How to Get Licensed in Malta: MGA Application Guide 2026

Malta remains one of the most sought-after jurisdictions for online gambling operators, and the Malta Gaming Authority (MGA) license is still treated as a baseline credibility signal across the industry. But "getting an MGA license" is not a single application — it is a multi-stage regulatory review that typically runs four to nine months and touches everything from your shareholding structure to your RNG certification. This guide walks through what the process actually involves in 2026.

What the MGA License Actually Covers

The MGA issues two broad categories of authorization. A Gaming Service license (B2C) is for operators offering games directly to players — casino, betting, lotteries, and peer-to-peer games fall under this umbrella. A Critical Gaming Supply license (B2B) is for companies supplying platforms, software, or other critical gaming systems to other licensed operators, rather than dealing with end users directly.

Each license is issued for a 10-year term and can cover up to four game types under one authorization, which is one reason operators consolidating multiple verticals — casino, sports betting, and skill games, for example — often prefer Malta over jurisdictions that require separate licenses per vertical.

Why Operators Still Choose Malta

Malta was one of the first EU member states to build a dedicated remote gaming regulatory framework, and that maturity shows up in practical ways: an established professional-services ecosystem (legal, compliance, audit firms used to gaming-specific filings), passporting advantages within the EU/EEA regulatory conversation, and a regulator that, while demanding, has a predictable and documented process. For B2B suppliers in particular, an MGA license is often treated by operator partners as a pre-qualification signal, which can shorten commercial due diligence elsewhere.

The Application Process, Stage by Stage

The MGA structures its review into four sequential stages, and an application generally cannot progress to the next stage until the previous one clears.

Stage 1 — Fit and Proper. The regulator evaluates the integrity and competence of everyone with material influence over the business: shareholders, ultimate beneficial owners (UBOs), directors, and key function holders. This includes background checks, source-of-funds verification, and a review of relevant experience. This is the stage where applications most often stall, since incomplete ownership disclosures or unclear beneficial ownership chains trigger requests for further documentation.

Stage 2 — Business Planning. The MGA reviews a detailed business plan, typically expected to include a three-year financial forecast (cash flow, profit and loss, balance sheet), marketing and distribution strategy, HR planning, and growth targets. This stage tests whether the business is not just legally clean but operationally and financially viable.

Stage 3 — Operational and Statutory Requirements. Here the MGA checks the applicant's corporate structure, policies, and procedures against Maltese company law and gaming-specific statutory obligations, including AML/CFT frameworks, responsible gambling policies, and data protection compliance.

Stage 4 — Systems Review (technical/compliance audit). Before a license is granted, the gaming platform, RNG systems, and supporting infrastructure must pass a technical audit confirming compliance with MGA technical standards. Operators usually need to engage an MGA-approved test house for this stage.

Costs and Capital Requirements

The MGA charges a one-time, non-refundable application fee of €5,000. For a B2C Gaming Service license, operators also pay a fixed annual license fee of €25,000, plus a progressive gaming tax and compliance contribution calculated on gaming revenue. Minimum issued share capital requirements depend on the game type: broadly €100,000 for Type 1/2 game types and €40,000 for Type 3/4. These figures are baseline regulatory minimums — actual paid-up capital expectations can be higher depending on the scale of operations described in the business plan.

Realistic Timeline

Most sources converge on a four-to-six-month timeline for straightforward, single-license-type B2C applications with complete documentation. Group structures covering multiple game types, multiple key function holders, or complex ownership chains commonly push the process to six-to-nine months. One detail worth planning around: if the MGA finds required documentation missing, the application is marked "incomplete" and the applicant has 60 days to resubmit — after that window, the application can be rejected and closed outright, meaning a re-application from scratch.

Common Mistakes That Slow Applications Down

• Incomplete UBO disclosure. Ownership structures involving nominee shareholders, trusts, or multi-layer holding companies routinely trigger additional information requests. Map the full beneficial ownership chain before submitting.
• Underdeveloped business plans. A business plan without a credible three-year financial forecast or a defined marketing/distribution strategy reads as unprepared and invites follow-up questions that extend Stage 2.
• Treating the technical audit as an afterthought. Engaging an MGA-approved test house late in the process, rather than in parallel with earlier stages, is one of the most common causes of last-mile delays.
• Missing the 60-day resubmission window. Incomplete applications have a hard clock. Assign clear internal ownership for responding to MGA information requests so nothing slips past the deadline.
• Underestimating AML/responsible gambling documentation. Policies need to be operational, not templated — the MGA increasingly tests whether procedures are actually implementable, not just documented.

FAQ

Do I need a Maltese company to apply for an MGA license? Yes. Applicants must incorporate a company in Malta to hold the license, even if the underlying group is based elsewhere. This entity is subject to Maltese corporate and tax law alongside the gaming-specific requirements.

Can a B2B supplier and a B2C operator apply under the same license? No — Gaming Service (B2C) and Critical Gaming Supply (B2B) are separate license categories with different obligations, though a group can hold both through separate licensed entities.

How long is an MGA license valid once granted? Ten years, covering up to four game types under a single authorization, subject to ongoing compliance and reporting obligations throughout the term.

What happens if my application is marked incomplete? You have 60 days to submit the missing documentation or information. If the deadline passes without resubmission, the MGA can reject and close the application, requiring a fresh application to restart the process.

The Bottom Line

An MGA license is still one of the more demanding regulatory approvals in the online gambling industry, but it is also one of the more predictable ones — the stages, documentation expectations, and common failure points are well understood by professional advisors who work with the regulator regularly. Operators who front-load UBO mapping, build a genuinely detailed business plan, and engage a test house early tend to land inside the four-to-six-month range; those who treat any of the four stages as a formality tend to be the ones still answering MGA information requests at month eight.