The Malta Gaming Authority (MGA) has published the findings of its thematic review on governance assurance and key functions across B2B and B2C authorised persons. Identified as a core supervisory priority for 2025, the risk-based evaluation assessed how key personnel, specifically Chief Executive Officers, Compliance Officers, Internal Auditors, and Anti-Money Laundering/Counter-Financing of Terrorism (AML/CFT) officers, execute their statutory responsibilities in practice.
The evaluation drew on insights from direct supervisory reviews and engagement meetings to establish a comprehensive picture of operational oversight, corporate accountability, and internal controls across the Maltese iGaming ecosystem.
Sector Benchmarks and Strengths Identified
The MGA’s assessment revealed that a significant portion of licensed operators have built mature, risk-based governance frameworks. These successful structures are underpinned by active senior leadership and empowered key function holders who collaborate effectively across internal assurance departments.
Key practices observed among top-performing operators included:
- Embedded Day-to-Day Oversight: Governance and compliance checks integrated directly into operational workflows rather than treated as secondary administrative tasks.
- Structured Escalation Procedures: Formalised pathways ensuring compliance risks and audit findings are promptly escalated to the board level.
- Proactive Market Entry Planning: Consideration of regulatory, legal, and operational implications prior to entering new geographic jurisdictions or making material business modifications.
- Independent Assurance: Establishing autonomous internal audit mechanisms and governance committees to scrutinise operational effectiveness.
Maintaining robust internal governance structures remains a cornerstone requirement for companies securing and holding a Malta gaming licence, as the regulator continues to raise the bar for corporate governance across its jurisdiction.
Operational Weaknesses and Regulatory Pitfalls
Despite widespread progress, the thematic review highlighted recurring vulnerabilities across several B2B and B2C entities. The regulator identified three main operational weaknesses that require immediate industry attention:
- Over-Reliance on Key Individuals: Concentrating critical decision-making authority within a limited group of senior executives without sufficient operational redundancies or oversight.
- Lack of Recorded Strategic Challenge: Insufficient documented evidence demonstrating that boards or executive committees actively challenge strategic proposals or conduct thorough risk impact assessments.
- Inadequate Audit Trails: Deficiencies in record-keeping that prevent regulators from tracing how key decisions, compliance reviews, and risk mitigations were determined.
Addressing these weaknesses aligns with the regulator’s broader supervisory toolkit. The findings build upon previous sector evaluations, including the MGA’s thematic review on self-exclusion practices conducted earlier in the year to strengthen player protection mechanisms.
Integration with Evolving Regulatory Expectations
The governance review forms part of the MGA’s outcomes-focused supervisory approach, which combines targeted thematic audits, routine compliance assessments, and supervisory engagements. The regulator noted that licensees should use these findings to self-assess their corporate structures and implement corrective measures where necessary.
Regulatory expectations in Malta are evolving rapidly alongside technology and anti-money laundering frameworks. This governance review mirrors other recent regulatory developments, such as the MGA’s consultation on the AI gaming charter and AML standards, which established updated operational expectations for digital tools and financial monitoring.
Furthermore, the emphasis on governance accountability comes as Malta’s commercial landscape continues to expand, a trend highlighted in the MGA 2025 annual report on B2B licence growth and AI screening.
As B2B operations grow in scale and complexity, the MGA’s latest findings reinforce that technical expansion must be matched by robust leadership oversight and transparent governance controls.