The Curaçao Gaming Authority (CGA) scheduled a temporary licensing portal to launch on Monday 19 October 2026, so operators can keep filing licence applications after a breach forced it to scrap its previous system. The Curaçao licensing portal stopgap is also due to bring back the public licence register and the digital seal.
The CGA set out the plan in a statement on the data breach dated 18 October. The interim system will handle licence applications and other supervisory work while the regulator builds a permanent portal under its own management. It has not given a date for that replacement.
What the Curaçao licensing portal stopgap covers
According to the statement, the CGA’s internal system, the digital seal and the licence register were ready for checks by independent security specialists. The client portal, where operators submit applications, was still being adjusted, with security testing to follow once that work is complete.
The whole platform must also pass tests showing it works for both licensees and CGA staff. The digital seal is the badge on a licensed website that lets players confirm the domain holds a CGA licence. When it closed the old portal, the CGA warned that the seal would be affected and said it would introduce another way for operators to show a domain is licensed.
Licences issued under the old system stay in force. “Closing the previous portal does not invalidate existing licenses,” the CGA said in the 18 October statement.
Why the old portal was shut
The CGA said it discovered the breach on 17 September. A digital security researcher from Germany had accessed the portal and its database, which an external company managed, without permission from December 2025 until September 2026, and published data and confidential information belonging to licence holders.
On 7 October the regulator announced its transition to a new platform, saying the portal would not be returned to service and ending its use of the provider’s regulatory services. The CGA has not named the provider. TGE covered that decision when the Curaçao gaming portal was shut for good.
The CGA has filed complaints with authorities in Curaçao, Germany and the Netherlands. It has hired specialist firms to remove the leaked material from the internet, commissioned an independent technical investigation and is considering civil action. The case follows the publication of 40,000 Curaçao regulator files in September and the Malta Gaming Authority breach confirmed in March.
Next steps
The client portal still has to clear security testing before operators can file through it. The CGA has given no launch date for its permanent, in-house portal. The National Ordinance on Games of Chance (LOK), which replaced Curaçao’s master licence system, reaches its second anniversary in force on 24 December 2026.
Source: Curaçao Gaming Authority
