Curaçao Gaming License 2026: LOK Fees, CGA Review Phases, and Technical Compliance

A Curaçao licence for remote games of chance is issued directly by the Curaçao Gaming Authority. The governing statute is the National Ordinance on Games of Chance (LOK), in force since 24 December 2024. A definitive license runs for an indefinite period, and gaming revenue itself is untaxed. Government fees are EUR 4,592 on application and EUR 47,450 a year for B2C. One condition separates this jurisdiction from its offshore peers: critical player records must sit on a Tier-IV certified server in Curaçao.

Operators come for the arithmetic. A single authorisation covers casino, sportsbook, poker, bingo and lottery, crypto deposits are permitted under a written policy, and the annual fee never moves with revenue. The trade-off is substance and supervision, including a resident managing director, an office on the island, an on-island data node and fixed reporting deadlines. Platform planning follows the same split, which is why turnkey casino deployment is mapped before filing rather than during technical review.

The real gaming license cost sits outside the fee schedule. Online gaming businesses carry company formation, a resident managing director, one registered key person and dedicated office space, each with payroll or lease commitments. Add Tier-IV hosting, test laboratory certification, an independent AML audit, a certified ADR provider and banking onboarding. A realistic first-year budget for a B2C operator runs from EUR 75,000 to EUR 120,000. The LOK also provides for a guarantee fund whose premium has not yet reached the published fee schedule.

How to Get a Curaçao Gaming License

Applicants who want to obtain a gaming license now deal with the regulator directly. A gaming license application is accepted only through the CGA online gaming portal, and files submitted outside it are not considered. Processing begins once the application fee invoice clears. Phase one examines integrity and financial condition, while phase two covers the remaining license requirements in the LOK. Completeness is confirmed within two weeks of each submission, and phase-two documentation follows within four weeks of the phase-one decision.

• Incorporate a Curaçao NV or BV and appoint a managing director resident on the island.
• Register in the goAML portal and appoint a compliance officer independent of gaming operations.
• Pay the application fee, adding EUR 150 for each beneficial owner and qualified interest holder.
• File phase one with the corporate and business information form and a personal history disclosure per qualifying person.
• Evidence source of funds and source of wealth for the operation, not only for the shareholders.
• File phase two with the business plan, operations manual, AML/CFT, responsible gaming and information security policies.
• Contract the Curaçao hosting node, an approved test laboratory and a certified ADR provider.
• Register domains in the portal and settle the pro-rata invoices; the license and green seal follow payment.

Three to five months is realistic for a clean file, and the statutory clock only runs once submissions are complete. A gaming application that arrives complete moves faster than one that arrives early. Unverifiable ownership chains, thin source-of-funds evidence and missing key-person disclosures stall phase one. Absent hosting contracts, an incomplete operations manual and unappointed ADR providers stall phase two. Non-payment runs to its own schedule. Reminders arrive at days 15 and 29, intended revocation at day 43, and rejection at day 57, before a full Curaçao gaming licence is ever issued.

Tier-IV Hosting, Player Funds, and Local Substance in Curaçao

Article 5.9 of the LOK is precise about location. Records of critical player, gaming and financial information must stay available to the CGA at all times. They sit on a server in a Tier-IV certified data centre registered in Curacao. Tier IV is the fault-tolerant classification in the Uptime Institute tier standard, built on 2N paths so that no single component failure interrupts service. The obligation is not a migration order. Operators keep the production platform where latency and cost dictate, then maintain a Curaçao node that holds the regulator-facing record set.

• Server location and the hosting contract disclosed to the CGA, with the first invoice as proof of operation.
• Player identities, deposits, wagers, wins, losses and balances present in the local record set.
• Encryption in transit and at rest, plus a secondary backup held on the island.
• Reconciliation between the production platform and the Curaçao node, evidenced on request.
• An operations manual containing a technical infrastructure diagram and recovery procedures, produced within five working days.

Player funds carry a parallel architecture requirement. All payment transactions run exclusively through the player account, and deposits, winnings and any amount otherwise owed sit in a segregated account designated for that purpose alone. Credit for wagering is prohibited outright. The CGA tests liquidity at application and can revoke a license where a holder cannot pay expected prizes immediately. Treasury design therefore belongs in the licensing file, not only in the finance function.

Local substance completes the picture for the gaming business. One key person besides the managing director must work at least 30 hours a week and appear in the Curaçao population register. Three are required from the fifth year after the LOK entered into force, alongside dedicated, physically partitioned office space. The Minister of Justice deferred enforcement to 1 April 2027. Operators below XCG 20 million of annual GGR may qualify for an exemption against half-yearly independent statements. Role conflicts are fixed: the chief executive function cannot hold compliance or AML/CFT duties.

Crypto Models the CGA Permits, and the Conversions It Rejects

Fiat accepted as stakes must be tradable on regulated international markets, and virtual currencies must be tradable on internationally licensed exchanges. The license conditions then close a door that most offshore regimes leave open. The licensee may not exchange currencies inside or outside the player account, convert virtual currency into fiat, or offer investment alternatives to players. Prizes are paid in the same currency used to play. In-game token issuance remains permitted, so the player account management layer must hold true per-asset balances with no internal FX step.

• Immediate effect: bans on sanctioned wallets, mixers, prohibited assets, personal or UBO-linked wallets, and acting as an exchange, payment provider or VASP.
• By September 2026: a crypto policy uploaded to the portal with a documented adoption timeline.
• By December 2026: risk assessments, VASP due diligence, wallet ownership controls, monitoring procedures and staff training.
• By June 2027: wallet segregation, blockchain analytics capability, reconciliation, withdrawal whitelisting and audit-ready records.

Wallet design follows from those dates. Wallets must be owned or controlled by the licensed entity or an approved group entity, and separated between player flow, operations and treasury so player funds never commingle with company funds. Hot wallets hold operationally necessary balances only, warm wallets serve liquidity management under enhanced approval, and cold wallets hold reserves with documented key management. Player-to-player transfers on the platform are not allowed.

Withdrawals default to the same wallet and the same asset as the original deposit. Alternatives are available where the destination wallet is whitelisted, pre-screened and verified as the same customer, or where conversion runs through a regulated VASP with a fully auditable flow. Wrapped and bridged assets of unverified provenance are refused, and privacy-enhancing coins need explicit treatment in the policy. Originator and beneficiary data must accompany transfers between regulated entities under FATF Recommendation 16. Crypto incidents, including compromised keys and exposure to sanctioned wallets, fall under the 24-hour incident report.

Technical Snapshot: Evidence Expected Before Launch

Supervision in this gaming jurisdiction is document-led and calendar-driven. Amendment reports are due twice yearly by 15 January and 15 June, annual financial statements by 30 June, and incident reports within 24 hours of the event. The CGA can also require independent expert reports on AML compliance and on system design. The operations manual must be available for inspection within five working days of a first request.

System area	Implementation requirement	Evidence the regulator asks for
Data residency	Critical player, gaming and financial records on a Curaçao Tier-IV server	Hosting contract, server location disclosure, first invoice
Player funds	Segregated account, ring-fenced balances, no credit for wagering	Account statements and reconciliation between systems
Game integrity	Own and third-party games tested against international gaming standards by a CGA-approved laboratory	Test certificates and supplier disclosure in the portal
Identity and AML	CDD once cumulative daily financial transactions reach XCG 4,000	goAML registration, CDD files, unusual transaction reports
Responsible gaming measures	Cooling-off from 24 hours, self-exclusion from one year to lifetime	RG policy on the portal, intervention records in the PAM
Information security	CIS IG1 baseline, MFA on internet-facing systems, monthly patching	Annual self-assessment and independent third-party audit
Dispute handling	Complaint acknowledged in one week, decided in four, ADR at the operator's expense	ADR agreement, complaints report, decision records
Reporting integration	Portal submissions for incidents, changes, transactions and domains	Submission history and reconciliations against platform data

How the Curaçao License Compares With Other Licenses

Online gambling licenses are not interchangeable products, and headline fees rank them badly. What separates them is the binding constraint each one places on architecture, staffing or market reach, because that is the cost an operator cannot engineer away. A cheap annual fee attached to narrow acquirer acceptance is more expensive than a mid-priced licence with working payment rails. Compared against the seven other regimes NuxGame supports, Curaçao as a jurisdiction sits mid-priced with real infrastructure obligations and broad recognition.

• Isle of Man (GSC) — £5,250 application, then £36,750 a year. 10–12 weeks. Constraint: on-island servers, two resident directors and a local client bank account.
• Malta (MGA) — €5,000 application, €25,000 a year, plus a €15,000–€375,000 compliance contribution on Type 1. Six to twelve months. Constraint: verticals approved individually and €100,000 share capital.
• Gibraltar (Gambling Division) — £50,000–£200,000 a year per vertical, banded by gross gaming yield. Four to six months. Constraint: a separate licence for every vertical.
• Kahnawake (KGC) — $40,000 in year one, then $20,000 a year. 8–12 weeks. Constraint: primary servers inside Mohawk Territory.
• Tobique (TGC) — €2,500 preliminary review plus €33,500 on application, then a €7,000 supervisory package. Four to eight weeks. Constraint: recognition remains narrow outside North America.
• Anjouan (AOFA) — €17,828 to issue and the same again each year. Four to eight weeks. Constraint: limited acquirer appetite on fiat rails.
• Costa Rica (no gaming regulator) — company formation and municipal permits, with no gaming licence and no dedicated regulator. Two to four weeks. Constraint: no regulatory recognition, which closes most tier-one payment and aggregator relationships.

Two cost structures are at work across that list. Cost-per-licence regimes charge for the authorisation and leave revenue alone, while cost-per-market regimes take a share of local earnings. A Curaçao licence is priced identically at EUR 1 million of revenue and at EUR 50 million, whereas Malta layers a compliance contribution of up to EUR 375,000 on its annual fee. Gaming operators serving many small markets from one brand favour the first model. Operators concentrated in one regulated market pay for a local licence there regardless of what they hold offshore.

How NuxGame Helps With the Curaçao Gaming License

Applications stall in two places. Ownership and source-of-funds chains that cannot be evidenced hold phase one, and an incomplete technical file holds phase two. The NuxGame legal team handles company registration, beneficial ownership documentation, AML/CFT and responsible gaming policies, banking and PSP setup, and the portal submission itself. A platform-readiness review runs alongside it, checking that the product configuration matches what the file promises on limits, exclusions, certification status and reporting.

The jurisdiction-specific consequence is a deployment split rather than a single build. Production infrastructure stays where performance dictates, while the Curaçao node holds the regulator-facing record set with reconciliation and backup on the island. The casino API integration is scoped around that division. Incident reporting, transaction reports per registered domain, domain management through the portal and segregated wallets are configured before submission, not retrofitted after a technical query.

Planning a Curaçao filing this year, or reviewing a legacy structure that no longer holds? The NuxGame team can review your ownership, hosting and reporting position through legal services before you commit fees.