iGaming License in Curaçao 2026: A Step-by-Step Guide Under the New LOK Regime

The Landsverordening op de Kansspelen (LOK) entered into force on 24 December 2024, replacing the 1993 NOOGH framework that had governed offshore online gaming for three decades. The master/sub-licence model is abolished. Every operator now holds a direct B2C licence issued by the Curaçao Gaming Authority (CGA). The sub-licensee phase-out completed on 15 October 2025.

The cost structure changed too. Under LOK, you pay €47,450 per year in statutory B2C licence fees: €24,490 in Treasury Licence Fees and €22,960 in CGA Supervisory Fees, both billed annually. A €4,592 application fee is due at filing, on top of the first-year annual fee.

Substance requirements also took effect. From 1 January 2026, every CGA licensee must have a registered office address in Curaçao, at least one locally resident managing director, and local employees. A virtual mailbox no longer qualifies. That is only the day-one bar; the onshoring requirements step up further through 2027, 2028, and 2029 with additional Key Person residency rules. If you planned around the 2% E-Zone corporate income tax rate, that regime expired on 1 January 2026. The standard rate is now 15% on profits up to XCG 500,000 and 22% above that.

An iGaming license in Curacao fits early-stage operators who want one licence covering every vertical (casino, sportsbook, poker, lottery) without piecing together multiple approvals. It works for crypto-tolerant operations: there is no in-principle bar on crypto deposits or withdrawals, and the CGA has built crypto handling requirements directly into its new Terms & Conditions framework. Realistic first-year all-in spend sits in the €40–100k range depending on your corporate structure, due-diligence headcount, and how many domains you register.

Curaçao is the wrong choice if your investors or payment processors require an EU-passportable licence, since it has no EU equivalence or passporting rights. It is also not the right starting point if your target markets are Tier-1 regulated territories (Germany, France, the Netherlands) that require local licences regardless. And if your team cannot establish genuine local substance in Curaçao from the outset, the 2026 rules mean compliance exposure from day one.

The NOOGH (National Ordinance on Offshore Games of Hazard) was enacted in 1993, making Curaçao one of the world’s first jurisdictions to create a legal framework for online gambling. The first licences were issued in 1996, and for nearly three decades the system ran on a master–sublicence model: four master licence holders could each sell sublicences to hundreds of online operators, acting as the regulatory interface between the government and individual operators.

Key milestones during the NOOGH era:

• 1993: NOOGH enacted; offshore gaming gets a legal home in Curaçao.
• 1996: first iGaming licences issued under the new ordinance.
• February 2019: the Gaming Control Board (GCB) was appointed AML/CFT supervisor; this did not make the GCB the licensing regulator, and the master licence model stayed in place.
• July 2023: the Ministry of Finance publicly disclosed the new direct-licensing regime that would replace NOOGH.
• 15 November 2023: the direct (standalone) NOOGH licence application window opened; operators could apply in their own name for the first time, via a dedicated CGA portal.
• 31 January 2025: the last NOOGH master licence expired, formally ending the master–sub era.

The Landsverordening op de Kansspelen entered into force on 24 December 2024 (not April 2024, as some earlier sources reported). Applications submitted before that date were processed under NOOGH rules; applications filed on or after 24 December 2024 fall under LOK.

The LOK replaces the single-master-licence structure with two distinct licence categories:

• B2C operator licence: authorises a company to offer games of chance directly to end players. The CGA reopened the B2C portal in mid-March 2025.
• B2B supplier licence / certificate: covers providers of critical gaming services, software, and infrastructure to operators. The B2B portal opened in May–June 2025, subject to accreditation of testing laboratories.

The sublicensee transition ended on 15 October 2025, by which point all former sublicensees were required to hold a direct CGA licence. A six-month extension to 24 December 2025 was granted to a select group of NOOGH-pipeline operators who had not yet completed their conversion.

The Curaçao Gaming Authority (CGA) is the licence-issuing regulator under LOK. It succeeded the Curaçao Gaming Control Board (CGCB/GCB), which had functioned mainly as an AML/CFT supervisor. The CGA evaluates applications, issues licences, conducts ongoing supervision, and can suspend or revoke a licence for non-compliance.

Applications are filed through the CGA applicant portal. The fit-and-proper assessment has three parts: ownership and control, the operator’s capacity to prevent crime and protect players, and the stability and security of the platform. Once approved, you enter a provisional licence phase valid for six months, extendable by another six months, before converting to a full licence.

The B2C licence authorises any business offering games of chance directly to players. One licence covers all gaming verticals: casino, sportsbook, poker, lottery, daily fantasy sports, and esports wagering. It is product-agnostic provided each game is individually certified.

The statutory annual fee is €47,450, split into two components billed by different authorities:

• Treasury Licence Fee: €24,490, payable to the Curaçao Treasury
• CGA Supervisory Fee: €22,960, payable directly to the CGA

Invoices are due within 14 days of issuance. Failure to settle within 71 days triggers formal revocation and removal from the CGA public register. From 2026 onwards, annual fees are payable in full by 15 January each year.

The B2C licence is issued for an indefinite term, subject to continued payment of annual fees, ongoing compliance, and periodic CGA review.

Businesses that supply critical gaming services to B2C operators (software platforms, RNG engines, game content, or managed gaming services) must hold a B2B supplier licence. The annual CGA Supervisory Fee is €24,490. The licence is indefinite in term, renewed through annual fee payment.

For vendors whose activities are non-critical or narrowly scoped (payment processing partners, minor ancillary services), the CGA offers the B2B Certificate: a one-off fee of €383 valid for three years with no annual renewal charge. The Certificate is not a full licence and limits the holder to the specific activities the CGA authorises under it.

Every applicant must hold a valid Curaçao N.V. or B.V. (local limited-liability company). From 2025 onwards, the entity must have at least one Curaçao-resident managing director, a natural person physically resident on the island and separate from the broader Key Person headcount.

All individuals who own, control, or manage the licensed business are assessed as Key Persons. The CGA applies a three-part fit-and-proper test to every Key Person and to every ultimate beneficial owner (UBO) holding 10% or more of equity:

• Ownership and control: who owns and controls the business
• Crime prevention and player protection: adequacy of AML, KYC, responsible gambling, and complaint-handling systems
• Platform stability and governance: security and resilience of the platform, operations, and critical third-party dependencies

Each Key Person and qualifying UBO must submit a Personal Disclosure Form package. The standard document checklist includes:

• Utility bill: issued within the last 3 months (proof of residential address)
• Passport: valid for at least 6 months from the date of submission
• Curriculum vitae: full professional history
• Certificate of good conduct: police clearance from all countries of residence in the last 5 years
• Bank reference letter: from the applicant’s principal banking institution
• Professional reference letter: from a solicitor, accountant, or regulated professional
• Secondary photo ID: national identity card or driver’s licence
• Source-of-funds evidence: documentation tracing the origin of capital invested in the business
• Birth certificate: may be required at the CGA’s discretion

The CGA verifies the exact source of wealth for every qualifying UBO and expects a three-year financial forecast and bank statements demonstrating sufficient liquidity to cover potential player claims.

The LOK substance obligation took effect on 1 January 2026. All CGA licensees must maintain real operational presence in Curaçao from day one of licensing: a registered office address (not a virtual office), at least one Curaçao-resident managing director, and local employees.

Server location. All player data must be hosted in a Tier IV certified data centre physically located in Curaçao, accessible to the CGA on demand. Article 5.9 of the LOK Regulation requires that critical player data (IDs, account records, deposits, bets, wins and losses, balances) be retained for at least three years, with weekly backups and end-to-end encryption. A secondary in-jurisdiction backup is mandatory. Any deletion or material change to stored data requires CGA approval.

RNG and game certification. Every game offered to players must be certified by an accredited independent testing laboratory before it goes live. The CGA recognises GLI, iTech Labs, and eCOGRA as approved labs. For online RNG-based games, GLI-19 is the recognised technical standard. Operators can verify a game supplier’s certification status directly on the GLI-19 certificate index. Each new game title added to the platform also carries a €13 administrative fee payable to the CGA at the time of registration.

Every figure below is drawn from the CGA Nov 2025 fee policy update. The annual B2C licence fee of €47,450 is the sum of two statutory charges: a Treasury Licence Fee of €24,490 paid to the Curaçao government and a CGA Supervisory Fee of €22,960 paid to the regulator. Many sources cite only the Treasury component, the figure that appears in ANG 48,000 conversion tables, and present it as the full annual cost.

^*USD figures use illustrative EUR × 1.07; check live FX before budgeting. Source: CGA Nov 2025 fee policy update.

The due-diligence charge is the most variable line in an application budget because it scales with both the number of Key Persons and UBOs and their specific role in the corporate structure. The CGA applies a role-based tariff: a passive minority shareholder may pay as little as €150, while the highest application-listing categories (typically the operating director or the entity's primary controller) attract up to €2,551 per person. An operator with three to five Key Persons or UBOs should budget €1,500–€10,000 for due-diligence fees alone.

The UBO / Qualified-Interest-Holder (QIH) change fee of €128 applies whenever ownership or control shifts post-licensing. This is a regulatory notification charge, not a full re-screening, but any restructuring that changes who sits above the 10% equity threshold triggers it, and the CGA investigates each change.

On the operational side, each additional domain costs €250 as a discrete admin fee. Operators running multiple brands or country-specific skins should cost these individually; five domains adds €1,250 to the annual outlay. Adding games or B2B services carries a smaller per-unit fee of €13 each.

The statutory fees are only part of the picture. Corporate formation, local substance, hosting compliance, and professional services all stack on top. The table below models a realistic first-year total cost for a B2C operator entering under LOK, excluding the ongoing annual renewal from year two onwards.

The wide range reflects genuine variability: a lean operation with two UBOs, one domain, and outsourced compliance can land near €40k; a multi-brand launch with five Key Persons, multiple domains, and bespoke AML infrastructure will push well above €100k. From year two, the statutory renewal cost is the annual B2C licence fee of €47,450; the application fee and incorporation costs do not recur.

The CGA invoices licensees on a fixed cycle. Each invoice is due within 14 days of issuance. This is a hard deadline, not a grace period; operators must have cleared funds or a payment process in place before the invoice arrives. Failure to pay within 71 days of the invoice date triggers formal licence revocation and removal from the public CGA register.

The payment schedule has a transitional structure for new licensees. For the first 12 months after LOK went live on 24 December 2024, approved applicants were billed in two six-month instalments rather than a single annual payment. From 2026 onwards, annual fees are payable in full by 15 January each year. Operators on the split-instalment arrangement should not assume it continues automatically; the full-year invoice is due by 15 January and the 14-day / 71-day rules apply from that date.

Curaçao levies corporate income tax (CIT) in two bands: 15% on profits up to XCG 500,000 (roughly €280,000), 22% above that threshold. Most licensees clear XCG 500,000 in their first trading year, so the 22% rate is the practical planning baseline. These rates were confirmed by Grant Thornton Curaçao's 2025 tax law changes bulletin.

The E-Zone 2% profit-tax rate was a separate incentive regime granted to companies with approved E-Zone status. That regime expired on 1 January 2026 and is no longer available to new iGaming licensees. Competitor pages still quoting a “2% effective tax” are out of date. If you already held E-Zone status, reconfirm your position with a local tax adviser; no successor incentive has been announced for the iGaming sector as of May 2026.

If your group has consolidated annual revenue of €750 million or more, Curaçao falls within scope of the OECD Pillar Two global minimum tax framework, effective 1 January 2025. The income inclusion rule (IIR) requires the ultimate parent jurisdiction to levy a top-up charge wherever the effective tax rate in a constituent entity's jurisdiction falls below the 15% global minimum. At Curaçao's 22% CIT rate most large operators already clear the 15% floor, but the calculation is entity-by-entity; substance-based income exclusions, deferred tax positions, and covered tax adjustments all affect the final effective rate. Groups in scope should run a jurisdiction-level GloBE computation before finalising their Curaçao structure.

For iGaming operators below the €750M revenue threshold, Pillar Two does not apply; the standard 15%/22% CIT bands are the only corporate tax exposure to model.

GGR tax: 0%. The LOK does not impose a separate gross gaming revenue tax. This distinguishes Curaçao from Malta (5% GGR) or Gibraltar (tiered GGR levy).

Sales tax (OB), not VAT. Curaçao operates an omzetbelasting (OB) system with tiers of 6%, 7%, and 9%; it is technically distinct from EU-style VAT. For international iGaming operations, player wagers to customers outside Curaçao are effectively exempt from OB: the service is treated as an export. Foreign digital-service providers serving local Curaçao consumers may face a 6% OB collection obligation, but most B2C operators targeting international markets have no material OB liability. Confirm the exact scope with your local tax counsel if you serve any Curaçao-resident traffic.

Withholding tax on dividends: 0%. Curaçao does not levy a dividend withholding tax on outbound distributions to non-resident shareholders under its general corporate tax regime. This was also the position under the now-expired E-Zone regime. Confirm your position with a Curaçao tax adviser before distributing profits, particularly where treaty relief or substance considerations interact with the recipient jurisdiction.

Curaçao AML/KYC rules require operators to identify and verify every player whose cumulative transactions (deposits, withdrawals, and wagers combined) reach ANG 4,000 (approximately €2,050). Once a player crosses the threshold, full KYC documentation must be on file before further play. The Compliance Officer must complete at least 10 hours of AML training per year to remain in role, per the CGA Anti-Money Laundering Policy (January 2025).

Operators must maintain written AML/CFT policies, conduct transaction-monitoring, file suspicious-activity reports with the Financial Intelligence Unit of Curaçao, and keep records sufficient to reconstruct every transaction. Player funds must be segregated from operator working capital at all times; commingling is a material breach.

The CGA Responsible Gaming Policy (17 April 2025) sets binding minimum standards for all B2C licence-holders. Every operator must offer players four self-exclusion options: 1 year, 3 years, 5 years, or lifetime. No shorter temporary cool-off satisfies this requirement as a standalone measure. Self-exclusion records must be retained for at least 5 years.

• Minimum age: 18 years; age verification is mandatory at registration.
• Deposit limits and reality checks: operators must provide tools that let players set binding deposit, loss, and session-time limits.
• Staff training: customer-facing staff must be trained to identify and respond to problem-gambling indicators.

The LOK imposes a structured alternative dispute resolution (ADR) regime. Operators must resolve player complaints within 4 weeks of receipt, extendable once by another 4 weeks in complex cases. Under the Player Complaints Policy Guidelines v1.1 (18 June 2025), safer-gambling-related complaints (self-exclusion failures, responsible-gaming breaches) must be assessed within 5 working days, a tighter clock than ordinary payment or bonus disputes.

If the operator cannot resolve a complaint to the player’s satisfaction, it must provide free access to an independent ADR provider; the player bears no cost for this referral. Complaint records must be retained for up to 5 years, per the Player Complaints Policy Guidelines v1.1 (the lesser of five years or the period mandated by applicable data-protection or statute-of-limitations rules).

On a regulatory basis, all B2C operators must submit semi-annual complaint reports to the CGA covering: total complaints received, nature and outcome of each, number referred to ADR, and any litigation arising. Failure to file these twice-yearly reports on schedule is a standalone compliance breach, separate from any individual complaint outcome.

Annual financial statements are due to the CGA by 30 June each year.

Article 5.9 of the LOK Regulation mandates that critical player data be stored on servers physically located in Curaçao, in a Tier IV certified data centre. The CGA must be able to access this data on demand at any time.

• Retention floor: player records must be kept for at least 3 years; early deletion or modification requires explicit CGA approval.
• Backup schedule: weekly backups to a secondary in-jurisdiction location; single-copy storage does not satisfy the regulation.
• Encryption: end-to-end encryption is mandatory for data at rest and in transit, at or above current industry practice.
• Third-party hosting: if a third-party provider hosts the data centre, the operator retains full regulatory responsibility and must ensure the provider meets all Tier IV and CGA-access requirements contractually.

Tier IV requires 99.995% availability with fully redundant infrastructure; budget this operational cost during the application phase, not after go-live.

T&Cs must now address each of the following explicitly:

• Account closures: procedures and timelines for voluntary and involuntary closure.
• Inactive accounts: defined inactivity periods, dormancy notifications, and fee or balance-forfeiture rules.
• Payouts and refunds: processing timelines, supported withdrawal methods, and dispute pathways.
• Cryptocurrency handling: conversion rates, blockchain confirmation requirements, and volatility disclaimers.
• Bonus terms: wagering requirements, eligibility conditions, and expiry dates stated in plain language.

Critically, passive acceptance is no longer sufficient. Players must actively acknowledge the T&Cs at registration via an explicit checkbox, and any material change to the T&Cs after registration requires active re-acceptance. Operators must maintain verifiable consent records for audit purposes. A pre-ticked box or browse-wrap clause does not satisfy this requirement.

The LOK phases in a Curaçao onshoring requirement through 2029, shifting management, personnel, and infrastructure onto the island rather than allowing shell entities to hold licences remotely. The schedule below is binding; operators that miss a step risk licence review.

The 1 January 2026 substance trigger is already in effect. Operators applying now must demonstrate day-one substance; this is not a future obligation.

The Minister of Finance may grant discretionary exemptions of up to 2 years for operators that cannot meet the local-key-personnel or local-office requirements within the standard timetable. Qualifying start-ups may apply for a 5-year transitional exemption, assessed case by case; approval is not automatic. Operators relying on either exemption must continue working toward full compliance throughout the period and notify the CGA of progress.

All figures are approximate and reflect publicly available licence fee schedules as of mid-2026. “Substance required” refers to local-presence obligations imposed by the regulator, not banking or payment-processor demands.

Curacao vs Anjouan, Curacao vs Kahnawake, Curacao vs Costa Rica: the cost gap is real, but so are the reputational and banking-access differences between these offshore gaming jurisdictions.

Curaçao makes sense when you cover multiple verticals, your year-one budget is €40k–€100k, and you need a regulator payment processors and banks will accept.

• One licence covers all verticals: rivals that limit scope by vertical force you to stack licences and costs.
• Audited compliance posture: the CGA's fit-and-proper review is harder to pass than Anjouan or Tobique, but the result carries more weight with banking partners.
• Broad payment-processor acceptance: CGA-licensed operators are accepted by a wider set of PSPs and acquiring banks than lower-tier jurisdictions.
• Crypto-tolerant with credible oversight: no restrictions on cryptocurrency deposits or withdrawals, backed by a regulator banks recognise.
• Year-one spend fits your scale: the €40k–€100k all-in (licence, substance setup, compliance tooling) suits operators past MVP stage.

Curaçao is the wrong answer in several common scenarios.

• Budget is the binding constraint: Anjouan, Tobique, and Costa Rica come in at a fraction of Curaçao's €47,450 annual fee, but expect lower bank acceptance and weaker player trust in return.
• Single-vertical or short-cycle product: a Costa Rica Data Processing licence (≈$7,000 first-year, ~5–6 weeks) lets you launch, validate, and pivot without locking €47k into infrastructure you may not need long-term.
• You need an EU market passport: no offshore licence provides access to regulated EU markets. If Germany, Sweden, or the Netherlands is your target, you need Malta (MGA), the Isle of Man, or a national licence in the target state.
• North American player base is your primary focus: Kahnawake has longer-standing recognition among North American payment processors and remains the preferred jurisdiction for that audience.