MGA Casino Player Funds: What the Rules Protect

An MGA licence does not turn an online casino balance into a guaranteed bank deposit. It does, however, place specific duties on a Malta Gaming Authority licensee: player money must remain identifiable, accounts holding it are subject to regulatory review, and the operator must maintain enough accessible funds to cover what it owes players.

For a UK reader, the first step is to confirm that the legal company and exact casino domain are actually covered by the MGA authorisation. The rules described here apply to the authorised business, not to every website displaying an MGA badge.

This guide explains what the MGA’s player-funds framework requires, how withdrawal requests fit into it, what evidence to save, and what the framework does not promise.

Check the licence before relying on the safeguards

Use the MGA Licensee Register and MGA URL Checker to match four details:

• the legal operator named in the casino’s terms;
• the exact website address you used;
• the current authorisation status; and
• the gaming service covered by the record.

A genuine licence number can be copied onto an unrelated domain. A group may also operate several companies or brands, so a record for one company should not be treated as authorisation for another. Save the result and the date of your check.

Our MGA casino licence guide explains this verification process in more detail.

What counts as player funds?

The MGA’s Player Protection Directive regulates money standing to the credit of player accounts. The operator may use account funds for specified purposes such as settling a wager, sending money back to the player, or applying a disclosed and reasonable charge allowed by the terms.

The Directive says player funds are the separate and distinct patrimony of players and are not funds belonging to the licensee. The operator must ensure that the financial or payment institution holding the money understands that the operator’s creditors have no claim against those player funds.

That distinction matters if an operator experiences financial difficulty. It is a regulatory separation rule, but it should not be rewritten as a promise that every payment will be immediate or that no dispute can arise.

Where an MGA licensee may hold player money

Player funds may be held with a licensed credit, financial or payment institution under a setup presented to and approved by the MGA. Depending on risk, the Authority can require additional safeguards such as a trust, bank guarantee or reserve account.

An operator may use more than one player-funds account. The accounts are subject to regulatory review, and the setup must allow access to enough funds to cover the operator’s liabilities to players.

Funds may be held in Malta, elsewhere in the EU or EEA, or in another approved jurisdiction. The licensee remains responsible for ensuring that the MGA can obtain information about the relevant accounts and funds in transit.

The balance must cover player liabilities

The Directive requires the player-funds account balance, including funds in transit or being cleared, to be at least equal to the total credited to player accounts. At least 90% of the required cover must be in the player-funds account balance, with the remainder permitted to be covered by funds in transit.

If the total falls below the amount owed to players, the licensee must make good the shortfall from its own funds immediately.

The MGA also requires monthly player-funds reporting. Its current reporting requirements say the report includes month-end player balances, open bets, pending withdrawals, jackpot funds and designated bank or payment-provider balances. Supporting records are used to determine whether there is a surplus or shortfall against player and jackpot liabilities.

Financial reporting is part of the control framework

For remote B2C licensees, the MGA says audited financial statements should separately disclose the player-funds account balance and the corresponding player liability. A separate agreed-upon-procedures report covers player funds, jackpot funds and the portion of the player-funds balance held by the licensee.

These requirements create regulatory and reporting checks. They are not a public, real-time balance checker for an individual player. A player still needs to preserve account records and use the operator’s complaint process when a withdrawal or balance is disputed.

How withdrawal requests fit into the rules

Under the Player Protection Directive, a licensee should remit the funds standing to the credit of a player’s account no later than five working days after receiving the request, if practicable. Where possible, it should send the money back to the account from which it originated.

The same Directive allows the operator to take reasonably necessary time to:

• verify identity;
• perform security and internal checks;
• confirm compliance with the game and prize rules; and
• complete customer due diligence required by anti-money-laundering or other regulatory rules.

The phrase “if practicable” and the permitted checks matter. Do not present five working days as an unconditional guarantee for every account or payment method.

The rules also restrict unreasonable withdrawal limits. Deposited money may not be made subject to a withdrawal restriction unless another applicable requirement permits it. The detailed outcome still depends on the account, source-of-funds checks, game rules and current terms.

What the MGA framework does not guarantee

The player-funds rules should not be turned into marketing claims. They do not prove that:

• a particular casino is licensed for consumers in Great Britain;
• every withdrawal will arrive within five working days;
• the operator will never have a shortfall or operational problem;
• every dispute will be decided in the player’s favour;
• a bonus balance is immediately withdrawable cash;
• a payment provider will process a transfer without delay; or
• the MGA compensates players for every loss.

They also do not replace the need to check the exact operator, domain, status and applicable complaint route.

Save evidence before a balance problem escalates

If a withdrawal is delayed or the displayed balance changes unexpectedly, save a dated record before account pages are updated. Keep:

1. the account username or reference;
2. the displayed cash balance and any separately labelled bonus balance;
3. deposit, withdrawal and betting histories;
4. pending withdrawal references and timestamps;
5. the terms accepted when the relevant transaction occurred;
6. identity or source-of-funds requests, without publishing sensitive documents;
7. emails, chat transcripts and complaint references; and
8. the operator and domain result from the MGA’s official tools.

Retain original files and complete emails where possible. A cropped screenshot may omit the date, domain or transaction reference needed to connect it to the account.

Ask the operator focused questions

Use the casino’s official support or complaint channel. Identify the legal operator, exact domain, account reference, disputed amount and withdrawal reference. Ask the operator to state:

• whether the request is pending, rejected or cancelled;
• which check or term is being applied;
• what information remains outstanding;
• whether the cash and bonus balances are being treated separately; and
• how to escalate the complaint if the response does not resolve it.

Keep the submission and reply together. Do not pay an unexpected fee or make another deposit merely because an unsolicited message says this is required to release your balance.

Escalate through the correct route

The operator must have a written complaints process and identify an alternative dispute resolution entity for unresolved disputes. Complete the operator’s procedure first, then use the applicable ADR or regulator channel.

The MGA complaint form is the Authority’s official channel for complaints about MGA-licensed operators. Our MGA casino complaint guide explains how to organise the submission.

If the operator claims to serve consumers in Great Britain under a Gambling Commission licence, verify the legal company and domain separately in the Gambling Commission public register. An MGA authorisation is not a substitute for Great Britain authorisation.

A practical player-funds checklist

Before relying on an MGA casino balance:

1. Verify the legal operator and exact domain in the MGA’s live tools.
2. Save the current authorisation status and date.
3. Read the withdrawal, verification, charge and complaint terms.
4. Keep deposit, play and withdrawal records outside the casino account.
5. Separate withdrawable cash from promotional balances.
6. Ask for written reasons when a withdrawal is delayed or refused.
7. Complete the operator’s complaint process before escalating.
8. Use the official MGA, ADR or Great Britain route that matches the operator and transaction.

MGA rules require identifiable and reviewable player-funds arrangements, sufficient cover for player liabilities and structured reporting. Those safeguards are meaningful, but they are not a universal payment guarantee. Verify the licence, preserve the account evidence and rely on current regulator records rather than a footer badge or promotional claim.

Sources checked on 27 September 2026: MGA Player Protection Directive (Directive 2 of 2018, version 3 dated January 2023); MGA player-funds FAQ; MGA reporting requirements; MGA notice on financial reporting and agreed-upon procedures; MGA Licensee Register and URL Checker.