Payments and withdrawals

Casino Withdrawals from MGA Licensees: The Player Protection Directive

What the Malta Gaming Authority’s Player Protection Directive says about withdrawals, permitted delays, restrictions, player funds and complaints, plus the FIAU due diligence threshold.

5 min readPart of payments and withdrawals

On this page
  1. What does the Player Protection Directive say about withdrawals?
  2. How are player funds protected?
  3. How do complaints and ADR work for MGA licensees?
  4. What should a player at an MGA-licensed site check before withdrawing?
  5. How should a complaint against an MGA licensee be escalated?
  6. How do MGA rules compare with other markets?
  7. Worked example: a delayed MGA withdrawal
  8. What mistakes do operators commonly make?
  9. Checklist
  10. Frequently asked questions
  11. Sources
  12. More guides

The MGA’s Player Protection Directive asks licensees to remit withdrawals within five working days where practicable, back to the source account where possible. Delays are allowed for identity checks, security, rule compliance, customer due diligence and fraud prevention. Withdrawal restrictions must be reasonable, a monthly withdrawal limit can never be below €250, and a player’s own deposited funds may not be restricted unless AML rules require it.

Key takeaways

  • Remit funds within five working days of a request where practicable (Article 29(1)) [1].
  • Pay back to the source account where possible; otherwise AML rules apply (Article 29(2)) [1].
  • Monthly withdrawal limits can never be below €250, and deposited funds may not be restricted except for AML (Article 30(1)(a)) [1].
  • Do not encourage players to cancel withdrawals; reversed withdrawals are a risk indicator to monitor [1].
  • Customer due diligence is required once deposits reach €2,000 under the FIAU’s Implementing Procedures [2].
5 working daysremittance expectation
€250minimum monthly withdrawal limit
€2,000CDD deposit threshold

What does the Player Protection Directive say about withdrawals?

[1]” tabindex=”0″>

MGA withdrawal rules [1]
Article Requirement
29(1) Remit within five working days of a request, where practicable
29(2) Pay back to the source account where possible
29(3), 30(2) Delays allowed for identity checks, security, rule compliance, customer due diligence and fraud or crime prevention
30(1)(a) Restrictions must be reasonable; monthly limit never below €250; deposited funds not restricted unless AML requires
30(1)(b)-(c) Funds subject to a pending withdrawal cannot be wagered; restricted amounts paid out automatically
17A(1)(c) Reversed withdrawals monitored as a risk indicator; do not encourage cancellation
13A Self-exclusion does not block withdrawal of remaining funds

How are player funds protected?

Player funds must be held at licensed credit, financial or payment institutions with MGA approval, must be withdrawable at any time, and are the players’ assets, not the licensee’s; creditors of the licensee have no claim on them (Articles 31 and 37). Account balances must cover all player liabilities, and any shortfall must be covered immediately (Articles 32 and 38) [1].

How do complaints and ADR work for MGA licensees?

  1. Operator complaintEvery licensee must have a written complaints procedure in its terms (Article 39(2)).
  2. ADRUnresolved disputes can be referred to a registered ADR entity after the operator’s process is exhausted (Article 39(3)).
  3. CourtsADR does not limit the right to go to court (Article 39(4)).

The MGA also requires licensees to report ADR decisions to it (Article 39(5)) [1].

What should a player at an MGA-licensed site check before withdrawing?

  1. Check verificationMGA licensees must verify players by the €2,000 deposit threshold or earlier; withdrawals often trigger checks [2].
  2. Check bonus termsUnmet wagering can block bonus winnings.
  3. Use your own accountPayouts go to accounts in the player’s name.
  4. Know the ADR routeMGA licensees must name their ADR provider in their terms.

How should a complaint against an MGA licensee be escalated?

  1. Complain to the operatorUse the operator’s complaints procedure.
  2. Use the ADR providerIf unresolved, take it to the ADR entity named by the operator.
  3. Contact the MGAThe MGA’s player support function can help with complaints against its licensees.

How do MGA rules compare with other markets?

Malta compared
Topic Malta Great Britain New Jersey Source
Timing Five working days where practicable Prompt; explain delays Prompt once review clears [1] [3] [4]
Cancellation Do not encourage; monitor reversals Reverse withdrawals banned Patron may cancel within 3 days; no solicitation [1] [4] [5]
Restrictions on deposits Not allowed except AML Customers can withdraw deposit balance No wagering on own funds [1] [3] [4]

Worked example: a delayed MGA withdrawal

  1. Player requests €3,500. Deposits total €2,300, so CDD under the €2,000 threshold is due and not complete.
  2. Delay is permitted for customer due diligence; player told exactly which documents are needed.
  3. Documents verified.
  4. Funds remitted to the source account, within five working days of the request.

What mistakes do operators commonly make?

Restricting deposits under bonus terms

Not allowed unless AML requires [1].

Monthly withdrawal caps below €250

Prohibited [1].

Prompts to cancel withdrawals

Not allowed; reversals are a risk indicator [1].

Checklist

  • Five working day target tracked.
  • Source-account payouts by default.
  • No restrictions on deposited funds.
  • Pending withdrawal funds cannot be wagered.
  • CDD at €2,000.
  • Complaints procedure and ADR details in terms.
  • ADR provider named.
  • Verification before the €2,000 threshold.

Frequently asked questions

How long should an MGA casino take to pay?

Within five working days of the request where practicable.

Can an MGA casino delay my withdrawal?

Yes, for identity checks, due diligence, security, rule compliance or fraud prevention.

Can an MGA casino limit my withdrawals?

Limits must be reasonable and a monthly limit can never be below €250.

Can they keep my deposit because of bonus terms?

Deposited funds may not be restricted unless AML rules require it.

Can I cancel a pending withdrawal?

Licensees must not encourage it, and funds pending withdrawal cannot be wagered.

Can I withdraw if I self-exclude?

Yes. Self-exclusion does not block withdrawal of remaining funds.

What if I disagree with the operator?

Use the complaints procedure, then a registered ADR entity.

When must an MGA licensee verify me?

Due diligence is required once deposits reach €2,000, and identity can be checked before payouts.

Does the MGA help with complaints?

The MGA has a player support function for complaints against its licensees, after the operator’s own process.

Why was I asked for ID at withdrawal on an MGA site?

Verification is required by the €2,000 threshold, and withdrawals are a common point for checks.

Sources

  1. MGA: Player Protection Directive (Directive 2 of 2018)
  2. FIAU: Implementing Procedures
  3. Gambling Commission: withdrawals expectations
  4. N.J.A.C. 13:69O-1.3 (Justia)
  5. New Jersey DGE: online responsible gaming rule adoption (October 2026)

KYC requirements for MGA licensees

Age checks, the €2,000 due diligence threshold and FIAU expectations.

Malta

Payments, KYC, responsible gambling and marketing rules in Malta.

How casino withdrawals work

The payout process step by step, the real reasons withdrawals are held, and what regulators expect.

Source of funds and source of wealth

When SoF and SoW checks are triggered, what evidence counts, and what regulators penalised.

Casino withdrawals in the UK

LCCP withdrawal rules, the reverse withdrawal ban, closed loop, ADR and Gambling Commission cases.

Further reading elsewhere