Malta Gaming Company Setup: The 2026 Substance Guide

Operators who come to Malta from an offshore permit expect the same recipe: register a company somewhere convenient, put the licence on top, and go live. Malta breaks that habit on the first step. The Malta Gaming Authority does not license a nameplate — it licenses a real Malta company with genuine substance on the island, paid-up share capital, local key functions and a compliance officer. The question that decides whether you launch is not how fast can I get a certificate, but is the company underneath the licence real enough to hold it.

In our practice the 2026 answer is consistent: the licensee is a Malta company, incorporated on the island with local presence and key functions, funded to the share-capital threshold for its licence type, running a live compliance and MLRO function, and sitting inside Malta’s full-imputation tax system. This is the definitive breakdown of that setup — what each piece requires, why it survives underwriting, and why it is the deliberate opposite of a Costa-Rica-applicant offshore permit.

The Malta setup at a glance

Malta is the mirror image of the light offshore regimes. Where an Anjouan or Tobique licence sits on a Costa Rica applicant with no local footprint, Malta requires the operating company to be genuinely Maltese — incorporated, capitalised and run on the island. That single fact reshapes the whole build. Instead of a shell plus a certificate, you stand up a real EU company with substance, and the licence is issued to it directly.

Read top to bottom, the licence is an attribute of the local Malta company — every regulated obligation attaches to it. The holding and IP entities are ownership and asset layers, not licensees. For the full fee, timeline and licence-type picture, our Malta gaming licence guide covers the permit itself; this article is about the company and substance around it.

Incorporating the Malta company that holds the licence

The starting point is a company incorporated under Maltese law that will be the applicant and, once approved, the licensee. This is not a formality bolted on at the end — the MGA assesses the company, its capital, its people and its plan as one file. In practice that means five things, all mandatory:

• A Malta-incorporated company as the applicant and MGA licensee.
• A registered office in Malta — a genuine address tied to the operation.
• Directors and the company officers the MGA expects to see accountable for the business.
• Issued share capital at the threshold for your licence type, genuinely paid up and evidenced.
• Local presence and key functions performed in Malta, so the regulated activity is run from the island.

None of this exists on the offshore side of our practice, where an Anjouan or Kahnawake applicant is simply set up in Costa Rica with no local presence at all. Malta closed that door on purpose — it is an EU member state regulating remote gaming to EU standards, and the substance requirement is the price of the tier-1 credential. The upside is credibility: a real Malta operator with paid-up capital and a live compliance function is a counterparty banks, PSPs and game studios can actually underwrite. The full checklist of what the MGA expects sits in our Malta gaming licence requirements guide.

Share capital by licence type

Capital is where the setup gets concrete, and it scales with the risk of what you are licensed to do. The MGA sets minimum issued share capital across a band from €40,000 to €240,000, allocated by the type of gaming service:

An operator running several types must meet the requirement for the combination, and B2B Critical Gaming Supply licences carry their own thresholds. The capital has to be genuinely issued and paid up — it is not a paper figure — because it funds the operation and demonstrates to the MGA that the company can absorb the obligations it is taking on. We model the exact capital position for your licence type before you commit, alongside the MGA fees; the fee side is broken down in our Malta gaming licence cost guide.

Local substance, compliance and the MLRO function

Capital gets you standing; substance keeps the licence. The MGA wants to see the regulated business genuinely run from Malta, which means local presence and the key functions performed on the island rather than exported to a back office elsewhere. Two roles sit at the centre of that expectation. The first is a compliance function — a dedicated officer accountable for the regulatory programme you file, from responsible-gaming controls to reporting. The second is a Money Laundering Reporting Officer (MLRO), the individual responsible for AML and KYC oversight, suspicious-transaction reporting and the anti-money-laundering framework the MGA and EU rules require.

These are not titles on an org chart. The MGA assesses whether the named people can actually perform the functions, and the compliance and MLRO roles have to be live from day one — the programme must run, not just exist on paper. This is the deliberate contrast with the offshore permits in our practice: an Anjouan licence needs no local office, resident director or on-island compliance officer at all, which is exactly why it is faster and cheaper — and exactly why it does not carry Malta’s weight. Our Malta launch checklist sequences the full substance build.

Corporate tax, holding and IP structure

Malta’s tax framing is one reason serious groups accept the substance cost. The country operates a full-imputation corporate tax system: the company is taxed on its profits, and shareholders can then claim relief on distributed dividends through Malta’s refund mechanism, which brings the effective rate down materially from the headline. The precise outcome depends on your corporate structure, the type of income and where shareholders are resident — so it is modelled with a Maltese tax adviser rather than quoted as a single number. The mechanism is real; the exact figure is case-specific.

Around the licensed operator, most groups add the same layers you would expect on any serious build. A foreign holding company can own the shares of the Malta operator for clean ownership, structuring and exit, and a separate IP or brand company can hold domains, brand and platform technology, licensing them to the operator under an arm’s-length agreement. Both layers are legitimate and routine — but neither dilutes the substance requirement. The MGA licensee stays the Malta company, and every layer above it is disclosed. Separately from corporate tax, remember the 5% gaming tax on revenue from Maltese players applies at the operating level.

UBO transparency, fit-and-proper and tier-1 banking

Ownership runs up from the Malta operator through any holding company to the real people behind it — and the MGA is built to see all of it. UBO disclosure, identity verification, source-of-funds and source-of-wealth assessment and criminal-record checks are mandatory for every shareholder, director, key person and ultimate beneficial owner. This is the fit-and-proper test, and it reaches through the whole chain: the regulator establishes that the people behind the licence are financially sound, clean and credible before it issues anything. Holding companies and nominees change your public visibility, not what the MGA sees — the regulator always identifies the true owner, and so does any tier-1 bank under its own onboarding.

That is precisely why the Malta company underpins banking that an offshore shell cannot reach. Because Malta is an EU-licensed, tier-1 regime, you are not pushed into the Cyprus payment-agent structure that offshore permits often need to satisfy PSPs — a Malta operator contracts with tier-1 banks and specialist gaming PSPs directly. What stays true everywhere in this industry: gambling is a high-risk category, so mainstream processors like Wise, Stripe and PayPal prohibit it outright, and you settle through high-risk acquirers and specialist payment institutions instead of consumer fintech. The substance the MGA forces — a real company, paid-up capital, a live MLRO, a clean UBO chain — is the same substance a bank’s underwriting demands, which is why the credential opens doors. Our gaming company bank account guide walks through what a compliant application looks like.

Get the company right up front — a Malta-incorporated licensee with the capital its type requires, real local substance, a working compliance and MLRO function, and a clean disclosed ownership chain — and the licence becomes a bankable, ten-year EU business. Treat it like an offshore shell and you will not get past the MGA’s first review. If you are setting up a new Malta operation or graduating a brand up from an offshore permit, we build the whole stack end to end and model the capital, substance and tax before you spend. See the Malta gaming licence service, or book a free consultation and we will map the right structure to the markets you actually plan to serve.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.