MGA Casino Disputes: How to Use the Malta Gaming Authority’s Player Support Function

If you have searched something like “MGA casino won’t pay out,” “Malta Gaming Authority complaint,” “how to report a Malta casino,” or “MGA player support,” this guide is written for you. The Malta Gaming Authority operates a formal player redress system that most players never use, and the absence of that knowledge is what turns a recoverable dispute into a written-off loss.

Two things shape the rest of this article. The MGA itself does not adjudicate every payout, bonus, or KYC argument as a private referee. Since April 2019, that role belongs to the operator’s appointed ADR entity, and the MGA’s own complaint channel sits alongside it for regulatory conduct issues. The two routes do different things, and choosing the wrong one stalls a case for weeks. The next sections explain which is which and how to use them.

The MGA framework, briefly

The MGA operates under the Gaming Act (Cap. 583 of the Laws of Malta), with player-facing rules in the Gaming Player Protection Regulations (SL 583.08), and a binding Alternative Dispute Resolution framework under Directive 5 of 2018. Article 39 of the Player Protection Directive requires every MGA B2C licensee to publish a written complaints procedure in its terms, maintain a player support function, and refer unresolved disputes to a registered ADR entity. It also preserves the player’s right to go to court regardless of ADR outcome.

By contrast, the Curaçao Gaming Authority publicly states that it does not handle individual complaints against gaming providers, does not mediate or arbitrate, and cannot order compensation. Gibraltar operates a different mechanism with no equivalent binding-ADR framework, and will be covered in a separate guide. The MGA framework is therefore the most structured non-UKGC redress route in the European market.

A short detour on the licensing question, since it determines whether any of this applies. The MGA route only works for an operator that is currently MGA-licensed at the time of your dispute. For more on how the Curaçao alternative works for players whose operator falls outside the MGA, see our coverage of how Curaçao-licensed operators handle player disputes.

Before you do anything else, check the licence

If you already know your operator is MGA-licensed

Skip ahead to the next section. The framework is yours to use. One caveat: many large brands hold both UKGC and MGA licences and operate separate platforms for UK and non-UK players. For UK players whose account was opened on the UK-facing platform of a dual-licensed brand, the UKGC complaints procedure (and IBAS, the UK ADR scheme) applies, not the MGA. The cleanest test is the terms and conditions the player accepted at sign-up. The licensing entity is named there.

If you do not yet know which regulator covers your operator

The verification is short but worth doing properly. Check the operator’s website footer for the MGA licence number, which appears in the format MGA/B2C/XXX/YYYY and usually links to the operator’s MGA profile. Cross-check that number on the MGA Licensee Register, accessible through the MGA Player Hub. The register is the only authoritative source. Display badges on operator footers can be out of date, lapsed, or fraudulent.

Two further checks. First, if the URL itself looks irregular, compare it to the MGA’s Unauthorised URLs list, which collects sites that falsely claim MGA association. Second, if the operator turns out to be MGA-licensed in name only (suspended, surrendered, expired, or fraudulently displayed), the MGA route does not apply, and the dispute moves to the unlicensed-operator territory covered in the firm’s offshore-disputes coverage.

Complaints and disputes are not the same thing

Since 1 April 2019, the MGA has formally distinguished between two categories of player matter, and they run through different channels. Submitting the wrong category to the wrong route stalls the case before any merits are considered.

A complaint is a report that an MGA licensee’s gaming service is unlawful, unsafe, unfair, or non-transparent. Any individual can submit one, including non-players. The Player Support Unit at the MGA receives complaints, reviews them on a supervisory basis, and may use the material to inform an enforcement file. The PSU does not adjudicate the merits of the player’s individual claim, and it cannot order the operator to pay.

A dispute is a disagreement between a registered player and the B2C licensee they registered with, over a specific decision or transaction. Disputes are handled by the EU- or EEA-based ADR entity the operator designated in its T&Cs. The ADR entity investigates and issues a decision that is binding on both sides, subject to a narrow exception covered later.

In practice: a missing or misleading licence claim, an operator processing self-excluded players, marketing breaches, or non-transparent terms applied across multiple users are complaint material. A £4,000 balance the operator voided citing a term you dispute, a withdrawal the operator refuses to release, or confiscated winnings on a contested ground are dispute material. Most player situations are disputes, which is why the MGA reports that most assistance requests it receives are directed to ADR rather than handled directly.

Step one is always the operator

Article 39 attaches the complaints duty to the licensee. The operator must publish its procedure in the T&Cs, investigate any complaint immediately, and inform the player of the result within 10 days of receipt. The operator may extend by a further 10 days, but only if it tells the player within the first ten days and gives reasons. The PSU and any ADR entity will expect to see the internal complaint and the operator’s response before engaging.

Build the evidence file before you write the complaint. Bring the following:

• Account identifiers: username, registered email, date of registration, date of the disputed event, any case or ticket reference number.
• Transaction history: deposit and withdrawal logs, casino cashier ledger, the relevant bank or card statements.
• The operator’s T&Cs as they read on the day of the disputed event: a saved page or screenshot, because operators rewrite terms and the rewrite is sometimes retroactive.
• All communications with the operator: chat logs, emails, support transcripts, with dates visible.
• The operator’s stated reason for the disputed action, in its own words.
• KYC submissions: every document the player submitted, every date, every operator response.
• A clean timeline: deposit date, withdrawal request date where applicable, operator response date, and the current date.

A short template for the operator stage: identify the account, state the incident date and disputed amount, set out the factual position in three or four short sentences, identify why the terms or actions were unfair or non-transparent, and state the remedy requested. Ask in writing for a final response and the ADR entity name if the complaint is not upheld.

Step two is choosing the right route

After the operator has responded, or after the 10-day deadline plus any properly-notified extension has passed without a response, the route depends on what you are actually trying to achieve. The procedural choice in summary form looks like this:

For regulatory conduct, file with the MGA Player Support Unit through the dedicated online complaint form on the MGA Player Hub (not the general inbox). The form accepts submissions in English or Maltese only, asks for the operator’s name, the player’s username, the game involved, the disputed amount, the date and time of the incident, and a short description. It allows a file upload up to 35 MB, and the MGA may require identification.

For individual financial recovery, refer the matter to the operator’s designated ADR entity. The player does not choose; the operator has already named one in its T&Cs. Providers operators commonly designate include eCOGRA, ADR.gg, and the European Alternative Dispute Resolution (EADR). These are examples; use whichever the operator has named.

Both routes can run in parallel. Filing a PSU complaint does not prevent an ADR referral and vice versa. Where the underlying problem has both a regulatory conduct element and an individual financial element, use both.

What the ADR process actually does

Directive 5 of 2018 requires every MGA B2C licensee to engage one or more ADR entities established in the EU or EEA, listed under the EU ADR framework, and competent for gaming disputes. The service must be free to the player. Where the operator lacks a compliant ADR arrangement, it must refer the player to a suitable entity within 20 days of being told the dispute remains unresolved.

The default rule is that an ADR decision in arbitration or adjudication capacity is binding on both operator and player. The exception is narrow: for disputes that fall outside the jurisdiction of Malta’s Small Claims Tribunal, the operator may opt to offer non-binding ADR (including mediation), but it must tell the player clearly and explain how to obtain a binding decision. Where an ADR decision favours the player, the operator has 20 days to comply. Failure to comply is reportable to the MGA, and the MGA treats non-compliance as supervisory conduct that may inform enforcement against the licence.

Provider-specific timing matters. EADR completes the ADR process within 90 calendar days of receiving all documentation, with extension only in exceptional complex cases, and issues any refusal of the case within 30 days of the complete file. eCOGRA aims to conclude within 90 days of complete-case-file notification, provides 30-day updates, and notifies the parties of any refusal within three weeks. eCOGRA’s 2024 public report for Great Britain showed the largest valid dispute categories were deposits and withdrawals (193 cases), ID verification (92), and bonuses and promotions (49); 7% of completed cases were ruled in the consumer’s favour and 14% ended in operator concession or compromise. 71.1% of invalid cases failed because the player had not exhausted the operator’s internal complaint procedure first.

That last figure is the most actionable piece of public data on the entire system. The single most common reason ADR cases fail is that the procedural trail with the operator was incomplete. Build the operator-stage file properly, or expect a procedural rejection before the merits are reached.

When the MGA route stalls

Not every dispute will produce the outcome the player wanted. Three common failure modes are worth naming honestly.

The operator stonewalls both the internal complaint and the ADR referral. This is rare among reputable licensees but happens with operators in financial difficulty or with a licence already under review. The right response is a regulatory-conduct complaint to the PSU (now properly framed as supervisory, not as a request for adjudication) and parallel payment-side remedies: card-network chargebacks under Visa or Mastercard merchant-performance dispute codes, or, for UK players, a Section 75 claim under the Consumer Credit Act 1974 where the deposit was funded by a UK credit card. For more on the card-network mechanics, see how UK and US card issuers handle gambling chargebacks.

The ADR decision goes against the player. The decision is binding, but court rights remain. For UK players, this is usually a small-claims or county-court money claim, with the prior ADR file as evidence rather than as a procedural bar. For cross-border EU claims up to EUR 5,000, the European Small Claims Procedure is available and enforceable across EU countries except Denmark.

The operator complies with the ADR decision but the player was harmed in ways the ADR cannot repair (lost time, third-party costs, damaged banking relationship). Court action remains available, alongside a UKGC complaint where the operator also holds a UK licence, a Financial Ombudsman complaint against the bank where the bank mishandled related transactions, and a complaint to the player’s home regulator.

When we will tell you there is no case

Player Protection Legal does not take cases that have no path forward. We will say so upfront. The clearest categories of “no”:

• You authorised the deposit, played, and lost. ADR does not reverse a wagering loss the operator delivered legitimately on the terms in force.
• You are outside the operator’s complaint window or the ADR provider’s filing window, with no preserved evidence sufficient to extend either. EADR and eCOGRA each apply provider-specific limits.
• The operator is MGA-licensed in name only. The licence is suspended, surrendered, lapsed, or fraudulently displayed. The MGA route does not apply, and the dispute moves to the unlicensed-operator routes covered elsewhere.
• The deposit was made by cryptocurrency, wire transfer, or another off-rail method with no chargeback or banking remedy attached, and the operator has no recoverable presence the ADR decision can act against.

How Player Protection Legal helps

Player Protection Legal acts for players in disputes against MGA-licensed operators internationally, on a no-win, no-fee basis. You pay nothing upfront, and we are paid only if we recover funds for you. The work covers the framing and submission of the internal complaint, the preparation of the ADR referral, the evidence file, and the parallel payment-side and regulatory routes where ADR alone will not produce the outcome the player needs.

More on our 12-plus years of player-side gambling-law experience and the casino dispute and chargeback services we provide is set out separately. We tell players upfront when we cannot act. The disqualifying cases above apply.

What to monitor

Three sources are worth tracking as the framework evolves through 2026:

• MGA Enforcement Register and monthly ADR reporting. Updated through 2026 on the MGA Player Hub. The Goldwin Ltd cancellation in March 2025 is a useful example of how MGA enforcement intersects with player-funds recovery.
• ADR providers’ published statistics. eCOGRA publishes annual figures; not all providers do, so coverage is uneven.
• Cross-border regulatory cooperation. Between the UKGC and the MGA on safer-gambling and self-exclusion, particularly relevant where the same brand holds both licences.

For ongoing enforcement notices, cease-and-desist actions, and regulatory updates as they are published, see our gambling law and casino dispute newsroom.

To start a dispute, or for a clear read on whether your situation has a viable claim under the MGA framework, contact Player Protection Legal.