Crypto Casino Licences: MGA vs UKGC vs Curaçao

Playing with Bitcoin or Ethereum at an online casino is straightforward. Understanding which licence sits behind the cashier window is harder. Three regulators dominate the crypto gambling space, and each one writes a different rulebook for your deposits, withdrawals and disputes.

Why the licence decides how you get paid

What does a licence actually guarantee?

A gambling licence is a permit issued by a national authority that obliges the operator to hold player funds separately, publish audited payout percentages and submit to dispute resolution. It is less a badge of quality and more a set of enforceable obligations, with fines attached for non-compliance.

Think of it like a driving licence. Passing the test does not make you a good driver, but it does mean you agreed to the highway code, insurance rules and blood-alcohol limits. An unlicensed casino is the equivalent of a car with no plates: fast, perhaps, but you have no recourse after a crash.

For crypto casinos the stakes are sharper. Coins move irreversibly, so a dispute resolved in your favour three weeks later may not recover funds already sent. Licence rules on segregation, KYC thresholds and withdrawal timeframes therefore matter more than any welcome bonus percentage.

Which regulators cover crypto casinos in 2026?

Three licences dominate the crypto casino market: the Malta Gaming Authority (MGA), the UK Gambling Commission (UKGC) and the Curaçao Gaming Authority (CGA). A fourth tier of Anjouan and Kahnawake permits exists, but volume of brands and player protection frameworks concentrate in the big three.

Roughly speaking, MGA covers around 500 active operators, UKGC around 250, and Curaçao historically licensed over 1,000 sites before its 2023 reform cut that number sharply. The reformed Curaçao regime now requires local substance, audited RNG and a single national portal for player complaints.

Offshore brands from the supplied operator list illustrate the split. Betsson, bwin, NetBet and Unibet operate under MGA or national European licences, while Lucky Block, Mega Dice, Vave and Betpanda.io run on Curaçao permits. PokerStars and William Hill-style brands hold UKGC approval where the UK market is served.

How does the traffic-rule analogy apply to casino limits?

Deposit caps, wagering requirements and max bet rules behave like road signs. The MGA imposes a hard €5 maximum bet on slots for certain licence classes, the way a 50 km/h sign limits speed in a school zone. Curaçao brands often advertise 100x bet features because no equivalent sign exists on their road.

Speed cameras are the analogy for KYC. UKGC operators must verify age and identity before any deposit is processed, like a breathalyser check at the roadside. Curaçao operators historically checked identity only at withdrawal, closer to a speed camera that catches you after the fact rather than before.

Roundabouts are the analogy for dispute resolution. Under MGA, an independent ADR body sits between you and the operator. Under UKGC, the same structure exists with statutory teeth. Under old Curaçao rules, the regulator itself adjudicated, a bit like the driver who also happens to be the traffic judge.

Comparing the three licences point by point

What changes under MGA rules?

The Malta Gaming Authority requires operators to segregate player balances from operating funds, maintain a minimum share capital of €100,000 for remote gaming, and submit to annual compliance audits. Crypto deposits are permitted but must route through a licensed payment service provider, adding one layer of oversight.

Practical consequence: withdrawals under MGA brands such as Betsson or a Malta-licensed Lucky8 are typically processed within 24 to 72 hours, with a documented complaints procedure if the clock runs out. Complaints escalate to the ADR provider named on the operator's footer, usually within 8 weeks.

Bet limits under MGA licence classes follow the 2018 directive on responsible gaming: maximum stake of €5 per spin on slots for new accounts, adjustable downward but not upward for the first 72 hours. It is a speed limiter fitted to the car, not a suggestion painted on the road.

What does the UK Gambling Commission demand?

UKGC licence holders face the strictest rulebook of the three. Since April 2020, operators must verify identity and affordability checks before allowing play. Since 2024, crypto deposits to UK-facing accounts have been effectively frozen under updated guidance, pushing UK players toward fiat rails only.

Real-money online slots in the UK are capped at £2 per spin for adults, with a £1.50 limit proposed for younger players aged 18–24. Cross-check against the MGA's €5 cap and the Curaçao market where no equivalent ceiling exists, and the practical difference for bankroll management is enormous.

Brands holding a UKGC licence include PokerStars (for its UK-facing poker and casino products) and several sportsbooks. If a crypto casino advertises to UK residents while accepting Bitcoin, verify the licence carefully: UKGC-licensed operators do not process crypto deposits under current guidance.

How did the 2023 Curaçao reform change things?

The Curaçao Gaming Authority replaced the old sub-licence system with a direct licensing regime in September 2023. Operators now need a local entity, audited random number generation, and a compliance officer resident on the island. Transitional licences expired in mid-2024, trimming the operator count significantly.

Under the new rules, player fund segregation is required, though enforcement remains lighter than in Malta. Brands like Lucky Block, Mega Dice, Instant Casino and Vave operate under this regime, offering direct crypto wallets and, in several cases, no KYC below certain withdrawal thresholds.

The practical trade-off is speed versus safety net. Curaçao casinos often process crypto withdrawals within 12 to 48 hours with minimal documentation, but if a dispute arises, your escalation path runs through the operator's internal team first, then the Curaçao regulator, which handles complaints at a slower cadence than the MGA's ADR network.

How to read a crypto casino's licence page

Where is the licence number actually displayed?

Legitimate operators print the licence number and regulator logo in the footer of every page, linking to the public register. MGA numbers follow the format MGA/B2C/123/2019, UKGC numbers appear as 000-012345-R-123456-001, and Curaçao numbers under the new regime start with OJ/2024 or similar.

Cross-check the number on the regulator's own website. The MGA register at maltigaming.com lets you search by brand name, and the UKGC public register does the same. If the number does not resolve, treat the badge as decoration rather than protection.

Brands from the operator list worth verifying include Betsson, bwin, NetBet, Unibet and PokerStars on the European side, plus Lucky Block, Vave, Instant Casino and Betpanda.io on the Curaçao side. Each should display a live, clickable licence reference.

What do licence classes mean for your account?

MGA issues several licence classes: Type 1 covers games of chance against the house, Type 2 covers fixed-odds betting, Type 3 covers poker tournaments, Type 4 covers managing platform software. A crypto casino typically holds Type 1, sometimes Type 4 if it runs its own game aggregation.

UKGC classes are simpler: remote casino, remote betting intermediary, remote gaming software. The class determines which rules apply, including whether crypto rails are permitted (they are not, for remote casino, under current guidance).

Curaçao's reformed regime introduced a single B2C licence covering casino, sportsbook and lottery verticals. Fewer classes, faster issuance, roughly 8 to 12 weeks of processing time, compared to 4 to 6 months for a full MGA remote gaming licence.

Which brands sit under which licence?

A practical map: Betsson, bwin, NetBet, Unibet and Partouche Online typically operate under MGA or national European licences. PokerStars runs UKGC and MGA coverage depending on the market. Bwin and ZEbet lean on French ANJ-regulated sports betting alongside casino products where permitted.

Curaçao-licensed brands from the list include Lucky Block, Mega Dice, Vave, Instant Casino, Betpanda.io, Shuffle, Rollbit, Roobet, Gamdom and Cloudbet. Several of these advertise instant withdrawals and no-KYC play under thresholds, features the MGA and UKGC frameworks do not permit.

Anjouan-licensed operators such as some smaller entrants from the list sit outside the big three. Treat them as a fourth tier: lower compliance cost, faster onboarding, thinner dispute resolution, and typically no independent audit of payout percentages published on-site.

Player protection: what each licence actually delivers

How fast must withdrawals be paid?

MGA-licensed operators must process withdrawals within 72 hours under most licence conditions, with KYC completed before funds are released. In practice, top brands like Betsson and Unibet clear crypto withdrawals in under 24 hours once verification passes, a figure consistent with published payout reports.

UKGC rules require operators to return funds "as soon as reasonably practicable", interpreted by most licensees as 72 hours maximum. Since UKGC brands do not process crypto, the comparison is fiat-only: bank transfers take 1 to 5 business days, debit cards 1 to 3.

Curaçao operators set their own timelines. Market norm is 12 to 48 hours for crypto, sometimes instant for verified accounts. The trade-off: if your withdrawal is delayed, escalation to the Curaçao regulator takes weeks, whereas an MGA ADR complaint typically gets a first response within 8 weeks.

What happens to your balance if the casino shuts down?

Segregated accounts are the answer under MGA and UKGC rules. Player funds sit in ring-fenced accounts, separate from operating capital, so a business failure does not swallow your balance. The UKGC goes further with a rating scheme (A, B, C) indicating how protected funds are in insolvency.

Under the reformed Curaçao regime, segregation is required but verification is less frequent. Under the old sub-licence system, segregation was often nominal. If you keep a large balance on a Curaçao-licensed crypto casino, treat the wallet like a hot wallet: move what you do not plan to play this week.

This is not alarmism. It is standard bankroll hygiene, the same way you would not leave a month's salary in a payment app that is not a licensed bank. Five-minute transfers between casino and self-custody cost pennies in network fees.

Which responsible gambling tools are mandatory?

UKGC mandates deposit limits, loss limits, session time reminders, cool-off periods and self-exclusion via GAMSTOP. MGA requires similar tools plus a mandatory reality check every 60 minutes and the ability to set a maximum bet cap. Both regimes require operators to intervene when patterns suggest harm.

Curaçao's new rules require self-exclusion options and links to support organisations, but active monitoring of play patterns is lighter. Some offshore brands offer deposit limits in the account settings; others make the tools opt-in and buried two menus deep.

For players who want a hard stop, national self-exclusion registers are the backstop. In France, ANJ operates the self-exclusion register accessible via the regulator's site, and the UK uses GAMSTOP covering all UKGC operators. Neither register covers offshore crypto casinos, which is precisely why licence choice matters before the first deposit.

Practical comparison of top crypto-friendly brands

Which operators combine crypto with a strong licence?

Several brands pair direct crypto rails with a recognised licence. Betsson and bwin accept crypto in certain markets under MGA or national licences, though availability varies by jurisdiction. PokerStars processes crypto in some regions while retaining UKGC and MGA coverage for its core markets.

On the Curaçao side, Lucky Block, Mega Dice, Vave, Instant Casino, Betpanda.io, Shuffle and Cloudbet all accept multiple coins including BTC, ETH, USDT and LTC, with no fiat rails required. Licence strength is thinner, but withdrawal speed and anonymity are higher.

A hybrid worth noting: some operators hold MGA for European players and Curaçao for international traffic, running two separate sites under one brand. Check which licence applies to your account at registration, not just which logo appears on the homepage.

What do payout percentages tell you?

Published RTP (return to player) figures for slots from Pragmatic Play, NetEnt, Hacksaw and Evolution typically fall between 94% and 97%. These are game-level numbers, audited under MGA and UKGC rules by approved labs such as eCOGRA or iTech Labs. Curaçao operators increasingly publish audits but historically did not.

Operator-level payout reports, aggregating millions of spins, are published quarterly by some MGA brands. Betsson, for example, reports monthly RTP across its casino vertical. Treat these as useful context, not a guarantee: variance over 10,000 spins can swing your personal RTP far from the published figure.

Crypto casinos often show live provably fair verification, letting you check each roll's seed hash. That is a different kind of transparency from a regulator's audit. Both have value; neither substitutes for the other.

How do welcome offers differ by licence?

UKGC rules restrict bonus advertising and require wagering requirements to be displayed prominently. MGA allows standard offers but requires clear T&Cs. Curaçao operators frequently advertise 200% or 300% match bonuses with 30x to 40x wagering, figures that would struggle under UK scrutiny.

Typical numbers: a 100% match up to 1 BTC with 35x wagering is common on Curaçao brands like Lucky Block or Mega Dice. An MGA brand might offer €500 plus 200 free spins at 30x. UKGC brands, where bonuses exist, tend toward cashback or free spins with lower multiples.

Read the wagering contribution table before depositing. Slots usually count 100%, live casino games 10% to 20%, and table games sometimes 0%. A 35x wagering on a €100 bonus means €3,500 of slot play before withdrawal, a distance most players underestimate.

Choosing a crypto casino: a checklist

Which licence should you prioritise?

If dispute resolution speed matters most, prioritise MGA. If you want the strictest stake limits and affordability checks, UKGC (though crypto is off the table). If you want direct wallet play with minimal KYC, Curaçao's reformed regime is the realistic option, with the trade-off in enforcement weight.

Match the licence to your play style. Small-stakes recreational players are well served by MGA brands. High-volume players who value fast crypto rails may prefer Curaçao. UK players have effectively one path: fiat-only, UKGC-licensed operators.

Whatever you choose, verify the licence number on the regulator's register before depositing. Two minutes of checking beats two weeks of dispute correspondence after a withdrawal goes missing.

What red flags should you watch for?

Warning signs include a licence logo that does not link anywhere, a number that fails on the regulator's register, no published terms page, no responsible gambling section, and bonus terms that change between the homepage and the cashier. Any one of these warrants a pause.

Also check withdrawal limits in the terms, not just the marketing pages. A casino advertising "unlimited withdrawals" with a €5,000 monthly cap buried in clause 14.3 is not lying, exactly. It is just hoping you will not read that far.

Finally, look at how long the brand has operated under its current licence. New Curaçao licensees under the 2023 reform have track records measured in months, not years. Established MGA brands like Betsson or Unibet have decades of regulatory history to reference.

How do you verify a licence in under two minutes?

Step one: scroll to the footer and find the licence number. Step two: open the regulator's register in a new tab. Step three: search the number or brand name. Step four: confirm the status reads active, not expired or under review. Four steps, roughly 120 seconds.

MGA register: maltigaming.com. UKGC register: gamblingcommission.gov.uk. Curaçao: the new authority's public portal, which lists all licensees issued under the 2023 regime. If the brand does not appear, the badge on the site is decorative.

Do this check for every new account, including brands recommended by friends. Licence status changes: operators lose licences, let them lapse, or switch jurisdictions after a business sale. What was valid last year may not be valid today.

Frequently asked questions

Are crypto casinos legal?

Legality depends on your country of residence, not the casino's licence. Crypto casinos holding MGA or Curaçao licences are legal entities, but access may be restricted for residents of certain jurisdictions including France, the US and the UK. Check local law before registering.

Do I need to verify my identity at a crypto casino?

Most Curaçao-licensed crypto casinos require KYC only above withdrawal thresholds, often around 1 BTC or €10,000 equivalent. MGA and UKGC operators verify before play. Expect to provide ID, proof of address and sometimes source-of-funds documentation if withdrawals are large.

Which licence is best for crypto players?

Curaçao offers the smoothest crypto experience with direct wallets and light KYC. MGA provides stronger dispute resolution but routes crypto through licensed payment providers. UKGC effectively prohibits crypto deposits, so UK players cannot combine the two.

How long do crypto withdrawals take?

Curaçao operators typically clear withdrawals in 12 to 48 hours once approved. MGA brands take 24 to 72 hours including verification. Network confirmation adds 10 to 60 minutes depending on the coin and blockchain congestion at the time.

Can a casino refuse to pay a crypto winnings?

Yes, if terms are breached: bonus abuse, multi-accounting, VPN use from a restricted country, or failed KYC. Under MGA and UKGC licences you can escalate to an independent ADR body. Under Curaçao, escalation runs through the regulator's complaint portal with longer processing times.

What is the minimum age for crypto gambling?

18 in most jurisdictions, 21 in some US states and a few European markets. MGA and UKGC operators enforce age verification before play. Curaçao operators check at withdrawal, though reputable brands verify earlier. Underage gambling voids winnings and triggers account closure.

Are winnings from crypto casinos taxable?

Tax treatment varies by country. France taxes gambling winnings from licensed operators differently from offshore gains; many jurisdictions require self-reporting regardless of currency. Crypto adds a layer: converting to fiat may trigger capital gains reporting on the coin itself, separate from the gambling win.

The licence you play under shapes your protection, your limits and your recourse. Check it before you deposit, keep your balance ring-fenced, and treat every account like a car on a road you have not driven before: read the signs, respect the limits, and know where the exit is.