New requirements from the Curacao Gaming Authority regarding PSPs and game providers

1. General context of regulatory changes

As part of the reform of gaming legislation in Curaçao, the regulator, Curaçao Gaming Authority (CGA), introduces new approaches to interaction with operators, announcing new conditions for the B2C license

One of the key elements of the changes was the introduction of a mandatory procedure for agreement with the regulator of all providers who have access to players, funds or any parts of the gaming environment, as well as the introduction of new rules that provide for increased control over the technical support of operators.

2. How did it work before, and what has changed?

Earlier, operators were able to independently connect third-party providers, without having to notify the regulator or obtain formal approval from it. This applied to both game content and technological services.

According to the announced requirements, the CGA obliges operators to agree on such counterparties in advance. The list of companies subject to mandatory approval includes:

• game providers;
• payment services;
• casino management platforms;
• players management system (CRM);

Ignoring this requirement may be considered a violation of the license terms.

CGA reserves the right to reject applications from providers that do not meet transparency, security, or technical reliability requirements. Reasons for rejections may include a lack of proper certification, violation of compliance practices (e.g., in the area of ​​AML/KYC), or negative business reputation.

3. What are the new technical requirements?

Under the updated regulations, operators operating under a CGA license must meet a number of hardware and software requirements.

From now on, all hardware and software used for online gaming must meet international security standards and be tested by an independent organization approved by the CGA.

Operators must also regularly maintain and update their systems to ensure they are stable. In addition, they are required to keep an up-to-date list of all technical means and programs used on the platform. This list may be required by the regulator from time to time and operators must provide it on request.

Conclusion

Now the CGA regulatory framework is in the process of being updated. Although the basic requirements have already been published on the regulator’s website, the specific rules regarding the approval of providers have not yet become part of the Gambling Law of Curaçao (LOK) and are not yet applied in practice.

As the regulatory environment changes rapidly, it is important for operators to keep abreast of news and be prepared for new requirements.

Special attention should be paid to preparing for possible increased control by the CGA. In particular, this may include stricter requirements for transparency and reliability of service providers. Operators will probably have to record all stages of cooperation with providers in more detail.