Obtaining a Maltese gambling license requires strict compliance with regulatory requirements relating to the company, its governance structure, financial stability, and operational model. Compliance is supervised by the state regulator –
Malta Gaming Authority (MGA) – throughout the licensing process and during ongoing operations.
Company Legal StructureThe operator must have a legally registered company, typically incorporated in Malta or another EU jurisdiction.
The corporate structure must be transparent and comply with ultimate beneficial ownership (UBO) disclosure requirements. The use of nominee structures is permitted only where full disclosure of actual control is provided.
Management and Key Functions (Key Persons)The MGA applies enhanced governance requirements. Operators must appoint designated Key Function holders responsible for:
- overall management (Key Function);
- AML compliance;
- technical and IT security;
- financial control.
All key persons must pass a fit & proper assessment, including checks of professional reputation, experience, and the absence of regulatory or criminal issues.
Financial Requirements and CapitalThe operator must demonstrate the financial sustainability of the project, including:
- sufficient share capital (depending on the license type);
- verified sources of funds;
- the ability to meet financial obligations to players and partners.
The regulator reviews the business plan, revenue projections, and monetization model as part of the assessment.
AML / KYC and ComplianceAn MGA license requires the implementation of a comprehensive AML/KYC framework in line with EU legislation, including:
- player identification and verification;
- transaction monitoring;
- reporting of suspicious activity;
- responsible gaming and player protection measures.
Failure to comply with compliance requirements is treated as a serious breach of license conditions.
Technical and Operational RequirementsOperators must use certified gaming platforms and software that comply with MGA technical standards.
At the application stage, a live website or fully prepared technical infrastructure is required, together with mandatory public documents:
- Terms & Conditions;
- Privacy Policy;
- Responsible Gaming Policy.
Operations must fully correspond to the declared license scope (B2C or B2B).