Curaçao tightens crypto controls for online gambling and sets full compliance by mid-2027

The Curaçao Gaming Authority (CGA) has published a detailed virtual assets policy for all B2C online gaming license holders. The practical point for PSPs and operators is that Curaçao is moving crypto use in licensed gambling toward a FATF-style compliance model, with explicit rules on wallet controls, transaction monitoring, and treasury handling.

1. The policy, which began circulating in June 2026 through official channels, applies to all group entities involved in cryptocurrency transactions under a CGA B2C license, regardless of operational role. The CGA draws a hard line here: licensees may accept crypto as a payment method for gaming, but they may not act as exchanges, custodians, or virtual asset service providers (VASP).
2. The technical and operational requirements are broad. Operators must deploy blockchain analytics tools for wallet verification, risk scoring, and transaction monitoring on all crypto deposits and withdrawals. They also have to keep player wallets, operational wallets, and treasury wallets separate. Personal wallets, or wallets tied directly to the ultimate beneficial owner, are explicitly prohibited.
3. The CGA is also steering operators toward specific asset types. It expresses a preference for fiat-backed stablecoins. Privacy coins, meme tokens, and wrapped tokens of uncertain origin will be subject to separate assessment or may be excluded from the offering altogether. Funds linked to mixers, tumblers, or addresses on international sanctions lists are fully prohibited.
4. Compliance is staggered, not immediate. Within 3 months, licensees must submit an internal crypto policy via the CGA portal that meets the new standards. Within 6 months, they must complete risk assessments, due diligence on the VASP they work with, and staff training on the new requirements. Full compliance is due within 12 months, with the text pointing to mid-2027.

For high-risk payment teams, the useful detail is not just that Curaçao is tightening rules; it is how far the policy reaches into the operating stack. This is no longer “can we take crypto?” but “can we evidence wallet segregation, screening, and treasury separation under a licensed-gaming framework?”