The Malta Gaming Authority publishes the clearest schedule of any major regulator, so this guide uses Malta as the worked example and then covers how other jurisdictions compare. The principle holds everywhere: regulators judge you on whether you file complete, accurate reports on time. Treat your reporting calendar as seriously as your launch, because a single late filing draws more regulatory attention than almost anything else an operator does.
Key takeaways
- Monthly MGA reports fall due by the 20th of the following month: player funds, gaming tax, B2B compliance, and ADR reports.
- Industry Performance Returns run half-yearly, due 7 September and 28 February each year.
- You file audited financial statements within six months of your financial year end, and auditor declarations within nine months.
- Information security incidents reach the MGA within 72 hours; suspicious betting reports go in immediately.
- Suspicious transaction reports to the FIAU go in on the same day your MLRO forms a suspicion.
- A shared compliance calendar with named owners and internal cut-offs keeps every filing on schedule.
What gaming operator reporting deadlines cover
Gaming operator reporting deadlines fall into three groups. Periodic financial reports tell the regulator how much you hold in player funds, how much tax you owe, and how your business performs. Periodic operational returns give the regulator industry data and audited accounts. Event-driven notifications cover the moments when you must alert the regulator the instant something happens, such as a security breach or a suspicious bet. You manage all three at once, because they run on different clocks and a strong financial team can still miss an event-driven notification if nobody owns it.
Every report ties back to a licence condition. When you accept a licence, you accept the duty to file each report by its date. The regulator builds its view of your operation from these filings, so the reports also work in your favour: they prove you ring-fence player money, you pay the right tax, and you run the controls your licence requires. Our guide to staying compliant after a gaming licence sets the wider context, and the gaming licence compliance checklist lists the policies that sit behind the numbers you report.
Monthly gaming operator reporting deadlines
Monthly filings carry the tightest gaming operator reporting deadlines, and they repeat twelve times a year. Under the Malta Gaming Authority, you file each monthly report through the Licensee Portal by the 20th day of the month that follows the reporting period. The table below sets out the four monthly reports, who files each one, and the date you work to.
| Report | Who files it | Deadline |
|---|---|---|
| Player Funds Report | All B2C licensees, plus B2Bs that manage pooled jackpots, even before go-live | By the 20th of the following month |
| Gaming Tax Report | B2C licensees | By the 20th of the following month |
| B2B Compliance Report | B2B licensees, reporting the client companies they supply | By the 20th of the following month |
| ADR Report | B2C licensees, listing player disputes and rulings | By the 20th of the following month |
The Player Funds Report deserves extra attention. You report every month-end balance tied to player funds, including open bets and pending withdrawals, jackpot funds, and the balances in your player-designated bank and payment accounts. You attach backend screenshots, bank statements, and payment processor statements as proof. The MGA reads this report to confirm you hold enough money to cover what you owe players, so a late or incomplete Player Funds Report signals exactly the risk regulators watch for most.
Half-yearly and annual gaming operator reporting deadlines
The longer-cycle reports give the regulator a deeper view of your finances and your performance. These gaming operator reporting deadlines arrive less often, so they slip more easily. Put them in your calendar the day your financial year starts.
The Industry Performance Returns run on fixed calendar dates rather than your financial year. You compile two each year. The first covers 1 January to 30 June and falls due on 7 September. The second covers 1 July to 31 December and falls due on 28 February of the following year. Every licensee files these returns, and the MGA uses them to build the industry statistics it publishes.
The financial reports run on your own financial year end. The table below maps each one to its deadline.
| Report | Deadline |
|---|---|
| Interim Financial Report | Within two months of the end of the first six months of your financial year |
| Annual Financial Report | Within two months of your financial year end |
| Audited Financial Statements | Within six months of your financial year end |
| Auditor Player Funds and Gaming Revenue Declarations | Within nine months of your financial year end |
| Auditor’s Management Letter | Within nine months of your financial year end |
You prepare the audited financial statements under International Financial Reporting Standards and your auditor signs them under International Standards on Auditing. A remote B2C licensee shows the Player Funds Account balance separately in the accounts, so your auditor needs the player funds data early. Brief your auditor months ahead, because the six-month and nine-month windows close faster than most finance teams expect once year-end work begins.
Notification deadlines you report at once
Event-driven notifications carry the sharpest gaming operator reporting deadlines, because the clock starts the moment something happens rather than at month end. You cannot plan these dates, so you build the process that catches them instead.
An information security incident reaches the MGA within 72 hours. This covers any breach that affects the confidentiality of player information, and any breach that blocks players from their accounts for more than twelve hours. Your technical and compliance teams need a shared escalation path, because 72 hours passes quickly during an active incident. A sports betting operator also reports any suspicious betting event to the MGA immediately, through the Suspicious Betting Reporting Mechanism in the Licensee Portal.
The Go-live Declaration works on its own short timer. You tell the MGA that you will go live within 90 days of the licence date, and you submit the declaration at least two days before the go-live date you state. The MGA also expects you to report outsourcing arrangements with a material service provider on a case-by-case basis, so log each new supplier engagement against this duty as it arises. For how these obligations begin, read our guide on what to do after you receive a gaming licence.
AML and suspicious activity reporting deadlines
Anti-money laundering reporting runs alongside your gaming reports and answers to a separate authority. In Malta, your Money Laundering Reporting Officer files suspicious transaction reports to the Financial Intelligence Analysis Unit through the goAML system. The deadline is immediate: your MLRO files the report on the same day they form a knowledge or suspicion of money laundering or terrorist financing. Your staff escalate internally to the MLRO no later than the next working day after they spot something.
These AML deadlines apply continuously, not on a monthly cycle, so your transaction monitoring and your reporting line need to work every day your platform takes bets. The gaming regulator and the financial intelligence unit share information, so a weak AML reporting process shows up on both sides. Our overview of gaming regulations and legal guidance explains how the licensing and AML frameworks fit together for an operator.
Gaming operator reporting deadlines in other jurisdictions
Every regulated market sets its own gaming operator reporting deadlines, and the names change even where the substance matches. You map the calendar for each jurisdiction you hold a licence in, because holding two licences means running two reporting schedules at the same time.
In Great Britain, the Gambling Commission collects regulatory returns that report your gross gambling yield and other key data, and it requires operators to report key events and changes as they happen. You submit returns through the Commission’s online service, and the Commission treats late or inaccurate returns as a compliance failure. The Commission sets out the data it collects and the rules for each sector in its regulatory returns guidance. Other regulators follow the same shape: periodic financial returns, periodic operational data, and immediate notifications for material events. The table below shows how the core report types map across a few common markets.
| Jurisdiction | Regulator | Core reporting pattern |
|---|---|---|
| Malta | Malta Gaming Authority | Monthly player funds and tax reports, half-yearly returns, annual audits, 72-hour incident notices |
| Great Britain | Gambling Commission | Regulatory returns on gross gambling yield, plus key-event notifications as they occur |
| Romania | ONJN | Monthly authorisation tax payments and periodic operational reporting to the regulator |
| Isle of Man | Gambling Supervision Commission | Regular returns, duty payments, and prompt notification of material changes |
Confirm the exact dates with each regulator before you rely on them, because regulators update their schedules and forms. When you expand to a second market, add its reporting calendar to your existing one rather than running the two separately. Our guide on RNG testing for online casino games covers a related obligation that also repeats over the life of a licence, since you retest games after any material change.
What happens if you miss a deadline
A missed deadline rarely stays a small problem. The regulator records the late filing, asks you to explain, and watches your next submissions more closely. Repeated lateness moves you up the regulator’s risk ranking, and a higher ranking brings more audits and more scrutiny. In serious or repeated cases the regulator can impose a financial penalty or open a review of your licence.
The reputational cost runs alongside the regulatory one. Banks, payment processors, and platform partners ask about your compliance record, and a pattern of late filings answers that question badly. You protect the relationship with your regulator by filing on time and by flagging a genuine problem early rather than missing the date in silence. A regulator responds far better to an operator who asks for help before a deadline than to one who explains a breach after it.
How to build a reporting calendar that holds
You hit gaming operator reporting deadlines by turning them into a system, not by relying on memory. Build a single compliance calendar that lists every report, its frequency, its statutory date, and an internal cut-off that sits several days earlier. The internal cut-off gives you room to fix a problem before the real date.
- List every report you owe each regulator, with the exact deadline and the portal you file it through.
- Name one owner for each report, and name a backup who files it when the owner is away.
- Set an internal cut-off three to five working days before each statutory date.
- Add automated reminders that fire at the internal cut-off, not on the deadline itself.
- Brief your auditor early so the six-month and nine-month annual filings stay on track.
- Review the calendar each quarter and update it whenever a regulator changes a form or a date.
Operators who run this discipline rarely miss a filing, because the system catches the report before the date does. If your team is small or you hold licences in several markets, a compliance partner can hold the calendar and file on your behalf. DD Consultus manages reporting schedules and key function roles for operators across multiple jurisdictions, so your filings stay current while your team runs the business.
Frequently asked questions
What are the main gaming operator reporting deadlines under the MGA?
Monthly reports, covering player funds, gaming tax, B2B compliance, and ADR, fall due by the 20th of the following month. Industry Performance Returns run half-yearly, due 7 September and 28 February. You file audited financial statements within six months of your financial year end and auditor declarations within nine months.
When is the MGA Player Funds Report due?
You file the Player Funds Report by the 20th day of the month after the reporting period, through the Licensee Portal. Every B2C licensee files it, along with any B2B that manages pooled jackpots, and the duty applies even before the operation goes live. You attach bank, payment processor, and backend evidence to support the balances you report.
How fast must I report a data breach to the regulator?
You report an information security incident to the Malta Gaming Authority within 72 hours. This covers any breach that affects the confidentiality of player information and any breach that stops players reaching their accounts for more than twelve hours. A clear escalation path between your technical and compliance teams keeps you inside the window.
What is the deadline for a suspicious transaction report in Malta?
Your Money Laundering Reporting Officer files a suspicious transaction report to the Financial Intelligence Analysis Unit on the same day they form a suspicion, through the goAML system. Staff escalate internally to the MLRO no later than the next working day after they detect something. These AML deadlines apply every day your platform operates.
When are the MGA Industry Performance Returns due?
You submit two Industry Performance Returns each year. The return for 1 January to 30 June falls due on 7 September, and the return for 1 July to 31 December falls due on 28 February of the following year. Every licensee files these returns through the Licensee Portal.
What happens if I miss a gaming reporting deadline?
The regulator records the late filing, asks you to explain, and watches your future submissions more closely. Repeated lateness raises your risk profile and can lead to a financial penalty or a licence review. Flagging a problem early protects you far better than missing the date without warning.
Do reporting deadlines change when I hold licences in more than one market?
Yes. Each regulator sets its own reports, formats, and dates, so two licences mean two reporting schedules. You map the calendar for every market you operate in and merge them into one master calendar. Confirm the exact dates with each regulator, because schedules and forms change.
Can a third party handle my regulatory reporting?
Yes. A compliance partner can hold your reporting calendar, prepare the filings, and submit them through the regulator’s portal on your behalf. This suits small teams and operators that hold licences across several jurisdictions. You stay responsible for the licence, so choose a partner that knows each regulator’s requirements.
Need a reporting calendar that keeps every filing on time across your licences? DD Consultus manages compliance schedules and key function roles from our Sliema office. Call +356 99408536 or email contact@licencegaming.com.