SGA, UKGC and GGL give you the strongest player protection in the world – with dispute resolution, identity-verified self-exclusion and hard responsible-gambling rules written into law. MGA offers solid protection but no automatic link to Sweden's Spelpaus.se. Spillemyndigheden sits between SGA and MGA. Curaçao and MGAR (Manitoba) lack independent ADR in practice – only choose them if you understand what you are giving up. Full comparison table and decision logic below.
Source: Spelinspektionen International Comparison Report, MGA Annual Report 2023, UKGC Industry Statistics 2024, GGL Jahresbericht 2023, Spillemyndigheden Annual Report 2024.
Why the licence matters more than the bonus
A bonus is visible at first click – 100% up to €250 lights up at the top of every casino page in colour. The licence is in small grey text in the footer. But when something goes wrong, the licence decides whether you have a regulator who accepts your complaint, whether the operator is obliged to keep your deposits segregated from its own capital, and whether a dispute resolution outcome is actually enforced. We argue: choose the licence before the bonus – not the other way round.
Spelinspektionen's international comparison report goes through how five major European regulators differ across eleven key areas. The conclusion is that the differences are measurable and large: SGA and UKGC require operators to report suspicious transactions within 24 hours; MGA allows 72 hours. SGA and GGL have statutory deposit caps on online casino spend; UKGC and MGA do not. SGA, UKGC, GGL and Spillemyndigheden have national self-exclusion systems that bind every licensed operator in the jurisdiction; MGA, Curaçao and MGAR do not.
Player protection is not symbolic. UKGC revised its consumer rules in 2024 and now requires every licensee to offer a loss limit as a separate tool, that reality checks contain the player's actual net loss in pounds, and that any deposit limit increase carries at least 24 hours of cooling-off. SGA has had the same rule since 2019. GGL goes further with seven days plus fresh income verification. An MGA-licensed operator targeting Swedish players is bound by none of these rules – which is why the licence, not the bonus, is the single most important parameter when you pick a casino.
- Independent dispute resolution (ADR) you can escalate to if the operator refuses a withdrawal
- Segregated player funds – your balance is not treated as the operator's assets at bankruptcy
- Connection to a national self-exclusion register so one block covers every licensed operator at once
SGA (Sweden) – what it protects you against and where it limits you
Spelinspektionen (SGA – the Swedish Gambling Authority) is the Swedish state regulator under the Ministry of Finance, established in its current form in 2019 alongside the new Gambling Act. SGA issues seven licence types, but for international players the online casino licence and the betting licence are the ones that matter. As of December 2024 there were 64 licensed operators on the Swedish market according to Spelinspektionen's market report.
SGA protects you in four ways most other licences do not. First: deposit limits are mandatory at registration – you must choose a level before any funds are deposited. Second: Spelpaus.se is an identity-verified national self-exclusion register that simultaneously binds all 64 licensed operators. Third: bonus terms are restricted to one bonus per player per operator. Fourth: advertising must follow the "moderation principle" – no "guaranteed winnings" claims and no activity bonuses without clear terms.
Where it limits you: the deposit limit only applies per operator, not aggregated across all Swedish licensees. You could in theory set SEK 5,000 per month at ten different operators = SEK 50,000 total. Spelpaus.se only covers Swedish licensees – if you register at an MGA-only operator without a Swedish licence, Spelpaus does not apply there. And SGA's sanctioning powers are limited to the Swedish market – a Swedish player disputing with an MGA-licensed operator abroad falls outside SGA's mandate.
- Identity-verified linkage to Spelpaus.se – 30 seconds to activate, applies to all 64 operators
- Statutory 24-hour cooling-off on deposit-limit increases – reductions take effect immediately
- The National Board for Consumer Disputes (ARN) as an independent free ADR for consumers
MGA (Malta) – global flag and what that means for you
The Malta Gaming Authority (MGA) is Malta's gambling regulator, established in 2001 and today the most-used licence for operators wanting to address several European markets simultaneously. As of Q4 2024 the MGA had roughly 320 active licensees according to the MGA Annual Report 2023, more than all other EU licences combined. That makes the MGA a "global flag" – but that is also where the caveats start.
For you as a player MGA means the operator is scrutinised by an EU-based regulator, has demonstrated capital strength, and must follow MGA's Player Protection Directives with deposit, loss and self-exclusion tools available. But – and this is central – MGA does not require the tools to be mandatory at registration, and MGA's self-exclusion register is called BetBlocker and covers only operators that have voluntarily joined. That is fundamentally different from SGA's Spelpaus.se or UKGC's GAMSTOP.
MGA also permits operators to accept players from jurisdictions where a country-specific licence exists – that is why as a Swedish player you can register at an MGA-licensed casino without an SGA licence. It is not illegal, but it does mean you fall outside Swedish consumer protection. ARN will not take your complaint, Spelpaus.se does not apply, and Swedish tax on winnings is not automatically paid by the operator. MGA has its own ADR via eCOGRA and IBAS – they function, but the process averages 60–90 days.
- Good: The operator is financially capital-tested and regulated to EU standards
- Good: Broader game catalogues and higher RTP are more common than at national licences because the tax burden is lower
- Less good: No automatic link to Sweden's Spelpaus.se – you must self-exclude at every operator individually
- Less good: ARN and the Swedish tax agency have no mandate – disputes are handled in Malta under Maltese law
UKGC (United Kingdom) – the strictest in Europe
The UK Gambling Commission (UKGC) was established in 2007 under the Gambling Act 2005 and is broadly recognised as the world's strictest regulated gambling market. By March 2024 the UKGC had roughly 2,400 active licensees according to UKGC Industry Statistics 2024, of which about 200 are online casino operators. The market is worth around £15.1 billion per year – the largest single regulated market in Europe.
UKGC's strictest rules arrived in 2023–2024 alongside the White Paper reform. Operators must now run affordability checks – financial background reviews – on players who pass £2,000 net loss over 90 days. GAMSTOP is the national self-exclusion register, identity-verified and binding for every UKGC licensee. Reality checks must show actual net loss in pounds, not just session duration. Advertising with "guaranteed wins" is prohibited and VIP programmes must be reported quarterly.
For you as a player – even outside the UK – UKGC protection is the strongest in the world. IBAS (Independent Betting Adjudication Service) is mandatory independent ADR and you as a player can escalate there free of charge if the operator refuses to pay out. Operator player funds must be segregated on a separate bank account and protected at insolvency up to a minimum level. The operator tax is 21% on gross gaming yield (Remote Gaming Duty), which means RTP is often a touch lower than at MGA operators – but you pay that in exchange for the consumer protection.
- Statutory affordability checks at £2,000 net loss over 90 days – stops escalation early
- GAMSTOP linkage covering all 2,400 UK-licensed operators simultaneously
- IBAS as independent ADR with the power to compel operator payout
- Reality checks expressed as actual net loss in pounds – not just session duration
Spillemyndigheden (Denmark) – between SGA and MGA
Spillemyndigheden is Denmark's gambling authority under the Ministry of Taxation, established in 2010. As of 2024 Spillemyndigheden had around 25 active licensees for online casino and betting according to its 2024 annual report. The Danish market is smaller than the Swedish one but uses a model that sits between SGA and MGA in strictness.
Spillemyndigheden requires mandatory connection to ROFUS – the Danish national self-exclusion register, identity-verified via NemID and binding on all licensees. ROFUS has one interesting detail: exclusions are reversible only via an active application with a minimum one-month cooling-off, which is similar to Spelpaus.se but with a sharper default. Reality checks are mandatory every 60 minutes. Deposit limits are mandatory at registration, just as in Sweden.
Where Spillemyndigheden sits between SGA and MGA: bonus terms are freer than in Sweden (bonuses may carry more aggressive wagering requirements), but stricter than at MGA. Advertising is regulated but without the same "moderation principle" as SGA. ADR exists via Forbrugerklagenævnet (the Danish Consumer Complaints Board) and works – the process is slower than ARN in Sweden. The operator tax is 28% on gross gaming yield (versus 18% in Sweden), so RTP runs slightly lower. Operator verification happens on Spillemyndigheden's public licence list at spillemyndigheden.dk.
GGL (Germany) – the new market and what applies
The Gemeinsame Glücksspielbehörde der Länder (GGL) is Germany's central gambling authority, established in its current form in 2021 through the Glücksspielstaatsvertrag. GGL is the youngest of the major European regulators but has rapidly become one of the most restrictive. According to GGL Jahresbericht 2023 there were around 40 active licensees for virtual slot games (online slots) and online poker.
GGL's most distinctive rule is the anbieterübergreifendes Einzahlungslimit – a statutory cross-operator monthly deposit limit of €1,000. That means you cannot deposit more than €1,000 a month across every German licensed operator combined, not just per operator. This is unique in Europe. Raising the limit requires fresh income verification and a seven-day waiting period. The self-exclusion system is called OASIS and works like Spelpaus.se but is tied to the German personal identifier.
GGL also has the strictest advertising regulation in the EU – TV casino advertising is forbidden between 06:00 and 21:00, every ad must carry warning text occupying at least 10% of the area, and influencer marketing is forbidden. Reality checks show net loss in euros every 60 minutes. The tax is 5.3% on the stake for slots (around 30% gross-yield equivalent), which makes German RTP noticeably lower than MGA – averages run 92–93% against 96–97% at MGA operators.
If as a non-German player you are considering a GGL-licensed casino: the licence is valid in Germany and you can register, but the €1,000/month deposit cap applies to you too, RTP is lower, and OASIS self-exclusion is tied to German identity and does not connect automatically to your home self-exclusion register. The German licence is primarily for German players.
EMTA (Estonia), Curaçao eGaming and MGAR (Manitoba) – brief overview
Beyond the five major EU licences there are a number of smaller and peripheral licences that turn up in casino contexts. Three are worth knowing: Estonia's Maksu- ja Tolliamet, Curaçao eGaming, and the Manitoba Gaming Authority Regulation (MGAR). Protection levels vary dramatically.
Estonia's Maksu- ja Tolliamet (EMTA) is the Estonian Tax and Customs Board, which also issues gambling licences. The EMTA licence is valid within the EU and reasonably strict – capital requirement of €1 million, KYC in line with EU AML5, and a self-exclusion register via HAMP (Hasartmängu Sõltuvuse Maandamise Programm). Roughly 70 active licences as of 2024. Less well-known than MGA but in practice protection sits between MGA and Spillemyndigheden. ADR is available through TTJA (the Estonian Consumer Protection authority).
Curaçao eGaming has historically been the "lightweight licence" – around 12,000 active sub-licences existed, issued under master licences held by four master-licence holders. That changed during 2024 after the LOK reform (Landsverordening op de Kansspelen), in which the Curaçao Gaming Control Board now issues directly, capital requirements have been raised and KYC tightened. But in practice: no independent ADR, no national self-exclusion link, no affordability checks, and historically low sanction capability. Curaçao licences are most common at crypto casinos and almost always accept players from any country – but you fall completely outside national consumer protection.
The Manitoba Gaming Authority Regulation (MGAR) is a Canadian provincial licence. It became internationally visible in 2022 when Manitoba opened to iGaming operators serving Canada (mainly via PlayNow.com). Protection is decent in the Canadian market, with segregated funds and ADR via the Manitoba Gaming Control Commission. But: MGAR is not recognised within the EU, and operators displaying an MGAR logo while targeting European players do so without a national EU licence. That is a red flag – do not choose a casino where MGAR is the only licence if you live in Europe.
The big comparison table – eight licences × twelve parameters
Here is the comparison table – eight licences as rows, twelve parameters as columns. The table is central to this guide and should be referable directly. Note in particular the columns "Independent ADR", "National self-exclusion" and "Connection to Spelpaus.se" – they decide how well you are actually protected.
| Licence | Established | Operators | Capital req. | KYC strictness | Deposit cap | Independent ADR | National self-excl. | Reality check | RG tools | Cooling-off increase | Operator tax | Spelpaus.se link |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| SGA (Sweden) | 2019 | 64 | Liquidity + bank guarantee | Very high (BankID) | Voluntary level | ARN (free) | Spelpaus.se | 60 min | Mandatory | 24 hours | 18% gross | Direct – same system |
| MGA (Malta) | 2001 | ≈ 320 | €100,000 | High (EU AML5) | No statutory cap | eCOGRA / IBAS | BetBlocker (voluntary) | 60 min (voluntary) | Available, not mandatory | No requirement | 5% gross | Manual per operator |
| UKGC (UK) | 2007 | ≈ 2,400 | Affordability checks | Very high (KYC + AML) | £2,000 affordability check | IBAS (mandatory) | GAMSTOP | 60 min with £ figure | Mandatory | 24 hours | 21% gross | Manual – but GAMSTOP enough |
| Spillemyndigheden (DK) | 2010 | ≈ 25 | DKK 500,000 | High (NemID) | Voluntary level | Forbrugerklagenævnet | ROFUS | 60 min | Mandatory | 24 hours | 28% gross | Manual per operator |
| GGL (Germany) | 2021 | ≈ 40 | €5 million | Very high (BSI-certified) | €1,000/month statutory | GGL complaint | OASIS | 60 min with € figure | Mandatory | 7 days + fresh verification | 5.3% on stake | Not directly – German ID required |
| EMTA (Estonia) | 2009 | ≈ 70 | €1 million | High (EU AML5) | Voluntary level | TTJA | HAMP | 60 min (voluntary) | Mandatory | 24 hours | 5% gross | Manual per operator |
| Curaçao eGaming | 1996 (2024 reform) | ≈ 12,000 | Low (under reform) | Historically low | None | No independent ADR | None | Voluntary | Voluntary | No requirement | 2% gross | Not connected |
| MGAR (Manitoba) | 2022 | ≈ 5 | High (CAD 2 million) | High (Canadian AML) | Voluntary level | MGCC | PlayNow self-exclusion | 60 min | Mandatory | 24 hours | Variable provincial | Not connected |
The most important columns for any player are "National self-exclusion" and "Connection to Spelpaus.se". Only SGA offers direct linkage to the Swedish system. UKGC's GAMSTOP is equivalent for UK players but does not transfer to Sweden. Spillemyndigheden, MGA, EMTA, Curaçao and MGAR all require you to manually request exclusion at each operator – that means 10–20 separate requests if you play broadly.
Which licence to prefer based on where you live
Which licence to prefer depends on one thing: where you live and pay tax. If you are resident in Sweden, the answer is almost always SGA – it is the only licence where Swedish tax is prepaid, ARN takes your complaint, and Spelpaus.se covers your full safety net. But there are edge cases where other licences are acceptable or even better. Here is the decision logic we recommend.
Rule of thumb: live in Sweden → choose SGA. Live in Denmark → choose Spillemyndigheden. Live in the UK → choose UKGC. Live in Germany → choose GGL. Live outside a regulated market or play a specific product not offered nationally (e.g. crypto casino) → choose MGA if the operator has a transparent ownership structure, or UKGC dual where available. Never choose a Curaçao-only operator as your primary licence if another regulated market is available.
If none of the above: hobby player on small stakes with specific product needs (e.g. crypto casino) → MGA if the operator is transparent and has at least 5 years of clean licence history. Never Curaçao-only.
A side note: dual licensing (MGA + UKGC) is uncommon but a strong signal. Operators that choose to pay for both have passed two independent capital tests and two independent KYC audits. It is not worse than SGA, but for a Swedish resident SGA still gives the best practical protection through Spelpaus.se and ARN.
How to verify a licence – URL pattern per authority
Verifying that an operator actually holds the licence it shows in the footer is free and takes 60 seconds per licence. Every regulator publishes a public licence register where you can look up the operator name or licence number. Here are the URL patterns by authority and what to look for.
Step through this: scroll to the operator's footer, click the licence number or logo. It should open a page on the regulator's own domain (not on the operator's). Verify that the operator's legal name matches the entry on the licence list and that the status reads "Active" or "Operational". If the footer logo does not link directly to the regulator – that is a red flag.
| Regulator | Verification URL pattern | What to look for |
|---|---|---|
| SGA (Sweden) | spelinspektionen.se/licensregister | Operator name + licence status "Aktiv" + licence type (Online commercial gaming) |
| MGA (Malta) | authorisation.mga.org.mt | Licence number MGA/CRP/XXX/YYYY + status "Active" + permitted games |
| UKGC (UK) | gamblingcommission.gov.uk/public-register | Account number + Operating licence + status "Operational" |
| Spillemyndigheden (DK) | spillemyndigheden.dk/tilladelsesindehavere | Tilladelsesnummer + "Aktiv" + tilladelseskategori |
| GGL (Germany) | gluecksspiel-behoerde.de/whitelist | Whitelist entry + Erlaubnisnummer + Erlaubte Spielarten |
| EMTA (Estonia) | mtr.ttja.ee | Tegevusloa number + Kehtiv + Tegevusala |
| Curaçao eGaming | gaming.licensing.cw / cgcb.cw | Master licence holder + sub-licence + status (since 2024 reform) |
| MGAR (Manitoba) | manitobalc.com / lgcamb.ca | Operator name + Provincial gaming authority register |
If the operator's licence number cannot be found in the regulator's public register – cancel the registration. We have seen cases where operators display a licence logo but the actual licence number belongs to a different legal entity, which means the protection does not apply. It is uncommon but it happens at the Curaçao end of the market and at fraudulent MGA-clones. Verify, always.
Common questions about gambling licences
UKGC is technically the strictest globally – affordability checks, IBAS, GAMSTOP and 24-hour cooling-off are all statutory. For residents of Sweden, Denmark or Germany, the national licence (SGA, Spillemyndigheden, GGL) is safer in practice because tax is prepaid and the national self-exclusion register applies automatically.
No – playing at an MGA-licensed casino without a local licence is not illegal in most jurisdictions. But you fall outside national consumer protection: the national ADR will not take your complaint, the national self-exclusion register does not apply, and you may be personally responsible for declaring winnings.
UKGC has statutory affordability checks at £2,000 net loss, GAMSTOP as mandatory national self-exclusion, and IBAS as mandatory independent ADR. MGA has none of these – the tools are available but not mandatory. UKGC also requires 21% operator tax, MGA only 5%. UKGC operators often have slightly lower RTP but stronger protection.
Click the licence logo in the footer – it should open a page on the regulator's own domain (e.g. spelinspektionen.se or mga.org.mt), not on the operator's. Then look up the operator's legal name or licence number in the regulator's public licence list. The whole process takes 60 seconds. If the logo does not link – red flag.
It depends on the licence. At SGA operators: contact ARN free of charge. At UKGC: IBAS as independent ADR. At MGA: eCOGRA or IBAS via the MGA complaint process (60–90 days). At Curaçao: in practice no independent ADR – you are on your own. That is why the licence choice matters before a problem arises.
A licence is consumer protection, but not the player's only responsibility. Set a deposit limit at registration, combine it with a loss and time limit, and use the national self-exclusion register if you find yourself regularly breaching your own limits. National helplines are free and confidential.
International helplines: GamCare 0808 8020 133 · BeGambleAware.org · GamCare
- Spelinspektionen (2024). Internationell jämförelse av spelreglering – Marknadsstatistik och regulatorisk översikt. spelinspektionen.se
- Malta Gaming Authority (2024). MGA Annual Report 2023. mga.org.mt
- UK Gambling Commission (2024). Industry Statistics 2024 and Consumer Voice 2024. gamblingcommission.gov.uk
- Spillemyndigheden (2024). Årsrapport 2024 – Det danske spillemarked. spillemyndigheden.dk
- Gemeinsame Glücksspielbehörde der Länder (GGL) (2024). Jahresbericht 2023 – Glücksspielregulierung in Deutschland. gluecksspiel-behoerde.de
- Estonian Tax and Customs Board (EMTA) (2024). Hasartmängu turg 2024 – aastaülevaade. emta.ee
Reglerings- & ansvarsfullt spelande-expert
Pontus skriver om spellicenser, reglering och ansvarsfullt spelande. Tidigare arbete inom svenskt myndighets- och konsumentskydd.