Reference
Offshore Casino Licences Explained for UK Players
Offshore casino licences sit at the heart of what makes a non gamstop operator trustworthy from the UK. Four authorities issue the licences you will encounter in practice, Malta, Gibraltar, Curacao and Anjouan, and each sets a different bar on player protection, dispute mechanism, and operator obligations. This page walks through what each one actually delivers and how to verify a casino’s licence claim before you deposit.
Written by
Which licences back the casinos in our shortlist
The four offshore jurisdictions serving UK players
The casinos in the shortlist on our homepage are licensed across the four jurisdictions offshore operators typically use to serve players outside their home country: Malta (MGA), Gibraltar (GRA), Curacao (Gaming Control Board), and Anjouan (Offshore Finance Authority). A small subset also carries Kahnawake certification for the North-American-adjacent segment. Each authority sets its own bar on what an operator must publish, how it must handle player funds, and what recourse a player has if the operator withholds a withdrawal or misrepresents a bonus term.
Why licence tier matters more than headline offer size
Understanding what each licence obligates, and what it does not, is the single most important context for evaluating an offshore casino. A Malta-licensed operator carries dispute-mechanism obligations closer to what UKGC-licensed operators do; an Anjouan-licensed operator carries far fewer, on paper. The trade-off shows up in the operator’s product: MGA-licensed casinos tend to have stricter bonus terms and slower onboarding; Curacao and Anjouan-licensed casinos tend to have larger welcome offers and faster deferred-KYC signup.
Malta Gaming Authority, the strongest player-protection framework offshore
How the MGA framework protects player funds and disputes
The Malta Gaming Authority (MGA) is widely regarded as the strictest of the commercially significant offshore regulators. Its licence framework requires operators to segregate player funds from operating capital, publish an approved AML program, appoint a compliance officer resident in Malta, and route disputes through an approved ADR provider. Complaints escalated to the MGA itself carry the risk of licence suspension for repeat operator failure.
What UK players get from an MGA-licensed offshore casino
What this means for a UK player at an MGA-licensed offshore casino is predictability. Withdrawal disputes get a hearing at an independent provider. Player funds are ring-fenced, so an operator insolvency does not automatically wipe out balances. RTP audits are mandatory. On the operator side, MGA is expensive to hold and slow to obtain, which self-selects for operators willing to invest in a longer horizon. The trade-off is that welcome offers at MGA operators run tighter, since the multiplier caps are usually similar to UKGC, and max cashout on bonuses is set below what a Curacao operator would offer.
Malta Gaming Authority at a glance
| Issuing authority | Malta Gaming Authority (MGA), established under the Lotteries and Gaming Authority Act 2001 and restructured under the Gaming Act 2018 |
|---|---|
| Licence type used by offshore casinos | Type 1 remote gaming licence for RNG-based casino games; Type 2 for fixed-odds betting; Type 3 for peer-to-peer poker |
| Key operator obligations | Player-fund segregation from operating capital; approved ADR provider named in T and C; compliance officer resident in Malta; annual RTP audit by an approved test cabinet |
| Typical application cost and timeline | Application fee plus first-year licensing costs of roughly 25,000 to 50,000 euros; approval typically 3 to 6 months |
| Public register | Licensee register at mga.org.mt lists every active MGA licensee, the licence class, and the URLs the licence covers |
Gibraltar Regulatory Authority, UK-adjacent standards
How the GRA framework aligns with UK operator standards
The Gibraltar Regulatory Authority (GRA) issues licences under the Gambling Act 2005 (Gibraltar version), and the framework aligns closely with UKGC standards because much of the operator population in Gibraltar historically served both markets. Player-fund segregation is mandatory, dispute mechanisms are approved provider-side, and the GRA runs a public register you can check against an operator’s licence claim.
Why Gibraltar operators are rarer post-2020 and what that signals
Gibraltar-licensed offshore operators are rarer than they were before 2020, as the market restructured around Brexit. Those that still hold the licence typically pair it with an offshore counterpart licence for wider market access, which is worth reading as a signal of operator maturity. Bonus math at Gibraltar operators is slightly less restrictive than MGA and considerably tighter than Curacao-only sites.
Gibraltar Regulatory Authority at a glance
| Issuing authority | Gibraltar Regulatory Authority (GRA), operating under the Gambling Act 2005 (Gibraltar version) |
|---|---|
| Licence type used by offshore casinos | Remote Gambling Licence (RGL) covering B2C casino operation, betting, and B2B software supply as separate classes |
| Key operator obligations | Player-fund protection, approved AML program with reporting to the GRA, independent game-fairness testing, and an approved dispute mechanism named in the operator’s T and C |
| Fiscal weight on the operator | Comparatively low gaming duty combined with high fixed licensing cost, which self-selects for larger established operators rather than newer offshore entrants |
| Public register | Licensees list at gibraltar.gov.gi; the GRA also publishes enforcement records against licensees |
Curacao Gaming Control Board after the 2024 restructure
What changed with the 2024 NOOGH transition at the GCB
Curacao restructured its licensing framework through the National Ordinance on Games of Chance (NOOGH / LOK) in 2024, transitioning from a master-and-sublicense model to direct licensing by the Gaming Control Board (GCB). The change matters because the GCB now imposes real AML program requirements, mandatory dispute mechanism, and mandatory game-fairness audit on every licensed operator. These are obligations that were often patchy under the sublicense model.
Where post-2024 Curacao sits between Malta and older offshore
A modern Curacao GCB licence sits between the MGA-tier and the older master-sublicense-era offshore licences in terms of operator obligations. The AML program is real; player-fund segregation is a licence condition; complaints route to the GCB’s own dispute mechanism first and to an approved ADR after. Player experience at a post-2024 Curacao operator is often close to a Malta operator on protection while carrying a larger welcome offer because the licensing cost and speed favour operators willing to move on price.
How to tell a direct GCB licence from a legacy sublicense
What to watch for: some older Curacao-licensed operators still carry a legacy sublicense number rather than a direct GCB licence. The public register at the GCB’s official portal lists direct licensees; verify against the register, not just against the operator’s licence footer badge.
Curacao Gaming Control Board at a glance
| Issuing authority | Gaming Control Board Curacao (GCB) under the National Ordinance on Games of Chance (NOOGH) as restructured in 2024 |
|---|---|
| Direct licence versus legacy sublicense | Post-2024 licences are issued directly by the GCB. Older operators may still display a legacy master-sublicense reference; the direct GCB number is what verifies at the register |
| Key operator obligations | Approved AML program, mandatory dispute mechanism routed to the GCB then to an approved ADR, mandatory game-fairness audit by a recognised test cabinet, and player-fund segregation as a licence condition |
| Typical application cost and timeline | First-year cost commonly reported in the 20,000 to 50,000 euro range; direct-GCB approval typically 3 to 6 months |
| Public register | Direct-licensee register at gamingcontrolboard.cw; the GCB began publishing enforcement records as part of the 2024 transition |
Anjouan Offshore Finance Authority, the newer entrant
How the AOFA framework compares to Malta and Curacao on protection
The Anjouan Offshore Finance Authority (AOFA), based on Anjouan in the Comoros, issues gaming licences on a lighter framework than either Malta or post-2024 Curacao. Application cost is lower and processing time is measured in weeks rather than months, which brought a wave of newer operators onto Anjouan licences from 2023 onwards. AOFA obligations focus on AML compliance and operator registration; player-fund segregation and dispute mechanism are lighter than the MGA or GCB frameworks.
What healthy skepticism about Anjouan-licensed operators looks like
What this means in practice is a healthy skepticism about the operator behind an Anjouan licence. The licence itself does not vouch for the operator the way an MGA licence does. It certifies that AOFA has processed the application and required an AML program. Operator maturity signals become more important: how long has the operator been running, who owns it, how does its casino guru safety index look, what does its complaints pattern show on independent third-party sites. On the upside, welcome offers at Anjouan-licensed operators tend to be the largest offshore because the operator’s fixed cost is the lowest.
Anjouan Offshore Finance Authority at a glance
| Issuing authority | Anjouan Offshore Finance Authority (AOFA), based on the island of Anjouan in the Comoros; the gaming-licence program was revived from around 2022 onwards |
|---|---|
| Licence prefix commonly seen in operator footers | Alphanumeric strings issued via AOFA and displayed together with the authority’s name; verify against the register rather than by badge alone |
| Key operator obligations | AML compliance program and operator registration; player-fund segregation and dispute mechanism are lighter obligations than the MGA or GCB frameworks |
| Typical application cost and timeline | Lower fixed cost than Curacao (frequently reported in the 10,000 to 15,000 dollar range) with faster approval, typically measured in weeks rather than months |
| Public register | Licensee list at anjouangaming.org; verify the operator’s specific URL against the register entry rather than against a footer badge |
Kahnawake Gaming Commission for the North American segment
How the KGC framework works alongside Malta-tier obligations
The Kahnawake Gaming Commission (KGC), based in the Mohawk Territory of Kahnawake in Quebec, has issued interactive gaming licences since 1999 under the Kahnawake Interactive Gaming Regulations. It was the first offshore authority to run a formal internet-gaming licensing program, and its framework sits closer to Malta than to Curacao in terms of the obligations imposed on the licensee.
What KGC actually enforces on licensees today
The KGC requires AML compliance, mandatory independent game-fairness testing, and a published dispute mechanism accessible to players at gamingcommission.ca. Complaints against KGC-licensed operators are handled by the commission directly before escalation to an approved ADR, and the commission publishes a track record of resolved cases including those that landed in favour of the player. Player-fund protection is a licence condition, and the commission has suspended licences over the operator’s history when repeat operator failure warranted it.
Where Kahnawake fits in the modern UK-facing offshore market
UK-facing offshore operators occasionally carry a Kahnawake licence alongside a Curacao or Anjouan counterpart to serve North-American-adjacent segments. Kahnawake-primary operators are less common in the UK market than they were pre-2020, but where an operator does carry a current KGC licence, the recourse is genuinely meaningful and often surpasses what an Anjouan-only operator can offer.
How the four main licences compare on player protection
The best way to internalise the four is to read them side by side against the obligations that matter to a UK player: dispute mechanism, player-fund handling, AML program, and complaint-handling responsiveness. The table below reads across in that order.
Malta, Gibraltar, Curacao, and Anjouan compared
Each row is an operator obligation imposed by the licensing authority. Read across.
| Feature | Strictest Malta (MGA) | Gibraltar (GRA) | Curacao (GCB post-2024) | Lightest Anjouan (AOFA) |
|---|---|---|---|---|
| Approved dispute mechanism required | Yes Approved ADR mandatory | Yes Approved provider mandatory | Yes Direct to GCB then approved ADR | AOFA-side only, lighter framework |
| Player-fund segregation from operator capital | Yes Mandatory, audited | Yes Mandatory | Yes Mandatory as a licence condition | Not required as a licence condition |
| AML program required | Yes Approved AML program, MLRO in Malta | Yes Approved AML program | Yes AML program required post-2024 | Yes AML compliance required |
| Mandatory game-fairness audit | Yes Approved test cabinet required | Yes Independent testing required | Yes Testing required post-2024 | Not a hard licence condition |
| Typical complaint-handling window | Yes 14 to 21 days at MGA + ADR | Yes 14 to 30 days at GRA | 21 to 45 days at GCB post-2024 | Variable at AOFA, less structured |
| Typical operator profile | Long-horizon operators, tighter offers | Established brands with UK exposure | Modernised offshore operators, larger offers | Newer operators, largest welcome offers |
Complaint-handling windows are typical rather than mandated; individual operator T and Cs may be tighter.
How to verify an offshore casino's licence claim before you deposit
Every legitimate offshore casino publishes its licence number in the footer of every page and links to the register on the authority’s official portal. The verification is not just a formality; a fabricated licence number is one of the clearest red flags in the offshore market. The steps below take under five minutes and eliminate most bad actors before you hand over a payment method.
Verifying a licence claim in five minutes
Do this before you deposit at any offshore casino you have not played at before.
-
Locate the licence number in the operator's footer
Scroll to the footer of the operator’s homepage. The licence number is usually printed as a short alphanumeric string next to the licensing authority’s name. Most operators also embed a clickable link to the register.
-
Open the authority's official register directly
Do not trust the link the operator publishes as your primary source; go to the authority’s website directly. Malta’s register is at mga.org.mt, Gibraltar’s at gibraltar.gov.gi, Curacao’s at gamingcontrolboard.cw, and Anjouan’s at anjouangaming.org.
-
Search the register by licence number
Every authority above publishes a public register searchable by licence number or by legal entity name. The register entry should show the licence status (active, suspended, or expired), the legal entity name, and the URLs authorised under the licence.
-
Cross-check the operator's URL against the licensed URLs
The register lists which URLs the licence covers. If the domain you are on is not on that list, the licence does not apply to this operator, even if the licence number itself is real. This is the most common scam pattern in the offshore market.
-
Check independent third-party sites for complaint patterns
Casino Guru, AskGamblers, and ThePogg maintain independent complaint records against operators. A clean licence entry paired with a long complaint tail is a signal the operator is technically licensed but practically hostile to players.
Third-party test cabinets that audit game fairness
Why third-party test cabinets add a second layer beyond the licence
A licence certifies the operator’s obligations to the authority. Game fairness is audited separately by independent test cabinets that certify individual games and the operator’s overall RNG. Four names dominate: eCOGRA, GLI (Gaming Labs International), iTech Labs, and BMM Testlabs. Each publishes public certification records for the operators and studios they audit.
What eCOGRA, GLI, iTech Labs and BMM Testlabs actually certify
What their mark actually delivers: RTP audits that verify the published return-to-player figure matches actual outcomes over sample size; RNG audits that verify random-outcome generation is not biased; dispute-support services in some cases (eCOGRA runs its own player-complaint mediation service). An offshore operator carrying a certification from one of these labs alongside its licence provides a second layer of assurance the licence alone does not.
How to verify a cabinet mark against the cabinet’s own register
Verification is symmetrical to the licence verification: go to the cabinet’s website directly (ecogra.org, gaminglabs.com, itechlabs.com, bmm.com) and search for the operator or studio you want to check. A cabinet mark on the operator’s footer with no corresponding entry in the cabinet’s own register is a red flag.
Dispute mechanisms when a payout goes wrong
The typical escalation path from operator to authority
The dispute process at an offshore operator is where the licence framework actually delivers or fails. The typical path is: operator internal dispute first (the operator’s own T and C usually gives 14 to 30 days to resolve); then escalation to the approved dispute mechanism named in the operator’s licence; then, if the mechanism finds against the operator, enforcement by the licensing authority up to and including licence suspension.
How the dispute route differs across the four main licences
At MGA and GRA operators the approved dispute mechanism is a named ADR provider (Malta operators most commonly use eCOGRA or the MGA’s own Player Support Unit). At post-2024 Curacao operators the GCB itself is the first-tier dispute route and an approved ADR is second-tier. At Anjouan operators the mechanism is lighter and more variable, which is why complaint patterns on independent third-party sites matter more at Anjouan operators than at MGA ones.
Two dispute-mechanism data points to verify before you deposit
Two data points to check on any operator before you deposit: (1) is the dispute mechanism named in the operator’s T and C, with a direct link or contact route, and (2) does that mechanism have public records of resolved cases in the operator’s favour and against. Both should be visible; an operator that names no mechanism or points to a non-existent one is running without accountability.
Applying licence knowledge to your operator choice
The licence trade-off between recourse strength and offer size
The trade-off across licences is real. A Malta or Gibraltar operator gives you the strongest recourse if things go wrong, at the cost of tighter bonus math and slower onboarding. A post-2024 Curacao operator sits in the middle. An Anjouan operator gives you the largest welcome offer and the lightest fixed cost, but the downside protection is thinner and your due diligence has to compensate.
How to weight licence tier against your stake size and operator age
How you should weight these depends on how much you plan to stake and how recently the operator started running. New Anjouan-licensed operators with no complaint history yet carry event risk that older licensed operators do not. Larger stakes lean toward tighter licences because the dispute mechanism matters more. Session-scale casual play at low stakes tolerates a lighter licence because the downside is capped by the size of your session. For welcome-offer-first decisions, our non gamstop welcome bonus reference maps specific offers to licence tier.
Where licence knowledge fits in the operator-choice methodology
Our how to choose a non gamstop casino reference works through the methodology in detail. For welcome-offer-driven signup decisions, the non gamstop bonus terms page compares specific offers against the licence-tier trade-off.
Frequently asked questions about offshore casino licences
Malta Gaming Authority licences carry the strongest player-protection obligations offshore, followed by Gibraltar. Post-2024 Curacao GCB direct licences sit in the middle. Anjouan Offshore Finance Authority licences carry the lightest obligations. Safety is licence-tier plus operator-track-record combined; a well-run Anjouan operator can be safer than a poorly-run older Curacao operator.
Find the licence number in the operator’s footer, go to the licensing authority’s public register directly (not via the operator’s link), search for the licence number, and verify the URL you are on is listed among the licensed URLs. A licence number that returns nothing in the register or a URL not covered by the licence is a red flag.
Yes. The offshore licensing authority, not the UKGC, is the enforcement route. Every licence framework above requires the operator to route disputes through an approved mechanism, and repeated operator failure risks licence suspension. UKGC has no jurisdiction over offshore operators, but the offshore authority does.
Curacao restructured in 2024. Before, master licensees issued sublicenses to individual operators, and operator obligations varied by master. After the NOOGH / LOK transition, the GCB issues direct licences and applies uniform AML, dispute-mechanism, and game-fairness obligations. Look for a direct GCB licence number in the operator’s footer rather than a legacy sublicense reference.
eCOGRA is an independent test cabinet that audits RTP, RNG fairness, and safe-play systems at operators and game studios. A current eCOGRA seal on an operator’s footer, matched to an entry in eCOGRA’s own register at ecogra.org, means the operator’s games have been audited for actual return-to-player against the published figure and the RNG is verified as unbiased.
Technically yes; practically it is a red flag. An unlicensed operator has no dispute mechanism, no player-fund segregation obligation, and no authority to escalate to if a payout is withheld. Every casino in our shortlist carries at least one of the four main offshore licences.
For strict player-protection, yes. Malta imposes tighter operator obligations and runs a more mature dispute mechanism. For welcome-offer size and onboarding speed, a post-2024 Curacao operator often delivers more. Which matters more depends on how much you stake and how much downside protection you value.
MGA publishes enforcement records annually, and suspensions are visible on the register. Curacao GCB began publishing enforcement data post-2024 as part of the restructure. Anjouan and Gibraltar publish less frequently but do maintain a public register showing licence status. Every current licence in an operator’s footer should read active in the corresponding register; expired or suspended entries are the clearest signal to disengage.