Curaçao Gaming License (GCB) in 2026: The Operator Guide to the New LOK Regime

For two decades Curaçao was the path of least resistance into online gambling: cheap, fast, and lightly supervised through a master/sub-license structure that let a handful of master licensees resell access to thousands of operators. That era is over. Under the National Ordinance on Games of Chance — known by its Dutch acronym LOK — Curaçao has rebuilt its regime around direct licensing by the Curaçao Gaming Control Board (GCB), real KYC/AML obligations, key-person requirements, and local substance. The island is still the most popular cost-sensitive launch jurisdiction, but the bar to enter and stay licensed has risen materially.

This guide explains the reformed Curaçao GCB license from the operator’s seat: how the new direct-licensing model differs from the old master/sub-license system, what the B2C and B2B licenses cover, realistic costs and timelines, the substance and compliance you must put in place, and the profile of operator the new regime actually suits. The figures here are directional planning numbers; confirm current fees and requirements with the GCB and your gaming-law counsel before committing.

From master/sub-license to direct GCB licensing

The defining change of the LOK reform is the abolition of the old master/sub-license model. Previously, four master licensees held licenses directly and sublicensed thousands of operators with minimal oversight of the sub-licensees themselves. That structure created accountability gaps the GCB could not police. Under the new regime, every operator applies for and holds a license directly with the GCB, which conducts its own due diligence, sets the compliance standard, and supervises the operator throughout the license term.

For operators this means more scrutiny but also more legitimacy. A direct GCB license is a recognized relationship with a named regulator rather than a derivative permission resold by an intermediary. It improves the operator’s standing with payment providers and players relative to the old sub-license, even if Curaçao still sits below the MGA in reputational terms.

B2C and B2B licenses under the LOK

The reformed regime distinguishes between operator-facing and supplier-facing activity. A B2C license authorizes an operator to offer games of chance directly to players — the standard casino or sportsbook license most startups need. A B2B license covers businesses that supply gaming services to licensed operators, such as platform providers, game studios, and aggregators, without taking player bets themselves.

Most new casinos apply for the B2C license. If you are building a platform or content layer to sell into other operators, the B2B license is the relevant one. Either way, the operational systems behind the license — player fraud detection, affiliate tracking, and commission reconciliation — must be able to evidence compliant operation if the GCB asks. The license grants the right to operate; the tooling proves you operate it responsibly.

Cost and timeline expectations

Curaçao remains materially cheaper than EU options like the MGA, but the reformed regime is no longer the rock-bottom launch it once was. Operators should budget for an application fee, annual license fees, the cost of establishing local substance, key-function holder salaries or retainers, and the recurring cost of the compliance stack. A realistic, well-prepared application completes in roughly two to four months — slower than the old sub-license route but far faster than the MGA or UKGC.

Local substance and key-function requirements

A central feature of the LOK regime is that licensees must demonstrate genuine local substance rather than a paper presence. In practice this means a Curaçao-incorporated entity, local directorship or management presence, and appointed key-function holders responsible for compliance, anti-money-laundering reporting (an MLRO), and data protection. The GCB expects these roles to be real and contactable, not nominal.

This substance requirement is the single biggest operational change for operators accustomed to the old sub-license. It raises the ongoing cost and means the license cannot be treated as a disposable shell. Operators should factor recurring substance and key-function costs into their unit economics from the outset rather than discovering them after launch.

KYC, AML, and responsible-gambling obligations

The reformed regime imposes proper anti-money-laundering and player-protection duties. Licensees must run identity verification, screen against sanctions and PEP lists, monitor transactions for suspicious patterns, file suspicious-activity reports through the MLRO, and operate responsible-gambling controls such as self-exclusion and deposit limits. Building these correctly is non-negotiable, and we break the full vendor landscape down in our KYC/AML compliance stack guide.

• Customer due diligence (CDD) and KYC identity verification at onboarding and on risk triggers
• Sanctions and politically-exposed-person (PEP) screening with ongoing rescreening
• Transaction monitoring for structuring, velocity anomalies, and source-of-funds risk
• A designated MLRO responsible for suspicious-activity reporting
• Responsible-gambling tools: self-exclusion, deposit and loss limits, and reality checks

The application process step by step

The GCB application follows a structured path. Treating it as a documentation project — assembling a complete, internally consistent file before submitting — is the single best way to avoid the back-and-forth that stretches timelines.

1. Incorporate a Curaçao entity and arrange local directorship and substance.
2. Appoint key-function holders, including a compliance officer and MLRO.
3. Prepare the file: business plan, AML/KYC and responsible-gambling policies, source-of-funds and fit-and-proper documentation for ultimate beneficial owners, and technical/system documentation.
4. Submit the application and pay fees; respond to the GCB’s due-diligence and background-check requests.
5. Complete required system and game testing, finalize payment and KYC integrations, receive the license, and go live under ongoing GCB supervision.

Who the new Curaçao regime suits — and who should look elsewhere

Curaçao GCB is the strong default for cost-sensitive operators serving global or grey-market traffic, crypto-first casinos, and startups that want a credible-but-affordable base license. It is faster and cheaper than the MGA while now offering real regulatory standing. If you want to weigh it directly against the EU gold standard and the budget challenger, our MGA vs Curaçao vs Anjouan comparison puts the three head to head.

Curaçao is the wrong choice if you specifically need UK or Ontario market access, if you require the very best tier-one banking from day one, or if your brand strategy depends on the maximum player-trust signal. In those cases the MGA, UKGC, or a regulated local license is the right path. For a full jurisdiction comparison, see our online gambling license guide.

Frequently asked questions about the Curaçao gaming license