RNs let Malta-based B2C and B2B companies work under licenses from other EU/EEA regulators, or jurisdictions with comparable anti-money laundering rules, without holding an MGA license. Malta’s 2023 National Risk Assessment rated the regime’s residual money laundering risk as medium-high, and the MGA opened a consultation on tighter controls in April.
In a Feedback Statement dated October 26, 2026, the regulator dropped its plan for a standardized legal opinion template and will now ask only for ultimate beneficial owner details instead of a full corporate structure chart. Deposit data will be collected in predefined bands rather than exact figures, payment methods will be grouped into categories, and B2B suppliers are exempt from many of the new obligations.
The Malta Gaming Authority said:
“The final framework will therefore adopt a more differentiated approach between B2B and B2C RN holders, place greater emphasis on risk-based engagement, and rely on targeted information gathering that supports clearly defined regulatory, policy and risk-assessment objectives.”
Some stakeholders questioned whether the MGA has the legal power to request certain information, and the regulator acknowledged that parts of the framework may need amending. It plans to start collecting data from B2C RN holders during 2026, covering the 2025 reporting period.
