The Curaçao gaming regulator confirmed unauthorized access to its licensing portal. Meanwhile, journalists are examining the published documents related to online casinos. The most important question for the reader is: what has been proven, and what conclusions are still premature?
BET RATING reviewed two official statements from the Curaçao Gaming Authority (CGA), a publication by The Guardian on September 26, and the regulator's license registry page. Below is a timeline of events and a practical way to verify information about the operator without delving into the massive leaked documents.
What happened: from access to the portal to the Casino Secrets investigation
On September 17, the CGA reported that it had identified unauthorized access to the online portal used for licensing the gambling business. The regulator stated that access has been terminated and the circumstances of the incident are under investigation.
In a statement on September 22, the agency clarified the results of its internal review: access was achieved through the client side of the portal with an account created under a false identity. According to the CGA, this access lasted from December 2025 to September 2026. The regulator reported that it has strengthened the portal's security and notified operators of the changes.
On September 26, The Guardian published an investigation into a trove of materials dubbed Casino Secrets. Journalists reported on documents related to companies in the Curaçao online casino market, including information that operators provided during licensing. The companies and circumstances mentioned in the journalistic investigation require separate verification; the mere appearance of a brand name in the materials does not establish a violation.
What has been confirmed — and what is still unknown
Confirmed officially
- Unauthorized access to the CGA licensing portal did indeed occur.
- According to the regulator, access has been identified and terminated; an investigation has been initiated.
- The CGA reported additional protective measures for the portal and changes for operators.
The scope and consequences are still being clarified
The CGA explicitly stated that the full extent of the materials obtained has not yet been established and the agency is not ready to confirm the circulated quantitative estimates. This is an important caveat: reports of "tens of thousands of documents" reflect materials from the journalistic investigation, not the final result of the regulator's review.
It cannot be automatically asserted that access affected client accounts, player payment details, or the regulator's internal infrastructure. In its initial statement, the CGA noted that the investigation at that time had not revealed any compromise of its core technical framework. This is not a final assessment of all potential consequences.
Another boundary for conclusions relates to licenses. The existence of a separate document, a question from the regulator to the applicant, or a mention in journalistic materials does not equate to a license revocation and does not prove the illegal operation of a specific site. The CGA requests that licensing application documents be considered in full context.
What the Casino Secrets story means for readers in the CIS
The event serves as a reminder of how many different entities are hidden behind the name of an online casino: brand, domain, operating company, and permission from the regulatory authority. A familiar logo does not, by itself, explain who manages the site and in which country its services are available.
For visitors from Russia, Kazakhstan, Uzbekistan, or another CIS country, another check is needed — local regulations. A Curaçao license does not automatically grant permission to provide services in each of these jurisdictions. Therefore, information about a foreign license should be compared with the legislation of the user's country and the actual domain of the service.
At BET RATING, we find it useful to conduct a check that can be repeated independently: the name of the legal entity, domain, claimed license, date, and link to the official source. Publishing only a nice license badge without this information leaves too many questions.
How to check an online casino after the leak news
- Record the exact domain. Look at the address bar, including the domain zone: similar names may lead to sites of different companies.
- Find the legal entity and license data on the site. Check the user agreement and the legal information section. Save the claimed number and name of the company.
- Open the official CGA registry. Match the company with the online gaming license section. The regulator warns that published reviews may not reflect immediate changes in status, so additional confirmation is required if in doubt.
- Check the brand's connection to the operator. A match of the company name in the registry is not sufficient unless it is established that it indeed manages the site you are interested in.
- Verify the region. Even a confirmed foreign license does not negate applicable rules in the country from which you are accessing the service.
- If discrepancies arise, clarify the status with official parties. Formulate your question with the domain, company name, and license number; do not rely on forwarded archives of unknown origin.
The official registry contains separate sections for online licenses, certificates, and information on oversight measures. First, check it and CGA announcements, then read independent investigations for context.
Frequently asked questions
Did the regulator confirm the leak of all published documents?
No. The CGA confirmed unauthorized access to the portal, but by September 26, it had not established the full extent of the materials obtained.
Does the mention of a casino in Casino Secrets mean it is operating illegally?
No. Mention in documents does not, by itself, determine the legal status of the site. Verification of the specific company, domain, license, and applicable local regulations is needed.
Where to check the Curaçao license?
Start with the Curaçao Gaming Authority registry and match the company's data with the legal information of the site in question. If discrepancies arise, request clarification from the regulator or operator.
Have there been published proofs of player data leaks?
In the official statements reviewed, the CGA does not draw such a general conclusion. The agency continues to establish the composition of the affected information and the consequences of the incident.
Comments 0
Please log in on the site, чтобы добавить комментарий, лайк или дизлайк.