About the Malta Gaming Authority
The Malta Gaming Authority (MGA) is one of the longest-running gambling regulators in the world, established in 2001 as the Lotteries and Gaming Authority before rebranding in 2015. It sits under the Ministry for the Economy, European Funds and Lands and oversees both land-based and remote gambling across casino, sports betting, peer-to-peer, and skill-game verticals.
We classify MGA as a tier-one regulator, alongside the UK Gambling Commission, Gibraltar, and Isle of Man. The framework rests on the Gaming Act 2018 (Cap. 583), which replaced earlier class-based legislation with a streamlined B2C and B2B model and extended licence validity from five to ten years.
The Authority is unusually well-resourced for a small jurisdiction because gaming contributes a substantial share of Malta’s economy, giving the regulator both the budget and political backing to enforce its framework actively. Many EU regulators that emerged after Malta benchmark their procedures against the Authority’s model.
Players encounter MGA-licensed operators across most major casino brands. Multi-licence stacks are common — for example, EuroKing holds an MGA licence in parallel with a UK Gambling Commission permit, while Casino Share layers the MGA on top of a Kahnawake primary licence. These dual-stack arrangements signal operators willing to subject themselves to multiple tier-one supervisors.
How MGA Licensing Works
The Maltese framework is structured in three tiers: an Empowering Act (the Gaming Act), supporting Regulations, and operational Directives. The Authority publishes the full library — including Directive 3 of 2018 on authorisations and compliance, and the player-facing Player Protection Regulations — on its website for both operators and players.
Licences come in two families. The B2C Gaming Service Licence is the player-facing permit and covers four game-type categories: Type 1 for RNG-based casino games, Type 2 for fixed-odds sports betting, Type 3 for peer-to-peer formats such as poker, and Type 4 for controlled skill games like fantasy sports. A single Gaming Service Licence can combine multiple Types under one operator.
The B2B Critical Gaming Supply Licence covers software studios, platform vendors, and aggregators that feed the B2C side. A lighter B2B Ancillary Supply Licence exists for non-critical suppliers. Each category carries its own minimum issued share capital and a scaled non-refundable application fee.
The Authority charges a fixed annual licence fee plus a progressive Compliance Contribution tied to gaming revenue. Specific figures live in the Gaming Licence Fees Regulations rather than the body of this guide — we deliberately reference the official schedule because fee bands shift periodically.
Applications run through the Licensee Portal and typically take several months. The process includes fit-and-proper testing for ultimate beneficial owners and Key Persons, a business plan review, AML and KYC procedures documentation, and a technical system review before the licence is granted.
Once issued, the licence is valid for ten years, subject to ongoing compliance audits and the Authority’s right to suspend or cancel for breaches. The MGA also offers a Recognition Notice mechanism that lets EU and EEA operators with equivalent home-state regulation provide cross-border services to Malta-facing markets without a full re-licensing process.
Player Protection Under MGA
The MGA runs a dedicated Player Hub at mga.org.mt that consolidates the player-facing tools into five sections: the Licensee Register for verification, Lodge a Complaint for formal disputes, Safer Gambling for responsible gaming resources, Self-Barring for the national self-exclusion register, and Unauthorised URLs for the regulator’s published blacklist of unlicensed sites.
Every B2C licensee must offer Alternative Dispute Resolution (ADR) under Directive 5 of 2018, which implements EU consumer ADR rules. When a player files a complaint, the operator must explain the ADR pathway, refer the matter to an accredited ADR entity, and report the outcome monthly alongside player-funds reporting.
ADR under the Maltese framework is non-binding. The ADR entity issues an opinion, but the player retains the right to escalate to the Maltese courts (or the competent court in the player’s jurisdiction) if the outcome is unsatisfactory. We flag this directly because some marketing copy from competitor sites implies ADR delivers guaranteed redress — it does not.
The Gaming Player Protection Regulations mandate segregated player funds, meaning operators must hold customer balances in accounts ring-fenced from corporate working capital. This is a material consumer protection: if a licensee enters insolvency, the segregation rules give players a stronger position to recover deposits and winnings than they would have under most offshore frameworks.
The 2018 reform also introduced an operator duty of care. Licensees are expected to monitor player behaviour for signs of problematic gambling, intervene where indicators appear, and surface responsible-gaming tools. The Responsible Gaming Foundation (rgf.org.mt) operates in parallel as a charitable support organisation.
The framework is not frozen. In 2026 alone, the Authority launched a targeted consultation on an AI Gaming Charter, coordinated with the EU’s AMLA on draft anti-money-laundering standards, and opened a consultation on enhancements to the Recognition Notice Framework — signals of a regulator that iterates rather than rests on its 2018 reform.
MGA vs Other Licenses
Compared with the UK Gambling Commission, MGA covers a broader EU footprint while UKGC concentrates strictly on the British market with its national GAMSTOP self-exclusion register and tighter advertising rules.
Both are world-class regulators in our framework, but they emphasise different strengths: UKGC for UK-resident depth, MGA for cross-border EU reach.
Against Tier-3 offshore frameworks like Curaçao, the contrast is stark. MGA mandates segregated funds, enforces ADR through Directive 5, and runs an active Enforcement Register documenting recent licence suspensions and cancellations.
Offshore alternatives typically offer faster operator onboarding and lower compliance friction but lighter player recourse. Lumi Casino‘s decision to hold both MGA and UKGC permits reflects the operator-side trade-off — dual tier-one stacks signal absorbing higher compliance cost for broader market access.
Among other EU-area regulators, the Cyprus framework sits clearly below MGA: Cyprus regulates land-based and sports betting but online casino operation remains prohibited there, which limits its relevance for remote players. MGA’s comprehensive scope and EU-pioneer status give it a different weight class entirely.
One honest caveat applies. In June 2023 Malta enacted Article 56A of the Gaming Act — informally known as Bill 55 — which directs Maltese courts to refuse recognition of foreign judgments that contradict the legality of Maltese gaming licences.
The European Commission opened a formal infringement procedure against Malta in 2025, and a CJEU advocate general has signalled the provision may be incompatible with EU rules on mutual recognition of judgments. Until the case resolves, cross-border players who win a foreign court judgment against an MGA licensee may find that judgment unenforceable in Malta.
That tension does not unmake MGA’s tier-one status, but it is a real limitation we surface because the player-recourse picture is genuinely incomplete while the case is open.
How to Verify a Malta Gaming License
Verifying an operator’s MGA permit takes three quick steps before any deposit:
- Search the operator name, URL, or Gaming Service category on the Authority’s Licensee Register at mga.org.mt and confirm the licence is listed as active.
- Check the Unauthorised URLs blacklist on the Player Hub to confirm the site is not flagged as operating without authorisation.
- Click the dynamic seal of authorisation on the casino footer — a genuine seal links through to a live MGA confirmation page rather than a static image.
For borderline cases, the Enforcement Register is worth a separate look. It surfaces past suspensions, cancellations, and administrative actions against specific licensees, which helps gauge whether an operator has a clean record or recent compliance issues.
If any of the three checks fails — the licence is missing, the URL is blacklisted, or the seal is a non-clickable image — treat the operator as unverified and skip the deposit.
Frequently Asked Questions
Is Malta Gaming Authority legit?
Is it legal to gamble in Malta?
How does Malta compare to the UK Gambling Commission?
What happens if an MGA-licensed casino refuses to pay me?
How do I verify an MGA license number is real?
Final Take
Malta works well for players who want the EU’s most comprehensive online-gambling regulator — a tier-one framework with segregated funds, mandatory ADR, an active Enforcement Register, and a quarter-century of regulatory iteration behind it. The Recognition Notice mechanism extends cross-EU access in a way no offshore framework can match.
Consider another regulator if you need the strictest UK-specific consumer protections (UK Gambling Commission, with GAMSTOP), if your dispute might require binding cross-border judgment enforcement against a Maltese-licensed operator while Article 56A litigation is unresolved, or if you simply prefer the lighter offshore-licensing trade-offs offered by Curaçao or comparable frameworks.
