MGA vs Curaçao Casino License: What’s the Real Difference?
MGA sets an 85% RTP floor and binding dispute resolution. Curaçao’s 2023-2024 reform added new protections but is far less tested. Here’s what actually differs.
Home > News > MGA vs Curaçao Casino License: What’s the Real Difference?
We’ve said it in half a dozen guides now: MGA is “meaningfully stronger” than Curaçao. Or that Curaçao is “the weaker alternative.” True, but it’s a vibe, not an answer. We’ve never actually shown you the mechanics behind that claim. This piece does.
No sugarcoated reviews here, and no sugarcoated licensing explainers either. We pulled the actual numbers from Malta Gaming Authority’s own site. We tracked down Curaçao’s 2023-2024 licensing reform. And we flagged everywhere the sourcing runs out. If a claim about these two licenses doesn’t trace back to something solid, we say so. We don’t repeat what every other comparison site copies from each other.
The Quick Answer
MGA and Curaçao aren’t “strict vs. lenient” as a personality trait. They’re two structurally different systems, and Curaçao changed shape significantly in 2023-2024. Here’s what actually separates them:
MGA sets a hard minimum RTP (85%). Curaçao requires RTP disclosure but, as far as we can verify, sets no equivalent floor.
Both now require segregated player funds, but MGA’s regime has run for over a decade. Curaçao’s is barely a year old.
MGA doesn’t ban crypto, it gates it behind prior approval. Curaçao places no such gate on crypto at the license level.
Curaçao consolidated four master licenses into one direct-licensing system in 2023-2024. That reform is why you’ll see conflicting old and new license numbers on the same Curaçao-licensed site, ours included.
Neither license makes an operator “licensed in Norway” or “licensed in Sweden.” Both are the foreign alternative Nordic players reach for. That’s true when no domestic option exists, or when they’re deliberately playing outside one.
MGA vs Curaçao: Quick Comparison
Dimension
MGA (Malta)
Curaçao (post-2023 reform)
License structure
Activity-specific classes (Type 1-4); an operator can hold several
Single license now covers casino, sportsbook, poker, live dealer, lottery
Minimum RTP
85% floor, confirmed on mga.org.mt
Disclosure required; no confirmed minimum floor
Fund segregation
Required since well before 2023; MGA can direct control of funds in insolvency
Now a formal LOK requirement, but enforcement track record is under two years old
Defined term or indefinite; medical certificate needed to lift indefinite exclusion
1 year to lifetime; mandatory since December 2024 under LOK Article 12.1(4)
Crypto policy
Not banned, but gated behind prior MGA approval and asset classification
No license-level restriction found; purely an operator/payment-provider choice
Cost & speed
Higher application and compliance costs, plus a GGR-based gaming tax
Commonly cited as cheaper and faster, no GGR tax, exact figures vary by source
Geographic reach
Not an EU passport; national regulators (Sweden, Denmark, etc.) still require their own license
Restricted-country list exists and appears to be growing; exact current list is inconsistently reported
Confidence varies row by row. RTP, dispute-resolution structure, and crypto policy trace to primary MGA sources. Cost figures and Curaçao’s restricted-country list are directional, not confirmed regulator numbers, and we say so again below.
What MGA Actually Requires
Malta Gaming Authority issues activity-specific B2C license classes. Type 1 covers casino-type games running on a Random Number Generator. Type 2 covers fixed-odds betting, Type 3 covers peer-to-peer games like poker, and Type 4 covers skill games. A single operator can hold several classes at once, depending on what it offers. That’s a meaningfully different structure than Curaçao’s, which we’ll get to.
Minimum RTP: the 85% floor
MGA lowered its minimum Return to Player percentage for online games from 92% to 85% in May 2021. That’s a confirmed, primary-sourced number. It’s straight from MGA’s own announcement: “the lowering of the existing minimum RTP percentage (applicable to operators offering their games online) from ninety-two per cent (92%) to eighty-five per cent (85%).”
The move brought the online threshold in line with Malta’s land-based sector, easing compliance for operators running both. In practice, the 85% floor mostly applies to specific game types. Most slots and table games still run RTPs well above that, often as high as 96%. The point isn’t that MGA games run at 85%. It’s that MGA sets a hard number below which no licensed game can legally sit, and publishes it.
Curaçao requires RTP disclosure, meaning operators must publish their figures somewhere. But we couldn’t find a specific minimum RTP floor on a primary Curaçao source. Neither could most of the secondary sources we checked. A few lower-quality sites flatly claim “no minimum RTP under Curaçao.” We’re not repeating that as fact. The honest version: MGA sets a floor and publishes it. Curaçao requires transparency about the number, but we can’t confirm it sets a minimum at all.
Player fund protection
MGA requires player funds to stay segregated and separately identifiable from operator funds at all times. Mixing the two counts as a breach. Operators must use either dedicated bank accounts, backed by a written bank declaration. Or pooled accounts where each player’s share is individually trackable. MGA can inspect the common player-funds account at its own discretion. If an operator goes insolvent, MGA can direct that control of player funds transfer to a party it names. That’s real regulatory teeth, not a policy statement.
Curaçao’s LOK now requires segregated player funds too, for the first time in a codified, centrally-enforced way. That’s a genuine improvement over the old master-license system, which had no equivalent standard. But the published detail on how it’s audited is thinner than what MGA makes public. And the track record is short. MGA’s segregation regime predates 2023 by well over a decade. Curaçao’s is new.
Dispute resolution and ADR
Here’s a number we can actually confirm. Per MGA’s Player Protection Directive, licensees must resolve a player’s internal complaint and tell them the outcome within 10 days of receipt. That can extend by another 10 days, 20 total. But only if the player is told within the first 10 days that an extension is happening and why. If the complaint stays unresolved, MGA requires the operator to offer a registered Alternative Dispute Resolution entity. ADR conclusions bind both sides, and using ADR doesn’t block a player’s right to go to court afterward.
You’ll see a specific comparison floating around online: “7-14 days MGA vs. up to 30 days Curaçao.” We’re not printing it. No primary source for that exact day-count comparison exists anywhere we could trace, on either side of it. It appears verbatim across multiple low-quality comparison sites with no attribution. That’s a classic sign of one thin source getting copied repeatedly. The comparison that actually holds up is structural. MGA has a codified internal-complaint deadline plus a binding external ADR backstop. Curaçao, post-reform, now requires ADR access too, and the operator (not the player) foots the cost. But Curaçao’s own regulator has explicitly said it doesn’t adjudicate individual disputes. It can’t order compensation, and it doesn’t act as arbitrator. That’s the real gap: MGA backs its process with regulatory weight. Curaçao’s regulator stays out of individual cases by design.
Self-exclusion and player protection
MGA requires an “effective and readily available” self-exclusion option. It can run for a defined period, commonly six months to a year, or indefinitely. It takes effect immediately once requested, and operators can’t market to a self-excluded player during the exclusion. Lifting an indefinite exclusion requires a medical certificate.
Crypto: gated, not banned
You’ll see it claimed everywhere: “MGA-licensed casinos can’t offer crypto.” We checked this specifically. It’s exactly the kind of claim that spreads across affiliate sites without anyone tracing it back. It’s an overstatement.
What’s actually true: MGA ran a regulatory Sandbox for crypto and DLT gaming from 2018 to 2022. In 2023, it followed that up with a formalized DLT Assets Policy. Under it, direct crypto acceptance isn’t banned. It requires prior MGA approval before an operator can accept crypto from players. Different approval paths apply depending on whether the asset counts as a Virtual Financial Asset or a Virtual Token. The 2023 policy actually loosened some of the earlier Sandbox-era limits. It dropped a €1,000/month deposit cap and a €150 KYC-trigger threshold that applied from 2018 to 2022.
Net effect: MGA gates crypto rather than banning it, through pre-approval, asset classification, and routing through Malta Financial Services Authority-authorized payment providers. That’s why you rarely see an MGA-licensed casino market itself as “crypto-friendly,” even though it’s not flatly illegal. Curaçao has no equivalent approval gate. Crypto acceptance there is simply an operator and payment-provider choice, unrestricted by the license itself. That’s a real part of why crypto-forward operators like King Billy (Curaçao-licensed, and one we’ve reviewed) support Bitcoin, Ethereum, Litecoin, and USDT without friction.
MGA isn’t an EU passport
Worth stating plainly: this is a genuine misconception. Holding an MGA license doesn’t make an operator legally licensed across the EU. There’s no mutual recognition of gambling licenses between member states. Countries running their own national licensing regimes all require their own local license regardless of MGA status. That includes Sweden through Spelinspektionen, Denmark through Spillemyndigheden, plus Germany, France, the Netherlands, Spain, and Italy. An MGA license doesn’t make a casino “legally licensed” in Sweden or Denmark. It just means Malta has licensed it.
That’s exactly the mechanism behind what our own Norway guide and Best Licensed Nordic piece already say. Norwegian players using MGA operators are using Malta-licensed sites, not Norway-licensed ones, because a Norway-issued casino license doesn’t exist.
What Curaçao Actually Requires, and Why 2023-2024 Changed the Picture
Here’s the part of this piece that most competing content skips entirely. Curaçao’s licensing system is not the one it was three years ago. Nearly every comparison article ranking for “MGA vs Curaçao” reads as if it predates the reform. Or as if it never noticed the reform happened. That’s the gap we can actually fill.
The old master-license system
Since roughly 1996, Curaçao’s Ministry of Justice issued only four master licenses. Each master-license holder could then sub-license unlimited numbers of operators under its own umbrella. That’s the “master license / sub-license” model behind the familiar four-digit sub-license number format. Think of the 8048/JAZ2020-013-style number that shows up in older Curaçao-licensed operator documentation, our own King Billy review included.
The 2023-2024 reform, explained
Curaçao’s Minister of Finance, Javier Silvania, announced the reform on 22 June 2023 at the NEXT.io conference in Malta. New direct licenses started issuing from 1 September 2023, with a transition year for existing master and sub-license holders. New legislation, the National Ordinance on Games of Chance (Landsverordening Ordening Kansspelen, or LOK), became fully effective on 24 December 2024.
The regulator’s exact current legal name is genuinely unclear, and we’re not going to pretend otherwise. It was the Gaming Control Board (GCB). Multiple sources describe it as having evolved into the Curaçao Gaming Authority (CGA) post-LOK. The CGA’s own December 2024 press materials describe the LOK putting it in charge going forward. But the regulator’s own web presence still mixes both names. Its current domain, cga.cw, renders its homepage under the title “The Curaçao Gaming Control Board”, even as the organization refers to itself elsewhere as the Curaçao Gaming Authority. The old gamingcontrolcuracao.org domain now redirects straight to cga.cw. That tells you the two brands have merged operationally without a single settled public name. The safest way to describe it: the Curaçao Gaming Control Board (GCB), now also referred to as the Curaçao Gaming Authority (CGA), operating under the LOK.
Since the reform, Curaçao issues a single license covering all verticals under one framework. That includes casino, sportsbook, poker, live dealer, and lottery. It’s a structural change, not just a stringency one. All four old master licenses have given way to direct, centralized licensing, with records held in a public register.
Why our King Billy review found conflicting license numbers
This reform explains a pattern our own King Billy review flagged directly. King Billy is Curaçao-licensed, but “its own documentation isn’t consistent about which entity or license number sits behind that,” and the review deliberately doesn’t lean on any single number because of it. Digging into why, across King Billy’s own site history and third-party licensing trackers, turns up exactly the kind of conflicting identities you’d expect from a jurisdiction mid-transition. There’s a Tobique Gaming Commission number tied to an earlier operating entity, a “Curaçao Gaming Control Board licence OGL/2023/174/0082,” and a legacy “Curaçao eGaming licence 8048/JAZ2020-013” issued to a different corporate entity.
That’s not King Billy being sloppy on purpose. It’s what happens when a whole jurisdiction transitions licensing systems and not every operator’s own site copy catches up in time. Old sub-license numbers and new direct CGA/GCB numbers are coexisting across the industry right now, which is exactly the kind of pattern our review noticed and flagged rather than papered over.
What’s New Post-Reform
Three things changed for the better. Player fund segregation is now a formal LOK requirement, codified for the first time. The old master-license system had no centrally-enforced equivalent. Mandatory ADR access is now a license condition, with the operator covering the cost rather than the player. Self-exclusion, deposit limits, reality checks, and responsible-gaming information are now mandatory license conditions too. That’s under LOK Article 12.1(4), effective 24 December 2024. The regulator has also stated a collaboration with a local addiction-support foundation.
This is one of the areas where the reform narrowed the gap with MGA on paper. Most of the same player-protection categories MGA has long required now exist in Curaçao’s current rulebook too.
What’s still thinner than MGA
The real remaining gap isn’t whether the rule exists on paper anymore. It’s how long it’s been enforced and how much public audit history backs it up. MGA’s player-protection and fund-segregation regime has run for over a decade, with detailed public documentation of how it works. Curaçao’s equivalent rules are barely a year old as of this piece’s publish date. Public detail on enforcement is considerably thinner. No confirmed minimum RTP floor exists on the Curaçao side, only a disclosure requirement. And the regulator explicitly doesn’t adjudicate individual player disputes, unlike MGA’s binding ADR backstop.
Where They Still Differ in Practice
Cost and speed
Every source we checked here is a licensing-consultancy or law-firm marketing page. That means the numbers below are directional, not precise. Curaçao’s LOK-era annual fee is commonly cited around €47,000-€47,450, plus a one-off application fee near €4,500-€4,600. There’s no gross gaming revenue tax. MGA’s costs run consistently higher. The application fee sits around €5,000. The annual fixed license fee runs roughly €25,000. Then there’s a progressive compliance contribution, cited anywhere from about €15,000 to €600,000 depending on license class. On top of that comes a gaming tax, commonly cited around 5% of GGR from Malta-based players (capped monthly). Curaçao doesn’t charge that.
The one point every source agrees on: Curaçao is meaningfully cheaper and faster to get licensed under than MGA. That directional claim holds up. The specific euro figures don’t deserve more confidence than “commonly cited range.”
Dispute-resolution backstop strength
MGA backs its complaint process with a binding ADR system and a codified internal-complaint deadline. Curaçao now requires ADR access too, but its regulator has said plainly it won’t step into individual disputes. That’s a real, structural difference in what happens when something goes wrong, not just a matter of degree.
Track record length
MGA’s entire player-protection and fund-segregation framework predates Curaçao’s current one by over a decade. That gap alone explains a lot of why “MGA stronger, Curaçao weaker” became the industry default assumption. That’s true even before this year’s reform started closing some of the paper gap.
Geographic Reach: A Misconception Worth Correcting
MGA licensing doesn’t function as an EU passport, covered above. On the Curaçao side, the picture is murkier. We’re going to say so rather than pick a version to sound confident. Sources genuinely disagree on Curaçao’s current restricted-country list, particularly on whether Nordic countries sit on it. One source lists a 23-country restricted set including both Sweden and Denmark. That same list oddly includes Curaçao itself as a “restricted” territory, a sign it’s a generic, possibly templated list rather than a primary regulatory document. A separate explainer states Sweden and Norway’s gambling monopolies restrict domestic operators. But they don’t formally block their citizens from reaching Curaçao-licensed sites.
What is consistent across sources: the UK, France, the Netherlands, the US, and Australia sit on the restricted list. Nordic inclusion is the contested part. Our own published Norway guide and King Billy review both describe Curaçao operators actively serving Nordic players. There’s no Sweden or Denmark-wide block in evidence. That lines up with the second reading, not the first. Take that as consistent with the honest answer, not as proof of it.
MGA carries no equivalent blanket-blocked list. Its restrictions run jurisdiction by jurisdiction. Think a German or Dutch regulator declaring MGA-only operation non-compliant locally, not Malta itself blocking a country. Curaçao licenses now build geo-blocking obligations directly into the license. MGA’s restrictions come from the destination country, not from Malta.
What This Means for You as a Nordic Player
Neither license is a Nordic license. That’s the part worth holding onto through all the detail above. Both MGA and Curaçao are the foreign alternative Nordic players reach for. Sometimes that’s because no domestic option exists, as in Norway and Iceland. Sometimes it’s because a player is deliberately stepping outside a domestic system that does exist. Think Sweden’s “utan licens” operators or Denmark’s “uden MitID” sites.
If You See “Malta Gaming Authority”
You’re looking at a well-backed operator. That means a hard RTP floor, a decade-plus enforcement track record, and a binding dispute-resolution backstop. That’s not a guarantee it’s legally licensed to serve your specific country, though. Our Best Licensed Nordic piece names four MGA operators: Wildz, Rizk, Casumo, and LeoVegas. We independently confirmed all four live against Malta’s own verification tool. That’s the place to go if you want to see what a checked MGA license record actually looks like. We’re not re-verifying or expanding that list here.
If You See “Curaçao”
You’re looking at a much newer, less battle-tested regulatory framework. It’s closed some gaps since 2023, fund segregation and self-exclusion in particular. But it still can’t match MGA’s enforcement history or its RTP floor. That doesn’t automatically mean “unsafe.” It means “less proven,” which is a different claim, and a fairer one.
Either way, the license badge on a footer is a starting point, not a verdict. Check it against our rating methodology. That weighs licensing alongside payout speed, game selection, and how honestly a site treats its players. Then browse our full casino list for the hands-on reviews behind that process. Our guides for Faroe Islands and Finland players cover the same MGA/Curaçao distinction in their own local context. Start there if that’s where you’re coming from.
FAQ
Is a Curaçao casino license safe?
Depends what you’re comparing it to. Compared to no license at all, yes, it’s a real, enforceable regulatory framework. That’s especially true since the 2023-2024 reform added fund segregation, mandatory ADR, and self-exclusion requirements. Compared to MGA, it’s newer, thinner on published enforcement detail, and doesn’t confirm a minimum RTP floor. “Safe” isn’t binary here. It’s a spectrum, and Curaçao sits meaningfully below MGA on it, not at zero.
Does an MGA license mean I’m protected as a player in Sweden, Norway, or Denmark?
No. MGA isn’t an EU passport. It doesn’t create any legal status in a country that runs its own licensing regime. Sweden (Spelinspektionen) and Denmark (Spillemyndigheden) both require their own local license regardless of MGA status. Norway has no private casino license category at all. So MGA operators serving Norwegian players are Malta-licensed, full stop. They’re never Norway-licensed, because that category doesn’t exist.
Why did Curaçao’s licensing system change?
Curaçao replaced its old four-master-license, unlimited-sub-license system with direct, centralized licensing. It was announced in June 2023 and went live from September 2023. It became fully governed by new legislation (the LOK) from December 2024. The reform introduced formal player fund segregation, mandatory ADR, and mandatory self-exclusion rules for the first time. It did so in a codified way. It’s also why old and new Curaçao license numbers are currently showing up side by side across the industry. That includes our own King Billy review.
Can I trust a casino just because it says “licensed”?
Not on its own. “Licensed” tells you a regulator exists somewhere in the chain. It doesn’t mean the regulator protects you specifically, or that the operator treats players well. Check which regulator, what that regulator actually requires (this piece), and whether it applies to your country at all. Then check the operator’s actual track record, which is what our reviews and rating methodology are for.
How We Verified This
Every MGA-specific claim in this piece traces back to mga.org.mt directly. That includes the RTP announcement, the player-fund-protection FAQ, and the Player Protection and ADR Directive pages. The Curaçao reform timeline is corroborated across multiple independent legal and consultancy sources. That covers the June 2023 announcement, the September 2023 launch, and the December 2024 LOK effective date. They agree on the dates, even where they disagree on the regulator’s exact current name.
We deliberately left out three claims you’ll see elsewhere in this exact search topic. We couldn’t trace them to anything solid. First: the specific “MGA bans crypto” claim. MGA gates crypto, it doesn’t ban it, and that’s a materially different, more useful thing to know. Second: the “7-14 days MGA vs. 30 days Curaçao” dispute-timeline comparison. It has no primary source anywhere, just repeated boilerplate. Third: any specific minimum RTP figure for Curaçao, where only a disclosure requirement is confirmed. Two points remain genuinely unresolved rather than pretended away: the Curaçao regulator’s exact current legal name (GCB vs. CGA, the regulator’s own domains disagree), and whether Sweden or Denmark currently sit on any formal Curaçao restricted-country list. We’d rather flag both plainly than round an unclear answer up to a confident one.