What We'd Tell Every Operator Before They Start Their Malta Gaming Licence Application

If you’ve spent more than a week researching online gambling regulation, you’ve almost certainly landed on Malta. The Malta Gaming Authority has been regulating online gambling since 2004, and the MGA license has become something of a gold standard in the industry. 

Operators wave it like a badge of honour. Payment processors recognise it. Banks actually open accounts for companies that hold it. So why do so many operators still get the process completely wrong?

We’ve worked with dozens of gaming and gambling operators through their Malta licensing journey, and the pattern is remarkably consistent. Founders come in with a rough timeline, a rough budget, and a rough understanding of what the MGA actually wants to see. They leave with a license, eventually, but almost always later and more expensively than they planned. 

This article is our attempt to give you the honest picture: what a Malta gaming license actually involves, what it genuinely costs, where operators consistently trip up, and what the right preparation looks like before you file a single document.

What the Malta Gaming Authority Actually Regulates

Before we talk process, it’s worth being precise about what the MGA covers. The Maltese regulatory framework governs business-to-consumer (B2C) gaming operations, meaning if you’re running an online casino, a sports betting platform, a poker room, or a combination of these, you need a B2C gaming license in Malta. 

There’s also a B2B license category for software providers, platform operators, and other service providers supplying the gambling industry, but we’ll focus on B2C here because that’s where the complexity lives.

The MGA operates under the Gaming Act of 2018, which consolidated and modernised earlier frameworks. Under this structure, all B2C operators fall under a single license type with the specific gaming authorisations layered on top. Those authorisations cover: casino-type games (slots, table games, RNG-based products), fixed-odds betting, pool betting, and in-play betting. 

You apply for the license and tick the authorisations relevant to your business model. Simple in concept, considerably more involved in execution.

One thing the MGA is increasingly strict about: your corporate structure, your source of funds, and the identity of every person who has meaningful control or ownership of the applicant entity. The Authority has tightened its due diligence processes significantly over the past four years. 

Think of it less like applying for a business permit and more like passing a very thorough background check while also submitting a business plan, a compliance programme, and a technical integration audit simultaneously.

The Maltese Legal Entity Requirement

Here’s something that catches operators off-guard more often than it should: to hold a Malta gambling license, you need a Maltese-registered legal entity. You cannot route your MGA license through a company registered in Seychelles, the BVI, or anywhere else. The applicant must be a company incorporated in Malta, and that company must maintain substance, a real registered address, and in practice, demonstrable operational presence.

This matters because it adds a layer of corporate structuring work before the license application even begins. Setting up a Maltese company isn’t complicated, but it takes time, it requires a registered address, and if you’re building a group structure (which most serious operators are), you need to think carefully about where the holding entity sits, where the IP is held, and how the operational entity in Malta interacts with the rest of the group. Getting this right from the start saves significant restructuring costs later.

We’ve seen operators incorporate in Malta quickly without thinking through the tax and operational architecture, only to spend six figures reorganising the group structure two years post-licensing when they realise the original setup creates problems they didn’t anticipate. The corporate foundation matters. Build it properly the first time.

Malta Gambling license Cost: The Real Numbers

Let’s address the question everyone is actually asking. What does a Malta gambling license cost? The short answer: more than the MGA’s published fees suggest, and spread across a longer timeline than most operators plan for.

MGA Application and Compliance Contribution Fees:

The MGA charges an application fee of €5,000 for a new B2C gaming license application. This is non-refundable. Once licensed, operators pay an annual compliance contribution based on their gaming revenue.

The compliance contribution structure for B2C operators works on a tiered system, broadly, operators pay between €25,000 and €500,000 annually depending on their gross gaming revenue, with minimum annual contributions applying even in low-revenue years.

What the MGA fees don’t include:

The regulatory fees are the smallest part of the budget. What actually drives the total cost:

• Maltese company incorporation and ongoing corporate administration, typically €3,000 to €8,000 in setup costs, plus annual maintenance
• Registered office and local director requirements, MGA expects substance; a registered address alone isn’t sufficient for serious operators. Budget €5,000 to €20,000 annually depending on the level of local presence required
• AML/compliance programme preparation, the MGA requires a comprehensive compliance programme including AML/KYC policies, a Risk Evaluation Questionnaire (REQ), and designation of a Key Function holder for compliance. Preparing this properly runs €8,000 to €25,000 depending on complexity
• Technical certification, your gaming system must be certified by an approved testing laboratory (BMM, eCOGRA, GLI, NMi, and others are approved). Certification costs vary widely by product complexity: expect €10,000 to €50,000+ for a full casino suite
• Legal and advisory fees, a properly managed MGA application requires dedicated legal and compliance expertise throughout the process. Budget €20,000 to €60,000 for professional advisory, depending on the complexity of your structure and whether you have experienced in-house compliance resource already

Total realistic budget for a first-time MGA B2C license: €80,000 to €200,000 in combined setup, professional fees, regulatory fees, and first-year operational costs, before you’ve taken a single bet. That range sounds wide because the actual cost depends heavily on your starting point, how complex your corporate structure is, how mature your compliance function is, and how well-prepared your technical platform is going in.

We’re not saying this to discourage you. The MGA license earns back its cost many times over in terms of market access, banking relationships, and commercial credibility. But operators who budget €30,000 and expect a three-month process are setting themselves up for a painful experience.

The Application Process: What Actually Happens

Think of the MGA application as a multi-track project rather than a linear process. Several workstreams run in parallel, and the overall timeline is largely determined by whichever track takes longest.

Track 1: Corporate and Ownership Due Diligence

Every shareholder, director, and key function holder must undergo individual due diligence. The MGA conducts thorough background checks, and any adverse findings, criminal history, regulatory sanctions, prior license revocations, will delay or kill the application. 

The MGA also scrutinises source of funds for the capitalisation of the applicant entity. Unexplained wealth, complex ownership chains with opaque beneficial ownership, or any link to sanctioned jurisdictions creates serious problems. This track is largely outside your control once submitted; the MGA sets its own pace on background checks.

Track 2: Compliance Programme and AML Framework

The MGA requires a detailed AML/CFT programme, a Risk Evaluation Questionnaire tailored to your specific business model and player markets, and appointment of a compliance officer as a Key Function holder. That Key Function holder must be approved by the MGA, they’ll review the individual’s CV, qualifications, and experience independently. If your proposed compliance officer doesn’t meet the MGA’s standards, you need to find someone who does before proceeding.

Track 3: Technical Systems Certification

Your gaming platform, the random number generators, the game logic, the player account management system, the reporting interfaces, must be certified by an MGA-approved testing lab before you go live. The lab certification process runs independently of the license application itself and often takes three to five months for a full platform. The smart move is to engage the testing lab at the same time you submit your license application, not after you receive approval.

Track 4: Systems Audit

Beyond technical certification, the MGA requires integration with its Gaming Authorisation Platform (GAP). This is the MGA’s own reporting system, and your platform must connect to it and transmit the required data in real time. GAP integration is a technical development project that should be scoped and resourced separately.

Overall timeline: A well-prepared application from a clean corporate structure, with no due diligence complications, typically takes six to nine months from submission to license grant. Poorly prepared applications, complex ownership structures, or applicants who hit issues in the due diligence phase easily stretch to twelve to eighteen months.

Key Function Holders: The Part Most Operators Underestimate

The MGA’s Key Function framework is one of the more demanding aspects of the Malta online casino license process, and it’s consistently where we see operators underestimate their preparation needs. Key Function holders are individuals personally approved by the MGA to perform specific oversight roles within the licensed entity. 

There are several Key Functions, including the Chief Executive Function, the Compliance and Enforcement Function, the Anti-Financial Crime Function, and others, and each requires MGA approval of the specific individual proposed.

This matters for two reasons. First, the MGA can reject a proposed Key Function holder, and if they do, you need to find a replacement and restart that portion of the approval process. Second, Key Function holders are personally accountable for the areas they oversee. 

This isn’t a role you assign to a nominee or a passive corporate director. The MGA expects real individuals with real expertise who are actually exercising oversight.

For operators who don’t yet have the right people in-house, sourcing qualified Key Function holders, particularly for the compliance and AML functions, is a material piece of the pre-application work. We help operators identify and onboard the right individuals before the application goes in, because trying to find them mid-process creates delays that are entirely avoidable.

What Makes Malta Worth It?

We’ve spent a lot of this article on complexity and cost, so let’s be equally direct about why operators keep choosing Malta despite all of the above.

The MGA license is a commercial asset. Major payment processors, Visa, Mastercard, and their acquiring bank networks, treat MGA-licensed operators differently from operators licensed in less scrutinised jurisdictions. 

Getting a gaming merchant account is categorically easier with an MGA license than without one. Similarly, corporate banking for the operational entity is more accessible. Malta has a developed ecosystem of banks with experience serving licensed gaming companies.

Market access is the other driver. While no license grants automatic permission to operate in every jurisdiction (each market has its own rules), the MGA license is recognised and respected across the EU and by regulatory bodies globally. 

For operators targeting European players, it removes a layer of friction in commercial partnerships, affiliate relationships, and B2B agreements with software providers.

And then there’s the long-term reputational architecture. The online gambling space is littered with operators holding licenses from jurisdictions that offer minimal scrutiny in exchange for modest fees. Sophisticated players, institutional investors, and serious commercial partners can tell the difference. The MGA license signals that your operation has been through a genuinely rigorous process, because it has.

What We Actually Do Differently in LegalBison

When LegalBison works with a gaming operator on an MGA application, we don’t hand over a checklist and wish them luck. The process we run covers corporate structuring from the ground up, AML compliance programme design, Key Function holder sourcing where needed, technical certification coordination, and liaison with the MGA throughout the review period. We manage all four application tracks in parallel so that nothing waits on anything else unnecessarily.

More importantly, we do the structural analysis before the application goes in. We’ve reviewed enough MGA decisions to know which corporate structures create friction, which ownership arrangements trigger additional due diligence requests, and which compliance programmes read as genuinely operational versus technically compliant but clearly generic. 

The preparation phase is where most of the value is created. By the time we submit an application, we expect it to succeed, and the timeline we give clients reflects a realistic assessment of their specific situation, not an optimistic estimate built to win the engagement.

Conclusion

The Malta gaming license is one of the most valuable regulatory assets in online gambling. It’s also one of the most demanding to obtain. Operators who approach it with accurate expectations, about timeline, about cost, about the depth of scrutiny involved, consistently come out the other side with a license that pays dividends for years. Operators who treat it as a box-checking exercise tend to learn that lesson expensively.

If you’re evaluating whether Malta is the right jurisdiction for your gaming operation, or if you’re already committed to the MGA route and want a clear picture of what your specific application involves, we’re happy to walk through the detail with you. 

There are no shortcuts worth taking, but there are absolutely better and worse ways to run the process.