Gambling Licensing

Curaçao’s new licensing regime: what changed and who it affects

Curaçao used to be the easy answer.

Cheap. Fast enough. Familiar to banks and game suppliers. And, if we’re being honest, a bit too relaxed in places. A lot of casino and sportsbook operators picked it because it let them get moving without the pain of a full-blown MGA or Isle of Man process.

That version of Curaçao is gone.

The island has rebuilt its licensing system, and the change is bigger than a form update or a new fee schedule. If you’re running an online casino, sportsbook, crash game brand, white-label platform, affiliate-heavy operation, or B2B gaming service, this affects you directly. Maybe not tomorrow morning. But yes, it affects you.


So what actually changed?

The old model was built around master licence holders and sub-licenses. Most operators never dealt with the government in a meaningful way. They dealt with a master licensee, got covered under that umbrella, and carried on.

Now the structure is being pulled into a more standard regulatory shape. Direct licensing. Direct oversight. More disclosure. More AML expectations. More questions about ownership, source of funds, control, game fairness, player balances, complaint handling, and who exactly is doing what inside the business.

Which, honestly, was overdue.

The new regime is tied to the National Ordinance for Games of Chance – usually shortened to LOK. The headline point is simple: Curaçao wants licensed businesses to be supervised more like proper regulated operators, not rented passengers sitting under someone else’s permit.

That means:

  • the old master licence and sub-license structure is being phased out
  • operators apply more directly under the new framework
  • B2C and B2B businesses both fall under clearer licensing expectations
  • AML, governance, and operational controls get more attention than before
  • regulators want visibility over beneficial owners and actual decision-makers

Short version? The barrier to entry is higher. Not impossible. Just less casual.


Who gets hit by this first?

B2C operators feel it fastest. If you’re taking player deposits, holding balances, settling bets, running bonuses, or marketing under your own brand, you’ll face the most obvious scrutiny. That’s especially true if your traffic comes from mixed markets and your payments stack includes crypto, agent networks, or high-risk PSPs.

But B2B firms shouldn’t get comfortable.

Game studios, platform providers, white-label suppliers, odds feeds, PAM providers, and back-office vendors are increasingly part of the licensing conversation too. Regulators have finally caught up to the fact that “we’re only software” doesn’t always mean low risk. If your product shapes gambling activity or touches player funds, KYC flow, reporting, wallet logic, or fraud controls, expect questions.

And there’s another group founders forget about until it hurts – holding companies and shareholders.

If you’ve got a UK HoldCo, a Cyprus marketing entity, a Curaçao opco, and devs contracted through the UAE, the regulator will want the full picture. So will your bank. I’ve seen this kill a banking application because the ownership chart looked like it was assembled in the dark five minutes before submission.


The real shift is AML and control

This is where the new regime stops being a “gaming licence article” and turns into a wider business issue.

Curaçao now expects a more believable compliance setup. Not a copy-paste AML policy from 2021 with “insert company name here” still sitting in the footer. Founders laugh, but yes, this still happens.

You should expect focus on:

  1. UBO transparency – who ultimately owns and controls the business, including indirect holdings and nominee arrangements
  2. source of wealth and source of funds – especially where crypto, prior gambling revenue, or high-risk geographies are involved
  3. player due diligence – onboarding, trigger reviews, enhanced due diligence, sanctions checks, PEP checks
  4. transaction monitoring – unusual deposit patterns, chip-dumping style behaviour, account cycling, bonus abuse, mule indicators
  5. internal accountability – who is the MLRO, who handles suspicious activity escalation, who signs off risk decisions

If you’re still treating AML as an after-the-fact PDF exercise, fix that now. Or you’ll end up paying for the same work three times – once for the licence, once for the bank, and once again when a supplier asks awkward questions during due diligence.

For operators that don’t want to build a full internal function on day one, an outsourced AML officer setup can be a practical stopgap, especially during licensing and early launch. This one’s not overkill. For many startups, it’s the sane option.


Banking and payments will probably get harder before they get easier

People hear “new licensing regime” and assume banks will instantly become friendlier. Nope.

In theory, a cleaner regulatory framework should help Curaçao-licensed businesses look better to EMIs, acquirers, and correspondent banks. In practice, there’s a transition period where compliance teams ask more questions, not fewer. They want to understand whether you’re under the old setup, the new one, or halfway between both. They want policy packs. Group charts. Processing corridors. Chargeback ratios. Top ten markets. Fraud rules. Supplier contracts. Sometimes all in the same week.

And if your payments model is messy, the licence alone won’t save you.

Say you’re a sportsbook targeting Latin America with card acquiring through one PSP, crypto deposits through another provider, affiliate traffic from three grey markets, and customer support outsourced to a seperate company in another jurisdiction. That’s a due diligence headache. The new Curaçao regime doesn’t remove that. It just makes the gaps more visible.

Founders dealing with that usually need to sort the licensing piece and the banking architecture together, not as two separate projects. A proper payment strategy and banking access plan tends to save alot of back-and-forth later.


What existing Curaçao operators should do now

Don’t wait for a panic email from a corporate services provider.

If you’re already operating in Curaçao, do a blunt internal review. Not the feel-good version. The real one.

Start here:

  • map your current legal structure – every entity, shareholder, and service provider
  • check which contracts are in the right company name and which aren’t
  • review AML, KYC, responsible gambling, complaints, and data protection policies
  • identify the real operational team behind the business, not just board names on paper
  • prepare source of funds and source of wealth files for owners and key controllers
  • check whether your platform, game, affiliate, and PSP relationships match what you’ll tell the regulator

If those documents all exist and they actually match each other, you’re ahead of the pack. Most don’t. Honestly, most founders leave this too late.


And what about new applicants?

New entrants need to stop seeing Curaçao as the “quick and dirty” route. It may still be commercially attractive. It may still be faster than some European licences. But the application story has changed. Regulators will expect a business that looks real, funded, organised, and supervised.

So before filing anything, get clear on a few things:

Your target markets. If your player base is mainly in regulated EU markets, a Curaçao licence might not solve the market access problem you think it solves. Different issue entirely, but a common mistake.

Your operating model. Pure B2C? White-label? Skin model? Turnkey platform? Hybrid crypto casino with fiat ramps? Each creates different licensing and AML questions.

Your corporate stack. The regulator, your bank, and sometimes your key B2B suppliers will all look at this. If the structure feels improvised, you’ll spend months cleaning it up later.

Your compliance owner. Someone must actually own AML, reporting, screening, and policy updates. If that’s “the lawyer who helped set up the company” or “our COO checks alerts sometimes”, that’s not a real answer.


This also affects suppliers and partners around you

A funny thing happens when a jurisdiction tightens up. The ripple spreads.

Game providers adjust onboarding. Payment companies tighten underwriting. Affiliate platforms ask more KYC questions. Even law firms and corporate service firms start refusing weird structures they would have waved through two years ago.

So yes, Curaçao’s licensing reform affects licence holders. But it also changes how everybody around those licence holders behaves. That’s why operators who prepare early tend to move faster later – their docs are cleaner, their banking file is cleaner, and supplier due diligence stops being a monthly fire drill.


Final thought: this is a clean-up, not a shutdown

Some founders hear all this and assume Curaçao is “finished”. I don’t think that’s right.

It’s more accurate to say Curaçao is trying to grow up. There will be friction. There always is. Some operators won’t make the jump because their setup was too flimsy to survive proper scrutiny. Fair enough. Others will end up in a better position – more bankable, easier to diligence, and less dependent on borrowed licence umbrellas.

If you’re serious about building a gambling business that lasts more than one payment cycle, that’s probably a good trade.

And if you’re at the planning stage, don’t treat licensing, AML, structure, and payments as seperate boxes. They’re the same project wearing different clothes.

Read more about AML & Compliance issues that usually surface during gaming licence applications. And if you’re comparing jurisdictions, this guide on how gambling operators structure multi-entity groups for licensing and banking will save you a few expensive mistakes.

More insights