There is a moment in most offshore operators' growth where the question shifts from "how do I get licensed cheaply" to "how do I get licensed properly." The Anjouan or Curaçao licence got you to market. Revenue is flowing. Players are active. And now the limitations are becoming visible.

Payment processors you cannot access. Markets that require EU recognition. B2B partners who will not work with a Tier 3 licence. That is when operators start researching the MGA licence upgrade.

This article is for operators at exactly that stage. It covers what the MGA actually requires, what you can carry over from your existing operation, what you will need to build from scratch, and how long the whole process realistically takes.

Why Operators Upgrade: The Three Triggers

Most operators I speak to have one of three immediate problems that have become impossible to ignore.

Payment processor access is the most common. Mainstream European PSPs require an MGA licence, a UKGC licence, or equivalent Tier 1 authorisation before they will onboard a gambling merchant. If your offshore licence is blocking you from Stripe, Adyen, Checkout.com, or any of the major card acquirers, the MGA is the most direct route to solving that.

B2B partnerships are the second trigger. Game providers and platform partners have tightened their operator onboarding standards considerably over the last few years. Providers who previously worked with Curaçao or Anjouan operators without question now require MGA or UKGC-licensed clients for their premium content catalogues. If you are hitting walls on game content, this is why.

Market access is the third. Several EU member states have simplified registration or bilateral recognition processes for MGA-licensed operators. An Anjouan IBC or Curaçao BV is not recognised in these processes. If EU player acquisition is part of your growth plan, the MGA removes friction that cannot be removed any other way.

There is also a less transactional reason: an MGA licence is a Tier 1 regulatory signal. Investors, acquirers, and institutional partners read it as evidence that the operation has passed a serious regulatory assessment. For operators thinking about a future raise or exit, that credibility has real commercial value.

What MGA Requires That Your Offshore Licence Did Not

The MGA application is substantially more demanding than either Anjouan or Curaçao. Here is what is genuinely different.

Share capital. The MGA requires a minimum of EUR 100,000 paid-up capital for a B2C Type 1 (casino) or Type 2 (sports betting) licence. Paid-up, not authorised. If you are coming from an Anjouan licence, which has no minimum capital requirement, this is a material step. The capital must be demonstrably deposited in the company's accounts, and source of funds documentation is required for all UBOs.

A Malta company. The MGA licence is issued to a Malta-registered entity. Your Anjouan IBC or Curaçao BV cannot hold the licence. You will need to incorporate a new company in Malta, which involves its own timeline, costs, and compliance requirements separate from the licence application itself.

A System Audit. Before go-live, your live platform must be audited by an MGA-approved Authorised Service Provider (ASP). This is conducted against the MGA-F-016 checklist. This is not a paper review of your documentation. The ASP audits your actual live environment against what you submitted. Any gaps between documentation and reality will result in findings that must be resolved before the go-live certificate is issued.

The System Documentation Checklist v5 (MGA-F-001). This is the MGA's definitive document requirement list. It runs to over 100 line items covering AML, KYC, responsible gaming, player protection, financial management, and technical systems. Every single item must be addressed in your application. For operators used to Anjouan or Curaçao submissions, the volume and specificity of documentation required is a genuine adjustment.

Ongoing compliance costs. The MGA licence runs for ten years (not annual renewal like Anjouan, and not indefinite like Curaçao). Annual compliance contributions are calculated on GGR, with a minimum of EUR 15,000 for Type 1. This is a regulated, non-negotiable cost of holding the licence.

Four parallel review streams. The MGA assesses fit and proper, funding, business plan and policies, and technical documentation concurrently. The fit and proper stream, which includes background checks across multiple jurisdictions for all UBOs and key persons, is typically the longest-running thread. Having clean, complete documentation ready for all four streams from day one shortens the overall timeline considerably.

What Carries Over From Your Offshore Operation

If you have been running on Anjouan or Curaçao with genuine compliance infrastructure rather than a shelf-bought policy pack, meaningful parts of your existing work carry forward.

AML/CFT policy. The framework and structure of your existing AML policy can be reused, but the content needs rewriting to MGA standards. The MGA requires 17 specific KYC/CDD content points within the policy per Section 5.1 of the System Documentation Checklist v5. The policy you submitted to ALSI or the Curaçao Gaming Authority will not meet this standard without significant rework. It is not a fresh start, but it is not a light edit either.

KYC procedures. Same principle. The underlying procedural logic carries over, but thresholds and timelines are different. The MGA uses a EUR 2,000 cumulative deposit trigger for enhanced due diligence, a 30-day window for completing CDD, and specific PEP rescreening requirements at threshold. These need to be built explicitly into your procedures rather than left implied.

Responsible gaming policy. This one requires the most significant upgrade. The MGA's January 2024 Player Protection Directive amendment introduced five mandatory Markers of Harm that must be documented within RG procedures. Neither Anjouan nor Curaçao requires these. Your existing RG policy will need a full rewrite to reflect MGA's current standards, not just an update.

Technical infrastructure. If your platform, SoftSwiss for example, already serves MGA-licensed operators, the technical documentation framework exists within that platform. What does not exist is that documentation in your name, for your specific configuration, covering your particular hosting arrangements. This still needs to be produced. It is faster than building from zero, but it is not automatic.

Operating history. This is genuinely valuable and underestimated by most operators going through the upgrade. The MGA reviewers are looking for evidence that you are a real, functioning operation with proper governance, not an untested applicant. Revenue history, player complaint resolution records, and AML compliance logs from your offshore period all support the business plan assessment. Document them properly before you apply.

What You Need to Build From Scratch

Some elements cannot be adapted from your offshore operation. They need to be created new.

The Malta company incorporation is first. This is a new entity, new registered office, new company secretary arrangements, and new bank account. Allow 4 to 8 weeks for incorporation depending on your corporate structure.

The Player Funds Account requires specific arrangements. The account must be held with an EU or EEA licensed credit or financial institution, and the bank must confirm in writing that it is aware the account holds player funds and that it will disclose account information to the MGA on request. Getting this written confirmation from a bank, in the required form, takes time. Some banks are familiar with the process. Many are not.

Source of Wealth declarations for all UBOs must be completed on MGA-F-011 and MGA-F-012. These are substantially more detailed than the source of funds declarations used in Anjouan and Curaçao applications. Supporting documentation requirements are significant and need to be assembled, not just drafted.

The business plan must be prepared specifically for the Malta operation, with three-year financial projections, player acquisition assumptions, market analysis, and compliance cost modelling. This cannot be repurposed from an existing offshore submission. The MGA reviews it closely.

Realistic Timeline for the MGA Licence Upgrade

Operators consistently underestimate how long the MGA process takes. Here is my honest assessment based on working through this process with multiple clients.

Pre-application preparation covers Malta company incorporation, share capital deposit, policy documentation, technical documentation, and UBO declarations. For a well-organised operator with existing compliance infrastructure, this takes 3 to 6 months. Operators starting from a weaker compliance position should plan for the longer end.

Application submission to licence grant takes 4 to 6 months for a clean, well-prepared application. If the MGA raises queries, each query round adds time. Missing documentation or incomplete fit and proper submissions are the most common reasons for delays.

Total from decision to go-live: 9 to 18 months realistically. That is the range I give to every operator who asks me directly. A clean applicant with strong existing compliance infrastructure, organised UBO documentation, and a platform already operating in MGA-licensed environments can get to the lower end. An operator starting fresh on documentation, with complex corporate structures or UBOs in higher-scrutiny jurisdictions, should plan for the upper end.

The Dual-Licence Strategy

Most operators do not surrender their offshore licence when they apply for the MGA. They run both concurrently.

The Anjouan or Curaçao licence continues to serve non-EU markets while the MGA application moves through the review process. Once the MGA licence is granted, EU-facing traffic migrates gradually to the MGA-licensed entity, while the offshore licence remains active for rest-of-world operations.

This is a standard industry pattern. Both the MGA and offshore regulators understand it. There is no conflict between holding both licences simultaneously, provided the operational separation between entities is documented clearly.

The practical implication: your offshore licence revenue does not stop during the upgrade process. The decision to pursue the MGA does not require shutting down or pausing your current operation. For most operators, the dual-licence period is where the cost of the upgrade gets absorbed.

Working With ICOS on the Upgrade

ICOS works with operators through the full MGA licence upgrade from offshore. That covers policy documentation to MGA standards, Malta company coordination, UBO declaration preparation, ASP audit readiness, and application management through the MGA's review process.

Fixed pricing for MGA applications is published on the ICOS website. There are no surprises mid-process.

If you are at the stage of evaluating whether the upgrade makes sense for your operation, the intake form takes three minutes. We will give you a straight assessment of where your current compliance infrastructure stands against MGA requirements and what the realistic timeline looks like for your specific situation.