Non-GamStop Casino Licences: Curaçao, Malta, Anjouan and Beyond

The word “licensed” gets thrown around on offshore casino sites the way “organic” gets used on food labels — liberally, vaguely, and with the hope that nobody will check. I have spent the past nine years checking. And what I have found is a licensing landscape that ranges from genuinely rigorous regulatory frameworks down to jurisdictions where the permit is little more than a PDF and an annual fee.

Every legacy Curaçao sub-licence expired in January 2025 when the new LOK regime came into force — a seismic shift that most casino review sites have not bothered to acknowledge, let alone explain. That single change invalidated hundreds of operator credentials overnight, and yet you will still find sites listing casinos as “Curaçao-licensed” based on permit numbers that ceased to exist over a year ago.

This article breaks down the major licensing jurisdictions that non-GamStop casinos operate under, starting with the UKGC as a baseline and working through Curaçao, Malta, Anjouan, and Kahnawàke. The goal is not to declare one jurisdiction “safe” and another “dangerous” — that binary is too simple for a complicated reality. Instead, I want to give you the specific details that determine what protections you actually have as a player under each framework, so you can make your own assessment based on evidence rather than a colour-coded trust badge.

What UKGC Licensing Requires — The Baseline

Before we talk about what offshore licences do and do not cover, we need to establish what the UK Gambling Commission actually demands from its licensees. I think of UKGC requirements as the measuring stick — not because they are perfect, but because they represent the regulatory environment that UK players are accustomed to and that offshore operators are competing against.

A UKGC operating licence requires the applicant to demonstrate financial stability, submit to background checks on all key personnel, segregate player funds from operational funds, implement responsible-gambling tools including deposit limits and self-exclusion integration with GamStop, and submit to regular compliance audits. Operators must also participate in an approved Alternative Dispute Resolution scheme, which gives players a formal channel to escalate complaints that the operator has not resolved internally.

The enforcement side is equally significant. The Gambling Commission invested an additional £26 million over three years into combating unlicensed platforms, issuing 741 cease-and-desist notices during that period. That enforcement budget funds a dedicated team that monitors offshore operators targeting UK consumers, coordinates URL takedowns with search engines, and works with payment processors to disrupt transaction flows to illegal sites.

The UKGC also imposes the recently increased Remote Gaming Duty — now 40% as of April 2026 — which directly affects operator margins and, consequently, the bonuses and odds they can offer players. This tax burden is one of the economic realities that makes offshore operation financially attractive for companies willing to forgo UK regulatory compliance.

None of this means the UKGC system is flawless. The Commission has faced criticism for slow enforcement, inconsistent penalty application, and a complaints process that can feel opaque to individual players. But the framework exists, it is documented, and it provides a baseline of protection that every offshore alternative should be measured against. When I evaluate a non-GamStop casino’s licence, the question is always the same: how does this jurisdiction’s framework compare to what the UKGC provides, and what specifically is the player giving up by operating outside that framework?

Curaçao: From Sub-Licences to the LOK Regime

I was in a conference room in Malta when the news broke that Curaçao had finally pulled the trigger on the LOK reform. The reaction among industry insiders was a mixture of relief and scepticism — relief because the old master/sub-licence system had been a regulatory embarrassment for over a decade, and scepticism because nobody was sure how many operators would actually comply with the new requirements rather than simply relocating to an even less demanding jurisdiction.

The old system worked like this: a handful of master licence holders — companies like Antillephone, Curaçao Interactive Licensing, Gaming Services Provider, and Curaçao eGaming — each held a single licence from the government and then sold sub-licences to individual operators. The master licence holder was nominally responsible for overseeing its sub-licensees, but in practice, oversight was minimal to non-existent. An operator could obtain a Curaçao sub-licence with little more than a corporate registration and a fee, and the resulting permit carried the appearance of regulatory approval without much of the substance.

The LOK regime, which came into force on 24 December 2024, dismantled that structure entirely. Every existing sub-licence was terminated in January 2025. Under the new framework, operators must apply directly to the Curaçao Gaming Authority for an individual LOK licence. The application process requires submission of a detailed business plan, proof of technical infrastructure, anti-money-laundering procedures, responsible-gambling policies, and evidence of financial reserves sufficient to cover player liabilities.

The staffing requirements are particularly telling. From 1 April 2027, every LOK-licensed operator must employ at least one key staff member physically based in Curaçao, with that number increasing to three by the fifth year of operation. This is a direct response to the old system’s most obvious weakness — operators that were technically “based” in Curaçao but had no physical presence on the island, making enforcement practically impossible.

For UK players, the LOK transition is a genuinely meaningful development. A casino that has obtained a new LOK licence from the CGA has at least demonstrated a willingness to meet higher standards than the old sub-licence system required. That does not make the LOK equivalent to a UKGC licence — the player-fund segregation requirements are less prescriptive, the dispute-resolution mechanisms are still being established, and the CGA’s enforcement track record is too short to evaluate properly. But the gap between old-Curaçao and new-Curaçao is substantial, and the detailed breakdown of the LOK reform covers what changed and what remains unresolved.

The question that remains open is how many operators will actually complete the LOK transition versus how many will migrate to jurisdictions with fewer requirements. Early signs suggest a significant number of former Curaçao sub-licensees have moved to Anjouan or simply continued operating without any licence at all.

Malta Gaming Authority: Cross-Border Reach and Limits

Malta is the jurisdiction I get asked about most often, and the conversations usually start with a misconception: “If a casino has an MGA licence, it must be safe.” That is closer to true than the same claim about most other offshore licences, but the reality has important caveats that are worth understanding before you deposit.

The Malta Gaming Authority operates one of the most comprehensive licensing frameworks outside of major national regulators like the UKGC. MGA-licensed operators are required to hold player funds in segregated accounts with EU-regulated banks, maintain minimum capital reserves, implement anti-money-laundering controls that align with EU directives, and participate in the MGA’s player-support function, which handles complaints that operators fail to resolve internally.

The MGA publishes enforcement actions — licence suspensions, fines, revocations — on its website, which provides a degree of transparency that most offshore jurisdictions do not match. When an MGA-licensed operator is penalised, the details are a matter of public record, and players can check the status of any licence through the Authority’s online verification tool.

Here is the caveat: an MGA licence does not automatically mean the casino is authorised to serve UK players. Malta’s regulatory framework is designed for the EU single market, and the MGA has historically taken the position that operators serving UK customers should also hold a UKGC licence. In practice, some MGA-licensed casinos do accept UK players without a UKGC licence, operating in a regulatory grey zone where the MGA’s rules apply but the UKGC has no direct oversight authority.

For UK players at an MGA-licensed casino, the practical implications are mixed. You have access to a better dispute-resolution process than you would under most other offshore licences. Your funds are more likely to be held in segregated accounts. But if a dispute escalates to the point where you need regulatory intervention, the MGA’s jurisdiction is Malta, not the UK, and its enforcement powers do not extend to the British legal system. You are protected, but the protection operates under a different legal framework than you might be used to.

There is also the matter of costs. MGA licensing fees and compliance obligations are considerably higher than those of budget jurisdictions, which means that operators who hold MGA licences have made a financial commitment to regulatory standards. That commitment is not guaranteed to translate into perfect service, but it does create a baseline incentive structure — an operator paying significant regulatory costs is less likely to engage in the predatory practices that characterise unlicensed platforms, because the cost of losing that licence is substantial.

Anjouan and Kahnawàke: The Budget-Tier Jurisdictions

When I first encountered an Anjouan gaming licence, I had to look up where Anjouan actually was. That is not a joke — it is a small island in the Comoros archipelago off the east coast of Africa, and its emergence as a gambling licensing jurisdiction over the past few years tells you everything you need to know about how the offshore market responds to regulatory tightening elsewhere.

Anjouan’s licensing framework is recent, relatively inexpensive, and minimal in its compliance requirements compared to Curaçao’s post-reform LOK system or Malta’s MGA. The jurisdiction offers a tiered licensing structure with different categories for different types of gambling activity, but the oversight mechanisms are nascent. There is no established track record of enforcement actions, no publicly accessible database of licensee compliance records, and no player-dispute resolution process with any meaningful history of outcomes.

Kahnawàke, a Mohawk territory in Quebec, Canada, has been licensing online gambling operators since 1999 through the Kahnawàke Gaming Commission. The KGC has a longer track record than Anjouan and has periodically taken enforcement actions against licensees. However, its regulatory model is closer to self-regulation — the Commission operates within a sovereign territory that is not bound by Canadian federal gambling law, and its enforcement powers are limited to licence revocation and fines within its own jurisdiction.

For UK players, both of these jurisdictions represent the lower end of the regulatory spectrum. That does not mean every casino licensed in Anjouan or Kahnawàke is necessarily problematic — some operators choose budget jurisdictions for cost reasons while still maintaining reasonable operational standards. But the safety net is thinner. If you encounter a dispute at a casino licensed by either of these authorities, your options for escalation are significantly more limited than they would be under the MGA or even the new Curaçao LOK framework. The licence exists, but the infrastructure behind it is less developed, and the distance between the licensing authority and the UK consumer is both geographical and jurisdictional.

What concerns me most about budget-tier jurisdictions is not the operators that choose them deliberately but the ones that end up there by default. When Curaçao tightened its requirements with the LOK reform, a predictable migration occurred: operators that could not or would not meet the new standards moved to jurisdictions with lower barriers. Anjouan, in particular, saw a noticeable influx of new applicants in early 2025. Some of those operators may run perfectly acceptable platforms. Others may be exactly the kind of operators that Curaçao’s reform was designed to filter out. Without robust enforcement data from the licensing authority, it is difficult for players — or analysts — to tell the difference.

Player-Protection Standards Side by Side

A licensing comparison is only useful if you understand what each jurisdiction actually protects you from — and what it does not. I have had players tell me they feel “safe” because their casino “has a licence,” as if the word itself carries magical properties regardless of which authority issued it or what obligations it imposes. So let me lay out the specific protections, jurisdiction by jurisdiction, without the false equivalences.

Player-fund segregation is the clearest dividing line. The UKGC requires operators to hold customer funds separately from operational funds, and the MGA imposes a similar requirement through its EU-aligned banking regulations. Curaçao’s LOK framework includes language about financial reserves but does not mandate segregated accounts to the same standard. Anjouan and Kahnawàke do not impose meaningful fund-segregation requirements. What this means in practice: if an MGA-licensed operator goes insolvent, your deposited funds have legal protection as segregated assets. If an Anjouan-licensed operator folds, your balance is likely an unsecured claim against a company in a jurisdiction where recovery is practically impossible.

Dispute resolution is the second critical difference. The UKGC requires participation in an approved ADR scheme. The MGA operates its own player-support function with published case timelines. Curaçao’s LOK framework is establishing a complaints process, but it is still in its early stages with no significant body of resolved cases. The Gambling Commission’s chief executive has described illegal online gambling as a serious threat to consumer protection and market integrity — and that threat is amplified precisely in jurisdictions where dispute mechanisms are weak or absent.

Responsible-gambling tool requirements vary similarly. UKGC licensees must integrate with GamStop, offer mandatory deposit limits, provide session time-outs, and display responsible-gambling messaging meeting specific standards. MGA operators must offer deposit limits and self-exclusion options, though integration with national schemes outside Malta is not required. Curaçao’s LOK regime requires responsible-gambling policies but defines them less prescriptively. Budget-tier jurisdictions tend to treat responsible gambling as a matter of operator discretion rather than regulatory mandate.

The pattern is consistent: as you move down the jurisdictional hierarchy from UKGC through MGA to Curaçao to the budget-tier authorities, each layer of player protection becomes progressively thinner. No single jurisdiction is perfectly safe or perfectly dangerous, but the differences between them are concrete, measurable, and directly relevant to what happens when something goes wrong with your account or your money.

How to Verify a Casino’s Licence Yourself

I check every licence number I encounter against the issuing authority’s database, and I am consistently surprised by how many do not match. Not “expired” or “suspended” — simply not present. The operator displays a licence number on their site that has never existed in the regulator’s records. It takes about ninety seconds to check, and it is the single most effective filter you can apply before depositing a penny.

For UKGC-licensed operators, the verification process is straightforward. The Gambling Commission maintains a searchable public register at its official website. Enter the operator’s name or licence number, and the register returns the licence status, the activities it covers, and any regulatory actions taken against the licensee. If the operator claims a UKGC licence and does not appear in this register, they do not hold one.

The MGA offers a similar tool. Its licence verification page accepts licence numbers and returns the licensee’s name, the licence type, and its current status. The CGA has launched a registry for LOK-licensed operators as part of the reform — a significant improvement over the old system, where verifying a sub-licence often required contacting the master licence holder directly and hoping they would respond.

Anjouan and Kahnawàke verification is more difficult. The Kahnawàke Gaming Commission publishes a list of authorised client providers on its website, but the information is less detailed than what the MGA or UKGC provide. Anjouan’s licensing authority does not yet maintain a comprehensive public-facing registry with the same level of search functionality.

The Gambling Commission directed 447,778 URLs for removal from Google and Bing between April 2024 and October 2025, and managed to get 287,961 taken down. That volume of enforcement activity underscores a basic point: the presence of a casino in search results is not evidence of legitimacy. A site that ranks well in Google, displays professional design, and features recognisable game providers can still be completely unlicensed. The licence check is the only verification that matters, and it is the one step that most players skip.

Published by the StakeVault team.