Gaming License Documentation Checklist: Every Document You Need (2025 Update)
Here's what costs operators 3-6 months in application delays: incomplete documentation. Gaming authorities reject 43% of initial submissions purely on documentation gaps. Not compliance issues. Not financial problems. Missing paperwork.
I've reviewed 200+ gaming license applications across Malta, Curacao, and Gibraltar. The pattern is clear. Operators either over-prepare (wasting consultant fees on unnecessary documents) or under-prepare (burning months in back-and-forth with regulators). This checklist eliminates both problems.
What follows is jurisdiction-agnostic foundation documentation, then tier-specific requirements. Skip the guesswork. Get it right the first time.
Core Documentation (Required Across All Jurisdictions)
Every gaming authority demands these baseline documents. No exceptions. Start here before you even choose a jurisdiction.
Corporate Structure Documents
- Certificate of Incorporation - Apostilled original from your company's registration jurisdiction. Photocopies get rejected 100% of the time.
- Articles of Association/Memorandum - Must explicitly permit gaming operations. Generic "all lawful activities" clauses cause delays.
- Shareholders Register - Complete ownership chain up to ultimate beneficial owners (UBOs). If UBO owns >10%, expect full due diligence on them too.
- Board Resolution - Authorizing the license application and appointing authorized signatories. Needs notarization in most tier-1 jurisdictions.
Financial Solvency Proof
This trips up 60% of first-time applicants. Gaming authorities don't just want proof you have money. They want proof you have *accessible* money for operations and player liabilities.
- Audited Financial Statements - Last 2-3 years. Must be prepared by recognized accounting firm. Self-prepared statements fail instantly.
- Bank Reference Letters - From your business banking institution confirming account standing and average balances. Generic templates don't work, needs specific language about financial standing.
- Capital Adequacy Statement - Detailed breakdown showing you meet minimum capital requirements plus operational buffer. Malta requires €730,000 minimum. Curacao varies by license type.
- Source of Funds Declaration - For all major investors. If you raised VC funding, expect full documentation on investor backgrounds too.
Personal Documentation (Key Personnel & UBOs)
Gaming regulators perform fit-and-proper tests on everyone who controls or manages the operation. "Control" means different things in different jurisdictions, but generally: 10%+ ownership or C-level/director positions.
Identity & Background Verification
- Passport Copies - Notarized, valid for 6+ months beyond application date
- Proof of Address - Utility bill or bank statement dated within last 3 months. P.O. boxes don't count.
- CV/Resume - Detailed work history highlighting gaming industry experience. Generic resumes get questioned.
- Police Clearance Certificates - From every country where individual resided 12+ months in last 10 years. Processing time: 4-12 weeks depending on country.
- Credit Reports - Some jurisdictions (Malta, UK) require personal credit checks on key personnel. Outstanding judgments or bankruptcies typically disqualify.
Operational Readiness Documentation
You need to prove you can actually operate a compliant gaming business. Regulators don't license concepts. They license functioning operations.
Technical Infrastructure
- Platform Documentation - If using white-label: agreement with platform provider plus their license/certification. If proprietary: technical specifications and architecture diagrams.
- Game Certifications - RNG certificates from approved testing labs (iTech Labs, eCOGRA, GLI). Must be dated within last 12 months.
- Server Location Confirmation - Some jurisdictions require servers physically located within their territory or approved data centers.
- Disaster Recovery Plan - Documented procedures for data backup, system failures, and business continuity. Generic templates fail; needs specificity.
Compliance Framework
This section determines whether you understand regulatory obligations. Copy-paste compliance manuals get spotted immediately and damage your credibility. Check our 2025 compliance requirements for jurisdiction-specific details.
- AML/KYC Procedures Manual - Must align with FATF recommendations and jurisdiction-specific requirements. Include: customer identification procedures, enhanced due diligence triggers, transaction monitoring thresholds, reporting procedures.
- Responsible Gaming Policy - Self-exclusion mechanisms, deposit limits, reality checks, underage gambling prevention. Needs to be operationally specific, not philosophical.
- Data Protection Policy - GDPR compliance if targeting EU markets. Include data retention schedules, breach notification procedures, user rights fulfillment process.
- Dispute Resolution Procedures - How you handle player complaints, escalation process, timelines. Some jurisdictions require ADR (Alternative Dispute Resolution) service agreements.
Payment Processing Documentation
No payment processing, no gaming operation. Regulators verify you have legitimate banking relationships before approving licenses.
- Payment Service Provider Agreements - Signed contracts with PSPs/payment gateways. Letters of intent don't count; need executed agreements.
- Banking Relationships Confirmation - Some jurisdictions require proof of merchant accounts specifically approved for gaming transactions.
- Segregated Account Documentation - Player funds must be segregated from operational funds. Need proof of separate accounts and internal controls.
Jurisdiction-Specific Additions
Beyond the core documentation, each jurisdiction adds unique requirements. Here's what differentiates tier-1 from tier-2 licensing.
Malta (MGA) Additional Requirements
- Local presence mandate: proof of Malta-registered company or local representative
- Systems audit by MGA-approved auditor (€15,000-25,000 cost)
- Business plan with 3-year financial projections
- Marketing and advertising policy (Malta has strict rules on bonus promotions)
For complete Malta requirements, see our Malta gaming license requirements guide.
Curacao eGaming Additional Requirements
- Curacao-registered company (can be expedited in 2-3 weeks)
- Local bank account (challenging; most operators use third-party payment solutions)
- Notarized declaration of no criminal record from all directors
- Software provider agreements (Curacao requires proof of legitimate game content)
Gibraltar Additional Requirements
- Physical presence in Gibraltar (office space lease agreement required)
- Minimum 2 Gibraltar-resident directors
- Detailed player protection procedures aligned with UK standards
- Technical compliance audit by Gibraltar-approved firm
Common Documentation Mistakes That Delay Applications
I see these errors repeatedly. Each one adds 4-8 weeks to your timeline.
Expired Certifications. Game certifications older than 12 months get rejected. RNG certificates must be current. If your platform provider gave you 18-month-old certificates, get new ones before applying.
Incomplete Ownership Disclosure. Gaming authorities trace ownership to natural persons. Corporate shareholders mean you need to disclose *their* ownership structure too. I've seen applications delayed 3 months because an operator disclosed immediate shareholders but not the UBOs.
Generic Compliance Manuals. Template compliance documents signal you don't actually understand regulatory requirements. Regulators spot copy-paste sections instantly. Your AML procedures need operational specificity: actual transaction thresholds, named responsible personnel, specific software tools you'll use.
Insufficient Capitalization Proof. Showing you have minimum capital isn't enough. You need to show accessible liquidity for operations *plus* player liabilities *plus* 6-month operational buffer. Malta rejected 22% of 2024 applications on capital adequacy alone.
Documentation Preparation Timeline
Don't start your application until you have 90% of documentation ready. Here's realistic gathering timelines:
- Corporate documents: 2-4 weeks (faster if using formation agents)
- Audited financials: 6-8 weeks (if you don't have recent audits)
- Police clearances: 4-12 weeks (varies by country; UK is 2 weeks, some jurisdictions take 3 months)
- Game certifications: 8-12 weeks (if you need new testing)
- Compliance documentation: 4-6 weeks (with experienced compliance consultant)
- Payment agreements: 2-8 weeks (depends on your payment provider's due diligence)
Total preparation time before application submission: 3-4 months for experienced operators, 5-6 months for first-timers.
Professional Documentation Review
Even with this checklist, 30% of applications get returned for documentation issues. The problem isn't missing documents - it's documents that don't meet unstated regulator expectations.
Example: Your AML manual might cover all required topics but lack operational detail. Your financial statements might be audited but not formatted per gaming authority preferences. Your corporate structure might be legitimate but unnecessarily complex for regulatory approval.
This is where experienced licensing consultants earn their fees. They've seen what actually gets approved versus what theoretically should work. For comprehensive guidance beyond documentation, review our complete gaming license guide.
Next Steps
Start with corporate and personal documentation - those take longest. While waiting on police clearances and audited financials, develop your compliance framework. By the time your background checks complete, you'll have operational documentation ready.
For jurisdiction selection guidance and application strategy, explore our gaming license resources. The right jurisdiction with complete documentation beats the "best" jurisdiction with gaps every time.