The Malta Gaming Authority (MGA) is the statutory regulator for gambling in Malta, covering casinos, lotteries, betting and, above all, online gambling. It grants and supervises licences for operators that take bets from players and for suppliers that provide games and platforms to them. Hundreds of remote gaming companies hold MGA licences, which has made the small island state one of the main hubs of the European online gambling industry.
The MGA's powers come from the Gaming Act 2018 (Chapter 583 of the Laws of Malta), in force since 1 August 2018. Malta was one of the first European Union member states to regulate remote gambling, starting in the early 2000s through the Lotteries and Gaming Authority, later renamed the MGA. Because Malta is in the EU, an MGA licence is often compared with, and confused with, an offshore gaming license; in fact it does not give an automatic right to serve players in other member states.
Malta Gaming Authority in plain terms
Imagine a well-known driving school whose certificate is respected in many places. Holding it shows that the driver passed a serious test. Still, each country decides whether to accept that certificate or to require its own licence before anyone drives on its roads.
The MGA works much the same way for gambling companies. Its licence shows that a company has been examined on its owners, its money, its games and its treatment of players. Some countries let MGA-licensed firms serve their residents; others say that only their own licence counts. A gambling company based in Malta therefore often holds several licences at once.
History and legal basis
Malta's modern gaming regulation began with the creation of the Lotteries and Gaming Authority in 2001 and remote gaming rules adopted in 2004. The authority took the name Malta Gaming Authority in the 2010s. The Gaming Act 2018 replaced a patchwork of earlier laws with a single framework covering land-based and online gambling and simplified the licence classes. Detailed rules sit in subsidiary legislation, including the Gaming Authorisations Regulations and the player protection directives issued by the MGA.
Malta also became an important base for gaming software, payments and support services, helped by the EU passporting regime for financial firms such as electronic money institutions (EMIs). Gambling, however, is not harmonised at EU level, so each member state keeps its own gambling licence system.
Licences and supervision
The Gaming Act 2018 created two main licence types:
- The business-to-consumer (B2C) gaming service licence. It covers operators that offer games or bets directly to players, including online casinos and sports betting sites.
- The business-to-business (B2B) critical gaming supply licence. It covers suppliers of games, platforms and the systems that determine outcomes.
Applicants pass fit-and-proper checks on their ultimate beneficial owners, directors and key management personnel, a business plan review and a systems audit before going live. Licensees must segregate player funds, run responsible gambling tools and report regularly. For anti-money laundering purposes, Malta's Financial Intelligence Analysis Unit (FIAU) is the supervisory authority, with the MGA carrying out examinations of gaming licensees in cooperation with it. Operators therefore run customer due diligence, transaction monitoring and suspicious transaction reporting much like financial firms.
The MGA can impose administrative penalties, suspend or cancel licences and publish enforcement decisions. It also cooperates with other gambling regulators and with law enforcement.
Article 56A and cross-border disputes
A long-running dispute concerns players in countries such as Germany and Austria who sued Malta-licensed operators to recover losses, arguing that the operators had no licence in the player's country. In 2023 Malta amended the Gaming Act with Article 56A, which allows Maltese courts to refuse to recognise or enforce foreign judgments against licensees where these conflict with Malta's legal framework. Critics in other member states and some legal scholars argued that this clashes with EU rules on the recognition of judgments. The issue illustrates the limits of an EU-based licence: it is valuable evidence of supervision, but it does not override the national licensing walls of other states.
Criticism and reputation
The MGA is generally regarded as stricter than many offshore regulators, and its licence is widely accepted by banks, card schemes and payment service providers. It has also faced criticism: Malta was placed on the FATF greylist in June 2021, partly over AML supervision and enforcement, and was removed in June 2022 after reforms. Investigative reporting has linked some Malta-licensed businesses to organised crime, and a security researcher later reported having accessed MGA systems without authorisation. Payment firms that serve MGA licensees usually still apply enhanced due diligence, check which markets each operator actually serves, and classify the flow under gaming payments risk policies. The MGA is often compared with the UK Gambling Commission (UKGC), which regulates a single national market, and with the Curaçao Gaming Authority (CGA), whose licences have historically been seen as lighter.