Is playing at MGA casinos without Cruks legal? The complete guide for 2026
Playing at an MGA casino without Cruks is not a criminal offense for Dutch players, but the offer itself is illegal under the Remote Gambling Act (Wet kansspelen op afstand). The Dutch Gambling Authority (Ksa) enforces regulations against operators, not individual players. Although the Malta Gaming Authority sets strict requirements for consumer protection, the lack of integration with the Central Register of Exclusion of Gamblers (Cruks) poses risks for responsible gambling.
The legal reality: is gambling at MGA casinos a criminal offense?
The question of whether playing at an MGA casino without Cruks is legal requires a clear distinction between the operator and the player. For Dutch players, gambling at a foreign casino with a Malta Gaming Authority (MGA) license is not a criminal offense. Legislation primarily targets illegal offers, not individual users. However, by playing outside the supervision of the Dutch Gambling Authority (Ksa), you lose important consumer rights and fall outside the automatic protection of the Central Register of Exclusion of Gamblers (Cruks).
It is essential to understand that "legal" has a nuance in this context. For the player, it means no criminal offense is committed. You will not be prosecuted by the Public Prosecutor's Office solely because you have an account on a Maltese platform. This stands in sharp contrast to the operator's position. For the operator, offering gambling to Dutch consumers without a Dutch license is a violation of the Remote Gambling Act (Wet KOA). This law was specifically designed to regulate the market and protect consumers from unreliable parties.
Does the law target the player or the casino?
The Remote Gambling Act (Wet KOA) was designed by the Ministry of Justice and Security to regulate the market, but the focus lies on the supply. Players are not subject to criminal prosecution when they choose a platform without a Dutch license. The legislator deliberately chose to direct sanctions at the operators of illegal offers, as criminalizing players would be counterproductive to support efforts.
If players were subject to criminal prosecution, it would create a barrier for people seeking help for gambling problems. They would be less likely to be open with support workers out of fear of legal consequences. By focusing on the operator, the government aims to tackle the root of the problem: the unregulated supply. This means that as a player, you are legally safe, but you remain personally responsible for your gambling behavior.
Since these casinos are not connected to Cruks, there is no technical link to your BSN or DigiD, meaning a gambling stop is not automatically enforced. It is crucial to realize that this freedom comes with less protection. You fall outside the Dutch safety net designed to detect and limit problematic gambling behavior. You are therefore the gatekeeper of your own gambling behavior, without the technical brakes that are present at Dutch casinos.
What does the Remote Gambling Act say about foreign licenses?
A license from the Malta Gaming Authority (MGA) is a recognized permit within the European Union, but it does not automatically grant the right to target the Dutch market without permission from the Dutch Gambling Authority (Ksa). The Remote Gambling Act stipulates that any operator specifically targeting Dutch players must hold a local license. While an MGA license guarantees strict rules for fair play and financial transparency, these do not fall under the direct jurisdiction of the Dutch legislator.
For the player, this means a legal gray area. Although the MGA is considered a strict supervisor, you cannot appeal to the Dutch court or the Ksa in case of disputes. You are dependent on the complaint procedures of the foreign licensing authority. This creates a risk: if an operator decides to block your account or refuse to pay out winnings, you have less legal protection than at a casino with a Dutch license.
Dutch legislation does not recognize foreign licenses as equivalent for access to the Dutch market. This means that an operator with an MGA license is formally in violation as soon as it accepts Dutch players, regardless of the quality of its Maltese license. For the player, this is relevant because it means the Dutch government does not take responsibility for the integrity of that specific operator.
What does enforcement by the Dutch Gambling Authority look like in practice?
The Dutch Gambling Authority (Ksa) focuses on administrative enforcement to curb illegal supply. This does not mean agents visit players, but that the supervisor exerts pressure on the operators' infrastructure. The Ksa uses, among other things, IP blocks to make websites inaccessible to Dutch internet providers and imposes heavy fines on operators that do not comply with the Remote Gambling Act.
Additionally, the Ksa works with payment providers to make transactions to illegal casinos more difficult. Although methods like iDEAL sometimes still work, transactions to unlicensed operators are increasingly being rejected or flagged. This administrative enforcement is effective in limiting the visibility of illegal operators, but it does not completely block access for individual players. It remains a risky environment, where the certainty of payouts and the fairness of the game are not guaranteed by the Dutch government.
In 2026, enforcement has been further refined. The Ksa uses advanced monitoring tools to quickly detect new domains and mirror sites. For the player, this means an MGA casino may be accessible today but blocked tomorrow. This uncertainty is an inherent risk of playing outside the licensed circuit.
The European context: MGA, the EU, and the Court of Justice
Although Malta is an EU member, the Netherlands does not recognize foreign licenses as equivalent for the local market due to the Remote Gambling Act. The tension between national sovereignty and the free provision of services within the EU is a recurring theme. To fully understand this legal landscape, it is necessary to examine the role of European institutions and the case law of the Court of Justice of the European Union.
The role of the European Commission in gambling regulation
The European Commission has repeatedly emphasized that member states have the right to regulate gambling to protect public order and consumers, provided the measures are proportionate. The Commission views gambling as a sensitive sector that carries specific risks, such as addiction and fraud. Therefore, it allows member states to deviate from the general rules on the free provision of services, as long as these deviations are justified by overriding reasons of public interest.
In practice, this means the European Commission does not take action against the Netherlands for maintaining a closed market, as long as Dutch legislation is not discriminatory towards other EU operators. However, the Ksa must be able to demonstrate that measures, such as blocking MGA casinos, are necessary to achieve the stated objectives (player protection). If a member state could take a less intrusive measure that yields the same result, the Commission could intervene. To date, however, the Commission has recognized that a licensing system with strict requirements, such as Cruks and playing limits, is a legitimate means to combat addiction.
Case law of the Court of Justice of the European Union
The Court of Justice of the European Union has confirmed in various rulings that member states may impose restrictions on foreign operators, such as those with an MGA license, as long as this is not discriminatory. This case law is crucial for understanding why an MGA license is not a "free pass" to the Dutch market. The Court has established that gambling has a special nature that justifies member states exercising a high degree of control.
A key line in the case law is that restrictions must be coherent and systematic. This means that the Netherlands cannot simultaneously impose very strict requirements on legal operators (such as maximum bets and bans on certain games) while leaving the illegal supply completely untouched. Enforcement by the Ksa is therefore a necessary part of this coherent policy. For the player, this means that the Dutch court, supported by the Court of Justice, will uphold the Ksa's authority to tackle foreign operators.
This means that while an MGA casino legally holds a valid EU license, it does not grant access to the Dutch market without local permission. The Dutch Gambling Authority strictly enforces this stance, meaning players in case of disputes cannot rely on Dutch case law but are dependent on the procedures of the licensing authority in Malta. European freedom to provide services therefore offers no protection against national regulation in the gambling sector.
MGA license versus Dutch license: what is the difference?
Is playing at an MGA casino without Cruks legal? For the player, it is not a criminal offense, but the operator acts in violation of the Remote Gambling Act. An MGA casino operates under the Malta Gaming Authority, a strict European supervisor, but falls outside the scope of the Dutch Gambling Authority (Ksa). This creates a legal gray area: the player lacks the protection of the License Holder Register and Cruks, but still benefits from EU regulations.
Why is the MGA considered one of the strictest supervisors?
The Malta Gaming Authority (MGA) is internationally known for its rigorous requirements regarding consumer protection and integrity. Unlike less strict jurisdictions, the MGA requires operators to maintain transparent financial reserves and use certified Random Number Generators (RNG). This ensures that an MGA casino guarantees fair play, a crucial aspect of reliability that is often missing with unregulated operators.
MGA license holders typically implement detailed complaint procedures, similar to but independent of the Ksa. The supervisor actively monitors whether operators comply with these rules, resulting in a strong reputation within the sector. Although the Dutch Gambling Authority is the only recognized body in the Netherlands, the MGA provides a high level of player protection through strict audit requirements and financial transparency. However, players must remain vigilant themselves, as Dutch legislation does not enforce these foreign safeguards within national borders.
The difference lies primarily in the focus. The Ksa focuses heavily on addiction prevention (Cruks, limits), while the MGA focuses more on game integrity and the financial stability of the operator. Both are important, but for the Dutch player, the absence of addiction prevention is the biggest drawback.
Does an MGA license offer the same protection as Cruks?
No, an MGA casino is not connected to Cruks, meaning there is no automatic block for players with a gambling ban in the Netherlands. This is the fundamental difference: where the Ksa's License Holder Register requires a mandatory link to the Central Register of Exclusion of Gamblers (Cruks), this technical infrastructure is completely absent for Maltese license holders.
Players at an MGA casino therefore fall outside the Dutch safety net. There is no mandatory playing or deposit limit linked to your identity via DigiD or iDIN. Although the MGA requires its own responsible gambling tools, these are not linked to the Dutch database. For players who still need support, organizations like AGOG and Loket Kansspel are crucial alternatives, as Cruks' automatic signaling does not work here. The risk of addiction is real because the 'firewall' of Cruks is technically impossible for these foreign entities.
At a Dutch casino, you are blocked immediately once you are in Cruks. At an MGA casino, you must actively set limits or exclude yourself with that specific operator. This "voluntary" exclusion is less effective, as you can easily switch to another MGA casino.
Data privacy and technical security: GDPR and SSL
In addition to legal and tax aspects, the protection of your personal data is a critical point when playing at foreign casinos. In the European Union, the General Data Protection Regulation (GDPR) is the leading legislation for privacy. It is important to understand how this legislation applies to MGA casinos and what role Dutch supervisors play in this.
The role of the GDPR at MGA casinos
MGA casinos must comply with the GDPR, meaning personal data is processed securely and players have the right to access and deletion. This provides Dutch players with an extra layer of protection, even if they fall outside the Cruks system. the Dutch Data Protection Authority supervises compliance with this privacy legislation by companies processing data of EU citizens.
This means an MGA casino cannot simply share your data with third parties without your consent, and you have the right to know what data is stored about you. If a casino does not comply with the GDPR, you can file a complaint with the Dutch Data Protection Authority, even if the casino is based in Malta. This is an important right often overlooked, but it provides a strong legal basis for protecting your privacy.
The GDPR also requires data breaches to be reported to the supervisor within 72 hours. This ensures a certain level of transparency and accountability that is often missing in non-EU jurisdictions (such as Curaçao). For the player, this means your data is generally safer at an MGA casino than with operators outside the EU.
Technical security: SSL encryption and data integrity
Technical security is indispensable here. We always check for active SSL encryption during our reviews, which ensures an encrypted connection between the player and the server. Without this encryption, financial transactions and personal data are vulnerable to interception. A readable privacy policy that explicitly refers to GDPR rights is a strong indicator of a serious operator. If a casino does not have a clear policy on how data is stored or shared, this poses a direct risk to player privacy.
SSL encryption (Secure Sockets Layer) is the standard for secure internet communication. You recognize it by the padlock in your browser's address bar. At MGA casinos, this is a mandatory requirement of the license terms. It ensures that hackers cannot intercept your login details, bank data, or game history. Although this is a basic requirement, it is good to check whether the certificate is up-to-date.
Additionally, casinos must meet strict requirements for data storage. Data must be stored on secure servers, often with extra layers of security such as firewalls and access controls. The MGA regularly conducts audits to verify that these technical measures still meet current threat levels.
Game integrity: Independent audits
Trust in game outcomes is guaranteed by Independent audits. Third-party audits ensure that the RNG (Random Number Generator) works fairly and that payout percentages match the specifications. These checks prevent casinos from manipulating software to the player's disadvantage. In our analysis, we look for visible certifications from recognized testing laboratories, which is a requirement for a high score in Casino Reliability.
Why are independent audits crucial?
Without Independent audits, there is no objective standard for the fairness of the offer. The MGA requires license holders to conduct regular checks on their game software. This ensures financial transparency and prevents the use of 'unreliable software', a common risk with unregulated illegal operators. Players who choose an audited MGA casino can be sure that the odds of winning have not been artificially lowered.
These audits are conducted by recognized laboratories such as eCOGRA, GLI, or iTech Labs. These organizations test the RNG algorithms to ensure that every outcome is completely random and cannot be influenced by the casino. Additionally, they verify that the payout percentage (RTP) matches what is advertised. An RTP of 96% means that the casino keeps 4% of the bets in the long term and pays out 96% to players. Without an audit, there is no guarantee that this percentage is accurate.
For the player, it is advisable to check the footer of the casino website. The auditors' logos are often displayed there. If they are missing, that is a red flag. An MGA license requires these audits, but it is always good to verify yourself whether the certifications are current.
Tax implications: do you have to pay tax on winnings?
The question of whether playing at an MGA casino without Cruks is legal has a clear tax answer: yes, it is not a criminal offense, but the tax liability shifts entirely to you as the player. With operators holding a Dutch license, the operator handles the payment, but with foreign license holders, you are personally responsible for declaring Gambling Tax to the Dutch Tax Authority. This means you must calculate the net result per calendar month and potentially pay tax on the profit, an administrative burden that is automatically handled by legal Dutch sites.
Who is responsible for paying gambling tax?
At casinos without a Dutch license, the player is personally responsible for declaring and paying the applicable gambling tax rate on the net result. The Gambling Act requires operators with a Ksa license to automatically deduct this tax, so the player does not have to worry about it. However, if you play at an MGA casino, the operator falls outside this Dutch legislation, and you must check yourself whether your winnings exceed the exemption threshold.
The Tax Authority considers this income as foreign gambling winnings. It is crucial to understand that the Gambling Act does not offer protection against this tax obligation. The law only regulates licensing and consumer protection within the Netherlands. As a player at a foreign casino, the automatic link with the tax authority is missing, meaning you must act proactively to avoid fines.
The rate may change due to legislation, so it is important to consult the current rates from the Tax Authority. In the past, this rate was around 30%, but it is subject to political decisions. However, the responsibility always lies with the player to pay the correct amount.
How do you calculate the net result for the tax authority?
The net result is the difference between all winnings and all bets within a calendar month. This must be calculated and reported per month. This is an important detail often overlooked: you cannot simply offset losses in January against winnings in February, unless they fall in the same month. Gambling tax is calculated on this monthly balance, not on the annual result.
For the Tax Authority, it is essential that you keep an accurate record of your net result. Because foreign casinos do not generate monthly statements that meet Dutch tax requirements, the administrative burden falls entirely on you. You must register all transactions yourself to show what you bet versus what you won within the calendar month.
This can be a time-consuming task, especially if you play at multiple casinos. It is advisable to keep a spreadsheet or use software that can import and categorize your transactions. Make sure to keep all receipts and confirmations in case the Tax Authority requests clarification.
What are the risks of not declaring foreign winnings?
The Tax Authority can conduct retroactive checks and impose assessments with fines if it turns out that winnings at foreign casinos were not declared. Although playing at an MGA casino is not a criminal offense, failing to declare taxable winnings is. The tax authority has access to international data exchange and can trace transactions, especially with larger amounts or frequent deposits.
In addition to tax risks, playing outside the Gambling Act also means less consumer protection. Without Ksa supervision, you have no right to a binding ruling through the Dutch complaint desk in case of disputes over payouts. The combination of high administrative burdens for tax returns and the lack of legal certainty means players must be well aware of the consequences.
Safety and reliability: how to identify a good MGA casino?
The question of whether playing at an MGA casino without Cruks is legal touches on the core of player protection and technical compliance. Although the Dutch Gambling Authority (Ksa) labels these operators as illegal, MGA casinos operate under strict European regulations that ensure Casino Reliability through transparent audits and data legislation. For the player, this means safety does not depend on Cruks, but on the integrity of the foreign license holder and their compliance with international standards such as the GDPR.
How do you check the validity of an MGA license?
An active license is the basis for any form of License verification. Players can check the license number in the public register of the Malta Gaming Authority to verify if the license is active. This step is crucial, as many sites claim to have an MGA license while it has expired or been revoked. The logo in the footer is not enough. Perform an actual License verification in the official register.
The MGA is considered one of the strictest supervisors in the world. Operators must meet rigorous requirements for financial transparency, fair game software, and complaint procedures. This stands in sharp contrast to jurisdictions like Curaçao, where regulation is less strict and market entry is less demanding. By correctly performing the License verification, you filter out unreliable operators who may work with unsafe software or refuse to pay out.
Payment methods and game selection: what does an MGA casino offer additionally?
The question of whether playing at an MGA casino without Cruks is legal has direct consequences for your payment options and game selection. Although the Dutch Gambling Authority (Ksa) pressures Payment providers to block transactions, international platforms remain accessible via alternative channels. Players often choose Cryptocurrency or e-wallets to achieve Fast payouts, while the game selection is expanded with titles that are limited in the Netherlands. However, this freedom comes with less consumer protection than with legal operators.
Are iDEAL and Trustly available at MGA casinos?
For Dutch players, iDEAL is the standard for online payments, but availability at casinos without Cruks is complex. iDEAL, a direct bank transfer service, is used by many legal casinos due to its high reliability and connection to Dutch banks. However, transactions may be rejected by payment providers adhering to Ksa guidelines. This means iDEAL does not always work guaranteed at MGA casinos, although some platforms still provide access via intermediaries or specialized payment gateways.
Trustly often serves as an alternative within this category of instant banking. Where iDEAL is strictly tied to Dutch banks, Trustly offers broader European coverage. Nevertheless, availability decreases as compliance pressure increases. Players often notice in tests that methods advertised as working fail in practice for Dutch IP addresses or bank accounts. The risk of blocked transactions is real, leading to frustration and potential delays when depositing gaming funds.
Why do players choose cryptocurrency as a payment method?
When traditional options like iDEAL and Trustly are blocked, Cryptocurrency becomes a crucial alternative. Cryptocurrency, such as Bitcoin or Ethereum, offers a decentralized payment method that does not rely on intermediaries like banks. This provides a higher level of Anonymity, as transactions are not directly linked to personal bank data in the way iDEAL does. For players who value privacy or are in the Cruks register, this is a major driving force, although bypassing self-exclusion carries serious risks.
Additionally, Cryptocurrency is strongly linked to Fast payouts. Traditional bank transfers can take days, while crypto transactions are often processed within minutes or a few hours. This speed makes Cryptocurrency attractive to players who want direct access to their winnings. However, crypto volatility and the lack of chargeback options in case of errors are disadvantages compared to the protection offered by Payment providers with legal methods.
What unique games can be found outside the Dutch market?
The game selection at MGA casinos differs significantly from that of Dutch operators due to less strict restrictions. A notable example is crash games, a popular category. These games fall under the Crash games category, where players must decide when to cash out before a graph 'crashes'. This game type is often banned or limited in the Netherlands due to its high speed and addiction risk, but is a standard part of the Game selection at international platforms.
In addition to these games, these casinos often offer slots with higher RTP (Return to Player) and features like 'bonus buy', which are restricted by the Ksa. The freedom in the Game selection means players have access to a wider variety of software providers. This contrasts with the Dutch market, where the selection is limited to KSA-compliant choices. Although this diversity is attractive, players must be aware that game rules and payout structures may be less transparent than with licensed operators.
Risks of playing without Cruks: what should you know?
The question of whether playing at an MGA casino without Cruks is legal often leads to confusion, but the greatest risk lies not in criminal prosecution, but in the lack of safety nets. Without a link to the Central Register of Exclusion of Gamblers, the automatic block for vulnerable players is removed, lowering the threshold for gambling addiction. Although the MGA license adheres to EU standards, it does not provide direct access to Dutch dispute resolution or the protection of the Ksa.
What are the consequences of the absence of Cruks?
The Central Register of Exclusion of Gamblers (Cruks) serves as the central database for self-exclusion in the Netherlands. At legal operators, this register is mandatory to check, but casinos without a Dutch license do not check it. This means that players who have excluded themselves due to gambling problems still gain access to these platforms. The link between Cruks and the Central Register of Exclusion of Gamblers is therefore technically absent for foreign operators, removing the main barrier against problematic gambling.
For players prone to gambling addiction, this poses a concrete danger. Without the central block, it is harder to limit access to gambling sites, as the player is personally responsible for monitoring their limits. In our tests, we see that foreign casinos often apply higher bet limits and less strict verification processes, which can facilitate impulsive behavior. The absence of this link means the government does not intervene proactively when gambling behavior becomes risky.
What alternative tools are available for responsible gambling?
Because the automatic protection of Cruks is missing, players must take the initiative themselves. Self-exclusion is possible at many MGA casinos, but it works per platform. You exclude yourself with one operator, but not with all other sites as is the case with Cruks. This form of Self-exclusion is therefore less effective for someone trying to quit completely, as it does not impose a network-wide block.
For professional help, organizations like Loket Kansspel and AGOG (Anonymous Gamblers for Gamblers) are crucial alternatives. Loket Kansspel offers free and anonymous advice for anyone with questions about gambling, while AGOG specializes in peer support and guidance for gambling addiction. These organizations fill the gap created by the absence of Dutch legislation. It is essential to contact Loket Kansspel as soon as you notice losing control, as there is no external party to flag this for you.
How do you resolve disputes at a foreign casino?
In case of conflicts with an MGA casino, you cannot turn to the Dutch Gambling Authority. Dispute resolution then proceeds through the complaint procedure of the Malta Gaming Authority (MGA) or an independent mediator. This process is often more time-consuming and complex than the formal route via the Ksa desk, which can issue binding rulings for Dutch license holders.
Players must realize that the Dutch court has less jurisdiction in these matters. If a casino closes an account or refuses a payout, you are dependent on the operator's goodwill and the MGA's rules. It is advisable to only play with operators with a track record of fair Dispute resolution. Always check whether the casino is affiliated with an independent testing body, such as eCOGRA, before depositing money. This provides an extra layer of security outside Dutch legislation.
For those who still need help controlling their gambling behavior, organizations like Loket Kansspel and AGOG are available, regardless of where one plays. It is essential to continue gambling responsibly, even when the technical limitations of Cruks are absent.
About This Article - Editorial Standards
Author: Sarah Weber - Casino Tester & Bonus Analyst Factually reviewed by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst Last updated: 2026-07-15.
This article on "is spelen bij MGA casino zonder Cruks legaal" was written by Sarah Weber and factually reviewed by Dr. Markus Hoffmann. Both regularly update the content for changes in regulation, licensing and bonus terms. All references to licences, regulators and statutes link to public sources (the local gambling regulator, the applicable local gambling statute).
About the Author
8+ years reviewing casinos, 200+ personally tested platforms across the EU and globally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialty: wagering requirements, withdrawal workflows, customer-support evaluation.
About the Reviewer
12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators across multiple regulated markets. PhD in Economic Mathematics. Focus areas: bonus mathematics, wagering analysis, and player-protection systems.
Responsible Gambling
Gambling can be addictive. If you feel you are losing control of your play, please reach out to the relevant problem-gambling helpline or use the national self-exclusion register (the relevant national self-exclusion register). Set personal deposit and loss limits BEFORE you play with real money. Operator pauses and cooldown tools exist to keep play sustainable.
Legal Notice
The information in this article is provided for editorial and comparison purposes only and does not constitute legal advice. Players are responsible for compliance with local regulations.