Malta Gaming Authority

The best-known EU gaming regulator. Strong dispute infrastructure, mandatory RTP disclosure, and a working complaints process.

Regulator: Malta Gaming Authority · Country: Malta

Overview

Malta was the first EU member state to regulate remote gaming (2004). The MGA operates under EU law and is broadly considered the strongest regulator for cross-border online gambling. Approximately 40% of the licensed EU-facing operators hold an MGA licence, either as their primary or secondary licence. Operators pay a €25,000 annual fee plus 5% gaming tax on GGR — this cost gets passed through to bonus wagering multipliers and cashout caps, but it also underwrites a real regulator.

Player protections in place

Mandatory participant fund segregation — player money cannot be used for operational expenses
Player-fund insolvency guarantee up to €100,000 per player
RTP must be published on every game
Responsible-gaming tools required: deposit limits, session timers, self-exclusion, cooling-off
AML compliance to EU standards; KYC required at €2,000 threshold
Ban on advertising to minors and self-excluded players

How to file a complaint

Contact operator support first. If unresolved after 15 business days, file a Player Support complaint at support.mga.org.mt. MGA typically resolves in 30-60 days. If the operator refuses to comply with an MGA ruling, the licence can be suspended. Independent ADR bodies (eCOGRA, IBAS) can act as intermediaries.

Red flags to watch

Any operator claiming "MGA licensed" without a licence number visible in the footer
Operators offering an MGA-branded page for EU players but redirecting non-EU players to a shell operator on a different licence — check the footer of the page you actually land on
MGA licence held by a corporate shell that owns multiple brands with different reputations

Typical player-side issues

Withdrawal delays over 5 business days without communication
KYC document rejection loops
Bonus-abuse account closures where the "abuse" is normal play
Withdrawal caps mid-process not disclosed at deposit time

Our take

MGA is the default recommendation for a mainstream EU player. Not perfect, but the dispute path works and the operators know it. When we rate an operator, an MGA licence is worth +0.4 on our safety score vs an unlicensed or offshore-only operator.

See our dispute-resolution glossary entry for the full escalation sequence and our withdrawal process guide for how licence quality shows up in real cashouts.