MGA clarifies audit procedures and new compliance terms

The Malta Gaming Authority (MGA), one of Europe’s most influential gaming regulators, has issued additional clarification on its revised audit and review procedures. Although these updates were introduced last year, they continue to cause confusion among some of the authority’s licensees, prompting further explanation from the regulator.

The background to Malta’s regulatory changes

As a key regulatory body in the European gaming landscape, the Malta Gaming Authority is responsible for licensing and overseeing gambling operations within its jurisdiction. In line with evolving industry standards and a need for more robust compliance oversight, the MGA has gradually introduced a series of reforms designed to enhance transparency and efficiency in the regulatory process.

Last year, the Authority updated its procedures relating to three main types of assessments: system audits, system reviews, and compliance audits. These processes are central to ensuring that licensees are adhering to both technical standards and legal obligations under Malta’s gaming laws.

Traditionally, licensees have had fixed timelines to meet these requirements — 60 days for system audits and reviews, and 90 days for compliance audits. However, the inclusion of new audit status categories introduced an additional layer of complexity.

Introduction of new audit statuses

One of the most significant changes implemented by the MGA was the addition of two new status markers: ‘Resolved at Audit Stage’ and ‘Partially Compliant’. These statuses were intended to streamline reporting for issues uncovered during audits, but their implementation has led to widespread uncertainty.

The regulator has now provided clarification to help licensees understand exactly how these terms should be applied.

What does ‘Resolved at Audit Stage’ mean?

According to the MGA, licensees should use the ‘Resolved at Audit Stage’ designation when a problem identified during an audit is minor and can be corrected immediately. This approach encourages prompt resolution of small issues and allows licensees to demonstrate their responsiveness and commitment to compliance.

The Authority emphasized that this status is not a way to overlook faults, but rather a way to formally acknowledge that the issue was identified and remedied during the course of the audit itself.

Understanding ‘Partially Compliant’

The ‘Partially Compliant’ status, meanwhile, should be used in situations where an issue has been identified that cannot be fully resolved at the time of the audit but is expected to be addressed soon. This may include technical issues that require time to implement or procedural changes that are in progress.

In both cases, licensees are required to submit detailed notes explaining:

• The nature of the issue
• The corrective steps taken
• Future action plans and timelines for resolution

This documentation is crucial for the Authority, as it allows for transparency and traceability in compliance efforts.

Structural updates to submission protocols

In an effort to further streamline the audit and review processes, the MGA has introduced a standardized method for submitting documentation. All licensees are now expected to organize their submissions into three distinct digital folders:

• System audits folder
• System reviews folder
• Compliance audits folder

This categorization aims to eliminate delays caused by misfiled documents and ensure that each submission reaches the appropriate department within the Authority.

Moreover, providers are now obligated to name their files clearly and accurately, in accordance with what each document represents. This allows MGA officers to quickly assess the contents without needing to sift through mislabeled or vague submissions.

The role of justification and supporting evidence

An important new requirement is that every document submitted as part of the audit process must be accompanied by a written justification. Licensees must explain why each document is deemed “sufficient and conclusive” in supporting their compliance with the relevant regulatory requirement.

This development reflects a broader industry trend toward evidence-based regulation. By requiring clear rationales and supporting evidence, the MGA ensures that audits are not merely procedural but are meaningful assessments of a licensee’s operational integrity.

Broader regulatory reform initiatives

The changes to audit procedures are just one part of a larger series of reforms implemented by the Malta Gaming Authority in the past year. Other updates have touched on diverse aspects of the gaming sector, including:

• Non-profit tombola and lottery application requirements
• Alternative dispute resolution (ADR) proceedings
• Certificate applications
• Personal detail submission forms
• Device exhibition regulations
• Financial reporting standards

Each of these reforms reflects the MGA’s strategy of refining its regulatory framework to better align with international best practices, increase transparency, and promote accountability within the gaming industry.

Addressing illegal operators

The Authority’s efforts are not confined to licensed operators. Recently, the MGA found itself compelled to issue a public statement after casinowinner.io, an unlicensed online gambling platform, falsely claimed to be licensed by the Authority.

In a statement, the MGA clarified that casinowinner.io was not in possession of a valid Maltese license and warned consumers against engaging with unregulated gambling services. This incident underscores the ongoing challenge of dealing with unauthorized operators who exploit regulatory reputations to appear legitimate.

The Authority maintains a public register of licensed operators and urges all users and partners to verify the licensing status of any gaming provider before engaging in business.

Why these changes matter

While these changes may seem procedural, they have broader implications for the gaming industry in Malta and beyond. The introduction of specific statuses like ‘Resolved at Audit Stage’ and ‘Partially Compliant’ reflects a more nuanced approach to compliance — one that acknowledges the complexity of running a regulated gambling business while still maintaining firm oversight.

These changes also demonstrate the MGA’s responsiveness to industry feedback. By issuing further guidance after identifying confusion among licensees, the Authority shows a willingness to collaborate with stakeholders and improve its regulatory practices where necessary.

Looking ahead: What operators should expect

Operators licensed under the MGA can expect continued scrutiny and evolving standards in the years ahead. With regulators worldwide facing pressure to improve consumer protection, enforce transparency, and tackle money laundering risks, audit procedures are likely to become even more rigorous.

As such, providers must invest in compliance infrastructure, including audit readiness and clear internal documentation systems. Those who embrace these changes proactively will be better positioned to maintain their licenses and thrive in a tightly regulated environment.

Conclusion

The Malta Gaming Authority’s recent clarifications on audit and compliance procedures underscore its ongoing commitment to strengthening regulatory oversight while supporting licensees in navigating evolving requirements. By introducing more nuanced audit statuses like ‘Resolved at Audit Stage’ and ‘Partially Compliant,’ and by streamlining documentation protocols, the MGA aims to create a more transparent and efficient regulatory environment.

These reforms not only reinforce Malta’s reputation as a leading jurisdiction for online gaming regulation but also encourage proactive compliance and accountability among operators. As the industry continues to face increasing scrutiny on a global scale, such measures are vital in maintaining consumer trust and ensuring the integrity of licensed operations.

For licensees, the message is clear: staying informed, organized, and responsive to regulatory updates is no longer optional — it is essential for long-term success in the iGaming sector.

FAQs

What does ‘Resolved at Audit Stage’ mean in MGA audits?
It refers to issues found during the audit that are minor and fixed immediately, without requiring further follow-up.

What is meant by ‘Partially Compliant’ status?
This status is used when a problem cannot be resolved during the audit but is expected to be addressed soon with a clear action plan.

Are the new audit statuses mandatory for all licensees?
Yes, all MGA licensees must now use the new statuses when submitting audit documentation.

How should documents be submitted to the MGA?
All documents must be uploaded into the appropriate folder: system audits, system reviews, or compliance audits.

Why do licensees need to justify their documents?
The MGA requires each submission to be explained to confirm it’s sufficient and conclusive evidence of compliance.

What happens if a provider does not follow the new protocol?
Failure to comply may result in delays, non-compliance notices, or in serious cases, suspension of the license.

Is casinowinner.io licensed by the MGA?
No, casinowinner.io has been falsely claiming an MGA license. The Authority has issued a warning against the platform.

Has the MGA made other regulatory changes recently?
Yes, updates include reforms to tombola applications, ADR, financial reporting, and more.

Why is clear file naming important for audit submissions?
It helps the MGA quickly understand the contents of each document, improving audit efficiency.

What is the goal of these audit changes?
The changes aim to improve clarity, streamline submissions, and ensure stronger compliance oversight.