Malta Gaming Authority sets out new sports betting integrity priorities

The Malta Gaming Authority (MGA) has published findings from a thematic review examining how licensed operators identify, assess and report potential sports betting integrity concerns. The assessment highlights the importance of effective monitoring systems, clearly defined responsibilities and consistent reporting procedures across the regulated gambling sector.

Published on 27 October 2026, the review focused on authorised operators that had submitted few or no Suspicious Betting Reports since the relevant reporting requirements were introduced. The MGA examined existing monitoring arrangements and internal processes to understand how businesses identify potential irregularities and determine whether further investigation or regulatory reporting is necessary.

The findings present a balanced assessment of the issue. Low reporting volumes do not necessarily indicate inadequate monitoring, but operators must be able to demonstrate that their systems are appropriate for their business models and that potential warning signs receive proper attention.

Low reporting volumes need context

The MGA's review found that some operators had adopted preventive measures that reduced their exposure to potential sports betting integrity risks. These included restrictive betting limits, conservative market offerings and the removal of events considered particularly vulnerable to manipulation.

Certain youth competitions were among the types of events identified as potentially higher risk. Restricting betting opportunities on such competitions can reduce the likelihood of suspicious activity arising in the first place.

Consequently, the number of Suspicious Betting Reports submitted by an operator should not be considered in isolation. A relatively low reporting figure may reflect effective preventive controls rather than shortcomings in the monitoring process.

However, low reporting volumes alone cannot establish that an operator's arrangements are adequate. The relevant question is whether the business has appropriate processes to identify suspicious patterns, investigate relevant alerts and report qualifying concerns in accordance with its regulatory obligations.

This distinction is important for risk-based supervision. It allows the regulator to assess the quality of an operator's controls rather than relying exclusively on the number of reports submitted.

Monitoring systems need human oversight

The review identified differences in how authorised businesses monitor betting activity. Some operators used real-time sportsbook monitoring systems, while others relied more heavily on alerts and information provided by business-to-business partners or external integrity monitoring organisations.

Potential warning signs can include unusual concentrations of wagers on a particular market, repeated betting behaviour across accounts with shared identifiers and sudden changes in stake sizes or betting volumes. None of these patterns necessarily establishes that manipulation has occurred, but they may justify further assessment depending on the circumstances.

The MGA emphasised the importance of combining automated monitoring with appropriate human oversight. Technology can help identify anomalies across large volumes of betting data, but trained personnel remain important in assessing context, distinguishing ordinary activity from potentially significant behaviour and determining whether escalation is warranted.

Effective oversight also depends on access to relevant information. Staff responsible for risk assessment should have sufficient visibility of underlying betting activity to understand why an alert was generated and whether additional checks are necessary.

A monitoring platform is therefore only one part of an effective integrity framework. Its value also depends on how alerts are reviewed, documented and acted upon.

External alerts cannot replace internal review

The assessment also highlighted situations in which operators relied extensively on third-party integrity monitoring services. In some cases, internal investigations were initiated primarily after an external provider issued an alert.

External monitoring can strengthen a business's ability to identify potential irregularities, particularly when providers have access to information covering multiple markets. Nevertheless, operators need internal arrangements that support an appropriate assessment of the risks relevant to their own licensed activities.

The review also addressed reporting obligations for businesses operating across multiple jurisdictions. Activity observed in another market does not automatically remove the need to assess whether a report is required under the MGA's regulatory framework when the relevant activity falls within the scope of an MGA licence.

For operators with international operations, this makes clear internal guidance particularly important. Employees should understand which reporting obligations apply to each licensed business and how potentially relevant information should be transferred to the appropriate compliance team.

Escalation procedures need clearer documentation

Although all the reviewed businesses had some form of internal escalation process, the degree of formality and clarity varied. Cases generally moved from operational trading or risk personnel to compliance staff, who assessed whether a Suspicious Betting Report should be submitted.

The MGA identified opportunities to improve the documentation of these arrangements. Some internal policies did not clearly explain the responsibilities of the Key Compliance Function, describe the complete process from initial detection to reporting or specify the applicable reporting timeframe.

Clear procedures help prevent uncertainty when a potentially suspicious event requires prompt attention. They also enable management and compliance personnel to understand who is responsible for reviewing an alert, making an escalation decision and ensuring that any reporting obligation is fulfilled.

The regulator encouraged authorised operators to document responsibilities more precisely, review internal policies regularly and provide targeted training for relevant employees. Reliable access to monitoring information was also highlighted as an important element of effective oversight.

These measures can help create a consistent process across trading, risk management and compliance functions. They can also support a clearer audit trail, allowing an operator to demonstrate how a concern was assessed and why a particular reporting decision was made.

Safeguards should address athletes and sports personnel

The review also considered measures intended to identify athletes and other sports personnel who may be subject to restrictions on betting activity. Appropriate safeguards can include access to trusted databases, manual verification procedures and proportionate account restrictions where necessary.

The effectiveness of these controls depends on the accuracy of available information and the ability of relevant teams to identify potential matches between customer records and restricted individuals. Appropriate verification is important because an automated match or incomplete record should not automatically be treated as conclusive evidence of a breach.

A structured approach can help operators manage potential risks while ensuring that decisions are based on relevant information and documented procedures.

The wider integrity framework also benefits from cooperation between regulators, sports governing bodies and specialist monitoring organisations. The Council of Europe's Macolin Convention provides an international framework for cooperation against the manipulation of sports competitions, while UEFA's anti-match-fixing work illustrates the role of education, investigation and collaboration in protecting sporting integrity. The International Betting Integrity Association also provides information on industry monitoring and the sharing of suspicious betting alerts.

Conclusion

The MGA's review reinforces the principle that effective sports betting oversight requires more than a high volume of suspicious activity reports. Preventive measures, reliable monitoring technology and well-defined internal responsibilities all contribute to an operator's ability to identify and assess potential integrity concerns.

At the same time, lower reporting volumes should not become a substitute for demonstrating that monitoring arrangements work effectively. Operators need documented procedures, trained personnel and sufficient access to relevant information to support consistent decisions.

The findings also underline the importance of treating suspicious betting alerts as signals requiring assessment rather than as proof of wrongdoing. A proportionate approach helps ensure that concerns receive appropriate attention without drawing conclusions that the available evidence does not support.

For licensed operators, the practical priority is to maintain a clear and auditable process from detection through investigation, escalation and reporting. For the regulator, continued supervision provides an opportunity to assess how these controls operate in practice and whether further guidance is needed.

Ultimately, confidence in regulated sports betting depends on a system in which monitoring technology, human judgement and regulatory accountability work together. The MGA's findings offer a framework for reviewing these arrangements and strengthening consistency across the sector.

FAQs

What is the MGA?
The Malta Gaming Authority is the regulatory body responsible for overseeing licensed gambling activities within its jurisdiction. Its responsibilities include regulatory supervision and measures intended to support compliance and protect the integrity of regulated gambling.

What did the MGA's thematic review examine?
The review examined how authorised operators identify, assess and escalate potential sports betting integrity concerns. It considered monitoring systems, internal reporting arrangements and safeguards designed to address potential risks.

Do low Suspicious Betting Report volumes indicate weak monitoring?
Not necessarily. The MGA found that low reporting volumes could reflect preventive measures such as restrictive betting limits and the removal of events considered particularly vulnerable to manipulation. Reporting volumes should be considered alongside the effectiveness of monitoring controls.

What are Suspicious Betting Reports?
Suspicious Betting Reports are reports concerning betting activity that raises potential integrity concerns and warrants assessment under applicable reporting requirements. Their purpose is to support the identification and review of potentially suspicious patterns.

What betting patterns may trigger further investigation?
Potential warning signs include unusual concentrations of wagers on particular markets, repeated activity across accounts with shared identifiers and sudden changes in stake sizes or betting volumes. Such indicators require contextual assessment and do not independently prove manipulation.

Why is human oversight important in betting monitoring?
Human oversight helps trained personnel assess automated alerts, review relevant betting data and determine whether further investigation or reporting is appropriate. It complements monitoring technology rather than replacing it.

Can operators rely entirely on external integrity monitoring providers?
External providers can supply valuable information and alerts, but operators still need internal arrangements to assess potential concerns relevant to their licensed activities. Internal responsibilities and reporting obligations should be clearly documented.

What did the MGA identify about escalation procedures?
The review found that escalation arrangements existed across the businesses examined, but documentation varied. Areas for improvement included defining the Key Compliance Function's responsibilities and clarifying the workflow and applicable reporting timeframe.

Why are safeguards for athletes and sports personnel important?
Such safeguards help operators identify individuals who may be subject to restrictions on betting activity. Trusted databases, manual checks and proportionate account controls can contribute to appropriate risk management.

What happens after the MGA publishes thematic review findings?
The MGA stated that it will continue monitoring progress through its supervisory activities and consider the findings when developing future guidance and supervisory priorities. The review is intended to help authorised operators assess and improve their existing arrangements.