Lead brief
A major data leak at the Curacao Gaming Authority has exposed the names and details of hundreds linked to offshore gambling firms, raising serious questions about ownership transparency and regulatory practices in Curacao's online casino sector.
Coverage frame
This piece sits inside the wider 31Casino news desk, where single developments are read against regulation, market structure, and reader relevance.
Primary source base
- ▸A significant data breach at the Curacao Gaming Authority has exposed identities behind hundreds of offshore gambling operators.
- ▸The breach lasted over nine months and was uncovered by investigative journalists from Follow the Money (FTM).
- ▸Ownership records for numerous Curacao-registered online casinos have now been made public.
- ▸The leak places renewed focus on regulatory standards and transparency within the Curacao gambling framework.
What Happened
A prolonged security lapse at the Curacao Gaming Authority (CGA) database laid bare the identities and ownership structures of hundreds of online casinos licensed on the Caribbean island. The breach, which spanned at least nine months, came to light through an investigation by Dutch outlet Follow the Money (operating as Casino Secrets). They accessed and analyzed tens of thousands of confidential documents that detailed the individuals tied to Curacao-licensed gambling entities.
Sensitive information including personal data, shareholding details, and business relationships of operators and stakeholders was reportedly compromised in the leak. According to the reporting, these documents trace ownership ties that, until now, typically remained obscured due to Curacao's permissive regulatory environment.
Why It Matters
The exposure of hidden ownership within Curacao's vast online gaming licensing regime is significant, both for industry stakeholders and for international regulators. For years, Curacao has operated as an offshore gambling hub, prized by operators for its relatively low-cost, lightly scrutinized regulatory framework. While this made the jurisdiction attractive for startup and mid-tier operators, it also invited criticism for lack of oversight, insufficient player protections, and a lack of effective anti-money laundering enforcement.
Hundreds of casino owners and associates — now unmasked by the breach, raising major compliance questions for the sector.
By unmasking the real individuals behind these gambling companies, the leak undermines the operational opacity that many Curacao-licensed entities have long relied on. This transparency is especially critical at a time when global regulators, such as those in the Netherlands, Sweden, and the UK, are tightening their scrutiny of offshore gambling. The availability of concrete ownership records may spur further investigations into compliance with anti-money laundering standards, responsible gambling obligations, and tax liabilities.
Moreover, this breach arrives as Curacao faces intense political and economic pressure to overhaul its gaming regulatory regime. The Dutch government, which oversees Curacao as part of the Kingdom of the Netherlands, has called for sweeping reforms to address perceived shortcomings in the control of gambling operations and the prevention of criminal misuse of the industry.
Industry Context
The issue of hidden ownership is not unique to Curacao, but the scope and scale of this breach represent a unique case in online gambling. Jurisdictions with more mature gaming frameworks, such as Malta and the Isle of Man, have faced similar criticism in the past but have since taken demonstrable steps to increase transparency and strengthen licensing standards.
In Curacao, much of the offshore sector’s appeal derives from the use of sub-licensing and limited know-your-customer requirements for license applicants. Industry analysts have repeatedly pointed to this as a critical vulnerability, noting that it can facilitate money laundering, fraud, and an inability to protect players effectively.
Many international markets, including the recently regulated Netherlands gambling regulation market, have flagged Curacao-licensed operators for unauthorized targeting of their citizens. As a result, any public reveal of hidden beneficial owners significantly raises the compliance risk profile for these operators.
Regulatory Background
Curacao’s licensing system is among the oldest in online gambling, dating back to the 1990s. The framework allows so-called "master licence" holders to issue sub-licences with relatively limited oversight by the central regulator, Curaçao eGaming. In recent years, mounting international pressure and several high-profile enforcement actions have driven Curacao to promise regulatory reform.
In early 2023, following pressure from the Dutch government and EU money laundering directives, the territory began drafting a new Gambling Law. The proposed legislation seeks to establish stricter licensing requirements, direct supervision of all operators, and greater transparency concerning ownership structures. However, implementation has been slow, and the data breach further emphasizes the urgency for systemic reform.
What Happens Next
The fallout from the breach is likely to reverberate across both Curacao’s regulatory apparatus and its licensees. Operators whose identities have been exposed may face additional scrutiny from international regulators—and in some cases, potential enforcement actions. For Curacao itself, the incident has sharpened the focus on the need for a wholesale revision of its licensing and oversight practices. As legislative reforms move forward, stakeholder consultation and international cooperation will be crucial.
Sources
This article is for informational purposes only. 31Casino does not provide gambling services or recommendations. If you're concerned about your gambling, visit our Responsible Gambling page for support resources.