Is online gambling legal in Malaysia? What the law says in 2026

Malaysians search “is online gambling legal in Malaysia” hundreds of times a month, and most of the pages that rank for it are run by the casinos themselves. This guide sets out what the law says, what is licensed, and where online casinos actually stand, in plain language.

The short version

Gambling in Malaysia is not banned outright. It is tightly licensed. A handful of operators hold a government licence, and everything outside that list is illegal to run. No online casino has a Malaysian licence, so every online casino that accepts Malaysian players is operating from outside the country without local approval.

That does not mean every offshore casino is a scam. It does mean that if something goes wrong, you have no Malaysian regulator to complain to and no local court that will help you recover a balance.

The laws that apply

Three acts from the 1950s still form the backbone of Malaysian gambling law.

Law	What it covers
Common Gaming Houses Act 1953	Makes it an offence to run a gaming house, or to be found gaming in one. Also the basis for licensing the one legal casino.
Betting Act 1953	Bans betting houses and unlicensed bookmaking, including taking bets on sports.
Lotteries Act 1952	Controls lotteries, which may only run with a government licence.

These acts were written long before the internet. They do not mention websites or apps, but the authorities treat an online casino that takes bets from Malaysians as an unlicensed gaming operation. Police raids on local online gambling syndicates are reported in the news regularly.

What is legal

Licensed gambling in Malaysia falls into a few clear groups.

• The Genting casino. Resorts World Genting in Pahang runs the only licensed land based casino in the country. Entry is limited to adults aged 21 and over, and Malaysian Muslims are not allowed in.
• Licensed 4D and number forecast operators. Companies such as Magnum, Sports Toto and Da Ma Cai sell number forecast tickets through licensed outlets and their own apps.
• Licensed horse racing totes run through the turf clubs.

If an operator is not on that short list, it is not licensed in Malaysia, no matter what its website says.

Where online casinos stand

Most online casinos that target Malaysia say they are licensed somewhere else, often in Curaçao, the Philippines or a similar jurisdiction. Some of those licences are real. Many are copied logos with no number behind them. Either way, a foreign licence does not make the site legal in Malaysia.

There are three things this means for you as a player.

1. There is no local protection. If a casino refuses a withdrawal, closes your account or simply disappears, there is no Malaysian body that will take up your case.
2. Sites get blocked. MCMC blocks gambling websites on request from the police, which is why so many brands run “mirror” or “link alternatif” domains and change address every few weeks. Constant domain changes also make it easy for copycat sites to steal deposits.
3. Your bank or eWallet can act. Payment providers do not allow their services to be used for illegal activity. Accounts linked to gambling payments can be frozen while they investigate.

We test casinos that Malaysians already search for because people deserve facts before they deposit, not because the law approves of them.

Enforcement in numbers

Enforcement against online gambling is active and growing.

• 7,411 gambling websites blocked and 828,438 pieces of online gambling content removed since 2022, according to government figures reported in October 2026.
• 1,778 gambling websites blocked between 1 January 2025 and 31 May 2026 alone.
• More than 93% of the gambling content removed came from Facebook, according to Communications Minister Fahmi Fadzil in February 2025.
• Police arrested 388 people in one nationwide operation against a syndicate that built online gambling platforms and their back office systems.
• Around the 2026 World Cup, police carried out 52 raids and arrested 58 people for illegal betting.

Slot apps such as Mega888, 918kiss and Pussy888 are sold mostly through agents on Facebook, WhatsApp and Telegram, which is exactly where most of this content is removed from.

The law may soon change

In January 2026, the New Straits Times reported that Putrajaya is considering stricter laws to curb online gambling. The proposals reported include amending the Common Gaming Houses Act 1953 and placing online gambling offences in a proposed Cyber Crime Bill. Police were also reported to have proposed a number of amendments in 2025.

This matters because the current acts were written for physical gaming houses. The same report mentioned a High Court ruling that one section of the act could not be applied to online gambling, which is one reason reform is being studied. At the time of writing, no new act has been passed. We will update this guide when the law changes.

Rules for Muslims

For Muslims, the position is simpler and stricter. Gambling (judi) is prohibited under the Syariah criminal offence laws of each state. Penalties can include fines and jail terms. This applies to online gambling as much as to any other kind, and it applies whatever the federal position is for non Muslims.

Is it illegal to play, or only to run a casino?

The laws focus mainly on the people who run gambling operations, but they do not stop there. The Common Gaming Houses Act also makes it an offence to be found gaming in a common gaming house. How that applies to someone playing on a phone at home has not been tested in a way that gives a clear, simple answer.

The practical risks are clearer than the legal theory:

• You can lose your balance with no way to recover it.
• A frozen bank or eWallet account can take weeks to sort out.
• Personal data you upload for verification, such as your IC and selfie, sits with a company you cannot hold to account.

If you are unsure about your own situation, speak to a lawyer. This guide is general information only.

How to spot a site that is lying about its licence

Whatever you decide, a few checks take two minutes and filter out the worst operators.

• Look for a licence number, then check it. A real licence has a number you can search on the regulator’s own website. A badge with no number, or a number that leads nowhere, is a warning sign.
• Check who receives your deposit. If the site asks you to transfer to a personal bank account or a personal DuitNow QR, your money is going to an individual, not a company.
• Read the withdrawal rules before depositing. Hidden turnover requirements, maximum cashout limits and “verification fees” are the most common reasons players never see their winnings.
• Be wary of apps outside the official stores. Casino apps sent as APK files over WhatsApp or Telegram can carry malware. Our guides to Mega888, 918kiss, Pussy888 and fake WinBox APKs explain the risks.

This is exactly what our reviews cover. No casino on HouseVerdict gets a tested score until we have checked the licence with the regulator and timed real withdrawals. Before that, each one carries a research rating that shows what public sources report about its licence and bonus terms, and how far those sources agree. You can see the full list here.

Frequently asked questions

Is the Genting casino legal?

Yes. Resorts World Genting holds the only licence for a land based casino in Malaysia. You must be 21 or older, and Malaysian Muslims are not permitted to enter.

Is buying 4D online legal?

Buying 4D through the licensed operators and their official apps is legal for eligible adults. Buying “4D” from unlicensed websites or private agents is not.

Can I be arrested for playing at an online casino?

The law is aimed mainly at operators, and the position for individual players online is unclear. The bigger everyday risks are losing your money and having payment accounts frozen. Muslims face clear penalties under Syariah law.

Why do casino websites keep changing their address?

MCMC blocks gambling websites, so operators move to new domains. This also gives scammers cover to set up fake copies, so always reach a casino through a link you trust.

Is sports betting legal in Malaysia?

Only through licensed operators. The Betting Act 1953 bans unlicensed bookmaking, and no online sportsbook holds a Malaysian licence. Police step up raids on illegal betting around big tournaments, such as the 52 raids during the 2026 World Cup.

Are slot apps like Mega888 and 918kiss legal?

No. They have no Malaysian licence, and we could not find a named operator or licence number for any of them. They also carry extra risks because they are installed from APK files. See our Mega888 safety guide for details.

Is there a Malay version of this guide?

Yes. Read Adakah judi online sah di Malaysia? for the same guide in Bahasa Malaysia.

Where can I get help if gambling is causing problems?

Befrienders KL offers free, confidential support 24 hours a day at 03 7627 2929.