After cyber incidents at the Malta and Curaçao gaming regulators in 2026, operators are asking where their sensitive data is safest. The Isle of Man, smaller and more tightly regulated since the King Gaming case, still insists on knowing its licensees personally, and that caution now looks like a strength. It is not the cheapest or quickest route to market, but it is built for longevity.
Every licensing decision is, at heart, a decision about trust. Trust that the regulator will still be there in ten years' time. Trust that its standards will be respected by banks, payment providers and suppliers, as these are the key parties for which companies obtain a licence in the first place. And, increasingly, trust that all the sensitive information you hand over (ownership structures, source-of-funds evidence, the passports of your directors and beneficial owners) will stay exactly where you left it.
Why are operators asking questions in 2026?
2026 has stress tested that last assumption. In March, the Malta Gaming Authority confirmed it had been the target of a cyber attack. In September, the Curaçao Gaming Authority disclosed unauthorised access to its online licensing portal, later confirming that the access had been gained through an account registered under a false identity and had gone undetected for several months. Both breaches have been publicly linked to the same German hacker, and both regulators have responded promptly and openly.
We certainly have every sympathy for industry colleagues working through the consequences, and nobody should take pleasure in another jurisdiction's difficulties. But operators are, quite rightly, asking questions, and for a growing number of them those questions lead back to a jurisdiction some had quietly written off: the Isle of Man.
What went wrong in the Isle of Man, and what changed?
Let's be honest here: the last few years have not been the Island's finest hour. The King Gaming case, in which a licence was suspended in April 2024 amid a police investigation and cancelled that summer, drew international headlines and prompted hard questions (in the press and on the Island itself) about how due diligence had been applied. The licensee base shrank drastically as a number of operators left the Island following the scandal. The goal of having 100 licences based here has moved so far into the distance that it is beyond the vanishing point.
What happened next matters more. The Isle of Man's online gambling sector is today smaller, more tightly regulated and subject to more rigorous scrutiny than at any point in its history. The Island did what it has always done after a storm: it took stock, tightened up, and came back stronger. Let's not forget that this place has the oldest continuous parliament in the world, Tynwald, and it has learned a thing or two in more than 1,000 years of existence.
Why does the Island's careful approach help with security?
The Isle of Man, a place where 'Time Enough' is an official slogan, has sometimes been gently teased for not rushing to adopt every digital shortcut. Here, a gambling licence application still means real conversations with real people. Licensees are expected to have genuine substance on the Island, with local directors, a designated official and a working relationship with the regulator measured in years rather than log-ins. At Gambling Supervision Commission (GSC) hearings, it is customary to have the ultimate beneficial owner (UBO) present as well as the directors, and everyone knows each other beyond plain application forms.
For a long time, that was described as friction, but right now it looks a great deal more like prudence. When onboarding is designed first and foremost for speed and convenience (as is now the case in many other jurisdictions that use online portals, for example), the simple question of who is actually on the other side of the screen becomes harder to answer. A regulator that insists on knowing its applicants properly, personally and at length is a regulator that is much harder to deceive.
Security, in the end, is not only a matter of firewalls. It is a question of culture, and a culture of caution is something the Isle of Man has never been short of.
What does the Isle of Man offer iGaming businesses?
Locals have long called the Island simply 'the Rock', and its ancient motto, Quocunque jeceris stabit ('whithersoever you throw it, it will stand'), displayed proudly around the national three legs shield, has rarely felt more apt. This rock in the Irish Sea has a lot to offer the iGaming industry right now.
- ExperienceMore than two decades of dedicated online gambling regulation under the Online Gambling Regulation Act 2001. One of the true Tier 1 pioneers of the industry.
- StabilityA self-governing Crown Dependency with its own parliament, Tynwald, and a predictable, consultative approach to legislation. No uprisings or political surprises here.
- CredibilityA licence that banks, payment providers and B2B partners recognise and respect. Being able to say you have a British licence is still a great argument for trust and credibility.
- DepthA mature ecosystem of lawyers, compliance specialists, accountants, banks and data-centre providers who understand the sector. Many of them have been in it from its very beginning and come with a wealth of knowledge that is unmatched anywhere else.
Is now the right time to look at the Isle of Man again?
Let's be clear: an Isle of Man licence is not the cheapest or the quickest route to market, and it has never pretended to be. It is a jurisdiction for businesses that intend to be around for the long term, and that want the right footing in an ever more regulated industry and world.
So is now the right time to look at the Isle of Man again for a B2B or even a B2C licence? For operators and suppliers who value a licence built for longevity, one that reassures their partners, protects their data and stands up to scrutiny, the answer is increasingly yes. The Isle of Man is open for business: for the right business, done the right way.
Considering the Isle of Man for your gaming licence? At Manavia, our iGaming specialists, supported by our seasoned corporate services team, have guided businesses through the Island's regulatory landscape for years, from structuring and substance to licensing and ongoing compliance. Let's talk.
Frequently Asked Questions
In 2026 the Malta Gaming Authority and the Curaçao Gaming Authority both disclosed unauthorised access to their systems. Operators are asking where their sensitive ownership and source-of-funds information is safest, and the Isle of Man's careful, personal approach to regulation is drawing renewed interest.
King Gaming's licence was suspended in April 2024 amid a police investigation and cancelled that summer. The case prompted hard questions about due diligence, and since then the Island's online gambling sector has become smaller, more tightly regulated and subject to more rigorous scrutiny.
Licensees are expected to have genuine substance on the Island, with local directors, a designated official and a long-term working relationship with the regulator. At Gambling Supervision Commission hearings it is customary for the ultimate beneficial owner to attend alongside the directors.
For more than two decades, under the Online Gambling Regulation Act 2001, making it one of the Tier 1 pioneers of the industry.
No. An Isle of Man licence is not the cheapest or quickest route to market. It suits businesses that intend to be around for the long term and want a licence that banks, payment providers and partners recognise and respect.
Manavia's iGaming specialists, supported by its corporate services team, guide businesses through the Island's regulatory landscape, from structuring and substance to licensing and ongoing compliance.
This article is for general information only and does not constitute legal, tax or financial advice. You should take independent professional advice on your own circumstances. Manavia Limited is licensed by the Isle of Man Financial Services Authority to provide Corporate and Trust Services.
