Why licensed gaming operator annual obligations matter
The detail varies by regulator, but the categories repeat almost everywhere. A Malta operator, a Curacao operator, and an Isle of Man operator manage similar annual duties. They pay to keep the licence active, prove the money is clean and ring-fenced, prove the games are fair, and confirm that the people in charge remain fit to run the business. This guide treats those categories as a global checklist. Each operator can then map its own licence against it, whichever flag it holds.
Key takeaways
- Every licence carries an annual fee, and many regulators also charge a yearly compliance contribution tied to your revenue.
- Most operators file audited financial statements once a year, usually within three to six months of their financial year end.
- An annual AML and CFT risk review keeps your money laundering controls current and ready for inspection.
- Responsible gambling reporting and player protection reviews recur every year under most regulated frameworks.
- Technical recertification of your RNG, platform, and information security runs on a yearly or periodic cycle.
- A single compliance calendar with named owners turns scattered duties into a routine your team can run.
What licensed gaming operator annual obligations cover
Licensed gaming operator annual obligations fall into five practical groups. You pay to hold the licence. Financial reporting remains part of the yearly licence duty. You refresh your financial-crime controls. Player protection remains active, and the operator reports on how those controls work. You prove your technical platform and your people still meet the standard. Each group answers a different question the regulator asks every year, and each one ties back to a condition you accepted when you took the licence.
These duties begin the moment your licence goes live, not when your renewal date arrives. Operators who treat compliance as a renewal-week scramble tend to find gaps the regulator has already noticed. The work starts earlier, at company formation, because your corporate structure and your key functions shape what you file later. Our guide to iGaming company incorporation explains how the entity you build feeds straight into these yearly reports, and the gaming licence compliance checklist sets out the policies that sit behind them.
Annual licence fees and compliance contributions
Every regulator charges you to keep a live licence. The annual licence fee is the headline number. Most operators also owe a yearly compliance contribution tied to gaming revenue. Ongoing compliance obligations for gaming operators start here. If the regulator does not receive its fee on time, it can suspend the licence before it reviews anything else.
The Malta Gaming Authority charges a 25,000 EUR annual licence fee for a B2C Class 1 or Class 2 licence and a 10,000 EUR annual fee for a B2B supply licence, plus a compliance contribution set against revenue. Other regulators structure the same idea differently: a flat annual licence fee, a revenue-based levy, or a gaming duty paid to the tax authority. Whatever the label, gaming licence annual fees recur on a fixed date. Therefore, operators should budget for them as a fixed cost of operating, not as a variable they can defer.
Read the fee schedule on your own regulator’s site each year, because tariffs change. Build the full figure into your annual cost model: the licence fee, the compliance contribution or duty, and any per-vertical or per-domain charges your licence attaches.
Audited accounts and annual financial returns
You file audited financial statements once a year in almost every regulated jurisdiction. The regulator uses them to confirm several points. The operator must remain solvent, hold player funds separately from operating cash, and meet liabilities to players. Most frameworks set the deadline at three to six months after the financial year end. An auditor’s declaration may also fall due a few months later.
The audit usually checks more than the accounts. An auditor often reviews whether you ring-fence player balances, whether your reported revenue matches your tax filings, and whether your financial controls work in practice. You prepare for it by keeping clean records through the year rather than reconstructing them in the final quarter. Operators who close their books monthly hand the auditor a tidy file and finish the process faster.
The annual AML and CFT review
The AML review is one of the most important yearly gaming compliance duties. The anti-money laundering programme is not a document written once. Instead, the operator reviews it every year, tests it, and updates it against new risks and new rules. An annual AML audit for gaming operators sits at the centre of this duty, and many regulators ask for an independent review on a set cycle. The Money Laundering Reporting Officer owns the file, but the obligation falls on the licensed entity.
The yearly review covers your business risk assessment, your customer due diligence and enhanced due diligence procedures, your transaction monitoring rules, your suspicious transaction reporting record, and your staff training log. Standards bodies refresh their guidance regularly, so you check your controls against the current expectations. The European Gaming and Betting Association standards and AML guidance show the kind of sector-specific measures regulators now expect operators to apply, from risk assessments through to record keeping.
Keep the evidence. A regulator that inspects your AML programme wants to see dated risk assessments, training certificates, and a log of reports you filed. The annual review produces that paper trail, and the trail is what protects you in an inspection.
Responsible gambling and player protection duties
Player protection creates its own set of yearly duties. In practice, responsible gambling reporting requirements show how the operator identifies at-risk players, runs self-exclusion tools, verifies age, and keeps advertising within the rules. Some regulators require an annual responsible gambling report. Others, however, include the data in periodic returns. Therefore, the operator confirms that the controls work, records the outcomes, and submits the figures on schedule.
You also keep the player-facing tools live and current: deposit limits, reality checks, time-outs, and self-exclusion that connects to any national register your jurisdiction runs. Mark each of these as an annual review point even where the regulator does not ask for a separate filing, because a control you set up at launch and never revisit is the control an inspection finds first.
Technical, RNG, and security recertification
Technical recertification is another recurring part of licensed gaming operator annual obligations. Regulators that approved the platform expect the operator to keep it certified. Random number generators, game rules, and core platform components run on a recertification cycle, often yearly or whenever a material change occurs. The operator commissions an approved test laboratory, fixes anything it flags, and files the certificate. Our guide to RNG testing for online casino games explains how the laboratory process works and what a recertification covers.
Information security carries a parallel duty. Many operators hold an information security certification and renew it through an annual surveillance audit. The internationally recognised standard for this is ISO/IEC 27001, which sets requirements for an information security management system and runs on a continual-improvement cycle that an external body checks each year. Where your licence references a security standard, treat the surveillance audit as a fixed annual obligation. Therefore, book the auditor well ahead of the deadline, so the team has enough time to close any findings.
Key function duties in licensed gaming operator annual obligations
Your licence rests on the people who run the operation. Compliance officers, AML reporting officers, and other key function holders stay subject to ongoing fit-and-proper checks, and many regulators ask you to confirm each year that these roles remain filled by approved individuals. When a key person leaves, you notify the regulator and appoint a replacement who passes the same checks. You do not wait for the annual confirmation to report a change.
The corporate entity carries its own yearly filings that sit alongside your gaming duties. You file annual returns and statutory accounts with the company registry, you keep your beneficial ownership register current, and you pay corporate tax on time. These are not gaming-specific, but a lapse here can put your gaming licence under review, because regulators read a struck-off or non-compliant company as a fit-and-proper concern. After the licence arrives, the work of staying compliant after a gaming licence joins these corporate duties to your regulatory ones in a single routine.
How annual obligations compare across jurisdictions
The categories repeat globally, but the weight of each one shifts by jurisdiction. The table below maps the recurring annual duties across several common licensing destinations. Treat the fee figures as indicative and confirm the current tariff on each regulator’s own schedule before you budget, because regulators update these numbers.
| Jurisdiction | Annual licence fee | Audited accounts | Annual AML review | Technical recertification |
|---|---|---|---|---|
| Malta (MGA) | 25,000 EUR B2C; 10,000 EUR B2B, plus revenue-based compliance contribution | Yes, within months of financial year end | Yes, with independent review on a set cycle | Yes, RNG and platform certification |
| Curacao (CGA) | Annual master licence fee (verify current CGA tariff) | Yes, under the post-reform framework | Yes, AML programme and reporting | Yes, game and platform testing |
| Isle of Man (GSC) | Annual licence fee plus online gambling duty | Yes, audited accounts filed annually | Yes, AML and CFT controls reviewed | Yes, system and software certification |
| Romania (ONJN) | Annual authorisation fee and licence fee | Yes, with local reporting | Yes, AML programme maintained | Yes, certified software requirement |
| Anjouan | Annual licence fee (verify current tariff) | Varies by licence terms | Yes, AML obligations apply | Yes, where the licence requires it |
Two points matter when you read this across borders. First, a licence in one jurisdiction does not satisfy the annual obligations of another: if you expand, you take on a second full set of yearly duties, not a lighter version. Second, holding several licences multiplies the calendar rather than merging it, so an operator running three flags runs three audit cycles, three fee dates, and three AML reviews. Map each licence separately. Our guide to gaming operator reporting deadlines sets out how the periodic filing dates stack up once you hold a licence.
How to track licensed gaming operator annual obligations
You manage licensed gaming operator annual obligations the same way you manage payroll: a fixed calendar, named owners, and internal cut-offs that fall before the regulator’s deadline. A shared spreadsheet works for a single licence; a compliance platform earns its cost once you hold several. The format matters less than the discipline of one source that everyone trusts.
Build the calendar in four steps. First, list every annual duty from your licence conditions and your regulator’s fee schedule. Second, assign each duty an owner by name, not by team. Third, set an internal deadline two to four weeks ahead of each external one, so a delay still leaves room to recover. Fourth, review the whole calendar once a quarter, because rules change and a duty you logged last year may carry a new form or a new date this year. Annual gaming licence renewal requirements often bundle several of these duties into one window, so flag your renewal date as the anchor and work backwards from it.
One late filing draws more scrutiny than almost anything else an operator does, and it tends to trigger a closer look at everything else. A calendar that holds is the cheapest compliance investment you can make. If you want a second set of eyes on your yearly duties, the team at DD Consultus reviews operator obligations across jurisdictions and can map your full annual calendar against your licence conditions. Reach us at contact@licencegaming.com or +356 99408536.
Frequently asked questions
What are the main annual obligations of a licensed gaming operator?
A licensed gaming operator pays an annual licence fee, files audited financial statements, completes a yearly AML and CFT review, meets responsible gambling reporting requirements, and recertifies its technical platform. Most operators also confirm that key function holders remain in post and file corporate returns with the company registry. The exact list depends on your regulator and your licence class.
Do licensed gaming operator annual obligations include a yearly licence fee?
Yes. Every regulated jurisdiction charges an annual fee to keep a licence active, and many add a compliance contribution or gaming duty that scales with revenue. The Malta Gaming Authority, for example, charges a 25,000 EUR annual fee for a B2C Class 1 or Class 2 licence. Check your own regulator’s current tariff each year, because fee schedules change.
How often must a gaming operator complete an AML audit?
Most operators review their anti-money laundering programme at least once a year, and several regulators require an independent AML audit on a set cycle. The annual AML audit for gaming operators covers your risk assessment, customer due diligence, transaction monitoring, and suspicious transaction reporting. Your Money Laundering Reporting Officer keeps the evidence ready for inspection.
What annual gaming licence renewal requirements apply?
Annual gaming licence renewal requirements usually bundle several duties into one window: payment of the renewal or annual fee, up-to-date audited accounts, a current AML review, and confirmation that your key functions and corporate filings remain in order. Some licences renew yearly and others run multi-year with annual confirmations in between. Read your licence conditions to see which model your regulator uses.
Do gaming operators file audited accounts every year?
Yes, in almost every regulated jurisdiction an operator files audited financial statements once a year. Regulators set the deadline at roughly three to six months after the financial year end, and the audit often checks that you ring-fence player funds. Keeping clean monthly records through the year makes the audit faster and reduces the risk of a qualified opinion.
What responsible gambling reporting requirements apply each year?
Responsible gambling reporting requirements ask you to show how you identify at-risk players, operate self-exclusion and deposit limits, verify age, and keep advertising within the rules. Some regulators require a dedicated annual responsible gambling report, while others collect the data through periodic returns. You record the outcomes through the year and submit the figures on schedule.
What happens if an operator misses an annual obligation?
A regulator can issue a warning, a financial penalty, a public compliance notice, or in serious cases a licence suspension or review. A single late filing also tends to trigger closer scrutiny of your other duties. You reduce the risk by setting internal deadlines ahead of each regulatory one and reviewing your compliance calendar every quarter.