MGA-Licensed Operators: Banking Requirements, Preferred Partners, and Compliance Infrastructure

The Malta Gaming Authority (MGA) is one of the most respected gambling regulators in the world, and an MGA licence is widely accepted as evidence of a credible operator. Despite this, MGA-licensed operators — particularly those incorporated offshore and operating globally — encounter significant banking challenges. Understanding the MGA's specific banking requirements and the compliance infrastructure that supports them is essential for any operator in this jurisdiction.

The MGA Regulatory Framework

The MGA operates under the Gaming Act (Chapter 583 of the Laws of Malta), which came into force in August 2018 and consolidated the previous fragmented licensing framework into a single B2C and B2B licence structure. Key licence types include:

• B2C Gaming Service Licence: for operators offering gaming services directly to players (casino, sports betting, poker, etc.)
• B2B Critical Gaming Supply Licence: for providers of gaming systems, platforms, or critical software to licensed B2C operators

The MGA's Player Protection Directive and Anti-Money Laundering Implementing Procedures set out detailed obligations for licensees regarding player funds, transaction monitoring, and reporting. These obligations directly shape the banking infrastructure operators must maintain.

Player Fund Segregation Requirements

Under the MGA's Directive 3 of 2018 on Player Funds Protection, operators are required to safeguard player funds — the balances held on account for players — in a manner commensurate with one of three protection levels. The highest protection level (Level 3) requires that player funds are held in a trust with a specified trustee, providing protection equivalent to insolvency protection. Most operators target Level 1 or Level 2 segregation, which requires that player funds are maintained in a separately designated bank account that is clearly distinguished from the operator's own operational funds.

This segregation requirement creates a direct need for a bank or payment institution willing to open and maintain a designated player fund account for an MGA-licensed operator. The account must be identifiable as a player fund account and cannot be subject to set-off by the bank against the operator's other liabilities.

Approved Banking Partners

The MGA does not maintain a formally approved list of banking partners in the way some regulators prescribe specific institutions. However, the MGA's licensing process requires applicants to demonstrate that they have secured, or have credible prospects of securing, the banking infrastructure necessary to operate — including the player fund segregation account. An application that cannot demonstrate a viable banking relationship is likely to encounter delays in the licensing process.

In practice, the institutions most willing to open accounts for MGA-licensed operators include specialist payment institutions and EMIs authorised in Malta or the wider EU, and private banks in Malta and Luxembourg. Maltese local banks — BOV (Bank of Valletta) and HSBC Malta — have historically been reluctant to open accounts for gaming operators but have occasionally accommodated well-established operators with strong compliance credentials.

AML Obligations and Banking Infrastructure

The MGA's Anti-Money Laundering Implementing Procedures (Part I — AML/CFT Obligations for Licensees) require gaming operators to implement a risk-based AML programme. The banking infrastructure must support this programme:

Transaction Monitoring

Operators must monitor player transactions for suspicious activity. The payment infrastructure must be capable of providing transaction-level data — amounts, timestamps, payment method, beneficiary/payer details — to the operator's AML system. An operator whose payment provider cannot supply this data cannot effectively fulfil its transaction monitoring obligations.

STR Filing

Suspicious transaction reports under Maltese AML legislation must be filed with the Financial Intelligence Analysis Unit (FIAU). The FIAU is active and imposes significant penalties on operators that fail to file — or file inadequately. The payment infrastructure must provide audit trails adequate to support STR investigations.

Player Fund Reconciliation

The MGA requires operators to maintain a daily reconciliation of player fund balances against the segregated bank account. The payment infrastructure must support daily balance reporting at an accuracy level that enables this reconciliation without manual intervention.

Multi-Currency Operations

MGA-licensed operators typically serve players across Europe and beyond, receiving deposits in GBP, EUR, SEK, NOK, CAD, and other currencies. The operator's functional currency is usually EUR (given the Malta domicile), creating FX exposure on non-EUR player balances.

The optimal infrastructure converts player deposits to EUR at the point of receipt, using a payment institution with real-time FX capability. This eliminates the daily FX volatility in player liability reporting and simplifies the player fund reconciliation, since the EUR balance in the segregated account matches the EUR equivalent of all player liabilities without currency adjustment.

CCYFX provides EUR-denominated named IBAN accounts with multi-currency inbound capability for MGA-licensed operators, enabling GBP, SEK, and other currency deposits to be received and converted to EUR within the operator's CCYFX account. Our player fund account structure is documented to satisfy MGA Directive 3 segregation requirements.