The Curaçao Gaming Authority (CGA) has released its first quantified look at the new LOK (Landsverordening op de Kansspelen) regime. As of April 2026, the regulator has processed roughly 140 direct-license applications, approving 87 and rejecting or shelving the rest. All in all, this averages at a 38% rejection rate.

This high attrition rate signals the end of the “cheap and easy” era of Curaçao licensing. Hundreds of operators that previously traded under the opaque “Master License” system are now finding themselves unable or unwilling to meet the island’s new, rigorous statutory standards.

Four master licensees became one regulator

For three decades, the Curacao online-gambling sector ran on a structure inherited from 1993. Four private master licence holders, themselves licensed by the territory, issued sub-licences to operators worldwide, and the master holders carried the bulk of the compliance and AML obligations. The model was cheap and fast. It is also the model that put the territory on the FATF’s radar for AML weakness and gave the entire offshore crypto-casino segment its reputational problem.

The replacement law was passed in December 2024. All old sub-licences expired in January 2025, and the so-called Orange Seal transitional permits lapsed on October 15, 2025. Every B2C operator that wants to keep accepting players must now hold a direct CGA licence and demonstrate compliance against the new statutory standard.

What a direct licensee must demonstrate

The bar to enter is substantially higher than under the old master-licence pipeline. The application fee runs €4,592 non-refundable. Annual fees total €47,450 for a B2C licence (€24,490 to the National Treasury, €22,960 to the CGA supervisory budget), and €24,490 annually for a B2B supplier licence. Local-staffing enforcement against the licensee’s actual Curacao presence has a hard deadline of April 1, 2027, which removes the “Curacao licence as a postcode” framework that defined the previous era.

AML obligations have hardened in parallel. Risk-based customer verification is required at all amounts, identity checks become mandatory above a transaction threshold of NAf 4,000, and the CGA expects licensees to operate Chainalysis or Elliptic blockchain-analytics tooling. Suspicious-activity reporting flows directly to the Curacao Financial Intelligence Unit, with a three-year data-retention mandate on transaction records. Tier-IV-certified data centre presence in Curacao, end-to-end database encryption, hardware security modules for private keys, and multi-factor compliance access are part of the same statutory bundle.

But the structural shift is more important than any single requirement. Crypto-native operators now face the same AML scrutiny as fiat-only platforms, and chain-analytics is a hard tooling requirement, not a checkbox. The cumulative load is what the 38% rejection rate captures.

Trumpbet.cc and the enforcement signal

The CGA has begun to flex its enforcement muscles.

In February, the CGA exposed an operator running at trumpbet.cc that was displaying a fake digital authorisation seal on its site. The site had no relationship with the CGA, no live application, and no legitimate Curacao presence. The CGA published the call-out, pushed enforcement notices through its registered channels, and added domain-level block referrals for suspected AML violations to the package of actions available against unlicensed operators caught serving Curacao-named markets.

The trumpbet matter is small in dollar terms. It is significant as a precedent. Under the master-licence regime, an operator faking a seal was a problem for the four master holders, not the CGA. Under direct licensing, the CGA owns the perimeter. Enforcement is now its job, and the trumpbet call-out establishes that the regulator will publish names, hand referrals to international law enforcement where AML violations are suspected, and use domain-block requests against operators serving customers without a valid direct licence.

What to watch next

The headline metric to track from here is the approval pipeline’s velocity. A 38% rejection rate against 140 processed applications is the early-cycle reading. Whether that rate rises, falls, or stabilises through the rest of 2026 will determine how many of the operators that previously held a Curacao sub-licence end up inside the regulated perimeter and how many move to other jurisdictions.

The ultimate test remains the April 2027 substance deadline. Any operator that holds a license on paper but fails to establish a physical Curacao office by then will likely face immediate revocation and domain blocking.

The end of the master-licence era is the easy part. The economic-substance test is what closes the loop.