Curacao, Malta, Anjouan, Isle of Man: the Licence Tiers

A gambling licence is not a quality seal. It's a statement that an operator met a specific set of requirements at a specific point in time and is paying a regulator to remain listed. What varies enormously between licences is what those requirements are, how they're enforced, and what you get as a player when something goes wrong.

Curacao

Curacao was until 2024 the dominant licence for online gambling operators, running under the National Ordinance on Offshore Games of Hazard (NOOGH). The framework was notable for low barriers, minimal player protection requirements, and dispute resolution that was more theoretical than practical. Master licence holders sub-licensed hundreds of operators with minimal individual oversight.

In December 2024, the National Ordinance on Games of Chance (LOK) came into force, replacing the NOOGH framework. The LOK creates a centralised licensing authority, the Curacao Gaming Authority (CGA), and establishes more substantive requirements including mandatory AML and KYC compliance, identity verification for transactions above EUR 2,500, responsible gaming obligations, fixed offices and local servers, and enforcement powers the old framework entirely lacked.

What this means for players in practice: the transition is ongoing and the CGA's enforcement capacity remains limited relative to the operator count. A Curacao licence under LOK is a meaningful improvement over what it was under NOOGH, but it still doesn't provide the structural player protection of Malta or the Isle of Man. There is no mandatory player fund segregation, no statutory dispute resolution with binding outcomes, and no formal compensation scheme if an operator becomes insolvent. Dispute resolution involves contacting the CGA, which may intervene or may not. Most operators in this publication's test set hold Curacao licences. That's the current market reality for crypto-first operators.

Malta MGA

The Malta Gaming Authority is the European standard for online gambling regulation, partly because Malta is an EU member state and partly because the MGA has developed a substantive regulatory framework over more than 20 years. Operators must maintain player funds in segregated accounts separately identifiable from operating funds at all times. The MGA runs a player dispute resolution function that accepts complaints and can impose binding outcomes. Operators found non-compliant can be fined or have licences revoked.

MGA-licensed operators are required to maintain player fund protection at a level covering all outstanding player balances. If the operator becomes insolvent, player balances should be recoverable from the segregated funds. In practice, the segregation requirement varies in strictness, but it exists as a regulatory requirement rather than a courtesy. The MGA licence is the meaningful tier for player protection in practical structural terms.

Fewer crypto-first operators hold MGA licences because the compliance costs and operational requirements are higher, including mandatory European legal structures and ongoing audit obligations. Evolution, which powers live casino at most of the sites in this test set, holds MGA and Isle of Man licences for its B2B operation. The B2C operators themselves typically hold Curacao.

Isle of Man

The Isle of Man Gambling Supervision Commission (GSC), established in 1962, is one of the oldest gambling regulators. The requirements are strict: operators must incorporate locally with local directors, segregate player funds into accounts held at Isle of Man-approved banks, and submit to annual financial and technical audits. Player fund segregation at this level means your deposit is held separately from the operator's operating funds by law. If the operator closes, the player funds are ring-fenced and recoverable.

The Isle of Man attracts a smaller operator count due to higher operational requirements, which is partly a feature. Operators that clear the bar tend to be more established and capitalised. Dispute resolution is formal and can produce binding outcomes. The Isle of Man is not a common licence for crypto-first casinos specifically, but it is the licence tier most associated with player fund security at the highest structural level.

Anjouan

Anjouan is an island in the Comoros archipelago, and its gambling licence became a market option around 2005. Initial cost is approximately EUR 17,000 to EUR 22,000 for the first year, making it the cheapest formal licence available by a significant margin. Annual renewal is comparable. This is the licence's primary appeal to operators.

What the licence provides in practical terms is minimal. The Anjouan Banking and Gaming Supervision Board has limited enforcement capacity. Dispute resolution is not substantive. There is no player fund segregation requirement. There is no statutory compensation scheme. The licence demonstrates that the operator paid a fee and submitted basic documents. It is worth something above operating with no licence at all, in that it creates some accountability structure and provides a formal registration. It is worth considerably less than a Curacao LOK licence in terms of actual player recourse.

Kahnawake

The Kahnawake Gaming Commission, operated by the Mohawk Council of Kahnawake in Canada, has licensed online gambling since 1999. It has built a reasonable reputation over its history, with genuine dispute resolution processes and requirements for operator accountability. Player fund protection isn't as formally structured as Isle of Man or MGA, but the commission has a track record of engaging with player complaints and taking action against non-paying operators. The Kahnawake licence is less common at crypto-first operators and carries a mid-tier reputation.

What a Licence Actually Gives You in a Dispute

In a dispute where a site refuses to pay a legitimate withdrawal, the useful question is what escalation path exists. With a Curacao LOK licence, you file a complaint with the CGA, which may engage with the operator or may produce an advisory outcome. With an MGA licence, you file with the MGA and have access to their approved alternative dispute resolution providers with binding authority. With an Isle of Man licence, you have the GSC, with the most solid enforcement track record. With Anjouan, you can contact the ABGB, but resolution without significant operator cooperation is unlikely.

The practical implication for most players: established operator reputation matters as much as licence tier for day-to-day play. A well-known Curacao-licensed operator with four years of documented payment history is likely safer in practice than a newly-launched MGA-licensed operator with no track record at all. Licence tier sets the regulatory floor. Operator track record determines the actual experience above that floor. Players should check both rather than treating either as sufficient alone.

Restricted Markets and What Licences Don't Cover

No licence covers the markets excluded from this publication's scope. US players are not protected by a Curacao licence, an MGA licence, or an Isle of Man licence in any meaningful way, because using those sites from the US typically violates the sites' own terms and provides no regulatory recourse regardless of the licence tier. The same applies to UK, Germany, India, and Australia. These markets have their own licencing frameworks that operators must comply with separately. A Curacao licence does not extend to those jurisdictions. Players in permitted markets outside those five countries interact with these licences as they are designed: as a regulatory baseline for offshore play.

For permitted-market players, the most useful single summary is: Curacao LOK provides a baseline with improving enforcement. MGA provides meaningful structural protection. Isle of Man provides the strongest fund protection by design. Anjouan provides minimal protection beyond a fee receipt. Kahnawake provides reasonable mid-tier protection with a real dispute history. The tier you're comfortable with should reflect the amount you're planning to deposit and the importance you place on regulatory recourse versus operator reputation.