Malta Gaming Authority (MGA) Complete Guide: Licensing, Player Protection, Complaint Process

In this new legal guide powered by CasinoAlpha’s experts, you will learn everything about MGA or Malta Gaming Authorithy. You will find out exaclty what it is, what is the difference between B2B and B2C licence authorisation and how MGA fines casinos that don’t follow strict rules for player protection, data leaks, etc. By the end of the article you will know exaclty what to choose in the future because we even compared MGA to UKGC and Curacao. Read on.

• What is the Malta Gaming Authority? History, Location, and EU Significance
• MGA Licence Types: B2C Gaming Service vs B2B Critical Gaming Supply
• MGA License Application Process: From Submission to Approval (6-12 Month Timeline)
• MGA Licence Costs: Complete Fee Breakdown for 2026
• Player Protection Standards: Segregated Funds, RNG Certification, Responsible Gambling
• Player Complaint Process: How to File, Investigation Timeline, Resolution Expectations
• MGA Enforcement Powers: Fines, Suspensions, License Revocations
• How to Verify an MGA License: Using the Official Licensee Database
• Major MGA-Licensed Casinos: Bet365, LeoVegas, Casumo, Mr Green
• MGA vs UKGC vs Curacao: License Comparison
• Sources

What is the Malta Gaming Authority? History, Location, and EU Significance

Simply said, MGA is the regulatory body of Malta, and it’s within the European Union legal framework. Keep in mind that MGA was established in 2001 under the Lotteries and Other Games Act, making Malta the first EU country to regulate online gaming in a modern sense.

Key Historical Milestones: 

1. 2001: The Lotteries and Gaming Authority was established and later renamed the MGA.
2. 2005: Malta joined EU and took gaming regulation under European Court oversight
3. 2018: Gaming Act consolidation have modernised crypto and blockchain – find out how safe crypto casinos are in 2026 via our article.
4. 2024: 315 licensed iGaming companies generated €84.1 million in regulatory revenue
5. 2025: The gaming sector contributes 6.5% to Malta’s national Gross Value Added. [3]

Why EU Jurisdiction Matters: 

EU jurisdiction matters because EU membership subjects the MGA to European Court of Justice oversight, GDPR compliance requirements and EU Anti-Money Laudering Directives. For example. When the MGA mandates segregated player funds, the EU banking regulation enforced that requirement. Also, when it required independent audits, EU standards define independent.

So, the MGA mission focuses on ensuring gaming fairness and transparency, and it prevents crime and protects minors and vulnerable players. Unlike those operators that are revenue-focused or those that provide minimal supervision, the MGA balances everything; this was evidenced by those 35 warnings and 25 financial penalty issues in 2024.

Also, don’t forget to learn how to choose a safe online casino in 2026.

Disclaimer: This article is informative on Malta Gaming Authority licensing in accordance with official MGA rules and regulations, the Gaming Act (Chapter 583 of Malta), and MGA directives as of February 2026. This article is not intended to be legal or financial advice. Licensing requirements and costs are subject to change. For authoritative advice on licensing, contact the MGA at mga.org.mt or a gaming lawyer.

MGA Licence Types: B2C Gaming Service vs B2B Critical Gaming Supply

So, there are two MGA primary licence categories, and both ar divided by game type and business model:

• B2C (Business to Consumer): licences authorise operations for players. Type 1 covers games where operators assume gaming risk (player vs house). The type 2 is for sports betting with odd risk management. The type 3, however, covers peer-to-peer games and in this case, operators take commission, not gaming risk. The type 4 is for skill-based games where your ability significantly influences the outcome [4].
• B2B (Business to Business): This type of licence is for essential infrastructure such as software platforms, game developers, RNG suppliers, payment systems and compliance tools. This type of licence goes up to €25,000 annually for companies that generate €1 million revenue.

MGA License Application Process: From Submission to Approval (6-12 Month Timeline)

Our team of experts saw that in 2026 there are 6 review stages to grab an MGA licence, and it can last between 6 and 12 months for straightforward applications, but it can easily go to 8-14 months if there are complications. Our team saw them all, and we will show you exactly.

Six Application Stages:

Stage 1: Entry (Weeks 1-2)

• You must pay a €5000 fee via the MGA portal, which is non-refundable.
• You need  corporate documents, UBO verification, a business plan, and you need to provide tech specifications.
• Also, there are the Personal Declaration Forms from all directors/UBOs you need
• Completeness review within 10-15 business days
• One 60-day extension allowed for missing items. [5]

Stage 2: Fitness & Propriety (Weeks 3-10)

• There’s a Criminal background check via Interpol coordination
• You’ll need credit history, bankruptcy records, tax compliance
• You will need a regulatory history review with other gambling authorities.
• You will be verified for professional qualifications
• Timeline: 6-8 weeks, but it can extend.

Stage 3: Source of Wealth/Funds (Weeks 8-14)

• Source of Wealth: How UBOs accumulated assets
• Source of Funds: Where do you have the money for this operation
• You need to provide 12+ months bank statement
• You will go through a Financial sustainability analysis
• Forensic accounting for complex structures

Stage 4: Business Plan Review (Weeks 12-18)

• You’ll need to show a 3-year financial projection and the marketing strategy
• Responsible gambling measures: self-exclusion, deposit limits
• AML/CFT procedures: customer due diligence, transaction monitoring
• You will need GDPR implementation
• Assessment of implementation capability vs. paper policies

Stage 5: Technical System Audit (Weeks 18-24)

• They need to make a deploy test environment for 60 days.
• You will go through independent audit by approved provider such as GLI, eCOGRA, iTech Labs
• They will test RNG fairness, game fairness, fund separation, security features, etc.
• Failed audits require remediation and re-testing
• Audit costs: €8,000-€15,000[^6]

Stage 6: Licence Issuance (Week 24+)

• The licence is available as a 10 years
• You must go live within 90 days via Go-Live Declaration
• The €25k licence paid annually reactivate the operations

MGA Licence Costs: Complete Fee Breakdown for 2026

So, you need to pay for an MGA licence: €150,000-€200,000 in the 1st year with annual costs ranging from €40,000 to €700,000, depending on the revenue.

Initial Application Costs:

Player Protection Standards: Segregated Funds, RNG Certification, Responsible Gambling

So, the MGA Tier 1 means you must have necessary tools to safeguard players with regular site audits for games’ fairness, segregated funds and more. Our experts read everything and this is what we found:

Player Complaint Process: How to File, Investigation Timeline, Resolution Expectations

We identified a 5-step process in case you’re a player and you need a straightforward tutorial for MGA player complaints. Let’s get to details:

Step 1: Contact the Casino First (14-30 days)

So, you cannot go directly to the MGA if you have an issue with a casino. You need to contact support, collect evidence with screenshots and request management escalation if needed. If you don’t have an answer in 14-30 days, go to MGA. If you skip this step, MGA will not help you.

Step 2: File Your MGA Complaint (5-7 days for initial review)

If your issue wasn’t solved by the casino, it’s time to go to mga.org.mr/player-hub/lodge-a-complaint. Keep in mind that you must have before you start this action: your full personal details, the casino name and the MGA licence number; you also need the evidence you collected about the issue with screenshots, documents, etc. Don’t forget, you need a clear problem description. The complaints must be made in English or Maltese. You will wait 5-7 business days for MGA to answer.

Step 3: MGA Investigation (30-60 days)

So, the next step is when MGA takes your complaint to the casino, which must respond in 14-21 days with evidence. After that, the MGA analyses both sides by checking if the casino followed the terms and conditions and MGA regulations. If the case is complex, the process takes 60-90 days.

Step 4: MGA Decision

If the MGA sides with you, they’ll direct the casino to fix the issue and may take enforcement action. If MGA sees that the casino holds the truth, you will receive and explanation, but you can still pursue the ADR (Alternative Dispute Resolution). Keep in mind that MGA can’t help with contractual disputes or non-MGA casinos.

Step 5: Alternative Dispute Resolution (30-60 days additional)

If you’re still unresolved, check the independent ADR providers like eCOGRA or IBAS; these two can review your case 100%. However, you will wait an additional 30-60 days. In the end, you will wait 2-4 months.

Realistic Expectations:

Even if the investigation made by MGA is fair and professional, it can’t be guaranteed that you will get paid if the casino has direct evidence that links you to bonus abuse, multiple accounts or terms violations. MGA cannot help you if the casino is non-MGA. They follow regulations and terms, not player preferences.

MGA Enforcement Powers: Fines, Suspensions, License Revocations

Let’s see how MGA credibility depends on how good it enforces fines, suspensions and licence revocations.

Enforcement Hierarchy:

Warnings (35 Issued in 2024)

The warnings are given for minor things such as late paperwork and technical violations that don’t damage you as a player directly. See these actions like official “don’t do that again” warnings. The MGA issued 35 in 2024,  which means that they monitor even small issues.

Financial Penalties (25 Fines in 2024, Totaling €306,250)

If a warning was not enough, the MGA starts to hit where casinos feel it the most: their wallets. For example, fines rage from €1000 for low issues up to €500,000 for hard violations. Still, the average penalty in 2024 was €12,500, meaning that every MGA casino follows strict rules without serious violations.

A casino gets fined for weak anti-money laundering controls and player protection failures. These are things that will affect players, so to fines are high.

Licence Suspension (The Nuclear Option, Part 1)

If there is a case of serious violations, MGA triggers immediate shutdowns. So, the casino will stop operating immediately, but you as a player can still withdraw your funds. A suspension is given when casinos don’t keep player funds separately or when casinos operate outside their licence goal, etc.

Licence Revocation (The Nuclear Option, Part 2)

The permanent cancellation is the most difficult part, and it’s the last action MGA can do, but it hurts. For example, MGA revoked 6 licences in 2024 and 7 in 2023. This means that they are not afraid to shut down permanently a casino that didn’t follow the rules.

Recent Examples:

When the MGA revokes a licence, casinos have 7 days to return all player funds, must immediately remove any MGA references from their site, submit final transaction reports, and settle outstanding regulatory fees.

How to Verify an MGA License: Using the Official Licensee Database

Here’s a helpful step-by-step guide where we show you a tutorial on how to verify the MGA licence. Follow our tips and tricks because they’re the official ones:

1. Check the Official MGA Register: You must go to mga.org.mt/licensee-hub/licensee-register/, and you must search the casino by name, licence number or URL. If the casino appears as active and the URL matches exactly, it’s all good. If not found, red flag.
2. Test the License Seal: Another trick is to find the MGA logo/seal in the casino’s footer and click it. If the seal triggers the redirect feature to authorisation.mga.org.mt/verification.aspx and you can see the details, it’s all good. Fake casinos link fake seals to the casino website or do nothing when clicked.
3. Verify the License Number Format: MGA licenses follow specific patterns: B2C (player casinos) use MGA/B2C/[number]/[year], like MGA/B2C/188/2010. B2B (software providers) use MGA/CRP/[number]/[year] like MGA/CRP/187/2010/01. Red flags include wrong formats, years before 2001, or missing type indicators.
4. Check Their Enforcement History: Visit mga.org.mt/licensee-hub/enforcement-register/ and search the casino you want to look for. Search for recent warnings, fines, or suspensions. If you see a clean record, this is a good sign. If you see recent violations, this is a red flag 100%.

Major MGA-Licensed Casinos: Bet365, LeoVegas, Casumo, Mr Green

In the following chapter we will show you a demonstration of why MGA is one of the best, and we will do it by showing you some names we all know or have heard of.

Tier 1 MGA Operators:

• Bet365: Multiple MGA licences for sports betting, casino, live dealer, and poker. UKGC dual jurisdiction. Founded in 2000, this casino managed to become one of the populars.
• LeoVegas: MGA B2C licensed. Stockholm-based, publicly traded, and acquired by MGM Resorts in 2022. Multiple player protection awards.
• Casumo: MGA B2C licensed. Unique gamification features and a clean enforcement record. Also holds UKGC and Swedish
• Mr Green: MGA/B2C licence. “Gentleman gamer” brand emphasises responsible gambling. William Hill subsidiary (Evoke plc).
• Evolution Gaming: MGA/CRP/187/2010/01 (B2B). Dominant live dealer supplier. A B2B licence shows the MGA regulates the entire ecosystem[^13].

MGA vs UKGC vs Curacao: License Comparison

We couldn’t end this article without a proper comparison between MGA and UKGC versus a low level regulatory body such as Curacao. By the end of this chapter, you will know exactly what to choose when it’s time to play at a random casino.

Key Differences: The UKGC is tougher (affordability checks are necessary and penalties are stiffer) but limited to the UK market. MGA offers access to EU/international markets, lower expenses, and balanced regulation. Curacao is very lax, with no fund separation, RNG testing optional, and rarely enforced[^14].

For Players: Choose UKGC (for UK only) or MGA (for international). Use Curacao only if no Tier 1 licences are available.

However, don’t consider Curacao Casinos as scams, because they’re not. For example, if you read our Vulkan Vegas review for 2026, you will see that the Legit & Fairness section recieved a clean 7/10 from us. We tested everything at this casino; for example, we have read the entire T&Cs and we didn’t saw restrictive rules, hidden fees, etc. Moreover, this casino has a legit, friendly and professional customer service that is willing to help you 24/7. Yes, it don’t have MGA or UKGC licences, and the player dispute resolution is difficult. But guess what? Vulkan Vegas casino actually pay on time, even larger amouts.

Sources

• [1] Gambling Insider – €84.1m in revenue: MGA publishes 2024 annual report
• [2] Altenar – Complete Guide to Gambling Laws and Regulations in Malta
• [3] Yogonet – MGA shares annual report and audited financial statements for 2024
• [4] Malta Gaming Authority – Fact Sheet 2025
• [5] Malta Gaming Authority – Applications Licensee Hub
• [6] Gaming License Timeline – Real Processing Times for 2025
• [7] Malta Gaming Authority – Fact Sheet 2025 Administrative Fees
• [8] Malta Gaming Authority – Enforcement Register
• [9] Malta Gaming Authority – Gaming Authorisations Directive 3 of 2018
• [10] Malta Gaming Authority – Lodge a Complaint Player Hub
• [12] Malta Gaming Authority – Licensee Register
• [15] Malta Gaming Authority – Interim Performance Report H1 2025