Casino Licensing Explained: MGA, UKGC and Curaçao

An online casino license tells you which regulator supervises the operator and which rules it follows, not whether you get paid. The UKGC sets the most detailed player rules, and the MGA sends disputes to binding EU-based arbitration. Curaçao’s regulator does not decide individual complaints.

None of these three licenses makes an online casino legal for players in a US state. US players have two legal routes instead: a state-licensed casino where one exists, or a sweepstakes casino. Sweepstakes casinos run as prize promotions under US sweepstakes law.

What an Online Casino License Tells You

A gaming license names the company allowed to run casino games for a market. It also names the regulator that can fine, suspend or stop it. That makes the license a starting point for trust, not a payout guarantee.

A license number only means something once you match it against the regulator’s own register. The Malta Gaming Authority publishes a list of websites that falsely claim its license, which shows how often footer badges are copied.

The license also tells you where to complain when a withdrawal stalls. Each regulator sets a different route, a different deadline and a different answer to the question of who decides your case.

MGA, UKGC and Curaçao Compared

The table below compares the three regulators on the rules that decide what happens when something goes wrong. The biggest difference is the dispute route, because none of the three regulators rules on an individual player’s complaint.

The Malta Gaming Authority License

An MGA license is a European license backed by binding dispute resolution. For players outside Great Britain, that makes it the strongest of the three. The Malta Gaming Authority issues it under the Gaming Act, Chapter 583 of the Laws of Malta, which took effect in 2018.

What an MGA License Covers

The MGA issues two license classes. A B2C Gaming Service license covers casinos that offer games directly to players. A B2B Critical Gaming Supply license covers suppliers of games and platforms to other licensed operators.

Any casino brand should therefore show a B2C license, because a B2B license does not cover service to players. Maltese law firms GVZH and BDO Malta state that both license classes run for 10 years.

How MGA Complaints Work

MGA-licensed casinos must give players a free route to an independent alternative dispute resolution (ADR) entity based in the EU or EEA. When that entity acts as an adjudicator, its conclusion binds both the casino and the player, under the MGA’s ADR Directive.

The MGA’s Player Support Unit stopped ruling on the merits of player disputes on April 1, 2019. The unit still accepts complaints through a form on the MGA website and uses them in its compliance work. It asks players to contact the casino first.

MGA rules require player funds to stay segregated and separately identifiable at all times. That keeps your balance apart from the operator’s own money, although segregation alone does not decide how fast a withdrawal is paid.

The UKGC License

A UKGC license is required for any business offering remote casino games to customers in Great Britain. It carries the most detailed player rules of the three. The UKGC’s public business register held 2,630 records when we checked it on November 6, 2026.

UKGC Rules Players Notice First

Several UKGC rules change what a player sees on screen, not only what the operator files with the regulator. These are the ones that matter most at the account level:

• Bonus playthrough has been capped at 10 times the bonus since January 19, 2026, and bonuses that mix product types are banned.
• Online slot stakes are capped at £5 per game cycle for adults 25 plus and £2 for players aged 18 to 24.
• Operators must verify your name, address and date of birth before you can play, a rule in force since May 7, 2019.
• Every online operator has been required to join GAMSTOP, the national self-exclusion scheme, since March 31, 2020.
• Operators must tell you whether your balance is not protected, medium protection or high protection if the company becomes insolvent.

The 10x cap changes bonus math in a measurable way. The UKGC’s own example shows that a £10 bonus with a 50x requirement meant £500 of play. Under the cap, the same bonus needs £100 at most.

How UKGC Complaints Work

A UKGC-licensed operator has 8 weeks from receiving your complaint to resolve it. If you are still unhappy, you can take the case to a free, independent ADR provider from the UKGC’s approved list.

The ADR provider then has up to 90 days to adjudicate once it holds all the information from the operator. In the slowest case, 8 weeks plus 90 days adds up to about 146 days before a decision on a disputed withdrawal.

The UKGC also fines operators for slow payouts. On October 21, 2026, it announced that L & L Europe would pay £900,000 for regulatory failures that included unnecessarily delaying customer withdrawals.

The Curaçao License After the 2024 Reform

A Curaçao license now comes from the Curaçao Gaming Authority (CGA) under a law that took effect on December 24, 2024. The license carries real operator duties, but the CGA does not decide individual player complaints.

The CGA began a phased reform in November 2023. Its own October 2026 statement says the reform followed international criticism, a growing number of player complaints and negative media coverage.

What a CGA License Requires

CGA online gaming licenses are granted for an indefinite period and cover only the domains the CGA has approved for that licensee. Under the license conditions effective October 28, 2026, all player funds must sit in a segregated account (Article 9).

Licensees must also use game software tested by an independent entity the CGA approves (Article 7). They must display the CGA digital seal at all times (Article 12).

How Curaçao Complaints Work

The CGA will not resolve or decide player complaints. It will not overturn an operator or ADR decision unless the case was handled inadequately. Those rules sit in clause 3.3 of its Player Complaints Policy, version 1.1, dated June 18, 2025.

Curaçao operators must acknowledge a complaint within one week and answer within four weeks. They can extend once by another four weeks. A player who is still unhappy can then escalate to a free CGA-certified ADR provider.

Players have six months from the disputed event to file a complaint, under clause 3.1. Responsible gaming complaints, such as a self-exclusion that was not applied, carry a target of five business days.

Why the Curaçao Seal Is Harder to Check in Late 2026

On October 7, 2026, the CGA announced that its online gaming portal would not return to service. It added that the digital seal would be affected. It said existing licenses stay valid and promised another way for operators to show that a domain is licensed.

The CGA opened an interim portal on October 19, 2026. The old portal had been accessed without authorization between December 2025 and September 2026. Until a replacement check is live, a seal that fails to load proves nothing, so search the CGA register directly.

How to Verify a Casino License in Five Minutes

Verifying a license takes five checks, and the most important one is opening the register from the regulator’s own website. A link in a casino footer can point anywhere.

1. Find the legal company name and license number in the casino footer or Terms, not only the logo.
2. Open the MGA Licensee Register, the UKGC public register or the CGA license register from the regulator’s site.
3. Match the company name, the license status and the website domain. The UKGC register shows statuses such as Active, Suspended and Revoked.
4. For MGA claims, check the MGA’s list of unauthorized URLs, which names sites that falsely use an MGA license.
5. Read the Terms for the complaint steps, the named ADR provider and, at UKGC sites, the funds protection rating.

What These Licenses Mean for US Players

An MGA, UKGC or Curaçao license does not make an online casino legal for players in any US state. States that allow real-money online casinos license them through their own regulators.

New Jersey’s Division of Gaming Enforcement states that any site missing from its list is not approved for internet gaming there. A Malta or Curaçao license does not change that status for a New Jersey player.

Sweepstakes casinos work on a different model. They run as prize promotions under US sweepstakes law, no purchase is necessary, and Sweeps Coins are redeemable for cash prizes. Our guide to how sweepstakes casinos work explains the model in full.

How Two Approved Sweepstakes Operators Describe Themselves

High 5 is run by High 5 Entertainment, LLC of Mahwah, New Jersey, according to its Sweepstakes Official Rules version 45.0. Players must be 21 plus, and no purchase is necessary to enter or win.

• Welcome Offer
• 250 Game Coins
• 5 Sweep Coins

• VIP Club
• Free Diamonds
• Boost on Demand
• Cash Prizes

PLAY NOW

Terms 18+

Pulsz is owned and operated by Yellow Social Interactive Limited, a Gibraltar company, under its Terms of Use version 5.2. The Terms set a 21 plus minimum age and say no purchase is necessary. They also state that the site does not offer real money gaming.

• First purchase bonus
• 362,000 Gold Coins
• + 30 Sweepstakes Coins

• VIP Program
• Cash Prizes
• Daily Login Offers
• Social Media Promotions

PLAY NOW

Terms 18+

A company registered in Gibraltar or New Jersey is not the same thing as a casino license there. Check each operator’s own rules and our sweepstakes casino hub for where prize play is open. Verify current laws in your jurisdiction before playing.

Common Licensing Myths, Corrected

Three mistakes come up again and again when players read a casino footer. Each one is corrected below by the regulator’s own rules.

A License Badge Proves the Casino Is Licensed

A badge proves nothing until the register confirms it. The MGA keeps a public list of websites that use its name and claim MGA licenses it never issued.

The Regulator Will Get Your Money Back

Neither the MGA nor the CGA rules on an individual player’s dispute, and the UKGC sends disputes to ADR providers. The ADR route, not the regulator, is where a stalled withdrawal gets decided.

A Licensed Casino Always Protects Your Balance

A UKGC license does not guarantee insolvency protection. If a casino rates your funds as not protected, your balance would count as company assets. The UKGC says you would likely lose it.

Since October 31, 2025, UKGC operators holding unprotected funds must remind you every 6 months. You must acknowledge the reminder before you can use the balance again.

Where to Go Next

Your next step depends on where you live. In the US, start with our Sweeps Coins guide to see how prize redemption works at sweepstakes casinos.

Readers in Canada, New Zealand or Germany can use our Canadian casino reviews, New Zealand casino reviews and German casino reviews. Ontario players can also check the iGaming Ontario directory of registered and approved operators.

Related Reading

These CasinoRoom pages build on the licensing basics above.

• Our no purchase necessary guide explains the free entry rules that separate sweepstakes casinos from licensed real-money casinos.
• The High 5 review covers the operator’s redemption rules, coin packages and Sweeps Coins offers.
• Our Pulsz review covers the Gibraltar-registered operator’s games, redemptions and terms.
• A responsible gambling guide on CasinoRoom lists the limits and self-exclusion tools worth setting before you play.

CasinoRoom.com may earn a commission when you sign up through affiliate links on this page. This never affects our reviews, which stay independent and unbiased.

Sweepstakes play should stay fun. If you or someone you know needs support, visit the National Council on Problem Gambling at ncpgambling.org.

Last updated: November 2026