Portugal vs Malta for Online Gaming Companies (2026): Where to Incorporate, Licence and Operate in the EU

Choosing where to base an online gaming company Portugal-facing or EU-wide has become materially more consequential in 2026, following continued evolution of Portuguese licensing, advertising and consumer-protection rules alongside shifts in how gaming revenues are treated for tax. For operators, founders, investors and in-house counsel, the decision between Portugal and Malta is not simply a tax-versus-market debate, it turns on concrete regulatory economics. This guide takes a clear position: it tells you when to choose Malta and when to choose Portugal, backed by side-by-side comparison, worked tax logic, and a practical first-year checklist. Read it as a decision tool rather than an academic survey, and verify time-sensitive figures against the primary sources listed at the end.

Executive summary and immediate recommendation

The right jurisdiction depends on your primary market and your appetite for substance-building. Two scenarios dominate.

1. Incorporate and licence in Malta when your strategy is multi-jurisdictional EU expansion, when you want a widely recognised remote-gaming licence, and when you can build genuine substance to unlock Malta’s refund-based effective tax rate. Malta suits operators optimising for investor returns and speed across several markets.
2. Incorporate and licence in Portugal when the Portuguese market is your primary target, when local brand trust and advertising access matter, and when you value regulatory certainty and alignment with the Portuguese regulator’s enforcement. A Portugal-first online gaming company Portugal strategy avoids the cross-border enforcement risk that catches Malta-only operators reaching Portuguese players.

Whichever route you take, the immediate next steps are the same: engage local regulatory and tax counsel, seek a pre-application dialogue with the relevant regulator (SRIJ or MGA), and produce a substance plan before you file anything.

High-level 90-day checklist:

• Confirm target markets and whether you must hold a Portuguese licence to reach Portuguese players.
• Select the corporate vehicle and reserve the company name via the IRN/RNPC (Portugal) or MBR (Malta).
• Appoint a compliance officer and map AML/KYC obligations.
• Commission independent technical certification for your platform.
• Draft a substance plan covering office, directors and key functions.
• Model effective corporate tax under both regimes with your accountant.

At-a-glance side-by-side comparison: online gaming company Portugal vs Malta

The table below is the article’s principal decision aid. It condenses the licensing, tax, substance, market-access and enforcement dimensions that matter most to an EU-facing operator in 2026. Read it top to bottom to identify which jurisdiction aligns with your commercial model, then use the interpretive notes that follow to weigh the three trade-offs that decide most cases.

Three trade-offs decide most cases. First, licence speed and cost: Malta is typically well-suited to multi-market rollouts, while Portugal’s path buys deeper local certainty. Second, tax economics: Malta’s headline 35% with the refund system can produce a lower effective rate on distributed profits for properly structured groups, whereas Portuguese IRC plus surtaxes is more straightforward but less optimisable. Third, market access and advertising enforcement: if Portuguese players are your core audience, only a Portuguese licence gives you compliant direct marketing, a Malta licence does not, and Portuguese enforcement is real. Weight these three against your commercial plan and the recommendation usually resolves itself.

Licensing: types, timelines, documentation and costs

Licensing is where the two jurisdictions diverge most in day-to-day practice. Portugal centralises everything through SRIJ with a demanding but predictable dossier; Malta offers a category-based system with heavy front-loaded due diligence. Below is the practical comparison operators need before committing budget.

Portugal: the SRIJ licensing pathway

SRIJ is the authority for online gaming and betting in Portugal under the online gambling legal framework (Decreto-Lei n.º 66/2015, as amended). It issues licences for the authorised categories of online betting and games of chance. An operator must hold the relevant SRIJ licence to lawfully offer these products to players located in Portugal; there is no route to serve the Portuguese market on a foreign licence alone.

A complete application dossier requires proof of corporate standing, fit-and-proper documentation on shareholders and directors, a detailed AML/KYC framework, technical documentation for the gaming platform, financial guarantees, and evidence of the operator’s economic and technical capacity. Platforms must pass independent technical testing and certification, and a compliance function must interface with the regulator on consumer-protection and reporting duties. Documentation submitted to SRIJ generally must be provided in Portuguese, which adds translation lead time.

Processing typically takes several months from the point a complete dossier is filed, and complex or novel products can take longer. Practical tips that shorten the path: seek an early dialogue with SRIJ to align on expectations, prepare certified Portuguese translations early, arrange technical certification before you file rather than after, and put your compliance function in place at the outset so player-protection controls are documented from day one. All licensing requirements, fees and any 2026 updates should be verified against current SRIJ guidance, which is the primary source.

Malta: the MGA remote licence pathway

The Malta Gaming Authority operates a licensing regime under the Gaming Act (Chapter 583 of the Laws of Malta) and its subsidiary legislation. Since the 2018 reforms, the regime distinguishes B2C gaming service licences from B2B critical-gaming-supply licences across gaming verticals. Operators select the licence type matching their activity, the distinction between offering games directly to players and supplying platform or game content to other licensees is central to choosing correctly.

The application involves a corporate and personal due-diligence phase (probity and source-of-funds checks on beneficial owners and key persons), a business and operational review, and a system/technical audit before and after go-live. Server and hosting arrangements and technical compliance with MGA standards must be documented. The MGA’s substantive due diligence should not be underestimated.

Practical tips: the MGA places heavy weight on fit-and-proper outcomes, so prepare clean, well-evidenced probity files for every key person; third-party supplier and game-content checks are a common cause of delay, so validate your supply chain early; and demonstrable substance is increasingly expected, not optional. Confirm current licence types, application steps and technical standards against the MGA’s published legislation and guidance.

Comparative licensing checklist

• Speed vs certainty. Malta suits multi-market rollouts; Portugal offers deeper local certainty and market access.
• Pre-approvals. Seek early regulator dialogue in both jurisdictions.
• Tech audits. Commission technical certification before filing.
• Translations. Portuguese-language documentation is required for SRIJ.
• Local counsel. Engage jurisdiction-specific counsel before drafting the dossier.

Corporate structure, incorporation and substance

Licensing sits on top of a corporate vehicle, and the incorporation mechanics differ in ways that affect timeline and tax residency. Getting the entity, directorships and substance right from the outset avoids costly restructuring later.

Incorporating in Portugal (IRN, timelines)

Company formation in Portugal is handled through the Instituto dos Registos e do Notariado (IRN), including the Registo Nacional de Pessoas Colectivas and the commercial registry (Conservatória do Registo Comercial). The most common vehicle is a private limited company (sociedade por quotas) or a joint-stock company (sociedade anónima) for larger, investor-backed operations. Portugal’s “Empresa na Hora” model allows rapid, often same-day incorporation in standard cases, though gaming operators typically need a tailored constitution rather than an off-the-shelf one.

Directors’ residence, corporate tax residency and the risk of creating a permanent establishment all interact with where key decisions are made. A company effectively managed and controlled from Portugal will generally be tax-resident there. Employment and social-security obligations attach once you hire locally, and the regulatory focus on economic presence means a genuine Portuguese footprint supports both licensing credibility and tax positioning. Verify incorporation steps and registry timelines against IRN guidance.

Incorporating in Malta (MBR, timelines)

Incorporation in Malta runs through the Malta Business Registry (MBR) under the Companies Act. The private limited liability company is the standard form for gaming groups, with statutory requirements covering minimum share capital, at least one director and a company secretary, and a registered office in Malta. Formation is generally quick once due diligence on the beneficial owners is cleared.

The MBR and Maltese authorities expect that the company is more than a nameplate. Directors, decision-making and key operational functions should be demonstrably located in Malta if the group intends to rely on Malta’s tax and operational benefits. Confirm current company forms and administration requirements against MBR guidance.

Substance and economic presence, practical tests

Both regulators and both tax authorities look beyond paperwork. The practical tests are consistent: a real office, employees performing genuine functions, board meetings held and minuted locally, local bank accounts, and operational decisions actually taken in-jurisdiction. Malta’s favourable effective rate and Portugal’s tax positioning each depend on this substance holding up to scrutiny from the MBR, SRIJ and the respective tax authorities.

Taxation and incentives for an online gaming company Portugal or Malta

Tax economics frequently tip the decision. The headline corporate rates can be misleading in isolation, and gaming-specific taxes on revenue apply in both jurisdictions on top of, or instead of, ordinary corporate tax on certain flows. Below are the mechanics, with a simplified illustration and the anti-avoidance caveats every operator must respect.

Portugal: IRC, surtaxes and gaming-specific taxation

Portugal applies corporate income tax (IRC) at the standard national rate, on top of which municipal surtaxes (derrama) and, for higher profits, a state surtax (derrama estadual) can apply. A reduced rate may be available for qualifying small and medium-sized enterprises on an initial tranche of taxable income. Separately and importantly for operators, online gaming and betting revenue in Portugal is subject to a specific gaming tax (imposto especial de jogo online) levied on gross gaming revenue or turnover depending on the product, this is distinct from ordinary corporate income tax and is set by law.

Current IRC rates, surtaxes and the gaming-tax rates and bases should be checked against guidance from the Autoridade Tributária e Aduaneira and SRIJ, because rates and treatment can change.

Simplified illustration (assumptions only, not a computation for any specific taxpayer): assume a Portuguese gaming company with €1,000,000 of taxable profit after deductible expenses. IRC at the standard rate, plus an illustrative municipal surtax on taxable profit, produces an effective corporate rate above the headline IRC figure, before any state surtax on higher profit bands and before the separate gaming tax on gaming revenue. The lesson is that Portugal’s real cost sits above the headline IRC rate once surtaxes and the sector-specific gaming tax are taken into account. Confirm the applicable rates and bases against Autoridade Tributária and SRIJ guidance.

Malta: 35% headline with refund system and effective rate

Malta’s headline company tax rate is 35%, but the full-imputation and shareholder refund system is what drives the jurisdiction’s appeal. When a Maltese company distributes profits, qualifying shareholders may claim a refund of a portion of the tax paid at company level, materially reducing the effective rate on distributed profits. The exact refund fraction depends on the nature of the income and the group structure, and the mechanism must be operated correctly to be respected. Malta also levies a separate gaming tax on gaming revenue generated from Maltese-based players, as set by the MGA and Maltese law.

The critical warning is substance. Refund benefits and holding-structure efficiencies are scrutinised under BEPS-driven and EU substance rules, and a structure without genuine economic presence in Malta is exposed to challenge. Restructuring to capture the effective rate without corresponding operations is a red flag. Verify the refund mechanism, conditions and current treatment with the Commissioner for Tax and Customs (Malta) and MGA guidance before relying on any effective-rate projection.

VAT, cross-border VAT and transaction taxes

In both jurisdictions, betting and gambling supplies are generally VAT-exempt, but ancillary services, marketing, platform supply, data and support services, can attract VAT under the usual rules, and cross-border supplies raise place-of-supply and registration questions. Operators frequently need VAT registration in more than one member state depending on their B2B and B2C flows, so appoint VAT counsel early to map registrations and avoid retrospective liabilities.

Market access, advertising, AML and cross-border compliance

The single most common commercial misunderstanding is that a Malta licence “passports” into Portugal. It does not. Market access, advertising and AML compliance for a Portugal-facing operation are governed by Portuguese law regardless of where the entity is licensed.

Cross-border provision: the EU legal baseline

EU case law from the Court of Justice, the Gambelli line of authority and subsequent jurisprudence available through Curia, establishes that member states may restrict cross-border gambling services to protect consumers and public order, provided restrictions are suitable, proportionate and non-discriminatory. The practical consequence is that host-state rules can lawfully govern who may market to and serve local players. Portugal requires a local SRIJ licence to target Portuguese customers directly; a Malta licence alone does not confer that right.

Advertising and promotions

Portuguese law restricts gambling advertising, including protections for minors and vulnerable audiences and constraints on how promotions, bonuses and inducements are presented, with penalties for non-compliance. Any operator marketing to Portuguese players, including a Malta-licensed one, must comply with these Portuguese restrictions, which are enforced. Confirm the current advertising regime against SRIJ and applicable advertising-law guidance before launching any campaign.

AML/KYC and player protection

Both regimes demand robust customer due diligence, source-of-funds checks above defined thresholds, suspicious-transaction reporting and integration with self-exclusion mechanisms (in Portugal, registration on the self-exclusion register maintained through SRIJ). A Malta-licensed operator servicing Portugal must bridge both frameworks, meeting Portuguese player-protection obligations on top of MGA requirements. Player-data processing engages the GDPR, so align data-handling with CNPD expectations for Portuguese players. Treat AML and player protection as continuous operational obligations, not a one-off application exercise.

Costs, timeline and operational checklist for the first 12 months

Budgeting realistically for the first year prevents mid-launch surprises. The mini-table below sets out the core tasks with indicative timing; treat costs as ballpark planning figures to validate with local counsel, since fees and rates change.

Sequenced across the year, the operational checklist runs: in the first 90 days, incorporate, reserve names, appoint your compliance officer and start certification; by roughly the middle of the year, file your complete licensing dossier and stand up AML/KYC and player-protection systems; by year-end, complete substance build-out, finalise VAT registrations, and pass the pre-launch technical audit. Front-load the tasks that gate everything else, certification, translations and probity files, because they most often cause delay.

Decision framework: choosing your online gaming company Portugal or Malta base

Here is the prescriptive part. Match your situation to the bullets below rather than hedging.

Choose Malta when:

• You are building a multi-jurisdiction EU operation and want a widely recognised remote licence.
• Investor-driven tax optimisation matters and you can build genuine substance to unlock the refund-based effective rate on distributions.
• You supply B2B services or platform content and need the category-based B2B licensing structure.
• Portuguese players are not your primary audience.

Choose Portugal when:

• The Portuguese market is your primary target, only a Portuguese licence permits compliant direct marketing to Portuguese players.
• Local brand trust, consumer confidence and alignment with SRIJ matter to your commercial model.
• You prefer regulatory and enforcement certainty within the market you actually serve.
• You want to eliminate the cross-border enforcement risk that Malta-only operators carry when reaching Portuguese customers.

Risk matrix in brief: on commercial risk, Malta favours speed-to-market breadth while Portugal favours depth in one high-value market; on regulatory risk, Portugal carries active local enforcement but predictable rules, while a Malta-only operator faces host-state exposure when serving Portugal; on tax risk, Malta’s efficiency depends on substance surviving scrutiny, while Portugal’s is simpler but generally higher. Recommended next steps for either scenario are identical in shape: engage local tax counsel, seek an early dialogue with SRIJ or the MGA, and commit to a documented substance plan before filing.

Conclusion and next steps

The Portugal-versus-Malta decision remains sharp for any EU-facing online gaming company. Portugal offers market access, local enforcement certainty and brand trust for a Portugal-first strategy; Malta offers breadth and refund-driven tax efficiency for multi-jurisdiction operators who can build real substance. Deciding where to base your online gaming company Portugal operation should follow from your primary market, your substance capacity and your tolerance for cross-border enforcement risk, not from headline tax rates alone. Whichever route fits, engage local regulatory and tax counsel, seek an early dialogue with SRIJ or the MGA, and document a substance plan before you file.

This article is for general guidance and does not constitute legal or tax advice. Operators must obtain jurisdiction-specific legal and tax advice for their facts. To take the next step, you can review the profile of Luís Portela de Carvalho, contact and profile and request a pre-application discussion with the gaming team.

For related planning, see our guidance on Portugal, Corporate practice, Portugal, Gaming & gambling regulation, and Portugal, Tax and VAT for companies.

Sources

1. SRIJ, Serviço de Regulação e Inspeção de Jogos (Turismo de Portugal)
2. Malta Gaming Authority, Legislation & Guidance
3. Autoridade Tributária e Aduaneira (Portugal Tax Authority)
4. Commissioner for Tax and Customs (Malta)
5. Instituto dos Registos e do Notariado (IRN)
6. Malta Business Registry (MBR)
7. CURIA, Court of Justice of the European Union
8. Comissão Nacional de Proteção de Dados (CNPD), Portugal