malta flag corrected

Malta Gambling License

Last Update:

Gofaizen & Sherle supports casino, betting and gaming software businesses with route assessment, company setup, application documents and Malta Gaming Authority (MGA) filing. The initial assessment identifies preparation gaps and the proposed scope. Approval remains MGA’s decision. Target-market access requires separate assessment.

Malta’s Bill 55 framework is a key consideration for operators assessing protection against qualifying claims and enforcement of foreign judgments in Malta.

Application Essentials

ItemPosition
RegulatorMalta Gaming Authority
RoutesB2C Gaming Service Licence / B2B Critical Gaming Supply Licence
EntityMalta or another EU/EEA company
Capital€40,000 or €100,000 for a single category
Application fee€5,000, non-refundable
Annual feeB2C normally €25,000, solely Type 4 €10,000. B2B varies
TermNormally 10 years, with continuing obligations
AuditApproved independent system auditor
PreparationEstimated after assessment, separately from MGA review

See the MGA eligibility FAQs. Detailed cost categories follow below.

Is This Right for Your Business?

  • May fit: Funded casinos, sportsbooks, game developers and critical back-office suppliers ready for ongoing supervision.
  • May not fit: Projects lacking governance, AML/KYC, player protection or operating budgets, or seeking immediate, unrestricted international launch.
  • Requires assessment: Group structures, foreign-license recognition and white-label models. Establish who contracts with customers, controls operations and holds player funds.

Bill 55: Protection for Malta-licensed Operations

Bill 55 became law in 2023, introducing Article 56A of the Gaming Act. It establishes a Maltese public-policy safeguard against certain actions concerning authorized gaming operations and recognition or enforcement of qualifying foreign judgments in Malta.

The MGA explains that the protection requires both conditions:

  1. The action conflicts with or undermines the legality of Malta’s gaming framework.
  2. It relates to activity lawful under the Gaming Act and the instruments applicable to the licensee.

For qualifying actions, Article 56A directs Maltese courts to refuse recognition or enforcement of the resulting foreign judgments.

For operators, this matters when assessing exposure to cross-border player claims and enforcement against assets in Malta. The provision is not blanket immunity from lawsuits, does not prevent enforcement elsewhere and does not authorize entry into markets requiring a local license. Its application must be assessed against the particular claim and applicable EU law.

Which Authorization Applies?

Client roleRoute and approved scopeCondition
Player-facing operatorB2C gaming servicesApproved product verticals
Game/systems supplierB2B critical gaming supplyActual supply determines scope
Back-office providerB2B essential-record/control softwareFunction-specific assessment
Foreign license holderRecognition NoticeEligible authorization and MGA recognition

The B2C and B2B routes serve different roles. Group licensing requires parent control exceeding 90% through shareholding or voting rights.

A Recognition Notice concerns an eligible EU/EEA or equivalent foreign authorization for services in or from Malta. Certificates last one year, with annual maintenance review.

Covered Activities

Gaming Types 1–4 are product classifications, not four separate licenses:

  1. Type 1: Casino, live casino, virtual sports, house-banked poker and lotteries.
  2. Type 2: Fixed-odds betting, including live betting.
  3. Type 3: Pool betting, exchanges, peer-to-peer poker/bingo and lottery messenger services.
  4. Type 4: Controlled skill games.

B2B supply includes material game elements and qualifying essential-record/control systems. White label, lottery, affiliate and payment models need individual review.

What Gofaizen & Sherle Handles

G&S coordinates company formation in Malta, application preparation, regulator communication and operational readiness. Support follows the selected package, with business-plan, technical-audit and post-licensing work agreed around the project.

The client provides accurate ownership, funding and operating evidence. Gofaizen & Sherle can provide specialists under Full Required Setup. The applicant remains responsible for appointments and applicable approvals. An approved independent auditor assesses systems. MGA, banks/PSPs and tax advisers make their respective assessments.

Official Fees

The MGA fee guidance provides:

ChargeAmount
Application€5,000
B2C annual fee€25,000, solely Type 4 €10,000
B2B game-provider annual fee€25,000 at revenue ≤€5m, €30,000 above €5m up to €10m, €35,000 above €10m

Solely Type 4 suppliers pay €10,000 annually. Back-office software fees are €3,000 at revenue ≤€1m and €5,000 above it.

B2C revenue-based compliance contributions have ordinary annual minimum/maximum amounts of:

€15,000/€375,000 for Type 1

€25,000/€600,000 for Type 2

€25,000/€500,000 for Type 3

€5,000/€500,000 for Type 4.

First-year and qualifying startup provisions can modify obligations.

Capital

The May 2025 capital policy requires €100,000 for B2C Type 1 or 2 and €40,000 for Type 3, Type 4 or B2B critical supply. Multiple B2C types accumulate, capped at €240,000. Qualifying funds comprise paid-up share capital and share premium reserves, with continuing equity requirements. Working-capital needs require separate assessment.

Your iGaming Expert

Kiryl Zaremba
Kiryl Zaremba
Senior Associate, Head of Product (iGaming & Forex)

Application Process

  1. Assess: Gofaizen & Sherle and the client agree the route, markets and scope.
  2. Prepare: The client provides evidence. Gofaizen & Sherle supports company setup and documentation.
  3. Submit: MGA reviews fitness and propriety, funding, business viability and operations.
  4. Audit: The applicant implements the setup. An approved independent auditor assesses it.
  5. Launch: After approval, the client completes launch formalities.

The official application guidance distinguishes these stages. Submission does not permit live operations.

What Information Do We Need?

  • Company records, shareholders, UBOs and ownership chart.
  • Directors, managers and proposed key function holders.
  • Sources of funds/wealth, capital, business plan and forecasts.
  • Game types, customer model and target markets.
  • Platform, suppliers, hosting, payments and transaction volumes.
  • Existing policies, technical documents and previous applications.

This supports initial assessment. The applicable SDC determines the complete filing requirements.

Preparation and Review Timeline

Owner/stageTiming basis
G&S/client preparationEstimate after document and readiness review
MGA assessmentCompleteness, due diligence and responses
Applicant implementation60 days after the relevant technical review and instruction
Approved auditorScheduling, findings and remediation
Client launchWithin 90 days of license issuance

The 60-day implementation period is not an approval SLA. Launch formalities and bank/PSP readiness require separate planning.

Regulatory Framework

Authorization rests on the Gaming Act, Chapter 583, Gaming Authorisations Regulations and Gaming Authorisations and Compliance Directive. It covers approved activities under continuing supervision, without replacing foreign permissions.

Current Status

Last reviewed: 14 September 2026

ConfirmedProject-specific check
B2C/B2B routesActual contractual role
Published fees and capitalActivity, revenue and applicable provisions
Application checklistsCurrent technical documents and evidence
Independent auditApproved provider, scope and findings

Check entities and authorized activities in the Licensee Register.

Target-Market Access

There is no automatic EU authorization. The European Commission confirms that countries need not recognize another member state’s gambling license.

MarketMalta authorizationBefore launch
MaltaApproved service/supplyMeet local conditions
Other EU/EEANo automatic entitlementAssess national permissions and restrictions
United KingdomDoes not replace local licensingObtain applicable UK permissions
ElsewhereNo blanket market accessCountry-specific assessment

The Gambling Commission requires separate permissions for remote businesses serving Great Britain. Exclude markets until the relevant checks are complete.

Ongoing Obligations

  • Reporting: Gaming tax, contributions, player-funds/B2B reports, Industry Performance Returns (IPR), interim accounts and audited statements. Applicable monthly returns are due by the 20th of the following month under the reporting requirements.
  • AML/KYC: B2C Types 1–3 require risk-based controls and an MLRO, including FIAU registration and MGA key-function approval under the AML guidance.
  • Players: Funds protection, responsible gaming, self-exclusion, complaints and alternative dispute resolution.
  • Governance: Maintain key functions, outsourcing oversight and required technical/material-change approvals or notifications.

Regulatory Risks

Unauthorized activity, reporting failures, player-fund shortfalls, AML breaches and unapproved changes can trigger penalties, suspension or cancellation. See the Enforcement Register.

Banking, EMI and PSP Readiness

A license does not guarantee account acceptance. Each provider applies its own requirements.

Provider checkClient evidenceG&S supportLimitation
OwnershipUBOs, fundingOrganize recordsIndependent checks
BusinessMarkets, AML controls, suppliersExplain scopeRisk appetite
PaymentsPlayer funds, transaction flowsClarify modelAccount assessment
ProcessingGross gaming revenue, volumes, chargebacksCoordinate evidencePricing/reserves

Provider charges are distinct from Gofaizen & Sherle fees and the MGA application fee.

Taxation

The 5% gaming tax applies to gaming revenue from players physically present in Malta. B2C compliance contributions are separate.

The standard corporate tax rate is 35%. Shareholder refunds after dividend distributions depend on eligibility and circumstances. Do not assume a universal 5% effective rate. Corporate treatment, VAT and cross-border flows require individual tax advice.

Alternatives

Compare the same products and markets. These routes are not interchangeable.

JurisdictionRegulator/model and fitCapital, fees and review
MaltaMGA B2C/B2B, with country-specific market checksActivity-based capital/fees above, suitability and technical review
United KingdomGambling Commission permissions for the UK market, including relevant software activitiesFunding assessment, activity-based fees and separate application review
Isle of ManGSC online gambling framework for a local operationStructure/funding and license-specific fees, inspectorate review and hearing
CuraçaoCGA under LOK, subject to target-market checksCurrent capital, local setup, fees and authorization assessment

See the British fee resources, Isle of Man application guidance and Curaçao framework. Historical Curaçao sublicense assumptions should not guide a new application. Timelines depend on the selected process. Banking remains a separate provider decision in every jurisdiction.

Frequently Asked Questions

B2C or B2B?

B2C covers player-facing services. B2B covers critical gaming supply.

Are Types 1–4 separate licenses?

No. They classify products requiring appropriate approvals.

Must the company be Maltese?

No. EU/EEA companies may apply, subject to applicable requirements.

What is Bill 55?

Bill 55 introduced protections against certain claims and enforcement of foreign judgments in Malta where the claims undermine Malta’s gaming framework and concern activities lawful under it. It does not provide blanket immunity or replace licenses required in other countries.

What capital is needed?

€40,000 or €100,000 per category, with cumulative B2C requirements capped at €240,000.

Is €5,000 the total official cost?

No. Annual fees and applicable contributions are additional.

How is the application filed?

Through the MGA Licensee Portal, with the applicable checklist and supporting evidence.

Can approval timing be guaranteed?

No. Preparation estimates do not bind MGA or independent providers.

Does an established platform remove the audit?

No automatic exemption applies. The System Audit Checklist concerns the applicant’s setup.

Does approval cover Europe?

No automatic authorization exists. Assess each target country.

Who can hold key functions?

Suitable, competent individuals with MGA approval, accounting for capacity and role conflicts.

Does every business need an MLRO?

MGA AML requirements cover B2C Types 1–3. Do not automatically extend identical obligations to B2B or solely Type 4.

Is a bank/PSP account guaranteed?

No. Providers make independent onboarding decisions.

Is corporate tax always 5%?

No. The standard rate is 35%. Refund eligibility and individual circumstances matter.

What is the license term?

Normally 10 years, subject to ongoing obligations and possible earlier enforcement action.

When can the business go live?

After required approvals and preparations. MGA specifies launch within 90 days of issuance, with a declaration at least two days beforehand.

Kiryl Zaremba
Kiryl Zaremba
Senior Associate, Head of Product (iGaming & Forex)
Leonid Turok
Leonid Turok
Associate Partner, Head of Consulting (iGaming & Forex)
Get in touch
Phone *
Estonia +372 Estonia

    Connect with our experts

    Our experts will tell you how to do it as quickly and easily as possible.

    Estonia

      By clicking the button, I confirm that I have read the privacy policy and consent to the collection and processing of my personal data in accordance with the GDPR rules.

      Thank you

      Thank you for reaching us. Our team is working on your request, and we will contact you soon.

      Message not sent