This is not legal advice. Prediction-market regulation moves quickly and varies sharply by jurisdiction. Treat this as a map, not as a ruling. Talk to a licensed attorney before deploying capital.

The honest one-paragraph answer

For most users in most countries, running a bot on Polymarket is legal in the same way that using the website is legal: the bot is a tool that places orders the user is already permitted to place. The exceptions, in order of magnitude: jurisdiction (the platform is restricted in the US, France, the UK, Singapore, Belgium, Taiwan, and a handful of others), platform terms of service (no manipulation, no wash trading, no geo-circumvention), and tax (gains are taxable everywhere). Custodial third-party "bots" that hold your funds are an entirely separate and larger legal risk that we treat in its own section below.

Two questions, not one

The legality question collapses if you separate it into two:

  1. Can I, in my country, place orders on Polymarket? This is about the venue and your residency.
  2. Can I place those orders programmatically rather than by hand? This is about the platform's terms of service.

Most of the confusion online conflates the two. Get them apart and the answers become tractable.

Question 1: jurisdiction

Polymarket operates two venues in 2026:

  • polymarket.com: the international, non-custodial CLOB on Polygon. Geo-restricted from US persons since the 2022 CFTC settlement, plus a list of additional restricted jurisdictions including France, the UK, Singapore, Belgium, and Taiwan. Outside that list, retail and prosumer participation is legal in most countries.
  • Polymarket US: the CFTC-regulated venue that launched after Polymarket acquired QCEX (a Designated Contract Market license). US persons can legally trade event contracts here. Different rules, different markets, different liquidity profile.

The honest answer for any user is: trade on the venue that is licensed for your country. Do not run a bot through a VPN against the international venue from a restricted country: it violates the terms of service, exposes you to frozen positions, and in some jurisdictions creates additional legal risk.

Question 2: programmatic access

Polymarket explicitly supports programmatic access: both venues publish official SDKs and document the CLOB REST endpoints. Their terms of service prohibit:

  • Market manipulation (e.g. wash trading, spoofing, layering).
  • Coordinating multiple accounts to influence prices.
  • Circumventing geo-restrictions.
  • Resolving markets through privileged knowledge.

These prohibitions apply identically whether you click a button or run a Python loop. A bot that respects the same rules a human would respect is a permitted tool.

The custodial-bot landmine

A growing category of "Polymarket bots", typically advertised on Telegram or X, works by taking custody of user funds. You deposit USDC into the operator's wallet, you trade through their UI, and you trust the operator to pay out.

This is not a bot in any meaningful sense. It is an unregistered exchange operated as a chat bot. Three problems:

  • The operator is almost always running without a money-transmitter, broker-dealer, or DCM license. That makes the operation illegal in most jurisdictions.
  • You have no recourse if the operator disappears with deposits, and we have already seen that happen in this cycle.
  • Using such a service may expose you to AML obligations you did not realise you were taking on, depending on volume and country.

Polymarket is structurally non-custodial. Any tool that re-introduces custody is destroying the only structural safety guarantee the platform offers. Do not run capital through one.

Three jurisdictions in detail

United States

Use Polymarket US (CFTC-regulated) or Kalshi. Both permit bots within each user's own account. Profits are taxable as ordinary income in most cases; the venue issues a 1099. Do not use a VPN to access the international venue.

European Union

Polymarket international is generally accessible from EU member states except France and Belgium. Prediction markets fall outside MiCA (which covers crypto-asset services) and outside MiFID II (which covers financial instruments) under most national interpretations, leaving them in a regulatory grey area. Tax treatment varies by country: typically capital gains in Germany and the Netherlands, gambling income in some others.

Rest of world

Most of the world has no specific prediction-market regulation. Polymarket is generally accessible. Common restrictions: anywhere with broad gambling prohibitions (Singapore, parts of the Middle East), anywhere that has issued specific guidance against the platform (Taiwan), and anywhere subject to OFAC sanctions.

What does not change the answer

  • Whether the bot uses AI or not. The CFTC, the SEC, and most other regulators do not draw a line between "human placed" and "AI placed" orders.
  • Whether the bot is profitable. Tax obligations exist regardless of edge.
  • Whether the bot is open source. Source code does not affect the legality of the trades it generates.

The pragmatic checklist

  1. Confirm the venue is licensed for your country. If the answer is "use a VPN", the answer is no.
  2. Use a non-custodial bot. Your USDC stays in your wallet, the bot signs transactions on your behalf.
  3. Read the venue's terms of service. Highlight the manipulation rules and configure your bot to respect them.
  4. Track every trade. You will need it for tax season.
  5. Talk to an attorney before any institutional or prop deployment. Personal capital below ~$50k is rarely worth a legal opinion; above that, it usually is.