On 17 September, the Cura\u00e7ao Gaming Authority disclosed that an applicant account created under a false identity had accessed its online gaming portal for almost nine months. In the days that followed, records said to have come from the regulator\u2019s licensing files began appearing online as part of the Casino Secrets investigation.<\/p>\n
The CGA has confirmed the unauthorized access. It has not yet published a complete account of what was viewed, copied or removed, or identified every business affected. But the material already published shows that the incident was not limited to a technical weakness in a public-facing portal.<\/p>\n
The archive reportedly contains licensing applications, internal regulatory assessments, corporate records, ownership declarations, passport copies, tax documents and financial information relating to Cura\u00e7ao-licensed gaming businesses. Reports based on the archive have also raised questions about ownership checks and licensing decisions involving major operators. That does not mean every claim made about the archive has been confirmed by the CGA. It does mean that operators should assume that sensitive material submitted to the regulator may now be subject to public and commercial scrutiny.<\/p>\n
A licensing file can contain far more than a certificate application. It may include group charts, shareholder and beneficial-owner information, identity documents, tax records, source-of-funds and source-of-wealth evidence, banking details, AML policies, business plans, revenue projections, supplier contracts and correspondence with the regulator.<\/p>\n
The potential exposure of financial information is particularly serious. Financial statements, forecasts, payment records and source-of-funds documents can reveal how a business is financed, where money moves, which counterparties it relies on, expected revenue, operating costs and commercial assumptions. Once such material is available outside the regulatory process, even in part or without context, the consequences can be immediate. Banks and payment providers may revisit their risk assessments. Suppliers may reconsider contracts or ask for additional documentation. Investors and prospective buyers may compare the disclosed material with previous representations. Regulators elsewhere may ask whether ownership, funding, market access and compliance disclosures are complete and consistent.<\/p>\n
Cura\u00e7ao\u2019s Licensing Reform<\/strong><\/p>\n The timing matters.<\/p>\n Cura\u00e7ao is moving from its former master-license model to a direct licensing regime under the Cura\u00e7ao Gaming Authority. The National Ordinance on Games of Chance was intended to bring more direct supervision of online gaming businesses and more scrutiny of ownership, governance, AML controls, operational arrangements and the people behind licensed entities.<\/p>\n That reform was necessary. Cura\u00e7ao could not remain a leading international gaming jurisdiction while relying on a system that gave too much responsibility to a small group of master-license holders. The new regime requires operators to provide fuller information to the regulator and gives the regulator a more direct role in reviewing and supervising their activity.<\/p>\n The breach has exposed the difficult side of that reform. A more serious licensing system collects more information. It asks operators to disclose ownership structures, sources of funding, compliance policies, key individuals and financial arrangements. The regulator becomes the central custodian of information that businesses would usually keep confidential.<\/p>\n The question now is not simply whether the CGA can issue and supervise direct licenses. It is whether it can protect the information that comes with direct supervision. Its forensic response, its communication with affected operators and the changes it makes to access controls, identity verification and portal security will have a direct effect on confidence in the new system.<\/p>\n Offshore Licensing Alternatives<\/strong><\/p>\n The breach comes at a time when the offshore market is already changing.<\/p>\n Cura\u00e7ao remains a major jurisdiction for international casino, sportsbook, crypto-gaming and B2B businesses. Many operators will remain in Cura\u00e7ao, particularly where they are already licensed or have built their structure around the new regime. However, the incident is likely to accelerate the search for alternative options, especially among businesses that are still at the planning stage.<\/p>\n The alternatives are not interchangeable. They differ in the document issued, the legal framework, the quality of supervision, the extent of disclosure, the treatment of B2B suppliers, the role of crypto, banking and payment acceptance, and their credibility with game providers, investors and regulators in target markets.<\/p>\n Anjouan<\/strong><\/p>\n Anjouan has become the most common alternative discussed by operators looking beyond Cura\u00e7ao, particularly for crypto casino, sportsbook, white-label and B2B models. It is often presented as a fast and flexible route for businesses that do not yet intend to enter a locally regulated market.<\/p>\n The terminology matters. Anjouan issues a gaming certificate under its own framework. It is not a local operating license, and it does not give an operator the right to offer gaming services in a country that requires local authorization. Anjouan itself states that certificate holders remain responsible for geo-blocking, market-access controls and compliance with the law in every jurisdiction where they operate.<\/p>\n The certificate has become more structured in recent years. The published conditions now cover beneficial ownership, nominee and trust arrangements, source-of-wealth evidence, B2B relationships, AML and KYC expectations, player complaints and other operational requirements. That development helps explain why Anjouan is attracting so much attention.<\/p>\n It does not remove the questions around the framework.<\/p>\n Anjouan maintains that its system is based on local legislation and administered through the Anjouan Offshore Financial Authority. However, public reporting and statements attributed to authorities in the Union of the Comoros, including the country\u2019s central bank, have challenged the standing of the bodies involved. This is not a point an operator should leave to a service provider\u2019s sales presentation. It requires independent legal and commercial due diligence.<\/p>\n There is also limited public evidence of how the regime operates in practice when a case becomes difficult. The framework refers to due diligence, complaints, suspension and revocation. But there is no substantial public enforcement record showing how it deals with serious AML concerns, customer disputes, ownership misstatements or breaches by certificate holders.<\/p>\n The commercial position can be equally important. Some banking, card-acquiring and payment providers may view an Anjouan certificate cautiously, particularly where the business needs fiat processing, mainstream card acquiring or relationships with Tier 1 suppliers. In practice, an operator may need specialist payment arrangements, enhanced due diligence and a more carefully designed payments structure than it would under a widely recognized regulatory regime.<\/p>\n That does not make Anjouan unusable. It may be appropriate for certain offshore, crypto-focused or early-stage business models. But it should be selected with a clear understanding of what it does not provide: local market access, a proven public enforcement record, universal counterparty acceptance or a substitute for a proper payments and compliance strategy.<\/p>\n \u56fe\u74e6\u5362<\/strong><\/p>\n Tuvalu is drawing interest for a different reason. Its Gaming Authority was designed as a digital-first regulator and offers a framework for casino, sportsbook, poker, bingo, lottery and crypto-related gaming. The process is streamlined, the product scope is broad, the fee structure is predictable and the public register of licensed operators makes it easier for counterparties to verify a claimed authorization.<\/p>\n For a new online business, that is an attractive proposition. Tuvalu is not trying to replicate a paper-heavy licensing model developed for land-based gaming. It is presenting a framework designed around digital operators and modern payment models.<\/p>\n Its limitation is the same as its attraction: it is new. There is still limited public evidence of how the jurisdiction will deal with complex AML investigations, serious player disputes, data incidents, banking reviews, major supplier audits or cross-border regulatory requests. That is not a reason to dismiss Tuvalu. It is a reason to decide carefully whether the business can accept the uncertainty that comes with an emerging jurisdiction.<\/p>\n Nevis and Other New Jurisdictions<\/strong><\/p>\n Nevis and other newer jurisdictions also deserve a careful review.<\/p>\n A government-issued certificate or license, an online application process, crypto compatibility and competitive fees can be useful features. They do not show whether the jurisdiction can support a serious gaming operation once the company needs card acquiring, fiat settlement, Tier 1 suppliers, external investment or expansion into a regulated market.<\/p>\n Nevis operates under a framework introduced in 2025 and remains at an early stage. There is limited public experience showing how the system will respond to serious AML issues, a PSP freeze, large-scale customer complaints, supplier diligence, insolvency, enforcement action or requests from overseas authorities.<\/p>\n The point is not that every new jurisdiction should be rejected. Some may develop into credible licensing centers. But an operator should not confuse the ability to obtain a certificate or license with the ability to establish a structure that is bankable, scalable and investable.<\/p>\n Choosing the Right Structure<\/strong><\/p>\n The decision on where to obtain a gaming license or certificate, and where to incorporate the business behind it, affects nearly every part of an online gaming operation.<\/p>\n It affects banking and payments, the ability to work with game providers and technology suppliers, corporate and beneficial ownership requirements, AML controls, marketing and market-entry strategy, tax and operational planning, as well as the company\u2019s position when it approaches an investor, buyer or local regulator.<\/p>\n There is no universally correct jurisdiction. The appropriate structure depends on the product, ownership profile, target markets, payment model, customer acquisition strategy, supplier relationships, tax position, compliance exposure and commercial plans.<\/p>\n <\/p>\n <\/p>\n <\/p>\n ClearSky Network works across gaming jurisdictions, corporate structures, banking, payments, technology and local operating arrangements. This gives our team a practical understanding of what follows the initial licensing decision. We see which structures banks and PSPs are prepared to support, what game and platform providers are likely to require, where payment flows can create friction and what needs to be in place before an operator goes live.<\/strong><\/p>\n We support clients from the initial jurisdiction assessment through company formation, licensing or certification, banking and payment setup, supplier coordination and local operational support. The objective is not simply to obtain a license or certificate, but to build a structure that can operate properly from the start and continue to support the business as it grows.<\/strong><\/p>\n <\/p>","protected":false},"excerpt":{"rendered":" On 17 September, the Cura\u00e7ao Gaming Authority disclosed that an applicant account created under a false identity had accessed its online gaming portal for almost nine months. In the days that followed, records said to have come from the regulator\u2019s licensing files began appearing online as part of the Casino Secrets investigation. The CGA has […]<\/p>\n","protected":false},"author":1,"featured_media":9682,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[312],"tags":[],"class_list":["post-9681","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-igaming"],"acf":[],"yoast_head":"\n