Crypto Casinos in Malaysia: Gambling Law, Syariah Rules and Crypto

Malaysia has never licensed an online casino, so a Bitcoin or USDT casino that accepts Malaysian players is operating outside Malaysian law. Online play is prosecuted under the Common Gaming Houses Act 1953, which the Court of Appeal confirmed in October 2023 covers gambling on computers, and players can be fined up to RM5,000, jailed for up to six months, or both. For Muslims, gambling is also an offence under state Syariah law. This guide sets out those rules, what they mean day to day, how the Securities Commission regulates crypto, and where to get help.

We keep this page informational: no casino list, no bonus offers and no sign-up links. It is not legal advice. If you want the general background first, our explainer on what a crypto casino is covers how these sites work.

Is online gambling legal in Malaysia?

No. Malaysia licenses a handful of land-based gambling businesses and nothing online. The licensed side consists of one casino resort at Genting Highlands, the number-forecast lottery companies, and licensed pool betting on horse racing. Everything else, including every website and app offering casino games for money, is outside the licensed system.

Many affiliate sites describe Malaysia as a “grey area” because the gambling statutes predate the internet. That description is out of date. In a judgment reported on 18 October 2023, the Court of Appeal held that online gambling is an offence under the Common Gaming Houses Act in Peninsular Malaysia: the prosecution only had to show that gambling took place using computers, because the Act’s definition of a gaming machine includes any electronic device and computer programme. Physical slot machines did not need to be on the premises.

The four gambling statutes

The texts of all four Acts are on the Attorney General’s Chambers Laws of Malaysia portal. None of them creates an online casino licence, and no regulator has the power to grant one.

Penalties for players and operators

Most charges in Malaysian news come from raids on shops fitted with terminals for online slots, where staff and players are detained together. Prosecutions of people playing alone at home on an offshore crypto site are rarer, mostly because they are harder to detect, not because the law excuses them.

Genting, 4D and the lawful options

People often ask whether they can play Genting’s casino online. They cannot: the resort’s licence is for its premises at Genting Highlands, and it does not run a licensed online casino for Malaysians. Number-forecast games such as 4D are sold by licensed operators through outlets and their own channels, and horse-race pool betting runs through licensed turf clubs. Muslims are not permitted to enter the casino or buy these products.

Some states restrict even the licensed products. Kelantan and Terengganu, for example, stopped licensing number-forecast outlets within their borders, and Kedah did the same from 2021.

Syariah law and Muslim players

Malaysia runs a dual legal system. Federal criminal law, including the Common Gaming Houses Act, applies to everyone. Each state’s Syariah criminal offences enactment applies to Muslims, and every state treats gambling as a Syariah offence. A Muslim player who uses an offshore crypto casino is therefore exposed under two separate systems, with the Syariah courts able to impose fines and jail under the state enactment. Non-Muslims are not subject to Syariah jurisdiction.

Blocking, banks and the crypto workaround

The Malaysian Communications and Multimedia Commission (MCMC) blocks websites at the request of enforcement agencies under the Communications and Multimedia Act 1998, and gambling sites are among the most frequent targets alongside scam and phishing pages. Banks and e-wallets supervised by Bank Negara Malaysia refuse or flag payments to gambling merchants and file suspicious transaction reports under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.

That is the real reason crypto is popular for offshore play in Malaysia, and every top-ranking affiliate page for this topic says so openly: bank transfers get blocked, USDT does not. The legal position does not change, though. A transfer from a private wallet is still a stake in unlicensed gambling, and the first time you convert winnings back to ringgit you are back inside the banking system, where large unexplained crypto proceeds can trigger questions from the bank or the exchange.

Mule accounts deserve a separate warning. Gambling syndicates pay people to “rent” their bank accounts to move deposits. Police treat the account holder as part of the offence, and the account is usually frozen.

The money trail, step by step

People often believe a crypto deposit is invisible. Follow a typical route and the opposite is true:

1. You buy USDT or Bitcoin on a registered Malaysian exchange. The exchange has your MyKad details, your bank account and a record of every purchase.
2. You withdraw the coins to a wallet address. The exchange logs the destination, and exchanges screen withdrawal addresses against lists of known gambling and scam wallets.
3. The coins reach the casino’s deposit address, which is often a shared address that blockchain analytics firms have already labelled.
4. Winnings come back, you sell them on the exchange and withdraw ringgit to your bank. The bank sees a large credit from a crypto exchange and may ask where it came from.

None of these steps proves an offence on its own, but together they create a durable record. In a criminal or anti-money-laundering investigation, that record is far easier to follow than cash.

Foreigners, expats and visitors

Malaysian criminal law applies to anyone physically in Malaysia, including tourists, students and expatriate workers. A foreign passport or a home-country account at an offshore casino does not change where the bet is placed. Visitors who want to gamble lawfully while in the country have one option, the licensed casino at Genting Highlands, which admits non-Muslim adults aged 21 and over.

Where the law is heading in 2026

1. January 2026: Home Minister Datuk Seri Saifuddin Nasution Ismail said the Home, Finance and Communications ministries, the Attorney-General’s Chambers and the National Cyber Security Agency were studying stricter laws, including amendments to the Common Gaming Houses Act and online gambling offences in a proposed Cyber Crime Bill.
2. February 2026: Deputy Prime Minister Datuk Seri Fadillah Yusof said the government was drafting a bill on illegal gambling, including online gambling, to be tabled in the Dewan Rakyat once ready. He said it could be a new Act or amendments to the 1953 law.
3. October 2026: when we checked on 8 October 2026, we found no record that a dedicated online gambling law had been passed. The direction is tighter enforcement, not a licensed online market.

Something to weigh up first. Online casinos are not licensed in Malaysia, and joining one can lead to prosecution under federal law, and for Muslims under Syariah law as well. If an offshore site freezes your balance, no Malaysian regulator or court process exists to recover it.

If an offshore site refuses to pay: what actually happens

Ranking pages often promise that a “licensed” crypto casino will always pay. The licence they mean is foreign, and the complaint routes are narrow. This is the realistic path, by licence type:

For a Malaysian player there is an extra problem: most operators’ terms say you must not play from a country where it is unlawful, and Malaysia is often on their restricted list. If you broke that term, the operator can void your winnings and the ADR body will usually side with it. Our licence guide and the page on the Curaçao Gaming Authority explain each regulator in more detail.

If you already have money on an offshore site

1. Stop depositing. Adding funds to recover a stuck balance is the most common way losses grow.
2. Request a withdrawal in writing through the site’s support channel and keep screenshots of your balance, the terms in force and every reply.
3. Do not pay any “release fee”, “tax” or “verification deposit”. Legitimate operators deduct fees from the balance; scams ask for new money.
4. If the site names a licence, use the complaint route in the table above within its deadlines.
5. If you were defrauded, report it to the National Scam Response Centre on 997 and to your bank or exchange straight away.

KYC: why “no verification” is rarely true

Crypto casinos often advertise sign-up without ID. In practice, almost all of them reserve the right in their terms to ask for identity documents and proof of address before a withdrawal, typically when cumulative withdrawals cross an internal threshold or a payment looks unusual. A Malaysian player who signed up despite a country restriction is the classic case where a KYC request turns into a closed account. Never send a copy of your MyKad to a site you cannot verify.

Tax on gambling winnings in Malaysia

Malaysia does not generally tax an individual’s gambling winnings. The Income Tax Act 1967 taxes income from listed sources such as employment, business, dividends, interest and rents, and a windfall from gambling falls outside them. The licensed operators pay gaming taxes and duties instead. Two caveats apply: gambling run like a business could be treated differently, and winnings from unlawful gambling can be seized as proceeds of unlawful activity, which matters far more than any tax rule.

Crypto rules in Malaysia

Is crypto allowed in Malaysia?

Yes, buying, holding and selling crypto is legal. Bank Negara Malaysia does not recognise it as legal tender, and the Securities Commission Malaysia (SC) regulates it. Under the Capital Markets and Services (Prescription of Securities) (Digital Currency and Digital Token) Order 2019, digital currencies and tokens are prescribed as securities, so an exchange serving Malaysians must register with the SC as a Recognized Market Operator for digital asset exchanges (RMO-DAX). The SC’s digital assets page sets out the framework.

Which exchanges are registered (checked 8 October 2026)

We read the SC’s register of digital asset exchanges on 8 October 2026. It listed five operators:

1. HATA Digital Sdn Bhd
2. Luno Malaysia Sdn. Bhd.
3. MX Global Sdn Bhd
4. SINEGY DAX Sdn Bhd
5. Kinetic DAX Sdn Bhd

Older articles still name Tokenize as a registered exchange; on the current page Tokenize Technology (M) Sdn. Bhd. no longer appears in the list of registered digital asset exchanges. The register changes, so check it yourself before opening an account.

Which crypto wallet is legal in Malaysia?

Self-custody wallets are not licensed products, so no wallet is “approved” as such. Holding your own coins in a hardware or software wallet is legal. What the SC regulates is the business that exchanges, holds or trades crypto for you. A wallet built into an unregistered foreign exchange is the risky part, because the exchange itself is operating unlawfully in Malaysia. Our wallet guide explains custodial and self-custody options.

Enforcement against offshore exchanges

The SC has acted against major global platforms. Its December 2024 action against Bybit reprimanded Bybit Technology Limited and its chief executive Ben Zhou for running an unregistered exchange, ordered the website and apps disabled for Malaysians within 14 business days from 11 December 2024, and required Bybit to stop advertising and close its Malaysian Telegram group. Bybit had been on the SC’s Investor Alert List since July 2021. Operating an unregistered exchange is an offence under section 7(1) of the Capital Markets and Services Act 2007.

Tax on crypto

The Inland Revenue Board (LHDN) has no crypto-specific tax. Gains on crypto held as a long-term investment are generally treated as capital and not taxed, while frequent trading that looks like a business can be taxed as income. Keep records of dates, ringgit values and fees for every purchase, sale and transfer.

Bitcoin, BTC and USDT: what the coin changes and what it doesn’t

Searches for “Bitcoin casino Malaysia” or “USDT casino Malaysia” often come from people hoping crypto puts them outside local law. It does not. Here is what the choice of coin actually affects:

Our Bitcoin casino hub and USDT guide explain these mechanics in depth for readers in countries where offshore play is permitted.

A worked example: volatility and fees in coin terms

Say a player deposits 0.002 BTC and, after a session, withdraws exactly 0.002 BTC. In coin terms they broke even. If Bitcoin’s ringgit price fell 8% while the funds sat on the site, the same 0.002 BTC now sells for 8% fewer ringgit, so the “break-even” session lost money. Network fees come on top: one fee to move coins from the exchange, often a casino withdrawal fee, and an exchange trading spread on each conversion. With USDT the price swing mostly disappears, but the fees and the issuer freeze risk remain. None of this needs a price quote to understand; it is arithmetic on percentages.

Games Malaysians search for, and how the law treats them

• Live baccarat and other live dealer games: the most popular category on offshore sites aimed at Malaysia. Streaming from a studio abroad does not change anything; the bet is placed from Malaysia.
• Slots and “fishing” games: the same games that appear in raided shophouse gambling dens, now in apps. Courts treat the device as the gaming machine.
• Sports betting: covered by the Betting Act 1953. Only licensed pool betting on horse racing and licensed number-forecast games are lawful.
• Crash, dice and other crypto “originals”: no special status; they are games of chance played for money.

Mobile apps and APK downloads

Real-money casino apps on the Google Play Store and Apple App Store must be licensed in the country they serve, so none is available for Malaysia. Offshore sites work around this with browser apps or direct APK downloads. An APK from an unknown source can carry malware or harvest banking details, and several Malaysian scam cases have started with exactly that kind of “casino app” download.

Scams to watch for

• “Agents” on WhatsApp or Telegram who ask you to transfer ringgit to a personal account and promise to top up a casino wallet.
• Apps that let you win at first, then block withdrawals once the balance grows and demand a “tax” or “unlock fee”.
• Requests to rent or lend your bank account for a fee.
• Investment pitches mixing crypto trading and casino play with guaranteed returns.

Report scams to the National Scam Response Centre on 997.

Myths we see repeated

• “Only operators get charged.” Section 6(1) of the Common Gaming Houses Act targets players, and players are charged after raids.
• “If the server is overseas, Malaysian law does not apply.” The 2023 appeal ruling focused on gambling taking place on devices in Malaysia. Where the server sits did not save the accused.
• “A VPN makes it legal.” It does not change the law, and hiding your location breaks most operators’ terms, which gives them grounds to void winnings.
• “Crypto winnings can’t be traced.” See the money trail above. Public ledgers and exchange records make crypto easier to follow than cash.

Checklist: testing a “Malaysia-friendly” casino claim

Offshore sites and their promoters use the same phrases again and again. Each one can be checked:

• “Licensed and legal in Malaysia.” Impossible, because no Malaysian body issues online casino licences. Any site saying this is misleading you on the first fact.
• “Accepts MYR.” A ringgit option usually runs through a payment agent or a personal account, which is exactly the mule-account route police warn about.
• “No KYC, instant withdrawals.” Read the terms. Look for the clause reserving the right to request documents, and for Malaysia in the list of restricted countries.
• “Provably fair.” This only applies to the operator’s own originals, and it proves the result was not changed after your bet. It does not prove the site will pay. See our provably fair explainer.
• “Verified by a regulator.” Click the seal. A real CGA or Anjouan seal opens a validation page on the regulator’s own domain; a static image does not.

For families: noticing a problem early

Online gambling is harder to spot than a visit to a gambling den. Warning signs include unexplained crypto exchange apps on a phone, sudden requests to borrow money, selling possessions, hiding phone screens, and mood swings around sports results or late-night sessions. If you are worried about a family member, talk calmly about money rather than morality, offer to look at debts together, and contact one of the services below for advice on how to approach it. Taking over someone’s finances without their agreement rarely works; agreed limits and outside support usually do.

How Malaysia compares with its neighbours

Malaysia is not alone in the region. Singapore licenses a single remote gambling operator and fines players who use anything else; see our Singapore page. Indonesia bans all gambling, online included, under its Penal Code and electronic transactions law, covered on our Indonesia page. The Philippines is the exception, with PAGCOR licensing some online gaming for local players.

Help in Malaysia

Gambling problems in Malaysia often come wrapped in debt to unlicensed moneylenders (Ah Long) and in family shame, which makes people wait too long to ask. Reaching out before debts pile up makes recovery far easier, and family members can call the same lines for advice on how to help. If an Ah Long is threatening you or your family, report it to the police; illegal moneylending is a crime in its own right, separate from any gambling.

• Befrienders Kuala Lumpur: 03-7627 2929, free emotional support around the clock, details at befrienders.org.my.
• Talian Kasih: 15999, the government’s support line for people and families in crisis.
• Gamblers Anonymous: peer support meetings, with a directory at gamblersanonymous.org.

Our responsible gambling page covers warning signs, self-limits and how to support someone else.

Malaysia FAQ: crypto and online casinos

Are crypto casinos legal in Malaysia?

No. No online casino is licensed in Malaysia, and paying with Bitcoin or USDT does not change that. The Court of Appeal confirmed in October 2023 that online gambling is an offence under the Common Gaming Houses Act 1953.

Can players be charged for online gambling in Malaysia?

Yes. Section 6(1) of the Common Gaming Houses Act covers people found gaming, with a fine of up to RM5,000, up to six months in jail, or both. Muslims can also be charged under state Syariah law.

Is crypto allowed in Malaysia?

Yes. Buying and holding crypto is legal, but exchanges serving Malaysians must be registered with the Securities Commission as RMO-DAX operators. Crypto is not legal tender.

Which crypto exchanges are registered in Malaysia?

On 8 October 2026 the SC register listed HATA Digital, Luno Malaysia, MX Global, SINEGY DAX and Kinetic DAX. Check the SC website before opening an account, as the list changes.

Which crypto wallet is legal in Malaysia?

Self-custody wallets are legal to use and are not licensed products. What matters is the exchange: buy and sell only through an SC-registered exchange, because unregistered foreign platforms operate unlawfully in Malaysia.

Can I play at Genting casino online?

No. The Genting Highlands casino licence covers the resort premises, and there is no licensed online casino for Malaysian players.

Do I pay tax on gambling or crypto winnings in Malaysia?

Gambling windfalls are generally not taxed for individuals, and long-term crypto gains are generally treated as capital. Frequent trading run like a business can be taxed, and proceeds of unlawful gambling can be seized.

What happens if an offshore crypto casino refuses to pay me?

You can complain to the casino and then to its foreign licensing body’s dispute scheme, if it has one. No Malaysian authority can help, and if Malaysia is on the operator’s restricted list your winnings may be voided.