Before You Register at a Malaysian Online Casino: 6 Checks to Make First

Desk research, checked 2 October 2026. This checklist is built from the regulators’ own public registers (Anjouan, the Curaçao Gaming Authority, the Malta Gaming Authority and the Isle of Man Gambling Supervision Commission), PAGCOR’s public notice on offshore licences, a casino’s published terms, the Common Gaming Houses Act 1953 and Betting Act 1953 as published by the Attorney General’s Chambers, Parliament’s list of 2026 bills, and the news reports listed under Sources. Nothing on this page is a first-hand account of opening an account or depositing. How we work: our review methodology.

Filling in a casino’s sign-up form takes two minutes. The checks that should come before it take about ten, and they are the part that protects your money. A licence that turns out not to exist, a Register button that opens a different casino, a bonus that locks your balance, a deposit sent to a stranger’s bank account: each of these can be spotted before you type your name or your IC number.

This guide is for anyone about to daftar akaun at a Malaysia-facing online casino. It is not encouragement to register. It sets out six checks, in the order we suggest making them, and then what the sign-up form should and should not ask you for.

Read this first. In Malaysia, gambling online with an unlicensed operator is an offence for the player as well as the operator, and an overseas licence is not a Malaysian licence. Check 6 sets out the law, including a 2023 Court of Appeal ruling on online play and the new law the government says it is drafting.

The six checks at a glance

Check 1: Look the licence up on the regulator’s own register

A licence logo in a casino’s footer is a picture, and anyone can paste one. What you can check is a licence number and the name of the company that holds it. Find both on the casino’s site (usually the footer, the About page or the terms), then open the issuing regulator’s own public register and search for them. The four registers you are most likely to need:

• Anjouan: the Anjouan Gaming licence register. As at 2 October 2026, six of the seven casinos on our Malaysian ranking hold Anjouan licences, so this is the register you are most likely to use.
• Curaçao: the Curaçao Gaming Authority’s licence register and its certificate portal.
• Malta: the Malta Gaming Authority’s licensee register.
• Isle of Man: the Gambling Supervision Commission’s online gambling licensee register.

If the casino names a licence you cannot find on that regulator’s register, treat the claim as unproven, and do not register.

Read the expiry date, not the status column

Anjouan’s own licence status definitions list four statuses (Active, Suspended, Revoked and Expired) and say that only an Active licence holder may carry on licensed gaming. But when we downloaded the full register on 2 October 2026, all 1,540 rows carried the same status, “valid”, including 347 whose own expiry date had already passed, the oldest on 18 July 2025. The register’s disclaimer says it “is updated periodically and may not reflect changes that have occurred since the most recent update”, and asks for time-sensitive checks to go to the Authority directly.

So the column that matters is the expiry date. If it has passed, treat the licence as expired, whatever the status says. Curaçao needs the same habit: in the Curaçao Gaming Authority’s own licence list, dated 21 September 2026, the licences it lists with both an issue date and an expiry date run for six months at a time, and the regulator warns that its overviews “do not guarantee the current validity of the licenses”. A licence that checked out half a year ago needs checking again.

Match the company and the web address

A register entry names a company and lists the web addresses that company has notified to the regulator. Check that the company in the casino’s terms matches the one on the register, and that the address in your browser is on the list. Anjouan’s disclaimer is careful about what a listed address proves: it “confirms only that the domain has been notified to the Authority as associated with licensed activities”, not who owns it. A mismatch is not always fatal, but it should be explained. Even on our own ranking, BK8’s Anjouan licence is current while the register lists other BK8 web addresses, not the Malaysian lobby our button opens, and BK8’s card says so.

A PAGCOR offshore licence no longer exists

Some Malaysia-facing sites still show a PAGCOR logo or say they are licensed in the Philippines. PAGCOR’s own public notice says that, following Executive Order No. 74, “ALL Internet Gaming Licensees and Authorized Providers were cancelled effective December 15, 2024”, and that any website claiming a valid offshore or internet gaming licence from PAGCOR “is fraudulent and unauthorized”. Our UEA8 review shows what that looks like in practice: a working casino, which we rate Not Recommended, whose only licence evidence is a PAGCOR claim the regulator itself disowns.

An offshore licence is not a Malaysian licence

An Anjouan, Curaçao, Malta or Isle of Man licence is issued under that jurisdiction’s law. It tells you which regulator the company answers to and where a complaint can go. It does not make playing legal for you in Malaysia, and it does not give you a Malaysian body to complain to. Check 6 explains why.

Check 2: Check the exact web address

Copies of real casino sites are built to look identical: the same logo, the same layout, and an address that differs by one letter or ends in a different suffix. The register entry from Check 1 is your reference list. Compare the address in your browser with the addresses on it, character by character.

• Type the address yourself, or use one you have already checked and bookmarked. Do not tap a link from a WhatsApp, Telegram or Facebook group, however generous the message that comes with it (“free credit if you register today”).
• Distrust short links. A shortened URL hides where it goes until you have tapped it.
• Re-check when the address changes. The Communications Ministry told Parliament that internet providers blocked 1,778 gambling websites at the MCMC’s request between January 2025 and May 2026, as The Star reported on 16 July 2026. A link that worked last month may lead somewhere else today, and a new address deserves the same check as the first one.

Check 3: See where the Register button really goes

On a casino’s own site, the Register button opens that casino’s sign-up form. On many pages that merely carry a casino’s name and logo, it does not. Such pages can be built by marketers rather than by the casino, and their buttons go wherever the page owner is paid to send you.

Our investigation of a network of 40 Malaysia-facing casino sites found their sign-up buttons routed through the same handful of link shorteners. On one MyTown33-branded page, the Register link, resolved twelve times in a row, opened sign-up forms at three other casinos and never at MyTown33 (a brand we rate Not Recommended). Whatever terms a reader studied on that page would not have applied to the account they opened.

1. Before tapping, read the link. Hover over the button on a computer, or press and hold it on a phone. If it points to a link shortener rather than the casino’s own domain, you cannot know where it will take you, and it may not be the same place twice.
2. After it opens, check the address bar and the logo against the register entry from Check 1. A different brand means close the page.

Check 4: Read the terms before you tick the bonus box

The landing page shows the headline; the terms page holds the contract. Before you register, find and read:

• The wagering (rollover) requirement, and whether it applies to the bonus alone or to deposit plus bonus. Our wagering and rollover guide works through examples in ringgit.
• The maximum cash-out and the maximum bet allowed while a bonus is active.
• Game weighting: some games count for little or nothing towards the requirement.
• Identity checks and account rules: which documents the casino can ask for, and what it can do to your account and balance if something does not match.

A worked example. A 10x rollover on a RM100 bonus means RM1,000 in bets before the bonus clears (RM100 × 10). If the same 10x applies to deposit plus bonus, a RM100 deposit with a RM100 bonus means RM2,000 in bets (RM200 × 10). Same headline, double the turnover, and only the terms tell you which one you are agreeing to. Our bonus T&C red-flags dictionary explains each clause in plain language. Leave the bonus box unticked until you have read its terms: decide after reading, not before.

Read the rules on accounts too. WE88, one of the casinos on our ranking, says in its terms that customers “must be at least 18 years of age in order to place bets”, that it can ask for proof of age and suspend the account until it gets it, and that duplicate accounts registered “by using deliberately manipulated personal details” may lead to “the irreversible termination of the gaming account access”, with a right to “revoke all accumulated winnings”. Register once, in your own name, with your true date of birth.

Check 5: Find out who receives your money

Before your first deposit, find out who will receive it. When a site’s “deposit” is an ordinary bank or e-wallet transfer to an account it gives you, you are making a person-to-person payment, and our TNG eWallet deposit guide explains why TNG Digital’s own refund policy does not cover that kind of payment. Stop if you see any of these:

• The payee is a private person. Read the payee name your banking app shows before you confirm. A personal name with no link to the brand means you are paying an individual, not the company whose terms you read.
• An agent sets up the account for you. Some app-based games are sold through agents on WhatsApp or Telegram, who create a game ID for you and top it up by hand after you transfer money to them. There is no account in your name, and often no published terms to hold anyone to.
• A fee to “verify”, “activate” or “unlock” anything. A sign-up does not need one, and neither does a withdrawal of your own money.
• Anyone asking for an OTP, a TAC, your online-banking login or your card PIN. A casino sign-up never needs your bank’s codes. Never read an OTP out to anyone.

Before paying an account you do not recognise, check the account number or phone number on Semak Mule, the police Commercial Crime Investigation Department’s portal for checking bank accounts, phone numbers and company names used in commercial crime cases. Then start small, with an amount you can afford to lose completely, and keep screenshots of the cashier page, the terms in force and the payment confirmation.

Check 6: Your age and the law

Age. This site is for readers aged 18 and over. Each casino sets its own minimum age in its terms (WE88’s, quoted above, is 18) and can ask you to prove it. Being old enough for a casino’s terms does not make playing legal in Malaysia.

The law penalises players. Two Acts from 1953 cover players, not just operators. Section 6(1) of the Common Gaming Houses Act 1953 makes it an offence for “any person who games in a common gaming house”, and section 6(1) of the Betting Act 1953 covers anyone who bets “with a bookmaker on any premises or by any means”. Each carries a fine of up to RM5,000, up to six months’ jail, or both.

The courts have applied this to online play. On 18 October 2023 the Court of Appeal upheld the conviction of a retired policeman charged with playing roulette at an online casino on a laptop in a Melaka condominium. It held that no physical gaming machine had to be on the premises: showing that gambling took place using computers was enough. Free Malaysia Today reported the ruling as making online gambling an offence in Peninsular Malaysia under the Common Gaming Houses Act.

A tougher law is being drafted. In a written parliamentary reply reported by the New Straits Times on 28 January 2026, Home Minister Saifuddin Nasution Ismail said the police had proposed a review of the existing laws, and that ministries, the Attorney-General’s Chambers and the National Cyber Security Agency were studying amendments, including proposals to amend the Common Gaming Houses Act 1953 and to add online gambling offences to the proposed Cyber Crime Bill. On 15 February 2026, Deputy Prime Minister Fadillah Yusof said the government was drafting a law to address illegal gambling, either as a new Act or as amendments to laws such as the Common Gaming Houses Act, and hoped to table it at the next Parliament sitting (reported by The Star and Free Malaysia Today). As at 2 October 2026, the Dewan Rakyat’s list of 2026 bills contains no gambling bill, and the Cybercrimes Bill 2026, passed by the Dewan Rakyat on 1 July 2026, contains no gambling offences in the text published on Parliament’s website. Until a new law is passed, the 1953 Acts above are the ones that apply.

Muslims face a second offence. Section 18 of the Syariah Criminal Offences (Federal Territories) Act 1997, which applies to Muslims in Kuala Lumpur and Labuan (and, by a 2002 order, Putrajaya), makes gambling an offence punishable by a fine of up to RM3,000, up to two years’ jail, or both. That is the Federal Territories Act; the states legislate separately.

None of this is legal advice, and we are not lawyers. Our guide to Malaysia’s online gambling laws sets out the legal position in more detail.

What the sign-up form should and should not ask for

If you have made the six checks and still want to go ahead, the form itself is short. A casino’s own self-service sign-up usually asks for:

• A username and password. Use a password you have never used for email, banking or an e-wallet.
• A mobile number, usually confirmed with a one-time code sent to you. The code is for you to type in, never to read out to anyone.
• Your full name, exactly as on your IC, and your true date of birth. Identity checks compare them with your documents and your bank account.
• A currency. Choose MYR if it is offered, to avoid conversion costs.
• A promo or referral code, which is optional. Leave any bonus unticked until you have read its terms (Check 4).

It should never ask for your online-banking username or password, a card PIN, a TAC or OTP for your bank or e-wallet, or a “verification fee”.

Identity documents (an IC or passport, proof of address, proof of the payment method) can be requested later; WE88’s terms, for example, say it may demand documents to verify you as the account holder during a security check. Upload them only inside your account, on the address you checked in Check 2, and never over chat to someone who cannot point you to the casino’s terms.

If you have already paid a fake site

If you sent money through a fake registration or “claim” link, or to an account that has stopped answering, call the National Scam Response Centre on 997, then lodge a police report anyway. Contact your bank or e-wallet provider at the same time and ask about freezing the transfer, and keep every screenshot. Brands we warn against are listed on our blacklist.

Where to start, if you go ahead

The quickest way through Check 1 is to start from casinos whose licence has already been checked. Our licence-checked list of Malaysian online casinos ranks only casinos whose licence the regulator’s own register confirms, and each card says which web addresses the register covers. Make Checks 2 to 5 yourself anyway: addresses, buttons and terms change.

Set a limit before you sign up

Decide your budget before you register, not after your first deposit, and treat it as money spent, not money invested. If you find yourself chasing losses or gambling more than you planned, our responsible gambling resources list support services and practical steps. Befrienders KL answers on +603-7627 2929, 24 hours a day, and Gambling Therapy offers free online support worldwide at gamblingtherapy.org. This content is for readers aged 18 and over.

Frequently asked questions

Is it legal to register at an online casino in Malaysia?

Malaysian law penalises players as well as operators. Section 6(1) of the Common Gaming Houses Act 1953 and section 6(1) of the Betting Act 1953 each carry a fine of up to RM5,000, up to six months’ jail, or both, and in October 2023 the Court of Appeal applied the Common Gaming Houses Act to online casino play on a laptop. An overseas licence does not change that. This is a summary of public law, not legal advice.

Apa yang perlu disemak sebelum daftar akaun kasino online?

Enam perkara: nombor lesen dalam daftar rasmi pengawal selia dan tarikh tamat tempohnya; alamat web yang tepat; ke mana butang Register (Daftar) sebenarnya membawa anda; terma, termasuk syarat pertaruhan (wagering), had pengeluaran maksimum dan semakan identiti; siapa yang menerima deposit anda; serta undang-undang dan umur minimum yang ditetapkan oleh kasino.

How do I check an online casino’s licence?

Find the licence number and the company name on the casino’s site, then search for them on the issuing regulator’s own register: Anjouan, the Curaçao Gaming Authority, the Malta Gaming Authority or the Isle of Man Gambling Supervision Commission. Check the expiry date, and check that the web address you are using is listed. A logo without a number cannot be checked.

Why does the Anjouan register say “valid” next to an expired licence?

On 2 October 2026 every one of the register’s 1,540 rows said “valid”, including 347 whose expiry date had passed. Anjouan’s own disclaimer says the register is updated periodically and may not reflect recent changes. Read the expiry date: if it has passed, treat the licence as expired.

Is a PAGCOR licence valid for a Malaysia-facing casino?

No. PAGCOR says all of its internet gaming licences were cancelled effective 15 December 2024, and that any website claiming a valid offshore or internet gaming licence from PAGCOR is fraudulent and unauthorised. Treat a PAGCOR licence claim as a reason not to register.

Why does a casino ask for my IC?

To confirm your age and identity, usually before a withdrawal or during a security check. WE88’s terms, for example, reserve the right to ask for proof of age and to demand documents verifying the account holder. Upload documents only inside your account on the web address you checked, never over chat.

Can I register with a different name to stay private?

No. Identity checks compare your account details with your IC and your bank account, and WE88’s terms say duplicate accounts opened with deliberately manipulated personal details may be terminated and their winnings revoked. Register once, in your own name.

What should I do if I paid through a fake registration link?

Call the National Scam Response Centre on 997, then lodge a police report anyway, and contact your bank or e-wallet provider at the same time about freezing the transfer. Keep your screenshots of the link, the chat and the payment.

Sources

• Anjouan Gaming — licence register, downloaded 2 October 2026: 1,540 rows, every one with the status “valid”, 347 of them past their own expiry date; also the six licences behind our Malaysian ranking (WE88, Surewin, BK8, GOD55, Rizzy and Eclbet). Licence status definitions and registry disclaimer, read 2 October 2026.
• Curaçao Gaming Authority — licence register page (the “do not guarantee the current validity” caveat) and its Online Gaming License Registry, last updated 21 September 2026 (issue and expiry dates, six-month terms), read 2 October 2026.
• Malta Gaming Authority — licensee register; Isle of Man Gambling Supervision Commission — online gambling licensee register. Both opened 2 October 2026.
• PAGCOR — Remote Operations and Ancillary Services notice to the public: all internet gaming licensees and authorised providers cancelled effective 15 December 2024 under Executive Order No. 74. Read 2 October 2026.
• Laws of Malaysia, Attorney General’s Chambers — Common Gaming Houses Act 1953 (Act 289), section 6(1); Betting Act 1953 (Act 495), section 6(1); Syariah Criminal Offences (Federal Territories) Act 1997 (Act 559), sections 1(2) and 18. Read 2 October 2026.
• Free Malaysia Today — “Online gambling an offence under existing law, rules court”, 18 October 2023, and “New law being drafted to curb online gambling”, 15 February 2026.
• New Straits Times — “Putrajaya mulls stricter laws to curb online gambling”, 28 January 2026.
• The Star — “Govt drafting laws to address online gambling, says Fadillah”, 15 February 2026, and “Over 450,000 online gambling posts removed, 1,778 websites blocked since January 2025”, 16 July 2026.
• Parliament of Malaysia — Dewan Rakyat bills list (22 bills for 2026, none on gambling) and the Rang Undang-Undang Jenayah Siber 2026 (D.R. 8/2026), the Malay text of the Cybercrimes Bill 2026. Read 2 October 2026.
• WE88 — terms and conditions on WE88’s Malaysian site (minimum age, proof of age, duplicate accounts, documents in a security check), read 2 October 2026. Not linked, because Malaysian casino addresses change often.
• Semak Mule (semakmule.rmp.gov.my), Befrienders KL (befrienders.org.my) and Gambling Therapy (gamblingtherapy.org), each checked on its own site on 2 October 2026.