Maltese Licensed Suppliers on Unlicensed Casinos

Malta-Licensed   Suppliers   Power   an   Unlicensed   Casino: The Bitcasino.io Paradox

A regulated market built on unregulated foundations

The irony could hardly be sharper. While Malta’s Gaming Authority (MGA) continues to promote its reputation as a model of European supervision, a simple visit to Bitcasino.io from a Maltese IP address tells a very different story. Scroll through the provider catalogue and the illusion of control collapses.

Dozens of suppliers carrying Maltese B2B licences or Recognition Notices appear side by side with names unknown to any European regulator. Their logos sit proudly beneath the Bitcasino banner, a platform operated from Curaçao that holds no licence recognised by the MGA or any EU authority. The platform offers full access to players in Malta despite being unlicensed there.

This single observation invites a difficult question: how can suppliers regulated in Malta and authorised only to distribute to “equivalent jurisdictions,” justify their games being active on a casino that is neither licensed nor recognised within the EU?

The provider list that tells the story

The list is not hidden. Bitcasino.io itself publishes it openly. Names include Play’n GO, Relax Gaming, Kalamba Games, Betsoft, Booming Games, Habanero, Amusnet, Greentube (Novomatic), RubyPlay and Truelab. Every one of these companies holds a valid MGA B2B licence. Alongside them appear firms operating under MGA Recognition Notices, such as Spribe and AvatarUX, as well as dozens of suppliers entirely unlicensed in Malta.

These are not marginal operators or forgotten white-label providers. They are prominent, award-winning studios that advertise their Maltese authorisations in investor materials and trade-show booths. The MGA seal on their websites represents compliance, fitness and adherence to specific obligations. One of those obligations is clear: supply only to licensed operators or entities authorised by “another competent regulatory authority recognised by the Authority.”

Curaçao’s regulatory regime does not fall into that category. Despite recent reforms, it remains outside any mutual recognition framework with the MGA. Yet the evidence visible on Bitcasino.io suggests that a significant share of the MGA’s own B2B portfolio continues to serve that market.

The legal framework and the scope of an MGA B2B licence

The Maltese B2B licence structure was introduced to ensure that game suppliers, aggregators and platform providers are subject to the same probity standards as operators. Holders of a Critical Supply Licence must perform due diligence on their clients, assess the regulatory standing of those clients and implement technical controls that prevent the use of their products on unlicensed or unrecognised sites.

The rules leave little room for ambiguity. Section 4.1.2 of the B2B licensing conditions specifies that the licence “authorises the supply of a critical gaming service to persons or entities that hold a licence issued by the Authority or by another competent regulatory authority recognised by the Authority.”

Bitcasino.io, operated by Moon Technologies B.V., holds a Curaçao licence (OGL/2023/111/0069). That licence is not recognised by Malta, nor by any EU member state. Therefore, any distribution arrangement between an MGA-licensed supplier and that operator falls outside the spirit of the Maltese authorisation.

Aggregators, intermediaries and the chain of responsibility

When asked how such situations arise, suppliers often point to the complexity of their distribution chains. The content might not be delivered directly to Bitcasino.io, they argue, but through an intermediary aggregator such as Hub88 or EveryMatrix. These intermediaries, they claim, are responsible for monitoring where the games end up.

Yet the same rulebook requires suppliers to maintain oversight of their downstream distribution. Delegation does not erase accountability. The due diligence must cover all parties in the delivery chain and the final point of supply remains the responsibility of the licensed entity.

The practical question is whether the MGA has ever tested these claims. Public records show no enforcement notices, suspensions or warnings issued against any B2B provider for making their content available on Curaçao-licensed casinos. The lack of precedent suggests either a policy of tolerance or a regulatory blind spot that the industry has learned to exploit.

The myth of “geo-blocking responsibility”

Another frequent defence is that suppliers provide content universally and it is the operator’s job to control access. If a Maltese resident can reach Bitcasino.io, the argument goes, the fault lies with the operator’s geolocation system, not with the content supplier.

That interpretation collapses on closer inspection. Geo-blocking may restrict access from certain countries, but the responsibility to assess an operator’s authorisation is not technical, it is contractual and regulatory. The issue is not who plays, but who gets supplied. A Curaçao- licensed operator remains an unrecognised counterparty regardless of where the traffic comes from.

Suppliers that claim ignorance of Bitcasino’s licence status face a further problem: the platform’s details are public and unambiguous. The terms of service, footer notice and payment processing disclosures clearly identify mBet Solutions N.V. as the operator under a Curaçao licence. Any compliance team capable of producing AML policies can verify that within seconds.

A shared benefit and a shared silence

The persistence of this arrangement cannot be explained solely by oversight. There are financial incentives on both sides. For suppliers, Curaçao operators represent steady volume, low dispute rates and faster settlement cycles. For the operator, Maltese-branded content gives credibility to a platform that lacks an EU licence.

The relationship is symbiotic and both sides profit from the lack of enforcement. That explains the silence of those involved. Neither the MGA-licensed suppliers nor the regulator itself have commented publicly on how B2B licensees monitor their downstream exposure. This silence stands in contrast to the Authority’s statements on responsible gaming and market integrity. The MGA frequently publishes guidance on advertising, AML compliance and whistleblowing, yet it remains silent on B2B distribution to offshore operators.

The recognition notice loophole

Recognition Notices were introduced to allow companies licensed in other reputable jurisdictions to operate from Malta without duplicating compliance efforts. The assumption was that a foreign licence would provide equivalent safeguards. In practice, however, RN holders appear to exploit a grey area. Firms such as Spribe and AvatarUX operate under Recognition Notices rather than full B2B licences. Their oversight is lighter and enforcement records are practically non-existent.

If those RN holders distribute games through networks that feed unlicensed platforms, it raises a policy dilemma for the MGA. The Recognition Notice system was designed to attract business, not to enable regulatory arbitrage. Without transparent audits or sanctions, it risks becoming a symbolic layer that legitimises any operation with a European postal address.

Comparing regulatory approaches

The situation looks even starker when compared with the United Kingdom and the Netherlands. The UK Gambling Commission imposes clear, enforceable obligations on game suppliers to ensure their content is available only through licensed operators. Breaches of these obligations have led to public investigations, financial penalties and in several cases, suspensions of supplier authorisations.

The Dutch regulator, the Kansspelautoriteit (KSA), adopts an equally uncompromising stance. It closely monitors content distribution networks and has taken action against companies found to be supplying or facilitating access to unlicensed operators that target Dutch players. The KSA’s approach combines enforcement with transparency, publishing detailed sanction decisions to deter repetition across the market.

By contrast, Malta’s oversight appears markedly looser. The absence of public disciplinary actions against suppliers indicates a reactive rather than preventative model. While the legal structure itself is sound, its effectiveness depends entirely on enforcement capacity and political will.

This imbalance creates a commercial distortion. MGA-licensed suppliers enjoy the prestige of EU recognition while continuing to derive revenue from offshore integrations that regulators in the UK or Netherlands would not tolerate. The reputational cost is negligible, yet the financial rewards remain significant.

Bitcasino.io and the question of access

Bitcasino.io itself operates openly. The site is not hidden behind VPN blocks or mirrors. Access from Malta is possible (we registered and made a full verification using a Malta ID and a Sliema address) and the homepage displays customer support hours aligned with Central European Time. That alone does not prove active targeting, but it undermines the argument that these operations are confined to regions outside the EU.

Trustpilot reviews linked to Bitcasino.io list users from across Europe, including Germany, the Netherlands, the UK and Malta. Many describe experiences involving cryptocurrency deposits, fast withdrawals and specific game titles produced by MGA licensees.

Even if these reviews represent individual VPN users rather than targeted marketing, the public association between EU consumers and MGA-licensed game content on a non-EU platform damages the perception of regulatory coherence.

The ethical dimension

Beyond legality lies ethics. When regulators issue licences, they implicitly endorse the behaviour of the licensee. The MGA’s logo on a supplier’s website signals compliance with European consumer protection standards. That reputation loses value if those same suppliers are visible on unlicensed, untaxed platforms that operate outside the very safeguards Malta claims to uphold.

This is not about criminality but credibility. Every instance of cross-distribution erodes trust in the system and diminishes the value of Maltese authorisation for those who genuinely follow the rules. It also raises a competitive fairness issue: compliant operators incur high costs for taxation, player verification and reporting, while their offshore counterparts use the same games without those obligations.

The regulatory silence and its consequences

It is difficult to determine whether the MGA is unaware, unconcerned or simply overextended. The Authority manages a large portfolio of licensees and has limited capacity for international enforcement. Yet its silence carries consequences.

When no enforcement follows visible breaches of supply-chain integrity, the market learns that the rule is not a rule but a guideline. Each unaddressed case becomes a precedent, encouraging others to follow the same route. The longer the silence continues, the harder it becomes to restore credibility.

This silence also weakens Malta’s position in EU negotiations. The country has repeatedly defended its gaming framework against criticism from other member states, insisting that its oversight is robust. Evidence of MGA-licensed suppliers enabling unlicensed casinos undermines that defence.

Industry reaction and selective transparency

Privately, many compliance officers admit the contradiction but argue that enforcement should start with regulators rather than suppliers. They claim that the MGA has not defined “equivalent authorisation” clearly enough, leaving space for interpretation.

Others acknowledge the issue but say that commercial pressure makes change unlikely. Curaçao-licensed operators account for a large share of global volume, particularly in cryptocurrency gaming. Refusing those contracts would mean losing market share to competitors with less scrupulous policies.

Meanwhile, the public communications from suppliers remain neutral. Their websites continue to display the MGA seal, yet none publishes a list of approved or excluded jurisdictions. Transparency stops at the point where the risk begins.

The money trail

Financial data helps to explain the persistence of this ecosystem. Bitcasino.io, like many Curaçao operators, processes payments primarily through cryptocurrency. That structure simplifies settlement for suppliers. No bank intermediaries, no delays and minimal risk of chargebacks.

For Maltese B2B providers, this creates an appealing business model. Payments arrive quickly, often in stablecoins and there is little chance of reversal. The absence of EU taxation or reporting obligations on the operator side means larger margins. The flow of crypto funds from unlicensed operators to EU-based suppliers may not breach AML laws if invoices are recorded, but it contradicts the policy objective of financial transparency that Malta claims to champion.

International scrutiny on the horizon

The growing focus on cross-border enforcement within the EU could soon change this dynamic. The European Commission and the Financial Action Task Force have both emphasised the need for consistent supervision of gambling-related financial flows.

If investigations begin to trace cryptocurrency payments from unlicensed operators to EU-based suppliers, Maltese licensees may find themselves under far greater scrutiny. The reputational consequences could extend beyond gaming to fintech and banking relationships.

Regulators in other jurisdictions are already paying attention. The German GGL has warned suppliers that it will consider contractual relationships with unlicensed operators when assessing future licensing applications. A similar stance from the UK Gambling Commission would effectively close the loop for many MGA licensees that rely on both jurisdictions for revenue.

What Malta stands to lose?

Malta’s gaming sector thrives on reputation. The country markets itself as a hub of “trusted regulation” and exports that image through its licensees. When those same licensees visibly power unlicensed platforms, the credibility of the entire system weakens.

The economic impact could be serious. If EU regulators begin questioning the reliability of Maltese B2B supervision, major operators may seek content from jurisdictions with stricter enforcement. Investors could view Malta’s framework as permissive rather than protective.

Reputational damage is cumulative. A handful of questionable integrations may seem insignificant, but the cumulative effect over time can shift perceptions from “trusted” to “tolerant.”

A pattern repeating across sectors

This phenomenon is not unique to gaming. Similar patterns appear in fintech, where Maltese- licensed payment firms have been found serving high-risk sectors abroad while maintaining domestic authorisations. The logic is the same: exploit regulatory gaps, maximise offshore revenue and rely on slow enforcement to delay consequences.

For the MGA, the challenge is structural. Its licensing model was designed for a European environment of cooperation and self-declaration. The offshore market, particularly in crypto gambling, operates on an entirely different logic: one of speed, opacity and jurisdictional arbitrage.

Unless the Authority adapts, the gap between policy and practice will continue to widen.

Possible responses and policy options

The MGA could address the issue in several ways. It could require suppliers to publish a list of all licensed operators to which they provide content. It could establish a public blacklist of unrecognised jurisdictions, explicitly prohibiting distribution there. It could also introduce routine audits of supplier contracts and integrations, focusing on those involving cryptocurrency operators.

None of these measures would be easy, but they would demonstrate intent. Transparency alone would pressure the market to self-correct.

Without such steps, Malta risks being perceived as a regulator that enforces paperwork but ignores substance.

Why the issue matters beyond Malta?

The implications go far beyond one island or one casino. The distribution of European-licensed game content to offshore operators blurs the boundaries between legal and illegal markets. It undermines national consumer protections and allows unregulated operators to compete with regulated ones using the same products.

If the EU intends to create a coherent gambling framework, it cannot ignore the role of suppliers. Software determines the product and without supplier discipline, operator licensing becomes symbolic.

Malta’s position as a major supplier hub gives it both responsibility and leverage. The question is whether it will use that leverage to uphold standards or to attract business through leniency.

My Final Thoughts and Conclusion

The evidence visible on Bitcasino.io is not an isolated irregularity. It is a snapshot of a systemic contradiction at the heart of Malta’s gaming economy. On one side stands a regulator promoting itself as Europe’s compliance benchmark. On the other stands a thriving offshore market that continues to depend on Maltese-licensed suppliers.

Nothing in this analysis alleges criminal intent. The issue is structural, not personal. Yet the consequence is real. Every time a player in Malta or Germany launches a slot by a Maltese- licensed provider on an unlicensed casino, the credibility of the entire regulatory system diminishes.

The problem is not technical but moral. It asks whether a regulator’s duty ends at the issuance of a licence or continues through the behaviour of its licensees. If the answer is the latter, then Malta’s silence becomes complicity.

The suppliers cannot claim ignorance and the Authority cannot claim surprise. The data is public, the connections are visible and the outcome is measurable.

Until the MGA confronts this contradiction, the message to the market remains clear: compliance in Malta is a label, not a limit. And as long as that remains true, Bitcasino.io will not be the exception, it will be the mirror reflecting a truth the industry prefers not to see.

Just a few below, you can check out the others yourself on the MGA website….

• Live88 – OneTouch → covered under OT Malta Limited (OneTouch) – Licence: MGA/B2B/641/2018 Play’n GO – Licence: MGA/B2B/225/2012 Company: Play’n Go Malta Limited
• PGSoft (Pocket Games Soft) – Licence: MGA/B2B/435/2017 Company: Pocket Games Software Limited
• Relax Gaming – Licence: MGA/B2B/246/2013 Company: Relax Gaming Limited
• Betsoft – Licence: MGA/B2B/204/2011 – Company: Digital Software Limited
• Booming Games – Licence: MGA/B2B/459/2018 Company: Booming Games (Malta) Limited
• Habanero – Licence: MGA/B2B/643/2018 Company: Habanero Systems Limited
• Amusnet – Licence: MGA/CRP/252/2013 Company: Amusnet Gaming Limited
• Novomatic (Greentube) – Licence: MGA/CRP/120/2006 Company: Greentube Malta Limited
• RubyPlay – Licence: MGA/B2B/826/2020 Company: Rubyplay Trading Limited
• Truelab – Licence: MGA/B2B/637/2018 Company: True Ltd.

FAQs

What is the Bitcasino.io paradox?
Bitcasino.io operates from Curaçao without EU recognition, yet hosts games from MGA-licensed suppliers, creating a regulatory contradiction.

Which suppliers are involved in this issue?
Prominent MGA-licensed suppliers include Play’n GO, Relax Gaming, Betsoft, Booming Games, Habanero, Amusnet, Greentube, RubyPlay, and Truelab.

Why is Malta’s B2B licence important?
Malta’s B2B licence ensures suppliers meet compliance, due diligence, and distribution rules, restricting their games to licensed or recognised operators.

How do suppliers justify supplying Bitcasino.io?
Many claim intermediary aggregators or geo-blocking systems handle access, but regulatory obligations require suppliers to oversee all downstream distribution.

Is Curaçao a recognised jurisdiction by the MGA?
No, Curaçao’s licence is not recognised by Malta or any EU member state, making supply of MGA-licensed games to Bitcasino.io outside the licence’s legal scope.

What are Recognition Notices (RN) in Malta?
RN holders can operate in Malta based on foreign licences, but oversight is lighter than full B2B licences, sometimes allowing access to unlicensed platforms.

What are the ethical concerns of this arrangement?
Supplying unlicensed casinos undermines the credibility of Maltese licensing, EU consumer protection, and creates unfair competition for compliant operators.

How does this compare with other EU regulators?
The UK Gambling Commission and Dutch KSA enforce strict supplier obligations, including sanctions for providing content to unlicensed operators.

What role does cryptocurrency play in this ecosystem?
Crypto payments facilitate faster, low-risk settlements, making unlicensed platforms financially attractive to MGA-licensed suppliers.

What actions could the MGA take to address this issue?
Possible measures include publishing approved operator lists, blacklisting unrecognised jurisdictions, and auditing supplier contracts for compliance.