iGaming Licence Application in 2026: Process Explained

The iGaming licence application process is the part of launching a gaming business that most operators think they understand and don’t. They know it involves documents and fees and a waiting period. What they don’t know until they’re in it is how much of the outcome depends on work done before the application is submitted, and how much timeline is added by gaps that were visible from the start.

I worked with a team last year who had spent six months preparing what they considered a complete application. Platform built, structure in place, compliance documentation written. They submitted to the regulator confident the review would be straightforward. The regulator sent the first information request three weeks later, asking for source of wealth documentation on two UBOs that the team had not included. The second request came six weeks after that, asking for clarification on an inconsistency between the shareholder register and the UBO declaration. That was two rounds of requests before the substantive review had even started properly.

They went live fourteen months after submission. Not because the regulator was obstructive. Because the preparation had gaps that were always going to generate requests, and nobody had caught them before the application went in.

This article explains how the iGaming licence application process works in 2026 for Malta and for Curaçao what the stages involve, and where preventable issues extend the timeline.

iGaming Licence Application Preparation Before Submission

The preparation phase largely determines the outcome of the application. Regulators review what’s in front of them. An application that’s complete, coherent, and internally consistent moves through review without generating requests. An application with gaps ownership documentation that’s unclear, AML policies that don’t match the stated business model, inconsistencies between documents generates information requests. Each request adds six to ten weeks.

What preparation actually means in practice: every ultimate beneficial owner is documented with identity verification, source of wealth evidence, and disclosure of any prior regulatory or legal history. The corporate ownership chain is clean and traceable, with every entity explained. The AML framework reflects the actual business the specific markets served and the payment methods accepted rather than a generic gaming operator.

The platform is technically ready. This matters more than most operators realise when they plan their timeline. Both Malta and Curaçao require independent technical certification of gaming systems before go-live. That certification takes time and depends on laboratory availability. Operators who start the certification process in parallel with the application avoid it becoming the bottleneck in the final stretch. Operators who start certification after receiving the licence typically add two to three months to their go-live timeline.

The Malta Application: Stage by Stage

The Malta Gaming Authority runs a structured application process. The non-refundable application fee of €5,000 is paid at submission. Non-refundable means exactly that a rejected application doesn’t return the fee, and the preparation investment is also lost. Getting the submission right the first time is financially significant, not just operationally.

Fit and proper assessment

Every UBO, every director, and every key person named in the application goes through a fit-and-proper review. The MGA checks regulatory history, legal history, financial soundness, and source of wealth for UBOs. Regulators require criminal record checks. The failure mode here is almost never that someone fails the assessment outright. It’s that the information provided is incomplete or inconsistent with what the MGA finds through its own verification.

The director did not fully disclose their professional history. A UBO whose source of wealth documentation describes a business with no verifiable registration. Ownership percentages that differ slightly between the corporate documents and the UBO declaration. Each of these generates a request. The request goes back to the operator. The operator responds. The MGA reviews the response. Six to eight weeks, minimum, per cycle.

iGaming Licence Application business plan review

The MGA requires a detailed business plan not a pitch deck. It covers the business model, target markets, three-year revenue projections, payment methods, game types, responsible gaming measures, and corporate structure. The plan needs to be internally consistent. Revenue projections that don’t connect to a credible player acquisition model create questions. A stated market focus that conflicts with the payment methods described creates questions. Inconsistencies between the business plan and the separately submitted AML framework raise questions.

AML and compliance framework

The MGA assesses the AML framework against its own standards for what a genuine, functioning AML operation looks like. A generic AML policy written to satisfy the documentation requirement consistently fails this review. The MGA wants a framework that reflects the specific risks of the specific business the markets, the payment methods, the player profile. What that looks like in practice and where operators go wrong is covered separately. The MLRO appointment is also assessed at this stage the person named needs to have genuine authority and experience, not just a title.

Technical system review

Regulators require platform certification by an accredited testing laboratory covering RNG mathematics, system security, data integrity, and regulatory reporting functionality before go-live. The MGA maintains a list of approved labs. The certification isn’t a quick exercise. Operators who plan to start it after the compliance review is complete typically find it extends the overall timeline significantly. Starting it in parallel with the application submission is the right approach.

How long the Malta process takes

Six months from a complete, well-prepared submission at the fast end. Twelve months is more realistic for a first-time applicant with a moderately complex structure. Longer than twelve months almost always traces back to information request cycles from gaps that were present in the original submission. The preparation investment before submission is what determines which of those outcomes you’re heading toward.

iGaming Licence Application in Curaçao Under the LOK

The Curaçao Gaming Authority now issues all licences directly. The old sub-licence model ended in January 2025 when all legacy sub-licences expired. Every operator applies to the CGA through the official online portal. There’s no intermediary anymore.

The CGA processes applications in two phases. Phase one covers corporate integrity and financial stability. Phase two covers regulatory and technical compliance. Each phase targets an eight-week review period once complete documentation is submitted, with four-week extensions available when more time is needed.

iGaming Licence Application Phase One: Corporate Review

The CGA investigates every ultimate beneficial owner holding 10% or more of equity. Source of wealth documentation is required and the standard here is meaningful. Bank statements that show a balance don’t satisfy it. The CGA expects documentation that traces how the wealth was generated. Police clearances are required for UBOs and key persons. A three-year financial forecast is part of the business plan submission.

The entity structure requirements are strict. The company must be incorporated under Curaçao law with its statutory seat there. A resident managing director someone actually living in Curaçao is mandatory. At least one full-time key person employed in Curaçao is required now. These aren’t aspirational. Applications from entities that don’t meet them don’t move forward.

Phase two: compliance and technical review

The AML framework is reviewed against FATF-aligned standards. The CGA explicitly rejects applications from operators without credible AML frameworks that’s not a warning about what might happen, it’s a statement of what does happen. Responsible gaming tools are assessed. Regulators require platform certification before go-live, comparable in scope to MGA standards.

Timeline and cost for Curaçao

Eight to sixteen weeks from complete submission to provisional licence. The provisional licence is valid for six months with a possible six-month extension. The definitive licence runs indefinitely once issued. Application fee: approximately €4,600. Annual licence fee: €24,600 to €47,000 depending on structure and scale.

The full detail of what the LOK requires from operators including the substance requirements, restricted markets, and the B2B supplier licence is in Curaçao gaming licence requirements under the LOK.

iGaming Licence Application Delays: Common Causes Across Jurisdictions

Enough applications across enough jurisdictions to say with confidence: the causes of delay are remarkably consistent. Different regulators, different frameworks, the same underlying gaps.

Ownership documentation that’s unclear

Complex ownership chains with multiple entities across several jurisdictions slow every application. The complexity isn’t automatically a problem. What creates problems is complexity without clear documentation of why each entity exists and what it does. A holding company in a third jurisdiction that nobody can explain the purpose of generates questions. An ownership percentage that differs by one decimal point between two documents generates questions. Regulators recognise when complexity serves a legitimate purpose and when it does not.

AML policies written for the application rather than the business

The most consistent cause of information requests in AML-related reviews. The policy describes risk categories and monitoring processes that don’t match the actual operation. The risk assessment was built around a generic gaming operator rather than around the specific markets, payment methods, and player profile of this business. When the regulator asks follow-up questions and the answers reveal that the documented framework doesn’t reflect operational reality, the process stops.

iGaming Licence Application Document Inconsistencies

Ownership percentages that differ between the corporate documents and the UBO declaration. Director names that appear differently spelled across different forms. An entity that appears in the business plan but not in the corporate structure submission. These inconsistencies are usually innocent documents prepared at different times by different people but to a regulator they look like the story is changing. Every inconsistency generates a clarification request.

Technical certification left too late

Platform technical certification is on the critical path. Operators who plan to start it after the compliance review is complete find themselves waiting for a laboratory booking and a testing schedule that could have been running in parallel. This is one of the most avoidable causes of extended timelines, and one of the most common.

iGaming Licence Application: Malta vs Curaçao

The jurisdiction you choose shapes the application requirements, the timeline, the cost, and the commercial value of the licence once you obtain it.

Malta makes sense for operators building for European markets where regulatory credibility is commercially meaningful. Operators who need full access to Tier-1 game studio content from launch. Operators who can fund a preparation period typically twelve months or more before the licensed operation generates revenue. The application is demanding. The compliance infrastructure required to hold the licence is substantial. What it returns is a regulatory standing that changes the commercial possibilities of the business.

Curaçao makes sense for operators who need to reach market faster and where the Curaçao regulatory framework is sufficient for the target audience. The LOK has raised the application standard significantly from the sub-licence era. It’s no longer a low-friction process. But it remains faster and less expensive than Malta, with a timeline measured in weeks rather than months.

The cost comparison between the two jurisdictions every category beyond the licence fee is in Malta gaming licence cost in 2026. That and this article are worth reading together if you’re at the jurisdiction decision point.

For the broader sequence of decisions surrounding the application corporate structure, platform choice, banking, compliance setup how to start an online casino in 2026 maps the full order with realistic cost and timeline figures for each path.

What the Application Process Is Actually Testing

There’s something worth understanding about what a well-run licence application predicts. The preparation it forces clean ownership documentation, genuine AML framework, properly appointed compliance roles, certified platform is the same infrastructure that makes a licensed gaming operation actually work after go-live.

The operators who struggle most in regulatory reviews twelve or eighteen months after launching are almost always those whose applications passed on minimum viable documentation. The AML policy that satisfied the reviewer but never reflected real operations. The operator appointed an MLRO to meet the requirement but never gave them genuine authority. The risk assessment generic enough to not raise flags but too vague to guide actual compliance decisions.

Getting the application genuinely right not minimally right is what determines whether the compliance infrastructure works when a regulator shows up later. That’s the return on the preparation investment that doesn’t appear in any cost breakdown.

The ongoing compliance picture after licensing what regulators expect in the months and years that follow, and what gets found during reviews is covered in iGaming regulatory compliance in 2026.

Frequently Asked Questions

How long does an iGaming licence application take in 2026?

For Malta: six months from a complete submission at the fast end, twelve months more typically for first-time applicants. Longer than twelve months almost always means multiple information request cycles triggered by gaps in the original submission. For Curaçao under the LOK: eight to sixteen weeks from complete submission to provisional licence, with each of the two review phases targeting an eight-week window.

What documents are needed for an iGaming licence application?

Corporate formation documents articles of incorporation, shareholder registers, proof of directors. UBO declarations with source of wealth documentation for all beneficial owners above the relevant threshold. Police clearances for UBOs and key persons. A detailed business plan with three-year financial projections. AML and compliance framework documentation including the MLRO appointment. Platform technical certification from an accredited testing laboratory. The specific list varies by jurisdiction but these categories are consistent across Malta and Curaçao.

What causes most iGaming licence applications to take longer than expected?

Four consistent causes: ownership documentation that’s complex or unclear, triggering extended due diligence. AML frameworks written for the application rather than the business, triggering follow-up questions about specific risk management. Inconsistencies across documents different versions of ownership percentages, names, or entity descriptions across the submission package. Platform technical certification started too late, becoming the critical path item in the final stage. All four are visible before submission and preventable with proper preparation.

Is the Malta application fee refundable if the application fails?

No. The €5,000 MGA application fee is non-refundable regardless of outcome. A rejected or withdrawn application doesn’t return the fee, and reapplying means paying it again. This makes pre-submission preparation financially significant not just operationally. A rejected application costs the fee, the professional time invested, and the months lost before the process can restart.

Can I apply to Malta and Curaçao simultaneously?

Yes, and many operators do. Curaçao for faster market entry while the Malta application runs over a longer timeline. This works when you build the corporate structure with both in mind from the start. Structures optimised purely for Curaçao sometimes need adjustment for MGA requirements, and making those changes while the business is already operating is more disruptive than building correctly from the beginning.

What is the most important thing to get right before submitting?

The ownership documentation and the AML framework are the two categories that most consistently determine whether an application moves cleanly or generates multiple information request cycles. An ownership chain that’s documented clearly and consistently across all submission documents, and an AML framework that genuinely reflects the specific business rather than a generic gaming operation, address the two most common causes of delay before they arise. Starting platform technical certification in parallel with the application eliminates the third most common bottleneck.