The Authority has made available the necessary procedures through its Licensee Relationship Management System (LRMS) .

Applicants are welcome to apply by logging into the LRMS and following the simple processes. The LRMS provides a dedicated dashboard that will give users the possibility to follow the status of their requests in real-time, ensuring efficiency and transparency.

Following the submission of the application, the Authority through the Financial Directorate will verify settlement of payment.

Once this is verified, this is forwarded to the Regulatory Directorate to commence application review, for approval and issuance of the requested Gaming Licence.

The Malta Gaming Authority may require further information and/or amendments, and/or submission of required documents to complete the application review according to the gaming legislations.

The Authority may issue licences of the following categories:

• Gaming Service licence: a business to consumer licence to offer or carry out a gaming service;
• Critical Gaming Supply licence: a business-to-business licence to provide or carry out a critical gaming supply.

Any person in possession of a gaming service licence issued by the Authority shall pay to the Authority a licence fee that depends on the type of approval in line with the Gaming Licence Fee Regulations, which may be found on the Authority’s website here.

The regulatory framework covers games of chance, games of chance and skill and skill games. The Authority shall be guided by a list of criteria in determining whether a game is a skill game or otherwise, with the onus of proving whether a game is one based on skill or otherwise being placed on the proponent of such game. Such classification by the Authority must be issued via a ruling or binding instrument to ensure consistency and transparency.

The Malta Gaming Authority may decide to classify a game as licensable or exempt, as well as to determine whether a game is a skill game or a controlled skill game, with the latter warranting an ad-hoc licence, through rulings or other binding instruments. The Regulations also classify ‘other games’ under Part VIII of the Gaming Authorisation Regulations, laying down a softer regulatory approach in view of the intervention deemed necessary.

A compliance contribution is payable on qualifying activities consisting of Type 1, Type 2, Type 3 and Type 4.

This shall be determined by the gaming revenue generated during the licence period depending on the type of gaming services approved.

The applicable compliance contribution can be found in the Gaming Licence Fees Regulations, which may be found on the Authority’s website here.

Gaming tax due in terms of the Gaming Tax Regulations is based on the gaming revenue, as defined, generated by the operators from end customers located in Malta.

The gaming tax shall be payable monthly, together with the submission of regulatory returns containing the relevant data to calculate said tax.

Further information is clearly stated under the Gaming Tax Regulations, which may be found on the Authority’s website here.

Licence fees, compliance contribution and gaming tax are due from issuance of the Licence. The Licensee shall be required to submit the Declaration of Go-Live once the licensee starts operation.

A ‘start-up’ undertaking shall mean a person who, at the date of the licence application, fulfils all of the following criteria:

a. A person has been established or operational in the same or a related sector for less than five (5) years;
Provided that, unless the business is operated in a different form, ‘established’ shall refer to the date of registration of a limited liability company, the date of the agreement establishing a partnership, the date of registration as a self-employed person, or as may otherwise be determined by the Authority.

b. In the case of a body corporate, that person has not yet distributed profits;

c. In the case of a body corporate, that person has not been formed through a merger or, if formed through a merger, all body corporates that formed part of the merger satisfy, in aggregate all the critical envisaged herein;

d. That person has not acquired the business as a going concern or, if so, the acquirer and the acquired both satisfied all criteria envisaged herein;

e. That person has generated actual revenue from the same, or a related, sector during the previous financial period amounting to less than ten million euro (€10,000,000):
Provided that where the financial period cannot be determined, or is not applicable, the previous twelve (12) calendar months shall be taken into consideration;

f. That person is not part of, or controlled by, a corporate group whose actual revenue in the same, or a related sector exceeds ten million euro (€10,000,000); and

g. That person is not subject to the requirement of a Government concession to offer the gaming service in accordance with the proviso to regulation 4 of the Gaming Authorisations Regulations:
Provided that in the case of a body corporate, if the person referred to in this sub-regulation has taken over the business from any person having a qualifying interest in the former, the provisions of this sub-regulation shall extend accordingly to the person having a qualifying interest in the applicant:Provided further that actual revenue referred to in paragraphs € and (f) shall be determined on the basis of generally accepted accounting principles and practice as defined in article 2(4) of the Compliance Act.

A person shall be deemed to be a start-up undertaking only upon the Authority’s confirmation, and the Authority shall be vested with discretion to determine whether a person is a start-up undertaking in terms of set regulations. Provided that the onus to prove that a person is indeed a start-up undertaking shall be vested in the same applicant.

Approved Start-ups will benefit from a moratorium period of 12 months in which they are exempt from paying compliance contribution although they are still required to submit the monthly declaration. Fixed license fees will still be due.

By definition, the term “key function” means an important function, role or task carried out by a person in connection with a gaming service or a gaming supply, as may be prescribed by the Authorisations and Compliance Directive.

Key functions are important functions within a licensed activity, requiring approval, for direct scrutiny and targeted supervisory controls, thereby raising the bar for persons of responsibility within a gaming operation.

The following roles and responsibilities performed in connection with the gaming activity of a licensee shall each constitute a key function:

1. The Chief Executive role, or equivalent;
2. Management of the day-to-day gaming operations of the licensee, including the processes of making payments to, and receiving payments from, players;
3. Compliance with the licensee’s obligations emanating from the licence or licences issued by the Authority;
4. The administrative and financial strategies of the licensee, including but not limited to the payment of tax and fees due to the Authority;
5. Marketing and advertising, including bonus offers and promotions;
6. The legal affairs of the licensee, including but not limited to contractual arrangements and dispute resolution;
7. Player support;
8. Responsible gaming;
9. The prevention of fraud to the detriment of the licensee;
10. The risk management strategies of the licensee;
11. The prevention of money laundering and the financing of terrorism;
12. Adherence to applicable legislation relating to data protection and privacy;
13. The technological affairs of the licensee, including but not limited to the management of the back-end and control system holding essential regulatory data;
14. The network and information security of the licensee; and
15. Internal audit.

For a B2C licensee that operates a gaming premises which is not a controlled gaming premises, the key functions shall be the following:

• Those listed in points (a) to (i) above, hereof;
• Operation of the urn or any other gaming device which requires human intervention used to generate the result of the game in bingo halls:

Provided that where the operation of such urn or other device is supervised by an additional person who is not an officer of the Authority, it shall be sufficient for either the person operating the urn or other device or the person supervising to be approved to provide such key function;

• Management of the pit, including the supervision of the croupiers and assistants and the management of their work, where applicable;
• Management of the gaming area, including the supervision thereof to preclude fraud by customers, and the resolution of customer disputes; and
• Management of the surveillance systems of the gaming premises, where applicable.

For a B2B licensee, the key functions shall be the following:

• The chief executive role, or equivalent;
• The day-to-day gaming operations of the licensee;
• Compliance with the licensee’s obligations emanating from the licence or licences issued by the Authority;
• The administrative, financial and risk management strategies of the licensee, including but not limited to the payment of fees due to the Authority;
• The legal affairs of the licensee, including but not limited to contractual arrangements and dispute resolution;
• Adherence to applicable legislation relating to data protection and privacy, where applicable;
• The technological affairs of the licensee, including but not limited to the management of the back-end and control system holding essential regulatory data;
• The network and information security of the licensee; and
• Internal audit.

For the National Lottery licensee, the persons performing key functions shall be the following:

• The persons performing the functions listed in points (a) to (i) above (1) hereof; and
• The persons who hold a permit to sell national lottery games.

In the case of a licensee providing a gaming service in gaming premises, the activities constituting a key function shall also comprise of the following:

• Responsibility for supervising the croupiers and assistants and managing their work;
• Responsibility for managing the casino’s gaming area, including the supervision thereof to preclude fraud by customers, and the resolution of customer disputes; and
• Responsibility for managing the surveillance systems of the casino.

Commercial communications must not:

•  Condone or encourage behaviour which is criminally or socially irresponsible;
•  Portray gaming as a means of resolving problems;
•  Suggest that gaming is an alternative to employment.

Gaming adverts cannot make reference to easily available means of credit, and cannot tarnish the image of any other licensee.

• Adverts must ensure that the limits in advertising must be adhered to.
• Adverts must display the licensee’s name and licence number
• Adverts displayed on social media must also be compliant with the Regulations.

With respect to arrangements made for the marketing and advertising of a gaming service, the Authority considers that when the service of the outsourcing service provider is limited solely to such activities, the regulatory risk is limited to matters relating to adherence to advertising laws. Given that the responsibility for compliance with such laws rests with the licensee, the Malta Gaming Authority considers that there is no scope for additional involvement as a regulator.

On the other hand, where the outsourcing service provider also conducts other activities related to the gaming service, intervention may be necessary. Where the outsourcing service provider processes payments and handles player registration, the service provider shall itself be deemed to require a B2C licence, unless such services are being carried out solely on behalf of the licensee, in which case they shall be deemed to be covered within the remit of the licensee’s authorisation. The service provider would, in the latter case, require approval of the service as a material supply.

A gaming service or a critical gaming supply shall constitute any one or more of the following game types:

• Type 1: which shall mean games of chance played against the house, the outcome of which is determined by a random generator, and shall include casino type games, including roulette, blackjack, baccarat, poker played against the house, lotteries, secondary lotteries and virtual sports games; and/or
• Type 2: which shall mean games of chance played against the house, the outcome of which is not generated randomly, but is determined by the result of an event or competition extraneous to a game of chance, and whereby the operator manages his or her own risk by managing the odds offered to the player; and/or
• Type 3: which shall mean games of chance not played against the house and wherein the operator is not exposed to gaming risk, but generates revenue by taking a commission or other charge based on the stakes or the prize, and shall include player versus player games such as poker, bingo, betting exchange, and other commission based games; and or
• Type 4: which shall refer to controlled skill games as per regulation 8 of the Gaming Authorisations Regulations.

In the case of a game displaying elements which may fall under more than one of the types referred to above, the Authority shall have full discretion in categorising the game in the type it believes closest reflects the nature of the game.

No, the Authority does not require licensees to obtain a licence for each type of game. Operators that are already in possession of a Gaming Service Licence or Critical Gaming Supply Licence, and wish to offer an additional type of game are required to apply for the necessary approval.

By definition the terms “gaming vertical” means a category of products that require specific safeguards in order to ensure that it is offered in a manner which adheres to law and to the regulatory objectives, owing to its characteristics and the distinction between it and other categories of products. For the sake of clarity, the different verticals include:

a. Casino, including live casino;
b. Lotteries;
c. Secondary lotteries;
d. Fixed odds betting, including live betting;
e. Pool betting, including betting exchange;
f. Peer-to-peer poker;
g. Peer-to-peer bingo and other peer-to-peer games, but excluding pool betting, betting exchange, and poker;
h. Lottery messenger services;
i. Controlled skill games; and
j. Any other gaming vertical which is not comprised within the above.

The Authority requires a company applying for a licence to have the following minimum issued paid up share capital when registering the company with the competent authority:

Gaming Service Licence

• Type 1 – Minimum €100,000
• Type 2 – Minimum €100,000
• Type 3 – Minimum €40,000
• Type 4 – Minimum €40,000

Critical Gaming Supply Licence

• Minimum €40,000

Companies with multiple type approvals are required to meet the above share capital requirements cumulatively up to a minimum capping of €240,000.

No, Fantasy Sports does not require an additional licence. A Type 4 approval is required to offer fantasy sports as a gaming service or critical gaming supply.

“Material Supply” or “Material Gaming Supply” means a gaming supply of such importance that any weakness or failure in its provisions could have a significant impact on the operator’s;

• To meet the obligations under the applicable legislation: or,
• To manage risk related to such supply; or
• To continue in business

The following types of gaming supplies shall constitute material gaming supplies:

1. Manufacturing, assembling, placing on the market, distributing, supplying, selling, leasing or transferring a gaming device;
2. Providing risk management services for the operation of a licensable game;
3. Providing event, content and, or odds;
4. Providing fraud management services for the operation of a licensable game;
5. Holding and, or managing player funds;
6. Providing services relating to customer due diligence;
7. Providing services related to player identity verification;
8. Providing co-location services and other managed information technology services, including            cloud computing services and, or decentralised hosting protocols where the latter do not amount      to a critical gaming supply; and
9. Providing back-up and disaster recovery services.

A notice issued by the Authority whereby an authorisation issued by another Member State of the European Union or European Economic Area, or a State which is deemed by the Authority to offer safeguards largely equivalent to those offered by Maltese law, is recognised as having the same effect as an authorisation issued by the Authority for the purpose of providing a gaming service, gaming supply in or from Malta.

The Authority is conscious of the fact that outsourcing is integral to the operational setup of most gaming business nowadays, whether for advantages of cost or specialisation or for any other reason which the operator may deem relevant. The type of supplies considered to be supplementary to the activity being licensed refer to:

1. Manufacturing, assembling, placing on the market, distributing, supplying, selling, leasing or transferring a gaming device;
2. Providing risk management services for the operation of a licensable game;
3. Providing event and odds management systems, including content provision for betting;
4. Providing fraud management services for the operation of a licensable game;
5. Holding or managing player funds;
6. Providing services relating to customer due diligence;
7. Providing services related to player identity verification;
8. Providing co-location services and other managed information technology services; and
9. Providing back-up and disaster recovery services.

Authorised persons offering a gaming service shall make readily available to players the applicable procedure for making a complaint to the authorised person.

a. Authorised persons offering a gaming service shall, upon receipt of a complaint made by a player who makes or has made use of their gaming service, immediately inquire into the complaint;

b. Authorised persons shall inform the complainant of the results of such inquiry within ten days from the date on which the complaint is received:Provided that where the nature of the inquiry is such that more time is necessary to complete it, such period may be extended by a further ten days:Provided further that where such extension is necessary, the player shall be informed within the first ten days from the date of receipt of the complaint that the authorised person shall be making use of such extension, and the reason or reasons why such extension is warranted.

Where a player feels aggrieved by a decision or other action of the authorised person, he/she shall be able to make a complaint to the authorised person and, in the event that he/she is not satisfied by the response of the authorised person, the player may (with the handed procedure by the authorised person) refer such complaint and all relevant facts to the Authority’s Player Support Unit or to another ADR entity.

The sub-section ‘Protection of Player Funds’ is clearly stated under the Gaming Player Protection Regulations.

Identifying the importance of player funds being kept segregated and remaining separately identifiable at all times whereby the Authority may, in its sole discretion, exercise viewing rights over the common account of player funds.

Games, and/or their providers, which are not licensed by the MGA or a competent authority within the EU/EEA, but licensed and offered under the purview of other jurisdictions outside the EU/EEA, on the same website as the MGA-licensed operations, or linked therefrom, are not permissible. Similarly, shared wallet setups with such non-EU/EEA licensed games, whether offered on the same or different domain or sub-domain name, are also be prohibited.

Key Technical Setup is the technical infrastructure of licensee, including all hardware and virtual machines in operation where the essential components are located.

The Authority has made available the necessary procedures through its Licensee Relationship Management System (LRMS). Applicants may process necessary to their key technical infrastructure changes in-line with the legal framework and set directive, through the LRMS and follow the processes. The LRMS provides a dedicated dashboard that will give users the possibility to follow the status of their requests in real-time, ensuring efficiency and transparency.

Essential components are the:

• Components hosting RNG;
• Components hosting jackpots;
• Components hosting the games;
• Gaming database;
• Player database;
• Financial database;
• Control system; and
• Any other component which the Authority may deem to be critical.

No, the Authority does not license such activities.

As a minimum, the entire set of the rules, including the manner in which a player can win or lose a game, must be no further than one click away from the page in which the game can be played. Upon that one click, a player must be immediately presented with the rules. However, the rules may be categorised further within this window, possibly requiring further clicks due to limitation of space, but they shall always remain easily accessible and easy to understand.

With respect to games which are played after being downloaded and installed on a compatible device, licensees shall ensure that the game rules shall be made present to the player in any case prior to the player’s first wager on the game.

No, the Authority does not charge any fees for meetings held with applicants, licensees or service providers.

Non-Profit Games, Commercial Communications and Limited Commercial Communication Games are all classified as Low Risk Games.

A permit is valid only for a singular event, it expires once the event is concluded and is non-renewable, and also non-transferable.

A de minimis game is one with a maximum stake of €1 and a maximum prize of €100.

No,  a de minimis game is an exempt game and does not require a permit.

Up to two de minimis games per month can be organised without a permit. However, throughout a calendar year these are not to exceed in total, ten games.

A person or entity would need to apply for a Limited Commercial Communications Games Permit.

All non-profit organisations that wish to organise a lottery or tombola event are required to apply for a non-profit game permit.

The maximum stake cannot exceed €5 per player.

Not less than 90% of the net proceeds need to be paid out to the non-profit organisation to qualify as a non-profit game, and an updated Statute of the non-profit organisation needs to be submitted.

A non-profit entity can apply for a non-profit game permit via the MGA portal https://portal.mga.org.mt/Home/ or by downloading the form from https://www.mga.org.mt/downloads/.

A Non-Profit Game permit costs €25.

No, there are no refunds for non-profit tombola.

A Commercial Communication Game is a game organised with the purpose to promote or encourage the sale of goods or services.

Commercial Entities/Companies interested in organising a lottery to promote a good or service.

Any single event that is covered by a Commercial Communication Game permit is not to award a prize that exceeds €50,000.

Commercial Communication Games are not to cumulatively exceed €100,000 in prizes during any calendar month and not more than €500,000 during any calendar year.

A stake price is not permitted when applying for a Commercial Communication Game permit.

An entity can apply for a Commercial Communication Game permit via the MGA portal https://portal.mga.org.mt/Home/

A Commercial Communication Game permit costs €25 or 0.5% of the total monetary or retail value of the prize, whichever is higher.

A Limited Commercial Communication Game is a game that includes a stake and a prize.

Persons or Entities interested in organising a tombola or lottery.

For the game to qualify as a Limited Commercial Communication Game the value of the stake cannot exceed €2 per player.

Any single event shall not award a prize that exceeds €250.

Limited Commercial Communication Games shall not cumulatively exceed €5,000 in prizes during any calendar month and not more than €50,000 during any calendar year.

An entity can apply for a Commercial Communication Game permit via the MGA portal https://portal.mga.org.mt/Home/.

A Commercial Communication Game permit cost €25.

The sandbox environment commenced on 1 January 2019 for the purpose of the acceptance of virtual financial assets and virtual tokens, and will last for a period of ten (10) months. For the purpose of leveraging innovative technology arrangements within a gaming operation, the regulatory sandbox will commence on such date as the MGA may establish in due course. If the MGA deems it appropriate, the duration of the sandbox may be extended further for a specified period, in whole or in part.

Existing licensee can apply for the VFA approvals from the LRMS through the “New/Change” service request specifically from the New or Change in Payment methods form. For DLT approvals, the MGA will start to accept applications at a later date.

All additional documents are listed in the System Documentation within section 6.

Players depositing in Virtual Currencies (VC) need to complete the verification process within thirty (30) days of the first deposit in VC.

Wallet addresses need to be verified to ensure that the player owns such wallet before any deposits are made. Operators need to inform the Authority about the method to be used for wallet verification within the relevant policy.

Currently, operators are required to maintain player-specified limits for fiat currencies; rather than include VFAs within the same limit, operators should add a distinct player-specified ceiling for VFAs that is distinct from the fiat currency limit.

Throughout the duration of the sandbox, and without prejudice to limits required in terms of Part V of the Gaming Player Protection Directive (Directive 2 of 2018), no operator may accept deposits in VFA by a player exceeding the equivalent of one thousand Euro (€1,000) per month. When a player elects to set a player-specified limit in accordance with the Player Protection Directive, the operator must give the player the option to set such limit both for fiat currency and for VFAs.

Customer due diligence obligations shall be triggered upon cumulative deposits or wagers, as the case may be, of one hundred and fifty Euro (€150) or more in a rolling period of one hundred and eighty (180) days.

When an operator allows more than a single wallet for the same VC, then full CDD shall be carried out on the player irrespective of whether the €150 threshold has been met.

Any pending transactions which do not match with a player’s verified wallet address shall be logged, and reversed back to the originating wallet address. Where it is not possible, the operator shall freeze the amounts and report such amount within the monthly player funds report.

Exchanging between one VC and another shall not take place within the operator’s ecosystem.

The operator may sell its custom tokens for fiat currency on its own platform, in order for such players to make use of the custom tokens on the operator’s platform itself, provided that the custom tokens may not be taken out of the operator’s platform and any withdrawals are to be made in fiat currency after converting the custom tokens, on the operator’s platform, at the same exchange rate at which they were acquired.

Operators may wish to make use of third parties that accept cryptocurrencies from players whilst allowing the operator itself to deal solely in fiat currency. Such third parties may only be used if in possession of the relevant licence from a regulator within the EU or EEA, or any other jurisdiction which is deemed to provide equivalent safeguards. Operators making use of Third Party Crypto Payment processor shall ensure that wallets are verified to ensure that such wallets are owned by the same player.

Where the custom tokens do not have a fiat pair on any exchange which offers the necessary safeguards from the MGA’s perspective, the value thereof shall be assessed by using the exchange rate of such token with Ethereum, and subsequently using such value assessed against Ethereum’s Euro value in order to derive the Euro value of the custom token. The exchange from where the rate will be taken must be notified and approved by the Authority.

Exchange rate shall be taken on the last day of the month at 12:00 pm (noon) in UTC time for this purpose.

Any operator participating in the sandbox programme are to present a report of any failed return transactions so as to be able to explain any money being held in their wallets without any ownership.