The Malta Gaming Authority (MGA) Explained: 2026 Guide

If you are researching the Malta Gaming Authority, you are usually asking one of three things: who exactly regulates Malta-licensed casinos, how the MGA licenses and polices operators, or whether a site claiming an MGA licence is telling the truth. This guide answers all three, plainly.

The short version: the MGA is the EU’s original serious remote-gaming regulator — a single statutory authority that has licensed online gaming since the early 2000s, issues separate operator (B2C) and supplier (B2B) licences under the Gaming Act 2018, publishes a public register you can verify any licensee against, and enforces visibly. It is also, deliberately, one of the harder licences to get. That difficulty is the product: an MGA licence is shorthand for “this operator passed a real regulator’s scrutiny”, and banks, payment providers and B2B partners price it accordingly.

Who the MGA is, and why it matters

Malta moved first. In the early 2000s, when most of Europe treated online gambling as a grey zone, Malta built a statutory framework for licensing remote gaming from an EU member state — and the authority running it became the reference point for what “properly licensed” means in iGaming. Originally the Lotteries and Gaming Authority (2001), renamed the Malta Gaming Authority in 2015, the regulator today supervises the full sector: online casino and betting, land-based gaming, the national lottery, and the B2B supply chain behind them.

The current legal foundation is the Gaming Act 2018, Chapter 583 of the Laws of Malta, which consolidated a patchwork of earlier instruments into one law and one licensing architecture. That 2018 reform is why the MGA’s structure looks clean compared to older regimes: instead of a licence class per product, there are two licences — operator and supplier — each covering the game types you actually run.

For an operator weighing jurisdictions, the MGA’s significance is less the paper and more the signal. Tier-1 banks and PSPs onboard MGA licensees that would face months of extra diligence on an offshore permit; premium game studios supply them without hesitation; B2B counterparties treat the licence as cleared ground. You pay for that signal in capital, substance and time — which is exactly the trade our Malta gaming licence guide walks through end to end.

How MGA licensing is structured

The Gaming Act splits the world into service and supply. A B2C Gaming Service licence authorises offering games to players; a B2B Critical Gaming Supply licence authorises supplying the material components — platforms and games — to those operators. One company can hold both, and each licence enumerates the game types it covers:

Licences are issued for a ten-year term, which is unusually long by industry standards and reflects the MGA’s model: hard to get in, long horizon once you’re in, continuous supervision throughout. Getting in means a multi-stage application — fit-and-proper screening of shareholders and funding, a business and technical review, policy and procedure audits, and a system review before full go-live. The company itself must be established in Malta with real substance, including the MGA’s hallmark key functions: named, personally accountable holders of roles like compliance, AML (MLRO), risk and technology. If you want the full checklist, our Malta gaming licence requirements guide itemises it.

The register: how to verify any MGA claim

The MGA maintains a public licensee register — searchable on its website — listing every authorised company, its licence type and status, and the brands and URLs it covers. This register is the single source of truth for verification, and using it takes two minutes: search the operating company or the brand, confirm the status is authorised, and confirm the URL you are looking at is actually listed.

Genuine licensees also display a dynamic MGA seal that links back to their register entry — a static image of the logo with no working link is itself a red flag. For suppliers the same logic applies through the B2B side of the register: platforms and studios claiming Malta authorisation are checkable in seconds.

Tax, fees and what the MGA costs you

The headline that surprises most newcomers: Malta’s 5% gaming tax applies only to revenue from players located in Malta. For an internationally-facing operator, whose Maltese player base is typically tiny, the gaming-tax line is small; the real recurring costs sit elsewhere. Licensees pay a compliance contribution — an annual amount banded by game type and revenue — plus fixed annual licence fees, and the operating company pays Maltese corporate tax under the general system, with the well-known refund mechanics that competent structuring addresses.

The MGA cost stack, in other words, is dominated by fees, substance and compliance overhead rather than gaming tax. We keep the current fee schedule, bands and a realistic all-in budget in the Malta gaming licence cost breakdown — and the honest comparison against lighter regimes in Malta vs the offshore routes.

Enforcement: what supervision actually looks like

The MGA supervises continuously, not just at application. Licensees file regular returns, undergo compliance audits and system reviews, and remain accountable through their key-function holders — when something fails, a named person answers for it. AML sits high on the agenda: Malta’s FIAU and the MGA jointly police customer due diligence, source-of-funds checks and reporting aligned to FATF standards, and AML failures have driven some of the most serious sanctions in the regime’s history.

Crucially, enforcement is public. The MGA publishes its actions — warnings, conditions, suspensions and licence cancellations — which is precisely why the licence retains its value: the register is credible because names visibly come off it. For an operator this cuts both ways. The compliance bar is real and continuing, and budget should treat it as core operations rather than paperwork; in exchange, you hold a credential whose meaning the regulator actively defends.

What the MGA means for your licensing decision

Whether the MGA is your regulator comes down to what you need the licence to do. If your strategy runs through EU-facing operations, tier-1 banking, premium content deals or an eventual exit where a clean regulatory story adds enterprise value — the MGA is the strongest general-purpose credential in iGaming, and worth its cost and timeline. If you need to be live next month, testing a product with crypto rails and a lean budget, Malta is the wrong first step and an honest adviser says so: that profile is better served by the fast offshore routes first, with Malta as the upgrade once the model is proven — the path we map in best gambling licences in 2026.

One misconception to bury: an MGA licence is not an EU passport. Gambling sits outside single-market passporting, so nationally regulated markets still require their own licences, and every licensee geoblocks what it is not authorised to serve. What Malta gives you is a regulated EU home base with the industry’s deepest infrastructure around it — not automatic access to every European market.

We run MGA applications end to end — scoping, key functions, the technical file and the regulator dialogue — and we will tell you honestly if your stage and product point somewhere faster first. Start with the Malta gaming licence overview, or book a free consultation for a straight answer on whether the MGA fits your launch.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.