Key takeaways
- Under the LOK framework, operators apply directly to the Gaming Control Board (GCB) for a single unified licence covering casino, sportsbook and lottery verticals.
- Typical timelines run 3 to 6 months from engagement to issuance, but only where diligence is clean and the first submission is complete.
- Most delay is self-inflicted: incomplete key-person filings, generic policy documents, and technical evidence that does not match the platform actually being operated.
- Budget realistically. Licence fees plus local service provider costs typically total EUR 40K to EUR 80K in year one, with ongoing annual compliance typically in the EUR 30K to EUR 60K range.
It is tempting to treat a Curacao gaming licence as a procurement exercise: ask what it costs and how fast it can be done, then hand the application to someone else as paperwork. That framing is why applications stall.
Seen from the regulator's side of the table, an application is not a form. It is a claim you are making about who controls the business, how money moves through it, and what happens when something goes wrong. The file either substantiates that claim or it does not. Everything else is scheduling.
Here is what the Curacao process actually asks of you, and where operators generally lose months.
What changed, and why it matters to your file
Curacao has been the default offshore gaming jurisdiction for over two decades. Under the older master-and-sub-licence arrangement, many operators never dealt with a regulator directly. They dealt with a master licence holder, and the diligence they faced was whatever that holder chose to apply.
Under the LOK framework, applications go directly to the GCB for a single unified licence covering casino, sportsbook and lottery verticals. The practical consequence is that the reviewing party is now a regulator with its own standards, its own questions, and its own record of what you submitted.
The application starts with your people, not your product
The first place applications slow down is key-person filings. Operators assume the regulator's central interest is the platform. In most reviews it is the individuals: who owns the entity, who directs it, who exercises real control, and whether any of them carry history that a regulator would consider disqualifying.
Fit-and-proper review is document-heavy and personal. Expect every controlling individual to be assessed, not just the one who signs the application.
What a fit-and-proper pack generally involves
- Identity and address verification for each key person, to current standards rather than whatever you collected years ago
- Background and criminal record checks from the relevant jurisdictions, including places a person has lived rather than only where they hold a passport
- A full CV pack with no unexplained gaps, and a coherent account of prior gaming roles
- Source of funds and source of wealth evidence for beneficial owners, traceable rather than asserted
- Disclosure of prior regulatory history: refusals, withdrawn applications, enforcement, and any licence held elsewhere
The pattern is rarely fraud. It is friction. A director is travelling and cannot get documents notarised. A shareholder's history spans three countries and the checks take weeks each. A beneficial owner is reluctant to document how the money was made. None of this is fatal, but each instance adds a clarification round, and clarification rounds are where a 3 month timeline becomes a 6 month one.
Start key-person collection on day one, in parallel with corporate setup. It is the single highest-leverage scheduling decision in the whole engagement.
The policy framework is a deliverable, not a formality
The second common stall is the policy set: AML and KYC procedures, responsible gaming, player protection, and terms and conditions.
Downloaded templates are visible from a considerable distance. A reviewer reads a policy against the business it supposedly governs, and the mismatches are obvious. A policy that describes card deposits when the operator is crypto-denominated. Escalation procedures naming a role nobody in the entity holds. Thresholds that do not fit the stated player base.
The test to apply before submitting is simple: could a new compliance hire run the business from these documents alone? If the answer is no, the reviewer will reach the same conclusion.
Policies also outlive the application. Banks, payment processors and platform vendors ask for the same framework during their own onboarding, and they read it as closely as the regulator does. Building it properly once serves the licence, payments and banking onboarding, and your ongoing compliance advisory obligations together.
Technical documentation has to match reality
The third stall is technical evidence: RNG certification, platform specifications, system diagrams.
The recurring problem is drift between what the documents describe and what the operator actually runs. Certification that covers a game set the operator has since changed. Architecture diagrams that omit a third-party wallet or an aggregator added after the diagrams were drawn. Specifications describing a white-label stack in generic vendor language that nobody on the operator's side can explain when asked.
Assume you will be asked to explain your own architecture. Have someone technical available who can answer without the vendor on the call.
Cost and timeline, framed honestly
These are typical ranges, not quotes and not guarantees. Actual figures depend on corporate structure, banking scope and how much compliance framework has to be built from scratch.
| Typical range | |
|---|---|
| First year, licence fees plus local service provider costs | EUR 40K to EUR 80K |
| Ongoing annual compliance | EUR 30K to EUR 60K |
| Application to issuance | 3 to 6 months |
The 3 to 6 month figure assumes clean diligence and complete documentation on first submission. Treat it as a description of a well-run application rather than a default.
Where the months actually go
The sequence that keeps timelines intact is broadly the one any competent adviser will run: corporate setup and local director arrangement, key-person filings, the policy framework, technical documentation, then the compiled GCB submission and the correspondence that follows, and finally post-approval work on banking introductions and processor approvals.
What matters is less the order than the parallelism. Key-person documents and policy drafting should be moving while the entity is being formed. Operators who run these steps strictly one after another almost always land at the far end of the range.
Before you engage anyone
Have a defensible answer to five questions:
- Who are the controlling individuals, and will each of them cooperate fully with background and source-of-wealth checks?
- Can you document how the funding behind the business was generated?
- What exactly are you operating: verticals, game types, currencies, and which parts are third-party?
- Who owns compliance internally after launch, given the ongoing annual cost is real and recurring?
- Is Curacao genuinely the right fit, or are you choosing it by default? Compare it against the other options on the licensing overview, including Anjouan, before committing.
If those five answers are solid, a Curacao application is a manageable, well-understood process. If they are not, no adviser and no jurisdiction will make the file move faster.
Where this connects
A licence is one component, not the outcome. The Curacao file sits alongside the corporate structure underneath it, the compliance function that has to run after issuance, and the banking relationships that decide whether you can actually take money. That is the scope of our Curacao licensing work and the wider licensing practice across jurisdictions, and it is why corporate structuring and compliance advisory usually run in parallel rather than after.
If you are comparing jurisdictions rather than committing to one, start with the comparison and work back to the file you would have to build.
This article is general information for operators, not legal advice. Requirements vary by jurisdiction and by counterparty - confirm your position with qualified counsel before you launch.