Winzon lost its Malta licence and faces €147,080 in penalties - refunds remain separate

Malta's cancellation notice contains an administrative penalty, unpaid regulatory fees and an obligation to return player money. They are legally and financially separate. Adding the first two figures does not reveal what players are owed, and neither amount should be described as a player-funds shortfall.

The MGA cancelled Winzon Group's B2C authorisation effective 11 March. On 7 April it published directions covering customer notice, refunds, data, licence references, fees and penalties.

The authority describes €147,080 as administrative penalties arising from numerous shortcomings under the Gaming Act and related instruments. It is a regulatory sanction figure. The public notice does not divide it by customer, brand or incident.

A separate €46,693.23 represents annual licence fees and minimum compliance contributions that the MGA says remain outstanding. That is money due to the regulator under fee rules, not an additional fine and not a disclosed customer balance.

Winzon was directed to refund all player money to legitimate players. The MGA did not stop at a general promise: it required a back-end transaction report and supporting bank statements showing that registered players received their funds.

That documentary step matters because an account marked 'paid' inside a platform does not prove money reached the destination. Reconciliation between the player ledger, payment record and bank movement is the stronger control.

The notice says Winzon remains liable for obligations under the Gaming Act and other instruments. It also reserves the authority's right to take further legal measures to recover amounts if the company does not rectify the position.

This is why 'licence cancelled' should not be written as 'case closed.' Market access ends, but customer, data, fee and reporting duties can continue after the effective date.

The company was told to notify players electronically and display the cancellation on its websites for 30 days. It also had to remove MGA references immediately and explain how personal data would be handled after authorisation ended.

Those instructions reduce two risks: customers continuing to believe the sites are licensed, and former account holders losing visibility over money or data during the exit.

The 30-day website notice and immediate removal of licence references serve different purposes. One tells existing players why the relationship is ending and what they should expect. The other stops future visitors from reading an obsolete regulatory claim as current permission to gamble. A compliant exit needs both messages to be accurate at the same time.

The regulator's publication does not say that every refund was completed, how many players were involved or what the aggregate balances were. It does not publish the required transaction report or bank statements. The obligation is confirmed; completion is not.

It also does not accuse the company of stealing player funds. That would be a different and more serious allegation requiring its own legal record.

An MGA update confirming reconciliation would close the player-money question. A recovery action would show that some regulatory amount remained unpaid. Without either, the correct status is post-cancellation compliance still requiring proof.

This is the reporting rule Atlas will reuse: separate the fine, the fees and the player balances before writing any total.

Players also need a route to show that an account balance or withdrawal was missed. The public notice does not describe a claims process, so Atlas cannot substitute a general regulator contact for a verified Winzon procedure. Any later customer notice should be preserved with its deadline and required evidence.