XLW Advisory
Industry Insights9 min readPublished

Malta iGaming Licence Application Guide: B2C, B2B, MGA Compliance and Common Pitfalls

A Malta iGaming licence is not a generic company-registration product. The first decision is whether the business needs a B2C licence, a B2B licence, a permit, a recognition notice, or no MGA licence at all. The answer affects compliance, systems, AML, tax, staffing and cost.

SEO / AI Summary

Title
Malta iGaming Licence Guide: MGA B2C/B2B Applications, Compliance, AML and Costs
Description
A practical Malta iGaming licence guide covering MGA B2C and B2B authorisations, Licensee Portal applications, key functions, AML, audits, tax, fees and applicant risk controls.
Keywords
Malta iGaming licence, MGA B2C licence, MGA B2B licence, Malta Gaming Authority, gaming authorisation Malta, iGaming AML Malta, MGA compliance audit

Direct answer

The Malta Gaming Authority distinguishes between B2C and B2B licence routes and also lists permits, individual applications, recognition notices and audit service provider approvals in its official Applications area.

For an applicant, the practical risk is choosing the wrong authorisation route. A B2B supplier authorisation does not by itself make the business a consumer-facing B2C operator, and a Recognition Notice is not the same thing as a new Malta licence.

Legal requirement vs best practice

Legal requirement: the licensing position should be checked against the Gaming Act, Gaming Authorisations Regulations, Gaming Licence Fees Regulations, Gaming Tax Regulations and applicable MGA directives, including the Gaming Authorisations and Compliance Directive.

Best practice: prepare a licensing route memo before spending on company setup, technology, payment processing or marketing. The memo should identify the exact activity, customer type, jurisdictions, game verticals, service providers, key persons, systems and AML exposure.

B2C, B2B and recognition notice

B2C licences are relevant where the operator provides gaming services to players. MGA's B2C area includes remote gaming services and other consumer-facing licence categories.

B2B licences are relevant where the business supplies gaming-related services or systems to other operators. MGA's B2B area includes game providers and back-office categories.

A Recognition Notice is a separate route where an authorisation issued by another eligible jurisdiction may be recognised for providing a gaming service or gaming supply in or from Malta, subject to MGA's process.

Application readiness checklist

The applicant should align the Malta company, shareholder structure, beneficial ownership, directors, key functions, business plan, financial forecast, games or supply model, technology stack, outsourcing arrangements and AML framework before submission.

MGA's FAQ states that licence applications are submitted through the Licensee Portal and that the portal gives applicants a timeline to follow request status. A submission that is incomplete at face value can delay the authorisation process before substantive review even starts.

Key function holders and other relevant persons should be assessed early. MGA FAQ material describes key functions as important roles connected with a gaming service or gaming supply and refers applicants to Directive 3 of 2018 for the full list.

Compliance, AML, audit and tax

A Malta gaming project should budget for continuing compliance, not only the application. Depending on the authorisation, controls may include AML/CFT policies, player protection, reporting, compliance reviews, system controls, approved auditors, tax and gaming tax analysis, and data-protection coordination.

MGA FAQ material states that the Authority may require licensees to undergo compliance audits on a regular or ad hoc basis and that only audits carried out by auditors approved by the Authority are recognised.

Tax analysis should be separate from licensing analysis. A gaming licence does not by itself answer corporate income tax, VAT, gaming tax, payroll, transfer pricing, payment-flow or withholding-tax questions.

Common mistakes

Mistake 1: choosing B2B when the commercial plan is B2C. The licence route must match the actual customer-facing or supplier-facing activity.

Mistake 2: treating AML, key functions and technology evidence as paperwork to be filled later. For MGA-facing work, those points are core readiness evidence, not administrative decoration.

Mistake 3: using headline tax rates or Malta's gaming reputation as the business case. The real case depends on market access, player location, payment rails, systems, people, compliance costs and ongoing reporting.

Mistake 4: assuming licence grant equals operational readiness. Banking, payment processors, local substance, accounting, payroll, data protection and ongoing regulator reporting all need separate workstreams.

Professional insight

Before applying, build a licence-readiness matrix with five columns: authorisation route, legal entity and UBO chain, key persons, technology and service providers, and ongoing compliance budget.

For Chinese, Hong Kong or other non-EU founders, the matrix should also cover source of funds, offshore holding companies, bankability, tax residence, group recharge arrangements and whether the Malta entity will have enough operating substance to support its role.

Frequently Asked Questions

No. B2C is relevant to operators providing gaming services to players, while B2B is relevant to businesses supplying gaming-related services or systems to other operators.

MGA FAQ states that licence applications can be submitted through the Licensee Portal, which provides a timeline for applicants to follow request status.

Not always. The answer depends on the exact service, whether it is a gaming service or gaming supply, the jurisdictions involved, and whether another authorisation or recognition route applies.

Yes. MGA FAQ material states that the Authority may require licensees to undergo compliance audits on a regular or ad hoc basis, and recognised audits must be carried out by approved auditors.

Confirm the intended authorisation route, the scope of services, official MGA fees versus adviser fees, evidence needed for UBOs and key persons, technology readiness, AML readiness and ongoing compliance budget.

Official References and Sources

Legal conclusions should be checked against official sources. Source-intake WeChat articles are drafting inputs only until reviewed.