iGaming B2B Licensing in 2026: Key Requirements

When people talk about iGaming B2B licensing, they usually assume it applies to large platform providers with dedicated legal teams who’ve already sorted it out. What I see in practice is different. It’s smaller studios, aggregators, and technology providers who built solid products, signed supply agreements with licensed operators, and then discovered mid-relationship that their B2B licensing status was creating problems for their clients’ compliance reviews.

A game studio I worked with last year had been supplying content to several MGA-licensed operators for two years without a B2B licence. The operators knew. The studio knew. Everyone assumed it was fine because the games were certified and operators took responsibility for the supply chain. Then one operator went through a compliance review. The reviewer asked to see the B2B licensing status of its key suppliers. The reviewer flagged the studio.

The operator had to suspend the supply agreement until the studio got licensed. That took four months. Four months of the studio’s content off a platform that had been generating revenue from it.

That’s the B2B licensing reality in 2026. It’s not theoretical. It affects commercial relationships directly, and the operators who are serious about their own compliance are increasingly checking supplier licensing status before it becomes their problem in a review.

This article covers what iGaming B2B licensing actually requires in 2026 who needs it, what Malta and Curaçao require, and where suppliers consistently get caught out.

**Who Needs iGaming B2B Licensing**

The B2B licensing requirement applies to companies that supply critical services or software to licensed gaming operators. Not every supplier needs a B2B licence a marketing agency or an accountancy firm doesn’t. But companies that supply technology or services that sit at the core of a gaming operation do.

Under the MGA framework, companies must obtain a Critical Gaming Supply licence if they supply gaming software, platforms, or services that directly affect game outcomes, player account management, or the operator’s ability to meet regulatory obligations. This includes platform providers, game studios and aggregators, RNG suppliers, payment processing technology, and player verification technology.

The Curaçao LOK introduced a similar requirement. Third-party service providers working with Curaçao-licensed operators must hold either a Curaçao B2B licence or a Recognition Certificate which covers providers already licensed in an equivalent jurisdiction. Both routes require the supplier to demonstrate that their technology meets the standards the CGA applies.

**Malta iGaming B2B Licensing: The Critical Gaming Supply Licence**

The Malta Gaming Authority issues the B2B Critical Gaming Supply licence to companies supplying technology or services that sit at the core of a gaming operation. The licence runs for ten years. The application fee is €5,000, non-refundable. Annual licence fee is €25,000.

The MGA assesses the company’s ownership structure and UBO fit-and-proper status. It also reviews the technical standards of the software and the AML and compliance framework the supplier maintains. In addition, it evaluates whether the key persons responsible for the technology have the required experience and integrity.

The technical assessment is specific. Game studios must obtain RNG certification from an MGA-approved testing laboratory before they supply games to MGA-licensed operators. RNG certification confirms the mathematical integrity of the game. It ensures that outcomes are genuinely random and match the stated return-to-player percentages.

Game mathematics certifications apply to specific game versions. Adding a new game or updating an existing one may require fresh certification.

What triggers a Critical Gaming Supply licence requirement

The MGA defines the threshold in terms of criticality does the service affect game outcomes, player account management, or the operator’s regulatory compliance capability? Platform providers that deliver the technology through which games run clearly qualify. Aggregators that sit between game studios and operator platforms qualify. RNG suppliers qualify. Payment processing technology that handles player deposits and withdrawals qualifies.

What doesn’t qualify: services that are operationally important but not critical in this specific sense. A CRM provider or an analytics platform doesn’t affect game outcomes or player account management directly. These services don’t require B2B licensing, though they may be subject to data protection requirements and third-party processor agreements under GDPR.

Timeline for the Malta B2B application

Four to eight months from a complete, well-prepared application is the realistic range. The same issues delay both B2C and B2B applications: inconsistent ownership documentation, AML frameworks that don’t reflect the actual business, and delayed technical certification. The RNG and game mathematics certification process for studios specifically needs to be running before the application goes in waiting until the MGA review is complete before starting certification typically adds three to four months to the timeline.

Curaçao iGaming B2B Licensing Under the LOK

The Curaçao Gaming Authority introduced the B2B licence category under the LOK alongside the B2C direct licensing framework. The requirement for all third-party service providers to hold a Curaçao B2B licence or a Recognition Certificate came into force in July 2025. Suppliers operating without either at that time had until the end of the transition period to regularise their status.

The Curaçao B2B licence covers the same category of critical suppliers as the MGA framework platform providers, game studios and aggregators, RNG suppliers, payment technology. The application process runs through the CGA’s online portal, with a single-phase review rather than Malta’s structured multi-stage process.

The Recognition Certificate route for existing MGA licence holders

For suppliers already holding an MGA B2B Critical Gaming Supply licence or a B2B licence from another jurisdiction the CGA treats as equivalent the Recognition Certificate is the faster route. The application demonstrates that the existing licence covers the same services supplied to Curaçao operators and meets the licensing standards required by the CGA.

This matters commercially because many established European suppliers hold MGA licences but lack specific licensing in Curaçao. The Recognition Certificate lets them supply Curaçao licensees without going through the full Curaçao application. Processing time for Recognition Certificates is typically faster than a full application four to eight weeks rather than months.

B2B suppliers without an equivalent licence

Suppliers who don’t hold an MGA or equivalent licence need to go through the full Curaçao B2B application. This involves standard corporate documentation and fit-and-proper assessments for UBOs and key persons. It also includes technical documentation for the software being supplied and an AML framework covering the supplier’s own compliance obligations. The full application takes longer comparable to the B2C process in terms of the review phases and documentation requirements.

**iGaming B2B Licensing: The AML Obligations That Apply to Suppliers**

Within iGaming B2B licensing, this is the area that surprises most B2B applicants. Suppliers assume that AML is an operator obligation that it belongs to the B2C company serving players, not to the technology company providing the platform. That assumption is wrong.

The Financial Action Task Force framework applies to entities that enable financial transactions, not just those that conduct them directly. A platform provider whose technology processes player deposits and withdrawals must ensure its platform supports AML compliance including transaction monitoring capability, regulatory reporting functionality, and audit logging.

What this means in practice: a B2B application needs to demonstrate that the technology being supplied is built to support the operator’s AML obligations. A platform that doesn’t have configurable transaction monitoring thresholds, that doesn’t generate audit logs in formats regulators can use, that can’t produce the reporting outputs the licensing jurisdiction requires that platform creates compliance problems for the operators using it. Regulators ask about this during B2C operator reviews, and the answers come back to the B2B supplier.

What AML compliance looks like in a licensed gaming operation including the technical requirements that B2B suppliers need to support is covered in iGaming AML compliance in 2026.

iGaming B2B Licensing: What the Application Package Needs to Show

A B2B licence application moves through review without generating information requests when it demonstrates three things done well: clean ownership documentation, a technical submission showing the software meets the applicable standards, and a compliance framework that reflects the actual business.

Ownership and corporate documentation

The same UBO documentation requirements apply to both B2C and B2B applications. These include source of wealth evidence for all beneficial owners above the relevant threshold, consistent ownership percentages across all submission documents, and fit-and-proper evidence for directors and key persons.

The same issues cause failures. These include inconsistencies between documents, incomplete source of wealth evidence, and complex ownership chains that applicants cannot clearly explain.

Each generates an information request. Each request adds six to ten weeks.

Technical documentation

For game studios, the requirements include RNG certification from an approved laboratory and game mathematics documentation for each title being supplied. The games must also meet the RTP and fairness standards required by the licensing jurisdiction. For platform providers: technical architecture documentation, security standards evidence, regulatory reporting functionality demonstration, audit logging capability. The technical submission needs to be specific to the actual software being supplied a generic security whitepaper doesn’t satisfy the technical review.

The compliance framework

The AML framework submitted in a B2B application needs to reflect the supplier’s own operations, not just describe what operators are supposed to do. What does the supplier’s own transaction monitoring look like for revenues received? What are the KYC procedures for the supplier’s own business relationships the operators it supplies? How does the supplier handle a situation where an operator it supplies becomes the subject of a regulatory investigation? These questions don’t have obvious answers for most B2B applicants and the absence of answers generates requests.

How the full licence application process works what each section needs to demonstrate and where gaps most often generate information requests is covered in how the iGaming licence application process works in 2026.

iGaming B2B Licensing and Market Entry Planning

B2B licensing status affects market entry in a way that most suppliers don’t think about until it’s already constraining them.

An unlicensed supplier can supply unlicensed operators or operators in jurisdictions that don’t require B2B licensing. As the operator market matures, more serious operators hold licences from jurisdictions that require supplier licensing. This lowers the commercial ceiling for unlicensed suppliers.

The operators worth supplying those with MGA licences, strong banking, and valuable player bases increasingly require B2B licensing as a condition of supply.

Planning iGaming B2B Licensing Alongside Product Development

The suppliers who get this right plan the B2B licence alongside product development rather than after the product is ready to market. RNG certification takes time. The application takes time. A studio that completes game development and then starts the licensing process is typically six to twelve months behind a studio that ran both in parallel.

How B2B licensing fits into the broader iGaming market entry decision including how it connects to corporate structure choices and the timing of the overall market entry plan is covered in iGaming market entry in 2026. And how the corporate structure supporting a B2B operation needs to be built particularly when the same corporate group holds both B2B and B2C licences is in iGaming corporate structure in 2026.

For suppliers specifically involved in crypto gaming supply chains platforms and aggregators serving crypto-native operators the specific compliance requirements that apply to those operations are covered in crypto gaming licences in 2026.

Frequently Asked Questions

Does every iGaming supplier need a B2B licence?

No. The B2B licensing requirement applies to suppliers of critical gaming services technology or services that directly affect game outcomes, player account management, or the operator’s ability to meet regulatory obligations. Platform providers, game studios and aggregators, RNG suppliers, and payment processing technology providers fall within this category. Peripheral services marketing agencies, accountancy firms, general software providers don’t require a B2B licence, though they may have other compliance obligations such as GDPR data processing agreements.

What is the difference between a B2B licence and a Recognition Certificate in Curaçao?

A B2B licence is the full Curaçao licensing route for suppliers that don’t hold an equivalent licence from another jurisdiction. A Recognition Certificate is available to suppliers already licensed in an equivalent jurisdiction, including MGA B2B Critical Gaming Supply licence holders. It allows them to supply Curaçao licensees without going through the full application process. Regulators process Recognition Certificates faster than full applications. For suppliers already holding MGA B2B licences, the Recognition Certificate route is almost always the right choice for Curaçao supply.

What technical certification do game studios need for Malta B2B licensing?

RNG certification from an MGA-approved testing laboratory, covering the mathematical integrity of the RNG system producing game outcomes. Game mathematics certification for each title, confirming that RTP percentages, variance characteristics, and other game mathematics parameters are as stated. Both certifications apply to specific game versions. A material update to an existing game or a new game typically requires fresh certification.

Studios that start certification after submitting the B2B application, instead of running it in parallel, often find it becomes the critical path item. This can add months to the overall timeline.

What AML obligations apply to iGaming B2B suppliers?

B2B suppliers whose technology processes player financial transactions are within the scope of AML framework requirements. The platform must support AML compliance. It should include configurable transaction monitoring, regulatory reporting functionality, and audit logging in formats regulators can use.

The supplier’s AML framework must also cover its business relationships with operators. This includes KYC for operator clients and procedures for handling situations where an operator becomes subject to regulatory investigation.

These aren’t just operator obligations suppliers must meet them when their technology enables the transactions.

Can a B2B supplier operate without a licence while the application is in progress?

Operating without a licence during the application process creates commercial risk. It turns supply agreements with licensed operators into compliance risks during the review period. Serious operators increasingly check supplier licensing status before regulatory reviews make it their problem. In practice, many suppliers continue supply relationships during the application period under existing commercial agreements. However, the risk of disruption increases as the operator’s compliance posture tightens. Starting the B2B application early before commercial relationships are in place rather than after eliminates this risk.

How long does a B2B licence application take in 2026?

For Malta: four to eight months from a complete, well-prepared application. The main variables include the complexity of the ownership structure and the readiness of the technical documentation, including RNG certification. Another factor is whether the AML framework reflects the actual business or remains generic.

For Curaçao B2B, the timeline is comparable to the B2C process. The single-phase review can move faster than Malta’s structured process for well-prepared applications.

Recognition Certificates for existing MGA B2B licence holders in Curaçao typically process in four to eight weeks.