Malta has positioned itself as one of the first jurisdictions to formally address artificial intelligence governance within the gambling sector, publishing guidance that balances technological innovation with clear accountability requirements. For operators and suppliers working under Maltese licensing, the Charter introduces practical expectations that deserve careful operational attention.
What the Malta AI Charter Covers
The Maltese authorities have outlined a framework that acknowledges AI's growing role in gambling operations while insisting that human beings remain responsible for consequential decisions. The Charter is not a binding regulation in the traditional sense, but it carries significant weight as a statement of regulatory intent. Operators should treat it as a preview of where formal rules are likely to land.
Key themes running through the guidance include:
- Maintaining meaningful human oversight over AI-driven systems that affect players, such as responsible gambling tools, risk scoring and automated customer interactions
- Ensuring that AI outputs can be explained and audited, rather than treated as opaque black-box decisions
- Conducting due diligence on third-party AI suppliers, particularly regarding data governance and model integrity
- Assessing the environmental impact of AI infrastructure as part of responsible procurement
The Human Oversight Requirement in Practice
Regulators are increasingly uncomfortable with fully automated decision-making in contexts that directly affect consumers. Within iGaming, this concern is acute because AI touches areas such as bonus eligibility, self-exclusion enforcement, fraud detection and responsible gambling interventions. The Charter signals that a human must remain in the loop for decisions that carry material consequences for players.
For operators, this translates into a need to document who reviews AI-generated outputs, at what frequency, and what authority that person holds to override the system. Vendors selling AI-powered compliance or CRM tools into the Maltese market should expect questions about their human-review workflows during due diligence conversations.
Environmental Sustainability as a Due Diligence Item
One element of the Charter that has received less attention than it deserves is the push for environmental due diligence when procuring AI services. Large language models and machine learning pipelines consume substantial computing resources, and regulators are beginning to factor energy consumption into assessments of responsible business conduct.
Practically speaking, operators sourcing AI tools from cloud providers or specialist vendors should now be asking questions such as:
- Where are the data centres located, and what energy sources do they use?
- Can the vendor provide carbon footprint estimates for the services being procured?
- Is there a roadmap toward renewable energy use or efficiency improvements?
This is not purely an ethical matter. As ESG reporting requirements spread across European business regulation, operators with MGA licences will find that their supply chains come under increasing scrutiny. Building these questions into supplier onboarding now avoids remediation costs later.
Implications for Operators and Suppliers
The Charter creates a shared responsibility model. Operators cannot simply purchase an AI tool and assume the vendor has addressed all governance concerns. The guidance implies that the licensed entity retains accountability for how AI behaves within its products and processes.
From an operational standpoint, the Charter reinforces something practitioners already know: regulatory technology decisions are not purely a procurement matter. They require legal, compliance and operations teams to work together before a contract is signed.
Suppliers, in turn, should prepare technical documentation that supports operator due diligence, including model cards, explainability reports and records of human review processes. Operators selecting vendors without this documentation are taking on reputational and regulatory risk.
OnlineShine's Practitioner View
At OnlineShine, we support operators navigating exactly this kind of layered compliance landscape. The Malta AI Charter is a clear signal that regulators expect AI adoption to be deliberate and accountable, not reactive. Operators who document their AI governance frameworks now, including supplier due diligence trails and human oversight protocols, will be better positioned when formal rules follow. Those who treat the Charter as a theoretical document risk being caught unprepared by the enforcement cycle that typically arrives one to two years after guidance is published.
