🇲🇹 Office 1, Piazzetta Business Plaza, Ghar il-Lembi Street, Sliema SLM 1560, Malta. 📱Contact us on: +356 99408536

Contact Us

    iGaming Mergers 2026: Deal Structures Explained

    iGaming Mergers 2026: Deal Structures Explained

    iGaming mergers and acquisitions in 2026 are running at a pace that doesn’t get as much attention as the headline licensing and compliance stories. That’s probably because M&A is less dramatic to write about than regulatory reform. But it’s reshaping the industry structure in ways that matter more than most coverage implies.

    Platform consolidation. B2C consolidation in mature regulated markets. Regulatory arbitrage acquiring a licensed operator in a new market because it’s faster than applying from scratch. These are the three main drivers, and they produce deals with very different risk profiles.

    What almost all iGaming M&A deals share: buyers who underestimated the compliance dimension. Not because they skipped due diligence most didn’t but because the standard of compliance due diligence required in the current enforcement environment is higher than what was adequate three years ago.

    An operator acquired an MGA-licensed B2C business in late 2023. Clean on paper profitable, good player base, apparently compliant. Post-acquisition review found an AML monitoring system that had generated alerts for sixteen months without anyone assigned to review them. Over 400 items in the queue. The acquiring operator spent six months resolving the regulatory position before the business was operationally stable.

    Not an edge case. Variations of that story are common.

    Why iGaming M&A Is More Complicated Than Standard M&A

    Standard M&A due diligence covers financials, contracts, IP, employment, litigation, and tax. All of that applies in gaming. Then there’s a layer that doesn’t apply to most other sectors.

    The licence. The compliance history. The regulatory relationship. The key function appointments. The AML record. The responsible gaming intervention history. Player fund protection. Technical certification status. Each has its own due diligence requirement, and each can produce findings that are dealbreakers, valuation adjustments, or post-completion obligations that weren’t priced in.

    In iGaming Mergers, the Licence Travels with the History

    Acquiring a licensed gaming business means acquiring the licence which means acquiring everything associated with it. Outstanding regulatory findings. Historic AML weaknesses never remediated. Key function appointments that are nominal rather than real. Responsible gaming failures sitting in the regulatory file but not yet the subject of formal action.

    Regulators don’t wipe the slate at change of control. The acquiring operator takes on the regulatory relationship including everything already in it. This is the piece due diligence most consistently underweights not what the regulatory file says, but what it hasn’t said yet about issues that exist operationally.

    Change of control approval — the timeline problem

    Most major licensing jurisdictions require regulator approval for change of control. Not notification. Approval. The MGA assesses the acquirer’s fitness and propriety before the transfer completes. Weeks to months depending on complexity.

    A deal structure assuming completion on closing day without accounting for regulatory approval lead time creates a gap that can stretch to three or four months. In some deals that gap matters commercially. In others it creates earnout complications. Building regulatory approval lead time into deal structures from the start is structural necessity in gaming M&A, not optional.

    Due Diligence: What Needs to Go Deeper

    AML compliance is where standard commercial due diligence is most consistently inadequate for gaming M&A. The financial statements don’t show AML gaps. Management representations don’t always surface them. The regulatory file may not yet reflect issues that exist operationally.

    The Financial Action Task Force framework that applies to gaming operators defines what a functioning AML programme looks like. Due diligence in gaming M&A needs to assess whether the target actually runs one not whether the documents describing one exist. Different questions, different process.

    iGaming Mergers AML Due Diligence — The Specific Checks

    When was the AML risk assessment last updated. Does it describe the actual current business or the business that existed at application. What thresholds does the transaction monitoring system apply, and how did the operator calibrate them? How many alerts has the monitoring system generated over the past twelve months. What is the average time between alert generation and review. What does the SAR filing history look like.

    Alert queue backlog is the single most informative AML health indicator available in due diligence. Several hundred unreviewed alerts means the system is generating alerts that nobody reviews. That’s not an AML programme it’s documentation of one sitting on top of an operation that doesn’t have one.

    What functioning AML looks like operationally and the specific gaps between documented frameworks and operational reality is in iGaming AML compliance in 2026.

    Key Function Due Diligence in iGaming Mergers

    Who are the Compliance Officer and MLRO. What did they produce in the last twelve months. What did the board do with those outputs. When was the last formal compliance review and what did it find.

    Nominal key function appointments people named in the org chart without operational involvement are more common in smaller operators. They’re also more likely to surface in post-acquisition regulatory reviews, because those reviews are triggered by change of control notifications and tend to be more thorough than routine ones.

    Player Data Quality in iGaming Mergers

    The player database is often the primary commercial asset being acquired. Its value depends on data quality. Verified accounts, current KYC documentation, clean payment history, accurate segmentation data these increase acquisition value. A player base with significant proportions of incomplete or outdated verification creates compliance obligations and commercial problems post-acquisition that weren’t anticipated.

    Data quality also affects post-acquisition operational integration. Poor data creates migration problems, KYC remediation requirements, and in some cases player notification obligations under data protection law.

    Valuation: What Actually Drives Gaming M&A Multiples

    Practitioners typically express gaming M&A valuations as multiples of EBITDA or revenue. The multiple range is wide different market segments, regulatory environments, growth trajectories produce very different multiples. What matters more than the headline multiple is understanding what determines where in the range a specific asset falls.

    Compliance history as a valuation input

    Clean multi-year compliance record commands a premium. An operator with three years of MGA licensing, no significant findings, current key functions with demonstrated outputs, and a functioning AML programme presents lower post-acquisition risk. Lower risk means higher multiple. The inverse is equally true and more commercially significant.

    Compliance gaps even ones that haven’t yet generated formal regulatory action represent identifiable post-completion costs. Those should be priced into the deal. Due diligence findings that surface gaps should produce valuation adjustments or representations and warranties that allocate remediation cost to the seller. Acquirers who don’t connect compliance findings to deal pricing discover the connection only after completion.

    Licence jurisdiction and commercial value

    An MGA licence is worth more than a Curaçao licence in most M&A contexts. The content supply relationships, banking access, and regulatory credibility in European markets that come with an MGA licence have real commercial value. This isn’t absolute a Curaçao-licensed operator with a strong player base in markets where MGA credibility doesn’t matter commercially may trade at a multiple that reflects that reality. But all else equal, jurisdiction matters for valuation.

    Technical certification currency

    Game and platform certifications that are current and well-documented transfer more cleanly than those with gaps. An acquirer inheriting a platform with certification gaps faces immediate compliance obligations. This represents a post-completion cost that due diligence should identify and incorporate into pricing. Sellers who maintain current certification throughout the operating period not just at application are in a materially better position when a sale process starts.

    Tax Structuring in iGaming Mergers

    The OECD‘s Pillar Two rules introducing a 15% global minimum corporate tax for large multinational groups affect how gaming M&A is structured for larger operators. Structures that delivered very low effective tax rates through specific jurisdictional arrangements are under more scrutiny than they were. For smaller operators below the Pillar Two threshold, the direct impact is less, but the direction of international tax reform is worth understanding for deal structuring.

    Share deal versus asset deal

    Acquiring shares means acquiring the entity including its regulatory relationship and compliance history. Acquiring assets means acquiring specified items licence, player database, technology, brand and typically requires a new licensing application or transfer, adding time but avoiding historical compliance exposure.

    The trade-off between taking on regulatory history through a share deal and adding licensing lead time through an asset deal is genuinely case-by-case. No universal right answer. Timing matters: make the decision early before heads of terms are agreed and due diligence starts in one direction.

     

    The deal structure decision that gets left too late: Whether a transaction should be structured as share acquisition or asset acquisition needs to be decided before significant work starts. The regulatory implications of each structure are substantial in iGaming, and the commercial terms often need to reflect those implications from the outset. Changing deal structure after significant due diligence work has been done in one direction is expensive and sometimes damages the transaction.

     

    iGaming Mergers Post-Completion: Where Problems Actually Surface

    Most compliance problems acquired in gaming M&A don’t surface during due diligence.

    Partly because due diligence has time and access constraints. Partly because some problems aren’t visible until the acquiring operator is running the business and can see what the compliance programme actually does day to day. And partly because regulatory reviews triggered by change of control notifications tend to be more thorough than routine reviews so post-completion review surfaces things that had been sitting unexamined.

    The first regulatory review

    Most regulators conduct a post-change-of-control review. They assess whether the acquiring operator meets requirements for holding the licence. They also examine the target’s compliance position more carefully than routine reviews do. This review is not optional and not deferrable. Building it into post-completion integration plans with resources allocated for regulatory engagement and any remediation that surfaces is part of professional gaming M&A integration.

    AML Remediation After iGaming Mergers

    When post-completion review finds AML gaps and in a meaningful proportion of gaming acquisitions it does remediation is immediate. Outstanding alerts get reviewed. Risk assessments get updated. Monitoring thresholds get recalibrated. The operator may need to file SARs for past transactions that should have triggered them. Expensive and time-consuming, while the integration is already demanding management attention for everything else.

    Operators who used compliance representations and warranties in the sale agreement and who have good due diligence documentation can recover some of those costs from sellers. Those who didn’t have less recourse.

    How corporate structure affects the post-completion compliance position is in iGaming corporate structure in 2026. How iGaming M&A fits within the broader range of exit options is in iGaming exit strategies in 2026. The change of control regulatory process is in the iGaming licence application process in 2026.

    Frequently Asked Questions

    What Makes iGaming Mergers Different from Standard Acquisitions?

    The regulatory layer. Every major licensing jurisdiction requires regulator approval for change of control approval, not notification which adds weeks to months to completion timelines. The acquiring operator inherits the regulatory relationship including its history: outstanding findings, unresolved AML gaps, historic compliance weaknesses that haven’t yet generated formal action. Standard commercial due diligence doesn’t cover this adequately. Gaming M&A requires specialist compliance due diligence in addition to the standard financial, legal, and tax review.

    How does regulatory change of control approval work?

    The regulator assesses the acquirer’s fitness and propriety ownership structure, UBO source of wealth, director fit-and-proper before approving the transfer. Both the MGA and the Curaçao Gaming Authority require this. Timelines vary based on the acquirer’s structure complexity and documentation readiness. Straightforward structures with clean documentation can complete in four to eight weeks. Complex multi-jurisdictional structures take longer. Include the approval process in deal timelines at the heads of terms stage, not as a post-signing administrative step.

    What should compliance due diligence cover in iGaming mergers?

    AML framework quality whether the risk assessment is current and specific to the actual business, whether monitoring thresholds are calibrated to real transaction patterns, what the alert queue looks like, whether the SAR filing history is plausible for the business volume. Key function performance what the Compliance Officer and MLRO actually produced in the past twelve months. Responsible gaming tool integration whether tools enforce at the payment layer. Technical certification currency whether game and platform certifications are current and documented. Player data quality verification status, KYC currency, data structure portability.

    How do compliance gaps affect iGaming M&A valuations?

    Identified compliance gaps should produce valuation adjustments or representations and warranties allocating post-completion remediation cost to the seller. A clean compliance record supports a higher multiple lower post-acquisition risk. Gaps create identifiable post-completion costs that should be priced into the deal. The compliance due diligence findings are directly commercial inputs, not just regulatory risk assessment. Acquirers who don’t connect those two things discover the connection after completion.

    Share deal or asset deal — how does the choice work in gaming M&A?

    A share deal acquires the entity including its regulatory relationship and compliance history. An asset deal acquires specified assets and typically requires a new licensing application or transfer, adding time but avoiding historical compliance exposure. The right structure depends on the target’s compliance position, the jurisdictions involved, and the commercial timeline. The decision needs to be made early before heads of terms are agreed and due diligence has started in one direction. Changing structure after significant work is done is expensive.

    What happens at the first regulatory review after an acquisition completes?

    Most regulators conduct a post-change-of-control review that is more thorough than routine compliance reviews. They assess the acquirer’s fitness to hold the licence and examine the target’s compliance position in more detail than typically visible in due diligence. This review surfaces gaps that weren’t found pre-completion AML monitoring failures, nominal key function appointments, responsible gaming integration problems. Resources allocated for regulatory engagement and potential remediation need to be in the integration plan from day one.

    Share this article: