Is playing at MGA casino without Cruks legal? The complete guide for 2026

Playing at an MGA casino without Cruks is not punishable for the Dutch player, but the offering itself is illegal according to the Remote Gambling Act. The Gaming Authority (Ksa) enforces against providers, not against individual players. Although the Malta Gaming Authority sets strict requirements for consumer protection, the link with the Central Register for Exclusion of Gambling is missing, which brings risks for responsible gaming.

The legal reality: is gambling at MGA casinos punishable?

The question of whether playing at an MGA casino without Cruks is legal requires a clear distinction between provider and player. For the Dutch player, playing at a foreign casino with a Malta Gaming Authority (MGA) license is not punishable. The legislation focuses primarily on the illegal offering, not on the individual user. However, by playing outside the supervision of the Gaming Authority (Ksa), you lose important consumer rights and fall outside the automatic protection of the Central Register for Exclusion of Gambling (Cruks).

It is essential to understand that "legal" in this context has a nuance. For the player, it means that there is no question of a criminal offense. You will not be prosecuted by the Public Prosecution Service solely because you have an account with a Maltese platform. This stands in sharp contrast to the position of the provider. For the operator, offering games of chance to Dutch consumers without a Dutch license is a violation of the Remote Gambling Act (Wet KOA). This law is specifically designed to organize the market and protect consumers against unreliable parties.

Does the law focus on the player or the casino?

The Remote Gambling Act (Wet KOA) was designed by the Ministry of Justice and Security to regulate the market, but the focus is on the offering. Players are not subjected to criminal prosecution when they choose a platform without a Dutch license. The legislator has consciously chosen to direct the sanctions at the operators of the illegal offering, because criminalizing players would be counterproductive for support services.

If players were to be criminally prosecuted, this would create a barrier for people seeking help for gambling problems. They would then be less inclined to be open with support workers for fear of legal consequences. By placing the focus on the provider, the government attempts to tackle the source of the problem: the uncontrolled offering. This means that as a player you are legally safe, but you remain responsible for your own gaming behavior.

Because these casinos are not affiliated with Cruks, the technical link with your BSN or DigiD is missing, meaning a gambling stop is not automatically enforced. It is crucial to realize that this freedom comes with less protection. You fall outside the Dutch safety net that tries to detect and limit problematic gaming behavior. You are therefore the gatekeeper of your own gaming behavior, without the technical brakes that are present at Dutch casinos.

What does the Remote Gambling Act say about foreign licenses?

A license from the Malta Gaming Authority (MGA) is a recognized license within the European Union, but this does not give an automatic right to target the Dutch market without permission from the Gaming Authority (Ksa). The Wet KOA stipulates that any provider specifically targeting Dutch players must possess a local license. Although an MGA license guarantees strict rules for fair play and financial transparency, these do not fall under the direct jurisdiction of the Dutch legislator.

For the player, this means a legal gray area. Although the MGA is considered a strict regulator, you cannot appeal to the Dutch court or the Ksa in the event of disputes. You are dependent on the complaint procedures of the foreign licensing authority. This creates a risk: should a provider decide to block your account or not pay out winnings, you have less legal protection than at a casino with a Dutch license.

Dutch legislation does not recognize foreign licenses as equivalent for access to the Dutch market. This means that a provider with an MGA license is formally in violation as soon as they accept Dutch players, regardless of the quality of their Maltese license. For the player, this is relevant because it means the Dutch government takes no responsibility for the integrity of that specific operator.

What does the enforcement of the Gaming Authority look like in practice?

The Gaming Authority (Ksa) focuses on administrative enforcement to reduce the illegal offering. This does not mean that agents visit players, but that the regulator exerts pressure on the infrastructure of the providers. The Ksa uses, among other things, IP blocks to make websites inaccessible to Dutch internet providers and imposes high fines on operators that do not comply with the Wet KOA.

In addition, the Ksa works with payment providers to make transactions to illegal casinos more difficult. Although methods like iDEAL sometimes still work, transactions to unlicensed providers are increasingly refused or flagged. This administrative enforcement is effective in limiting the visibility of illegal providers, but it does not completely rule out access for the individual player. However, it remains a risky environment, where the certainty of payouts and the fairness of the game are not guaranteed by the Dutch government.

In 2026, enforcement has been further refined. The Ksa uses advanced monitoring tools to quickly detect new domains and mirror sites. For the player, this means that an MGA casino may be accessible today, but could be blocked tomorrow. This uncertainty is an inherent risk of playing outside the licensed circuit.

The European context: MGA, the EU, and the Court of Justice

Although Malta is a member of the EU, the Netherlands does not recognize foreign licenses as equivalent for the local market due to the Remote Gambling Act. The tension between national sovereignty and the free movement of services within the EU is a recurring theme. To fully understand this legal landscape, it is necessary to look at the role of the European institutions and the case law of the Court of Justice of the European Union.

The role of the European Commission in gambling regulation

The European Commission has repeatedly emphasized that member states have the right to regulate gambling to protect public order and consumers, provided the measures are proportional. The Commission views gambling as a sensitive sector that carries specific risks, such as addiction and fraud. Therefore, it allows member states to deviate from the general rules for the free movement of services, as long as these deviations are justified by overriding reasons of public interest.

In practice, this means that the European Commission does not take action against the Netherlands for maintaining a closed market, as long as Dutch legislation is not discriminatory towards other EU providers. However, the Ksa must be able to demonstrate that the measures, such as blocking MGA casinos, are necessary to achieve the set goals (protection of the player). If a member state could take a less intrusive measure that yields the same result, the Commission could intervene. So far, however, the Commission has recognized that a licensing system with strict requirements, such as Cruks and play limits, is a legitimate means to combat addiction.

Case law of the Court of Justice of the European Union

The Court of Justice of the European Union has confirmed in various rulings that member states may impose restrictions on foreign providers, such as those with an MGA license, as long as this is not discriminatory. This case law is crucial for understanding why an MGA license is not a "free pass" for the Dutch market. The Court has established that gambling has a special nature that justifies member states exercising a high degree of control.

An important line in the case law is that restrictions must be coherent and systematic. This means that the Netherlands cannot, on the one hand, impose very strict requirements on legal providers (such as maximum stakes and bans on certain games) and, on the other hand, leave the illegal offering completely untouched. Enforcement by the Ksa is therefore a necessary part of this coherent policy. For the player, this means that the Dutch court, supported by the Court of Justice, will support the Ksa's authority to tackle foreign providers.

This means that although an MGA casino legally has a valid EU license, it does not grant access to the Dutch market without local permission. The Gaming Authority strictly enforces this position, meaning that in the event of disputes, players cannot fall back on Dutch case law, but are dependent on the procedures of the licensing authority in Malta. The European freedom to provide services therefore offers no protection against national regulation in the gambling sector.

MGA license versus Dutch license: what is the difference?

Is playing at MGA casino without Cruks legal? For the player, it is not punishable, but the provider is acting in violation of the Remote Gambling Act. An MGA casino operates under the Malta Gaming Authority, a strict European regulator, but falls outside the scope of the Gaming Authority (Ksa). This creates a legal gray area: the player misses the protection of the License Holder Register and Cruks, but does benefit from EU regulations.

Why is the MGA considered one of the strictest regulators?

The Malta Gaming Authority (MGA) is internationally known for its rigorous requirements regarding consumer protection and integrity. Unlike less strict jurisdictions, the MGA obliges providers to have transparent financial reserves and certified Random Number Generators (RNG). This ensures that an MGA casino guarantees fair play, a crucial aspect of reliability that is often lacking in unsupervised providers.

MGA license holders generally use detailed complaint procedures, similar to but independent of the Ksa. The regulator actively monitors whether providers comply with these rules, resulting in a strong reputation within the sector. Although the Gaming Authority in the Netherlands is the only recognized body, the MGA offers a high level of player protection through strict audit requirements and financial transparency. However, players must remain vigilant themselves, as Dutch legislation does not enforce these foreign safeguards within national borders.

The difference lies mainly in the focus. The Ksa focuses heavily on addiction prevention (Cruks, limits), while the MGA focuses more on the integrity of the game and the financial stability of the operator. Both are important, but for the Dutch player, the absence of addiction prevention is the biggest loss.

Does an MGA license offer the same protection as Cruks?

No, an MGA casino is not connected to Cruks, meaning there is no automatic block for players with a gambling stop in the Netherlands. This is the fundamental difference: where the Ksa's License Holder Register requires a mandatory link to the Central Register for Exclusion of Gambling (Cruks), this technical infrastructure is completely missing with Maltese license holders.

Players at an MGA casino therefore fall outside the Dutch safety net. There is no mandatory play or deposit limit linked to your identity via DigiD or iDIN. Although the MGA requires its own responsible gambling tools, these are not linked to the Dutch database. For players who still need support, organizations like AGOG and Loket Kansspel are crucial alternatives, as the automatic signaling of Cruks does not work here. The risk of addiction is real because the 'firewall' of Cruks is technically impossible for these foreign entities.

At a Dutch casino, you are immediately blocked as soon as you are in Cruks. At an MGA casino, you must actively set limits yourself or exclude yourself at that specific operator. This "voluntary" exclusion is less effective, because you can easily switch to another MGA casino.

Data privacy and technical security: GDPR and SSL

In addition to the legal and fiscal aspects, the protection of your personal data is a critical point when playing at foreign casinos. In the European Union, the General Data Protection Regulation (GDPR) is the leading legislation for privacy. It is important to understand how this legislation applies to MGA casinos and what role Dutch regulators play in this.

The role of the GDPR at MGA casinos

MGA casinos must comply with the GDPR, which means that personal data is processed securely and players have the right to access and deletion. This offers Dutch players an extra layer of protection, even if they fall outside the Cruks system. The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) monitors compliance with this privacy legislation in the Netherlands by companies processing data of EU citizens.

This means that an MGA casino cannot just share your data with third parties without your consent, and that you have the right to know what data is stored about you. If a casino does not comply with the GDPR, you can file a complaint with the Dutch Data Protection Authority in the Netherlands, even if the casino is based in Malta. This is an important right that is often overlooked, but which provides a strong legal basis for the protection of your privacy.

The GDPR also requires that data breaches are reported to the regulator within 72 hours. This ensures a certain degree of transparency and accountability that is often lacking in non-EU jurisdictions (such as Curaçao). For the player, this means that your data at an MGA casino is generally safer than with providers outside the EU.

Technical security: SSL encryption and data integrity

Technical security is indispensable here. During our reviews, we always check for active SSL encryption, which ensures an encrypted connection between the player and the server. Without this encryption, financial transactions and personal data are vulnerable to interception. A readable privacy policy that explicitly refers to GDPR rights is a strong indicator of a serious operator. If a casino does not have a clear policy on how data is stored or shared, this poses a direct risk to the player's privacy.

SSL encryption (Secure Sockets Layer) is the standard for secure internet communication. You can recognize this by the padlock in the address bar of your browser. At MGA casinos, this is a mandatory requirement of the license conditions. It ensures that hackers cannot read your login details, bank details, or gaming history. Although this is a basic requirement, it is good to check if the certificate is up to date.

In addition, casinos must meet strict requirements for data storage. Data must be stored on secure servers, often with extra layers of security such as firewalls and access controls. The MGA regularly conducts audits to check whether these technical measures still meet current threat levels.

Integrity of the game: Independent audits

Trust in the outcomes of games is guaranteed by Independent audits. Third-party audits guarantee that the RNG (Random Number Generator) works fairly and that the payout percentages match the specifications. These checks prevent casinos from manipulating the software to the detriment of the player. In our analysis, we look for visible certifications from recognized testing laboratories, which is a requirement for a high score on Casino Reliability.

Why are independent audits crucial?

Without independent audits, there is no objective measure of the fairness of the offering. The MGA obliges license holders to regularly check their game software. This ensures financial transparency and prevents 'unreliable software' from being deployed, a common risk with unsupervised illegal providers. Players who choose an audited MGA casino can be sure that the winning odds have not been artificially lowered.

These audits are conducted by recognized laboratories such as eCOGRA, GLI, or iTech Labs. These organizations test the RNG algorithms to ensure that every outcome is completely random and cannot be influenced by the casino. In addition, they check whether the Return to Player (RTP) percentage matches what is advertised. An RTP of 96% means that in the long run, the casino keeps 4% of the stakes and pays back 96% to players. Without an audit, there is no guarantee that this percentage is correct.

For the player, it is advisable to look at the footer of the casino website. The logos of the auditors are often located there. If these are missing, that is a red flag. An MGA license requires these audits, but it is always good to verify yourself whether the certifications are current.

Fiscal consequences: do you have to pay tax on winnings?

The question of whether playing at an MGA casino without Cruks is legal has a clear fiscal answer: yes, it is not punishable, but the tax liability shifts entirely to you as a player. With providers holding a Dutch license, the operator arranges the payment, but with foreign license holders, you yourself are responsible for declaring Gambling Tax to the Tax Authority (Belastingdienst). This means you must calculate the net result per calendar month and potentially pay tax on the winnings, an administrative burden that is automatically processed on legal Dutch sites.

Who is responsible for the payment of gambling tax?

At casinos without a Dutch license, the player themselves is responsible for declaring and paying the applicable gambling tax rate on the net result. The Gambling Act obliges providers with a Ksa license to automatically pay this tax, meaning the player does not have to worry about it. However, if you play at an MGA casino, the provider falls outside this Dutch legislation and you must check yourself whether your winnings exceed the exemption.

The Tax Authority considers these earnings as foreign gambling winnings. It is crucial to understand that the Gambling Act offers no protection against this fiscal obligation; the law only regulates licensing and consumer protection within the Netherlands. As a player at a foreign casino, the automatic link with the tax authorities is missing, meaning you must act proactively to avoid fines.

The rate can change due to legislation, so it is important to consult the current rates of the Tax Authority. In the past, this rate was around 30%, but this is subject to political decisions. However, the responsibility always lies with the player to pay the correct amount.

How do you calculate the net result for the tax authority?

The net result is the difference between all winnings and all stakes within a calendar month; this must be calculated and declared per month. This is an important detail that is often overlooked: you cannot simply offset losses in January against winnings in February, unless they fall in the same month. Gambling Tax is calculated on this monthly balance, not on the annual result.

For the Tax Authority, it is essential that you keep accurate records of your net result. Because foreign casinos do not generate monthly overviews that meet Dutch tax requirements, the administrative burden lies entirely with you. You must register all transactions yourself to demonstrate what you have staked versus what you have won within the limits of the calendar month.

This can be a time-consuming task, especially if you play at multiple casinos. It is recommended to keep a spreadsheet or use software that can import and categorize your transactions. Make sure you keep all receipts and confirmations, should the Tax Authority ask for clarification.

What are the risks of not declaring foreign winnings?

The Tax Authority can carry out retrospective checks and impose additional assessments with fines if it turns out that winnings at foreign casinos have not been declared. Although playing at an MGA casino is not punishable, failing to declare taxable winnings is. The tax authorities have access to international data exchange and can trace transactions, especially with larger amounts or frequent deposits.

In addition to the fiscal risks, playing outside the Gambling Act also brings less consumer protection. Without supervision from the Ksa, you have no right to a binding ruling via the Dutch complaints desk in the event of disputes over payouts. The combination of high administrative burdens for the tax return and the lack of legal certainty means that players must be well aware of the consequences.

Safety and reliability: how do you recognize a good MGA casino?

The question of whether playing at an MGA casino without Cruks is legal touches on the core of player protection and technical compliance. Although the Gaming Authority (Ksa) labels these providers as illegal, MGA casinos operate under strict European regulations that guarantee Casino Reliability through transparent audits and data legislation. For the player, this means that safety does not depend on Cruks, but on the integrity of the foreign license holder and their compliance with international standards such as the GDPR.

How do you check the validity of an MGA license?

An active license is the basis for any form of License verification. Players can check the license number in the public register of the Malta Gaming Authority to verify if the license is active. This step is crucial, as many sites claim to have an MGA license while it has expired or been revoked. The logo in the footer is not enough; perform an actual License verification in the official register.

The MGA is considered one of the strictest regulators in the world. Providers must meet rigorous requirements for financial transparency, fair gaming software, and complaint procedures. This stands in sharp contrast to jurisdictions like Curaçao, where regulation is less strict and access to the market has lower barriers. By performing the License verification correctly, you filter out unreliable operators that may work with unsafe software or refuse to pay out.

Payment methods and game selection: what extra does an MGA casino offer?

The question of whether playing at an MGA casino without Cruks is legal has direct consequences for your payment options and game choice. Although the Gaming Authority (Ksa) exerts pressure on Payment providers to block transactions, international platforms remain accessible through alternative channels. Players here often choose Cryptocurrency or e-wallets to achieve Fast payouts, while the game selection is expanded with titles that are restricted in the Netherlands. This freedom, however, comes with less consumer protection than with legal providers.

Are iDEAL and Trustly available at MGA casinos?

For Dutch players, iDEAL is the standard for online payments, but its availability at casinos without Cruks is complex. iDEAL, a direct bank transfer service, is used by many legal casinos due to its high reliability and link with Dutch banks. However, transactions can be refused by payment providers complying with Ksa guidelines. This means that iDEAL is not always guaranteed to work at MGA casinos, although some platforms still offer access through intermediaries or specialized payment gateways.

Trustly often acts as an alternative within this category of instant banking. While iDEAL is strictly tied to Dutch banks, Trustly offers broader European coverage. However, here too, availability decreases as pressure on compliance increases. In tests, players often notice that methods that are advertised fail in practice for Dutch IP addresses or bank accounts. The risk of blocked transactions is real, leading to frustration and potential delays when depositing play money.

Why do players choose cryptocurrency as a payment method?

When traditional options like iDEAL and Trustly are blocked, Cryptocurrency becomes a crucial alternative. Cryptocurrency, such as Bitcoin or Ethereum, offers a decentralized payment method that does not depend on intermediaries like banks. This ensures a higher level of Anonymity, as transactions are not directly linked to personal bank details in the way iDEAL is. For players who value privacy or who are in the Cruks register, this is an important driver, although bypassing self-exclusion carries serious risks.

In addition, Cryptocurrency is strongly related to Fast payouts. Traditional bank transfers can take days, while crypto transactions are often processed within minutes or a few hours. This speed makes Cryptocurrency attractive to players who want immediate access to their winnings. However, the volatility of crypto and the lack of chargeback options in case of errors represent a disadvantage compared to the protection that Payment providers offer with legal methods.

Which unique games can be found outside the Dutch market?

The game selection at MGA casinos differs significantly from that of Dutch providers due to less strict restrictions. A striking example is crash games, a popular category. These games belong to the Crash games category, where players must decide when to cash out before a graph 'crasht'. This type of game is often banned or only limitedly available in the Netherlands due to the high speed and risk of addiction, but is a standard part of the Game selection on international platforms.

In addition to these games, these casinos often offer slots with higher RTP (Return to Player) and features like 'bonus buy', which are restricted by the Ksa. The freedom in the Game selection means that players have access to a wider variety of software providers. This contrasts with the Dutch market, where the offering is restricted to KSA-compliant selections. Although this diversity is attractive, players must be aware that the game rules and payout structures may be less transparent than with licensed providers.

Risks of playing without Cruks: what do you need to know?

The question of whether playing at an MGA casino without Cruks is legal often leads to confusion, but the biggest risk does not lie in criminal prosecution, but in the absence of safety nets. Without a link to the Central Register for Exclusion of Gambling, the automatic block for vulnerable players is removed, lowering the barrier to gambling addiction. Although the MGA license uses EU standards, it does not offer direct access to Dutch dispute resolution or the protection of the Ksa.

What are the consequences of the absence of Cruks?

The Central Register for Exclusion of Gambling (Cruks) acts as the central database for self-exclusion in the Netherlands. With legal providers, this register must be consulted, but casinos without a Dutch license do not check this register. This means that players who have excluded themselves due to gambling problems can still access these platforms. The relationship between Cruks and the Central Register for Exclusion of Gambling is therefore technically absent with foreign operators, removing the main barrier against problematic gambling.

For players with a tendency towards gambling addiction, this poses a concrete danger. Without the central block, it is harder to limit access to gambling sites, as the player themselves is responsible for monitoring their limits. In our tests, we see that foreign casinos often apply higher betting limits and less strict verification processes, which can facilitate impulsive behavior. The absence of this link means that the government does not proactively intervene when gaming behavior becomes risky.

What alternative tools are there for responsible gaming?

Because the automatic protection of Cruks is missing, players must take the initiative themselves. Self-exclusion is possible at many MGA casinos, but this works per platform. You exclude yourself from one provider, but not from all other sites as is the case with Cruks. This form of Self-exclusion is therefore less effective for someone trying to stop completely, as it does not impose a network-wide block.

For professional help, organizations such as Loket Kansspel and AGOG (Anonymous Gamblers Anonymous) are crucial alternatives. Loket Kansspel offers free and anonymous advice for anyone with questions about gambling, while AGOG specializes in peer support and guidance for gambling addiction. These organizations fill the gap created by the absence of Dutch legislation. It is essential to contact Loket Kansspel as soon as you notice you are losing control, as there is no external party to flag this for you.

How do you resolve disputes at a foreign casino?

In case of conflicts with an MGA casino, you cannot turn to the Dutch Gaming Authority. Dispute resolution then proceeds via the complaint procedure of the Malta Gaming Authority (MGA) or an independent mediator. This process is often more time-consuming and complex than the formal route via the Ksa desk, which can make binding rulings for Dutch license holders.

Players must realize that the Dutch court has less jurisdiction in these matters. If a casino closes an account or refuses a payout, you are dependent on the goodwill of the operator and the rules of the MGA. It is advisable to only play at providers with a track record of fair Dispute resolution. Always check if the casino is affiliated with an independent testing agency, such as eCOGRA, before depositing money. This offers an extra layer of security outside of Dutch legislation.

For those who still need help managing their gaming behavior, organizations like Loket Kansspel and AGOG are available, regardless of where one plays. It is essential to continue gambling responsibly, even when the technical limitations of Cruks are absent.

Related articles

• In 2026

About this article - editorial guidelines

Author: Sarah Weber - Casino tester & bonus analyst

Fact-checked by: Dr. Markus Hoffmann - Senior iGaming Compliance

Analyst last updated: 2026-07-20.

This article about "is playing at MGA casino without Cruks legal" was written by Sarah Weber and fact-checked by Dr. Markus Hoffmann. Both regularly update the content for changes in regulations, licenses, and bonus terms. All references to licenses, regulators, and legislation link to public sources (the local gambling regulator, the applicable local gambling law).

About the author

8+ years of experience reviewing casinos, 200+ personally tested platforms in the EU and worldwide. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout processes, customer service evaluation.

About the reviewer

12+ years of experience in the iGaming industry, including 5 years as a compliance advisor for licensed operators in multiple regulated markets. PhD in economic mathematics. Focus areas: bonus mathematics, wagering analysis, and player protection systems.

Responsible gambling

Gambling can be addictive. If you feel you are losing control of your game, please contact the relevant helpline for gambling problems or use the national register for self-exclusion (the relevant national register for self-exclusion). Set personal limits for deposits and losses BEFORE you play with real money. Operators offer pause and cool-down tools to keep the game sustainable.

Legal notice

The information in this article is provided solely for editorial and comparison purposes and does not constitute legal advice. Players are responsible for compliance with local regulations.