MGA Approves Qualified Electronic Signatures for Regulatory Documents

The Malta Gaming Authority (MGA) has confirmed that it now accepts Qualified Electronic Signatures for documents submitted as part of its regulatory, supervisory, operational, and administrative activities. This policy is effective immediately and covers all submissions, provided that signatures conform precisely to standards set out in Regulation (EU) No 910/2014 (eIDAS) under Article 3(12).

MGA Policy on Qualified Electronic Signatures

Under this new guidance, any entity or individual submitting documents to the MGA for regulatory purposes—whether in licensing, compliance, or operational contexts—can use a Qualified Electronic Signature as legally defined under the eIDAS Regulation. These digital signatures must meet all technical, procedural, and evidentiary requirements within the EU framework. The responsibility rests with the submitting party to ensure compliance.

Key provisions

• Qualified Electronic Signatures must fully satisfy the requirements in Regulation (EU) No 910/2014 (eIDAS).
• Submission with an electronic signature does not exempt the submitter from verifying that all regulatory conditions are met and remains liable for authenticity.

"Any party submitting documentation with an electronic signature remains responsible for ensuring that the signature used complies with the requirements of the Regulation," the MGA stated in its official notice.

Validation and MGA Discretion

Although these digital signatures are now recognised, the Malta Gaming Authority reserves full rights to validate submitted signatures. This includes verifying the:

• validity
• integrity

- authenticity of any electronic signature on regulatory documentation.

Where there is doubt or a signature does not clearly comply, the MGA can require further measures. This may include an additional assurance process or a traditional wet-ink signature. If a document carries a non-compliant or questionable electronic signature, the regulator may reject the submission outright. The Authority also retains the ability to set specific execution or certification standards where needed.

Regulatory Reference: eIDAS Article 3(12)

The acceptance framework for Qualified Electronic Signatures is grounded in Article 3(12) of Regulation (EU) No 910/2014, known as eIDAS. This standard governs electronic identification and trust services for electronic transactions across the EU, facilitating cross-border recognition for digital document execution. To be considered qualified, a signature must:

• be created by a qualified electronic signature creation device
• be based on a qualified certificate for electronic signatures, issued by a qualified trust service provider registered under eIDAS

The MGA's stance aligns Malta's gaming regulatory processes with EU-wide best practice in digital authentication.

Immediate Implementation and Ongoing Review

This policy is in force as of 11 September 2026. The Authority underscores that these measures can be revised at its discretion. Licensees, applicants, and other stakeholders submitting documentation should consistently monitor updates published by the Malta Gaming Authority and review submission policies before filing material electronically.

The MGA has not specified granular technical requirements, leaving flexibility to stipulate further procedures if necessary. If a regulatory submission becomes subject to additional requirements—for example, certification/verification steps for sensitive licensing materials—the Authority will communicate these on a case-by-case basis.

Submission Guidance for Stakeholders

Any party preparing to submit documents to the Malta Gaming Authority using a Qualified Electronic Signature should, at a minimum:

1. Confirm the signature qualifies under eIDAS Article 3(12)
2. Retain detailed documentation on the trust service provider and the creation device
3. Be prepared for requests for further verification or traditional signatures if the MGA requests them
4. Monitor regulatory communications for updates, especially if using new or updated digital signature technology

Non-compliance or questionable digital signatures will, per MGA policy, result in delayed processing or outright rejection of the submission.

Regulatory Alignment and Digitalisation

This move harmonises Malta's regulatory submissions processes with the EU standard for digital signatures, supporting greater digitalisation and cross-border compatibility. For B2B platform providers, suppliers, licensed operators and applicants, this step enables more streamlined document management, but also imposes a clear obligation to adhere strictly to eIDAS standards.

Stakeholders in the Maltese gaming sector should assess their current electronic document execution practices and ensure all future filings match these new requirements. Non-compliance may result in additional verification demands and delayed regulatory action.