Checked 7 October 2026. Malta Gaming Authority (MGA) licensees must offer definite and indefinite self-exclusion for all gaming activity. The scope can depend on why the exclusion is requested and which brands are operated by the same licensee.
This guide explains the current MGA rules and practical record-keeping steps. It is not a substitute for support or legal advice, and MGA self-exclusion is not the same system as GAMSTOP.
What an MGA self-exclusion request can cover
An MGA-licensed remote operator must offer a way to self-exclude from all gaming activity for a definite or indefinite period. A definite exclusion has an end point; an indefinite exclusion does not.
The MGA’s Player Protection Directive also allows operators to offer product-specific or gaming-vertical exclusions. Those narrower tools are optional. They are not a replacement for the required option to exclude from all gaming activity.
Does one request cover every brand?
Not necessarily every MGA-licensed business. The important distinction is between brands run by the same licensee and brands run by different licensees.
The MGA says a player can request exclusion across all brands offered by one licensee. Where the licensee operates multiple brands with separate registrations, a request made for a reason other than problem gambling may be applied only to the brand where it was made.
If the request is made because of problem gambling, the player must be excluded from all brands operated by that licensee, whether or not an account already exists at every brand. This does not automatically create an exclusion across unrelated MGA licensees.
How to make the scope clear
- Identify the legal licensee behind the website, not only the brand name.
- State in writing that the request concerns self-exclusion and specify whether it is due to problem gambling.
- Ask for exclusion from all gaming activity and, where relevant, every brand operated by that licensee.
- Choose a definite or indefinite period and ask the operator to confirm the start time.
- Save the request, confirmation, account identifier and list of brands covered.
Use the MGA licensee register to match the domain and brand to the legal operator. Our MGA casino licence guide explains that check in more detail.
Can a definite exclusion be extended?
Yes. The MGA says a player can contact the operator to increase a definite self-exclusion period. The operator must increase it immediately when the request is received; there is no cooling-off period for making an exclusion longer.
The MGA does not require every operator to offer the same menu of definite periods. Its guidance encourages options such as 24 hours, 48 hours, seven days, 30 days, 90 days, 180 days and 365 days, but those are encouraged timeframes rather than a universal list that every interface must display.
Can an MGA self-exclusion be shortened or revoked?
A player can ask the operator to shorten or remove an exclusion, but acceptance is not automatic. The request must be made in writing, explain why the exclusion was imposed and describe how the circumstances have changed. The operator may accept or decline it.
If the operator accepts a request concerning a definite exclusion, the account cannot reopen until at least 24 hours after acceptance. For an indefinite exclusion, reopening cannot occur until at least seven days after acceptance.
These are minimum waits after an accepted request. They do not mean the operator must approve the request or that an account reopens as soon as a message is sent.
What the MGA’s 2026 review found
On 17 February 2026, the MGA published findings from a thematic review of online self-exclusion practices. The review examined 20 licensees and 58 active URLs using supervisory work and mystery shopping.
The Authority reported that most licensees assessed were broadly aligned with its expectations, while also identifying weaknesses that needed correction. These included delays in activating exclusions, exclusions lifted without the required cooling-off period, difficulty detecting duplicate or closely matching player details across brands, missing limit prompts during registration and incomplete reality-check information.
The findings are useful because they show why a player should keep evidence and verify the result instead of assuming every implementation is flawless.
What to save after requesting exclusion
- The original request, including the stated reason and requested scope.
- The operator’s acknowledgement and effective time.
- The legal licensee name and all brands the operator confirms are covered.
- Account IDs, registered email address and copies of relevant messages.
- Evidence of any login, deposit or marketing access after the confirmed start.
Do not test an exclusion by gambling. If access appears to remain available, preserve the minimum evidence needed and contact the operator in writing.
What if the exclusion is not applied correctly?
Use the operator’s formal complaint procedure and set out the request date, confirmed scope, affected account or brand and what happened afterwards. Ask for a written final response. Our guide to complaining to an MGA-licensed online casino covers the evidence and escalation sequence.
If the dispute concerns funds, keep that issue separate from the exclusion request and retain statements and withdrawal records. The MGA player-funds guide explains the relevant safeguards without treating them as a guarantee of repayment.
MGA self-exclusion and GAMSTOP are different
GAMSTOP is the online multi-operator self-exclusion scheme used by gambling businesses licensed in Great Britain. An exclusion made with an MGA licensee is governed by that operator’s MGA obligations and does not automatically create a GAMSTOP record. Likewise, a GAMSTOP registration should not be assumed to cover a business that is outside its participating Great Britain-licensed scope.
Official MGA sources
- MGA player-protection FAQs
- MGA FAQ on access after self-exclusion
- MGA thematic review findings, 17 February 2026
- MGA licensee register
Bottom line: state the reason and scope clearly, confirm which legal licensee and brands are covered, and keep the operator’s written confirmation. Self-exclusion across one licensee’s brands is not the same as automatic coverage across every MGA-licensed operator.