Asia Desks · Singapore · Ho Chi Minh 800+ licences delivered · 50+ jurisdictions
Home / Jurisdictions / Malta — MGA
🇲🇹 Malta — EU premium tier

Malta — MGA licence.

The Malta Gaming Authority is the gold standard EU iGaming licence — passportable across the EU and universally recognised by payment processors.

Timeline
4—6 mo
Filing to grant
Min. Capital
€40K — €100K
B2B / B2C tier
Year-1 Cost
€180—320K
Fully loaded
Regulator
MGA
Malta Gaming Authority
01 — Is this right for you?

A considered route,
not a shortcut.

This jurisdiction rewards operators who treat the application as the start of a supervisory relationship.

A strong fit

When this is the right choice

Operators targeting regulated EU markets
MGA is recognised under the EU framework and respected by most national regulators. The brand signal with payment processors, banks, and players is materially stronger than offshore alternatives.
B2B platform and live-dealer providers
Malta's B2B framework supports content suppliers, RNG providers, aggregators, and live-casino studios with permissioned operational scope and routine certification support.
Operators with EU substance and capital
Malta demands real local office, key-function holders resident in Malta, and statutory audit. Operators who can support this graduate from offshore to MGA without retrofitting compliance.
A poor fit

When to consider an alternative

Capital-light startups testing a product
Year-one MGA spend rarely runs under €180K. Operators still validating product-market fit are better served by Curaçao or Anjouan to launch and Malta to scale.
Operators with thin compliance benches
MGA expects mature MLRO, DPO, key-function holders, and ongoing reporting cadence. A skeleton compliance team will accumulate findings quickly.
Pure crypto casinos with no fiat rails
MGA permits crypto-funded play under a separate authorisation track, but most operators still settle fiat. A crypto-only model fits Anjouan or Curaçao better.
03 — Path to grant

Phases to licence grant.

Pre-application & policy

Weeks 1—8

MGA pre-application meeting completed. Corporate entity and governance structure established. Responsible gaming, AML, and technical compliance policies drafted to MGA standard.

Submission

Weeks 8—12

Full application submitted to MGA including system certification, key function appointments, business risk assessment, and financial projections.

MGA review & RFI

Months 3—5

MGA conducts detailed review of the application. Fit-and-proper assessment of key persons, technical compliance audit, and AML framework evaluation conducted.

Operational compliance & go-live

Months 5—6

Compliance conditions resolved. Operating licence issued. Platform goes live under ongoing MGA supervision — quarterly reporting, audit obligations, and player fund protection active.

04 — Year-one economics

Cost and regulatory
burden.

Year-one spend is dominated by substance — resident director, office, compliance officer, external audit — not the licence fee itself.

Cost itemAmount
Application fee €5,000
Annual licence fee (B2C, by type) €25,000 — €35,000
Compliance contribution (% of GGR) 0.4% — 1.25%
Local substance (office, KFHs) €80,000 — €160,000 / yr
External audit & MLRO €40,000 — €70,000 / yr
Year-1 total ~€180K — €320K

Malta corporate tax: nominal 35%, with refund mechanisms reducing the effective rate to ~5% for trading subsidiaries. EU-passportable in most B2B contexts.

05 — Common questions

What founders
ask before filing.

The questions we get on every diagnostic call. If yours isn't here, raise it in the consultation.

The licensee must be an EEA-registered company, in practice a Malta-incorporated entity. Foreign parents own the Malta entity directly. Key-function holders (CEO, COO, MLRO, DPO, KFH for player protection, finance, and IT) must include Malta-resident individuals for the substance test.
MGA permits crypto play under a specific authorisation extension. The capital, substance, and audit burden is the same as fiat operations. Operators whose model is strictly crypto-native, low-volume, or serving grey markets typically find Anjouan or Curaçao more proportionate.
UKGC is stricter on UK-facing operations but commercially essential for UK GGR. Isle of Man is comparable in prestige with slightly lighter cost. Most European operators choose MGA as the EU passport, then add UKGC for UK exposure and IOM for B2B supply specifically.
MGA charges a compliance contribution as a percentage of Gross Gaming Revenue, banded by game type — 0.4% to 1.25% depending on classification. This is separate from corporate tax and the flat annual licence fee. The combined effective regulatory load is materially lower than the UK's 21% remote gaming duty.
Quarterly compliance audits, statutory annual financial audit, AML/CFT reporting to FIAU, key-function holder reporting changes, and the MGA Compliance Audit programme. MGA conducts thematic reviews periodically. Failures result in fines, findings, and — in serious cases — licence suspension.
Ready when you are

Tell us where
you want to
operate.

Forty-five minutes with a partner. Jurisdiction memo within seven days. No retainer required to start.

GSS Legal consultation
45 min
First call with a partner.
No retainer required.