Curaçao gambling licence requirements under the GCB and LOK in 2026 From master-licensee offshore hub to a single direct-licence authority: the post-LOK regime explained

No other jurisdiction has shaped the operating reality of online gambling as decisively as Curaçao. From the introduction of the National Ordinance on Offshore Games of Hazard in 1993 until the parliamentary adoption of the LOK in December 2024, the small Caribbean country sitting inside the Kingdom of the Netherlands functioned as the open-licence default of the online industry: industry estimates have consistently placed the share of internationally available online casino brands operating under a Curaçao sublicence at well above one third, and in some segments (high-volatility crypto-native casino, grey-market sportsbook) the share approached the majority of supply. The infrastructure was a four-licensee tree (Cyberluck, Antillephone, Curaçao Interactive Licensing, Gaming Curaçao) that issued sublicences in volume to operators worldwide.

That model is now legally extinct. The LOK reform closes the sublicensing window, replaces the master tree with direct licensing from a single authority and constructs a modern supervisory architecture aligned to Financial Action Task Force expectations. The transitional regime ran through 2025; the orange digital seal that distinguished provisional sublicensees expired on 15 October 2025. Every operator that previously held a Curaçao sublicence either applied for a direct licence under the LOK, transitioned to another jurisdiction, or now operates outside the licensed perimeter.

The strategic question for the rest of the industry is what the new Curaçao regime is worth in the post-LOK ecosystem. The 2026 Curaçao licence is no longer the cheapest paper available in the offshore market; it is no longer issued by a private master holder; and it carries a real supervisory programme with FATF-aligned anti-money-laundering obligations enforced by the FIU Curaçao through the goAML reporting line. The cornerstone trade-off is now closer to the offshore Malta or Isle of Man position than to the old sublicensee shelf. For the latest cross-jurisdiction comparison see the LATAM cluster comparison; for European contrasts see the MGA and UKGC profiles.

The master licences themselves were five-year grants with automatic renewal. The master could sublicense unlimited operators; the sublicence remained valid only as long as the underlying master licence stayed in force. The economic logic was that of an indirect wholesale licensing market: the master charged a fee, supplied the corporate vehicle (typically a Curaçao N.V.), passed on a slice of the regulatory perimeter and accepted the residual oversight risk. From the perspective of an international operator the appeal was speed and cost; from the perspective of counterparties (payment processors, game suppliers, affiliates) the proposition was that any Curaçao sublicence number was sufficient evidence of formal licensing.

The structural fragility of the model was visible from the early 2010s and became impossible to ignore by the early 2020s. Oversight was diffused across four private holders with no common standard; anti-money-laundering coverage was inconsistent; the sanctioning loop ran through the master holder rather than through the state regulator; and the reputational consequences for the wider Curaçao economy were rising. The Dutch government and the Kingdom of the Netherlands institutions exerted sustained pressure for reform throughout the period 2018 to 2023, linked to mutual-evaluation findings from the Caribbean Financial Action Task Force, to Dutch policy alignment with the broader European online-gambling supervisory architecture, and to the wider need to address Curaçao's sovereign financial position under the Cft (College financieel toezicht) framework. The result was the legislative process that produced the LOK.

The structural change is straightforward to describe and consequential in operation. Under the NOOGH framework the state authorised four master licensees and the masters authorised the operators; under the LOK the state authorises the operator directly. The intermediate layer is removed. The Curaçao Gaming Control Board, statutorily competent under the LOK as the sole issuer of land-based and online gambling licences, now signs the operating grant, conducts the fit-and-proper assessment of the natural-person beneficial owners, evaluates the technical infrastructure, supervises ongoing compliance and exercises the sanctioning power. The four master holders retain their corporate identity, but their licensing function under the NOOGH is exhausted; the master licences themselves expired across the 2024 to early-2025 window with the final extension running into January 2025.

The institutional rename is operationally important. The Gaming Control Board was constituted under earlier Curaçao law as the supervisor of the land-based casino sector and of the lottery, charity bingo and charity bon ku ne licences; under the LOK its perimeter expanded to cover online games of chance, and during 2025 it began to operate publicly under the “Curaçao Gaming Authority” brand. The two names refer to the same statutory authority. The reorganisation also moved the regulator from the Ministry of Finance to the Ministry of Justice in August 2025, locating oversight inside the ministry responsible for the criminal-justice and anti-money-laundering pillars rather than the fiscal pillar; in practical terms this aligns the LOK supervisor with the public prosecutor and with the FIU Curaçao reporting line.

The application runs in two formal phases. Phase One covers the integrity and financial-viability assessment: corporate documentation of the applicant entity (a Curaçao N.V. or local equivalent), beneficial-ownership disclosure to the ultimate natural-person level, certified criminal-record extracts for directors and beneficial owners, financial statements supporting the going-concern assessment, source-of-funds documentation for the share capital and for any inbound financing, and the fit-and-proper questionnaire. Phase Two covers the technical, operational and legal compliance file: the technical-architecture description, the RNG and platform-certification reports from a recognised testing laboratory, the responsible-gambling policy, the AML/CFT programme documentation aligned to the FIU Curaçao framework, the data-protection and information-security documentation, the terms and conditions and the responsible-marketing policy. Each phase carries an indicative processing time of approximately eight weeks under the CGA's published guidance.

The licence itself is issued by the CGA in the name of the applicant entity. A provisional licence may be issued for up to six months while the formal grant is being finalised, allowing the operator to commence supply under a defined supervisory perimeter. Once granted, the licence is renewable on the annual cycle linked to the fee schedule; material changes (change of control, addition of new verticals, replacement of the certified platform) require notification and, depending on materiality, a fresh round of assessment by the regulator.

The CGA fee policy published in November 2025 confirms the headline numbers and clarifies the invoicing mechanics. For the first year of operation under a LOK licence, the licensee is invoiced in two instalments covering six months each; the first instalment is payable before formal grant, the second is contingent on continued eligibility at the six-month checkpoint. After the first year the schedule moves to a single annual invoice. Invoices fall due within 14 days of issue; non-payment beyond 71 days triggers formal revocation and removal from the public register. The application fee is non-refundable and is payable in full at the point of submission of the Phase One file.

The structural point for an operator running the numbers is that the headline Curaçao annual fee is now a meaningful multiple of the historic sublicensee proposition (which sat in the low five-figure euro range all-in) but remains well below the effective Maltese or British annual cost once compliance contributions and supervisory levies are added. Curaçao's fee transparency under the LOK is also higher than under the master regime, where headline numbers were obscured by the master holder's commercial overlay.

Pre-launch certification of the technical platform is a prerequisite for the grant of the B2C licence and a recurring obligation thereafter. The CGA accepts certification from internationally recognised testing laboratories operating under recognised accreditation schemes, including GLI, BMM Testlabs, eCogra, iTech Labs, NMi and equivalent organisations. RNG certification, game-fairness audit, platform-security testing, payment-flow integrity and the audit of the platform's logging and reporting capabilities form the standard scope. Material changes to the platform (new RNG component, new game integrations beyond the certified scope, change of payment processor architecture) require notification and, depending on materiality, re-certification before activation.

Customer identification before account funding or play is required under the AML framework summarised in the next section. Minimum age is 18. Responsible-gambling tools mandated at platform level include deposit limits, session-time controls, reality-check messaging, a self-exclusion mechanism applied across the operator's products, and player-activity reporting available to the customer on demand. The CGA's Responsible Gaming policy, refreshed during the LOK transition, also requires staff training on problem-gambling indicators and a designated responsible-gambling officer at the licensee.

The residency perimeter is where Curaçao differs sharply from a domestic licensing regime such as the UKGC or the Dutch KSA. The Curaçao licence is an offshore licence with extraterritorial reach: it permits supply from Curaçao to non-resident players in jurisdictions where such supply is permitted, but it does not authorise supply to Curaçao residents themselves, and it does not displace the domestic licensing requirements of the player's home jurisdiction. Practitioner guidance and CGA portal rules consistently exclude Curaçao itself and the European Netherlands from the addressable market of a Curaçao B2C licensee; supply to the United Kingdom, the regulated United States states, France, Australia and most regulated European markets requires a local licence and is not covered by the Curaçao grant. Operators using a Curaçao licence to serve residents of regulated jurisdictions without the corresponding local licence remain exposed to enforcement by the host-state regulator (the Dutch KSA in particular has pursued unauthorised Dutch-facing supply by Curaçao-licensed operators).

The reporting line runs through the FIU Curaçao (Financiële Inlichtingen Eenheid), historically known as the Meldpunt Ongebruikelijke Transacties (MOT). The name change to FIU Curaçao tracked the alignment with FATF terminology; the statutory function remains the same. Reports are filed through the goAML platform, the standard FIU-side technology used by Egmont Group financial-intelligence units. For the gambling sector the threshold for objective unusual-transaction reporting is set at NAf 5,000 (approximately EUR 2,500 / USD 2,700 at the prevailing ANG-USD peg). Customer due diligence is required for occasional transactions at or above NAf 4,000, and the linked-transactions rule prevents structuring by aggregating individually sub-threshold movements that cumulatively reach or exceed the CDD threshold.

At operator level the LOK framework requires the designation of a compliance officer responsible for the AML programme and for the relationship with the FIU. The programme must cover the standard FATF-recommended elements: a risk assessment of the operator's customer base and product mix, written policies and procedures, customer due diligence and enhanced due diligence for higher-risk customers (politically exposed persons, customers from high-risk jurisdictions, high-volume players), transaction monitoring, suspicious / unusual transaction reporting through goAML, record-keeping and staff training. The CGA verifies AML programme adequacy at the application stage and during recurring supervision; non-compliance carries both administrative consequences under the LOK and criminal exposure under the MLTFPO. The FATF and CFATF context is the explicit motivation: the LOK reform was designed in part to address mutual-evaluation findings on the strategic deficiencies of the pre-2024 framework, and the Curaçao position in the FATF process continues to be monitored against the implementation of these standards. See the AML and Financial Compliance Hub for the cross-jurisdiction reporting-line comparison.

The mechanism inside the transition was the orange digital seal. Existing NOOGH sublicensees in good standing were converted to provisional licensees under the LOK and received a CGA-issued orange seal that operators displayed on their consumer-facing properties as evidence that the underlying licence had been brought inside the new regime pending formal direct grant. The provisional licence permitted continued operation but did not waive any of the substantive LOK obligations: the operator was expected to file a direct B2C or B2B application within the transitional window, to operate under the LOK player-protection and AML rules during the provisional period, and to clear any outstanding obligations to the legacy master holder.

The 15 October 2025 sunset is the regulatory hard stop. Operators that did not complete the direct-licence application by that date, or whose application was refused, are no longer authorised under the Curaçao framework. The four legacy master licensees no longer issue or maintain sublicences; their NOOGH licensing function ended with the master-licence expiries that ran across 2024 and into January 2025. An operator that continued to display a sublicensee number after the sunset without a direct CGA grant is operating outside the licensed perimeter and is exposed to enforcement under the LOK sanctioning regime (including the precautionary measures available to the CGA) and, depending on the host jurisdiction, to enforcement by foreign regulators against unauthorised cross-border supply.

The practical answer to the question often asked in 2026 (“is a Curaçao licence still valid?”) is therefore conditional. A LOK direct B2C or B2B licence issued by the CGA is valid and is the only valid Curaçao gambling licence going forward. A reference to a master sublicence number alone is not evidence of current authorisation. Operators and counterparties should verify the licensee's status through the CGA Licence Management Portal at portal.gamingcontrolcuracao.org.

The CGA's administrative powers under the LOK include warnings, administrative fines, suspension of the licence, revocation of the licence and a range of precautionary measures including the publication of public notices and the imposition of operational conditions on the licensee. Removal from the public register follows revocation and is itself a market-facing sanction, since counterparties (payment processors, game suppliers, platform partners) verify operator status against the CGA registry. Public enforcement actions in the early phase of the LOK have focused on the transition perimeter (compliance with the orange-seal conditions during 2025, then closure of the seal regime) and on the AML programme readiness of operators moving from the provisional to the direct grant.

Criminal-law coordination runs through the Curaçao Public Prosecutor for the predicate offences (money laundering, terrorist financing, fraud) and through the Cft-aligned oversight architecture for the wider integrity of the licensing process; investigations by the Public Prosecution Service into the Curaçao Gaming Authority itself were reported during 2025 and reflect the institutional scrutiny that has accompanied the LOK rollout. On the extraterritorial axis, the Dutch Kansspelautoriteit (KSA) has consistently asserted enforcement competence against Curaçao-licensed operators serving Dutch residents without a Dutch licence; the KSA's high-fine programme on unauthorised supply has reached operators with Curaçao paperwork in multiple cases since 2022, and the LOK reform does not waive the host-state enforcement power. Operators using Curaçao authority to argue access to regulated European markets without local licences remain exposed.

The strategic read for an operator already running under a Maltese MGA or a British UKGC licence is that Curaçao does not substitute for either; the LOK grant is an offshore extraterritorial licence and does not by itself authorise supply into the EU or the UK. The strategic read for an operator running on the Brazilian SPA permit or the Peruvian MINCETUR authorisation is symmetrical: Curaçao does not waive the local-presence requirement of those regimes either. The Curaçao position now is closer to the MGA position on counterparty acceptance than to the old sublicensee shelf, but closer to the historical offshore position than to the Maltese position on EU market access. For operators choosing between offshore options, the relevant comparators in 2026 are Anjouan, Tobique, Kahnawake, the Isle of Man OGRA, and the smaller European offshore positions; against each of these the Curaçao LOK now competes on the strength of its supervisory programme, not on the cost of the paper. The cross-comparison page at /jurisdictions/ and the LATAM cluster comparison set the field side by side.