Online Gaming Licences Compared (2026): Malta, UK, Isle of Man, Gibraltar, Alderney, Curaçao, Kahnawake, Estonia and Sweden

Who needs an online gaming licence, and which kind

Any business that offers casino games, sports betting, poker or bingo to players online needs a licence, and so do most of the platforms, game studios and aggregators that supply those operators. The question is not whether to be licensed but where, and that depends on one distinction: whether the target market licenses at the point of consumption or the licence follows the operator's own base.

• Point-of-consumption markets, such as Great Britain and Sweden, require a local licence for any operator serving their residents, wherever the operator is based. A licence elsewhere does not substitute for it.
• Point-of-supply hubs, such as Malta, the Isle of Man, Gibraltar, Alderney, Curaçao and Kahnawake, license the operator by where it is established, managed or hosted. These licences anchor a group's structure, its banking and its supplier relationships.
• EU national licences, such as Estonia's, cover the national market and accept companies registered elsewhere in the EU. There is no EU passport for gambling, so each Member State is licensed separately.

Most international groups therefore hold more than one licence: a hub licence for the core operation and its suppliers, plus a local licence in each regulated market that produces material revenue. The table below sets out the nine regimes most often compared.

Each regime has its own detailed page: the UK remote gambling licence, the Malta gaming licence and the Isle of Man gaming licence are the three most often held together by groups serving regulated European markets.

What each regulator requires: capital, people and local substance

The regimes differ less in what they assess than in how much of the business they expect to sit inside the jurisdiction. Every regulator reviews ownership, source of funds, the fitness of directors and key staff, and the player protection and anti-money laundering framework. The variables are fixed capital, resident people, hosting and premises.

Key people

Every regime licenses or approves individuals as well as the company. In Great Britain the Gambling Commission requires a personal management licence for the people responsible for overall management, strategy, finance, marketing, regulatory compliance, gambling IT and security, and the head of anti-money laundering. Malta assesses shareholders, owners and key persons as fit and proper, and Kahnawake issues a Key Person Permit to each key person. The practical result is the same everywhere: the chief executive, finance lead, compliance officer and money laundering reporting officer (the person accountable for anti-money laundering controls) need clean, documented histories and the experience to answer the regulator's questions in their own words.

Local substance

Substance is the largest cost difference between regimes. The Isle of Man and Gibraltar expect a real operation on the ground, with resident directors, staff and equipment. Curaçao's LOK, the National Ordinance on Games of Chance of 20 December 2024, moves the island from a nominal model to one with a local office and full-time key staff, and the CGA has confirmed that operators need not meet that requirement before 1 April 2027 (CGA postponement notice). Kahnawake's presence requirement is hosting, not people. Malta, Estonia and Sweden accept companies established elsewhere in the EU or EEA, which lets a group run one operating company across several licences.

Anti-money laundering and player protection

Every regulator expects a written risk assessment, customer due diligence proportionate to deposit levels, transaction monitoring, sanctions screening, a named money laundering reporting officer and suspicious activity reporting to the local financial intelligence unit. Responsible gambling controls, including self-exclusion, deposit limits and age verification, are assessed at the same time and tested again after launch.

Fees for each licence, side by side

Regulatory fees fall into three groups: a one-off application fee, an annual licence or supervision fee, and in some regimes a charge that scales with revenue. The figures below are the regulators' own published amounts for a B2C operator at the date of this guide.

Sources for each figure are the Gambling Commission's fee pages (fees in force from 1 October 2026), the MGA's guidance note on licence fees and taxation, the GSC's fee schedule, Gibraltar's Gambling (Duties and Licence Fees) Regulations 2026, the AGCC fee schedule, the LOK, the KGC fee notice, the ETCB's permit guidance and Sweden's Gambling Ordinance and SIFS 2026:1.

Fees for B2B suppliers

Platforms, aggregators and game studios hold their own licences in most regimes, and regulated operators may only use licensed suppliers.

Gaming tax and duty compared

For a growing operator, tax outweighs licence fees within the first year of trading. Point-of-consumption markets tax revenue from their own residents at high rates; hub jurisdictions charge low rates or fixed fees and compete on stability and substance instead.

The UK rates are set out in HM Revenue and Customs' gambling duty changes. Isle of Man gambling duty is charged under Manx law separately from the GSC's licence fees; the GSC's fee schedule publishes no duty rates, so the current bands are confirmed at scoping. Estonia's Parliament amended the Gambling Tax Act so that the 5.5% rate applies to remote games of chance as well as games of skill from 1 March 2026 (Riigikogu). Corporate income tax is assessed separately from gaming duty in every jurisdiction, and the group's overall position depends on where management and control sit.

How long each licence takes

Published timescales run from a complete application, so preparation time, typically six to ten weeks for a well-organised group, comes first. The regulator figures below are the authorities' own; the planning column is the range BCC works to from submission.

The Malta stages are those published on the Government of Malta's gaming licence service page. The fastest route to a live licence is a complete first submission: ownership charts that reach every beneficial owner, source of funds evidence for each investor, finished policies written for the firm's own model, and a technical environment ready for testing. Every regulator in this guide either stops its clock or extends it when information is outstanding.

Banking and payment processing for licensed operators

A licence is only commercially useful once players can deposit and withdraw. Payment infrastructure for a gaming operator has four parts, and each is planned alongside the application rather than after it.

1. Card acquiring. An acquirer that accepts gambling merchants, registered with the card schemes for the licensed markets. Acquirers review the licence, the target markets, the anti-money laundering framework and the chargeback history of the team.
2. Alternative payment methods. E-wallets, open banking and local bank transfer methods, which in several markets carry most deposit volume.
3. Player funds accounts. Accounts that keep player money separate from the operator's own. The Gambling Commission requires customer funds in a separate client account with the level of protection disclosed to customers; the Isle of Man expects player funds at an Isle of Man bank unless the GSC agrees otherwise; Alderney requires cash to exceed player balances at all times.
4. Operating and treasury accounts. Accounts for payroll, suppliers, tax and duty payments, often in several currencies.

Banks and acquirers treat the licence as the starting point and the regulator's reputation as a factor in their own risk assessment. A licence from a regulator with published supervision, enforcement and player protection standards widens the range of banking partners and lowers processing costs. Groups operating under a Curaçao or Kahnawake licence typically pair it with acquiring arranged in the markets they serve. Acquiring and player funds accounts are opened in parallel with the application, so the operator can launch on approval. See the Curaçao gaming licence page for the CGA's position on player balances.

What happens after approval

Approval starts the supervisory relationship. The obligations that follow are broadly similar across the nine regimes.

• Go-live conditions. Malta requires a systems audit before the licence issues. Alderney requires internal control system and equipment approval before it issues the letter allowing commercial operations. Kahnawake issues a six-month preliminary authorization before the full authorization.
• Annual fees and duty. Annual fees fall due on fixed dates, such as 15 January each year in Curaçao, and duty and contributions are paid on a fixed cycle, such as Malta's monthly compliance contribution.
• Change notifications. New shareholders, directors and key persons are notified or approved in advance in every regime, and new games or platforms are certified before launch.
• Regulatory returns and audits. Periodic returns on revenue, player funds, responsible gambling and anti-money laundering, with audited annual financial statements; Curaçao requires them by 30 June of the following year.
• Renewal. Some authorisations run for fixed terms, such as Kahnawake's five-year renewal cycle and Estonia's remote operating permit of up to five years for games of chance, while Estonia's activity licence is indefinite. Renewal applications are prepared well ahead of expiry.

Groups entering a new market after approval add local licences rather than extending the first. A hub licence holder entering Sweden applies to Spelinspektionen in Swedish; see the Sweden online gambling licence page.

How to choose the right gaming licence

The right licence follows from where the players are, what the business supplies and how much of the operation the group is prepared to locate in the jurisdiction. Five questions settle most decisions.

1. Which markets produce the revenue? Revenue from Great Britain or Sweden needs the Gambling Commission or Spelinspektionen licence, whatever else the group holds. Each regulated EU market needs its own national licence.
2. Is the business B2C, B2B or both? Malta, the Isle of Man, Gibraltar and Curaçao each license suppliers as well as operators, which lets a platform and its operator clients sit under one regulator.
3. How much substance can the group support? The Isle of Man and Gibraltar suit groups ready to employ people and host equipment locally. Malta, Estonia and Sweden accept EU or EEA companies. Kahnawake's requirement is hosting.
4. What does the tax line look like at scale? At £10 million of gross gaming revenue, a 0.15% rate and a 40% rate produce very different businesses. Model fees and duty at forecast year-three revenue, not launch revenue.
5. What will banks and partners accept? Acquirers, game studios and B2B partners set their own licensing conditions. A licence that partners recognise shortens every commercial negotiation.

In practice, groups targeting regulated European markets commonly combine Malta with Great Britain, adding Sweden and other national licences as revenue grows. Groups seeking a Crown Dependency base with a single licence across verticals choose the Isle of Man or Alderney. Established operators with a Gibraltar presence use the new Gambling Act 2025 regime, described on the Gibraltar remote gambling licence page. Operators focused on markets without a local regime use Curaçao or Kahnawake, with the LOK's substance requirements now part of the Curaçao decision.

Frequently asked questions

References

1. Gambling Commission: remote casino operating licence fees
2. HM Revenue and Customs: gambling duty changes
3. Malta Gaming Authority: licence fees and taxation guidance note
4. Isle of Man GSC: online gambling licence
5. Gibraltar: Gambling (Duties and Licence Fees) Regulations 2026
6. Curaçao: National Ordinance on Games of Chance (LOK), English translation
7. Estonian Tax and Customs Board: applying for permits
8. Sweden: SFS 2024:276 amending the Gambling Tax Act

Speak to an expert: WhatsApp +44 7563 115980, Telegram @buckinghamcapital or [email protected].

This article is general information, not legal advice. Requirements change, and the regulator’s own publications take precedence.