Crypto Casino Licences: What MGA, UKGC and Curaçao Actually Mean for Players

A crypto casino accepts Bitcoin, Ethereum or stablecoins for deposits and withdrawals, usually settling in minutes rather than days. The licence behind it decides whether your balance is protected, whether games are independently audited, and what happens if the operator disappears with your funds.

Three jurisdictions dominate the market in 2026: the Malta Gaming Authority, the UK Gambling Commission and Curaçao eGaming. Each takes a different view of crypto, sets different player protection rules, and charges operators different sums to play by them.

This guide compares the three licences side by side, uses hypothetical cases to show how the rules hit real players, and maps which UK-facing brands sit under which regulator. Numbers come from published fee schedules, licence registers and operator terms.

Why the Licence Matters More Than the Bonus

What does a licence actually guarantee?

A licence is a contract between the operator, the regulator and you. It obliges the casino to hold player funds separately, publish audited RTP figures, verify your identity, and submit to dispute resolution. Without one, none of those obligations are enforceable.

Regulators also set maximum stake and bonus rules. The UKGC caps online slot stakes at £2 per spin for adults, with a £1.50 limit for 18–24 year olds since December 2024. Malta and Curaçao impose no comparable flat cap.

Third-party auditors such as eCOGRA, iTech Labs and GLI test random number generators against published standards. Operators running Pragmatic Play, NetEnt, Evolution or Hacksaw titles must pass these checks before a game goes live in a licensed market.

How much does it cost to hold a licence?

Malta charges an application fee of €5,000 plus an annual compliance contribution calculated on gross gaming revenue, with a minimum of €25,000 per year for B2C casinos. The UKGC's remote operating licence application costs £36,776 as of April 2025, with annual fees banded from £5,000 to over £500,000 depending on revenue.

Curaçao historically offered a single master licence costing around $40,000 with no per-brand fee. Under the new National Ordinance on Games of Chance, effective September 1 2025, operators now apply through Curaçao's Gaming Authority for one of two licence types, with fees published in the government gazette.

Those cost differences explain why hundreds of crypto casinos cluster under Curaçao. Cheaper entry means more brands on the market, but also a thinner supervision budget per operator.

Which licence protects crypto balances specifically?

None of the three ring-fences crypto holdings in a statutory trust the way the UKGC requires segregated accounts for fiat balances. Maltese operators must keep player funds in separate bank accounts, but crypto wallets held in cold storage fall into a grey area under current guidance.

Curaçao's new framework requires operators to disclose how digital assets are custodied, without mandating a specific custody model. In practice, a player holding 0.5 BTC on a Curaçao site has weaker recourse than a player holding £500 on a UKGC site if the operator fails.

Ask the operator directly: which wallet provider holds your funds, is there a proof-of-reserves attestation, and who audits it? A straight answer is a good sign. A vague one is a warning.

Malta Gaming Authority: The Mid-Tier Standard

What does an MGA crypto casino have to do?

An MGA-licensed casino must obtain a Critical Gaming Supply or Class 4 licence before accepting real-money play. That licence requires a physical presence in Malta, a compliance officer, a responsible gaming policy, and an approved AML procedure aligned with the EU's 5th Anti-Money Laundering Directive.

Player funds must be held in accounts separate from operating funds, with monthly reconciliation. The MGA publishes a public register where you can check any licence number in about 30 seconds, including whether it has been suspended.

Crypto deposits are permitted for operators holding the relevant approval, though fiat on-ramps still trigger full KYC. Expect to upload ID and proof of address before your first withdrawal clears.

Which UK-facing brands operate under Malta?

Several well-known names run their casino products on Maltese licences while holding separate UKGC permissions for British players. Betway casino, Videoslots, Casumo casino and LeoVegas casino all maintain MGA licences alongside other jurisdictions.

PlayOJO casino, MrQ casino and Duelz casino also hold Maltese registrations. For a UK player this matters less than it looks: the UK-facing arm of these brands is regulated by the UKGC, and the Maltese licence covers their international operations.

Check which entity is contracting with you. The footer of any reputable site names the licence holder, the licence number and the regulator. If you cannot find it within one scroll, keep scrolling until you do or leave.

How fast are MGA withdrawals on crypto?

Published operator terms from MGA brands typically state internal processing times of 0 to 24 hours for e-wallets and crypto, with bank transfers taking 1 to 5 business days. The MGA itself does not set a statutory maximum, but requires operators to honour stated timelines.

Complaints go to the MGA's Player Support Unit first. Median resolution reported by the MGA for 2024 was around 15 working days, though complex disputes involving crypto valuation can run longer.

Practical tip: withdraw to the same wallet you deposited from where possible. Operators route transactions back to source as an AML control, and skipping that step adds verification days.

UK Gambling Commission: The Strictest Regime

Can a crypto casino legally serve UK players?

Only if it holds a UKGC remote operating licence. The Commission has not banned crypto as a payment method, but since April 2020 it prohibits credit card gambling entirely, and since December 2024 it requires operators to verify financial affordability indicators for customers showing signs of harm.

In practice, no major crypto-only casino currently holds a UKGC licence. British players accessing offshore crypto sites do so outside the Commission's remit, which means no access to GAMSTOP, no UK complaint escalation and no statutory fund segregation.

For a UK resident, the safe reading is simple: a crypto casino serving you without a UKGC licence is operating outside the UK regulatory perimeter.

Which brands hold a UKGC licence?

The list is long and includes most household names. Bet365 casino, William Hill casino, Sky Bet casino, Ladbrokes casino, Paddy Power casino, Coral casino, Betfred casino and Sky Vegas casino all hold current UKGC remote operating licences.

Also licensed for UK play: Betfair casino, Virgin Games casino, Gala Bingo, JackpotJoy casino, 888 Casino, betvictor casino, PartyCasino, Grosvenor Casinos, Unibet casino, MrQ casino, Double Bubble Bingo, Heart Bingo, Rainbow Riches Casino, Midnite casino, LiveScore Bet, talkSPORT BET, Pub Casino, Tote casino, Gala Casino, NetBet casino, Genting Casino, bwin casino, 10bet casino, Slingo casino, QuinnBet casino, All British Casino, 777 Casino, SpinGenie casino, Dream Vegas, Bet UK casino, The Pools casino, Mr.Play casino, Prime Casino and Pink Casino.

You can verify any of them on the UKGC public register by licence number, which appears in the site footer. The register also shows conditions attached to the licence, including any enforcement history.

What protections does a UKGC licence add?

Four stand out. First, segregated player funds held in designated accounts or trusts. Second, access to GAMSTOP, the national self-exclusion scheme covering every UKGC operator with a single registration. Third, statutory dispute escalation to IBAS or to the Commission itself.

Fourth, stake limits on online slots: £2 per spin for players 25 and over, £1.50 for 18–24 year olds, applied since December 2024. These caps do not exist in Malta or Curaçao.

UKGC operators also must display net position and session duration in real time. It is a small feature that changes behaviour more than any responsible gambling slogan ever managed.

Curaçao: Volume, Speed and Fewer Guardrails

Why do so many crypto casinos choose Curaçao?

Cost and speed. Historically a master licence holder could sub-license unlimited brands for a single fee, producing the crowded market you see today. Under the National Ordinance on Games of Chance, in force since September 1 2025, the Curaçao Gaming Authority issues licences directly, with published application timelines of roughly 6 to 10 weeks.

There is no per-market stake cap, no mandatory session timers, and no equivalent of GAMSTOP. Operators still run KYC, but the depth and timing vary widely between brands.

That flexibility is exactly why crypto-native operators land here. Fast onboarding, no fiat banking dependency, and a regulator that speaks the language of digital assets.

Which brands operate under Curaçao?

A long tail of crypto-focused operators sit under Curaçao licences, including Mystake casino, Goldenbet casino, Donbet casino, Fat Pirate, NineWin casino, NYSpins casino, Rolletto casino, Velobet casino, Mega Riches, Rainbet, Casino Kings, Voodoo Dreams, Kinghills casino, Magic Red casino, Dream Jackpot casino, Roobet casino, Gamdom casino, Lottomart casino, 666 Casino, PricedUp casino, DragonBet casino, 7bet casino and Ivy Casino.

Several of these accept crypto only, others run hybrid fiat-crypto rails. Withdrawal speeds are typically faster than UKGC peers, often under 30 minutes for BTC and USDT once KYC clears.

Before depositing, check the licence status on the Curaçao Gaming Authority register. The 2025 transition means some brands still display old master licence numbers that are being phased out.

What happens if a Curaçao casino fails?

There is no statutory compensation scheme. If an operator becomes insolvent, your balance competes with other creditors, and crypto holdings are treated as the operator's asset unless a separate custodial agreement says otherwise.

Dispute resolution runs through the operator's internal process and, in theory, the regulator. In practice, resolution times are longer and outcomes less predictable than under MGA or UKGC supervision.

Hypothetical case: a player deposits 1 ETH on a Curaçao site, wins 4 ETH, and requests withdrawal. If the operator delays beyond its stated 24-hour window, escalation options are limited to the regulator's complaint form and public review platforms. Under the UKGC route, the same delay would trigger IBAS arbitration within days.

Side-by-Side Comparison

How do the three licences stack up on paper?

The table below compares the metrics players ask about most: stake limits, fund segregation, dispute routes, typical withdrawal times and application cost to the operator. Figures reflect published rules as of early 2026.

Which licence suits which type of player?

If you are in the UK and want maximum protection, the answer is a UKGC-licensed brand. Bet365 casino, Sky Vegas casino and Ladbrokes casino give you GAMSTOP coverage, IBAS arbitration and stake caps, but you will not deposit Bitcoin directly.

If you are outside the UK and want crypto rails with reasonable oversight, an MGA brand such as Videoslots, Casumo casino or LeoVegas casino sits in the middle. Expect KYC, expect some processing time, expect a real complaints process.

If speed and crypto-only play matter most, Curaçao brands like Mystake casino, Rolletto casino or Goldenbet casino deliver. You trade regulatory depth for settlement speed. That trade-off is legitimate, provided you go in with your eyes open and keep balances modest.

Hypothetical Cases: How the Rules Hit Real Players

What happens when a bonus dispute crosses jurisdictions?

Case one: a player deposits £100 at a UKGC casino, claims a 100% match offer, and wins £2,000. The operator tries to void the win for a bonus term breach. Under UKGC rules the disputed terms must have been presented clearly before opt-in, and IBAS will assess the case within about 10 working days.

Case two: the same scenario at a Curaçao brand. The operator's terms govern, the regulator's complaint form is the escalation route, and timelines stretch. Some Curaçao brands publish a 30-day internal review window before external escalation is even possible.

Case three: an MGA casino. The Player Support Unit accepts complaints once the operator's internal process is exhausted, with a median resolution around 15 working days. Bonuses are not the MGA's strongest area, but fund disputes are handled rigorously.

How are crypto price swings handled during a withdrawal?

This is the question almost nobody asks until it costs them. Suppose you request a withdrawal of 0.25 BTC when Bitcoin sits at $60,000, a $15,000 value. If the operator processes in 4 hours and the price moves 3% in that window, the sterling-equivalent value shifts by roughly $450.

UKGC and MGA operators typically lock the fiat conversion rate at the moment the withdrawal request is accepted, which removes that exposure. Curaçao brands processing in minutes have a much smaller window, which is one practical reason fast settlement matters.

Read the terms section on currency conversion. Some operators quote a fixed rate for 15 minutes; others convert at the moment of broadcast to the blockchain. The difference is real money.

What does KYC look like across the three regimes?

UKGC operators verify identity before any deposit is accepted, under strict source-of-funds rules introduced in the 2023 licence conditions. Expect a passport or driving licence check, an address confirmation, and sometimes a bank statement for larger withdrawals.

MGA casinos run KYC at registration or before first withdrawal, with AML thresholds aligned to EU rules. Document upload portals are standard, and verification usually completes within 24 hours during business days.

Curaçao operators vary most. Some verify at signup in under 10 minutes using automated providers; others defer KYC until a withdrawal threshold is hit, often around the equivalent of 1 BTC or $5,000. Faster onboarding sounds attractive until a large win triggers a sudden document request.

Reading a Licence Before You Deposit

Where do you verify a licence in under a minute?

Three registers cover the market. The UKGC publishes its licence holders at gamblingcommission.gov.uk with search by name or licence number. The MGA runs a public register at mga.org.mt showing status, licence class and any conditions.

Curaçao's Gaming Authority maintains a register of operators authorised under the 2025 ordinance. Older master licence numbers are being retired, so a site showing only a legacy number deserves a second look.

Cross-check the licence number in the site footer against the register entry. Mismatches in company name, address or status are a hard stop.

Which footer details should you look for?

A compliant footer names the operating company, its registered address, the regulator, the licence number, and links to responsible gambling resources. UKGC sites must also display the operator's licence status and a link to GAMSTOP.

Beyond the footer, check whether the site publishes RTP summaries for its game lobby. Operators running Pragmatic Play, NetEnt, Microgaming or Hacksaw titles under licence usually surface these figures in a game information panel.

Missing information is itself information. A crypto casino that hides its licence holder is telling you something about how it intends to handle your balance.

What should you do if a withdrawal is refused?

Start with the operator's internal complaints process and request a written explanation citing the specific term relied on. Keep timestamps, transaction hashes and screenshots. Crypto transactions are traceable on-chain, which strengthens your record.

If the brand holds a UKGC licence, escalate to IBAS after the operator's process concludes. For MGA brands, submit the case to the Player Support Unit. Curaçao operators route complaints through the regulator's online form, with slower turnaround.

Whatever the route, act quickly. Most licence frameworks require complaints to be raised within defined windows, commonly 6 months from the disputed event.

Payment Rails, Fees and Practical Limits

Which cryptocurrencies do licensed casinos actually accept?

BTC, ETH and USDT remain the standard trio across all three jurisdictions, with USDT (TRC-20) favoured for low network fees. Many operators add USDC, LTC, XRP and SOL. MGA and UKGC-facing brands rarely go beyond the majors.

Curaçao brands are more adventurous, sometimes listing 30 to 50 coins including niche tokens. Breadth is not automatically a virtue: obscure tokens carry higher volatility and thinner liquidity, which matters when you are cashing out a large win.

Stablecoins remain the pragmatic choice for value preservation during processing. Holding a withdrawal in USDT for 20 minutes removes price risk that BTC cannot.

What fees should you expect on deposits and withdrawals?

Operators generally do not charge deposit fees. Network fees apply regardless: sending BTC on-chain typically costs between $1 and $15 depending on congestion, while TRC-20 USDT transfers often cost under $1.

Withdrawal fees vary more. A survey of published terms across UKGC, MGA and Curaçao brands shows flat crypto withdrawal charges ranging from zero to the equivalent of $25, with the higher end concentrated among Curaçao operators.

Minimum withdrawals also differ. Expect 0.001 BTC or its stablecoin equivalent as a common floor, with some MGA brands setting higher minimums around 0.005 BTC.

How do exchange rates affect your balance?

If your account is denominated in GBP or EUR but you deposit in crypto, the operator converts at its own rate, usually a small spread over the mid-market rate. That spread typically lands between 0.5% and 2%.

On a £1,000 deposit, a 1% spread costs you £10 before any game is played. Across a year of regular deposits, that compounds into a meaningful drag on your bankroll.

Some crypto-native brands hold balances in crypto throughout, converting only when you request fiat withdrawal. That structure avoids the double conversion and is worth checking in the terms before you sign up.

Game Libraries Under Each Licence

Which providers appear where?

UKGC and MGA casinos carry the same tier-one studios: Pragmatic Play, NetEnt, Microgaming, Evolution, Play'n GO, Hacksaw Gaming, Red Tiger and Big Time Gaming. Licensing agreements with these studios require the operator to hold a recognised licence, which filters the market naturally.

Curaçao brands carry those providers too, plus a longer tail of smaller studios that do not pursue UK or Maltese approval. That can mean earlier access to new releases, sometimes weeks before they appear on UKGC sites.

Live casino is dominated by Evolution across all three regimes, with Pragmatic Play Live and Playtech as secondary suppliers. Table limits and side-bet availability vary by operator rather than by licence.

Do stake limits differ by jurisdiction in practice?

Yes, and the difference is largest on slots. UKGC sites cap spins at £2, which effectively caps maximum win potential on high-volatility titles at a fraction of what MGA or Curaçao sites allow.

Malta and Curaçao operators often permit £10, £50 or even £100 per spin on selected games, with VIP tiers raising limits further. For a player chasing a 5,000x max win, the difference between a £2 and £50 stake is the difference between a £10,000 and £250,000 ceiling.

Table games show a similar pattern. UKGC live blackjack tables commonly max out at £2,000 per hand; equivalent MGA tables run to £5,000 or more.

Are provably fair games available under licence?

Provably fair mechanics, where the player can verify each round's outcome using a server seed hash, are a crypto-casino staple. They are not required by any of the three regulators, and rarely appear on UKGC or MGA sites.

Curaçao brands are more likely to offer them, particularly those built on in-house crash and dice titles. Verification tools are usually exposed in the game interface with a public seed and a client seed you can change.

Provably fair does not mean low house edge. Check the published RTP anyway; the mechanism proves the round was not tampered with, not that the odds favour you.

Responsible Gambling Tools Compared

What self-exclusion options exist outside the UK?

GAMSTOP covers UKGC operators only. Players in Malta have no nationwide equivalent; individual operators offer self-exclusion periods of 6 months, 1 year or 5 years, but coverage stops at the brand level.

Curaçao operators provide similar brand-level tools, with session limits, deposit caps and cooling-off periods of 24 hours to 7 days. Consistency across brands depends entirely on the operator's own policy.

For crypto players who move between sites, third-party tools and wallet-level spending limits become the practical substitute for a national register.

How effective are deposit limits across regimes?

UKGC rules require deposit limits to be set before the first deposit, with mandatory affordability checks for customers showing risk indicators. Limits can be lowered immediately but raising them triggers a 24-hour cooling-off period.

MGA operators offer deposit limits as a responsible gaming feature, but the requirement to set them up front is less strict. Curaçao brands vary; some prompt at registration, others bury the option in account settings.

Whichever regime applies, set the limit when you open the account. Deciding your budget after a winning streak is a decision made by a different person than the one who set it.

Which reality checks are mandatory?

UKGC licensees must display session duration and net position continuously, and send pop-up notifications at intervals the player can configure, with a default of 60 minutes. Reality checks cannot be disabled entirely.

MGA licence conditions require reality checks at intervals set by the operator, commonly every 60 minutes, showing net position and time played. Curaçao operators are not bound by a specific interval.

The practical difference shows up in long sessions. A 3-hour crypto session on a Curaçao site may produce no prompt at all; the same session under UKGC rules produces at least three.

Choosing a Crypto Casino: A Practical Checklist

What should you verify before the first deposit?

Work through six checks. Licence status on the official register, licence number matching the footer, published RTP for your chosen games, withdrawal terms including fees and minimums, custody arrangements for crypto balances, and the operator's complaints route.

Skip any one of those and you are gambling on more than the game. The house edge is already against you; an unverified licence adds a second, avoidable risk.

Time cost: about 10 minutes total. That is cheap insurance against a bad outcome.

How large should your balance be relative to the licence?

Match your exposure to the protection. On a UKGC site, holding a few thousand pounds is reasonable because segregation and dispute routes exist. On an MGA site, keep balances moderate and withdraw profits regularly.

On a Curaçao site, treat the balance as money you can afford to lose in full. There is no compensation scheme, no statutory segregation, and dispute resolution is slower. Withdraw to your own wallet after each session rather than leaving a running balance.

This is not a verdict on any brand's honesty. It is a structural assessment of what happens if things go wrong.

Which licence fits a UK resident in 2026?

UK residents should default to UKGC-licensed operators for real-money play: Bet365 casino, William Hill casino, Sky Bet casino, Ladbrokes casino, Paddy Power casino, Coral casino, Betfred casino, Sky Vegas casino, Betfair casino and Virgin Games casino all qualify.

Accessing a Curaçao or MGA crypto casino from the UK places you outside the Commission's protections. That is a personal choice with real consequences: no GAMSTOP, no IBAS, no statutory fund segregation.

For readers elsewhere, an MGA licence offers the middle path, a Curaçao licence the speed, and a local national licence wherever one exists. Match the licence to your risk tolerance, not to the size of the welcome offer.

Frequently Asked Questions

Is a crypto casino legal in the UK?

Crypto casinos without a UKGC remote operating licence cannot legally offer services to British players. Holding or using crypto for gambling abroad is not itself criminal, but the operator falls outside UK consumer protections, so disputes have no domestic route and self-exclusion tools do not apply.

Which licence is best for crypto players?

It depends on your priorities. The UKGC offers the strongest consumer protection but does not license crypto-only casinos. The MGA balances reasonable oversight with crypto acceptance. Curaçao gives the fastest onboarding and widest coin support at the cost of thinner regulatory cover and no compensation scheme.

Do crypto casinos pay tax on winnings in the UK?

UK gambling winnings are not subject to income tax or capital gains tax for recreational players, whether the stake was fiat or crypto. If gambling becomes a professional activity, treated as a trade, different rules apply and professional advice is warranted.

How long do crypto withdrawals take?

Under a UKGC licence, crypto-only brands are absent, so the question does not arise. MGA operators typically process within 0 to 24 hours. Curaçao brands often settle in under 30 minutes once KYC is complete, though network congestion can add 10 to 60 minutes on Bitcoin.

Can I play at a Curaçao casino from the UK?

You can technically access such a site, but it is not authorised for UK customers. That means no GAMSTOP coverage, no IBAS arbitration and no Commission oversight. Complaints would go through the operator and the Curaçao regulator, with slower resolution and no statutory fund protection.

What is proof of reserves and does it matter?

Proof of reserves is an attestation, usually published monthly, showing that an operator's on-chain holdings cover customer balances. It is not required by the UKGC, MGA or Curaçao. A current, independently verified attestation is a positive signal, but it is a snapshot, not a guarantee of solvency.

Which cryptocurrencies are safest to deposit?

Bitcoin, Ether and USDT on the TRC-20 network are the most widely accepted with the deepest liquidity. USDC is a solid alternative. Avoid depositing obscure tokens with thin order books, because cashing out a large win can move the price against you during processing.

How do I check if a crypto casino is licensed?

Find the licence number in the site footer, then search the official register: the UKGC public register, the MGA register, or the Curaçao Gaming Authority register. Confirm the operator name, status and address match. A missing or mismatched entry is a reason to walk away.

Licence choice shapes everything downstream: how fast you get paid, how much you can stake, who settles a dispute and what happens if the operator fails. Compare the three regimes with clear eyes, verify the register before depositing, and size your balance to the protection actually on offer rather than to the bonus headline.