Curaçao Online Gambling Regulation, Licensing & Tax Regime

Curacao's regulatory landscape underwent a structural transformation with the National Ordinance on Games of Chance (LOK), which entered into force on 24 December 2024, superseding the 1993 Offshore Games Ordinance in its entirety. This replaced the permissive master-licence sub-licensing model, under which many operators held sub-licences from a handful of master licence-holders, with direct licensing issued by the Curacao Gaming Authority (CGA), formerly the Gaming Control Board. The structural transition itself is largely complete, but the active reform frontier has shifted to phased implementation: a June 2026 crypto-policy guideline imposing immediate bans on mixers and sanctioned wallets, with fuller technical compliance due by June 2027, and a mandatory local-substance requirement (physical office, resident managing director) enforced through April 2027. Together these represent a jurisdiction moving from a low-cost, low-substance offshore reputation toward a more conventional, actively supervised direct-licensing regime.

The LOK's two-year transitional period for B2B critical-service supplier licensing and registration, set out in Articles 1.5(1) and 5.16, ends 24 December 2026. From that date, Curacao-established suppliers of critical services must hold a CGA supplier licence, and foreign suppliers must register with the authority. The CGA has recommended that Curacao-established suppliers file ahead of 1 September 2026, and the registration route for foreign suppliers is expected to open in October 2026, though this opening date has not yet been confirmed by a primary source and is held at Probable confidence pending that confirmation. This is a statutory deadline embedded in the LOK itself rather than a guideline-level requirement, giving it a firmer legal footing than the policy-guidance instruments also moving this cycle. Operators and their critical-service vendors should treat the window between now and December as the live compliance period for this requirement.

The LOK entered into force on 24 December 2024, superseding the 1993 Offshore Games Ordinance in its entirety and replacing the master-licence sub-licensing structure with direct CGA licensing. This is durable primary legislation. The CGA now issues Business-to-Consumer (B2C) and Business-to-Business (B2B) licences directly, covering online casino, sports betting, lotteries, slots, table games, crash games and bingo. Legacy sub-licences and transitional orange-seal permits have expired under the new regime. Applicants proceed through direct CGA application rather than through a master licence-holder, a structural change from the prior regime that materially alters both the cost and the compliance profile of entering the Curacao market. Technical certification under GLI Standards remains a standing licence condition. The regime is still settling: this cycle rests on convergent T3 legal and industry commentary rather than a primary CGA or Curacao government gazette text, a gap that should be closed before treating the details as fully confirmed.

The National Ordinance on Games of Chance (LOK), enacted 20 December 2024, fully replaced the former NOOGH master/sub-license legislation that previously governed Curacao's gambling licensing architecture. This is a durable, primary-legislation change, carried at confirmed confidence, and represents the completion of a structural transition rather than an incremental adjustment. The CGA has continued to build implementing detail on top of this settled statutory base through 2026, publishing compliance guidance and a crypto AML/KYT framework that sit beneath the LOK as regulator-level instruments rather than primary law. For an operator, this means the foundational licensing question, which statute governs and which authority issues, is settled and stable, while the operational detail of what compliance looks like in practice continues to accrete through CGA guidance documents that carry fragile, revisable status relative to the LOK itself.

The Curacao Gaming Authority (CGA) is now confirmed as the sole issuing authority across B2C, B2B and charity-game licence categories, following a reorganisation in which the historical Gaming Control Board (GCB) name has been retired to a purely historical reference point. This consolidation follows directly from the National Ordinance on Games of Chance (LOK), effective 24 December 2024, a durable statutory instrument that displaced the legacy master and sub-license marketplace; the legacy master-license system was itself abolished from 1 January 2025, and orange seal sub-licences, the vehicle through which most historical operators entered the market, expired permanently on 15 October 2025. A B2B Supplier License is reported to carry a distinct visual marker, described as a blue seal, though this detail rests on a single specialist licensing-advisory source and remains uncertain pending independent corroboration.

The Curacao Gaming Authority's crypto guideline, issued June 2026, bars B2C licensees that accept cryptoasset payment from simultaneously acting as an exchange, payment service provider, or virtual-asset service provider. Licensees must segregate player, operational, and treasury wallets, with personal or beneficial-owner-linked wallets barred from operational use. Compliance is phased: a compliant crypto policy was to be uploaded by approximately September 2026; risk assessments, VASP counterparty due diligence, wallet controls, and staff training are due by approximately December 2026; and full compliance is targeted for mid-2027. The guideline also requires screening of deposits and withdrawals to trace fund origin and destination and to exclude funds linked to mixers, tumblers, or sanctioned blockchain addresses. The underlying CGA guideline document itself was not directly retrieved this cycle; the above is corroborated by secondary industry reporting.

Crypto handling is folded into the standard B2C licence rather than governed by a separate VASP regime specific to gambling operators. The CGA's June 2026 crypto-policy guideline, a fragile regulator circular corroborated across multiple independent trade-press and vendor sources, imposes an immediate ban on accepting funds from mixers, sanctioned wallets or tumblers, and requires segregation of player, operational and treasury crypto wallets. Full technical compliance, including blockchain analytics, reconciliation and audit-ready recordkeeping, is due by June 2027. Fiat-backed stablecoins are treated more favourably under the guideline than privacy coins, meme coins or wrapped tokens. This represents a confirmed, material new phased obligation on payment and wallet handling for crypto-accepting licensees, layered onto the existing licensing structure rather than replacing it.

The CGA's June 2026 crypto AML/KYT guideline establishes a detailed payments compliance regime for licensees handling crypto. It mandates wallet screening, risk-scoring, and transaction monitoring at both deposit and withdrawal, requires segregated player, operational, and treasury wallets, and imposes immediate bans on funds tied to sanctioned wallets, mixers or tumblers, and personal, employee, or owner-linked wallets. This is confirmed, detailed content corroborated across several secondary sources, though it carries fragile durability as CGA guidance rather than primary legislation. Crypto remains permitted strictly as a payment method for gambling transactions: licensees are barred from acting as a crypto exchange, payment services provider, or VASP, and from converting or holding crypto on players' behalf outside gambling flows. The guideline draws a clear line between permitted gambling-payment use of crypto and prohibited VASP-type activity, materially tightening the payments-and-money-flow posture this cycle.

The CGA's crypto policy guideline bars licensees from acting as an exchange, payment service provider or virtual-asset service provider outside gambling transactions, and from holding crypto outside gambling-related flows, drawing a clear boundary between gaming-sector crypto handling and separately-licensed payment activity. This guideline is being phased in through September 2026, December 2026 and June 2027 milestones. Separately, the Caribbean guilder (XCG) became legal tender in March 2025, replacing the Antillean guilder (ANG), a currency transition that affects settlement-currency reporting for CW-licensed operators. Both developments alter the money-flow environment facing licensees: crypto rails now face a formal restriction and compliance timetable where none existed before, while the currency transition changes the reference currency for settlement and reporting.

The CGA's crypto AML/KYT guideline, dated June 2026, imposes a phased technical-compliance calendar on licensees. An interim policy-submission milestone falls around September 2026, a risk-assessment and staff-training milestone follows roughly six months later, and full compliance, including wallet segregation and transaction monitoring capability, is required by June 2027. This is a confirmed, detailed compliance calendar, but it is issued as CGA guidance rather than primary legislation, and therefore carries fragile durability: it is revocable or amendable by the CGA in a way that the underlying LOK statute is not. For operators, the practical effect is a multi-stage technical build-out, beginning with policy documentation and culminating in operational wallet-screening and monitoring infrastructure, compressed into roughly twelve months from the guideline's publication to the final June 2027 deadline.

The CGA's enforcement toolkit rests on the LOK itself. Article 13.37 allows instructions, penalty-bearing orders, administrative coercion, administrative fines up to the sixth fine category of the Criminal Code, suspension for up to three months (extendable by a further three), and revocation for rule violations under Articles 1.2 and 1.5. Article 13.40 addresses unlicensed activity: a deliberate breach carries up to four years' imprisonment and a sixth-category fine, while a non-intentional breach is an infraction punishable by detention up to one year and a fifth-category fine. Both are standing statutory bases, reconfirmed rather than newly enacted. The live development is regulator-side: the CGA confirmed on 7 October 2026 that its breached licensing portal, exposing roughly 40,000 documents, will not return to service; it missed its own 9 October 2026 deadline to publish interim arrangements; and by 15 October it had signalled new licensing procedures in development, with trade press linking the ended service arrangement to a Malta-connected consultancy, a linkage the CGA's own announcement did not confirm. Separately, the CFATF's enhanced follow-up report on Curacao remains unpublished as of early September 2026, a standing transparency gap limiting independent verification of the jurisdiction's compliance trajectory.

The Curacao Gaming Authority confirmed unauthorised access to its online gaming licensing portal, running from December 2025 to September 2026, through an account created under a false identity. International press published the leaked licensee data between 5 and 8 October 2026, with reporting alleging unlicensed targeting of regulated monopoly markets drawn from the material. This is a confirmed statement from the authority itself, corroborated by trade press coverage of the incident. The development bears on the integrity of the Curacao Gaming Authority's own identity-verification controls over its licensee register, a distinct question from the stability of the underlying licensing statute, which has not changed. The full scope of the data taken has not been established by the authority, and the authority's enforcement register has not been independently fetched; the leaked-data reporting rests on secondary press accounts rather than the authority's own disclosure of scope.

The Curacao Gaming Authority's online licensing portal was reported offline from 28 September 2026 amid an internal governance investigation into an undisclosed consulting agreement, including invoices and work reports. No resolution timetable has been published, and the regulator states that issued licences and statutory deadlines remain unaffected by the investigation. This is a single-source report at the time of writing, with no second outlet corroboration located this cycle, and no enforcement action against any named licensee, fine, or revocation has been identified. Separately, the CGA's crypto guideline establishes a wallet-screening control requiring exclusion of funds linked to mixers, tumblers, or sanctioned blockchain addresses from licensees' crypto-payment channels; this functions as a forward enforcement trigger once the guideline's compliance milestones are reached, rather than as a presently active enforcement event. The combination of an unresolved internal governance question and two approaching statutory deadlines (8 October and 24 December 2026) represents an elevated but not yet crystallised risk picture: the exposure is institutional and procedural rather than a hardening of the licensing framework or a confirmed enforcement escalation against operators.

The Curacao Gaming Authority (CGA) holds significant investigative and licence-revocation authority under the LOK, a durable statutory grant. This cycle surfaces three specific, dated revocation-risk drivers rather than generic powers: failure to meet local-substance staffing thresholds by the 1 April 2027 deadline; non-submission of a compliant crypto policy within three months of the June 2026 guideline; and acceptance of funds from sanctioned wallets, mixers or tumblers, the latter an immediate rather than deferred obligation. These findings carry probable confidence, resting on T3 legal and compliance-vendor commentary rather than a primary CGA enforcement notice, but are corroborated across multiple independent sources. The crypto-policy guideline itself is a fragile regulator circular, distinct in durability from the LOK's durable statutory basis, meaning its specific deadlines carry less procedural permanence than the underlying licensing framework. No enforcement events beyond these risk drivers were identified this cycle; the picture is one of defined forward risk rather than an active enforcement record.

CGA enforcement hardened materially through the period following LOK implementation. Over an eighteen-month window, the CGA revoked three operator licences, each involving affiliate-driven traffic into restricted countries, and separately exposed a fraudulent digital-seal site, trumpbet.cc, in February 2026, a probable-confidence but concrete enforcement record. Beyond these realised actions, the CGA announced its intent to pursue domain-level blocks and referrals to international law enforcement against operators serving players without a valid direct licence or suspected of AML violations. This announced mechanism is carried at probable confidence and fragile durability, reflecting a stated enforcement intention rather than a codified instrument with confirmed cases behind it. Read together, the confirmed revocations and fraud exposure alongside the stated escalation toward domain-blocking and cross-border referral indicate a durable shift from a light-touch to an active enforcement posture, with risk concentrated on operators relying on affiliate traffic into restricted markets or lacking robust AML controls.

The CGA's enforcement toolkit is confirmed and statutorily grounded: orders subject to penalty, administrative coercion, administrative fines, and revocation, suspension or amendment of permits are all available powers under the LOK and its implementing instruments, a durable primary-legislation basis rather than a fragile circular. Evidence of active use accompanies the statutory grant: in February 2026 the CGA publicly exposed a fraudulent operator, trumpbet.cc, that was using a fake digital authorisation seal, demonstrating real market-surveillance capacity. Separately, the Board of Financial Supervision for Curacao and Sint Maarten formally retracted, in December 2025, an earlier claim that the CGA was under criminal investigation, acknowledging that the claim had relied on unverified rumours; taken together with the trumpbet.cc exposure, this retraction strengthens confidence in the CGA's enforcement credibility this cycle. The more consequential enforcement-adjacent risk is cross-border: a Curacao-based trust office, Downtown E-commerce Company, is named as administrator for Novatech Solutions (fined EUR24.8 million by the Dutch state lottery) and is separately named in a Nederlandse Loterij civil suit seeking personal liability against operators, trust offices and directors, though this litigation remains unresolved.

The reform-relevant development for Curacao is forward-looking rather than legislative. The Curacao Gaming Authority has commissioned an independent forensic investigation into the impact and causes of unauthorised access to its online licensing portal, an access window that ran from December 2025 to September 2026 and exposed confidential ownership and licensing data of licensees under the LOK regime. The CGA has already discontinued the compromised, externally-managed portal and replaced it on a temporary in-house basis, and has filed criminal complaints in Curacao, Germany and the Netherlands over the access. No specific reform proposal, consultation or draft instrument addressing licensee data-handling or the CGA's systems has yet been announced: the investigation's outcome, once published, is the signal that would indicate whether new system or data-handling requirements for licensees will follow. Until then the reform horizon for Curacao records an open question rather than a pending change.

The near-term reform horizon for Curacao is anchored by two converging statutory and policy deadlines: the B2C terms-and-conditions active-consent requirement due 8 October 2026, and the LOK's B2B critical-service supplier licensing and registration transitional period becoming fully enforceable 24 December 2026. Running alongside these is the CGA crypto guideline's phased compliance timetable, with milestones at approximately September 2026, approximately December 2026, and full compliance targeted for mid-2027. No new primary legislation was identified this cycle; the tightening is proceeding through regulator guidance and the expiry of an existing statutory transitional period rather than through a new Act or amendment.

The LOK's structural transition, from master-licence sub-licensing to direct CGA regulation, is now largely complete. The active reform frontier has shifted to phased implementation on two fronts: the CGA's crypto-policy guideline, under which immediate bans on mixers and sanctioned wallets are already in force and wallet segregation with full technical compliance is due by June 2027, and enforcement of the local-substance staffing requirement, running to an April 2027 deadline. Both are concrete, dated milestones rather than speculative developments, and both will materially affect which operators find Curacao viable going forward. No primary CGA or Curacao government gazette source for either the LOK text or the crypto guideline document was reached this cycle, which remains an open gap in the evidentiary record for this reform horizon.

Curacao's reform horizon carries several forward-dated milestones. A mandatory B2B supplier licensing requirement is reported to be on the CGA's regulatory roadmap, though it carries no confirmed effective date and rests on a single lower-confidence source. The crypto AML/KYT guideline's phased milestones extend through June 2027, with an interim policy-submission deadline around September 2026 and a risk-assessment and training milestone at roughly six months. The local key-person staffing rule, already extended to 1 April 2027, is expected to be revisited again by the CGA in 2027. Taken together, these multiple forward-dated regulatory milestones, spanning licensing, crypto compliance, and local-substance requirements, constitute an active reform horizon rather than a settled status quo, with the B2B licensing mandate the least certain and the crypto compliance calendar the most concretely scheduled.