The Malta Gaming Authority (MGA)<\/strong> is one of the longest-running gambling regulators in the world, established in 2001 as the Lotteries and Gaming Authority before rebranding in 2015. It sits under the Ministry for the Economy, European Funds and Lands and oversees both land-based and remote gambling across casino, sports betting, peer-to-peer, and skill-game verticals.<\/p>\n We classify MGA as a tier-one regulator<\/strong>, alongside the UK Gambling Commission, Gibraltar, and Isle of Man. The framework rests on the Gaming Act 2018 (Cap. 583)<\/strong>, which replaced earlier class-based legislation with a streamlined B2C and B2B model and extended licence validity from five to ten years.<\/p>\n The Authority is unusually well-resourced for a small jurisdiction because gaming contributes a substantial share of Malta’s economy, giving the regulator both the budget and political backing to enforce its framework actively. Many EU regulators that emerged after Malta benchmark their procedures against the Authority’s model.<\/p>\n Players encounter MGA-licensed operators across most major casino brands. Multi-licence stacks are common \u2014 for example, EuroKing<\/a> holds an MGA licence in parallel with a UK Gambling Commission permit, while Casino Share<\/a> layers the MGA on top of a Kahnawake primary licence. These dual-stack arrangements signal operators willing to subject themselves to multiple tier-one supervisors.<\/p>\n The Maltese framework is structured in three tiers: an Empowering Act (the Gaming Act), supporting Regulations, and operational Directives. The Authority publishes the full library \u2014 including Directive 3 of 2018<\/strong> on authorisations and compliance, and the player-facing Player Protection Regulations<\/strong> \u2014 on its website for both operators and players.<\/p>\n Licences come in two families. The B2C Gaming Service Licence<\/strong> is the player-facing permit and covers four game-type categories: Type 1 for RNG-based casino games, Type 2 for fixed-odds sports betting, Type 3 for peer-to-peer formats such as poker, and Type 4 for controlled skill games like fantasy sports. A single Gaming Service Licence can combine multiple Types under one operator.<\/p>\n The B2B Critical Gaming Supply Licence<\/strong> covers software studios, platform vendors, and aggregators that feed the B2C side. A lighter B2B Ancillary Supply Licence exists for non-critical suppliers. Each category carries its own minimum issued share capital and a scaled non-refundable application fee.<\/p>\n The Authority charges a fixed annual licence fee plus a progressive Compliance Contribution<\/strong> tied to gaming revenue. Specific figures live in the Gaming Licence Fees Regulations rather than the body of this guide \u2014 we deliberately reference the official schedule because fee bands shift periodically.<\/p>\n Applications run through the Licensee Portal and typically take several months. The process includes fit-and-proper testing for ultimate beneficial owners and Key Persons, a business plan review, AML and KYC procedures documentation, and a technical system review before the licence is granted.<\/p>\n Once issued, the licence is valid for ten years, subject to ongoing compliance audits and the Authority’s right to suspend or cancel for breaches. The MGA also offers a Recognition Notice<\/strong> mechanism that lets EU and EEA operators with equivalent home-state regulation provide cross-border services to Malta-facing markets without a full re-licensing process.<\/p>\n The MGA runs a dedicated Player Hub<\/strong> at mga.org.mt that consolidates the player-facing tools into five sections: the Licensee Register for verification, Lodge a Complaint for formal disputes, Safer Gambling for responsible gaming resources, Self-Barring<\/strong> for the national self-exclusion register, and Unauthorised URLs for the regulator’s published blacklist of unlicensed sites.<\/p>\n Every B2C licensee must offer Alternative Dispute Resolution (ADR) under Directive 5 of 2018<\/strong>, which implements EU consumer ADR rules. When a player files a complaint, the operator must explain the ADR pathway, refer the matter to an accredited ADR entity, and report the outcome monthly alongside player-funds reporting.<\/p>\n ADR under the Maltese framework is non-binding<\/strong>. The ADR entity issues an opinion, but the player retains the right to escalate to the Maltese courts (or the competent court in the player’s jurisdiction) if the outcome is unsatisfactory. We flag this directly because some marketing copy from competitor sites implies ADR delivers guaranteed redress \u2014 it does not.<\/p>\n The Gaming Player Protection Regulations mandate segregated player funds<\/strong>, meaning operators must hold customer balances in accounts ring-fenced from corporate working capital. This is a material consumer protection: if a licensee enters insolvency, the segregation rules give players a stronger position to recover deposits and winnings than they would have under most offshore frameworks.<\/p>\n The 2018 reform also introduced an operator duty of care<\/strong>. Licensees are expected to monitor player behaviour for signs of problematic gambling, intervene where indicators appear, and surface responsible-gaming tools. The Responsible Gaming Foundation (rgf.org.mt) operates in parallel as a charitable support organisation.<\/p>\n The framework is not frozen. In 2026 alone, the Authority launched a targeted consultation on an AI Gaming Charter, coordinated with the EU’s AMLA on draft anti-money-laundering standards, and opened a consultation on enhancements to the Recognition Notice Framework \u2014 signals of a regulator that iterates rather than rests on its 2018 reform.<\/p>\n Compared with the UK Gambling Commission, MGA covers a broader EU footprint while UKGC concentrates strictly on the British market with its national GAMSTOP self-exclusion register and tighter advertising rules.<\/p>\n Both are world-class regulators<\/strong> in our framework, but they emphasise different strengths: UKGC for UK-resident depth, MGA for cross-border EU reach.<\/p>\n Against Tier-3 offshore frameworks like Cura\u00e7ao, the contrast is stark. MGA mandates segregated funds, enforces ADR through Directive 5, and runs an active Enforcement Register documenting recent licence suspensions and cancellations.<\/p>\n Offshore alternatives typically offer faster operator onboarding and lower compliance friction but lighter player recourse. Lumi Casino<\/a>‘s decision to hold both MGA and UKGC permits reflects the operator-side trade-off \u2014 dual tier-one stacks signal absorbing higher compliance cost for broader market access.<\/p>\nHow MGA Licensing Works<\/h2>\n
Player Protection Under MGA<\/h2>\n
MGA vs Other Licenses<\/h2>\n