UK Gambling Commission Secures £4.75 Million Settlement from Evolution Malta Holding Limited

The UK Gambling Commission announced that Evolution Malta Holding Limited, a holder of gambling software and remote casino game host licences, agreed to pay a £4.75 million settlement after an investigation found the company supplied online casino games to six unlicensed websites accessible to consumers in Great Britain. The breaches covered money laundering risk assessments, supply chain oversight, and customer due diligence, and they took place between December 2023 and November 2024, when significant UK consumer traffic reached the sites. Evolution has since strengthened its controls.
Details of the Investigation and Settlement
Officials at the Commission examined how Evolution Malta managed its supply of games and identified failures in three core areas required under licence conditions. The company had not completed adequate money laundering risk assessments for the operators it served, it lacked sufficient oversight of its supply chain, and it did not apply proper customer due diligence checks before allowing access to the unlicensed platforms. According to the public statement released by the regulator, these shortcomings allowed games to reach consumers in Great Britain through sites that held no valid operating licence.
The settlement figure of £4.75 million reflects the scale of the breaches and the volume of UK traffic recorded during the relevant period. Evolution Malta accepted the findings and chose to resolve the matter through the settlement process rather than contest the case at a formal hearing. The agreement requires the company to implement enhanced compliance measures and to report regularly on those improvements.
Breaches in Money Laundering Risk Assessments
Regulators require licence holders to assess money laundering risks before supplying products to any operator. In this case investigators found that Evolution Malta had not updated or applied those assessments when dealing with the six unlicensed sites. The absence of updated risk evaluations meant the company could not demonstrate it had identified or mitigated potential threats linked to those operators. Data collected during the investigation showed repeated instances where games were made available without the required documentation or internal sign-off.
Supply Chain Oversight Failures
Another key area of non-compliance involved supply chain oversight. Licence conditions oblige companies to monitor the operators that receive their games and to verify that those operators hold valid licences for the jurisdictions they serve. Evolution Malta did not maintain adequate records or conduct ongoing checks, which allowed the six unlicensed sites to continue receiving content. The Commission noted that significant UK consumer traffic occurred during the 11-month period, indicating the oversight gaps had direct consequences for the British market.

Shortcomings in Customer Due Diligence
Customer due diligence requirements form a third pillar of the regulatory framework. Evolution Malta was expected to verify the identity and licensing status of operators before granting access to its games. The investigation revealed that these checks were either incomplete or not performed at all for the six sites in question. As a result, consumers in Great Britain could play on platforms that had not undergone the scrutiny normally applied to licensed operators.
Company Response and Strengthened Controls
Following the investigation Evolution Malta took steps to strengthen its compliance framework. The company introduced new internal procedures for risk assessment, enhanced its supply chain monitoring systems, and updated its due diligence protocols. The Commission has required ongoing reporting to confirm that these measures remain effective. Observers note that similar settlements often include conditions for continued regulatory engagement until the regulator is satisfied that systems operate as intended.
Regulatory Context and Market Implications
The case forms part of the Commission’s broader programme of enforcement against companies that fail to prevent unlicensed gambling products from reaching British consumers. Between December 2023 and November 2024 the six sites recorded substantial traffic from the UK, highlighting the practical impact of the identified control weaknesses. The settlement provides a clear record of the standards expected from software suppliers and remote game hosts that hold British licences.
Those who follow regulatory developments point out that the Commission continues to examine supply relationships across the licensed sector. The Evolution Malta matter demonstrates how failures in one part of the chain can expose both the supplier and the unlicensed operators to enforcement action. The regulator has published the details on its website, including a link to the full public statement for those seeking further information.
Evolution Malta Holding Limited Public Statement outlines the specific licence conditions that were breached and the steps the company has taken since the investigation concluded.
Conclusion
The £4.75 million settlement marks a significant enforcement outcome for the UK Gambling Commission in its oversight of software suppliers. Evolution Malta acknowledged the breaches spanning December 2023 to November 2024, addressed the identified gaps in money laundering risk assessments, supply chain oversight, and customer due diligence, and committed to sustained compliance improvements. The case underscores the regulator’s focus on preventing unlicensed sites from accessing licensed content and serves as a reference point for other licence holders operating in the same space.