Curacao's Gaming Supplier Licensing Deadline: What Operators and Suppliers Must Do Before 24 December 2026

Curacao’s gaming supplier licensing deadline is fast approaching, and operators that fail to act risk losing the ability to engage critical vendors after 24 December 2026. Under the reformed Landsverordening op de kansspelen (LOK), the Curaçao Gaming Authority (CGA) now requires every supplier established in Curacao to hold a dedicated supplier licence, while offshore suppliers providing critical services must be formally registered. For UAE-based operators and technology vendors serving Curacao-licensed platforms, the compliance burden is substantial: contracts must be amended, due-diligence packages assembled, and licence or registration applications filed well before the cut-off. This guide provides a practical, step-by-step playbook covering every obligation, document, and timeline milestone that legal, compliance, and procurement teams need to address now.

Quick-Action Checklist for UAE Operators and Suppliers

Before diving into the legal detail, use the priority checklist below to assess your organisation’s readiness. Each item maps to a detailed section later in this article.

• Appoint a compliance lead. Designate in-house counsel or an external gaming-law adviser to own the Curacao supplier-compliance project from now until the 24 December 2026 deadline.
• Inventory every supplier relationship. List all vendors that supply goods or services to your Curacao-licensed operation, platform providers, RNG suppliers, payment processors, fraud-detection tools, customer-support outsourcers, and data-hosting partners.
• Classify each supplier by jurisdiction. Determine whether the supplier is established in Curacao (licence required) or established outside Curacao (registration likely required for critical services).
• Initiate licence or registration applications. Suppliers established in Curacao must begin the CGA supplier-licence application immediately. Offshore suppliers should confirm registration requirements with the CGA portal.
• Update commercial contracts. Insert compliance warranties, audit rights, termination-for-non-compliance triggers, and regulatory-breach indemnities into every supplier agreement.
• Compile AML/KYC documentation. Gather certificates of incorporation, beneficial-ownership declarations, AML policies, and technical-audit reports for each supplier.
• Conduct IP and security reviews. Verify that each supplier’s intellectual-property rights, data-protection practices, and information-security controls meet CGA standards.
• Set calendar milestones. Use the timeline table in this article to build internal project deadlines aligned with the CGA’s 24 December 2026 cut-off.

Industry observers expect that organisations beginning the process before September 2026 will have the best chance of clearing CGA review queues without last-minute disruption.

Legal Background: LOK Reform and CGA Powers

Curacao’s gaming regulatory landscape has undergone a fundamental transformation since the passage of the LOK reform. The new legislation replaced the island’s decades-old master-licence and sub-licence framework with a single, centralised licensing regime administered by the CGA. Under the previous system, a small number of master-licence holders issued sub-licences to operators with minimal regulatory oversight. The LOK reform ended that arrangement, requiring every operator to apply directly to the CGA for an individual licence.

Critically, the LOK also introduced an entirely new category of regulated entity: the gaming supplier. For the first time, companies that provide critical goods or services to Curacao-licensed operators are subject to their own licensing and registration obligations. The CGA has been granted broad enforcement powers, including the authority to impose fines, suspend supplier recognition, and revoke operator licences where operators continue to use non-compliant suppliers.

Key Legal Definitions Under the LOK

• Supplier. Any natural or legal person that provides goods or services, including software, payment processing, data hosting, customer support, and game content, to a Curacao-licensed gaming operator.
• Critical services. Services deemed essential to the operation of a licensed gaming business, such as platform provision, random-number generation, payment facilitation, and fraud detection. Suppliers of critical services face the most stringent compliance requirements.
• Established in Curacao. A supplier that maintains a registered office, branch, or permanent establishment on the island. This classification determines whether a full supplier licence (rather than registration alone) is required.

Curacao’s Gaming Supplier Licensing Deadline: Who Must Hold a Licence vs Who Needs Registration

The most common source of confusion, and the question most frequently raised by UAE gaming suppliers serving Curacao-licensed operators, is whether a particular entity needs a full CGA supplier licence or only registration. The distinction hinges primarily on where the supplier is established.

The practical implication for UAE-based technology and service companies is significant. Even though an offshore supplier typically does not require a full CGA supplier licence, the obligation does not disappear, it shifts. The Curacao-licensed operator bears responsibility for ensuring that every offshore supplier is registered and that full due-diligence documentation is on file. Failure to do so puts the operator’s own licence at risk.

Typical Supplier Categories and Their Classification

• Platform and software providers. Almost always classified as suppliers of critical services. If established in Curacao, a full supplier licence is mandatory. If offshore, registration and comprehensive technical documentation are required.
• RNG (random-number generation) providers. Core to game integrity, treated as critical-service suppliers regardless of location. Independent certification (e.g., eCOGRA, GLI, BMM) will typically be required as part of the registration or licensing dossier.
• Payment processors and payment-service providers. Critical-service suppliers. UAE-based payment companies routing transactions for Curacao-licensed operators should expect to provide AML/KYC policies, transaction-monitoring procedures, and evidence of regulatory authorisation in their home jurisdiction.
• Customer-support outsourcers. May or may not be classified as critical-service suppliers depending on the scope of services (e.g., handling player funds, identity verification). A case-by-case assessment is advisable.
• Fraud-detection and data-analytics vendors. Increasingly treated as critical-service suppliers given their role in responsible-gaming and AML compliance.

Step-by-Step: Supplier Registration and Licence Process

Whether a supplier requires a full CGA licence or registration, the application pathway follows a broadly similar structure. The CGA has published portal-based submission guidance, and industry advisers report that the process involves several defined stages.

Application Documents

• Certificate of incorporation and current company registration extract
• Memorandum and articles of association (or equivalent constitutional documents)
• Beneficial-ownership declaration identifying all ultimate beneficial owners
• Organisational chart showing group structure and related entities
• Audited financial statements for the most recent two financial years
• AML/CFT policy documentation and evidence of staff training
• Data-protection and information-security policies
• Evidence of relevant regulatory authorisations in the supplier’s home jurisdiction (if applicable)

Technical Audit and Compliance Evidence

Suppliers of critical services, particularly platform providers and RNG vendors, must submit independent technical-audit reports. The CGA expects these to cover game fairness, system integrity, data security, and business-continuity arrangements. Suppliers should engage a recognised testing laboratory early, as audit timelines can extend to eight weeks or longer.

Fees and Processing Timelines

The CGA charges application and annual supervision fees, the exact amounts of which are set out in the CGA’s published fee schedule. Early indications suggest that processing times for supplier-licence applications may range from several weeks to several months, depending on the complexity of the application and the volume of concurrent filings. Given the fixed 24 December 2026 deadline, suppliers that delay filing risk being caught in a bottleneck. The likely practical effect will be that applications submitted after October 2026 face an elevated risk of not being processed in time.

Operator Obligations: Procurement, Audit Rights, and Contractual Protections

The CGA’s supplier framework does not only impose duties on suppliers, it places significant obligations on operators. Curacao-licensed operators must demonstrate to the CGA that every supplier in their supply chain is either licensed or registered (as applicable) and that adequate contractual and operational controls are in place.

What Operators Must Do

• Conduct supplier due diligence. Operators must collect and verify incorporation documents, beneficial-ownership information, AML policies, and technical-audit reports for every supplier.
• Maintain a supplier register. A documented, up-to-date register of all suppliers, classified by jurisdiction and service type, must be available for CGA inspection.
• Perform ongoing monitoring. Supplier compliance is not a one-time exercise. Operators must periodically re-verify supplier documentation and monitor for material changes (ownership changes, regulatory sanctions, financial distress).
• Report material changes. Any significant change in a supplier relationship, new supplier, change of supplier ownership, termination, must be reported to the CGA within the prescribed timeframe.

Model Contract Clauses for Supplier Agreements

Operators should amend existing supplier agreements, and ensure all new agreements, contain the following protective provisions:

• Compliance warranty. “The Supplier warrants that it holds, and shall maintain throughout the term of this Agreement, all licences, registrations, and approvals required by the Curaçao Gaming Authority and applicable law to provide the Services.”
• Audit and inspection rights. “The Operator and/or the CGA shall have the right, upon reasonable notice, to audit, inspect, and copy any records, systems, or documentation relating to the Supplier’s performance of the Services and compliance with applicable regulatory requirements.”
• Termination for regulatory non-compliance. “The Operator may terminate this Agreement immediately by written notice if the Supplier fails to obtain or maintain any required CGA licence or registration, or if the Supplier becomes the subject of any CGA enforcement action.”

Industry observers expect that operators who fail to include these clauses will face difficulties demonstrating regulatory compliance during CGA inspections, potentially exposing their own operator licence to sanctions.

Timeline and Action Plan to Curacao’s Supplier Registration Deadline of 24 December 2026

The following timeline translates the regulatory requirements into a practical project plan. Dates are calculated backwards from the hard deadline of 24 December 2026.

Impact on UAE-Based Suppliers and Operators

The United Arab Emirates is home to a growing ecosystem of gaming-technology companies, payment processors, and professional-services firms that serve Curacao-licensed operators. Curacao’s gaming supplier licensing deadline creates several practical implications for these UAE entities.

• Cross-border service agreements. UAE suppliers providing platform, payment, or data-hosting services to Curacao-licensed operators will need to cooperate with the operator’s due-diligence and CGA registration process. This means assembling and sharing documentation that UAE companies may not have previously been asked to produce for a Caribbean regulator.
• Banking and payment relationships. UAE banks and payment institutions may request evidence that their clients’ Curacao operations are fully compliant with the new CGA framework. Operators and suppliers that cannot demonstrate compliance may face difficulties maintaining correspondent-banking relationships.
• AML/KYC alignment. The UAE’s own AML framework, administered by the Central Bank, the Securities and Commodities Authority, and the Executive Office of Anti-Money Laundering, already imposes stringent KYC and transaction-monitoring obligations. Industry observers expect that UAE suppliers with mature AML programmes will find the CGA’s requirements substantially familiar, though documentation must be reformatted and submitted through the CGA portal.
• Coordination with UAE counsel. Because Curacao supplier registration may trigger disclosure obligations, data-sharing arrangements, and contractual amendments that interact with UAE law, operators and suppliers should coordinate with UAE gaming-law specialists to ensure no conflict arises between the two jurisdictions’ requirements.

Enforcement, Penalties, and Compliance Risk After the Deadline

The CGA has signalled its intent to enforce supplier obligations rigorously after 24 December 2026. While the regulator has not published a detailed penalty schedule specific to supplier non-compliance, the LOK provides the CGA with a broad enforcement toolkit.

• Fines. The CGA may impose financial penalties on both suppliers and operators found to be operating outside the new framework.
• Suspension or revocation of supplier recognition. A non-compliant supplier may be delisted, effectively prohibiting Curacao-licensed operators from using its services.
• Impact on operator licences. Operators that continue to use non-compliant suppliers after the deadline risk enforcement action against their own CGA operator licence, up to and including suspension or revocation.
• Reputational risk. Non-compliance may be made public through CGA registers, creating reputational damage that extends well beyond the Curacao market.

To mitigate these risks, operators should develop a formal remediation plan that identifies fallback suppliers for each critical service, sets trigger points for switching, and establishes an internal escalation protocol if a supplier’s application is delayed or denied.

Next Steps

Curacao’s gaming supplier licensing deadline of 24 December 2026 is not a soft target, it is a hard regulatory cut-off with direct consequences for both suppliers and operators. Organisations that have not yet begun the compliance process should treat it as an immediate priority. Global Law Experts’ gaming-law specialists can assist with supplier-compliance audits, licence and registration applications, contract drafting, and cross-border regulatory coordination for UAE-based businesses.

Key Takeaways

• Curacao’s gaming supplier licensing deadline of 24 December 2026 is a hard regulatory cut-off, not a soft target. All suppliers established in Curacao must hold a CGA supplier licence, and offshore suppliers of critical services must be registered.
• Operators bear direct responsibility for supplier compliance. Using a non-compliant supplier after the deadline puts the operator’s own CGA licence at risk.
• UAE-based suppliers and operators should begin the compliance process immediately: inventory suppliers, classify by jurisdiction, collect documentation, amend contracts, and file applications before processing queues intensify.
• Contractual protections, compliance warranties, audit rights, and termination triggers, are essential safeguards that every operator should embed in supplier agreements now.

Sources

1. GFLO Consultancy, New CGA supplier licensing and registration rules under LOK
2. Egara, International supplier frameworks: paper to practice
3. Sigma.world, Curaçao requires registration of iGaming suppliers
4. PFSER, Curacao Gaming License 2026: Cost, CGA Rules & Timeline
5. NuxGame, Curacao Gaming License 2026
6. CSB Group, Curaçao Gaming Licence Application Support
7. Global Law Experts, Obtaining a Curacao gambling license in 2026