Three Licences That Power Most Non-GamStop Casinos in the UK

Three Licences That Power Most Non-GamStop Casinos in the UK

I once sat in a conference room in Valletta watching two compliance officers from different operators argue about whether a Curaçao licence was “real regulation” or “a receipt for a fee.” The MGA-licensed officer was dismissive; the Curaçao-licensed one was defensive. Neither was entirely wrong. That exchange captures the fundamental problem UK players face when they step outside the UKGC system: not all offshore licences are created equal, but the differences are rarely explained in plain terms.

Three jurisdictions dominate the non-GamStop casino landscape for UK players – Malta, Gibraltar, and Curaçao. Together, they account for the vast majority of offshore operators that accept British registrations. Each framework has its own logic, its own enforcement history, and its own gaps. The CGA’s register now lists over 330 active licences following the LOK reform, and the MGA and Gibraltar authorities maintain their own registers with comparable transparency. But the protections behind those licences vary enormously, and a player who treats them as interchangeable is making a mistake that could cost real money.

What follows is a jurisdiction-by-jurisdiction breakdown based on nine years of tracking how these frameworks operate in practice – not just what their statutes promise on paper. I have reviewed enforcement actions, spoken to compliance teams at licensed operators, and followed dispute outcomes across all three jurisdictions. The aim is to give you enough information to understand what a licence from each jurisdiction actually means when it matters – which is when something goes wrong.

Malta Gaming Authority – Tier-One Regulation Outside the UKGC

If you have ever wondered why gambling industry professionals tend to rank Malta just below the UKGC, the answer is infrastructure. The MGA is not a recent creation riding a wave of offshore demand – it has been regulating remote gambling since 2004, longer than many national regulators that now consider themselves established. That two-decade head start shows in the depth of its operational framework.

The MGA operates a tiered licensing system. B2C operators – the ones that deal directly with players – hold a different class of licence from B2B providers like game studios and platform suppliers. This distinction matters because it creates dual accountability: if a game provider supplies a product to an MGA-licensed casino, both the provider and the casino are subject to MGA oversight for that game’s fairness, RTP accuracy, and RNG integrity. Under frameworks where only the operator is licensed, a rogue game supplier can operate without direct regulatory scrutiny.

Player protection is where Malta genuinely separates itself from the pack. The MGA requires licensed operators to segregate player funds from operational accounts – meaning your balance should be held in a ring-fenced account that the operator cannot dip into for payroll or marketing expenses. If an MGA-licensed operator becomes insolvent, player funds are, in theory, protected. I say “in theory” because insolvency cases are complex and rarely deliver full recovery, but the structural safeguard is real and it does not exist in every jurisdiction.

The MGA’s Player Support Unit handles complaints that operators fail to resolve internally. The process is not instant – it can take weeks – but it carries enforcement weight. The MGA can compel an operator to pay out a disputed withdrawal if the PSU finds in the player’s favour, and it can impose fines or suspend licences for non-compliance. Over the years, I have seen the PSU intervene in cases ranging from bonus term disputes to outright withdrawal refusals, and its track record, while imperfect, is substantially better than anything available under Curaçao or most other offshore frameworks.

The MGA also mandates responsible gambling tools: deposit limits, session time reminders, self-exclusion options, and cool-off periods. These requirements mirror much of what the UKGC demands, though the enforcement intensity differs. An MGA-licensed operator that quietly removes a player’s deposit limit without consent faces regulatory consequences; whether those consequences arrive as swiftly as they would under the UKGC is another matter.

What the MGA does not provide is integration with GamStop. An MGA-licensed casino will not check a player’s GamStop registration, which is precisely why self-excluded UK players can access these sites. This is the central tension of the MGA framework for UK users: it offers genuine regulatory substance while remaining outside the self-exclusion system that exists to protect vulnerable players.

One more detail that rarely appears in comparisons but matters in practice: the MGA requires licensed operators to maintain a physical presence in Malta. This means the company has staff, an office, and assets within a jurisdiction that cooperates with EU legal processes. If a dispute reaches the point of legal action, the operator is not a shell company in a jurisdiction with no reciprocal legal agreements – it is a registered entity in an EU member state. That distinction has practical consequences for UK players seeking recourse, even though the UK is no longer an EU member, because EU-UK mutual legal assistance arrangements still function.

Gibraltar Licensing – The British Overseas Territory Framework

Gibraltar occupies a peculiar position in the offshore licensing landscape – it is technically a British Overseas Territory, which gives its regulatory framework a degree of familiarity and legal proximity that other offshore jurisdictions cannot match. Several of the largest gambling operators in the world – companies that also hold UKGC licences – maintain their primary corporate presence in Gibraltar for tax and operational reasons.

The Gibraltar Gambling Commissioner oversees a relatively small number of licensees compared to Malta or Curaçao, but those licensees tend to be larger, more established operations. Gibraltar has historically been selective about who it licences, favouring operators with proven track records and significant capital reserves. This selectivity means that a Gibraltar gambling licence carries reputational weight – it signals that the operator met a high bar for entry, even if the ongoing supervisory intensity does not match the UKGC’s.

Player fund protection under Gibraltar’s framework follows a similar logic to the MGA’s. Operators must demonstrate that player deposits are held separately from company funds, and the Gambling Commissioner has the authority to investigate complaints and take enforcement action. In practice, Gibraltar’s enforcement tends to be less publicly visible than the MGA’s – fewer published rulings, fewer publicised fines – but industry contacts who have dealt with the Commissioner’s office describe it as responsive and professional when disputes escalate.

The territory’s geographic and legal relationship with the UK creates an interesting dynamic. Gibraltar-licensed operators are more likely to accept GBP without currency conversion, more likely to offer customer support during UK hours, and more likely to structure their terms and conditions in ways that feel familiar to British players. None of this constitutes regulatory protection in the formal sense, but it does reduce the friction that UK players often experience at casinos licensed in more distant jurisdictions.

Gibraltar’s limitations mirror its strengths. The small size of the jurisdiction means the Gambling Commissioner’s office has limited resources for proactive enforcement. It functions well as a gatekeeper – vetting applicants rigorously before granting licences – but its capacity for ongoing monitoring of day-to-day operations is constrained. For UK players, this means a Gibraltar licence is a strong signal of operator quality at the point of entry, but it offers less continuous oversight than the UKGC or MGA provide.

There is also the post-Brexit dimension. Before the UK’s departure from the European Union, Gibraltar-licensed operators could passport services into EU markets with relative ease. That passporting ability has narrowed, and some operators have restructured to hold both Gibraltar and MGA licences. For UK players, the practical impact is minimal – Gibraltar-licensed sites remain accessible and the regulatory framework unchanged – but the shifting corporate arrangements behind the scenes reflect a broader fragmentation of the European gambling market that affects operator strategy and, indirectly, the quality of player experience.

Curaçao CGA – Post-Reform Licensing Standards

Anyone who has read my analysis of the Curaçao LOK reform knows the full story: a complete overhaul from a master-licence system to direct regulation through the Curaçao Gaming Authority. I will not repeat the entire timeline here, but the key facts matter for this comparison.

The CGA now issues direct licences after individual review. Out of roughly 140 applications processed by April 2026, approximately 38% have been refused or deferred – a rejection rate that would have been unthinkable under the old system, where fees essentially guaranteed approval. The public register lists over 330 active licences, but that number includes transitional (orange seal) operators whose applications are still under review.

The reform introduced mandatory requirements for player fund segregation, AML procedures, and responsible gambling tools. On paper, these requirements bring Curaçao closer to Malta and Gibraltar. In practice, the CGA is a young authority still building its enforcement capacity. It does not yet operate a player compensation fund. Its dispute resolution mechanism exists but has not accumulated the track record that the MGA’s Player Support Unit has developed over two decades. And the annual licence cost of EUR 47,450 – while a significant increase from the old sublicence fees – is still lower than what comparable MGA or Gibraltar licences cost when all associated compliance expenses are factored in.

The most useful way to think about Curaçao’s post-reform position is as a framework in transition. It is meaningfully better than what preceded it, but it has not yet proven that its new standards will hold under pressure. For UK players, a green-sealed CGA licence is a credible minimum – it means the operator has passed a real review. But it is not equivalent to an MGA or Gibraltar licence in terms of the recourse available if something goes wrong.

Head-to-Head – Player Protection, Dispute Resolution, and Costs

Stripped to essentials, the three frameworks diverge most sharply in three areas: what happens when you have a problem, how your money is protected, and what it costs the operator to maintain the licence – because that cost shapes the operator’s incentives.

Dispute resolution is the sharpest dividing line. The MGA’s Player Support Unit can investigate complaints, compel operators to provide evidence, and issue binding rulings. Gibraltar’s Gambling Commissioner can investigate and mediate, though published enforcement data is sparser. The CGA offers a complaints channel, but its capacity to adjudicate complex disputes is still developing. If you have a withdrawal stuck at an MGA-licensed casino, you have a structured path to escalation. At a Curaçao-licensed site, you are more likely to depend on the operator’s goodwill or public pressure through player forums.

Player fund protection shows a similar gradient. Both MGA and Gibraltar require fund segregation, and both have regulatory mechanisms to enforce it. The CGA now requires segregation under its new framework, but the absence of a player compensation fund means that if a Curaçao-licensed operator collapses, there is no safety net – no industry-funded pool to cover outstanding player balances. The MGA does not operate a full compensation scheme either, but its fund segregation requirements are more detailed and more rigorously audited.

Operator costs tell a revealing story about the regulatory environment’s seriousness. An MGA B2C licence involves a significant application fee, annual licence fees scaled to revenue, and ongoing compliance costs that include regular audits, mandatory reporting, and staff training requirements. Gibraltar’s costs are comparable for operators of similar size. The CGA’s annual EUR 47,450 is lower in absolute terms, though the compliance infrastructure an operator must build to meet the new requirements adds substantially to the real cost. What matters for players is the principle behind the cost: higher compliance costs filter out undercapitalised operators who cut corners on player protection to maintain margins.

Andrew Rhodes, CEO of the UK Gambling Commission, has spoken publicly about the Commission tracking over 1,000 illegal operators – a figure that underscores the scale of the unlicensed market. Within the licensed offshore space, the distinction between jurisdictions is not about legality but about the depth of protection. A player at an MGA-licensed casino has more regulatory infrastructure working on their behalf than a player at a CGA-licensed casino. Whether that difference matters depends on whether anything goes wrong – and in gambling, things go wrong more often than anyone expects.

One area where all three jurisdictions fall short compared to the UKGC is responsible gambling enforcement. The UKGC can and does impose multi-million-pound fines for responsible gambling failures, revoke licences, and mandate remedial action plans. The MGA fines operators too, but typically at lower levels. Gibraltar and Curaçao are even less aggressive on this front. For players who self-excluded through GamStop and are now gambling offshore, this gap in enforcement is directly relevant: no offshore regulator is actively checking whether its licensees are screening out self-excluded UK players, because none of them are connected to the GamStop database.

Checking a Licence Is Genuine – Step by Step

Here is the uncomfortable truth about licence verification: most players never do it. In nine years of covering this space, I have spoken to hundreds of players who deposited at offshore casinos without once checking whether the licence displayed in the footer was real. The process takes under two minutes, and it is the single most effective way to avoid outright scam operations.

For MGA-licensed casinos, the process starts at the MGA’s own website. The authority maintains a public register of all licensed operators, searchable by company name or licence number. Each entry shows the operator’s legal name, trading names, licence class, and current status. If the casino you are considering does not appear on this register, the licence is not genuine – regardless of what badge appears on the site.

Gibraltar’s register works similarly. The Gibraltar Gambling Commissioner publishes a list of licensed operators, and each entry can be cross-referenced with the details displayed on the casino’s website. Gibraltar licences are fewer in number than MGA or Curaçao licences, so the register is smaller and easier to search.

For Curaçao, the CGA’s register is the definitive source. As discussed in the previous sections, each legitimate licence comes with a unique number and a verification seal – green for fully approved, orange for transitional. The seal on the casino’s website should link directly to the CGA’s verification page. If it links elsewhere, or if the link is broken, the seal is fabricated.

Beyond the register check, there are secondary signals worth noting. Legitimate licensed operators almost always display their licence number prominently, typically in the footer alongside a link to the regulator’s website. They publish terms and conditions that reference the specific jurisdiction’s regulatory requirements. And they provide a complaints procedure that includes an escalation path to the licensing authority. If any of these elements are missing, proceed with caution – the operator may hold a licence but is not meeting its display obligations, or it may not hold a genuine licence at all.

A final note on timing: registers are updated regularly but not instantaneously. If you check a licence and the register shows no match, it is worth checking again in a day or two before concluding the licence is fake. New licences take a short time to appear after approval, and register maintenance can occasionally lag. That said, if a casino has been operating for months and its licence number does not appear on the relevant register, the absence is definitive.

Frequently Asked Questions