License Name
Critical Gaming Supply Licence
Critical Gaming Supply Licence
Malta
Malta Gaming Authority
Games of chance (casino, poker, lotteries), fixed odds betting, pool betting, peer-to-peer poker, bingo, controlled skill games
International
Excellent
Company registration in Malta or the EU is required
€40,000; up to €240,000 for companies with multiple approvals
Fit and proper checks required for all directors and key personnel
Comprehensive AML and counter-financing of terrorism policies and procedures required
GDPR compliance is mandatory
Periodic financial and compliance reporting to the MGA
Regular system audits, technical environment reviews by independent third parties
Mandatory software certification by approved labs
Required for games using random number generators
Use of certified and approved payment providers
Servers may be located in Malta, EU, or with specific approval
No local domain restrictions
English mandatory; Maltese and other languages recommended
EUR mandatory, other major currencies allowed
Legal and compliance costs apply; annual compliance fees based on revenue
Criminal and regulatory background checks on key personnel
B2B activities only, not for direct consumer gaming
Compliance with Malta’s corporate tax regime; 5% gaming tax on revenue from Maltese players
Player and transaction data must be stored in accordance with GDPR
Permitted across jurisdictions, aligning with EU and international standards
Required publication of licensee details in public register
Applicant must designate a compliance officer and regulatory liaison
Appointment of a Compliance Officer for AML compliance
Not usually required for B2B entities registered in Malta or EU
Disputes resolved under Maltese law or arbitration
Subject to regulatory approval
Sub-licensing not permitted
€5,000 application fee
€25,000 annually (additional tiers: €30,000 for €5M-10M revenue, €35,000 above €10M; €10,000 for Type 4-only providers)
Corporate tax on profits (currently 35% standard rate with possible deductions)
No withholding tax required on player winnings
Must maintain required share capital and a positive equity position at all times
Sufficient working capital must be demonstrated and maintained
Periodic reports per MGA format and schedules
Typically 4–6 months
Certificate of incorporation, business plan, technical & compliance documentation, key staff credentials
Comprehensive business and operational plan mandatory
Written AML, KYC, and responsible gaming policies required
Pre-launch technical and system review by approved independent auditors
Software and platform certification by approved test labs
Key staff must be approved as fit and proper with relevant experience
Must have a registered office in Malta or EU
Appointment of at least one local/key person in Malta required
Must comply with MGA guidelines; advertising to minors strictly prohibited
Responsible gaming tools and mandatory policies required
Operators must offer a self-exclusion system
Robust age and identity verification protocols
Enhanced due diligence and customer verification required
Support in at least English, additional languages recommended
Accessible complaints process; regulatory escalation allowed
Segregation of player funds is mandatory
Must adhere to prompt payout standards
Clear terms and conditions; compliance with MGA rules
Casino, betting, poker, lotteries, skill games (subject to vertical approval)
No MGA-mandated limits; operator discretion within responsible gaming frameworks
Not specified for B2B licensees; applies to B2C operators
Management compliant with applicable vertical-specific requirements
B2B providers must ensure compliance; B2C regulations apply for live games
Platform subject to same standards as desktop
Permitted under compliance oversight
ISO 27001 information security management recommended; minimum standards mandatory
Mandatory SSL/TLS encryption for all web traffic and client communications
Daily automated data backups are standard practice
24/7 operational and technical monitoring required
Comprehensive operation and transaction logging
Fraud detection and prevention mandatory
APIs must comply with MGA security and integrity criteria
Hosting in EU jurisdictions or otherwise with MGA approval
Permitted
Platform must be able to scale with business growth and load
99.5% minimum recommended
24/7 support for continuity of critical gaming operations
10 years (as per current policy); subject to renewal
Renewal application prior to expiration, review and payment of renewal fee
Fines, suspension, or revocation of licence; up to €466,000 for severe breaches
Any change in ownership or control above 5% must be notified and approved
Prior approval of the MGA required for significant restructuring
Key third-party providers must be MGA-approved
Use of MGA marks subject to guidelines
Operators must safeguard software/content IP rights
Maltese law prevails; arbitration is permitted
Professional indemnity or liability insurance recommended
No mandatory requirements
Regular training in compliance, security, and responsible gaming required
MGA supports regulatory innovation, including sandboxes for new technologies
Encouraged, not mandatory
Adherence to accessibility guidelines is recommended
English required, others recommended for international support
Require specific MGA approval and enhanced controls
Permitted subject to relevant MGA vertical
Permitted as a controlled skill game
Malta Gaming Authority, Level 4, South Street, Southport, Gzira GZR 1011, Malta
Malta Gaming Authority, Level 4, South Street, Southport, Gzira GZR 1011, Malta
https://www.mga.org.mt/licensee-hub/applications/b2b-licences/game-providers-and-back-office/
Monday to Friday, 08:30 – 17:00
https://www.facebook.com/MaltaGamingAuthority
https://twitter.com/MGAMalta
https://www.youtube.com/channel/UCmaltaga
Authorisations, Compliance & AML, Legal & Enforcement, Policy Development, Technology & Innovation
What is the Critical Gaming Supply Licence issued by the Malta Gaming Authority?
The Critical Gaming Supply Licence allows suppliers to provide critical gaming components such as gaming software, systems, or equipment to licensed operators. This licence ensures that suppliers meet stringent regulatory standards related to integrity, security, and reliability in the gaming supply chain.
Which jurisdiction issues the Critical Gaming Supply Licence?
This licence is issued by the Malta Gaming Authority (MGA), the regulatory body overseeing gaming operations and suppliers under Maltese law.
What is the cost of obtaining the Critical Gaming Supply Licence?
The application fee is approximately €5,000, with annual fees starting from €10,000. Additional costs may include compliance audits, technical certifications, and ongoing regulatory reporting expenses.
What are the main requirements for the Critical Gaming Supply Licence?
Key requirements include demonstrating technical expertise and financial stability, passing thorough fit-and-proper checks for owners and key personnel, implementing secure and certified gaming software or systems, and adhering to anti-money laundering and responsible supply chain regulations. Suppliers must also maintain ongoing compliance with MGA standards and cooperate with audits.