Thai police arrest administrator linked to 11 illegal iGaming brands after Cloudflare and Cloud VPN probe

Thailand’s Economic Crime Division says it arrested a 29-year-old administrator who helped run the financial side of a large illegal gambling network operating 11 brands. The case matters for PSPs and high-risk operators because the setup used cloud infrastructure, VPNs, and crypto-linked payments to keep the operation moving while avoiding physical servers on site.

1. On 15 August 2026, police in Thailand arrested Ms. Chalisa at a house in Om Yai, Sam Phran district, Nakhon Pathom province. The arrest was ordered by Police Lieutenant General Natsak Chaowanaichai, commissioner of the Central Investigation Bureau, and carried out by the 3rd Division of the Economic Crime Division (ECD) under Police Major General Tasphum Charuprat, with Police Colonel Winyu Jamsai and other officers leading the operation.
2. She was charged with jointly advertising or inducing others to play online gambling and jointly organizing online gambling. According to investigators, she worked night shifts from 20:00 to 8:00 with a team of up to four people in Thailand, used VPNs, and received instructions through Discord meetings.
3. The ECD says the network used Cloudflare and Cloud VPN to hide identities and operated without physical servers or equipment at the site. Instead, it rented Cloud VPS instances to build a digital operating base that left few traces and was difficult to track.
4. Police say the network tied together 11 gambling brands: JUN88, MK8, VV72, TH26, F168/7F168, PG688, BT678, OKVIP, JL69, NM9, and K188. The brands covered live casino, slots, baccarat, card games, sports betting, and online lottery, and processed monthly transactions exceeding 100 million baht.
5. Investigators say the “super administrator” had authority to approve deposits and withdrawals in both Thai baht and cryptocurrency across dozens of URLs. During the search, officers found what looked like an old, ordinary house on the outside, but inside it functioned as a secret operations center.

Chalisa told police she had initially worked at an entertainment venue in Poipet, Cambodia. In October 2025, she submitted an application; the source text breaks off there.