Curacao tightens T&Cs rules under new LOK framework

Summary

The Curacao Gaming Authority (CGA) has published detailed policy guidance tightening requirements for player‑facing Terms and Conditions (T&Cs) under its LOK framework. The rules mandate clarity, accessibility, consistency with actual practice, limits on retrospective changes, explicit consent capture, stronger disclosures and enhanced record‑keeping. The policy applies to all B2C licence holders and comes into force six months after publication.

Key Points

T&Cs must be accessible within one click across platforms and be written clearly and readably.
Operators must ensure T&Cs match real business practices — no hidden or contradictory terms.
Retrospective changes are largely prohibited unless they do not disadvantage players or fix clear errors.
Active consent is required (eg a checkbox) at registration and for material changes; consent records must be retained.
T&Cs must disclose core licence information, legal identity, registration and clearly flag redirects to non‑CGA entities.
Player obligations, eligibility, prohibited behaviours and KYC/AML measures must be explicit, including monitoring and sanctions screening.
KYC friction should be minimised where possible; enhanced verification triggers at XCG4,000 (~$2,200).
Operators must detail deposit/withdrawal methods, processing times, treatment of crypto (lost wallets, forks, sanctioned addresses) and fund handling in account lifecycle events.
Dispute, error and bonus handling procedures must be transparent and auditable; operators must state they are not financial institutions.
Non‑compliance is a licence breach with possible directives, fines or suspension; operators must upload current and historical T&Cs to the CGA portal.

Content Summary

The CGA’s guidance is a comprehensive rewrite of expectations for T&Cs under the LOK regime. It focuses on transparency and enforceability by requiring accessible, consistent and legally aligned contractual terms. The regulator eliminates passive acceptance and insists on explicit, recorded consent and re‑acceptance for material changes, creating an auditable trail. Stronger disclosure rules force operators to make their regulatory status and business identity clear to players, while KYC/AML, player fund protections and account lifecycle rules are tightly specified. Special attention is given to crypto transactions and to standardising error and dispute handling. Enforcement will be more robust, with potential sanctions for breaches.

Context and Relevance

For operators licensed in Curacao, this represents a major operational and compliance change: T&Cs are now a front‑line regulatory touchpoint rather than a legal afterthought. The six‑month implementation window gives operators limited time to overhaul terms, consent capture mechanisms and record‑keeping. The move aligns Curacao more closely with global expectations on consumer protection, AML/CFT and transparency, and reduces opportunities for regulatory arbitrage in multi‑brand setups. Companies using Curacao licences — and their legal, compliance and product teams — should prioritise a T&Cs review and proof of consent systems.

Why should I read this?

Short: if you run, advise or partner with any Curacao‑licensed operator, this is not optional. The regulator has tightened the screws on T&Cs, consent and fund handling — ignore it and you risk fines or worse. We’ve done the legwork and pulled the must‑know bits out so you can act fast.

Author style

Punchy — this is essential reading for compliance, legal and ops teams in the iGaming space. If this affects your licence, read the full guidance and act.