MGA gaming license in Malta: types, requirements, taxes, and how to get it

Why Malta is the EU's gaming capital

Malta was the first in the EU to introduce regulation of remote gambling in 2004, and has held the status of industry hub ever since. Hundreds of operators and software suppliers are registered here, and a developed ecosystem operates - lawyers, auditors, banks, payment providers, and software companies that understand the industry's specifics. This isn't chance, but a combination of several factors.

• EU membership.An MGA license means a European regulator, not an offshore with a questionable reputation. It's easier to open accounts and connect acquiring with it.
• The English language.One of Malta's official languages, which removes a barrier in communicating with the regulator and preparing documents.
• Mature law.The current framework is the Gaming Act (chapter 583) and secondary legislation, refined over two decades.
• Tax model.The effective corporate tax rate for foreign shareholders drops to roughly 5% through the refund system.

A Malta license is perceived by partners as a mark of quality: its holder was strictly vetted, which removes some questions when connecting to banks and major platforms.

What the Malta Gaming Authority is, and what it licenses

The Malta Gaming Authority (MGA) is the state body that issues licenses, supervises operators and suppliers, and monitors game fairness and player protection. An MGA Malta license covers remote (online) gambling: internet casinos, sports betting, lotteries, poker, bingo, and skill games.

It's important to separate the areas of responsibility right away. MGA itself is responsible for licensing and gaming compliance under the Gaming Act (chapter 583). Anti-money laundering (AML) and counter-terrorist financing matters are handled by FIAU - the financial intelligence unit - under the PMLFTR regulations. In practice this means the licensee reports to two bodies simultaneously.

The regulator's official website -mga.org.mt, where guidance, forms, and the register of active licenses are published. Checking a counterparty in this register is the first thing serious banks and payment systems do.

License types: B2C and B2B - who needs which

A Malta gaming license splits into two broad categories based on who you provide the service to.

• B2C - Gaming Service License (a service for players).This is an operator's license. You directly accept bets and offer games to end players - launching an online casino, a bookmaker, a poker room, or a lottery.
• B2B - Critical Gaming Supply License.This is a supplier's license. You don't work with players, but supply other licensed operators with key elements: gaming software, a platform, a random number generator, systems for processing regulatory records.

Many companies choose the B2B model: it doesn't require gaming tax on player turnover and is simpler regarding player protection, while still giving access to a large market of operators. The choice depends on the business model - who your client is: a player or another operator.

Type 1-4 game classes: what each includes

Within the B2C license, MGA distinguishes four types (classes) of games. One operator can hold several types simultaneously, paying a fee for each. Understanding the classes is critical: it determines what you're allowed to offer.

• Type 1 - games of chance against the house.Classic casino (roulette, blackjack, baccarat), RNG slots, live casino, poker against the house, lotteries, and virtual sports. Chance determines the outcome.
• Type 2 - fixed-odds betting.Bookmaking: betting on sports and events at a pre-set odds, including live betting. The operator carries the risk.
• Type 3 - P2P games (between players).Player-vs-player poker, betting exchanges, pool betting, P2P bingo, and commission-based games. The operator takes a commission (rake) rather than carrying the game risk.
• Type 4 - controlled skill games.Platforms where the outcome depends on skill: esports, fantasy sports, and similar formats.

For a business this means: an online casino with sports betting and player-vs-player poker is three classes at once (Type 1, 2, and 3), and the fees add up.

Requirements for the company and substance

An online casino license in Malta isn't issued to an «empty» structure. The regulator wants to see a real business with economic presence (substance) on the island. The basic set of requirements looks like this.

• A legal entity in Malta.The applicant is a Maltese company (or an EEA firm) registered for licensing purposes. Details on the page aboutregistering a company in Malta.
• Substance.A real office, director, key personnel, infrastructure. The regulator doesn't accept shell companies.
• Key functions (Key Function holders).Persons responsible for compliance, AML, player protection, the technical side, and finance are appointed. Each such person is approved by MGA.
• Financial solvency.A business plan, financial projections, and proof of sufficient capital for operations and covering obligations to players.
• Founder screening (fit and proper).All beneficiaries and key persons undergo strict due diligence: origin of funds, reputation, no criminal record.

A properly built corporate structure (including a holding) often solves several tasks at once - from substance to tax efficiency.

Key functions and personnel: who must be hired

MGA requires that critical functions within the licensee be performed by specific approved persons (Key Function Holders), not «anyone from staff». This is the heart of Malta's supervisory model: the regulator controls not just the company, but the people responsible for key processes.

• Compliance Officer- responsible for compliance with license conditions and interaction with the regulator.
• MLRO / AML officer- responsible for anti-money laundering. Must be registered with FIAU, meet qualification requirements, and undergo annual training (roughly 10 CPD hours a year).
• Data Protection Officer- responsible for protecting players' personal data (GDPR).
• Technical and gaming key personnel- control over the platform, RNG, and game integrity.

Each such person must be «fit and proper»: competent,, financially sound, and of good reputation. The regulator must be notified of any change of key persons and approval obtained. Some functions can be outsourced, but responsibility still rests with the licensee.

AML, player protection, and responsible gaming

Compliance isn't a formality, but an ongoing operational burden. MGA and FIAU expect working processes from the licensee, not box-ticking paperwork.

• KYC and player screening.Client identification, age verification, transaction monitoring, source-of-funds control for large deposits.
• Suspicious activity reporting.Under current procedures, a suspicious transaction report (STR) is filed with FIAU the same day the MLRO gains knowledge or suspicion of laundering.
• Player protection.Self-limitation tools, deposit limits, timeouts, and self-exclusion. MGA's modern approach is «player-first»: the operator must set intervention thresholds and assess game affordability for the client.
• Segregation of player funds.Player money must be held separately from the company's operating funds.

Violations in this area are a common cause of fines and license revocation. So the AML infrastructure is built at the start, not «whenever there's time».

License fees: application and annual payments

The cost splits into a one-time application fee and annual license payments. The figures below are approximate current rates; exact amounts depend on the type and are confirmed against MGA's official guidance.

• Application fee- 5,000 € for the application, non-refundable, paid at filing.
• B2C annual license fee- depends on the type and income. The minimum for Type 1, 2, and 3 is roughly 25,000 € a year, lower for Type 4. For some types there's an upper cap in the hundreds of thousands of euros depending on turnover.
• B2B annual fee (Critical Gaming Supply)- roughly 25,000 € a year.
• Compliance Contribution- a variable annual payment for B2C, calculated by gross gaming revenue (GGR) bands and depending on the license type.

The license term is 10 years, renewable. The annual fee is usually paid in advance, before issuance and then annually, and is non-refundable.

Taxes: the gaming levy and the corporate rate

The tax picture for gaming business in Malta consists of two parts - the industry gaming tax and the general corporate tax.

• Gaming Tax- 5% of gaming income (GGR) earned from players physically located in Malta. Income from players outside Malta isn't taxed by this - which is what makes the island a convenient base for international operators.
• Corporate tax.The nominal rate is 35%, but Malta's full imputation system and tax refund to shareholders lowers the effective burden for foreign owners to roughly 5%. Details - in our article oncorporate tax in Malta.
• Compliance Contributionessentially works as an additional industry levy on income for B2C.

The combination of a low effective corporate rate and a narrow gaming tax (only Maltese players) is a key argument for the jurisdiction. The owner's personal tax residency is a separate matter, seeMalta tax residency.

How to get a license: the step-by-step procedure

The procedure isn't quick - it's not a «buy in a day». On average the path takes several months and goes through several stages.

• Step 1. Preparing the structure.Registering the Maltese company, working out the corporate structure, choosing license types.
• Step 2. Assembling the file.A business plan, financial projections, policies (AML, responsible gaming, security), documents on founders and key persons.
• Step 3. Filing and due diligence.Application to MGA, payment of the fee, deep vetting of beneficiaries and source of funds (fit and proper).
• Step 4. Technical and system audit.The regulator checks the platform, RNG, and game integrity - often through independent certification.
• Step 5. Issuance and launch.After approval and payment of the annual fee - license issuance and the start of operations under supervision.

In parallel, banking, acquiring, and payment system connections are handled - often the most labor-intensive part, where the MGA license's reputation works in your favor.

Timelines: how long it actually takes

A realistic horizon is from several months to half a year or more, depending on document readiness and structure complexity. What affects the timeline.

• Quality of the file.A complete and consistent package moves faster. Gaps in the source of funds or founders' background lengthen the review.
• Number of license types.Applying for Type 1, 2, and 3 at once is more complex than for one class.
• Technical audit.A ready, tested platform saves weeks.
• The applicant's responsiveness.MGA asks clarifying questions; response speed directly affects the overall timeline.

After launch the licensee moves into a mode of ongoing supervision: regular reporting, audits, policy updates. An MGA license isn't a one-off event, but a continuing obligation to meet requirements for all 10 years.

Common mistakes and reasons for refusals

Refusals and delays are rarely related to the business idea itself - more often they're manageable preparation mistakes. The most typical ones.

• An opaque source of funds.The regulator needs to understand where the beneficiaries' money comes from. Vague explanations are a red flag.
• Fictitious substance.Nominal directors with no real involvement and the absence of an office raise questions.
• Weak key persons.Key Function Holders with no relevant experience or a problematic reputation don't get approved.
• Superficial policies.Template AML and RG policies that don't reflect the company's real processes.
• Underestimating the budget.The applicant doesn't budget for annual fees, the compliance contribution, and staff and audit costs.

Most of these risks are removed at the preparation stage - if the structure and file are handled by a team that has already been through the MGA procedure.

Malta vs. other gaming jurisdictions

Malta isn't the only option, but one of the most respected. To make an informed choice, it helps to understand its place among alternatives.

• Within the EU.An MGA license gives European standing and bank trust - something classic quick-issue offshore licenses don't have.
• Entry price.Malta is more expensive and stricter than many island jurisdictions, but that's exactly what creates the reputational premium.
• Ecosystem.The concentration of specialized lawyers, auditors, banks, and software suppliers on the island is a practical advantage newer jurisdictions don't have.

If the business is EU-focused and needs major payment partnerships - Malta usually wins. If speed and minimal cost matter more, with reputation secondary, other jurisdictions are chosen - but with an understanding of banking limitations. For blockchain and crypto projects there's a separate regime on the island, seeMalta's crypto license.

Who an MGA license suits, and what's next

A Malta gambling license is a tool for those building a legal, long-running gaming business in Europe, not looking for a «one-season loophole». It suits you if you're ready for genuine substance, ongoing compliance, and transparency toward the regulator.

• To operators- for online casinos, bookmakers, and poker rooms targeting the EU market (B2C license).
• To software and platform suppliers- for those who sell technology to licensed operators (B2B license).
• To groups, building a holding structure with tax efficiency and a European reputation.

The real work starts before filing: choosing license types, the corporate structure, selecting key persons, budgeting for fees and compliance. Mistakes at this stage cost months. If you're planning an MGA license, it makes sense to discuss the structure with specialists in advance -leave a request, and we'll break down your situation.