Compliance

Malta

Europe's online-gaming licensing hub — home of the Malta Gaming Authority, whose B2C licence powers a large share of the regulated EU market under a risk-based, outcome-focused player-protection rulebook.

Malta is the de facto licensing hub for online gaming in Europe: a great many operators serving regulated European markets hold a Malta Gaming Authority licence, and the MGA's standards therefore shape how a large slice of the industry behaves. The framework is the Gaming Act (Cap. 583), with the operational detail in the Player Protection Directive (Directive 2 of 2018), the Gaming Authorisations Directive (Directive 3 of 2018), and the Gaming Commercial Communications Regulations (S.L. 583.09). The MGA's supervision is risk-based and outcome-focused rather than purely prescriptive. This page covers the regulator, the legal requirements, the helpline, player-protection tools, self-barring, and advertising.

Start here

See how Malta sits against every other market on the live interactive Coverage Map, and confirm any requirement against the official regulator — the Malta Gaming Authority. This page is a business-readable summary; the MGA's site is the source of record.

What makes Malta distinctive

Malta is the EU online-gaming licensing hub, and its supervision is risk-based and outcome-focused rather than tick-box. The responsible-gaming page must be reachable within one click from anywhere on the site. Self-barring runs in fixed terms — 6 or 12 months, or 12 months auto-renewing — and cannot be lifted until the period ends. The national helpline is the Responsible Gaming Foundation (RGF) Supportline, 1777, free and 24/7, with extra support via Sedqa on 179. Advertising must carry the licensee name, licence number, minimum age, and a responsible-gaming message, with penalties of up to EUR 25,000 per breach. The land-based casino age is split: 18+ for non-Maltese, 25+ for Maltese citizens.

Who regulates: the Malta Gaming Authority

Gaming in Malta is regulated by the Malta Gaming Authority (MGA), established under the Gaming Act (Cap. 583). The MGA licenses both business-to-consumer (B2C) and business-to-business (B2B) operators, sets and enforces the directives that sit beneath the Act, and supervises licensees through a risk-based model — concentrating attention where the risk of harm is greatest rather than applying one uniform checklist to all. Because Malta is the licensing base for so many operators serving the wider EU, the MGA's player-protection rules carry weight well beyond the island.

18+
Minimum age for online gambling; the land-based casino floor is 25+ for Maltese citizens
1 click
Maximum distance to the responsible-gaming page from anywhere on a remote site (PPD Art. 10)
EUR 25k
Maximum penalty per advertising breach under the Commercial Communications Regulations

The minimum age is 18 for online gambling and for non-casino land-based gambling. Land-based casinos apply a split age: 18+ for non-Maltese visitors and a higher 25+ for Maltese citizens. Online casino and sports betting are legal under an MGA B2C licence, and an underage-gaming notice must appear on all remote gaming sites (PPD Art. 4).

Requirement / productStatusBasis
Minimum age (online)18+ for all remote gamblingGaming Act (Cap. 583); PPD Art. 4
Minimum age (land-based, non-casino)18+Gaming Act (Cap. 583)
Land-based casino — non-Maltese18+Gaming Act (Cap. 583)
Land-based casino — Maltese citizens25+ (a higher floor for residents)Gaming Act (Cap. 583)
Online casino & sports bettingLegal — under an MGA B2C licenceMalta Gaming Authority

For the player-facing odds behind these products, see the Game Guides on slots and sports betting.

Key player-protection requirements

These obligations come from the Player Protection Directive and the Commercial Communications Regulations. Each links to its primary source published by the MGA.

RequirementReferenceVerticals
Provide responsible-gambling information including game rules and odds. Remote operators must show a responsible-gaming page reachable within one click from anywhere on the site. PPD (Dir. 2 of 2018), Arts. 9–10 Casino · Online · Sports
Display a link to one or more gambling-help organisations — the Responsible Gaming Foundation Supportline 1777, plus support via the Sedqa helpline 179. PPD (Dir. 2 of 2018), Art. 9 Casino · Online · Sports
Offer deposit or wagering limits (both encouraged) and reality checks; give players the chance to set limits before or during registration; offer time-outs from 24 hours to 30 days. PPD (Dir. 2 of 2018), Art. 14 Online · Sports
Provide self-barring / self-exclusion. Land-based: 6 or 12 months, or 12 months auto-renewing, not removable until the period ends. Remote: definite or indefinite, implemented immediately, with no inducement to continue. PPD (Dir. 2 of 2018), Art. 11 Casino · Online · Sports
Advertising must carry the licensee name, licence number, minimum age, and a responsible-gaming message. Penalties of up to EUR 25,000 per breach. Commercial Communications Regs (S.L. 583.09) Casino · Online · Sports
Train staff who handle responsible-gaming matters, monitor player habits, and retain records of player interactions and investigations for MGA review. PPD (Dir. 2 of 2018), Arts. 16(2) & 18(1) Casino · Online · Sports

The Player Protection Directive itself is published by the regulator as a PDF on the MGA site, alongside the broader player-protection hub.

The helpline and how it must appear

Malta's national support line is run by the Responsible Gaming Foundation (RGF): the Supportline 1777, a free and confidential freephone service available 24/7, with a chat facility on the RGF website and the option to remain anonymous. Additional support is available through the Sedqa agency on 179. Under the Player Protection Directive (Art. 9), operators must display a link to one or more gambling-help organisations; remote operators must provide this within one click from anywhere on the site, and commercial communications must link to the RGF (rgf.org.mt) or an equivalent support organisation.

RGF Supportline 1777

Free, confidential, 24/7. Anonymous if the caller prefers. Run by the Responsible Gaming Foundation, with chat at rgf.org.mt.

Sedqa 179

The national agency against drug and alcohol abuse, whose helpline also supports people affected by gambling-related harm.

One click away

On remote sites the responsible-gaming page — carrying these contacts — must be reachable within a single click from anywhere (PPD Art. 10).

Both displays below meet the obligation. The on-brand version adds the channels, flags that it is free and confidential, and frames the line as available for anyone affected — not only the player in crisis.

Bare compliance

If gambling is becoming a problem, call the RGF Supportline on 1777.

The Playbook way

Free, confidential support — 24/7, and anonymous if you prefer. Call the RGF Supportline on 1777 or chat at rgf.org.mt.

Player-protection tools

The Player Protection Directive sets out the toolkit remote operators must offer. Limits and reality checks are mandatory to offer; loss and session limits are encouraged on top.

ToolWhat it doesReference
Deposit or wagering limitsOffer at least one (both encouraged); the chance to set them comes before or during registrationPPD Art. 14
Reality checksOn-screen prompts that help players track how long a session has runPPD Arts. 14 & 17(1)
Time-outsShort cooling-off breaks from 24 hours up to 30 daysPPD Art. 14
Self-exclusionDefinite or indefinite, implemented immediately, across all the licensee’s brandsPPD Art. 11
Loss & session limitsLoss limits and session/time limits are encouraged on top of the mandatory toolsPPD Art. 14
Before the first deposit

The directive front-loads protection: before a player's first deposit, operators must give information about all the available responsible-gaming tools (PPD Art. 14), and a responsible-gaming message explaining that gaming can be harmful if not controlled must be displayed (PPD Art. 9). Staff who deal with player interactions must be routinely trained to spot signs of harm (PPD Art. 18(1)) — see Playbook Academy for certification.

Self-barring and self-exclusion

Malta uses the term self-barring for land-based exclusion and self-exclusion for remote. The two work differently, and a defining feature is that land-based self-barring cannot be lifted early — once set, it runs its full term.

ChannelOptionsKey ruleBasis
Land-based self-barring6 months · 12 months · 12 months auto-renewingCannot be removed until the period expiresPPD Art. 11
Remote self-exclusionDefinite or indefinite periodImplemented immediately; no inducement to continue; applies across all the licensee’s brandsPPD Art. 11
Language mapping

In everyday brand copy, say "take a break" or "step away." Reserve the formal terms — "self-barring" for land-based and "self-exclusion" for remote — for enrolment pages, help content, and support referrals. When a player asks how to stop, point them to self-barring at the venue or self-exclusion on the site, and explain that a land-based bar runs its full term once set. See Voice & Tone for the register these moments call for. The MGA's self-barring page is the player-facing reference.

Advertising restrictions

Gambling advertising is governed by the Gaming Commercial Communications Regulations (S.L. 583.09), supported by the MGA's Commercial Communications Committee guidelines. Every gambling ad must carry four things, and there is a broad prohibition on advertising in public places.

What every ad must include

Licensee name Licence number Minimum age Responsible-gaming message

The advertising rules

Not allowed
  • Gambling ads in public places — with limited exceptions for tourist locations, airports, and hotels
  • Targeting minors or vulnerable persons
  • Suggesting gambling solves financial or social problems
  • Gambling ads during or adjacent to children's programmes
Required
  • Licensee name and licence number on the face of the ad
  • The minimum age to participate
  • A responsible-gaming message and a link to the RGF or an equivalent organisation
  • Compliance overall — breaches carry penalties of up to EUR 25,000 each

Most Playbook content is educational — how games work, odds literacy, myth-busting — so these advertising rules do not constrain it. The guardrail is simple: keep educational content clearly separate from any promotion, never frame gambling as a fix for money or social problems, and carry the responsible-gaming message and RGF link where the communication is promotional. A short FAQ on what an ad must contain is published by the regulator at the MGA advertising FAQ.

Scope and disclaimer

This page is a summary for content and marketing teams — a map of Malta's regulatory landscape, not legal advice. The MGA's directives and guidelines are updated periodically, and supervision is risk-based, so the exact expectation can vary by licensee and product. Confirm the current Gaming Act, the Player Protection Directive, and the Commercial Communications Regulations with the Malta Gaming Authority and qualified counsel before deployment.