We checked the licence of every online casino brand marketed heavily to Malaysian players. Six of them hold a licence we could verify in the issuing regulator's own register. But when we followed the link a Malaysian player actually clicks, four of those six landed us on a domain that does not appear on that licence.
The licence is real. The site you are using is not the site it covers.
What we did
For each brand we searched the Anjouan Gaming Authority public register on 31 August 2026, recorded the licence holder and the exact list of domains that licence names, then visited the brand's advertised address and noted where we were redirected to. Anyone can repeat this in about ten minutes per brand.
What we found
| Brand | Domains on the licence | Where players actually land | Covered? |
|---|---|---|---|
| 1XBet | 1xbet.global, 1xbet-malaysia-bet.com, 1xbet-malaysia.mobi and others | 1xbet.global | Yes |
| ME88 | me88.com, me88pro.net | me88pro.net | Yes |
| BK8 | bk8.co, bk8.com, bk8.io, bk8premier.com, bk8sports.com | bk8masd.com | No |
| Megapari | megapari.com | 4679229mp.pro | No |
| Surewin | surewin168.com, sure.win | surewin668.com | No |
| MD88 | 43 domains including www.md88mas.com | md88spins.com | No |
Why this matters more than it sounds
A gaming licence is issued to a company for named domains. That scope is the whole point: it defines which sites the regulator has actually reviewed and which activity it will consider if a player complains.
When you deposit on a domain outside that list, you are not covered by the arrangement the licence badge implies. If a withdrawal is withheld, the escalation route that seemed to exist may not apply to the site you used. You would be relying entirely on the operator's goodwill.
This is not the same as being unlicensed
All four operators above hold genuine, valid licences. Running mirror domains is common practice in this industry, often to route traffic around access restrictions. The problem is not that mirrors exist — it is that the licence scope does not follow the player to the mirror, and nobody tells the player that.
Two related findings from the same audit
Conflicting regulatory claims. ME88's site describes it as “licensed and regulated by the government of Curacao” while carrying an Anjouan seal and an Anjouan licence. MD88 states “Curacao Gaming (license number OGL/2024/1507/0838); PAGCOR” while the register records it under an Anjouan licence held by Raptor Entertainment Ltd, a company its site never names.
Licence information missing entirely. On the domain Megapari players actually reach, we found no licence number, no regulator name and no operating company anywhere in the page source, even after loading the footer.
How to check before you deposit
- Note the exact domain in your address bar after any redirect — not the brand name.
- Find the licence number and issuing authority the operator publishes.
- Search that authority's own public register directly.
- Read the domain list on the licence record and check yours is on it.
- Read the licence status together with its expiry date.
Method and limits
Sample: twelve brands selected by marketing visibility to Malaysian players, not randomly sampled. Six could be matched to a licence naming their own domains; the other six returned no matching licence and are listed on our Caution List. Redirect destinations were recorded on 1 September 2026 and can change. Licences expire and registers lag, so we re-check and republish with new dates rather than leaving old figures standing.
Per-brand workings, including licence numbers and holders, are in each individual review and in our licensing dataset. Our full method is on how we research.
Using this research
Journalists and researchers are welcome to cite these findings with attribution to HaoLifestyle and the check dates above. If you find an error, tell us and we will correct it and note the change with its date.