Online casino Malaysia: what the top brands’ licences really show

Online casino Malaysia: what we found in eight licence checks

• Maxim88
  What it claims“Certified and licensed by international gambling authorities including BMM and iTech Labs” (homepage); Curaçao and PAGCOR (landing page); no number or company

  What the register showsNo entry on the Curaçao, PAGCOR, Anjouan or UK registers; its Curaçao licence link points to an unregistered domain
  Read the full Maxim88 check →
• BK8
  What it claimsAnjouan, ALSI-202504032-FI2, Mettlemind Tech Ltd (footer); a Curaçao master licence (FAQ)

  What the register showsAnjouan licence valid to 28 Apr 2027 for five domains; the Malaysia-facing domain is not one of them; Curaçao claim not on the registers
  Read the full BK8 check →
• me88
  What it claimsAnjouan, ALSI-202606029-FI1, S Tier Solutions Ltd (footer); Curaçao, UKGC and PAGCOR (About Us)

  What the register showsAnjouan licence valid to 11 Jun 2027 for two domains; Curaçao record for me88.com shows “Revoked”; no UK or PAGCOR entry
  Read the full me88 check →
• 96M
  What it claims“Fully licensed and regulated by the Curaçao Gaming Control Board” (gateway page); a Curaçao master licence, #255/HF5, in site settings; no company

  What the register showsNo entry on any Curaçao register; no 96M entry on the Anjouan, PAGCOR or UK registers; licence link points to an unregistered domain
  Read the full 96M check →
• Stake
  What it claimsCuraçao Gaming Authority, OGL/2024/1451/0918, Medium Rare N.V.

  What the register showsListed with matching company and number; status “Assessment in progress”, listed expiry 9 Jun 2026
  Read the full Stake check →
• 12Play
  What it claims“Regulated and licensed by the Government of Montenegro … E-Gambling Montenegro”; no number or company

  What the register showsNot on Montenegro’s government list of online operators; seal points to a private .com with no register
  Read the full 12Play check →
• Winbox
  What it claims“Fully licensed by Gaming Curacao”; PAGCOR (agent sites only, no number or company)

  What the register showsNo operator names a company; not on the Curaçao, PAGCOR or UK registers under its name
  Read the full Winbox check →
• Mega888
  What it claims“Licensed and regulated by the Gambling Commission” (no country or number); “GLI Certified”

  What the register showsNo company named; not on the Curaçao register; no GLI certificate found
  Read the full Mega888 check →

Logos identify each brand only, and none links to an operator. They were taken from the brands’ own sites on 28 October 2026; Stake’s is from Wikimedia Commons. Neither Winbox nor Mega888 has a site we could confirm as official, so their logos are the ones shown on sites using those names (winboxmy.com and mega888company.org), taken on 29 October 2026.

These cards are the short version of our online casino Malaysia licence checks, and their order is not a ranking. Each brand name opens a full licence check, with every source dated. Three results stand out.

First, a real licence often covers a different website. BK8’s and me88’s Anjouan licences are both listed as valid, but neither names the domain that actually serves Malaysian visitors. In BK8’s case, the seal on the Malaysian site validates only for another domain^[3][5]. Second, old claims linger next to new ones. BK8’s FAQ still claims a Curaçao licence that Curaçao’s registers do not show, and Curaçao records me88’s old certificate as revoked^[6][7]. Third, five of the eight brands could not be tied to any regulator. Maxim88, 96M, Mega888 and Winbox name no company at all, and 12Play’s Montenegro claim is absent from the Montenegrin government’s own list of operators^[8][9][10]. Maxim88 and 96M both cite Curaçao master licences that Curaçao’s current registers do not show, and both point their licence links at a domain nobody has registered^[4][11].

Is online casino legal in Malaysia? The law in one minute

The Common Gaming Houses Act 1953 defines a gaming machine to include “any computer program” used to play a game of chance for winnings^[1]. On that basis a phone running a casino app is a gaming machine. The Act creates several offences:

• gaming in a common gaming house or in a public place, with a fine of up to RM5,000, six months in prison, or both;
• running such a place, with heavier penalties;
• publishing or soliciting for it, also with heavier penalties^[1].

The courts have applied the Act online. In October 2023 the Court of Appeal held that computer gambling falls within it without any physical equipment^[12]. In September 2026 Kuching magistrates fined phone players under it^[2][13]. Muslims face a separate Syariah offence, with a fine of up to RM3,000 or two years in prison in the Federal Territories^[14].

A new law to tackle online gambling was announced in February 2026. We found no report that it had been tabled by 28 October 2026^[15]. Our full guide to whether online casinos are legal in Malaysia sets out each provision, the case facts and what remains unsettled.

Why the licence claim matters more in Malaysia

In a regulated market, a player with a dispute can go to a national regulator. In Malaysia there is no such route for online casinos, because none is licensed. Whatever foreign licence a site holds is the only accountability on offer. If that licence is fake, lapsed or attached to a different domain, there is none.

Blocking makes this worse. In the 17 months to May 2026, internet providers blocked 1,778 gambling websites at the MCMC’s request^[16]. Brands respond by moving between domains. In our own tests from a Malaysian connection, older domains for six of the eight brands failed to load while newer ones worked^[17]. Copycat sites use the same churn, so the real site and the fake one look alike.

Money moves through ordinary Malaysian channels: DuitNow, e-wallets and local bank transfers. One brand’s FAQ tells customers not to put its name or “any sensitive words related to gambling” in the transfer reference^[6]. A customer who later has a problem has a weak legal position, a payment trail made deliberately vague, and an operator whose terms in several cases do not name the company behind it^[18][19].

What online casino Malaysia welcome bonuses actually require

Every brand we checked that states how its welcome wagering is calculated applies it to the deposit plus the bonus, not the bonus alone. Maxim88 is the exception that does not say. That is why the requirement gets so large so quickly. Here are the operators’ own figures, worked through^{[20][21][22][23]}:

None of these promotion pages states a maximum bet or a maximum cashout. me88’s terms say that if the requirement is not met within 30 days, all winnings made with bonus funds are revoked^[21]. Stake publishes no public welcome offer. Where it does attach a deposit bonus, it sets the turnover by expected house edge rather than by a simple multiple^[24].

How to read our licence checks

Each check ends with one of three results. Listed on the register means the regulator’s own record shows the same company and licence number the site gives. Claimed but not found means the site names a licence that we could not match to any register. No licence claim means it names nothing at all. We give no scores or stars, because a number would suggest a precision that desk research cannot give honestly.

We have not opened accounts, deposited or played anywhere, and we never describe anything as tested. Where we quote withdrawal times or bonus terms, they are the operator’s own words, read on the date shown. Anything we could not confirm is labelled unconfirmed. If you want to run the same checks on a site we have not covered, our step-by-step guide to checking an offshore casino licence shows how, register by register. The full method, including what we will not do, is on our page explaining how we check licences.

Before you put money anywhere

If you are weighing up an offshore site, answer these honestly first:

• Do you accept that playing from Malaysia is an offence, and that police have checked phones in cafés?
• Can you name the company you would be paying, and find it on a regulator’s register under the domain you are using?
• Have you worked out the full turnover on any bonus, on the deposit plus the bonus?
• Could you afford to lose the deposit with no one to complain to?
• Is any of this money meant for something else?

If the honest answer to the last question is yes, or if you are reading this because you are trying to win something back, the licence is not the problem to solve. Our guide to free, confidential gambling help in Malaysia lists people who will talk to you today, including Befrienders KL on 03-7627 2929, 24 hours a day^[25].