Setting Up an iGaming Company in Malta 2026: The Honest Guide

Malta did not become the world's iGaming capital by accident. It happened because in 2004 — the year Malta joined the EU — the Malta Gaming Authority was already a decade old. The regulatory framework existed before the market did. When the online gambling industry exploded in the mid-2000s, Malta had a ready answer: a licensed, EU-compliant, English-language jurisdiction with a proven regulator and a government that understood gaming revenue was real revenue.

Today, 315 companies hold MGA licences. The sector employs tens of thousands of people. The professional ecosystem — legal, technical, compliance, payment processing — has no rival in Europe for concentration and depth. When a new iGaming operator evaluates where to establish its EU base, Malta is not one option among many. It is the standard against which other options are measured.

Here is the honest setup guide — what it actually takes to establish an iGaming company in Malta in 2026.

Step 1: Choose Your Legal Structure

Almost every iGaming company in Malta incorporates as a Private Limited Company (Ltd). It offers limited liability, flexibility in shareholding, and compatibility with MGA licensing requirements. Larger groups sometimes use holding structures — a Malta holding company owning a Malta operating subsidiary — to optimise the corporate tax position through the participation exemption and shareholder refund system.

The legal structure decision affects licensing scope, compliance obligations, and tax position simultaneously. Making it correctly at the start is significantly cheaper than restructuring later.

Step 2: Incorporate with the Malta Business Registry

Company name reservation, Memorandum and Articles preparation, director and shareholder appointments, share capital deposit, and MBR filing. Turnaround: 5–10 working days once documentation is correct. Since March 2025, all MBR filings must go through a licensed CSP — you cannot file directly.

Step 3: Apply for an MGA Licence

The MGA licensing process is the dominant variable in any iGaming setup timeline. It involves:

• A detailed business plan and financial projections
• Background checks on all shareholders, directors, and Key Function nominees
• Complete compliance and AML/CFT policies
• Technical platform documentation and system architecture overview
• Fit and Proper assessments for all Key Function holders

The MGA licensing review — depending on the licence type (B2C Types 1-4 or B2B Critical Supply) — typically takes 12–16 weeks from complete submission. Incomplete applications, complex ownership structures, or high-risk target markets extend this. The non-refundable application fee is €5,000.

Step 4: Build the Compliance Infrastructure

The MGA requires an operational AML/CFT framework before go-live — not a promise to build one. This means:

• A Business Risk Assessment (BRA) identifying AML threats by product, market, and customer type
• A Customer Risk Assessment (CRA) model for applying SDD or EDD as appropriate
• Full KYC/KYB onboarding procedures
• Sanctions, PEP, and watchlist screening — continuous
• Transaction monitoring with escalation procedures
• Responsible gaming tools: deposit limits, self-exclusion, cooling-off periods
• An appointed MLRO who is MGA-approved and independent of commercial roles

Step 5: System Audit

Before going live, the gaming platform must pass an independent technical audit by an MGA-approved laboratory. The audit covers: RNG certification (for Type 1), game fairness and payout accuracy, control system logging, player fund segregation and reconciliation, and security infrastructure. A passed audit certificate is required before the MGA grants final approval to launch.

Step 6: Banking and Payments

This is where most iGaming setups encounter their longest delays. Banks classify gaming as high-risk and conduct enhanced due diligence regardless of MGA status. Expect: detailed business model review, source of funds documentation, proof of licensing status and compliance readiness, player fund segregation account requirements, and high-risk merchant account applications for card processing.

Start banking applications early — in parallel with the MGA process. Companies that wait for the licence discover that banking delays can match the licensing timeline.

The Ongoing Cost Structure