Malta iGaming Company Setup: What to Decide Before You Incorporate

Start with the business, not the company name

You may be ready to reserve a name and open a banking conversation, but the first decision is more basic: what will the Malta structure actually do? A consumer-facing operator, a B2B critical gaming supplier, and a holding or service company have different regulatory consequences. The Malta Gaming Authority describes the first two as separate licensing routes, and incorporation alone does not create a gaming authorisation.

A holding or administrative company may sit above or alongside an operating business, but its corporate form does not answer whether the group is offering, managing or materially supplying gaming. Map the customer journey, product, markets, technology, payment flows and decision-makers before choosing the entity structure. The Malta Company Formation Checklist can help with the general incorporation sequence, but it does not replace gaming scoping.

B2C operator or B2B supplier?

A B2C Gaming Service Licence is the relevant route where a Maltese or EU/EEA entity offers a gaming service from Malta, to a Maltese person or through a Maltese legal entity. The exact analysis still depends on the service, delivery channel, target markets and any applicable local-market or recognition rules.

The MGA identifies four core B2C types: Type 1 for house-banked games with random outcomes, Type 2 for fixed-odds betting, Type 3 for player-versus-player or commission-based games, and Type 4 for controlled-skill games. A product can contain more than one element, and the Authority may determine the closest category where classification is not straightforward.

The B2B Critical Gaming Supply route covers the supply or management of material game elements and software used to generate, capture, control or otherwise process essential regulatory records. It is not a general-purpose label for every technology vendor. A supplier should establish whether its product and contractual role fall within the MGA route before treating a Malta company as sufficient.

Entity, ownership and governance

An EU or EEA entity can apply if it meets the applicable share-capital and annual-financial-statements requirements. A Maltese company may nevertheless be preferable where the group wants Malta-based governance, local operating substance, clearer banking and payment arrangements, or a dedicated licensee with its own controls. That is a structuring decision, not a rule that every applicant must incorporate in Malta.

The Malta Business Registry handles incorporation, statutory filings and beneficial-ownership documentation. Under the Companies Act, a private company must have at least one director and every company must have a company secretary. A sole director generally cannot also be the secretary, although the Act contains an exception for a sole director of an exempt private company. Those are baseline company-law requirements; they do not by themselves demonstrate the governance or substance expected of a licensed gaming business.

Expect the MGA to examine founders, ultimate beneficial owners, directors, key persons, financial standing, source of funds and the proposed business model. Key functions require approval before appointment, and the MGA assesses integrity, honesty, reputation, competence and capability. Build the ownership and management evidence early rather than treating it as a document request after the application is filed.

Capital is only one part of financial readiness

The MGA minimum issued paid-up capital is €100,000 for Type 1 and Type 2 B2C services, €40,000 for Type 3 and Type 4, and €40,000 for a Critical Gaming Supply licence. Multiple B2C types are cumulative up to a €240,000 cap. These figures are licensing minimums, not a working-capital forecast for staff, technology, marketing, payments, compliance or launch losses.

The MGA Capital Requirements Policy, published on 2 July 2025, also introduced a positive-equity requirement, with transitional treatment described in the policy. Confirm the applicable transition for the proposed applicant and model liquidity, reserves and losses accordingly. A company that technically meets nominal capital requirements but cannot fund its controls is not operationally ready.

Design the operation before filing

Prepare the product map, ownership file, financial model, policies and technical architecture before submitting through the MGA Licensee Portal. The Authority directs applicants to use the applicable System Documentation Checklist and supporting enclosures. That preparation also exposes whether the proposed entity, directors, key functions, markets and suppliers fit together.

Outsourcing is possible for functions such as platform, payments, compliance support, customer operations or game supply, but it does not outsource regulatory accountability. The MGA requires the applicable outsourcing process; material supplies must be notified within 30 days, while critical supplies or services require prior approval before the agreement is entered into.

For a remote B2C launch, arrange separately identifiable player funds, payment and banking controls, responsible-gaming tools, self-exclusion and limits, customer-support processes, prescribed website information and an approved alternative-dispute-resolution entity. These controls belong in the product and operating model, not in a last-minute compliance folder.

After the application review, incorporation and filing are not the end of the launch process. The applicant must implement the approved systems in a technical environment and undergo the applicable system-review and external system-audit process before go-live. Build this work into the launch plan rather than treating technical architecture as a document submitted once and then forgotten.

AML, reporting and the launch clock

Remote gaming operators fall within Malta’s AML/CFT supervisory framework. The FIAU’s remote-gaming guidance points to the practical programme you will need to build: customer due diligence, risk assessment, transaction monitoring and suspicious-transaction reporting, coordinated with the MGA obligations.

Remote B2C licensees must submit audited financial statements within six months of the financial year-end. Further declarations concerning player funds and gaming revenue are due within nine months. Put these deadlines, audit evidence, reconciliations and board review into the finance calendar from the first trading period.

The MGA gives a licensee 90 days to go live after licence issuance. Fees, compliance contributions and gaming tax are due from issuance, and the Declaration of Go-Live must be submitted at least two days before the stated launch date. The 90-day period is a regulatory launch constraint, not a promise about how long the application process or technical audit will take.

Tax: model the facts, not a headline rate

The Malta Tax and Customs Administration states that Maltese companies are generally taxed at 35% on worldwide income and capital gains, and that shareholders may be entitled to a refund of part or all of the tax paid after a dividend distribution. The result depends on the statutory facts, including residence, management and control, income character, shareholder status, anti-abuse rules and distributable profits. Incorporation alone does not guarantee an effective rate.

The revised VAT and gaming-tax framework is effective from 1 October 2026. For remote gaming services offered solely through distance communication, the 2026 rules do not rely on physical presence alone: the relevant geographic analysis refers to whether the player is established in Malta, has a permanent address there or usually resides there, subject to the applicable exclusions and licensing conditions.

Older MGA pages may still display legacy fee or tax wording, while the operative framework is now the legislation and implementation material in force on 1 October 2026. Model the actual activity, customer location, game type, mode of offer and licence status, and confirm any portal or implementation requirements before relying on a rate calculation.

A practical sequence for decision-makers

First, classify the product and markets; then decide whether the licensee should be Maltese or an existing EU/EEA entity. Next, map ownership, directors, key functions, source of funds, capital and management substance. Only then should you finalise incorporation, banking, payment flows, suppliers, technical controls and the MGA application package.

After submission and application review, implement the approved system in the required technical environment, complete the system-review and external-audit steps, and resolve any findings before the go-live declaration. In parallel, test player-funds segregation, responsible-gaming journeys, AML monitoring, reporting, incident escalation, access controls, supplier oversight and customer support.

The sensible next step is a written product-and-structure scoping exercise that identifies the proposed gaming type, applicant entity, ownership chain, Malta functions, outsourced services, target markets and tax assumptions. Have Maltese legal, regulatory and tax advisers test that map against the current MGA, FIAU, MBR and MTCA requirements before capital is committed or contracts are signed.

What this article does—and does not—cover

This guide focuses on the coordinated setup of an iGaming business: entity choice, licensing route, governance, capital, substance, systems, player funds, AML, tax and launch readiness. Product-specific questions such as sports betting, crypto gaming or software-provider licensing need their own classification and regulatory analysis.

Questions people ask

Can an EU or EEA company apply for a Malta gaming licence?

Yes. The MGA states that an EU or EEA entity is eligible to apply if it meets the applicable capital and annual-financial-statement requirements. Eligibility to apply is not approval, and the entity must still satisfy the Authority on ownership, management, financial standing, technical readiness and regulatory fitness.

What is the minimum share capital for a Malta iGaming company?

For B2C services, the MGA minimum is €100,000 for Type 1 and Type 2, and €40,000 for Type 3 and Type 4. Multiple types are cumulative up to €240,000. A B2B Critical Gaming Supply licence has a €40,000 minimum. These amounts do not represent total working capital.

Does incorporating in Malta automatically create a gaming licence or tax result?

No. Incorporation creates a company; it does not create an MGA authorisation, operational substance, tax residence or guaranteed effective tax rate. Each outcome depends on the actual structure, activities, management, ownership, controls and applicable law.

What happens after the MGA application is submitted?

Application review is followed by implementation of the approved systems in a technical environment and the applicable system-review and external-audit process. Those steps, together with the 90-day post-licence go-live period, should be built into the launch plan.

How long do you have to launch after an MGA licence is issued?

The MGA states that a licensee has 90 days to go live after issuance. Fees, compliance contributions and gaming tax are due from issuance, and a Declaration of Go-Live must be submitted at least two days before the stated launch date.

Can a Malta iGaming operator outsource its platform and compliance functions?

Outsourcing is permitted in principle, but the licensee remains responsible for the regulated operation. The MGA requires the applicable outsourcing process, notification for material supplies and prior approval for critical supplies or services.

Does remote gaming tax depend only on whether a player is physically in Malta?

No. Under the 2026 rules for services offered solely through distance communication, the analysis refers to whether the player is established in Malta, has a permanent address there or usually resides there, subject to the applicable rules and exclusions.