The Malta Gaming Authority (MGA) regulates remote and land-based gaming under the Gaming Act (Cap. 583). Operators hold either a B2C (Business-to-Consumer) Gaming Service Licence or a B2B (Business-to-Business) Critical Gaming Supply Licence. Recent regulatory directives emphasize enhanced player protection, AML/CFT risk management, key function oversight, and continuous statutory reporting.
Key Legal Takeaways
- MGA licences are categorized into four distinct game types across B2C and B2B operational frameworks.
- Appointment of qualified Key Function Holders (Compliance, Legal, AML, Technology, and Player Protection) is mandatory.
- Stricter ESG and Responsible Gaming reporting obligations require ongoing audits and operational transparency.
- Operators must satisfy strict financial probity, fit-and-proper checks, and maintain segregated player funds.
What Licence Categories Exist Under the Gaming Act?
The Malta Gaming Authority provides a comprehensive two-tier licensing system: B2C Gaming Service Licences for consumer operators and B2B Critical Gaming Supply Licences for software, platform, and backend providers.
Licences encompass four distinct Game Types: Type 1 (Games of chance against the house with random outcome, e.g. casino slots, roulette), Type 2 (Games of chance against the house with match outcome, e.g. sportsbook), Type 3 (Games of chance not against the house, e.g. peer-to-peer poker), and Type 4 (Controlled skill games).
Key Function Roles and Statutory Obligations
Under the MGA Key Function framework, licence holders must designate qualified individuals approved by the Authority to oversee vital operations. Key Function roles include Chief Executive, Compliance, Key AML/CFT Officer, Key Legal, and Key Operations / Security.
Key Persons undergo rigorous fit-and-proper testing, background screening, and must maintain ongoing professional competence in regulatory compliance.
Player Protection and AML Compliance
Compliance with FIAU Implementing Procedures (Part II for Remote Gaming) is strictly monitored. Licensees must establish robust Customer Due Diligence (CDD), ongoing transaction monitoring, and clear procedures for identifying and reporting suspicious transactions.
Player funds must remain segregated at all times from operational accounts within reputable European credit institutions.
Official Maltese Statutory References & Sources
- Gaming Act (Chapter 583 of the Laws of Malta)
- MGA Player Protection Directive (Directive 2 of 2018 as amended)
- Prevention of Money Laundering and Funding of Terrorism Regulations (PMLFTR)