Crypto Casino Licences: MGA vs UKGC vs Curaçao

The main licence behind a crypto casino decides more about your money than the welcome bonus does. Three regulators dominate the space: the UK Gambling Commission, the Malta Gaming Authority and the Curaçao Gaming Control Board. Each runs a different rulebook on player funds, dispute handling and crypto custody, and those differences show up when you try to withdraw.

This guide maps what each licence actually obliges operators to do, where the gaps sit, and how to read a licence number in under a minute. Practical, with numbers, dates and named operators throughout.

Why the Licence Determines Your Withdrawal Experience

What does a licence number actually tell you?

A licence number is a lookup key, not a badge. Enter it on the regulator's public register and you get the legal entity name, the permitted activities, the status (active, suspended, surrendered) and the date of issue. Anything a site claims about its licence that the register does not confirm should be treated as marketing.

UKGC numbers follow the format 000-000000-R-000000-00. Malta's MGA numbers look like MGA/B2C/000. Curaçao issues sub-licence numbers under a master licence holder. Three formats, three databases, three levels of disclosure depth.

Which regulators publish enforcement data?

Transparency varies sharply. The UKGC publishes every fine, settlement and licence review with the sum, the date and the specific regulatory breach. Malta's register lists operators and status but publishes fewer financial penalties. Curaçao's register under the new 2025 framework is still filling out, and historical sub-licence data from before 2025 remains thin.

That asymmetry matters. When a UK-facing operator mis-handles player funds, the paperwork is public within weeks. The same incident offshore may never appear in an English-language record.

How fast do regulators act on complaints?

Under UKGC rules, operators must acknowledge complaints within 24 hours and resolve them within 8 weeks, with an escalation route to an Alternative Dispute Resolution provider at no cost to the player. MGA-licensed sites must offer an ADR channel and respond within a similar window, though enforcement timing differs.

Curaçao-licensed operators face weaker formal timelines. Players who need a hard SLA should weigh the licence before the odds.

UK Gambling Commission: The Strictest Rulebook

What does UKGC licensing cost and require?

The UKGC charges a application fee of £350 for a non-remote or remote licence, followed by an annual fee that varies by band. Beyond cash, the process demands a detailed operating plan, key person approvals, and a demonstration of how the operator will meet licence conditions on customer interaction, reporting and accounting.

Crypto casinos targeting UK players face an additional hurdle: since 31 March 2022, the UKGC has stated that crypto deposits count as gambling transactions for the purposes of credit card and related restrictions, and operators must run enhanced due diligence on crypto payment flows.

How does the UKGC treat player fund segregation?

Remote licence holders must hold customer funds in separate accounts, and where those funds are not protected in the event of insolvency, the operator must say so clearly. The Commission's guidance distinguishes between "protected" and "not protected" designations, and misleading labelling is itself a regulatory breach.

For a crypto casino, segregation is harder to demonstrate because wallet controls sit with the operator. The UKGC expects documented key-management policies and independent assurance over hot and cold wallet balances.

Which UK-facing brands hold a UKGC licence?

Most household names operate under it. Bet365 casino, William Hill casino, Ladbrokes casino, Coral casino, Sky Bet casino, Paddy Power casino and Betfred casino all hold UKGC remote licences, as do 888 Casino, betvictor casino, Grosvenor Casinos, Unibet casino and LeoVegas casino. Gala Bingo, Sun Bingo, Heart Bingo and Double Bubble Bingo operate bingo licences under the same regime.

Crypto deposits remain rare on these platforms. Where they appear, they are usually routed through a regulated payment partner rather than held directly by the operator.

What fines has the UKGC issued recently?

Enforcement is public and numeric. In 2023 the Commission issued a series of settlements in the £2–£19 million range against major operators for social responsibility and anti-money-laundering failures. A 2022 settlement with an operator reached £17 million, covering both a £12.4 million penalty and £3.1 million returned to customers.

The pattern is consistent: repeated AML failings, inadequate source-of-funds checks, and weak automated controls. Each settlement names the licence conditions breached and the remediation deadline imposed.

Malta Gaming Authority: The European Middle Ground

How does the MGA licence structure work?

Malta issues licence classes rather than a single blanket permission. Class 1 covers games of chance against the operator, Class 2 covers fixed-odds betting, Class 3 covers poker networks and Class 4 covers software suppliers. A crypto casino typically needs a Class 1 licence plus a Critical Gaming Supply authorisation for its platform.

The MGA also runs a test-house regime: operators must route their Random Number Generator and payout verification through an approved laboratory such as eCOGRA or GLI before going live.

What does the MGA require for crypto assets?

Malta's Virtual Financial Assets Act and the Gaming Authorisations Regulations require licensed operators to document how digital assets are acquired, stored and converted. In practice this means a designated custodian or a licensed VFA service provider, plus transaction monitoring that meets Maltese AML standards.

The MGA has been explicit that accepting crypto does not lower the AML bar. Operators must still identify the source of funds and, where relevant, the source of wealth for high-value customers.

Which operators run on MGA licences?

Several brands in the UK-facing list operate under MGA or dual structures. Casumo casino, Videoslots, Duelz casino, Voodoo Dreams, NYSpins and Mr.Play casino have historically held Maltese authorisations, alongside PlayOJO casino and Mr Vegas casino in certain markets.

For UK players, the relevant point is that a MGA licence does not permit the operator to offer services into Great Britain without a separate UKGC licence. Market access is territorial.

What enforcement actions has the MGA taken?

The MGA publishes directives and suspension notices. Recent years have seen licence suspensions for failure to pay annual contributions, breaches of player-protection obligations and non-compliance with reporting deadlines. Fines are typically smaller than UKGC settlements but the reputational effect on operators is comparable.

Malta also runs a self-exclusion mechanism tied to national schemes, and operators must honour it across all their MGA-licensed brands.

Curaçao: The Volume Jurisdiction

What changed in Curaçao in 2025?

The Curaçao Gaming Control Board took over direct supervision on 1 March 2025, replacing the old master licence and sub-licence system. Operators now apply for individual licences covering game of chance, skill games, peer-to-peer and technical supply. Transitional arrangements gave existing sub-licence holders until roughly September 2025 to file.

The reform raised capital and compliance requirements. Applicants must show adequate financial resources, a local compliance officer, and a working AML programme aligned with Curaçao's national legislation.

Why do so many crypto casinos choose Curaçao?

Cost and speed. Historically, a Curaçao sub-licence could be obtained in a matter of weeks for a fraction of the Maltese or British outlay, and the territory levied a low effective tax rate on gross gaming revenue. That combination suited operators launching quickly with crypto-first payment stacks.

Several brands on the wider list, including Mystake casino, Goldenbet casino, Donbet casino, Fat Pirate, NineWin casino, Velobet casino and Rolletto casino, operate under Curaçao authorisations. They are reachable from many markets but not from Great Britain under UKGC rules.

What player protections does a Curaçao licence include?

The 2025 framework formalises complaint handling and responsible-gambling obligations that were previously discretionary. Operators must offer self-exclusion tools, display age verification messaging, and maintain a complaints process with documented response times.

Enforcement capacity remains the weak point. The regulator is smaller, the caseload is large, and players who escalate may find the process slower than under UKGC or MGA supervision.

How do tax rates differ across the three jurisdictions?

Tax treatment shapes what operators can afford to offer. The UK applies a 21% remote gaming duty on gross gaming revenue from British customers. Malta charges a 5% effective rate on gaming revenue under the MGA regime for qualifying licence holders. Curaçao historically applied a 2% turnover-based structure, with the 2025 framework introducing revised rates for new licensees.

Lower overheads offshore often translate into bigger bonuses and looser wagering requirements, but they also mean thinner reserves if a payout dispute escalates.

Reading a Crypto Casino Licence in Practice

Where is the licence number displayed?

Legitimate operators place it in the footer, in the terms and conditions, or on a dedicated regulatory page. A number that appears only in promotional copy, with no link to the regulator's register, deserves scrutiny. Cross-check the entity name against the register entry, because sister brands sometimes operate under one licence while advertising another.

What should a player check before depositing crypto?

Four checks cover most of the risk. Confirm the licence status is active on the regulator's register. Read the withdrawal terms for processing times and maximum limits. Look for a published self-exclusion route. Verify whether the operator holds customer funds segregated, and whether the crypto balance is denominated in a stablecoin or held in volatile assets.

1. Register lookup: status active, entity name matching the site.
2. Withdrawal policy: stated timeframes, daily and monthly caps.
3. Self-exclusion: available directly and via the national scheme.
4. Custody model: cold storage share, insurance, audit frequency.

Which crypto-friendly brands hold which licences?

The overlap between crypto support and licence type is uneven. Brands such as 888 Casino, PartyCasino, bet365 casino and Sky Vegas casino hold UKGC licences and generally do not accept direct crypto deposits. Brands operating under Curaçao authorisations, including Mystake casino, Goldenbet casino, Donbet casino and NineWin casino, commonly accept Bitcoin, Tether and Ethereum directly.

Some operators sit in between: Betway casino, bwin casino and Unibet casino have trialled crypto payments in selected markets while retaining UKGC or MGA licences elsewhere. Market determines the payment stack.

How do disputes actually resolve under each regime?

Under the UKGC route, a player escalates to an approved ADR body, which issues a decision the operator must comply with or explain its refusal. The MGA operates a comparable panel with published case outcomes. Curaçao's process under the 2025 rules is still bedding in, and historical cases resolved through the operator's internal channel only.

Practical advice: keep transaction hashes, chat transcripts and screenshots from day one. Evidence beats eloquence in any jurisdiction.

Responsible Gambling and Self-Exclusion

What self-exclusion tools exist for UK players?

GAMSTOP lets players exclude themselves from all UKGC-licensed gambling sites for 6 months, 1 year or 5 years, at no cost. Registration takes about 10 minutes and the exclusion propagates across participating operators within 24 hours. Crypto casinos licensed outside the UK are not covered by GAMSTOP.

What age and identity checks apply?

UKGC-licensed operators must verify age and identity before allowing gambling, with enhanced checks triggered by deposit patterns or win thresholds. MGA and Curaçao operators apply KYC at similar points, though the timing of document requests varies: some request verification at first withdrawal rather than at registration.

Legal age is 18 across Great Britain, Malta and Curaçao. Operators serving other territories apply local thresholds, which can differ.

Which helplines should UK players know?

The national gambling helpline is 0808 8020 133, open 24 hours a day. GamCare and BeGambleAware provide live chat and self-assessment tools. For crypto-specific losses, the volatility angle matters: a balance held in Bitcoin can fall in fiat terms even without further play, which complicates loss tracking.

Set a deposit limit in fiat currency terms, not in coin counts. It is a small discipline that removes a lot of ambiguity later.

Under-18s are prohibited from gambling in any jurisdiction covered here. If gambling stops being affordable, self-exclude through GAMSTOP for UKGC sites and directly with the operator for offshore brands, and contact 0808 8020 133 for free, confidential support at any hour.

Frequently Asked Questions

Is a crypto casino legal in the UK?

A crypto casino is legal in the UK only if it holds a UKGC licence and complies with British rules on payments, advertising and player protection. Operators licensed solely in Curaçao or Malta cannot legally serve British customers. Playing on such sites falls outside UK regulatory protection and outside GAMSTOP coverage.

Which licence is better for players, MGA or Curaçao?

MGA supervision generally offers stronger player recourse: published enforcement, a formal ADR panel, audited fund segregation and clearer crypto custody rules. Curaçao's 2025 framework narrows the gap but enforcement capacity remains smaller. For large balances, the Maltese route carries less friction when a dispute escalates.

Do UKGC-licensed casinos accept Bitcoin?

Direct Bitcoin deposits are rare on UKGC-licensed sites. British operators route payments through regulated processors and must comply with AML reporting that makes unhosted wallet deposits impractical. Some brands offer crypto exposure through payment partners in other markets while keeping their UK product fiat-only.

How do I verify a casino licence myself?

Find the licence number in the site footer or terms, then search it on the regulator's public register: the UKGC register, the MGA register, or the Curaçao Gaming Control Board register. Confirm the entity name matches, the status reads active, and the permitted activities cover the games you plan to play.

What happens if a Curaçao-licensed casino refuses a withdrawal?

Start with the operator's internal complaints process and escalate in writing with transaction hashes attached. Under the 2025 rules, licensed operators must maintain a documented complaints route. If the response is inadequate, raise the case with the Curaçao Gaming Control Board, understanding that timelines are longer than under UKGC or MGA supervision.

Are crypto casino winnings taxable in the UK?

Winnings from gambling are generally not taxable for the player in the UK, and that applies to crypto gains from betting. The tax burden sits on the operator through remote gaming duty where the operator is UK-facing. Offshore winnings still need to be reported if they form part of wider taxable income or capital gains outside gambling.

Can GAMSTOP exclude me from offshore crypto casinos?

No. GAMSTOP covers operators licensed by the UK Gambling Commission. Casinos operating under Curaçao or MGA licences are outside its scope, so self-exclusion must be arranged directly with each operator. Some offshore sites offer their own cooling-off tools, but they are not synchronised across brands.

Licence first, bonus second. Check the register, confirm the status, and only then look at the wagering requirements.