Curaçao Gaming Authority issues new guidance for operator T&Cs

Summary

The Curaçao Gaming Authority (CGA) has issued new guidance tightening requirements for business-to-consumer operator terms and conditions. Under the island’s updated regulatory framework (LOK), licencees must make current T&Cs clearly and continuously available across websites, mobile platforms and other delivery channels; previous versions must be available on request and changes clearly signposted. The guidance removes acceptance-by-default as reliable evidence of a contract and requires that KYC, AML and CFT monitoring and processes are explicitly set out in initial T&Cs to prevent operators applying extra measures at withdrawal. Enforcement options include amendment orders, fines, suspensions and possible licence revocation. The policy comes into force in October, giving operators a grace period to comply.

Key Points

CGA has expanded operator obligations as part of Curaçao’s new licensing framework (LOK).
Current T&Cs must be visible and readable at all times across all platforms; prior versions must be available on request.
Passive acceptance of T&Cs will no longer be accepted as sufficient evidence of a contract.
KYC, AML and CFT monitoring — and all KYC procedures — must be clearly described in the initial T&Cs to curb abusive, last-minute checks at withdrawal.
Non-compliance can trigger enforcement measures (amendment orders, fines, suspensions or licence revocation); rules take effect in October with a grace period for updates.

Context and relevance

This marks a notable shift for Curaçao, moving its regime closer to other regulated markets by reducing ambiguity and increasing transparency. For operators and compliance teams, it signals a tougher supervisory approach and higher operational risk if T&Cs don’t explicitly detail player monitoring and verification practices. The update mirrors wider industry trends emphasizing consumer protection and stronger AML/CFT controls in iGaming.

Why should I read this?

Quick and blunt: if you’re involved with Curaçao-licensed ops, drop whatever vague T&Cs you’ve been using and read this now. It’s effectively a regulator’s checklist — update wording, show KYC/AML processes up front and stop hiding rules in the small print. Not directly affected? Skim it — the same expectations are popping up across other jurisdictions.