Curaçao’s efforts to carry on-line playing regulation beneath higher inside management have gained urgency following a breach of the licensing system that uncovered confidential data belonging to licence holders. The Curaçao Gaming Authority (CGA) has deserted its earlier portal and is getting ready a short lived alternative whereas planning a system it will possibly handle itself.
The incident has prompted complaints to authorities in three nations and an unbiased forensic investigation. The regulator stated it’s working with specialist companies to take away leaked materials from the web and is contemplating civil authorized motion.
The CGA found the unauthorized entry on 17 September. Investigators discovered {that a} German safety researcher had accessed the licensing portal and its related database. According to the authority, the entry occurred between December 2025 and September 2026, and confidential data belonging to licence holders was printed.
The compromised system was managed by an exterior supplier. The CGA took the portal offline after discovering the breach and determined to terminate the supplier’s regulatory providers completely.
Interim Portal Keeps Regulatory Work Moving
The regulator announced on Monday {that a} non permanent alternative was scheduled to launch on 19 October. The platform is meant to maintain licence purposes and supervisory work working.
Preparations have included technical critiques and safety testing. The CGA recognized its inside system, digital seal and licence register as parts prepared for unbiased safety checks, whereas additional changes to the consumer portal remained underway.
The non permanent platform is predicted to make the licence register and digital seal out there alongside licensing providers.
The authority has clarified that taking the earlier portal offline doesn’t cancel current licences. Licensed operators should proceed to fulfill their regulatory obligations throughout the transition.
Breach Response Includes Cross-Border Complaints
The CGA has filed formal complaints in Curaçao, Germany and the Netherlands following the unauthorized entry. An unbiased forensic investigation is inspecting the incident to determine its extent and determine essential remedial measures.
Specialist firms have additionally been engaged to hunt the removing of data printed on-line. The authority is contemplating civil litigation, though the equipped statements don’t verify that proceedings have begun.
Licensing Reforms Underpin Plans For An Internal System
Curaçao started restructuring its playing oversight in 2023, when the Ministry of Finance instructed the then Gaming Control Board, now the CGA, to reform the sector. The modifications adopted worldwide criticism of the previous grasp licence and sublicence mannequin, an increase in participant complaints, hostile media protection and commitments beneath agreements with the Netherlands.
The LOK playing regulation got here into power in December 2024, changing the sooner licensing construction and inserting operators beneath the CGA’s direct supervision. During the transition, the regulator launched an externally managed portal in 2024, counting on outdoors experience whereas constructing its personal capability.
Since the reforms started, the CGA says it has employed 14 employees targeted on licensing, supervision and enforcement. It goals to scale back dependence on exterior advisers and ultimately function a alternative portal itself.
