practice it is a paid sample, same logic as a supermarket tasting station that funnels you toward the full-price shelf.
Codes arrive via email lists, affiliate pages, SMS, or the cashier’s promo field. Some are single-use per household, IP, or device fingerprint. Others expire in 24–72 hours. A few only work on new accounts created through a tracked link. If the code fails, the usual causes are geo-mismatch, existing account detection, VPN flags, or a campaign that already hit its claim cap.
How no deposit bonus codes differ from deposit match offers
Deposit match bonuses scale with your cash in. No deposit codes do not. That single difference drives everything else: smaller headline value, tighter max cashout, often higher wagering relative to the credit, and stricter game contribution. A 100% match on A$100 with 35x wagering is a different product from 20 free spins with 50x on winnings and a A$50 withdrawal cap.
Free spins codes versus bonus credit codes
Free spins codes attach to a named pokie, often a Pragmatic Play or NetEnt title, at a fixed coin value such as A$0.10 or A$0.20 per spin. Winnings convert to bonus funds that still need wagering. Bonus credit codes drop A$10–A$30 into a bonus wallet usable across a wider game set, usually with 10%–20% weighting on tables and full weighting on slots. Spins feel more “free”. Credit feels more flexible. Neither removes the house edge.
Why operators still issue codes in 2026
Acquisition costs for Australian traffic stay high. A verified free-spin claim that costs the brand A$3–A$8 in expected value can still beat paid ads if even 8%–15% of claimants deposit within 14 days. Loyalty codes for existing players are cheaper still: they reactivate dormant accounts without a full welcome package. The spreadsheet is the point. Your entertainment is the side effect.
Australia’s legal frame around these offers
Australia’s Interactive Gambling Act 2001 restricts the offering of online casino-style gambling to people in Australia. Licensed local wagering brands focus on racing and sports under state and territory frameworks. Offshore casino sites that still market no deposit bonus codes to AU players generally operate on foreign licences (Curacao, Anjouan, Kahnawake, and similar). That does not make the product “approved” for Australian consumers in the way a domestic TAB product is regulated.
ACMA continues to move against illegal online gambling services, including ISP-level disruption and action against promotion. Payment pathways get messy too: banks and schemes may decline gambling merchants; players lean on PayID, POLi, Neosurf, crypto, and prepaid vouchers as workarounds. None of that creates a neat consumer-protection umbrella when a bonus withdrawal is delayed 30 days and then denied.
So when a banner screams a no deposit bonus code with “instant PayID cashout”, treat the legal posture as part of the risk price. You are not walking into a Crown Sydney pit with state oversight. You are stepping onto a grey counter where the house writes the house rules, then rewrites them in the T&Cs footer.
Is using an offshore casino with a bonus code legal for players?
Enforcement historically targets operators and promoters more than individual punters. That is not the same as a government stamp of safety. Civil recovery, chargebacks, and complaint boards become your main tools if funds stick. Criminal exposure for simple play is not the headline risk for most people; unpaid balances and identity misuse are.
What ACMA action means for your bonus balance
If a site is blocked or exits the AU market mid-promotion, open bonus wallets can vanish with the domain. Mirror URLs appear within days on the same black-market pattern you see with unregulated pharma or shadow FX brokers. Your wagering progress does not transfer by magic. Screenshot terms, balance, and chat logs before a block lands.
How no deposit bonus codes work step by step
Registration collects email, phone, and often a residential address. The code field may sit on signup or inside the cashier. After activation, free spins appear in a dedicated slot or bonus credit shows in a separate wallet. Real-money balance and bonus balance are not the same bucket. Bet with the wrong one and you can void contribution.
Wagering starts when winnings from spins land as bonus funds, or immediately if the code issued credit. A 50x requirement on A$20 means A$1,000 of qualifying bets before withdrawal. Game contribution matters: many pokies count 100%, some jackpot titles 0%, live blackjack 5%–10%. One wrong click on Evolution tables can stall the meter for hours of play.
KYC usually triggers at withdrawal, not at code claim. Expect passport or driver licence, proof of address under 3 months old, and sometimes payment method selfies. Players who treated the code as anonymous entertainment discover the opposite at cashout. That sequence is deliberate. Friction early kills conversion; friction late filters payouts.
Typical time limits on no deposit offers
Common windows: 24 hours to activate, 7 days to complete wagering, spins expiring in 24 hours if unused. Miss the clock and the balance hard-resets to zero. No sympathy ticket. Build a simple timer the moment the credit lands.
Max cashout caps you will actually hit
Caps of A$50, A$100, or “10x bonus” appear constantly. Hit A$180 on a A$20 no deposit credit with a A$100 cap and the surplus burns on cashout request. The advertisement rarely leads with that number. The T&Cs do.
Country, IP, and duplicate account filters
Same household Wi-Fi, same device ID, same payment fingerprint can void a code even if names differ. Shared uni housing and family routers generate false positives. Support will not always admit the rule; they will cite “irregular play” and close the thread.
The maths behind “free” credit
Before you redeem anything, run a plain expected value sketch. Suppose 20 free spins at A$0.10 on a pokie with 96% RTP. Theoretical return: 20 × 0.10 × 0.96 = A$1.92. If wagering is 40x on winnings and you somehow convert that into A$15 of bonus funds, required turnover is A$600. At 96% RTP, expected loss on that turnover is about 4% × A$600 = A$24. Your A$15 is fighting a A$24 headwind before caps and game weightings. Luck can still pay. The average attempt does not.
Another model: A$10 no deposit credit, 50x wagering, slots only, max cashout A$50. Turnover need: A$500. Expected loss at 4% house edge: A$20. You are staking time and variance against a product whose mean outcome sits underwater relative to the cap. That is why the code exists. The distribution has a long right tail (someone hits a feature and cashes A$50) and a fat left side (most clear nothing).
Wagering on winnings only versus wagering on bonus amount changes the curve. “50x winnings” after free spins can be kinder if the spins pay A$4, because 50 × 4 = A$200 turnover. “50x bonus” on a A$25 credit demands A$1,250. Read the clause twice. Operators bury the distinction in identical-looking banners.
Worked example: 50 free spins, 0.10 coin, 45x winnings
Spins budget face value A$5. At 96.5% RTP, theoretical return ≈ A$4.83. Assume you finish with A$12 bonus after features. Wagering: 45 × 12 = A$540. Expected loss during clearance ≈ 0.035 × 540 = A$18.90. Mean path: bonus erodes before cashout. Variance path: a 200× hit early can clear the meter and still slam into a A$100 cap. Both outcomes are normal, not glitches.
Worked example: A$30 credit, 60x bonus, 20% table weight
Turnover on slots: A$1,800. Mix in A$100 blackjack hands at 20% contribution and you need A$500 nominal cards play to equal A$100 slot contribution. Players who “hate slots” silently extend clearance time by days. The code did not ban tables. It just made them expensive for the meter.
RTP versions and why the lobby lies by omission
Book of Dead, Sweet Bonanza, Gates of Olympus, and Big Bass titles ship in multiple RTP profiles. A room can load 94.0%–96.5% depending on the deal with the studio. Your clearance maths should assume the lower published profile if the help page is vague. A 2.5 percentage point RTP gap on A$1,000 turnover is A$25 of extra expected bleed.
Comparison table: common no deposit code structures
| Code type | Typical size | Wagering | Max cashout | KYC timing | Practical note |
|---|---|---|---|---|---|
| Free spins on one pokie | 10–50 spins @ A$0.10–A$0.20 | 35x–50x winnings | A$50–A$100 | At withdrawal | Fast to test; volatile |
| Bonus credit | A$5–A$30 | 40x–70x bonus | A$50–A$100 | At withdrawal | Flexible games; heavier meter |
| Free chip (cashable framing) | A$5–A$20 | 1x–10x if genuine | Often equal to chip | Earlier checks | Rare; verify terms line by line |
| Loyalty reload code | 10–30 spins | 30x–40x | A$50–A$80 | Already verified | Lower friction if KYC done |
| App-only code | 15–40 spins | 40x–60x | A$50 | At withdrawal | Extra device fingerprint risk |
Figures above are market ranges observed across AU-facing offshore lobbies, not a promise from any single brand. Campaigns rotate weekly. Always open the full promo PDF or T&Cs module before you redeem.
Operator landscape: who surfaces around AU code hunters
Search results and affiliate roundups cycle the same cast: Fair Go Casino, Ozwin Casino, Mega Medusa Casino, Stay Casino, PlayCroco, WinSpirit Casino, Heaps O Wins, Wanted Win Casino, JeetCity Casino, Fortunica, National Casino, Rocket Casino, Bizzo Casino, Skycrown Casino, King Billy Casino, Neospin Casino, and Hell Spin Casino. Presence in a list is not a cleanliness certificate. It means they market hard into the same keyword cluster you just typed.
Licensing strings on these sites usually point offshore. Support may answer in minutes on live chat and go quiet for 96 hours once a withdrawal ticket sits in the queue. Payment mix leans PayID rails where available, Neosurf, VISA/Mastercard cashouts to bank, and crypto. “Instant” often means “processed by the cashier team within a business day after manual review,” which is a longer sentence on purpose.
How to read a brand before redeeming a code
Check licence number format, corporate entity name, and whether the same entity appears on other clones. Clone networks recycle game lobbies, T&Cs templates, and even bonus code syntax. If three “different” casinos share identical HTML in the responsible gambling footer, treat them as one risk bucket.
Bonus code hygiene across multi-brand groups
Claiming the same style of no deposit offer across sister brands can trip duplicate detection if payment methods or device IDs match. Winning on Brand A and signing up to Brand B the same afternoon is a classic void pattern. Spacing and separate verification trails reduce false flags; they do not create legal cover.
What “active code” lists get wrong
Scraped lists recycle dead strings for months. A code that worked in November dies in December when the budget caps. Sites publishing fifty “working” codes with timestamps and no methodology are content farms, not cashiers. Verify inside the account. Nowhere else counts.
Player rights when the “free” balance will not pay
Here is the part code roundups skip. If you clear wagering and the casino withholds funds, your leverage depends on jurisdiction of the operator, payment rail used, and evidence quality. You are not filing a neat complaint with an Australian casino regulator about an offshore pokie lobby. You are closer to recovering money from a black-market vendor who shipped a parcel then blocked your number.
Think pyramid-scheme energy without the recruitment charts: early faces get small, photogenic payouts; marketing floods social proof; the structure relies on fresh deposits. When withdrawal queues lengthen, excuses professionalise — “bonus abuse,” “odds arbitrage,” “VPN,” “multi-accounting” — whether or not those claims fit your session logs.
Contract footing and why T&Cs dominate
Clickwrap terms usually set governing law in a foreign venue, cap liability, and give the operator wide discretion on “irregular play.” Australian consumer law concepts can still matter in some disputes, especially where marketing targeted AU residents and payments cleared through local rails, but outcomes turn on facts, not vibes. Keep the version of terms that applied on signup. Operators update pages quietly.
Chargebacks and payment disputes
Card chargebacks sometimes reverse deposits. They rarely conjure bonus winnings the scheme never cleared as a merchant credit. PayID and bank transfer disputes follow bank fraud processes with strict time limits. Neosurf and crypto leave thinner trails. If your only path was a coin deposit into an unhosted wallet, recovery odds collapse. Choose rails with paper trails if you insist on playing.
Documentary package that actually helps
Export: account ID, timestamps of code redemption, wagering progress screenshots, game round IDs, chat transcripts, email headers, withdrawal request IDs, and KYC submission receipts. Without round IDs from providers like Pragmatic Play or NetEnt, support can stonewall with “no record of qualifying bets.” With them, you can at least force a coherent denial.
ADR, licence complaints, and their limits
Some licences advertise dispute forms. Response times stretch 30–90 days. Remedies can be non-binding. Curacao-style setups have improved paperwork on paper; players still report multi-month loops. A complaint creates pressure and a paper trail. It is not a local court listing with guaranteed enforcement against Australian assets the brand does not hold.
Court recovery in plain language
Suing an offshore casino resembles chasing a shell company through a fogged-glass office park. Even if a judgment appears, enforcement against assets you cannot locate becomes the real case. Costs can exceed the withheld A$80–A$500 balance that started the fight. For small sums, structured complaints plus payment-rail disputes are the rational stack. For large balances, speak to a lawyer who actually handles cross-border consumer recovery — not a Telegram “chargeback guru” selling PDF templates.
Australian players sometimes frame claims around misleading promotion, unjust enrichment, or breach of the published offer. Success is fact-specific. Courts are not a drive-through refund booth for uncleared 50x bonus meters. If wagering was incomplete, your rights shrink to whatever the terms already said. If wagering was complete and KYC was supplied on time, the narrative strengthens, but geography still gates enforcement.
When “bonus abuse” is a real rule versus a pretext
Real abuse patterns exist: hedging pairs, multipurpose accounts, stacked VPN sessions, harvester scripts claiming hundreds of codes. Operators are entitled to protect that edge. Pretext looks different: a clean single account, normal stake sizes, one code, completed KYC, then a week of silence after a A$100 cashout request. Ask for the specific clause and the specific sessions cited. Vague moral language is a tell.
Black market dynamics: casinos as informal financial stalls
Unlicensed casinos marketing into Australia operate in a commercial grey zone that behaves like other informal markets. Liquidity is uneven. Brand names churn. Mirror domains replace seized URLs. Trust signals are theatre: stock photos of “Australian support teams,” fake award badges, and VIP hosts who write like commission-only brokers.
Compare it to a high-yield “investment club” that pays the first wave on time. Testimonials are real because early exits were paid from later deposits, not from a sustainable edge shared with you. Casino math already includes a house edge; adding insolvency risk and withdrawal friction stacks a second edge against the player. The no deposit bonus code is the flyer handed out at the door.
None of this means every offshore brand fails every payout. Many process small withdrawals specifically to keep affiliate traffic flowing. Selective reliability is part of the model. Your job is to price the counterparty risk the same way you would price a stranger holding your cash in an unmarked shopfront.
Red flags that rhyme with pyramid-style operations
New domain under 6 months, cloned game tiles, pressure to deposit before KYC, bonus terms that change after you write in, and withdrawal minimums that rise after you clear a code. Stack three of those and walk. Four and you are volunteering as marketing spend.
Why big wins attract sudden rule enforcement
A A$40 no deposit path that snowballs into a four-figure balance trips manual review. Reviews are normal. What is not normal is a 21-day review with no document requests, followed by a closed account and confiscated funds citing a clause you never breached on the logs. That pattern is where recovery prep starts immediately, not after a month of polite chasing.
Payments, PayID, and the path from bonus to bank
AU players hunt PayID because it feels local and fast. Cashier pages advertise “minutes.” Actual timelines: pending internal approval 0–72 hours, then banking time. First withdrawals drag longer than the fifth. Bonus-origin funds sit at the back of the queue behind cash deposits in many internal policies, even when not disclosed.
Neosurf remains a staple for deposits; cashouts may not return to Neosurf. Crypto deposits introduce blockchain fees and irreversible errors. Card deposits can trigger bank gambling blocks. Each rail changes your recovery story if things go wrong. Plan the exit rail before you redeem the code, not after the meter completes at 1 a.m.
Minimum withdrawal versus bonus leftover
If min cashout is A$20 and your capped win is A$18, you are stuck until you deposit to top up — which was the point. Read min withdrawal, max bonus convert, and whether leftover bonus cancels on cashout request.
Identity checks and source-of-funds questions
Even small no deposit withdrawals can trigger SOF requests if your later deposits escalate. Inconsistent names between bank account and casino profile are a top denial cause. Align details on day one.
Side-by-side: no deposit codes vs other promo types
| Promo style | Player cash required | Complexity | Withdrawal friction | Best use case |
|---|---|---|---|---|
| No deposit code | A$0 upfront | High terms density | High on first cashout | Testing cashier and KYC flow |
| Deposit match | A$20–A$100+ | Medium | Medium | Longer sessions with clearer value |
| Reload spins | Prior deposit history | Low–medium | Lower if verified | Existing accounts |
| Cashback | Losses first | Low | Low–medium | Reducing bleed, not “free” play |
| VIP host extras | High volume | Opaque | Negotiated | Only if you already overplay |
For pure information gathering — Is support real? Does KYC accept my documents? How fast is the first PayID out? — a small no deposit bonus code can be a cheap probe. For expected profit, it is the wrong instrument. House edge plus wagering plus cap is not an income plan. Treat anyone selling “code stacks” as a wage replacement like a tipster flogging a miracle system.
Practical claiming process without the fantasy
Create the account on a clean connection without a VPN if you are physically in Australia and the site accepts AU. VPNs create the exact irregularity clause used against you later. Use accurate personal data. Save the promo terms as PDF. Redeem. Note spin value and game. Play only contributing games. Stop when the meter completes; do not “just try one live blackjack hand.”
Submit KYC the same day you approach the cashout threshold. Request withdrawal at or below the max cashout. Leave a residual only if rules demand it. If the cashier pendings past the published window, open chat, request a ticket number, and export logs. Escalation after day three should include licence complaint channels where they exist, and your payment provider if a deposit is still reversible.
Stake sizing during wagering
Some terms cap max bet during bonus play at A$5 or A$10. Breach that once on a frustrated spin and the whole bonus can void. Set the bet limiter before you start. Rage spins are expensive compliance errors.
Game providers worth knowing during clearance
Pragmatic Play, NetEnt, Microgaming, Evolution, Hacksaw Gaming, and Big Time Gaming titles dominate AU-facing lobbies. Weighting tables differ by provider category. If the terms say “all slots 100% except Progressive Jackpots,” believe the exception. One wrong Mega Moolah-style spin can donate contribution for zero meter progress.
Frequent mistakes that burn codes
Players treat the code like a lottery ticket and skip terms. They stake over the max bet. They share codes in group chats until the campaign trips fraud filters. They open three accounts for three codes on one phone. They delay KYC until the withdrawal is already flagged. They celebrate a big feature hit without reading the A$100 cap. Each error is common. Each one is avoidable with a 10-minute read.
Another pattern: chasing losses after the no deposit funds die by dropping A$200 in “recovery.” That pivot is the operator’s real payday. The code did its job. Your discipline is the only brake.
Chasing “better” codes across ten casinos in one night
Account farms look profitable on TikTok. In payment-risk systems they look like fraud rings. Banks notice patterns too. Keep the experiment small if you experiment at all.
Ignoring tax and record keeping
Most recreational players will not face complex tax filings on tiny bonus cashouts, but large or frequent gambling income questions are fact-specific. Keep records. Do not invent deductions from losses on unlicensed sites without professional advice.
Responsible use and harm reduction
No deposit does not mean no risk. Time, personal data, and the deposit that often follows are real stakes. If you are self-excluded from Australian wagering brands, hunting offshore codes is a deliberate bypass of your own protection. That path deserves a hard stop, not a clever workaround.
Set a rule before redemption: one code, one session window, no deposit within 48 hours even if the lobby flashes a match. Use gambling help resources if the urge to chase sits under the “research.” In Australia, Gambling Help Online and the National Gambling Helpline on 1800 858 858 remain the proper channels. Tooling your phone with blocking software is more adult than stacking another free spins email list.
Data trail you hand over for a A$10 credit
Passport scans, utility bills, face selfies holding ID — that package has resale value in breach markets if an operator is sloppy. Minimise where you send identity packs. Prefer brands with a longer public track record on data handling, understanding “longer” is still relative in the offshore tier.
Banking health and gambling blocks
Repeated merchant codes can push banks to freeze cards or ask uncomfortable questions. If that happens, treat it as a circuit breaker, not an obstacle to dodge with more prepaid cards.
New codes, recycled mechanics
Every year the wrappers change: QR claims, Telegram bots, app-only strings, “secret” Instagram stories. The mechanics do not. Wagering, caps, KYC, and withdrawal review remain the four pillars. If a 2026 promotion promises 100 free spins, A$200 no deposit, and no documents ever, you are reading fiction or a phishing funnel. Walk.
Seasonal spikes hit around sport grand finals and January when affiliate budgets refresh. Dead codes multiply in the same windows because content sites scrape each other. Freshness is measured inside your account, not on a blog’s last-updated stamp claiming “today.”
Reading wagering on free spins winnings only
Clause language like “wagering requirements apply to bonus winnings only” is better than “50x bonus plus deposit,” but still not zero. Compute turnover before you invest an evening.
When a code is better left unused
If you are tired, drinking, or already tilted from sports bets, skip the redemption. Free spins on a high-volatility Hacksaw title at midnight are entertainment rocket fuel with a known destination.
FAQ
What are no deposit bonus codes in online casinos?
They are promotional strings that unlock free spins or small bonus credit without a first deposit. Winnings usually carry wagering of 35x–70x, game weightings, and max cashout caps around A$50–A$100. The code is a marketing cost, not a charitable payout, and identity checks typically appear when you request a withdrawal.
Do no deposit bonus codes work for Australian players in 2026?
Some offshore casinos still accept AU registrations and honour codes, but offers sit outside domestic casino licensing. Acceptance, banking success, and payout reliability vary by brand and payment rail. Legal and counterparty risks remain part of the price even when a code appears to activate normally in your account.
How much can I realistically withdraw from a no deposit code?
Most completed clearances that hit the cashier land between A$20 and the stated max cashout, often A$50–A$100. Many attempts expire worthless because wagering and RTP erode the balance. Plan around the cap published in terms, not the headline spin count on the banner.
What wagering requirement is normal on these codes?
Market norms cluster between 35x and 70x on either winnings from free spins or the bonus credit amount. Always confirm which base applies. A 50x rule on a A$25 credit means A$1,250 in qualifying bets before withdrawal, subject to game contribution percentages.
Can I take legal action if a casino refuses my bonus withdrawal?
You can complain through licence channels, dispute deposits via payment providers, and in some cases seek legal advice on cross-border recovery. Enforcement against offshore entities is slow and often uneconomic for small balances. Strong documentation improves pressure; it does not guarantee a court-ordered transfer into your PayID.
Why do casinos ask for ID on a no deposit win?
Anti-money-laundering policies, fraud control, and their own T&Cs require identity verification before funds leave. The free code does not purchase anonymity. Refusing KYC usually forfeits the balance under the same terms you accepted at signup.
Are “guaranteed working” no deposit bonus code lists trustworthy?
Most public lists lag real cashier status and mix expired strings with affiliate links. Trust the promo module inside a logged-in account and the written terms attached to that campaign. External lists are research leads at best, dead ends at worst.
What is the safest way to test a no deposit offer?
Use accurate details, skip VPNs, read max bet and cashout caps first, complete wagering only on 100% contributing pokies, submit KYC early, and withdraw at or below the cap without an impulse deposit. If anything in that chain fails, stop rather than layering more funds into the same counterparty.
Final view: who these codes are for
No deposit bonus codes suit curious players who want a low-cash way to inspect an offshore lobby’s games, support, and cashout behaviour — and who can tolerate a high chance of zero. They do not suit anyone building a budget around “free” bankrolls, anyone self-excluded, or anyone unwilling to send ID to a foreign company. The entertainment can be real. The expected value is usually negative once wagering starts. The recovery path, if a balance sticks, looks like arguing with a stallholder in an unregulated market, not tapping a refund button at a domestic retailer.
If you redeem a code in 2026, do it with the terms open, the calculator handy, and a clear exit plan. Price the counterparty. Cap your time. Keep the paper trail. And remember the unstylish truth operators will never put in the banner: free spins are bait on a hook weighted with maths, not a loophole in how casinos pay rent.