Compare the best casino
See the top list or jump straight to an operator that suits your playing style.
Every other consumer protection you have as an online gambling customer flows from one thing: who licensed the operator, and what that licensor will actually do when something goes wrong. If you play across borders rather than inside a single national market, no regulator is automatically "yours". You choose one, implicitly, every time you open an account. This guide sets out what the three licences you will meet most often actually give a player, where they genuinely differ, and how to check that the badge in a footer corresponds to a live authorisation.
Why the licence is the only consumer protection you get
A gambling account is an unusual financial relationship. You hand over money, the balance is recorded on the operator's own systems, and the only thing standing between you and a unilateral decision about that balance is the operator's licence conditions and whoever enforces them. There is no deposit insurance. There is rarely a chargeback route once play has occurred. Card networks treat a completed wager as a delivered service.
So the practical questions are narrow and answerable:
- Are player balances required to be held separately from the company's operating money?
- Is there a defined complaints procedure with a deadline the operator must meet?
- Is there an escalation route above the operator, and does anyone independent look at the file?
- Can you confirm, from the licensor's own records rather than the operator's website, that the authorisation is current?
Everything else — game range, promotion size, interface quality — is preference. These four are the ones that decide what happens on your worst day.
What a Malta Gaming Authority licence gives a player
The Malta Gaming Authority is the gambling regulator of an EU member state. Its 2018 Gaming Act replaced an older multi-class arrangement with a simpler split between business-to-consumer licences, held by operators who take your money, and business-to-business licences, held by suppliers who provide games and platform services to those operators. The licence you care about as a player is the B2C one.
Three consequences matter in practice. First, the operator sits inside the legal order of an EU member state, so the ordinary machinery of European consumer and data protection law applies to it rather than being a matter of the operator's goodwill. Second, MGA rules require player funds to be held separately from the operator's own working capital, which is what stops a solvency problem from becoming your problem. Third, the MGA operates a player support function: you complain to the operator first, and if the operator does not resolve it within the period its own procedure allows, you can take the file to the regulator.
That escalation route is the single feature worth paying for. It is not a guarantee of the outcome you want. It is a guarantee that somebody other than the counterparty reads the file.
Curacao: a regime in the middle of being rebuilt
Curacao is the licence you will see most often on internationally-facing sites, and it is also the one whose meaning has changed most in recent years — which is exactly why you should be careful with anything you read about it, including this page.
Historically, Curacao worked through a master-licence structure. A very small number of master licence holders held the underlying permissions and issued sub-licences onwards to operating companies. The consequence for a player was structural rather than incidental: your operator's authorisation came from another private company, not directly from a public authority, and there was no independent body sitting above the chain whose job was to adjudicate your complaint.
Curacao has been replacing that arrangement with direct licensing under a dedicated gaming authority, so that operators are authorised and supervised by the regulator itself rather than through a sub-licence chain. The reform has been rolled out in stages and its detail has been revised more than once since it began.
Two honest conclusions follow. The first is that "Curacao licensed" is not a single, stable thing — an operator authorised under the older chain and one authorised directly under the newer regime are not in the same position, and the badge alone does not tell you which you are looking at. The second is that you should verify the specific licence against the authority's own current register at the moment you need to know, rather than relying on a footer image or on any article, including this one, that was written at a fixed point in a moving process.
Kahnawake: an older regime with its own complaints route
The Kahnawake Gaming Commission has regulated online gambling from the Mohawk Territory of Kahnawake, in Quebec, since 1996, which makes it one of the oldest bodies in the sector. Its authority derives from the regulations of the Mohawk Council of Kahnawake rather than from a national statute or an EU framework, and it authorises operators to run gaming operations under those regulations.
For a player, the useful feature is that the Commission publishes a complaints procedure and accepts filings from players about operators it has authorised. As with Malta, the sequence is operator first, regulator second, and the value is the existence of an independent reader rather than any promised result.
What the three have in common, and where they diverge
All three require an operator to have a published complaints procedure, all three expect you to exhaust it before escalating, and none of them will help you with a dispute about whether a bet was a good idea. They diverge on three axes.
- Who authorised the operator. A public authority directly, or a private intermediary in a chain. This is the axis on which the Curacao reform is moving.
- Whether an independent adjudication step exists. The presence of a route above the operator is what converts "we reviewed your complaint and declined it" into something reviewable.
- What legal order the operator sits inside. An EU member state brings a body of consumer and data law with it. A non-EU regime does not, which is neither good nor bad in itself but changes what background rules apply when the licence conditions run out.
Putting a number on dispute resolution
It is worth doing this arithmetic once, because it converts a vague preference for "a proper licence" into a price you can actually compare against.
Suppose you are choosing between two sites. Site A runs its games at 96.0% return to player and holds a licence with an independent escalation route. Site B runs the same titles at 96.5% and holds one without. Over a year you put 10,000 euro of turnover through whichever you pick. The house edge difference is 0.5 percentage points:
10,000 × 0.5% = 50 euro per year
Fifty euro is the entire measurable value of choosing the weaker licence. Now set it against exposure. If your balance at that site peaks around 2,000 euro during the year, you are accepting the weaker recourse on 2,000 euro in order to save 50 euro:
50 / 2,000 = 2.5% of the exposed balance, per year
Read the other way round: the escalation route is worth taking if you think the annual probability of a disputed balance that an independent reader would resolve in your favour is anything above 2.5%. Nobody publishes that probability, and you should be suspicious of anyone who claims to — but you do not need it precisely. You need to know that the threshold is low, and that half a point of return to player is a small thing to buy it with. The same arithmetic applies to any pair of sites; substitute your own turnover and peak balance and the shape of the answer does not change. The mechanics of the return-to-player figure itself are covered in our guide to RTP and volatility.
How to verify a licence in ninety seconds
A logo in a footer is an image file. It proves nothing. The check is short:
- Find the licence number in the site's footer or terms, together with the exact name of the licensed company. It is usually not the same as the brand name.
- Open the licensor's own register — reachable from our licensing and new operators page — and search for that company name or number. Do not follow a link from the operator's site to do this; navigate to the regulator independently.
- Check that the entry is current, that the listed brand or domain matches the site you are actually on, and that the licence covers the products you intend to play.
- Read the operator's complaints clause and note the deadline it gives itself, and the escalation address. Save that page. It is the document you will want if a withdrawal stalls, and the process is set out in our guide to verification and withdrawal friction.
If the company name on the register does not match the company named in the terms you accepted, stop there. That mismatch is the single most informative thing you can find in this process, and it takes a minute to look for.
Where the licence shows up in everything else
The licence is not an isolated fact. It determines which payment rails an operator can offer you, which is covered in our comparison of deposit and withdrawal methods. It is one of the reasons the same brand runs different promotional terms in different places, explained in why bonus terms differ between markets. And it sets the verification standard you will be held to before your first payout. You can see which licence each operator in our casino comparison holds on its individual page.
Whatever you conclude, set your own deposit and loss limits before you play rather than after a bad session, and use the tools on our responsible gambling page if the activity stops being entertainment.
FAQ
Is an EU licence always better than a non-EU one?
Not automatically, but it brings a body of background consumer and data law that a non-EU regime does not. The more useful test is narrower: does an independent escalation route exist above the operator, and can you confirm the authorisation on the licensor's own register?
The site shows a licence logo. Is that enough?
No. A logo is an image. Take the licence number and the licensed company name from the terms, then look both up on the regulator's register by navigating there yourself. A mismatch between the company on the register and the company in the terms is the finding that matters.
Has the Curacao licence changed?
Yes. It has been moving from a master-licence and sub-licence structure towards direct licensing and supervision by a dedicated authority, in stages, with the detail revised more than once. Because it is a moving target, check the current register entry for the specific operator rather than relying on general descriptions.
What do I do first if a withdrawal is refused?
Use the operator's own complaints procedure and note the deadline it sets itself, keeping every reference number. Only escalate to the licensor once that deadline has passed unresolved, because every regime expects the operator stage to be exhausted first.
Editorial note
This content was prepared by the Grand Bonuses editorial team with a focus on factual information and responsible gaming. Read more about our editorial process and our guidelines for responsible gaming.
