Curaçao's CGA to stop using portal provider, launch temporary portal

The Curaçao Gaming Authority (CGA) has dropped the external company that ran its online gambling licensing portal and plans to open a temporary replacement on 19 October 2026. A security researcher from Germany accessed the portal without permission and published data belonging to licence holders, the regulator said in a press release dated 19 October.

The regulator said it discovered the access on 17 September. It puts the unlawful access between December 2025 and September 2026, and says an external company managed the portal and its database.

The details

• Response: the CGA has filed complaints and reported the incident to authorities in Curaçao, Germany and the Netherlands. It has hired specialist companies to remove the information from the internet and is considering civil legal action.
• Investigation: an independent technical investigation has been commissioned to establish the impact and consequences. The release gives no findings and does not say how much data was taken.
• Portal: after an internal investigation the portal was taken offline. On 7 October the regulator said it would permanently stop using it and end its use of the provider’s regulatory services.
• Temporary portal: it is due on 19 October and is meant to handle licence applications and other supervision matters. The licence register and the digital seal, which is intended to show that a website holds a CGA licence, are scheduled to return with it.
• Testing: the internal system, digital seal and licence register are ready for checks by independent specialists. The client portal is still being adjusted, and security testing will follow.
• Licences: the regulator said closing the old portal does not invalidate existing licences, and that licence holders must continue to meet their obligations.

Why it matters

Licence holders keep their licences and their duties, but the portal that handled applications and the public licence register went offline, and the digital seal with it. Until the temporary system opens, those functions are unavailable. The release does not say whether applications were delayed while the portal was offline, or which licence holders’ data was published.

The big picture

The CGA said on 22 September that the account used was registered under a false identity in December 2025. It announced on 7 October that the portal would not return.

What’s next

The regulator is preparing to develop and manage a new portal of its own. It said the intention had been to move to an internally managed portal at a later stage.