B2C gaming service
One MGA B2C licence can cover approved game verticals grouped into Types 1 to 4, subject to the exact channel, approvals and licence conditions.
Specialist regulator dossier
The Malta Gaming Authority (MGA) regulates licensable gaming offered in or from Malta. Its principal operating routes are the B2C Gaming Service Licence and the B2B Critical Gaming Supply Licence. Approved gaming verticals sit within those licences and are grouped into Types 1 to 4 for regulatory, capital and fee purposes; they are not four transferable licences. Corporate group treatment, recognition of eligible foreign gaming permissions, limited-duration lotteries, low-risk permits, key-function certificates and premises or technical approvals each have a different legal effect. MGA status does not authorise banking, payments, e-money, foreign exchange, investment, funds, insurance, credit, crypto-assets, fiduciary services or pensions. This dossier maps both sides of that boundary as of July 2026.

Route facts
One MGA B2C licence can cover approved game verticals grouped into Types 1 to 4, subject to the exact channel, approvals and licence conditions.
Critical game elements and software that creates, controls or processes essential regulatory records require the applicable MGA B2B licence or recognised status.
The licence belongs to the approved entity; controllers, directors, funding and persons performing prescribed key functions are assessed separately.
Current MGA capital policy, positive-equity expectations and player-fund protection operate alongside fees, tax and compliance contribution rules.
An MGA licence is not an EU financial passport or automatic permission to target players in every country; destination-market gaming law must be checked.
Last reviewed against official MGA legislation, application guidance, registers and 2025 capital policy on 11 July 2026.
Classify the role first
A B2C licence is for offering or operating a gaming service to players. A B2B licence is for critical gaming supply, including management of material game elements or specified software and control systems that handle essential regulatory records. The Types 1 to 4 describe game groupings beneath the licence: casino, house-banked poker, lotteries and virtual sports sit in Type 1; fixed-odds betting in Type 2; pool, exchange and peer-to-peer models in Type 3; and controlled skill games in Type 4. Adding a vertical can require prior approval and technical evidence. A business should therefore describe the licence, channel and every approved vertical, not advertise a bare type number as if it were an unrestricted permission.
Other instruments solve narrower problems. A Recognition Notice recognises an eligible foreign gaming authorisation for gaming service or supply in or from Malta after MGA review and annual maintenance; it is not a new home-state licence and does not widen the foreign grant. A limited-duration licence is confined to qualifying temporary lottery or lottery-style events. Low-risk games use event-specific permits. Key-function and material-supply certificates approve a person or supply function, not a B2C operation. A pending portal file, company registration, game certificate, domain, payment account or software contract grants no gaming authority.
The MGA opened a targeted consultation on 29 April 2026 concerning possible changes to the Recognition Notice framework. Those proposals, and any proposed Authorised Application Manager framework, are not treated in this dossier as live permissions. Only formally commenced instruments and entries in the effective official registers should be described as current status.
Gaming permission matrix
| Permission family | Instrument and scope | Activities and exclusions | Entry and resource basis |
|---|---|---|---|
| Permission family B2C Gaming Service Licence - Type 1 | Instrument and scope MGA B2C licence with prior approval for the relevant Type 1 verticals and remote, land-based or combined channel | Activities and exclusions Casino and live casino, house-banked poker, lotteries, secondary lotteries and virtual sports where individually approved; no Type 2, 3 or 4 product follows unless added to the licence | Entry and resource basis Maltese or eligible EU or EEA entity, suitable owners and key persons, viable business and funding, EUR 100,000 paid-up Type 1 capital, positive equity, policies, technical set-up and system audit |
| Permission family B2C Gaming Service Licence - Type 2 | Instrument and scope MGA B2C licence with approval for fixed-odds betting, including live betting, and the selected channel | Activities and exclusions Offer approved fixed-odds markets and settle players under the authorised rules; exchange, pool, casino and controlled-skill products need their own type or vertical approval | Entry and resource basis EUR 100,000 paid-up Type 2 capital and positive equity, odds and risk controls, sports-integrity and suspicious-betting processes, player protection, AML/CFT, technical and financial evidence |
| Permission family B2C Gaming Service Licence - Type 3 | Instrument and scope MGA B2C licence with approved Type 3 verticals for pool, exchange, peer-to-peer or commission-based gaming | Activities and exclusions Pool betting, betting exchange, peer-to-peer poker or bingo, other eligible peer-to-peer games, lottery messenger or commission-based models only as approved | Entry and resource basis EUR 40,000 paid-up Type 3 capital and positive equity, transparent commission and liquidity model, player-fund and collusion controls, game rules, responsible gaming, AML/CFT and tested systems |
| Permission family B2C Gaming Service Licence - Type 4 | Instrument and scope MGA B2C licence with approval for controlled skill games under the Maltese classification | Activities and exclusions Offer only skill games classified and approved within Type 4; describing a product as skill-based does not remove classification, player-protection or technical review | Entry and resource basis EUR 40,000 paid-up Type 4 capital and positive equity, classification evidence, rules, fairness and technical evidence, governance, player funds, responsible gaming, complaints and reporting |
| Permission family B2B Critical Gaming Supply - material game elements | Instrument and scope MGA B2B licence to supply and manage material elements of a game in the statutory Malta nexus | Activities and exclusions Provide approved game content or material game elements to operators; it does not permit offering games directly to players or unrelated material and ancillary supplies | Entry and resource basis Eligible entity, suitable ownership and key persons, EUR 40,000 paid-up B2B capital and positive equity, product and client map, game certification, change control, information security and audit readiness |
| Permission family B2B Critical Gaming Supply - regulatory software and control systems | Instrument and scope MGA B2B licence for software or control systems that generate, capture, control or process essential regulatory records | Activities and exclusions Supply and manage the approved back-office, essential-component or control-system function; general hosting, support and material supply require separate perimeter analysis | Entry and resource basis EUR 40,000 paid-up B2B capital and positive equity, architecture and data flows, access and change controls, security, resilience, record integrity, outsourcing, testing and independent system-audit evidence |
| Permission family Corporate Group Licence | Instrument and scope MGA B2C or B2B corporate group treatment where the parent has the required greater-than-90-percent control and the approved group is fully mapped | Activities and exclusions Covers the entities, services and supplies stated in the group authorisation; external critical supply can still require B2B scope and the nominal holder retains primary payment and reporting duties | Entry and resource basis Group structure, ownership and voting rights, nominal holder, allocation of services, joint responsibilities, consolidated funding and each entity's fitness, systems and regulatory obligations |
| Permission family Recognition Notice | Instrument and scope MGA certificate recognising an eligible EU, EEA or equivalent-safeguards foreign gaming authorisation for use in or from Malta | Activities and exclusions Only comparable B2C services or B2B supplies within the underlying foreign licence and certificate; it creates no broader vertical, territory or financial permission | Entry and resource basis Certified licence, good-standing evidence, directors and domains, legal opinion on territorial scope, comparability, oversight and AML/CFT, plus one-year certificate maintenance, current EUR 5,000 annual fee and change submissions |
| Permission family Limited-Duration Licence | Instrument and scope MGA temporary licence under the Gaming Authorisations and Compliance Directive for an eligible singular event or linked instances | Activities and exclusions Only temporary lotteries and lottery-style games, including eligible progressive lotteries and scratch cards, within the authorised event and period; not a recurring operating shortcut | Entry and resource basis Event, organiser, rules, duration, funding, prize and player-protection evidence must satisfy the current application route; statutory duration and annual aggregation limits apply |
| Permission family Low-Risk Game Permit | Instrument and scope MGA event permit for qualifying non-profit games or limited commercial communication games under the low-risk framework | Activities and exclusions Conduct the singular event described in the permit and within current stake, prize, proceeds and purpose conditions; the permit expires with the event and is not a B2C licence | Entry and resource basis Applicant and beneficiary details, game rules, event timing, declarations and payment evidence; the current permit conditions and filing lead time must be met |
Land-based and ancillary matrix
| Permission or status | Instrument and scope | Activities and exclusions | Entry and evidence basis |
|---|---|---|---|
| Permission or status Land-Based Casino Concession and B2C Licence | Instrument and scope Government casino concession followed by MGA B2C gaming authorisation and approved premises, games and devices | Activities and exclusions Operate the casino, tables and EGMs stated in the concession and licence; a remote B2C licence, ordinary premises approval or company registration cannot replace the Government concession | Entry and evidence basis Eligibility begins with an available concession process; concession terms, ownership and funding, Type 1 capital, key persons, premises, games, AML/CFT, surveillance, player protection and daily inspection readiness apply |
| Permission or status Commercial Bingo Hall B2C Licence and Premises Approval | Instrument and scope MGA land-based B2C licence plus approval and continuing maintenance of each commercial bingo or tombola premises | Activities and exclusions Offer approved 90-number commercial bingo in the authorised hall; no casino, remote game, unrelated premise or broader type follows without the relevant approval | Entry and evidence basis Entity and owner fitness, Type 1 basis where classified, business and financial plan, key persons, premises, game rules, systems, player protection, inspection and current premises fee evidence |
| Permission or status Controlled Gaming Premises Certificate and Device Approval | Instrument and scope MGA land-based B2C licence, Planning Authority permit, MGA premises certificate and approval or registration for each relevant EGM and associated equipment | Activities and exclusions Offer authorised games through approved machines at each certified premises; a premises no-objection, planning permit, device model or B2C licence alone is insufficient | Entry and evidence basis Location and access controls, self-exclusion, surveillance, Type 1 or 2 scope, certified games and hardware, technical passport, independent testing, device inventory, inspections and current fees |
| Permission or status National Lottery Concession and Licence | Instrument and scope Exclusive Government concession and MGA National Lottery Licence currently held by National Lottery plc through 4 July 2032 unless it ends earlier | Activities and exclusions Operate Malta's National Lottery and approved outlets within the exclusive concession; it is not an open parallel licence family or a route created by an ordinary B2C application | Entry and evidence basis A future operator would require a new Government procurement or concession process and subsequent MGA licence, with ownership, funding, technology, outlets, games, key persons, player protection and compliance evidence |
| Permission or status Material Gaming Supply Certificate or B2B Approval | Instrument and scope MGA certificate for a material supply provider, or voluntary inclusion and approval of material supplies within a B2B licence under Directive 3 Part V | Activities and exclusions Supply approved non-critical material gaming products or services; it does not cover critical game elements, essential regulatory software, direct B2C service or unrelated financial activity | Entry and evidence basis Supplier identity, ownership and suitability, service description, customer and outsourcing map, technical and security evidence, contractual responsibility and the current certificate or case-by-case approval file |
| Permission or status Key Function Certificate and Director Approval | Instrument and scope MGA certificate of approval for each prescribed key function, with prior approval for directors or equivalent office holders where the directive requires it | Activities and exclusions Perform only the approved function for the identified licensee or licensees; a certificate is personal, does not license the gaming entity and cannot combine functions the MGA considers conflicting | Entry and evidence basis Individual fitness, competence, role knowledge, access, time and availability, declarations and ongoing notification duties; the current application fee is EUR 50 per role |
| Permission or status Game Vertical, Game Engine, RNG and Essential-Component Approval | Instrument and scope MGA prior approval, certification or notification procedure under Directive 3 for new verticals, games, random number generators, engines and material technical changes | Activities and exclusions Add only the approved vertical or technical element to an existing licence; the approval has no independent B2C, B2B, premises, payment or target-country effect | Entry and evidence basis Classification, rules, mathematics and fairness, accredited testing or certification, system and data-flow changes, security, provider authorisation, technical documents and audit evidence depend on the change |
| Permission or status Non-Profit Tombola or Lottery Permit | Instrument and scope MGA singular-event low-risk permit for an eligible non-profit tombola, bingo or lottery | Activities and exclusions Conduct the event where the current stake ceiling and required proportion of net proceeds for an eligible charitable, sporting, religious, cultural, educational, social or civic purpose are met | Entry and evidence basis Non-profit status and governing documents, beneficiary, venue, rules, draw or session controls, minors protection, event statements, declarations, fee and current filing lead time |
| Permission or status Limited Commercial Communication Game Permit | Instrument and scope MGA low-risk singular-event permit for a promotional game with a separately permitted limited stake and prize | Activities and exclusions Run only the promotion within current per-player, per-prize, monthly and annual limits; exceeding the route requires reclassification and it is not a recurring B2C gaming business licence | Entry and evidence basis Promoted goods or services, rules, participant and prize limits, fair draw, minors controls, reporting, declarations and filing timing must meet the current low-risk route |
| Permission or status Commercial Communication Game Permit or Certificate | Instrument and scope MGA promotional-game approval for a game intended to promote goods or services rather than operate as an economic activity in itself | Activities and exclusions Conduct the approved promotion where payment is for the promoted product or service, subject to prize, draw and advertising conditions; it does not authorise paid gambling as a principal business | Entry and evidence basis Promoted product, terms, participation and prize data, draw method, fairness, minors protection, advertising with permit number, inspection and current fee evidence |
| Permission or status Cruise Casino Permit | Instrument and scope MGA call-specific permit for an eligible passenger cruise ship moored in Malta or Maltese territorial waters | Activities and exclusions Operate the approved onboard casino only for registered passengers and during the permitted call and hours; it is not a Malta land-casino concession or continuing remote licence | Entry and evidence basis Eligible cruise ship and voyage, passenger capacity, casino and game details, ownership and officials, responsible-gaming and security controls, call schedule, portal filing and current fee |
| Permission or status De Minimis Game Exemption | Instrument and scope Statutory exemption from licence or permit under the De Minimis Games Directive when every cumulative condition remains met | Activities and exclusions Lottery or raffle only, with stake no more than EUR 1, prize no more than EUR 100, no result based on another game, no more than two per month and ten per year per organiser | Entry and evidence basis No permit is issued; the organiser must retain classification and event evidence and move to the applicable permit before any criterion or frequency limit is exceeded |
| Permission or status Exhibition of Gaming Devices Approval | Instrument and scope MGA event approval under the Gaming Devices Exhibition Ruling for machines shown at a fair, exhibition or similar event | Activities and exclusions Display the identified devices solely for exhibition; the machines may not be used to provide a gaming service and the approval is not a device, premises or B2C operating licence | Entry and evidence basis Device count and description, event location and duration, safeguards against play and signed declaration, together with the current application and fee |
| Permission or status Amusement Machine Registration | Instrument and scope MGA registration of each machine used in premises accessible to the public under the Amusement Machines Directive | Activities and exclusions Make available a machine whose exclusive purpose is amusement and not gambling; any stake, prize or mechanics that create gambling require reclassification before operation | Entry and evidence basis Machine and game description, images and documents, premises or event details, non-gambling declaration, registration before use and current per-machine fee |
Financial perimeter boundary
| Adjacent family | Competent route | MGA exclusion and classification test |
|---|---|---|
| Adjacent family Banking and deposit taking | Competent route MFSA and, for Maltese credit institutions, the applicable euro-area banking authorisation framework | MGA exclusion and classification test An MGA licensee may hold operational and player-fund accounts but cannot accept public deposits or conduct banking merely because it receives stakes or pays winnings |
| Adjacent family Payments, e-money, remittance and foreign exchange | Competent route MFSA PI, EMI, payment, e-money or currency-service analysis under Maltese and EU financial law | MGA exclusion and classification test Taking stakes and paying prizes inside the approved game is not a general payment licence; wallets, remittance, acquiring for third parties, e-money and FX services require separate classification |
| Adjacent family Investment, custody, brokerage and trading venues | Competent route MFSA investment-services or market-infrastructure permission under the applicable Maltese and EU regime | MGA exclusion and classification test An MGA game, wallet or token approval does not permit securities dealing, portfolio management, financial-instrument custody, investment advice or operation of a MiFID venue |
| Adjacent family Funds, managers, administration and depositaries | Competent route MFSA fund, manager and service-provider routes described in the separate Malta MFSA dossier | MGA exclusion and classification test Pooling stakes, maintaining jackpots or administering player balances is not UCITS or AIF authorisation and cannot be used for collective investment or depositary services |
| Adjacent family Insurance, reinsurance and intermediation | Competent route MFSA insurer, reinsurer or insurance-distribution authorisation or registration | MGA exclusion and classification test Guarantees, bonuses, prize protection or game mechanics do not authorise underwriting or insurance distribution; an insurance product needs its own provider and classification |
| Adjacent family Credit, mortgages, leasing, factoring and crowdfunding | Competent route MFSA or another Maltese statutory route depending on lending, consumer, intermediary and ECSPR activity | MGA exclusion and classification test Player credit, merchant finance, balance-sheet lending, broking, leasing, factoring and investment or lending crowdfunding are outside MGA gaming authority and must be tested separately |
| Adjacent family Crypto-assets, MiCA and AML-only status | Competent route MFSA Article 63 MiCA authorisation or eligible Article 60 notification, with applicable AML/CFT registration and supervision | MGA exclusion and classification test Accepting crypto as a payment method, using an in-game token or holding an MGA licence is not CASP authority; exchange, custody, transfer and platform services need explicit MiCA analysis |
| Adjacent family Trust, company, fiduciary and administration services | Competent route Malta Business Registry, MFSA or reserved professional framework according to the company, trustee, fiduciary, nominee, custody or administration function | MGA exclusion and classification test An MGA corporate group, nominee arrangement or operational administration does not license third-party company formation, trusteeship, fiduciary ownership, asset custody or fund administration |
| Adjacent family Pensions and retirement products | Competent route MFSA retirement-scheme, administrator or related investment-services route | MGA exclusion and classification test Employee benefits, player loyalty balances or long-term prize structures are not pension permissions; retirement products and administration require their own statutory status |
Entry test
An MGA application discloses the legal entity, full direct and indirect ownership, ultimate beneficial owners, directors, funding and the people who will perform key functions. Fitness and propriety is continuing, not a one-time document check. The business plan must reconcile revenue, player acquisition, countries, suppliers, payment methods, game providers, tax and fee assumptions, staffing and liquidity. Operating policies cover governance, AML/CFT, responsible gaming, marketing, player support, complaints, fraud, sports integrity where relevant, data protection, information security, outsourcing, incident management, continuity and wind-down. Prescribed key functions need MGA-approved persons with sufficient knowledge, access, competence and availability.
Financial resources depend on the authorised types and supply model. The May 2025 Capital Requirements Policy, in force with its stated transitional terms, prescribes EUR 100,000 for B2C Type 1 and Type 2, EUR 40,000 for Type 3 and Type 4, and EUR 40,000 for B2B critical supply. Multiple B2C types are cumulative up to EUR 240,000, and the policy requires a positive-equity position. B2C operators separately protect player funds and maintain the required reporting and payment arrangements. The System Documentation Checklist, technical set-up review and independent system audit must match the production architecture, essential components, data locations, integrations and controls. Capital, a system certificate or a bank letter cannot cure an unviable or incomplete operating model. At the review date, the published new or renewal gaming-licence application fee is EUR 5,000, a Key Function Certificate application is EUR 50 per role and a qualifying- interest request is EUR 1,500. The current fee regulations control at filing.
Application path
Classify B2C service, B2B critical supply, Government concession, recognition, temporary event, permit, certificate, registration, exemption or ancillary approval. Map remote, land-based or both, every type and vertical, premises, device, target market and group entity.
Use the current System Documentation Checklist and enclosures. Submit the entity, ownership, funding, business plan, policies, financial model, supplier map, key persons and technical documents through the designated MGA portal route.
Answer MGA due-diligence, source-of-funds, suitability, viability, operational-policy and statutory questions. Incomplete or inconsistent evidence delays or ends the file; a submission creates no operating status.
Build the set-up described in the application, complete the required technical review and independent system audit, remediate findings and demonstrate that essential components, games, records and controls operate as approved.
Put required capital and player-fund arrangements in place, appoint approved key persons, complete fees and tax registrations, obtain vertical, domain, premises and provider approvals, and confirm register publication and effective licence conditions.
After authorisation
MGA licensees maintain capital and positive equity, player-fund protection, tax and fees, compliance contribution, AML/CFT, responsible gaming, marketing, game fairness, sports integrity where relevant, complaints, key functions, outsourcing, security, incident and regulatory reporting. New channels, verticals, premises, live studios, essential components, directors and specified B2B scope changes can require prior written approval. Other changes, including qualifying shareholdings, key persons, payment methods, technical set-up and material events, engage the notification and evidence rules in force at the time. The MGA can review systems, conduct compliance audits, impose conditions and take enforcement action.
A transaction transfers shares in the licensed entity; it does not detach or sell the licence. Diligence should reconcile the MGA and enforcement registers, authorisation number, status, channel, types, verticals, domains, group coverage, key persons, suppliers, capital and equity, player liabilities, taxes, fees, complaints, audit findings, regulator correspondence and remediation. Direct and indirect ownership changes must follow the current MGA process and remain compatible with fitness and propriety. Separate MFSA or other permissions in the group have their own change-in- control procedures. No adviser can guarantee either regulator's decision.
Territorial reach
An MGA licence permits the gaming service or critical supply in the Malta nexus and within its exact grant. It is not an EU-wide gambling passport. Before targeting a country, onboarding its residents, advertising, localising a domain or accepting local payment methods, the operator must test that country's licence, monopoly, registration, blocking, tax, advertising, responsible-gaming, AML/CFT and consumer rules. A Recognition Notice addresses Malta's recognition of the underlying foreign gaming authority; it does not make that permission global. B2B customers and suppliers must also hold the status required for the critical supply and each destination market.
Verify it yourself
mga.org.mt publishes Chapter 583, Gaming Authorisations Regulations, definitions, licence fees, tax and binding directives governing MGA permissions.
The MGA Licensee Hub identifies Gaming Service and Critical Gaming Supply scope, Types 1 to 4, corporate group treatment, remote and land-based channels, casino, bingo, premises and National Lottery status.
MGA application guidance describes fit-and-proper, funding, business and operating review, technical set-up and system audit; the current Capital Requirements Policy controls capital and equity.
Official MGA pages and directives set foreign-licence evidence, one-year Recognition Notice maintenance and EUR 5,000 annual fee, limited-duration eligibility, low-risk, cruise, promotional, exhibition and machine routes.
Directive 3 and the Licensee Hub cover key-function certificates, director changes, material-supply certificates or B2B approval, verticals, games, RNGs, essential components and related certification or audit evidence.
The 29 April 2026 Recognition Notice consultation proposes enhancements only; no proposed Authorised Application Manager status is presented here as a live permission without formal commencement and a current register.
The MGA Licensee Register, Recognition Notice Register and Enforcement Register verify current entity, authorisation, status, URLs, services and published action.
No. The main B2C instrument is the Gaming Service Licence. Game verticals are approved under it and grouped into Types 1 to 4 for regulatory, capital and fee treatment. The register and licence conditions must show the actual approved scope.
No. Payment methods may support the gaming operation, but third-party payment, e-money, remittance, FX, crypto exchange, custody, transfer or platform services require separate Maltese and EU financial-perimeter analysis and, where triggered, MFSA permission.
Only after the MGA recognises an eligible foreign authorisation and issues the certificate. The evidence includes the underlying licence, good standing, territorial and comparability analysis, and other current requirements. Annual maintenance and change duties continue.
No. Gambling is not passported across the EU like certain financial services. Each country can require its own licence, registration, local entity, tax, technical, advertising and responsible-gaming compliance or can prohibit the proposed offer.
Its shares may be acquired subject to the applicable ownership-change process. The licence remains with the entity, the incoming ownership and funding remain subject to MGA scrutiny, and the exact scope, liabilities and supervisory history require diligence.
Reviewed by the SKY7 advisory team. Last reviewed: 11 July 2026. This dossier is general information, not legal, regulatory, tax, investment or financial advice. It describes the MGA framework and its boundary with financial services as of July 2026. Verify the current MGA legislation, portal guidance, registers, licence conditions, capital policy, fees, tax and destination-market rules, plus any separate MFSA or specialist permission, before relying on a route. No regulator outcome is promised.
Tell us what you need
Send the game mechanics, B2C or B2B role, channels, verticals, countries, player and supplier flows, payment and crypto functions, systems, group structure and ownership. SKY7 will separate MGA licences, approvals, notices and permits from MFSA and target- market requirements before a filing or acquisition decision. Fees are on request.