Skip to content
2,151 standards indexed across 19 jurisdictions View the Atlas
3 hubs live · 3 more in the pipeline See all compliance topics
Daily news + multi-week series Browse all insights
3 tools live · 4 interactive tools in development Roadmap
MGA · UKGC · Strategy 15 min read Aug 21, 2026

Dual Licensing vs. Single Jurisdiction: The Real Cost-Benefit Analysis for Scaling Operators

Holding both an MGA and UKGC licence costs far more than two fee schedules combined. This analysis maps the overlapping obligations, hidden costs, and break-even thresholds scaling operators must model before committing.

Matt Denney

By

Founder, gamingcompliance.io · 15 yrs in iGaming compliance

Published Aug 21, 2026 15 min read Filed Licensing Requirements

Operators planning international scale frequently frame the licensing decision as: which jurisdiction first, and when to add a second? That framing misses the structural question. The real decision is whether the marginal revenue accessible through a second licence justifies not just its direct fees, but the compounding compliance overhead of running two parallel regulatory frameworks simultaneously. For the combination that most scaling operators face, MGA plus UKGC, the gap between the fee schedule and the true annual burden is material enough to change the commercial conclusion entirely.

What Does “Dual Licensing” Actually Mean in Practice?

A licensee holding both a Malta Gaming Authority B2C gaming service licence and a UK Gambling Commission remote operating licence does not operate one compliance programme with two reporting lines. It operates two distinct regulatory programmes, each with its own supervisory authority, its own key function requirements, its own AML framework, its own player protection obligations, and its own audit and reporting cadences. The regimes overlap on subject matter but diverge sharply on methodology, thresholds, and enforcement posture.

Under the MGA’s Gaming Authorisations and Compliance Directive (Directive 3 of 2018), licensees must appoint designated Key Functions including a Compliance Officer, a Money Laundering Reporting Officer, and a Risk Management Function. These individuals are subject to MGA fitness and properness assessments and must be formally approved by the Authority. Under the UKGC’s Licence Conditions and Codes of Practice (version effective 6 April 2026), the equivalent obligations fall under licence condition 1.2.1 (qualified persons) and require the licensee to ensure that key roles are held by individuals the Commission would consider suitable. The UKGC does not operate an equivalent pre-approval gateway for all designated roles, but it does require notification of key personnel changes and exercises discretion to require removal of unsuitable individuals.

In practice, whether a single Compliance Officer or MLRO can satisfy both sets of obligations simultaneously is a question that turns on that individual’s time, jurisdictional expertise, and the operator’s risk profile. Industry consensus is that at any meaningful volume, the roles become functionally full-time under each framework independently. Operators that attempt to bridge both frameworks with a single compliance officer typically discover this limitation at their first MGA compliance audit or UKGC licence review, not at the planning stage.

Key Distinction: The MGA supervises AML through a split model, the Authority handles gaming-specific supervision while the Financial Intelligence Analysis Unit (FIAU) retains responsibility for AML/CFT compliance under the Prevention of Money Laundering Act (Cap. 373). The UKGC acts as a single AML supervisor for remote gambling licensees, meaning the compliance contact point, the reporting framework, and the risk-based approach requirements differ between the two regimes even where the underlying FATF standards are identical.

The Fee Layers: What the Published Schedules Show

The MGA’s fee structure, set out in the Gaming Licence Fees Regulations (S.L. 583.03) and the Authority’s Licence Fees and Taxation guidance, operates in three layers. A one-time, non-refundable application fee of €5,000 is payable before the licence is issued. An annual licence fee of €25,000 applies to B2C Type 2 Gaming Services (which covers casino-style games), with the annual fee payable upfront and non-refundable in the event of surrender or cancellation. The third layer, and the one most operators underestimate at the planning stage, is the compliance contribution.

The compliance contribution is calculated on gaming revenue generated during the licence period from qualifying activities. For B2C Type 2 services, the contribution runs at 4.00% on the first €3,000,000 of gaming revenue, tapering to 3.00% on the next €4,500,000, 2.00% on the next €5,000,000, 1.00% on the next €7,500,000, 0.80% on the next €10,000,000, 0.60% on the next €10,000,000, and 0.40% on the remainder, subject to a minimum of €25,000 and a maximum of €600,000 per licence period. For B2C Type 1 services (sports betting), the minimum is €15,000 and the maximum is €375,000. The contribution is due monthly, payable before the twentieth of the following month.

Source: Malta Gaming Authority, Gaming Licence Fees Regulations (S.L. 583.03); MGA Guidance Note on Licence Fees and Taxation, February 2023 v2.

For the UKGC, the dominant financial variable as of 1 April 2026 is Remote Gaming Duty, administered by HMRC under the Finance Act 2014. The rate increased from 21% to 40% of gross gaming yield for accounting periods beginning on or after 1 April 2026 under the Autumn Budget 2025 package. This applies to any remote gaming operator serving UK-resident players, regardless of where the operator is licensed. An MGA-only licensee targeting UK players without a UKGC licence is subject to RGD at 40% but is simultaneously operating illegally in the UK market, so the duty obligation is not a substitute for the licence. For the dual-licensed operator, RGD at 40% of UK GGY is the single largest cost variable, dwarfing both MGA compliance contributions and UKGC annual licence fees across most revenue bands.

The UKGC statutory levy, effective from April 2025 under the relevant provisions of the Gambling Act 2005 as amended, adds a further 1.1% of GGY for most remote casino licensees. Annual licence fees are banded by GGY under the Gambling (Licence Fees and Annual Fees) Regulations 2022 and, following DCMS confirmation of a 25% increase, reach six figures for larger remote operators.

Side-by-Side: The Key Financial Variables

Cost Component MGA B2C Licence UKGC Remote Operating Licence KSA Netherlands (for comparison)
Application fee €5,000 (one-time) ~£37,000, £47,000 (one-time, by GGY band) €48,000 (non-refundable)
Annual licence fee €25,000 (Type 2 B2C) Variable by GGY band, six figures for large operators Included in application/supervision fee structure
Compliance contribution / levy Tiered 0.40%, 4.00% of GGR, capped at €600,000 (Type 2) 1.1% statutory levy on GGY 1.95% gambling levy on GGR
Gaming / remote duty 5% gaming tax on Malta-resident player revenue only 40% RGD on UK GGY from 1 April 2026 37.8% remote gambling tax on GGR from 1 January 2026
Security deposit Share capital requirement per regulations Not applicable (player fund protection via segregation/insurance) €50,000 security deposit

The comparison with the KSA in the Netherlands is instructive. A remote gambling tax of 37.8% of GGR from 1 January 2026, combined with the 1.95% gambling levy, places the Netherlands in a structurally similar tax position to the UK. According to a joint monitoring report by the Dutch Ministry of Finance and the Kansspelautoriteit, the 2025 tax increase generated approximately €2 million in additional revenue against a forecast of €108 million, with the KSA attributing the shortfall to a shrinking legal market base. Channelisation in the Netherlands dropped from 51% at end-2024 to 49% in H1-2025, with the illegal market overtaking the licensed sector by GGR. This trajectory is relevant to operators deciding whether a KSA licence is worth adding to an existing MGA or MGA-plus-UKGC portfolio: high tax rates plus restrictive player protection measures have demonstrably reduced the commercial attractiveness of the Dutch licensed market.

Where Does Dual Licensing (MGA + UKGC) Actually Break Even?

The break-even question for MGA plus UKGC dual licensing cannot be answered at the level of direct fees. The structural answer depends on three factors: the proportion of the operator’s GGY generated from UK-resident players, the operator’s ability to separate compliance functions efficiently, and the operator’s risk tolerance for enforcement exposure in either jurisdiction.

An operator generating 60% or more of total GGY from UK players will find the UKGC licence financially and operationally mandatory regardless of its MGA status. The 40% RGD is charged on UK player revenue irrespective of the operator’s licence location. Holding only an MGA licence while serving UK players does not reduce RGD liability, it adds criminal and regulatory exposure under the Gambling Act 2005 on top of the duty. The MGA licence’s commercial value for this operator lies in its EU recognition, the ability to serve non-UK European markets using a single licence, and the reputational and counterparty benefits that an MGA authorisation provides to payment processor and software partner relationships.

The calculus shifts materially for an operator whose UK revenue represents 20% or less of total GGY. At this level, the incremental UKGC compliance overhead, including the staffing required to maintain LCCP compliance across social responsibility code 3.4.3 (customer interaction requirements), the financial risk assessment programme currently being finalised by the Commission for high-spend players, and the annual assurance statement under licence condition 12.1.1, may not be justified by the UK revenue contribution. The operator may be better positioned holding a single MGA licence and geo-blocking UK IP addresses, accepting the loss of that market in exchange for a simpler regulatory architecture.

The compliance overhead of dual MGA-plus-UKGC licensing compounds across AML supervision, player protection frameworks, key function appointments, and audit cycles in ways that a direct comparison of fee schedules will never reveal.

The Overlapping Obligation Problem: AML and Player Protection

AML is the area where the compliance architecture diverges most sharply between Malta and the UK, creating the most significant operational duplication for dual-licensed operators.

Under the MGA framework, the FIAU’s Implementing Procedures for the Remote Gaming Sector set the CDD threshold at €150, a lower trigger than most operators applying standard FATF-derived thresholds in other jurisdictions. This means MGA-licensed operators must conduct customer due diligence on transactions at a threshold that is more prescriptive than many operators’ default AML systems are calibrated to capture. The FIAU exercises independent supervisory authority over AML compliance for MGA licensees, the MGA itself handles gaming-specific compliance separately. Dual-licensed operators must therefore maintain a relationship with two AML supervisory bodies (FIAU in Malta and the UKGC in the UK) that apply different inspection methodologies, different risk-based approaches, and different interpretations of what constitutes adequate transaction monitoring.

Player protection generates a parallel duplication. The MGA’s Player Protection Directive (Directive 2 of 2018, most recently amended in V3 of January 2023) requires licensees to maintain mandatory player-specified limits, implement self-exclusion on operator request with defined reopening constraints, and provide responsible gambling tools that meet the Directive’s prescriptive specifications. The UKGC’s LCCP imposes its own customer interaction obligations under social responsibility code provision 3.4.3, which requires licensees to identify customers displaying indicators of harm and take action in a documented, proportionate manner. The UKGC is currently finalising the financial risk assessment framework, which will require frictionless light-touch data checks for players losing over £125 in 30 days or £500 annually, with enhanced checks triggered at £1,000 in 24 hours or £2,000 over 90 days.

These two player protection frameworks are not harmonised. An operator running a single technical platform must implement responsible gambling controls that satisfy the MGA’s Directive 2 specifications and the UKGC’s LCCP requirements, which differ in their triggering conditions, their documentation expectations, and their treatment of customer interaction records. Where a single platform serves both MGA-jurisdictional and UK players, the system architecture must be capable of applying jurisdiction-specific rule sets at the player account level. This is not a legal abstraction, it is a platform configuration and QA cost that operators frequently discover only at the certification or licence review stage.

When Single-Jurisdiction Licensing Is the Correct Strategic Choice

Single-jurisdiction licensing is the correct choice when the operator’s target market concentration, growth trajectory, and compliance team capacity align with one regulatory framework. It is also the correct choice when the operator’s revenue profile does not justify the incremental overhead of a second regime.

For operators targeting European markets outside the UK, a single MGA B2C gaming service licence remains the most efficient access vehicle. The MGA licence provides EU-level regulatory recognition, supports the operator’s ability to be supplied by MGA-licensed B2B critical supply licensees (whose numbers have grown from 68 in 2018 to 171 in 2025 according to the MGA’s 2025 Annual Report), and avoids the 40% RGD liability entirely by excluding UK players. The compliance contribution cap at €375,000 for Type 1 services and €600,000 for Type 2 services means that even at scale, the MGA’s direct cost burden is structurally lower than the UKGC’s combined levy and duty obligations for UK-facing operations.

For operators targeting the UK market as their primary or dominant geography, a single UKGC remote operating licence supported by robust LCCP compliance is the appropriate baseline. Adding an MGA licence makes commercial sense only when the operator has a credible pathway to non-UK European player revenue, or when its software and payment processor relationships benefit materially from MGA recognition. For more on how the cost architecture of UKGC and MGA licensing compares at different GGY bands, see our detailed cost comparison published earlier this year.

Ontario represents a structural variant of the dual-licensing problem. AGCO registration under the Registrar’s Standards for Internet Gaming carries a $100,000 annual fee per gaming site, and operators must enter a commercial agreement with iGaming Ontario under the conduct-and-manage model, with iGO retaining a 20% net gaming revenue share. An operator already holding an MGA or UKGC licence and entering Ontario acquires a third parallel compliance framework: FINTRAC-supervised AML under Canadian legislation, BetGuard self-exclusion integration, and AGCO-specific player protection standards. The AGCO’s Registrar’s Standards explicitly require that operators contracted with third parties hold those parties to the same standards as the operator itself, making supply chain compliance a further compounding overhead.

Ontario Entry Point: Operators registered with the AGCO in Ontario have a structurally similar pathway into Alberta following the AGLC’s market opening on 13 July 2026. Alberta’s Standards and Requirements for Internet Gaming (SRIG) closely mirror the AGCO framework, and operators already running AGCO-compliant systems are better positioned to absorb the incremental Alberta registration requirements, a $50,000 application fee and a $150,000 annual registration fee, than operators entering from a purely MGA or UKGC compliance baseline. See our AGCO vs AGLC comparison for the specific standard-by-standard distinctions.

Concentration Risk: The Case for Accepting the Dual-Licensing Premium

Single-jurisdiction concentration is a commercial and regulatory risk in its own right, and this is the argument that most persuasively justifies the dual-licensing overhead for operators at genuine scale.

An operator whose entire licensed revenue depends on a single jurisdiction faces a cliff edge in the event of licence suspension, cancellation, or material LCCP or MGA enforcement action. The MGA’s enforcement register demonstrates that licence cancellation for non-payment of compliance contributions is a routine outcome, licences have been cancelled for outstanding compliance contribution balances under €75,000. UKGC enforcement actions against remote operators routinely involve settlements in the range of £10 million to £20 million for failures in customer interaction and AML controls, with Evolution’s £4.75 million settlement in July 2026 illustrating that supply chain participants are equally exposed. An operator that relies on a single licence for 100% of its licensed revenue faces a total revenue stop in the event of suspension, compared to an operator with multiple licences that can continue serving other markets while remediation is underway.

The appropriate framing is therefore not “what does the second licence cost?” but “what is the insurance value of revenue diversification across two independent regulatory frameworks, and does that value exceed the compliance premium?” At annual GGY levels below approximately €15, 20 million, the premium is unlikely to be justified, the compliance overhead of dual licensing will consume a disproportionate share of the incremental revenue. Above that threshold, and particularly for operators with genuine multi-market player bases, the diversification argument becomes commercially sustainable.

The MGA’s B2B critical supply licensee count grew from 68 in 2018 to 171 in 2025, reflecting Malta’s consolidation as the primary regulatory home for gaming technology providers serving European markets, a structural factor that reduces the supply chain complexity for MGA-licensed operators relative to those in single-jurisdiction configurations that lack equivalent B2B recognition.

Structuring the Compliance Function for Dual-Jurisdiction Operations

Operators that proceed with dual licensing must make deliberate architectural choices about how compliance obligations are allocated, not assumed to overlap.

The MLRO and Compliance Officer roles required by the MGA under Directive 3 of 2018 should be assessed against the UKGC’s qualified persons requirement to determine whether a single individual can genuinely satisfy both, or whether the operational reality demands separate appointments. The FIAU’s Implementing Procedures for the Remote Gaming Sector and the UKGC’s LCCP AML requirements (licence condition 12.1.1) impose different reporting obligations: FIAU reports flow through the Maltese financial intelligence system, UKGC AML compliance is reviewed directly by the Commission and reported through its regulatory return framework. A MLRO managing both must maintain distinct audit trails, distinct risk assessments, and distinct relationships with two supervisors who do not coordinate their inspection calendars.

Technology platforms serving dual-licensed operations must segment player accounts by jurisdiction of applicable regulation. The customer interaction tools, self-exclusion mechanics, and limit-setting infrastructure required under MGA Directive 2 of 2018 and UKGC LCCP social responsibility code provisions are not identical. Players who are UK-resident must have UKGC-compliant controls applied, players served under the MGA licence must have Directive 2-compliant controls. The platform must enforce this segmentation reliably, and the operator must be able to demonstrate it to both regulators independently on request.

For operators considering their responsible gambling compliance obligations across multiple jurisdictions, the Responsible Gambling Compliance hub maps the divergent self-exclusion, deposit limit, and customer interaction requirements across the major regulated markets, a useful reference when assessing the technical specification scope of a multi-jurisdiction platform build.

The Decision Framework: Five Questions Before Committing to a Second Licence

Operators should work through five analytical questions before committing to a second jurisdiction.

The first is revenue concentration: what percentage of projected GGY for the next three years will come from the target second jurisdiction? If the answer is below 15%, the compliance premium almost certainly exceeds the risk-adjusted incremental revenue.

The second is compliance team capacity: does the operator have, or can it hire, personnel capable of running genuinely separate compliance functions for both regulators, including separate AML supervision relationships, separate key function appointments, and separate audit reporting? If the honest answer is “we will manage it from the same team,” the regulatory risk of that approach materialises at the first licence review, not at the planning stage.

The third is platform segmentation: can the operator’s technical platform apply jurisdiction-specific player protection controls reliably and demonstrably? For most operators using third-party platform providers, this is a commercial negotiation with the platform vendor, not a given.

The fourth is tax architecture: what is the combined effective tax rate across both jurisdictions after accounting for RGD, MGA gaming tax (for Malta-resident players), compliance contributions, and statutory levy? For the MGA-plus-UKGC combination in 2026, the UK player RGD at 40% is the dominant variable and should be modelled as a fixed cost against UK GGY regardless of licensing decisions.

The fifth is concentration risk value: what is the realistic enforcement exposure in the primary jurisdiction, and what is the revenue continuity value of maintaining a secondary licensed market during any enforcement period? This is the hardest question to quantify but the most important one for operators whose primary licence is their only revenue-generating authorisation.

Qualified legal and tax counsel with jurisdiction-specific expertise in both the MGA and UKGC regulatory frameworks should be engaged before finalising any dual-licensing strategy, particularly given the pace of change in UK gambling duty structures and the MGA’s evolving supervisory priorities for 2026. Start by reviewing our Dual-Licensing Decision Framework to assess your specific operational profile against the analytical questions outlined above.

Key Resources

MGA Gaming Licence Fees Regulations (S.L. 583.03), mga.org.mt/licensing/fees-and-taxation/

MGA Directive 2 of 2018, Player Protection Directive, mga.org.mt (PDF, current version V3, January 2023)

MGA Directive 3 of 2018, Gaming Authorisations and Compliance Directive, mga.org.mt (PDF, V2, October 2021)

UKGC Licence Conditions and Codes of Practice, gamblingcommission.gov.uk/licensees-and-businesses/lccp/online (version effective 6 April 2026)

HMRC Changes to Gambling Duties, Policy Paper (Autumn Budget 2025), gov.uk/government/publications/changes-to-gambling-duties/gambling-duty-changes

KSA Gambling Laws and Regulations Framework (KOA) 2026, kansspelautoriteit.nl

Matt Denney

Matt Denney

Editorial · gamingcompliance.io

Reads the primary source so you don't have to. Fifteen years inside iGaming compliance: operator, supplier, and crown-corporation lottery.

Related coverage · also tagged Licensing Requirements

Browse all →

Licensing Requirements

Alberta’s iGaming Revenue Waterfall: How the 3% Off-the-Top Deduction Produces a 22.4% All-In Rate

Aug 23 · 10 min read

Licensing Requirements

MGA B2C Licence Application: The 22 Documents Examiners Scrutinise Most

Jul 20 · 18 min read

Licensing Requirements

OECD Pillar Two and iGaming: How the 15% GloBE Floor Hits MNE Operators in Malta, Curaçao, and Gibraltar

Jul 20 · 16 min read

The Tuesday brief, every week.

One email. Every regulator change we surface, every standard we re-index, every enforcement decision we read. No marketing, no fluff.

Unsubscribe with one click. We'll never share your address.