Malta Gaming Authority (MGA) Licence Explained: Player Protection & Complaints
What an MGA licence covers: segregated player funds, Authority-approved game systems, ADR complaints, and why it matters for offshore casinos.
On this page
A Malta Gaming Authority (MGA) licence is the closest thing online casinos have to a gold standard outside national regulators. It is an EU framework with real player-fund rules, Authority-approved game systems, and a complaints route that usually ends in a binding decision. A licence is still a floor, not a trophy — but an MGA seal that checks out is one of the stronger signals the capybara looks for.
What the MGA licence is
The Malta Gaming Authority is the gambling regulator of Malta, an EU member state. It rebuilt its framework under the Gaming Act of 2018. Because Malta is in the EU, MGA operators sit inside a recognised legal system with courts, appeals, and data-protection law (GDPR) behind them.
There are two main licence types. A B2C licence is for operators that take bets from players; it covers four game-type verticals (Type 1 casino/RNG games, Type 2 fixed-odds betting, Type 3 peer-to-peer like poker and exchanges, and Type 4 skill games). A B2B licence is for the suppliers behind the scenes — game studios and platform providers. When you read a casino footer, the licence that protects you as a player is the B2C one.
What an MGA licence allows
- Operating online casino, sportsbook, poker, and other approved game types under one B2C authorisation.
- Serving players in markets that accept the MGA licence and do not require a separate local licence.
- Offering games that use a random number generator and game engine the Authority has approved, with certification where it requires it.
What it prohibits — and where the MGA licence does not reach
This is the part players miss most often. An MGA licence does not let an operator legally target every country. Many states now run their own regimes — the UK (UKGC), Germany (GGL), Italy, France (ANJ), Spain, and others — and inside those countries a Maltese licence alone is not enough. The MGA leaves it to each operator to geo-block where local law demands a local licence. So if you are in a regulated market, an MGA casino that still accepts you may be operating in a grey area, and your local protections may not apply. Always check whether your own country requires a domestic licence first — see our restricted countries guide.
Player protection and security
- Segregation of player funds. MGA operators must keep player balances in a separate, separately identifiable bank account, apart from operating funds, with the Authority able to view the player-funds account. Your money is not supposed to be used to run the business.
- Game fairness. A game that uses a random number generator or game engine the Authority has not already approved needs its prior written approval, and the Authority can require the RNG or game engine to be certified.
- Responsible gambling. Self-exclusion and deposit or wagering limits are mandatory, operators must offer timed reality-check alerts on repetitive RNG games, and a player can ask to self-exclude across all of a licensee's brands.
- AML/KYC. Identity and source-of-funds checks follow EU anti-money-laundering law.
The complaints process
The MGA route is structured and, importantly, ends somewhere. The steps are:
- Step 1 — the operator. Raise the dispute with the casino’s player-support team first. Licensees must publish a clear complaints procedure.
- Step 2 — ADR. If you are not satisfied, the operator must let you escalate to a registered Alternative Dispute Resolution (ADR) entity. In most disputes an ADR decision is binding on both the player and the operator; for larger claims the operator may offer non-binding mediation and must tell you how to get a binding decision.
- Step 3 — the MGA Player Support Unit. You can also refer the matter to the Authority’s own Player Support Unit, which can investigate the licensee’s conduct.
That usually-binding ADR step is what separates a strong regulator from a decorative one. With many offshore licences, a “complaint” goes into a void.
How to verify an MGA licence
Do not trust the badge image alone. The MGA seal in a casino footer should link to a licence verification page on authorisation.mga.org.mt. Check that the legal company name, licence number, approved URL, and licence status (shown as “Licensed”) all match the casino you are on. If the seal is a flat image with no link, or the licensed company is unrelated to the brand, stop and read our licence-check guide before depositing.
How the capybara reads it
An MGA licence that verifies cleanly is a genuine plus: segregated funds, Authority-approved game systems, and a complaints route that actually concludes. It is not a guarantee of fast payouts or fair bonus terms — those still need reading. And it does not override your own country’s law. Treat it as a strong baseline, then judge the casino on payout speed, bonus clarity, and support, the same way we rank every operator.
Are player funds protected from an MGA licensee’s creditors?
Article 37 of the MGA Player Protection Directive (V3, January 2023) makes player funds the players’ separate and distinct patrimony, with no creditor claim against them. Article 38 requires the player funds account balance to at least equal the sum of player account credits.
How quickly must an MGA licensee return a player’s funds on request?
No later than five working days after receiving the player’s request, if practicable, under article 29(1) of the MGA Player Protection Directive (V3, January 2023). Where possible, the funds go back into the account they originated from.
Are MGA ADR decisions binding?
Yes, when the ADR entity acts as arbitrator or adjudicator: its conclusions bind both operator and player (MGA ADR Directive, v2 July 2025, article 10). For disputes beyond Malta’s Small Claims Tribunal competence, a licensee may instead offer non-binding ADR such as mediation.
Who pays for dispute resolution under MGA rules?
Not the player. Article 8 of the MGA ADR Directive (v2, July 2025) requires dispute resolution to be offered free of charge to players referring a matter to an ADR entity the licensee engaged. Article 5 requires ADR entities to be EU or EEA-established.
What gaming tax rates does Maltese law set?
Malta’s Gaming Tax Regulations (S.L. 583.10) tax gaming revenue from players in Malta at 15% for Type 1 services and 10% for Types 2, 3 and 4. For distance gaming, what counts is whether the player is established or usually resides in Malta.
Key numbers
| Figure | Value | As of | Primary source |
|---|---|---|---|
| Deadline to return a player’s funds on request | 5 working days, if practicable | V3, January 2023 | MGA, Player Protection Directive (Directive 2 of 2018) |
| Minimum share of required player funds held in the player funds account | 90% (remainder covered by funds in transit) | V3, January 2023 | MGA, Player Protection Directive (Directive 2 of 2018) |
| Time allowed to refer a player to an ADR entity when none is engaged | 20 days from the player saying the dispute was not resolved | v2, July 2025 | MGA, ADR Directive (Directive 5 of 2018) |
| Monthly player funds report: due date | No later than 20 days after the end of the reporting month | V2, October 2021 | MGA, Gaming Authorisations and Compliance Directive (Directive 3 of 2018) |
| Gaming tax rate, Type 1 gaming services (players in Malta) | 15% of gaming revenue | Amended by L.N. 84 of 2026 | Gaming Tax Regulations (S.L. 583.10), legislation.mt |
| Gaming tax rate, Type 2, 3 and 4 gaming services (players in Malta) | 10% of gaming revenue | Amended by L.N. 84 of 2026 | Gaming Tax Regulations (S.L. 583.10), legislation.mt |
How to cite this page: Casino Capybara, "Malta Gaming Authority (MGA) Licence Explained: Player Protection & Complaints", https://casinocapybara.com/guides/malta-gaming-authority-licence/, updated November 4, 2026.
Sources and official register
- Malta Gaming Authority — official site and licensee/player hubs: mga.org.mt
- MGA Licensee Register (search by company name, licence status or URL): mga.org.mt licensee register
Last reviewed: October 2026. This is general information, not legal advice. Always confirm a casino’s current status on the official register and check your own country’s rules before playing.
Related guides
Frequently asked questions
Is an MGA casino safe?
It is among the safer licence types because of fund segregation, Authority-approved game systems, and an ADR complaints route that usually ends in a binding decision. "Safe" still depends on the individual operator's payout and bonus behaviour.
Can an MGA casino accept players from anywhere?
No. Countries with their own licensing regimes (UK, Germany, Italy, France, Spain and others) require a local licence. An MGA casino that still takes you in those markets may be operating in a grey area.
What happens if an MGA operator ignores my complaint?
You can escalate to a registered ADR entity, whose decision usually binds both sides, and you can report the operator to the MGA Player Support Unit.
How can I verify MGA player protection on a licensed casino?
Check that the MGA seal in the casino's footer links to a verification page on authorisation.mga.org.mt, and confirm the licensed company name, licence number and licence status (shown as "Licensed") match the brand you're playing on. A genuine MGA licence requires segregated player funds, Authority-approved game systems, and mandatory responsible-gambling tools like deposit or wagering limits and self-exclusion — protections a flat, unlinked badge image does not prove on its own.