Eagle Ridge
Bahasa MelayuBM中文中文

Is this casino site real? Ten signs of a copycat or an empty licence claim

By Eagle Ridge editorial team · Sources checked · 5 min read

In Malaysia it is unusually hard to tell a real casino site from a copy. Gambling domains are blocked, brands move to new addresses, and copycats use the same churn[1][2]. When we checked eight brands, two pointed their “licence” links at a domain nobody has registered, and one had six competing “official” sites[3][4]. The ten signs below come from those checks. They help you spot a fake, but no answer here makes a site lawful: no online casino is licensed in Malaysia[5].

The ten-point check

Tick every sign that applies to the site you are looking at

The checklist runs only in your browser and saves nothing.

Signs 1 to 4: the licence claim itself

A licence claim is only worth something if it leads to the regulator’s own record. Check where the seal or licence link goes. Curaçao’s current certificate checker is at cert.cga.cw[6]. Maxim88’s and 96M’s licence links both pointed to license-gamingcuracao.com, a lookalike name that is not even a registered domain[7][8][3].

Next, look for a company and a number. Without both there is nothing to search. Then check the domain. BK8’s Anjouan licence is real, but its seal validated only for a different domain from the one serving Malaysians[9]. Finally, watch for testing labs presented as regulators. Maxim88’s homepage calls BMM and iTech Labs “international gambling authorities”; they are testing laboratories[7]. Our step-by-step guide to checking a licence on the register covers each regulator.

Signs 5 and 8: the domain

A free WHOIS lookup shows when a domain was registered. In our Mega888 check, the newest domain claiming to be official had been registered nine days earlier[4]. A very new domain is not proof of a scam, because blocked brands move often, but a site that claims years of history on a domain registered last month is telling you something.

When several sites each say they are the official one, and none names a company, there is no way to establish which is real. That was the position with Mega888, and the obvious address, mega888.com, turned out to be an unrelated shopping redirect. Our Mega888 check, which traced six competing domains, shows how far that can go.

Signs 6, 9 and 10: how money and contact work

A company with a licence takes payment through a cashier with published terms. Paying an agent, a personal bank account or a contact on a messaging app means paying a person, and a person can disappear. BK8’s own site warns that it will “NEVER ask you to deposit via WhatsApp, Telegram, Zalo or LINE”[10]. A warning like that exists because people pretending to be the brand do exactly that.

Be most suspicious when the contact comes to you first, or when someone asks for a fee before they will release a withdrawal. Paying to unlock money already lost is how recovery scams work. If that has happened to you, stop paying and talk to your bank first.

Sign 7: the terms

The terms and conditions are the contract you would rely on in a dispute. Read the first and last sections for a company name. In our checks, several brands’ terms referred only to “The Company” and never said which company that was[11][12]. 96M’s terms still set a daily win limit of “xxx” and named a different brand, “Indocash”, in one clause[13]. Unfinished terms are a sign that nobody expects them to be enforced.

If the site passes every check

A site with no warning signs may still be a copy that has been made carefully, and a real, licensed offshore site is still unlawful to use from Malaysia. Players were fined in 2026 for gambling on their phones[14]. If you are checking sites because you are trying to win back losses, our guide to free gambling help in Malaysia is a better place to start.

Questions readers ask

How can I tell if an online casino site is fake?

Check that the licence link opens the regulator’s own website, that the licence names a company and number, and that the domain you are on is listed on it. Treat agents, personal bank accounts and messaging-app deposits as warning signs.

Is a GLI or BMM certificate a gambling licence?

No. GLI, BMM and iTech Labs are testing laboratories that certify games and random number generators. They do not license casinos.

Why do casino sites keep changing domain in Malaysia?

Internet providers block gambling sites at the MCMC’s request, so brands move to new domains. Copycat sites use the same churn, which makes the real and fake versions hard to tell apart.

Someone wants a fee to release my winnings. What should I do?

Do not pay. Fees to unlock or recover withdrawals are a common follow-up scam. Stop all transfers and contact your bank.

Sources

Every source below was read on the date shown. Operator pages are named but not linked: this site does not link to gambling operators.

  1. Over 450,000 online gambling posts removed, 1,778 websites blocked since January 2025 (16 July 2026). The Star, reporting Bernama. Read on 28 Oct 2026.
  2. Eagle Ridge connection test from a Malaysian internet connection: DNS answers compared with public resolvers (our own test, recorded in our research notes). Eagle Ridge. Read on 28 Oct 2026.
  3. Eagle Ridge registry and DNS lookup of license-gamingcuracao.com: .com WHOIS “No match”, DNS NXDOMAIN (our own test, recorded in our research notes). Eagle Ridge. Read on 28 Oct 2026.
  4. Sites presenting themselves as Mega888: footers, licence wording and install guides (six domains) (operator page: we do not link to or print operator addresses). Various unidentified operators. Read on 28 Oct 2026.
  5. Common Gaming Houses Act 1953 (Act 289), official reprint incorporating amendments up to 1 January 2006. Attorney General’s Chambers of Malaysia, Laws of Malaysia. Read on 28 Oct 2026.
  6. License register (online gaming licences, certificates, enforcement register). Curaçao Gaming Authority. Read on 28 Oct 2026.
  7. Maxim88 Malaysia site: homepage text, footer as displayed, region landing page, sponsorship page, settings and language files (operator page: we do not link to or print operator addresses). Maxim88 (operating company not named). Read on 28 Oct 2026.
  8. 96M Malaysia site and brand gateway: homepage text, footer as displayed, licensing section, About Us, VIP page and settings files (operator page: we do not link to or print operator addresses). 96M (operating company not named). Read on 28 Oct 2026.
  9. Anjouan seal validator pages for the domains named on BK8 and me88 seals (seal validator page: not linked, because its address embeds the operator’s domain). Seal validator hosted at anjouangamingboard.org. Read on 28 Oct 2026.
  10. BK8 Malaysia site: footer licence statement, homepage text and country gateway (operator page: we do not link to or print operator addresses). Mettlemind Tech Ltd (BK8). Read on 28 Oct 2026.
  11. BK8 Malaysia: Terms and Conditions (clauses 2.1, 6 and 10) (operator page: we do not link to or print operator addresses). Mettlemind Tech Ltd (BK8). Read on 28 Oct 2026.
  12. Maxim88 Malaysia: Terms and Conditions (clauses 6, 10, 11, 14 and 20) (operator page: we do not link to or print operator addresses). Maxim88 (operating company not named). Read on 28 Oct 2026.
  13. 96M Malaysia: Terms and Conditions, English and Malay (clauses 6, 7, 9, 10 and 14) (operator page: we do not link to or print operator addresses). 96M (operating company not named). Read on 28 Oct 2026.
  14. Man fined RM2,700 for online gambling at cafe (7 September 2026). Sarawak Tribune. Read on 28 Oct 2026.