All guides
GuideiGamingLicensing

Choose a licensing route for international iGaming software

Choosing a licensing route for gaming software by function, operator and player market, with Malta, Great Britain, Brazil and Curaçao compared.

8 min read

An iGaming supplier needs a route for each product, operator and player market. Start with what the software does and who controls it. Then check the countries where the supplier works, the operator operates and players participate. A supplier authorisation, an operator licence and technical certification answer separate questions.

This sequence matters for studios, platform providers, analytics vendors and affiliates. It also identifies work that must change before a customer can be accepted.

Classify each product function

Use the following selector to identify the first review:

  • Game logic, random-number generation and settlement: assess gambling-software or critical-supply licensing, then the game and testing requirements.
  • Player accounts and regulatory records: distinguish ordinary customer management from software that controls gambling transactions or maintains indispensable regulatory data. Independent decisions about player access or money also require an operator assessment.
  • Game hosting: distinguish running games through another operator’s website from providing server capacity. The former can require an additional operating permission.
  • Cloud, backup and support: identify what the service maintains and where staff can intervene. Malta treats specified infrastructure and disaster-recovery services as material gaming supplies.
  • Analytics: separate general business reporting from outcome calculations, gambling bonuses and authoritative gaming records. British guidance excludes general performance analytics from its intended software-licensing perimeter; the actual function remains decisive.
  • Affiliates: use the advertising and operator-contract route for promotion. Adding account operation, bet acceptance or settlement requires a fresh classification.

These distinctions follow Malta’s critical and material supply categories and the British regulator’s functional interpretation. Product names cannot settle them. (Gaming Definitions Regulations, S.L. 583.04, reg. 2; Gaming Authorisations Regulations, S.L. 583.05, First Schedule, para. 3, and Third Schedule; Gambling Commission, What is gambling software?, “Definition of gambling software” and “Do gambling software businesses require additional remote operating licences?”.)

Identify the operator, players and country of supply

Before accepting an operator, obtain its legal name, actual permissions, permitted activities and domains, and intended player countries. Match those records to the contracting entity. Engineering should document development, hosting, backup and remote-administration locations, together with permissions to change games, accounts and payment instructions.

British remote-gambling jurisdiction can arise through equipment in Great Britain or facilities used there. Where the equipment is wholly overseas, the statutory offence also requires actual or constructive knowledge of British use or likely use. Separately, the operator’s licensed-software sourcing condition reaches its overseas supply chain. (Gambling Act 2005, ss. 33, 36(3)–(3A); Licence Conditions and Codes of Practice, “LCCP”, condition 2.2.1.)

Origin law needs its own decision:

  • In India, work that offers, aids or abets prohibited online money gaming must stop or change. A foreign customer’s licence does not establish an export exemption. Identify the Indian state and assess development, hosting and continuing support separately. (Promotion and Regulation of Online Gaming Act 2025, ss. 1(2), 2(1)(g)–(h), 5–7; Online Gaming Authority of India, Advisory of 29 July 2026, paras. 4–7.)
  • In Armenia, distinguish software development from organising internet gambling, internet betting or enabling player participation. Apply the current gaming and lottery laws, then check the successor regime’s transition against the deployment date. (Laws HO-1-N, arts. 2 and 4, and HO-3-N, arts. 2(5) and 4; Law HO-263-N, art. 58; Government Decision N 1155-A of 6 August 2026.)
  • For a studio in Buenos Aires City, assess LOTBA’s local supplier-registration rules before relying on an export description. Other Argentine provinces require their own analysis. Operating, administering or organising unauthorised gambling raises the separate national criminal prohibition. (Resolution RESDI-2023-66-GCABA-LOTBA, Annex IF-2023-38551153-GCABA-LOTBA, arts. 28 and 35; Argentine Criminal Code, art. 301 bis.)

Remote access belongs in this assessment. Installing an update, changing gambling controls and viewing player data are different activities. Record each permission and assess the applicable software, operating and data requirements before granting access.

Separate supplier permissions from operator licences and testing

Malta critical and material supplies

Malta requires authorisation for critical gaming supply from Malta, to any person in Malta or through a Maltese entity. The relevant licence category covers supply and management of material game elements and essential-record software or its control system. Management includes indispensable ongoing maintenance and support. Exempt games require separate classification. (S.L. 583.05, regs. 3 and 5 and First Schedule, para. 3.)

A direct licence applicant must be established in the European Economic Area. Recognition of another authorisation requires an applicable MGA recognition notice. For material services, including specified cloud, fraud-management and identity-verification services, an MGA-authorised recipient must establish the supplier’s material-supply certificate or case-specific MGA approval. (S.L. 583.05, regs. 10(1), 20 and 22; MGA Directive 3 of 2018, art. 27.)

Great Britain gambling software and game hosting

For the remote casino, bingo and betting licences covered by LCCP condition 2.2.1, software manufacture, supply, installation and adaptation require the specified licensed businesses. Determine who controls development and who supplies the finished product. A contractor supplying skills under a licensee’s genuine control requires a different assessment from an independent product supplier. Hosting and operating games can add a remote operating-licence requirement. (Gambling Act 2005, s. 41; LCCP, condition 2.2.1; Gambling Commission, What is gambling software?, “Manufacturing and adapting gambling software” and “Do gambling software businesses require additional remote operating licences?”.)

Brazil requires a stop decision for the prohibited offering

Brazil’s published Medida Provisória 1.394/2026 prohibits the fixed-odds offering. It covers sports betting and the specified online games, including offshore offerings to people in Brazil. Existing authorisations ended 30 days after publication, and new authorisations are prohibited. Other legally authorised lottery modalities are outside this prohibition. A provisional measure lapses unless Congress converts it into law within the constitutional period. (Medida Provisória 1.394 of 25 September 2026, arts. 1–6 and 30; Constitution of Brazil, art. 62.)

Earlier certification requirements covered betting systems, online games, random-number generators and relevant integrations. Those certificates cannot authorise a new prohibited offering. Suppliers should disable the affected gameplay and acquisition functions while preserving support for lawful closure, refunds and regulatory records. A claimed court exception must match an operative order and its beneficiary. (SPA/MF Portaria 722/2024, arts. 3 and 6–7; Portaria 1.207/2024, arts. 5–7; Medida Provisória 1.394/2026, arts. 7–11, 16 and 29, sole paragraph.)

Curaçao leaves destination permissions to be resolved

A Curaçao operator licence establishes the holder’s permission within its authorised scope. It cannot be transferred to the supplier or used as worldwide market access. Destination law remains applicable. The critical-supplier licensing and registered-sourcing prohibitions commence on 24 December 2026; local supplier licensing and foreign-supplier registration require separate analysis. (Landsverordening op de kansspelen, P.B. 2024, no. 157, arts. 1.2, 1.5, 5.16 and 15.10(3); CGA, Indefinite-term Online Gaming Licence Conditions, art. 3(1).)

Put releases and continuing duties into the agreement

The operator agreement should identify permitted products and territories, supplier entities, subcontractors, hosting locations and operational powers. Allocate testing, submissions, release approval, incident reporting and suspension. Specify regulator and operator access to records, audit cooperation, retention periods and usable exports on termination.

Some terms implement binding duties. British third-party rules require compliance and information obligations and a prompt-termination mechanism, subject to the contract’s dispute-resolution provisions. Other terms, including detailed service levels, liability allocation and testing costs, are commercial positions to negotiate. (LCCP, social responsibility code 1.1.2(2).)

Make updates pass the correct release process. Malta requires prior approval for changes to critical game elements; specified additions using approved engines and generators can follow a notification route. British changes that may affect fairness require external retesting; genuinely minor updates follow the applicable internal controls. Match reports to the deployed version and integration. (MGA Directive 3 of 2018, arts. 19–24; LCCP, condition 2.3.1; Gambling Commission, Testing strategy, section 3 and Annex A.)

Production supply should begin only when the actual activity satisfies origin restrictions, destination permissions and required technical steps. For an existing Brazilian deployment, the immediate contract work concerns closure obligations and continuing access to records.

Choose the next country or operator review

Which Maltese licence category fits the business?

The Malta licensing overview introduces the MGA’s operator and critical-supplier categories. Use the distinction to identify which entity and activities need the detailed supplier assessment.

When does the business become a British operator?

The British licensing analysis for an Indian-founded fantasy cricket operator examines product classification, player-facing responsibilities and the separate software permission. It helps teams decide which operational powers they intend to retain.

What does a Curaçao operator licence change for an Armenian platform?

The Armenian platform and Curaçao licensing analysis addresses direct operation, white-label arrangements, local requirements and destination limits. Read it when the proposed supplier also wants control of the player business.

Which operator relationships warrant closer diligence?

The gaming and gambling financial-crime risk analysis examines ownership, white-label relationships, payment flows and supplier contracts. It distinguishes risk indicators from findings of misconduct and legally binding duties.

Identify the supplier category

Request a supplier-route review with the function map, delivery countries, target operators, player markets and proposed agreement. The review can define the supplier category, required permissions and technical evidence, and the contract changes needed before the proposed supply begins.

Request a consultation
guideiGamingLicensing