Which Jurisdiction for a B2B Supplier Licence?

A B2B gaming supplier licence authorises you to supply licensed gambling operators — platform, content, RNG, aggregation or payment technology — without ever facing a player. It is a different credential from the operator licence, and it is chosen on a different basis. An operator picks a jurisdiction for market access, tax and banking. A supplier picks the jurisdiction that keeps it on its clients’ approved-vendor lists. Get that inversion wrong and you will buy a perfectly good licence that none of your customers care about.

We file both sides of this — operator and supplier — across offshore and Tier-1 regimes, and the pattern is consistent enough to be a rule: suppliers almost never come to us because a regulator wrote to them. They come because an operator client’s compliance team asked for a licence number and they did not have one.

The one test that decides whether you need a licence

Every serious regime now runs a version of the same gate, and the wording is remarkably consistent across Malta, Curaçao and the newer offshore regimes. You are a critical — that is, licensable — supplier if your component does any of the following:

• Determines or influences the outcome of a game. RNGs, game engines, remote gaming servers, live-dealer studios, odds and settlement engines.
• Records the bet and the result. The platform layer that writes the transaction and outcome record the regulator will later audit.
• Carries duties that decide whether the operator meets its obligations. Components feeding the compliance, reporting, player-protection or AML stack — the parts an auditor reads when deciding whether the operator is compliant.

A vendor whose product is purely cosmetic, informational, marketing or back-office — a front-end skin, an affiliate feed, a CRM, a BI dashboard — generally sits outside the test. The distinction that survives contact with a regulator is simple: do you touch the result, or the operator’s regulatory position? If yes to either, you are in scope.

Two things make this sharper in 2026 than it was three years ago. First, the requirement has migrated downmarket: it used to be a Tier-1 EU concern, and it is now written into offshore regimes too — Anjouan has required a B2B licence or Recognition Certificate from suppliers serving its B2C operators since July 2025, and Curaçao’s LOK reform did the same for suppliers whose services materially affect outcomes or compliance. Second, enforcement has moved from the regulator to your customer. Licensed operators run vendor due diligence because an unlicensed critical supplier is the weak point an auditor or payment partner flags — so the commercial pressure arrives before the regulatory letter does.

Which jurisdiction — and why cost is the wrong first question

Here is the inversion again, because it is the single most expensive mistake in supplier licensing. An operator chooses a licence and then finds customers. A supplier already has customers, and the licence has to match them. If your book is MGA operators, an Anjouan B2B licence at a fifth of the price does not help you: their compliance team is looking for a Malta credential. If your book is Anjouan and Curaçao casinos, an MGA Critical Gaming Supply licence is an expensive credential aimed at clients you do not have.

So the decision sequence is: list your top ten clients and prospects, note which regulator licences each of them, and license into the regimes that cover the most revenue. Cost is the tiebreaker, not the criterion.

Read that table as a map of trade-offs rather than a price list. Anjouan and Tobique are the fast, lean credentials — genuinely useful if your clients sit in those regimes, and close to worthless if they do not. Curaçao is the middle: heavier and slower, but it buys the deepest payment-processor and acquiring acceptance in the offshore market, which is exactly why operators tolerate its cost and why suppliers who serve them end up following. Malta is the credential that opens Tier-1 operator doors and tier-1 banking, at the price of real substance and a technical audit. Panama and Anjouan are the two regimes where a single authorisation covers both operator and supplier activity, which is worth knowing if you are a platform that also wants to run brands.

One number deserves a caveat rather than false precision. Official government fees are the only figures anyone can quote cleanly; the year-one all-in is always higher, because it includes the applicant company, the compliance and AML build, and — in Malta and Curaçao — system and RNG certification. We quote the regulator fee and the service cost separately for exactly this reason, and you should be suspicious of any provider that blends them into one round number. For a worked example of how the official fee separates from provider mark-up, the Anjouan licence cost guide applies to suppliers as much as operators, and the cost calculator gives an indicative figure for any route.

What the application actually asks of a supplier

Supplier files differ from operator files in three specific places, and knowing which three saves a month.

Scope definition. The regulator licenses what you supply, not what you are. You will be asked to define your products and integrations precisely — RGS, aggregation, content, platform, payment technology — and the fee and review depth scale with that list. Suppliers routinely over-declare scope out of caution and pay for it in both fee and audit time. Declare what you actually sell now, and add scope later when you sell it.

Technical certification. This is the step that separates supplier timelines from operator ones. RNG and game-content certification by an approved test house runs alongside the corporate and fit-and-proper review, not after it. Start it early. In Malta the system audit sits between the business review and the issued licence; in Curaçao the CGA’s technical review is folded into the 6–10 week assessment.

Fit and proper, on the same standard as operators. Beneficial owners, directors and key persons face the same background, source-of-funds and integrity checks an operator would. Being “just the software vendor” buys no discount here. Where a corporate group sits behind the applicant, expect the structure to be traced upward until the regulator can see real people.

Banking deserves its own line. A supplier that touches funds — payment technology, wallet or settlement components — should plan to bank through an EMI or specialist neobank rather than a mainstream processor; the mainstream names all prohibit gambling-linked flows. Where a gambling payment agent belongs in the structure, we incorporate it in Cyprus. Aligning the supply-side entity, its banking and its licence is the work that keeps you on vendor lists rather than off them, and it is best done before the licence is filed, not after.

Holding more than one — and when that starts

Suppliers accumulate credentials in a way operators mostly do not, because a supplier’s addressable market is defined by other people’s licences. A content studio selling into Malta, Curaçao and Anjouan operators will, sooner or later, hold three things. That is normal, and it is not a failure of planning — but the timing is.

The rule that works: open the second file when you sign the client that needs it, not when their compliance team asks. The gap between those two moments is usually one quarter and always shorter than a Malta or Curaçao process. If you are already mapping a multi-regime book, read the per-jurisdiction detail in our Malta Critical Gaming Supply guide, the Curaçao B2B supplier permit and the Anjouan B2B supplier certificate — each covers the test, the file and the fees for that regime in full.

Two pieces of context worth holding alongside the choice. First, the regimes themselves are moving: several carry live deadlines through 2026 and 2027 that change substance and reporting obligations, and we track them in one place in the gambling licence deadlines calendar. Second, the supplier-credential trend is one instance of a broader tightening — the same logic that is pushing white-label arrangements out of favour in the UK, where the regulator has been explicit that outsourcing an obligation does not outsource the liability. Being the unlicensed critical vendor in someone else’s stack is the supply-side version of the same exposure.

Choosing, honestly

If you build the technology behind online casinos and your clients have started asking for a licence number, the supplier credential is now part of the commercial deal rather than a compliance afterthought. The decision is narrower than it looks: work out which regulators licence the operators who pay you, license into those, and let cost decide only where two options genuinely both work.

Vantegris runs the full supplier file end to end — jurisdiction choice, applicant company, scope definition, the compliance build, certification liaison and the banking around it — and can add B2C scope where you need both sides. Start with the B2B supplier licensing overview, compare every regime side by side in the Licence Finder, or book a free consultation and we will map the licence to your actual client book — including telling you when you do not need one at all.

Iryna H.

Gaming Licensing · Vantegris

Part of the Vantegris desk that runs these licences end to end — writing from live applications across 40+ jurisdictions, not recycled marketing. Reviewed by Vladyslav S. (Compliance & Legal).

Full profile Book a free consultation

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.