NewsRegulation2 min read

Curaçao Regulator Scraps Licensing Portal Following Data Breach

The CGA will move to a new regulatory platform and replace its digital license seal, while existing licenses and operator obligations remain in force.

Written by Editorial Desk9 October 2026

Curaçao Regulator Scraps Licensing Portal Following Data Breach

The Curaçao Gaming Authority (CGA) will permanently discontinue its online gaming portal following an unauthorised access incident, moving licensing and regulatory work to alternative arrangements while it prepares a replacement platform.

In an Oct 7, 2026 announcement, the regulator confirmed that the existing portal would not return to service. The service arrangements supporting the platform will also end.

The decision affects both the system used to process licensing matters and the digital seal through which operators demonstrate that a domain is licensed. The CGA said existing licenses remain valid and licensed operators must continue meeting their obligations during the transition.

Licensing continues through interim arrangements

The portal had supported Curaçao’s online gaming sector reform since 2024. Its discontinuation now requires the regulator to move that work away from the platform and its associated services.

The CGA said licensing, compliance and supervision would continue through alternative arrangements while an interim solution is implemented to process licenses and other regulatory matters.

In the Oct 7, 2026 notice, it targeted further information on those arrangements for no later than Oct 9, 2026. That date referred to an update on the transition, rather than a confirmed launch date for the replacement platform.

The announcement did not identify a new provider, set a launch date or explain how pending applications would be transferred.

Digital license seal to be replaced

The CGA also warned that availability of its current digital seal would be affected. It said it would shortly introduce an alternative mechanism allowing operators to demonstrate that a domain holds a CGA license.

The distinction matters for operators displaying the seal: disruption to the verification mechanism does not, according to the regulator, invalidate an existing license. The notice did not specify what the replacement would look like or when it would become available.

Data leak response remains ongoing

Alongside the platform announcement, the CGA said its response to the unauthorised access incident was continuing, including efforts to contain the data leak and protect its regulatory information.

The notice provided no new detail on the extent of the leak or the information affected. It acknowledged that the transition could create challenges for operators and said further updates would follow as more information became available.

Continue Reading

Read More

Get Connected with the Industry