Malta Gaming License Masterclass: Licencia de la MGA en 12 meses para juegos de azar en línea – Hoja de ruta detallada con todos los requisitos de cumplimiento

I experience it every day: entrepreneurs reach out to me asking about a gaming license. Most have already wasted months.

The reason? They massively underestimate the complexity of an MGA license.

Here is the truth:

A Malta Gaming Authority license isnt a quick tax optimization project. Its a strategic 12-month endeavor with clear milestones.

But – and this is critical – if you take the right approach, youll unlock a market of over 500 million EU citizens. Legal and fully compliant.

In the next 4,500 words, Ill show you exactly how it works. Not as a theoretical treatise, but as a hands-on, field-tested roadmap.

Youll find out which license you really need. Plus, youll receive a realistic cost plan and a month-by-month checklist.

Ready for the deep dive? Then let’s start with the basics.

Yours, RMS

Malta Gaming License 2025: What You Need to Know About the MGA License

The Malta Gaming Authority (MGA) has been Maltas official gambling regulatory authority since 2001. Its considered one of the strictest and most respected gaming authorities in the world.

What does this mean for you?

With an MGA license, you can legally offer online gambling in all EU member states. The reason is the EU’s freedom of services – Malta is a full European Union member.

Why Malta for Gaming Licenses?

Malta has intentionally positioned itself as a gaming hub. The country offers a unique combination of tough regulations and business-friendly tax laws.

An overview of the advantages:

• EU Passport: Access all EU markets with a single license
• Tax Benefits: Effective tax rate between 5-35% depending on your structure
• Legal Certainty: Established legal system based on the British model
• Reputation: MGA licenses enjoy strong trust from players and payment providers
• Support: Dedicated gaming infrastructure and deep local expertise

MGA vs. Other Gaming Jurisdictions

Let’s be honest: Malta isn’t the cheapest option. But often its the best.

That means: If you seriously want to do business in the EU market, Malta is almost unbeatable.

Latest Developments 2025

The MGA has continued to tighten its requirements in recent years. Since 2024, stricter capital requirements and expanded compliance obligations apply.

The process has also been digitized. This means faster processing, but also higher transparency requirements.

For you as an applicant, this means: Thorough preparation is more crucial than ever.

Applying for an MGA License: The 4 Types at a Glance

Now for the details. The MGA distinguishes four main license types. Each has specific requirements and permissions.

Your choice determines your success – and your costs.

Class 1 License: Remote Gaming

This is the most popular license for online casino operators. It entitles you to offer:

• Online casino games (slots, table games)
• Live casino services
• Virtual sports betting
• Poker tournaments and cash games

Minimum capital: €40,000 paid-in share capital
License fee: €25,000 per year
Processing time: 6–9 months

This license is your standard entry into online gaming.

Class 2 License: Gaming Supply

Perfect for software vendors and game developers. Covers:

• Development of casino software
• Provision of gaming platforms
• White-label solutions
• Gaming-as-a-Service offerings

Minimum capital: €20,000
License fee: €15,000 per year
Processing time: 4–6 months

Class 3 License: Gaming Promotion

For marketing companies and affiliate networks in the gaming sector:

• Gaming affiliate marketing
• Lead generation for casinos
• Gaming advertising networks

Minimum capital: €10,000
License fee: €5,000 per year
Processing time: 3–5 months

Class 4 License: Gaming Support Services

For specialized service providers:

• Payment processing for gaming
• Hosting services for gaming platforms
• Technical gaming infrastructure

Minimum capital: Depending on service €20,000–€100,000
License fee: €10,000–€40,000 per year

Which License Fits Your Business Model?

Most of my clients need a Class 1 license. Why? They want to operate a full-fledged online casino.

But be careful: Think carefully about your goals. A Class 2 license is often enough for technical service providers. That saves you €10,000 in annual license fees.

My tip: Start conservatively. You can expand your license over time, but you cant easily reduce it.

Malta Gaming License Costs: Complete Investment Planning

Here are the real costs of an MGA license – no hidden surprises.

Most articles leave out the side costs. This leads to unpleasant surprises after 6 months.

Direct MGA Costs (Class 1 License)

Thats already €97,000 in year one. But we’re not done yet.

Inevitable Consulting Costs

You can’t apply for an MGA license solo. It’s impossible without specialized consultancy.

• Legal advice: €15,000–€30,000 for the application process
• Compliance consulting: €10,000–€20,000 for policy development
• Technical certification: €8,000–€15,000 for software testing
• Accounting/audit: €5,000–€12,000 for financial statements

Expect an additional €40,000–€80,000 for professional support.

Operational Startup Costs

Alongside your license application, you need to build your business:

Realistic Total Investment

For a serious launch, budget:

Minimum scenario: €250,000–€300,000
Comfort scenario: €500,000–€750,000
Premium scenario: €1,000,000+

Sounds like a lot? It is. But remember: The EU gaming market exceeds €100 billion a year.

Annual Operating Costs

After license issuance, ongoing costs apply:

• MGA fees: €32,000 (license + compliance)
• Audit and compliance: €15,000–€25,000
• Legal advice: €10,000–€20,000
• Software licenses: €60,000–€200,000
• Personnel and operations: €150,000–€500,000

Budget €270,000–€780,000 in annual operating costs.

In short: You need a solid business case. Without a sustainable business model, an MGA license is a bottomless pit.

My advice: Develop your business model first. Then apply for the license. Not the other way around.

MGA License Requirements: Understanding Compliance Fundamentals

Now to the core: What does the MGA really require from you?

The requirements are extensive. But don’t worry – I’ll explain each point in practical terms.

Corporate Structure and Governance

You must set up a Maltese company or establish an EU company with a Maltese branch.

Minimum requirements:

• Registered office in Malta with genuine business premises
• At least two directors (one must be a Malta resident)
• Compliance Officer with MGA-recognized qualifications
• Money Laundering Reporting Officer (MLRO)
• Dedicated customer support in the Maltese time zone

Meaning: You need real presence in Malta. Letterbox companies dont work.

Financial Requirements

The MGA wants to see youre financially solid:

You also need to prove where your capital comes from. Source of funds documentation is mandatory.

Technical and Operational Standards

Your gaming platform must meet strict technical standards:

Software certification:
All gaming software must be tested by MGA-accredited laboratories. This includes Random Number Generators (RNGs), Return-to-Player Rates (RTPs) and game integrity.

Data protection and GDPR:
You must demonstrate full GDPR compliance. This includes:

• Data Protection Impact Assessment (DPIA)
• Privacy Policy and Terms of Service
• Cookie Policy and Consent Management
• Data breach response procedures

Anti-Money Laundering (AML):
Comprehensive AML policies are mandatory:

• Customer Due Diligence (CDD) procedures
• Know Your Customer (KYC) processes
• Suspicious Activity Reporting
• Transaction monitoring systems

Responsible Gaming Requirements

The MGA places great importance on player protection:

Personnel Qualifications

Your key people must demonstrate specific qualifications:

Compliance Officer:

• ACAMS certification or equivalent
• 3+ years gaming compliance experience
• Maltese or EU residence permit

MLRO (Money Laundering Reporting Officer):

• Specialized AML training
• Registration with the Financial Intelligence Analysis Unit (FIAU)
• Continuous further education

This means: You can’t just repurpose existing staff. You need real specialist expertise.

Business Plan and Financial Projections

The MGA requires a detailed 5-year business plan:

• Detailed revenue forecasts by product category
• Customer acquisition strategies with realistic conversion rates
• Competitive analysis of target markets
• Risk assessment and mitigation strategies
• Compliance budget and resource planning

This is where the wheat is separated from the chaff. Vague plans lead to rejection.

My tip: Invest time into a professional business plan. Its your application for a million-euro license.

12-Month Roadmap: Your Structured Path to a Gaming License

Here it is – the practical roadmap that saves you months. I’ve refined this schedule with over 20 successful MGA applications.

Important: Some phases overlap. Parallel processing is crucial to success.

Months 1–2: Foundation Phase

Weeks 1–2: Business Model Finalization

• Finalize license class selection
• Target market analysis and competitive intelligence
• Revenue model and pricing strategy
• Initial capital planning and investor relations

Weeks 3–4: Legal Structure Setup

• Establish Maltese company or EU entity
• Rent offices in Malta (real presence required)
• Initial consultation with MGA-specialized attorneys
• Preliminary compliance assessment

Weeks 5–8: Team Building

• Recruit compliance officer (Malta resident)
• Identify and qualify MLRO
• Fill key management positions
• Set up HR structures and employment contracts

Milestone: Functional Maltese entity with core team

Months 3–4: Documentation Phase

Weeks 9–12: Business Plan Development

• Detailed 5-year financial planning
• Market entry strategy with KPIs
• Risk assessment and compliance framework
• Technical architecture and platform strategy

Weeks 13–16: Compliance Documentation

• AML policies and procedures manual
• Responsible gaming framework
• GDPR compliance documentation
• Internal controls and audit procedures

Milestone: Complete documentation for MGA application

Months 5–6: Technical Implementation

Gaming Platform Setup:

In parallel: Software Testing and Certification

• RNG testing by accredited labs
• Game integrity verification
• Platform security assessment
• Load testing and performance optimization

Milestone: Certified, operational gaming platform

Months 7–8: Application Submission

Weeks 25–28: Final Application Preparation

• Complete document review by attorneys
• Financial statements and audited accounts
• Source of funds documentation
• Final business plan review

Weeks 29–32: MGA Application Submission

• Online application via MGA portal
• Transfer €25,000 application fee
• Upload and sign all documents
• Wait for application acknowledgment

Milestone: Official MGA application submitted

Months 9–10: Review Process

The ball is now with the MGA. But you’re not on standby:

MGA Review Activities:

• Document review by MGA teams
• Background checks of key persons
• Financial due diligence
• Technical assessment of gaming platform

Your parallel tasks:

• Prepare marketing campaigns
• Onboard additional game providers
• Build customer support team
• Finalize operational procedures

Frequent MGA Inquiries:

• Business model clarifications
• Additional financial information
• Enhanced due diligence for certain individuals
• Technical documentation updates

Respond to MGA inquiries within 5 business days. Delays will significantly extend the process.

Months 11–12: Final Approval and Launch

License Issuance Process:

• Final MGA board approval
• Download license certificate
• Payment of annual license fee
• Set up compliance monitoring

Go-Live Preparation:

• Final platform testing
• Launch marketing campaigns
• Customer onboarding processes
• Ongoing compliance monitoring

Milestone: Live gaming operation with a valid MGA license

Critical Success Factors

From 20+ projects, I know the most common delays:

1. Incomplete documentation – costs 2–3 months
2. Weak compliance expertise – leads to additional queries
3. Unrealistic financial planning – requires complete revision
4. Technical issues – software needs re-certification
5. Staff changes – new background checks needed

My advice: Build in a 15% buffer. Better to start early than to get frustrated later.

Malta Gaming Authority Procedures: The Approval Process in Detail

Let’s look behind the MGA curtain. I’ll explain what actually happens during the 6–9 months of processing time.

This helps you set realistic expectations and react proactively.

Phase 1: Initial Assessment (Weeks 1–4)

Once your application is received, the MGA starts with an initial review:

Administrative Completeness Check:

• Are all forms fully completed?
• Were all required documents submitted?
• Has the application fee been paid?
• Are all signatures and certifications present?

First-Level Review:

• Business model plausibility check
• Licensing class appropriateness
• Basic financial capability assessment
• Key personnel qualifications review

If there are deficiencies, you’ll get a Request for Information (RFI). Respond within 10 business days, or your application will be considered withdrawn.

Phase 2: Detailed Due Diligence (Weeks 5–16)

This is the tough part. The MGA scrutinizes every aspect of your application:

Financial Due Diligence:

Key Persons Background Checks:

The MGA conducts thorough fit and proper tests:

• Criminal background checks (worldwide)
• Regulatory history (other jurisdictions)
• Bankruptcy and insolvency records
• Professional qualifications verification
• Character references from business partners

This often takes the longest, especially for people with international backgrounds.

Phase 3: Technical Assessment (Weeks 12–20)

Parallel to due diligence, the MGA reviews your technical infrastructure:

Gaming Software Evaluation:

• RNG certification review
• Game Return-to-Player (RTP) verification
• Software integration security assessment
• Player data protection mechanisms
• Implementation of responsible gaming tools

Platform Security Review:

• SSL certificate and encryption standards
• Anti-fraud mechanisms
• Payment processing security
• Data backup and disaster recovery
• Vulnerability assessment results

Common pitfall: The MGA often demands software updates or extra security features. Allow 2–4 weeks for adjustments.

Phase 4: Compliance Framework Review (Weeks 16–24)

Your compliance documentation is reviewed in detail:

AML/CFT Procedures:

• Customer due diligence workflows
• Transaction monitoring thresholds
• Suspicious activity reporting procedures
• Staff training programs
• Record keeping requirements

Responsible Gaming Measures:

• Self-exclusion database integration
• Deposit limit implementation
• Reality check mechanisms
• Problem gambling detection algorithms
• Player communication strategies

The MGA often tests your procedures with sample scenarios. Prepare your team for this.

Phase 5: Final Review and Board Approval (Weeks 20–28)

MGA Board Presentation:

Your application is submitted to the MGA board, which meets monthly.

Timing matters: An application completed mid-month waits for the next board meeting.

Possible Board Decisions:

• Approval: License granted (70% of complete applications)
• Conditional approval: License with requirements (20%)
• Deferral: More information needed (8%)
• Rejection: Application refused (2%)

Common Requests and Delays

In my experience, these requests occur in 80% of applications:

1. Enhanced source of funds documentation
   • Detailed proof for capital over €100,000
   • Tax returns for the past 3–5 years
   • Proof of sale for business disposals
2. Business plan clarifications
   • More detailed market size calculations
   • Customer acquisition cost assumptions
   • Competitive advantage substantiation
3. Technical implementation details
   • Additional software certifications
   • Payment provider due diligence
   • Data center security assessments

Pro tip: Anticipate these requests. Prepare extra documentation, even if not explicitly asked for.

After Licensing: First 90 Days

The license is only the beginning. The MGA monitors new licensees closely:

• Operational readiness review within 30 days
• Customer protection measures testing with the first players
• Financial reporting monthly instead of quarterly
• Compliance officer check-ins every 2 weeks

Be prepared for intense oversight. It’s normal and reflects MGA quality standards.

Common Pitfalls When Applying for the MGA License

In 8 years of MGA consulting, I’ve seen every mistake imaginable. Most are avoidable – if you know about them.

Here are the biggest pitfalls and how to avoid them.

Mistake #1: Incomplete Source of Funds Documentation

The Problem:
You underestimate how thoroughly the MGA checks your capital origin. A simple bank statement isn’t enough.

What the MGA Really Wants:

• Full documentation of all money transfers over €25,000
• Tax proof for income from the last 5 years
• For business sales: complete purchase agreements
• For inheritances: notarized will execution
• For loans: loan agreements and collateral details

How to Avoid:
Start your source of funds documentation 6 months before applying. Get all docs from banks and advisors before you urgently need them.

Mistake #2: Unrealistic Business Plan Assumptions

The Problem:
Many applicants copy templates or use unrealistic market penetration rates.

Typical Unrealistic Assumptions:

The Right Way:
Use industry benchmarks from sources like H2 Gambling Capital or European Gaming & Betting Association (EGBA).

Mistake #3: Weak Compliance Expertise in the Team

The Problem:
You appoint a general manager as compliance officer with no gaming-specific experience.

What happens:
The MGA asks detailed AML questions. Your “compliance officer” can’t answer. The application is delayed or rejected.

Minimum Qualifications for Key Roles:

Compliance Officer:

• CAMS (Certified Anti-Money Laundering Specialist) or equivalent
• At least 3 years gaming compliance experience
• Proven MGA regulatory knowledge
• Malta residence or EU work permit

MLRO (Money Laundering Reporting Officer):

• FIAU registration (Financial Intelligence Analysis Unit Malta)
• Specialized AML training with gaming focus
• Experience with suspicious activity reporting

Solution:
Invest in genuine expertise. A qualified compliance officer costs €60,000–€100,000 a year, but prevents application rejections worth hundreds of thousands.

Mistake #4: Inadequate Technical Preparation

Common Technical Shortcomings:

1. Incomplete software certification
   • RNG tests only for select games instead of all
   • No mobile gaming certification
   • Insufficient live gaming certification
2. Weak security infrastructure
   • Self-signed SSL certificates instead of commercial CA
   • No DDoS protection
   • Insufficient fraud detection systems
3. Inadequate player protection tools
   • Non-integrated self-exclusion databases
   • Manual instead of automatic deposit limits
   • No reality check implementation

Best Practice Approach:
Work only with MGA-experienced software providers. They know the exact requirements and save you weeks of follow-ups.

Mistake #5: Underestimating Operational Requirements

The Problem:
You focus on licensing and forget the ongoing operations.

Often Overlooked Operational Requirements:

• 24/7 customer support in Maltese time zone
• Monthly compliance reports to MGA
• Quarterly financial statements (audited)
• Annual AML risk assessments
• Continuous staff training programs
• Regular penetration testing of IT systems

Hidden Compliance Costs:

Mistake #6: Poor Timing in Capital Planning

The Problem:
You secure capital for the application, but not for ongoing operation.

Realistic Capital Timeline:

• Month 1–6: €100,000–€200,000 for application preparation
• Month 7–12: €150,000–€300,000 for license acquisition and setup
• Year 2: €300,000–€500,000 for operations and marketing
• Year 3+: €200,000–€400,000 annually for sustainable operation

My advice:
Secure capital for at least 18 months from application. Most projects don’t fail at the license – but from inadequate liquidity in the start phase.

Mistake #7: Insufficient Market Research

The Problem:
You assume an EU license automatically means market access throughout the EU.

The Reality:
Many EU countries have extra local requirements:

• Germany: Additional Glücksspielstaatsvertrag compliance needed
• France: ARJEL license required for French players
• Italy: AAMS registration for the local market
• Spain: DGOJ license for Spanish customers

Solution:
Plan your market entry strategy country by country. An MGA license is the first step, not the final destination.

Those are the big seven. Avoid these mistakes and your chances for a successful MGA license rise dramatically.

Remember: A rejected license will cost you not only the €25,000 application fee. You also lose 6–12 months and will have to explain on reapplication why the first attempt failed.

Better to get it right from the start.

After Licensing: Ongoing Compliance Management

Congratulations – you have your MGA license! But now the real work begins.

Many licensees underestimate ongoing compliance requirements. That can get expensive.

The First 90 Days: Intensive MGA Oversight

The MGA treats new licensees like learner drivers. They look closely:

Weekly Reporting Requirements:

• Player registration statistics
• Deposit and withdrawal volumes
• Customer complaints and resolutions
• Technical issues and downtime reports
• AML alert reports (even if empty)

Monthly Deep-Dive Reviews:

• Financial performance vs. business plan
• Customer protection measures effectiveness
• Staff training record reviews
• Operational incident analysis

This is time-consuming, but shows the MGA you are compliance-focused.

Ongoing Financial Reporting Obligations

Your financial reporting duties are extensive:

Key Financial Ratios Monitored:

• Liquidity ratio: Minimum 1.2x monthly expenses
• Player funds coverage: 100% segregation at all times
• Regulatory capital ratio: Minimum 8% of gross gaming revenue
• Operational expense ratio: Maximum 85% of net gaming revenue

Ongoing AML and Player Protection

AML Monitoring Requirements:

Your AML obligations go far beyond the license application:

• Transaction monitoring: Automatically flag all transactions over €10,000
• Enhanced due diligence: For customers with monthly deposits over €2,000
• Suspicious activity reports: Report to FIAU within 72 hours
• Customer risk scoring: Ongoing assessment based on player behavior

Player Protection Monitoring:

Technical Compliance and Updates

Mandatory Technical Audits:

The MGA requires regular technical checks:

• RNG testing: Semi-annually for all active games
• Security penetration tests: Quarterly by certified testers
• Data protection audits: Annually with GDPR focus
• Disaster recovery tests: Semi-annually with documented results

Software Update Approval Process:

Every software update must be reported to the MGA:

1. Minor updates: 10 days’ prior notice
2. Major updates: 30 days + testing requirements
3. New games: Complete re-certification required
4. Payment systems: Enhanced due diligence for the provider

Staffing and Training Requirements

Continuous training obligations:

Your team must be regularly trained:

• AML training: Quarterly for all customer-facing staff
• Responsible gaming: Semi-annually with external trainers
• Data protection: Yearly with GDPR updates
• Technical security: Ongoing for IT staff

Key Personnel Changes:

Staff changes in key positions must be notified to the MGA in advance:

Annual Compliance Review

Annual Compliance Attestation:

Each year, you must submit a comprehensive compliance confirmation:

• Detailed compliance officer report
• External audit findings and management responses
• AML risk assessment update
• Player protection effectiveness review
• Technical infrastructure assessment
• Business plan performance review

Ongoing Compliance Costs

Annual Compliance Costs (realistic planning):

These are direct compliance costs. Add personnel and infrastructure costs on top.

Measuring Success: KPIs for Sustainable Operations

Compliance KPIs you should monitor:

• Compliance incident rate: Less than 2 per quarter
• MGA response time: All queries handled within 5 business days
• Player complaint resolution: 95% within 48 hours
• AML false positive rate: Under 15% of all alerts
• Technical uptime: Minimum 99.5% monthly

An MGA license is not a sprint, but a marathon. Plan your compliance capacity for the long term.

Done right: you build a sustainable, profitable gaming business. Done poorly: leads to license revocation and years of legal headaches.

The choice is yours.

Frequently Asked Questions About the Malta Gaming License

How long does it really take to get an MGA license?

Realistically, plan for 9–12 months from first preparation to license issuance. The MGA quotes 6–9 months for processing, but thats for fully complete applications. Preparation takes an additional 3–6 months.

Can I apply for an MGA license without presence in Malta?

No, that’s impossible. You need a registered Maltese company with real business premises and Malta-resident key personnel. Letterbox companies are strictly rejected.

What happens if my MGA application is rejected?

The €25,000 application fee is lost. You can reapply after 12 months but must address the reasons for rejection in detail. A rejection also makes it much harder to apply in other jurisdictions.

How much capital do I actually need for an MGA license?

Minimum capital is €40,000 for Class 1 licenses, but you realistically need €250,000–€500,000 for a successful start. Plus €100,000+ operating capital and liquidity for 12–18 months of operation.

Can I operate throughout Europe with an MGA license?

Generally yes, but many EU countries have additional local requirements. Germany, France, Italy, and Spain require separate local licenses or registrations for their markets.

What ongoing costs follow license issuance?

Expect €135,000–€200,000 annually just for compliance costs (license fees, audits, consultancy). Add annual operating costs for staff, software, marketing of a further €300,000–€800,000.

Do I absolutely need a Malta-resident compliance officer?

Yes, at least one of your key officers must be Malta resident. The compliance officer also needs specific gaming qualifications (CAMS or equivalent) and proven industry experience.

How strictly does the MGA monitor new licensees?

Very strictly. In the first 90 days, you must submit weekly reports and monthly reviews. Even afterwards, monthly financial reports and quarterly compliance updates are mandatory. Violations quickly lead to sanctions.

What is the difference between Class 1 and Class 2 licenses?

Class 1 allows direct gaming to end-users (B2C). Class 2 is for gaming software providers and B2B services. Class 1 costs €25,000 annually, Class 2 only €15,000 – but with more limited business options.

Can I use my existing gaming software for Malta?

Only if it is certified by MGA-accredited labs. All RNGs must be tested, all games need fairness certificates. Non-certified software will result in license rejection. Budget €15,000–€30,000 for software testing.