Licensing and player protection

What a UK Gambling Commission or Malta Gaming Authority licence actually obliges an operator to do, and how to check a licence claim yourself.

A licence is not a quality rating and it is not an endorsement. It is a set of enforceable obligations, and knowing which obligations attach to which regulator is the difference between a claim you can check and a logo in a footer.

This page describes the general framework. It does not assess or comment on any individual operator.

Great Britain: the Gambling Commission

Any operator that advertises to or takes bets from customers in Great Britain must hold a licence from the Gambling Commission, wherever in the world the company itself sits. A licence from anywhere else, however reputable, does not confer that permission.

The licence conditions cover a lot of ground, but the obligations that matter to a player are reasonably concise:

Age and identity verification before play. Operators must verify age before a customer can deposit or gamble, rather than at the point of withdrawal. Identity checks that only appear when you try to take money out are a sign of a process running the wrong way round.

Customer funds disclosure. Operators must tell you, in their terms, what would happen to your balance if the company failed, using a defined rating scale from not protected through basic and medium to high segregation. This is stated rather than guaranteed — the point of the rule is that you can find it out before you deposit. It is one of the few genuinely comparable facts published across operators.

Alternative dispute resolution. Every licensee must belong to an approved ADR body, and you can escalate a complaint there free of charge once the operator's own process has finished or eight weeks have passed. The ADR provider is named in the operator's terms. Note the boundary: ADR bodies settle disputes about the operator's conduct and terms; they are not a route to appeal the outcome of a game.

GAMSTOP. All operators licensed to offer online gambling to Great Britain must be signed up to the national self-exclusion scheme, which is what makes a single registration effective across every one of them at once.

Safer gambling controls. Deposit limits, session reminders, time-outs and self-exclusion must all be offered, and operators are required to monitor for and act on indicators of harm.

Advertising and bonus rules. Promotions must not be misleading, and their significant conditions have to be presented with the offer rather than buried.

You can check any claimed GB licence yourself on the Commission's public register at gamblingcommission.gov.uk. Search by the trading name or the company behind it, and confirm that the domain you are on is listed against that licence. A licence number printed in a footer is a claim; the register is the record.

Malta: the MGA

The Malta Gaming Authority licenses a large share of the European online market. Its framework covers player funds, game fairness testing, responsible gambling requirements and complaints handling, and it operates a player support function that will take up a complaint against a licensee once the operator's own process is exhausted. Licences are listed publicly on the authority's site at mga.org.mt.

The point that gets lost in marketing copy: an MGA licence is a real regulatory regime, but on its own it does not authorise an operator to serve customers in Great Britain, and it does not connect them to GAMSTOP. If self-exclusion is something you rely on, that distinction is the whole ballgame.

Other jurisdictions, briefly

Several other regulators license substantial numbers of online operators — Gibraltar, the Isle of Man, Alderney and Curaçao among them, alongside national regimes across the EU. They differ considerably in the depth of their player-protection requirements and in how actively they supervise licensees. Curaçao in particular has historically operated a much lighter regime than the UK or Malta and has been going through a reform process intended to tighten it; it is fair to say the picture there has been changing and is worth checking rather than assuming.

Two general principles hold whatever the flag:

The regulator that matters is the one covering you, not the one covering the company. Protections attach to the licence under which you are being served.

And enforcement capacity is not the same as rules on paper. A regulator with a published complaints process, a searchable register and a visible record of action is offering something materially different from one that publishes a licence list and little else.

What licensing does not do

It does not make a game fairer in the sense most people mean. Licensed RNG games are independently tested to confirm they behave as specified — that the random number generator is genuinely unpredictable and that the game returns what its paytable says. That is a real and worthwhile assurance, and it verifies the house edge rather than removing it. A properly certified 96% slot is certified to keep 4% of turnover.

Nor does it protect you from your own volume. The expected loss calculator applies identically at the best-regulated operator in the world.

What licensing gives you is a floor: your age is checked, your money is accounted for in a stated way, the games do what they claim, there is somebody to complain to, and the exclusion tools work. Those are worth having. They are not the same as safety.

18+. Free and confidential support is available from the National Gambling Helpline on 0808 8020 133, and from BeGambleAware.