MGA
Malta Gaming Authority
The best-known EU gaming regulator. Strong dispute infrastructure, mandatory RTP disclosure, and a working complaints process.
Overview
Malta was the first EU member state to regulate remote gaming (2004). The MGA operates under EU law and is broadly considered the strongest regulator for cross-border online gambling. Approximately 40% of the licensed EU-facing operators hold an MGA licence, either as their primary or secondary licence. Operators pay a €25,000 annual fee plus 5% gaming tax on GGR — this cost gets passed through to bonus wagering multipliers and cashout caps, but it also underwrites a real regulator.
Player protections in place
- Mandatory participant fund segregation — player money cannot be used for operational expenses
- Player-fund insolvency guarantee up to €100,000 per player
- RTP must be published on every game
- Responsible-gaming tools required: deposit limits, session timers, self-exclusion, cooling-off
- AML compliance to EU standards; KYC required at €2,000 threshold
- Ban on advertising to minors and self-excluded players
How to file a complaint
Contact operator support first. If unresolved after 15 business days, file a Player Support complaint at support.mga.org.mt. MGA typically resolves in 30-60 days. If the operator refuses to comply with an MGA ruling, the licence can be suspended. Independent ADR bodies (eCOGRA, IBAS) can act as intermediaries.
Red flags to watch
- Any operator claiming "MGA licensed" without a licence number visible in the footer
- Operators offering an MGA-branded page for EU players but redirecting non-EU players to a shell operator on a different licence — check the footer of the page you actually land on
- MGA licence held by a corporate shell that owns multiple brands with different reputations
Typical player-side issues
- Withdrawal delays over 5 business days without communication
- KYC document rejection loops
- Bonus-abuse account closures where the "abuse" is normal play
- Withdrawal caps mid-process not disclosed at deposit time
Our take
MGA is the default recommendation for a mainstream EU player. Not perfect, but the dispute path works and the operators know it. When we rate an operator, an MGA licence is worth +0.4 on our safety score vs an unlicensed or offshore-only operator.
See our dispute-resolution glossary entry for the full escalation sequence and our withdrawal process guide for how licence quality shows up in real cashouts.