What an offshore casino licence actually means for a Malaysian player

Start with the fact that frames everything else: Malaysia does not license online casinos. There is no Malaysian regulator you can complain to, no Malaysian licence a casino could hold, and no legal framework here that obliges an online casino to pay you. Every casino on iamcasino operates from outside Malaysia under a foreign licence — or under no licence at all.

That does not make every offshore licence meaningless. It does mean you should understand what a licence badge is a promise of, and what it is not. This guide goes through the licences you will see on profiles here, in roughly descending order of how much they demand of the operator.

How we show licences on this site

Each casino profile shows the licence the operator claims and the date we last checked that claim against the regulator's public register or the operator's own licence page. We write "checked on 12 Mar 2026", never "verified by the regulator" — we cannot verify anything on a regulator's behalf, and a licence that was valid when we looked may have lapsed since.

When a casino claims a licence we cannot find, or provides none, the profile says so plainly: "Unverified — we could not confirm a licence." That is not an accusation; it is an absence of evidence, and you should weigh it that way. Licence status never affects TrustScore, which is built only from player reviews.

Two claims you will still see on many Malaysian-facing sites are also shown as unverified, for reasons set out below: a PAGCOR licence, and a Curaçao licence that quotes an old master-licence number (such as 365/JAZ) or no number at all.

Malta Gaming Authority, Isle of Man, Gibraltar: strict, and mostly not for you

These European regulators impose real obligations: segregated player funds, independent game testing, dispute resolution through an approved body, anti-money-laundering checks, and licence revocation that actually happens. Players in the jurisdictions they serve get genuine protection.

The problem for a Malaysian player is that these licences usually do not cover Malaysia. Most MGA- and Isle of Man-licensed operators geo-block Malaysian IP addresses or exclude Malaysia in their terms. If you are playing on one from Malaysia through a VPN or a loophole, you are outside the licensed relationship, and the regulator's dispute service will typically decline your complaint on that basis. The badge is real; the protection does not travel.

PAGCOR: no longer licensing offshore sites

PAGCOR is the Philippine state gaming regulator. For years its offshore gaming licences (first called POGO licences, later restructured) let operators based in the Philippines serve players abroad, and many Malaysian-facing casinos claimed one. That ended with the Philippine government's ban on offshore gaming operations, which took effect at the end of 2024. In June 2025 PAGCOR publicly warned that offshore sites claiming its licence are not authorised by it.

So a PAGCOR badge on a Malaysian-facing casino in 2026 is a claim with nothing current behind it, and this site shows it as unverified. Even while those licences existed, PAGCOR was not a consumer ombudsman for a Malaysian player: there was no complaint desk that would make a licensee pay you a RM20,000 win held up by an "account review".

Curaçao: the most common badge, and a system that changed in 2025

Until 2024, a Curaçao licence almost always meant a sub-licence under one of four private master licences, with numbers such as 365/JAZ or 8048/JAZ, and minimal oversight. A reform created a new regulator, the Curaçao Gaming Authority (CGA), which now licenses operators directly, and the old master licences and their sub-licences had lapsed by early 2025. A current Curaçao licence therefore carries its own CGA number. A badge that quotes 365/JAZ, or shows no number at all, points to the old system, and this site shows it as unverified.

Practically, a Curaçao licence has historically been easy to obtain, easy to keep, and rarely enforced on behalf of players. Its main value to you is negative: an operator that cannot even produce a Curaçao licence is choosing not to clear a very low bar. Treat the badge as "this operator exists as a company" rather than "this operator is supervised".

• Check that the licence number on the casino's page matches a live entry on the regulator's validator, not just a seal image.
• A seal image that does not click through to a validation page proves nothing — anyone can copy a PNG.
• Note the licensed company name. If it is unrelated to the casino brand, the brand may be one of many run under a single licence.

Kahnawake and others

The Kahnawake Gaming Commission, based in a Mohawk territory in Canada, has licensed online gambling since the late 1990s. It has a functioning complaints process and does adjudicate player disputes, including for players outside Canada, which makes it somewhat unusual among the licences on this list. Its standards sit somewhere between Curaçao and the European regulators.

Anjouan, an autonomous island of the Union of Comoros, has become a common alternative as Curaçao tightened, and several Malaysian-facing operators now list one. Its licence numbers follow an ALSI- format and can be looked up on the regulator's public register. It is an offshore licence with no consumer ombudsman for a Malaysian player, and our facts score gives it the fewest points of any named licence.

You may also see references to licences from Costa Rica. Costa Rica issues business licences, not gambling licences, so an operator "licensed in Costa Rica" is regulated by nobody. We list such claims as unverified.

So what should you actually rely on?

Your practical protection as a Malaysian player comes from three places, none of which is a licence. First, the operator's track record of paying, which is what the reviews on this site document. Second, your own limits: never deposit more than you can afford to lose entirely, because "lose entirely" is a real outcome if a casino simply stops paying. Third, your own compliance with Malaysian law, which is your responsibility and not something any offshore licence changes.

Read the licence line on a profile as one signal among several. Then read the one- and two-star reviews filtered to the last six months, and pay far more attention to those.