Research Desk
Quiet Caribbean harbour at dusk, colourful waterfront facades softly blurred, closed ring binder resting on a stone ledge in

Records checked: 30 September 2026

Curaçao casino leak: which brands and countries are most exposed

The Curaçao Gaming Authority acknowledged unauthorised access to its online gaming portal but said the extent was not established, in a statement dated 22 September 2026.

TL;DR

The September 2026 Casino Secrets/Curaçao Files reporting names brands including Stake, Blaze, MyStake and 1xBet, with Germany, Brazil, the Netherlands, Sweden and the UK showing the most documented regulatory exposure to date.

  • The project’s own homepage shows two conflicting document totals, over 40,000 and 84,000+, with no reconciled figure (Casino Secrets project homepage).
  • Medium Rare N.V.’s Stake licence OGL/2024/1451/0918 shows “Active” on its certificate but “Assessment in progress” in the 21 Sep 2026 register (our cross-check of CGA records).
  • MyStake was named under Santeda International B.V. in Sweden’s 11 Jun 2024 prohibition, yet Santeda’s current 13-domain certificate omits mystake.com (our cross-check).
  • Blaze’s blaze.bet.br domain appears both on Prolific Trade N.V.’s Curaçao certificate and under Foggo Entertainment LTDA in Brazil’s pre-MP 1.394/2026 list (our cross-check).
  • N1 Interactive Limited holds two separate Malta Gaming Authority statuses as of 29 Sep 2026: B2C Licensed and B2B Surrendered (MGA licence verification).
  • Stake’s stake.uk.com white-label was run via TGP Europe Limited before Stake’s identified exit from the GB market (UKGC record).
  • Still unresolved: the verified total number of documents taken from Curaçao Gaming Authority systems.

What leaked from the Curaçao gaming regulator, and what is confirmed?

The Curaçao Gaming Authority (CGA) has confirmed unauthorised access to its online gaming portal but says the extent was not established. In its follow-up statement dated 22 September 2026, the regulator acknowledges the unauthorised access and states that the extent and the number of files involved were not established (CGA follow-up statement, record dated 22 September 2026).

The size of the corpus therefore rests on the journalism project’s own statements, and those statements are not internally consistent. As checked on 29 September 2026, the Casino Secrets project homepage displays a header figure of over 40,000 documents alongside a statistics counter of 84,000+ documents and a data-volume counter of 2TB+. Our cross-check records that the two document totals appear simultaneously and that the checked text does not explain which population each figure covers, so the denominator remains unresolved and no independently verified leak count exists.

Project statement (as checked 29 September 2026)ValueWhat it isWhat it is not
Homepage header document countover 40,000 documentsPublisher’s own header assertionNot an independently verified count
Homepage statistics counter84,000+ documentsPublisher’s own counter assertionNot reconciled with the header figure
Homepage data-volume counter2TB+Publisher’s own counter assertionNo independent corpus measurement
CGA position, 22 September 2026Extent not establishedOfficial regulator statementNot a confirmation or denial of any project figure

For readers checking a casino, the practical consequence is narrow: the incident at the regulator does not, by itself, change what any licence register or certificate says. Those displays are separate records, and they are set out below and on our Curaçao licence check guide.

Which casinos and companies are named, and which entity holds the licence?

The brands discussed in the reporting map onto a small set of named licence-holding companies, each with its own registration and licence number. The table below is a purposeful shortlist of brands with identifiable operators, quantified exposure or official actions — not a census — and every cell comes from the records cited beneath it.

BrandLicence-holding entity in the recordsRegistration no.Licence and regulatorRegister status (register dated 21 September 2026)Certificate status (checked 29 September 2026)More detail
Stake (stake.com)Medium Rare N.V.145353OGL/2024/1451/0918 · Curaçao Gaming Authority · B2CAssessment in progress (issued 9 December 2025; expiry field 9 June 2026; p7, row 193)Active (certificate grant date 9 June 2025)Who operates Stake
Blaze (blaze.com, blaze.bet.br)Prolific Trade N.V.150731OGL/2024/1415/0636 · Curaçao Gaming Authority · B2CIndefinite (issued 24 December 2025; no expiry stated; p15, row 422)Active (grant date 4 December 2024)Blaze in Brazil
1xBet (1xbet.com)Caecus N.V.163779OGL/2024/1262/0493 · Curaçao Gaming Authority · B2CIndefinite (issued 24 December 2025; no expiry stated; p16, row 457)Active (grant date 7 November 2024)Not covered by a dedicated page
Velobet, Goldenbet (velobet.com, goldenbet.com)Santeda International B.V.151296OGL/2024/1798/1048 · Curaçao Gaming Authority · B2CAssessment in progress (issued 24 June 2025; expiry field 24 December 2025; p19, row 550)Active (grant date 14 August 2024)MyStake, Velobet and Goldenbet
JustCasino (justcasino.com)Just Entertainment B.V.160603OGL/2024/164/0246 · Curaçao Gaming Authority · B2CIndefinite (issued 24 December 2025; no expiry stated; p19, row 551)Active (grant date 13 August 2024)SOFTSWISS-linked companies
Platincasino, Platinumslots (platincasino.com, platinumslots.com)Latiform B.V.160604OGL/2024/163/0190 · Curaçao Gaming Authority · B2CIndefinite (issued 24 December 2025; no expiry stated; p20, row 577)Active (grant date 16 July 2024)Platincasino: operator and licence
N1 Casino, Bobcasino (n1casino.com, bobcasino.com)N1 Interactive Limitednot establishedMGA/B2C/394/2017 · Malta Gaming Authority · B2C; MGA/B2B/801/2020 · MGA · B2BB2C Licensed; B2B Surrendered (both as of 29 September 2026)not applicable (MGA seal, not a CGA certificate)N1 Casino and Bobcasino
BC.Game (bc.game)Small House B.V. (historical)164979OGL/2023/118/0060 · Curaçao Gaming Authority · B2CRevoked, revocation 6 December 2024 (enforcement register dated 14 September 2026, p2 row 32)Historical certificate onlyBC.Game licence history

Sources for the rows above: CGA online gaming licence register (dated 21 September 2026) and the individual certificates for Medium Rare N.V., Prolific Trade N.V., Caecus N.V., Santeda International B.V., Just Entertainment B.V. and Latiform B.V., all checked 29 September 2026; the MGA licence verification for N1 Interactive Limited checked 29 September 2026; and the CGA enforcement register dated 14 September 2026.

Three plain-language notes. An “Assessment in progress” entry is the wording the CGA register itself uses; it is a dated snapshot of an administrative state, not a finding about the operator and not a guarantee of the position today. A revoked licence, as recorded for Small House B.V. from 6 December 2024, means that particular Curaçao authorisation no longer stands; it does not establish who currently operates BC.Game or the position in any other jurisdiction. And a licence in Curaçao or Malta is not permission to serve customers in the United Kingdom or any other country.

Where the certificate and the register disagree

For two licences, the two official CGA displays do not match, and we keep both rather than reconciling them. The Medium Rare N.V. certificate for OGL/2024/1451/0918 shows Active, while the register dated 21 September 2026 shows Assessment in progress with an expiry field of 9 June 2026. The Santeda International B.V. certificate for OGL/2024/1798/1048 shows Active, while the same register shows Assessment in progress with an expiry field of 24 December 2025. These are separate observations that require clarification from the regulator; neither display alone settles the other.

Domain counts are not brand counts

Our own counts of the distinct domains listed on each public record show how easily a large number can be misread. Method: count distinct lower-case domain strings on the observed certificate, mirrors included.

EntityDistinct domains (our count, 29 September 2026)Caveat
Just Entertainment B.V.362Includes mirrors; this is not 362 casinos or brands
N1 Interactive Limited (MGA seal)20Mirrors included
Caecus N.V.15Direct timestamped snapshot used; a web extraction showed additional mirror entries
Santeda International B.V.13Does not include mystake.com in the checked snapshot
Latiform B.V.9Two obvious name families; grouping is ours, not an ownership finding
Prolific Trade N.V.3Not a customer-market count
Medium Rare N.V.1Not a customer-market count

Two record-level details deserve separate mention. The Swedish prohibition decision of 11 June 2024 identifies mystake.com under Santeda International B.V., yet the Santeda certificate observed on 29 September 2026 omits mystake.com — so only the historical relationship is established, not the current operator (Swedish prohibition: Santeda). Separately, blaze.bet.br appears both on the Prolific Trade N.V. certificate and under Foggo Entertainment LTDA (registration 56.431.248/0001-61) in Brazil’s ministry list; that may reflect jurisdictional or stale records rather than misconduct, and the two legal entities are not merged here.

For 1xBet, the records establish only the certificate identity — Caecus N.V., OGL/2024/1262/0493, 15 domains in the checked snapshot — and a Brazilian domestic entity, DEFY LTDA (registration 47.974.569/0001-11), listed for 1xbet.bet.br under authorisation SPA/MF 1666 of 29 July 2025.

Which countries are most exposed according to the records?

Exposure here means documented business footprint, allegations and regulatory history — not proven financial damage caused by the September 2026 publication. Figures use different measures and currencies and are not ranked against each other; EUR and BRL are never converted.

CountryWhat the records or reporting showMeasure typeCaveat
GermanyEUR 5.86bn stakes in the German criminal case for July 2021 to December 2023; EUR 82m assets reportedly secured on 8 September 2026; 11 properties searchedCase-scale stakes; reported seizureStakes are not casino revenue or a fine; an investigation is not a conviction, and reporting of 24 September 2026 says no charge had been filed at that point
BrazilFoggo Entertainment LTDA reported player deposits of R$ 11bn and gross revenue of R$ 1.9bn for January–November 2025 (Folha); collective damages of R$ 380m requested by prosecutors on 23 July 2026Reported deposits and revenue; requested damagesDeposits are not revenue; a damages request is not an award; 11 months, not a full year
Brazil (market-wide)Provisional measure 1.394/2026, published 25 September 2026, sets a 30-day transition for extinction of authorisations and 10 days for website disablementStatutory transition periodsNot established as a consequence of the Casino Secrets reporting; challenges reported pending
United KingdomAn estimated 2.3 million unique monthly visitors across at least 8 websites in the reported Santeda-linked group, November 2025 to January 2026 (Similarweb, cited by Investigate Europe); UKGC identified TGP Europe Limited as white-label operator of stake.uk.com, with planned closure 11 March 2025Reported traffic estimate; official recordTraffic is not depositing players and is group-level, not per brand; cross-site duplication possible
SwedenProhibition against Santeda International B.V. dated 11 June 2024, naming five domainsOfficial recordAbsence of a Swedish licence is the jurisdiction-specific issue; the list is historical, not a current inventory
NetherlandsKSA fine of EUR 12.64m imposed on N1 Interactive Limited (decision 20 December 2022, published 3 March 2023); conditional penalty order against BlockDance B.V. of EUR 280,000 per week, capped at EUR 840,000 (17 October 2024)Imposed fine; conditional orderA conditional order is not evidence money was collected; neither action is linked to the 2026 leak

Sources: GGL on the German enforcement operation (17 September 2026) with Tagesschau (9 September 2026) and Amphora Media (24 September 2026); Folha (16 July 2026) and MPDFT (23 July 2026); provisional measure 1.394/2026 with UOL reporting on pending challenges (28 September 2026); Investigate Europe (1 April 2026) and the UKGC notice on Stake leaving the GB market (12 February 2025); KSA fine: N1 Interactive and KSA conditional order: BlockDance.

Timeline of official actions and publications

Most dated actions in the reviewed records predate the September 2026 publication.

DateEventEvidence type
20 December 2022KSA fine of EUR 12.64m imposed on N1 Interactive Limited (published 3 March 2023)Official record
11 June 2024Spelinspektionen prohibition against Santeda International B.V., five domains namedOfficial record
17 October 2024KSA conditional penalty order against BlockDance B.V. for bc.game and bcgame.luOfficial record
6 December 2024Revocation of OGL/2023/118/0060 held by Small House B.V.Official record
12 February 2025UKGC consumer notice on Stake leaving the GB market; planned closure 11 March 2025Official record
21 July 2026Partial interim advertising injunction concerning Foggo Entertainment LTDA in BrazilOfficial record
23 July 2026MPDFT announces a collective damages request of R$ 380mOfficial record
8 September 2026EUR 82m in assets reportedly secured and 11 properties searched in the German criminal casePublished reporting
14 September 2026Date of the CGA enforcement register used hereOfficial record
21 September 2026Date of the CGA online gaming licence register used hereOfficial record
22 September 2026CGA statement acknowledging unauthorised access, extent not established; Casino Secrets articles on Platincasino and SOFTSWISS publishedOfficial record; published reporting
25 September 2026Brazil’s provisional measure 1.394/2026 publishedOfficial record
26 September 2026Guardian reporting naming BC.Game and SantedaPublished reporting
28 September 2026Trade reporting on an interim German court ruling in MGA litigation over use of the leaked dataPublished reporting

What the named companies, the regulator and the investigation itself say about these records is set out next.

Gambling is for adults of legal age in the reader’s country; anyone worried about their own gambling can contact a local gambling support service.

What does the Casino Secrets / Curaçao Files reporting actually allege?

The published reporting makes four main types of claim: aggregate financial figures for a publisher-defined group of licensed companies, a modelled German tax figure for one operator, country-level footprint estimates, and links between brands and pending official proceedings. All of the financial aggregates are publisher assertions, which the project says draw on material from CGA systems, not audited accounts.

For the SOFTSWISS-associated company grouping (as reported), the investigation’s own article publishes aggregate revenue of EUR 1,982,616,826 for 2024 and EUR 2,061,727,065 for 2025, aggregate GGR of EUR 1,642,293,367 for 2024 and EUR 1,753,480,311 for 2025, an aggregate net result of −EUR 180,755,411 for 2025 and an operator-payment line of EUR 365,075,547 for 2025 (Casino Secrets: SOFTSWISS). Our own arithmetic on those two revenue figures gives growth of 3.99% from 2024 to 2025, which says nothing about any single country. Our cross-check also found the scope unclear: the article refers to nine licensed companies while displaying seven company revenue figures, and geography and consolidation are not established. In the published responses, SOFTSWISS denies operating end-user casinos and says shared software does not establish ownership or control, and the CGA says it has no regulatory “SoftSwiss network” classification because shared technology does not make entities one network (NDR published research notes and responses). The same response document states that the identified companies paid several hundred million euros of German gambling taxes under protest; that figure is not independently verified. More detail is on our page on SOFTSWISS-linked companies in the Curaçao files.

Platincasino is the most quantified brand-specific case in the reviewed sources. The investigation publishes GGR for Latiform B.V. of EUR 121,000,869 (2024) and EUR 115,147,655 (2025), plus modelled German gambling tax of EUR 14,987,401.59 (2023), EUR 109,021,782.97 (2024) and EUR 103,748,037.16 (2025) on an assumed 85% German share (Casino Secrets: Platincasino). Our arithmetic on those three published estimates totals EUR 227,757,221.72, which is EUR 22,242,778.28 below the article’s narrative figure of approximately EUR 250m; that discrepancy is unresolved. Separately, German authorities describe stakes of EUR 5,860,000,000 between July 2021 and December 2023 in a criminal case (GGL on German enforcement operation), with EUR 82,000,000 in assets reportedly secured and 11 properties searched on 8 September 2026 and alleged unpaid tax of EUR 77,600,000 for 2024 (tagesschau). Reporting links that case to Platincasino and states that the defence rejects the allegations and that no charge had been filed as at 24 September 2026 (Amphora Media). See Platincasino’s operator and the German criminal case.

In Brazil, Folha reports player deposits of R$11bn, gross revenue of R$1.9bn, net revenue of R$1.1bn, net profit of R$361m, advertising spend of R$330m and dividends of R$350m for Foggo Entertainment LTDA over January to November 2025 (Folha). The prosecutor’s office announced a partial advertising injunction on 21 July 2026 and requested collective damages of R$380m on 23 July 2026 (MPDFT). Blaze’s published response says its influencer partnerships comply with national rules and declines comment on commercial financial and contract matters.

For the United Kingdom, Investigate Europe reports a Santeda-linked group of at least eight websites with an estimated 2.3 million unique monthly visitors between November 2025 and January 2026, citing Similarweb; Upgaming denies ownership, operation and wrongdoing and says a B2B relationship ended on 30 March 2026 (Investigate Europe). For Germany, NDR’s notes describe at least 388 sites said to target German players. The CGA, for its part, acknowledged unauthorised access to its online gaming portal on 22 September 2026 and said the extent and number of files was not established (CGA follow-up statement).

Claim versus evidence: what is confirmed, reported or disputed

ClaimWho says itEvidence typeStatus
Unauthorised access to the CGA online gaming portal occurred; extent not establishedCuraçao Gaming Authority (CGA), 22 September 2026Official recordConfirmed record (extent unresolved)
Over 40,000 and, elsewhere on the same homepage, 84,000+ documents and 2TB+ of dataCasino Secrets / Curaçao Files investigation homepagePublished reporting (project statement)Unresolved; two totals coexist on our check
Aggregate 2025 revenue of EUR 2,061,727,065 for a grouping of licensed companiesCasino Secrets: SOFTSWISS articlePublished reportingDisputed by SOFTSWISS and the CGA as a “network” attribution
Modelled German tax of approximately EUR 250m for Latiform B.V., 2023–2025Casino Secrets: Platincasino articlePublished reporting (estimate)Disputed; does not reconcile with the article’s own annual table (our arithmetic)
Stakes of EUR 5.86bn and EUR 82m assets secured in a German criminal caseGGL; tagesschau; Amphora Media links the case to PlatincasinoOfficial record plus published reportingInvestigation stage; no conviction, defence rejects allegations
Damages of R$380m requested from Foggo Entertainment LTDAMPDFT, 23 July 2026Official recordRequested, not decided
Estimated 2.3m monthly UK visitors across at least eight Santeda-linked sitesInvestigate EuropePublished reporting (estimate)Reported; Upgaming denies ownership and operation
KSA fine of EUR 12,640,000 on N1 Interactive LimitedKansspelautoriteit, decision 20 December 2022, published 3 March 2023Official recordConfirmed record; predates the 2026 publication
Curaçao licence OGL/2023/118/0060 held by Small House B.V. revoked on 6 December 2024CGA enforcement register dated 14 September 2026Official recordConfirmed record

What the Curaçao casino leak does not prove

Documented footprint is not proven financial damage. None of the reviewed sources establishes a revenue loss or a fine caused by the September 2026 publication, and almost every enforcement action described here — the Swedish prohibition of 11 June 2024, the Dutch order of 17 October 2024, the Dutch fine decided in December 2022, the Curaçao revocation of 6 December 2024, the Brazilian injunction of July 2026 and the German searches of 8 September 2026 — predates it. The facts reviewed do not establish that any of those actions was triggered by the leak.

Procedural wording matters. A search, a seizure, a conditional penalty ceiling, a requested damages amount and a modelled tax estimate are each different from a final penalty or a conviction. A revoked or expired Curaçao licence also does not show that a brand is unlicensed everywhere, and a Curaçao licence never authorised service to customers in another country.

Is every “Curaçao leak” story the same incident?

Searches for “Curaçao leak” can also surface reports about other, earlier data incidents in the gambling sector. This site covers only the Casino Secrets / Curaçao Files reporting published from September 2026 and the official records that can be checked against it; we do not describe those other incidents.

Litigation over the use of the leaked data

Trade reporting describes an interim German court ruling in litigation involving the Malta Gaming Authority over use of the leaked material (casinos.org). We have not independently reviewed the full court order, and nothing in the reviewed sources supports a conclusion that leaked documents may be freely republished. Consistent with our own policy, this site does not host, quote at length or link to leaked documents.

What is still unresolved

  • The verified total number of documents taken from CGA systems: the project’s homepage shows both “over 40,000” and “84,000+”, and the CGA says the extent was not established.
  • Who currently operates MyStake and BC.Game. The Swedish 2024 decision names MyStake under Santeda International B.V., but the Santeda certificate we checked on 29 September 2026 lists 13 domains and omits mystake.com; see MyStake, Velobet and Goldenbet and BC.Game’s licence history.
  • Whether the publisher’s SOFTSWISS-associated grouping reflects common ownership; both SOFTSWISS and the CGA dispute that framing.
  • The final court status of Brazil’s provisional measure 1.394/2026, with challenges reported pending as at 28 September 2026, and of the German criminal case.
  • Two CGA displays that differ: the Medium Rare N.V. and Santeda International B.V. certificates showed “Active” while the register dated 21 September 2026 showed “Assessment in progress”. That conflict needs regulator clarification and is not resolved here.

Why these records matter

For readers in the UK checking a casino, the practical point is that a brand’s own licence page and a regulator’s dated record are two different observations, and only one of them is official. Where a Great Britain exit was announced — as the Gambling Commission described for stake.uk.com, whose white-label operator TGP Europe Limited planned closure on 11 March 2025 — that is a matter of official record rather than interpretation. Anyone worried about their own or someone else’s gambling can contact a gambling support service in their country.

For industry and compliance readers, the value is in the mismatches: register status versus certificate status, historical domain lists versus current ones, and publisher aggregates versus audited accounts. Domain counts (362 on the Just Entertainment B.V. certificate, 20 on the N1 Interactive Limited seal) include mirrors and are not brand or licence counts.

For regulators and journalists, the open items are specific and checkable: the unexplained document totals, the two differing CGA status displays, the unreconciled Platincasino tax figures, and the appearance of blaze.bet.br in both a Curaçao certificate and the Brazilian authorisation list, which may reflect jurisdictional or stale records rather than misconduct.

How to check a licence or enforcement record yourself

  1. Open the CGA online gaming licence register dated 21 September 2026 and find the licence number and register status, noting the row and page.
  2. Open the matching CGA certificate — for example Medium Rare N.V. or Santeda International B.V. — and record the certificate status and the approved domains separately from the register entry.
  3. Check the CGA enforcement register dated 14 September 2026 for revocations, such as OGL/2023/118/0060 held by Small House B.V.
  4. For Malta, use MGA licence verification and read each licence separately; N1 Interactive Limited showed B2C “Licensed” and B2B “Surrendered” on 29 September 2026, as covered on N1 Casino and Bobcasino.
  5. For national enforcement, consult the Kansspelautoriteit pages on N1 Interactive Limited and BlockDance B.V., and the Spelinspektionen prohibition of Santeda International B.V..
  6. For Brazil, read the SPA list of authorisations granted before MP 1.394/2026 together with provisional measure 1.394/2026, which sets 10 days for website disablement and 30 days for authorisations to lapse after publication.

Our step-by-step method, including why the register and the certificate can disagree, is set out on the Curaçao licence check page. Gambling is for adults of legal age in the reader’s country.

FAQ: Curaçao Casino Leak, Named Brands and Regulator Checks

  • Which casino brands are named in the Casino Secrets / Curaçao Files leak?

    The reporting names brands including Platincasino, Blaze, MyStake, Velobet, Goldenbet, Stake, 1xBet, BC.Game, N1 Casino, Bobcasino and JustCasino, according to Casino Secrets, Folha, the Guardian and Follow the Money articles of 22–26 September 2026 and Investigate Europe (1 April 2026). Each brand links to a licence-holding entity on the Curaçao Gaming Authority register or a separate national regulator record; see SOFTSWISS-linked companies in the Curaçao files for one entity grouping.

  • Is the licence status shown on a brand's website consistent with the CGA's own register?

    Not always. The certificate for Medium Rare N.V. (Stake’s Curaçao licence holder) shows Active, while the CGA’s online gaming licence register dated 21 September 2026 lists the same licence as ‘Assessment in progress’ with a 9 June 2026 expiry field, a conflict identified by our cross-check dated 29 September 2026. A similar conflict appears for Santeda International B.V. See Curaçao licence check: certificate vs register for how to read both records.

  • Do other regulators such as the UK, Sweden, the Netherlands or Malta have separate enforcement records for these brands?

    Yes. The Netherlands’ Kansspelautoriteit (Dutch gambling regulator) fined N1 Interactive Limited €12,640,000, imposed 20 December 2022 and published 3 March 2023, and issued a conditional penalty order against BlockDance B.V. over bc.game on 17 October 2024, an official record. Spelinspektionen prohibited Santeda International B.V. from offering games in Sweden on 11 June 2024, naming mystake.com, velobet.com and goldenbet.com. These regulator actions predate the September 2026 leak and are not linked to it in the reviewed sources.

  • Is the Curaçao Gaming Authority real and legitimate?

    The Curaçao Gaming Authority is the official Curaçao regulator that issues and publishes online gaming licences in its public register and certificates, and nothing in the reviewed records suggests it is not a genuine regulator. The CGA acknowledged unauthorised access to its online gaming portal on 22 September 2026 and stated that the extent of files taken was not established, an official record readers can check directly rather than relying on the leak project’s own figures.

  • How many documents does the Casino Secrets leak actually contain, and is that number verified?

    Not conclusively established. The Casino Secrets project’s own homepage simultaneously shows ‘over 40,000’ documents in its header and ‘84,000+’ documents plus ‘2TB+’ of data in its statistics counter, an unresolved discrepancy flagged by our cross-check dated 29 September 2026. The Curaçao Gaming Authority’s 22 September 2026 statement says the extent of the unauthorised access was not established, so no single verified document count exists in the sources reviewed for this site.

  • Is gambling legal in Curaçao, and does the leak change licensing validity?

    Curaçao operates an online gambling licensing system through the CGA, and the September 2026 leak is a reported unauthorised access incident, not a change to that law or an automatic revocation of any licence. Individual licences keep their own dated status, for example Prolific Trade N.V.’s licence shown as ‘Indefinite’ in the register dated 21 September 2026. Readers should check a specific licence’s current record rather than assume the leak altered it.

  • Do the 362 domains on Just Entertainment's certificate mean there are 362 casinos?

    No. The 362 figure is a count of distinct domains listed on Just Entertainment B.V.’s public certificate as of 29 September 2026, our own arithmetic cross-check, and it includes mirror sites rather than 362 separate casino brands. A domain count is not a brand count, and a shared certificate does not by itself establish common ownership of every listed site.

How we checked this

  • We read primary regulator material directly: the Curaçao Gaming Authority’s (CGA) online gaming licence register and enforcement register, individual CGA licence certificates, the Malta Gaming Authority (MGA) licence verification pages, Kansspelautoriteit (KSA) decisions for the Netherlands, Spelinspektionen’s prohibition decision for Sweden, the UK Gambling Commission’s (UKGC) consumer notice, and Brazil’s Secretaria de Prêmios e Apostas (SPA) authorisation list and provisional measure.
  • We read the investigation’s own published output (Casino Secrets / Curaçao Files homepage and linked articles) and mainstream reporting that references it, rather than any leaked file itself.
  • Where a named party’s response was published, we kept it next to the relevant claim rather than reporting the allegation alone.
  • Our research cut-off is 29 September 2026; licence and certificate records were rechecked on 30 September 2026, and every figure on this site carries the date it was checked.
  • We did not access, host or reproduce leaked documents, did not name or describe individual owners, directors or employees, and did not commission independent corporate-registry extracts beyond what the cited regulator pages already disclose.

Limits

  • This is a purposeful shortlist of brands with identifiable operators, quantified exposure or an official action attached to them, not a census of every company named in the leak.
  • Domain counts on a certificate (for example Just Entertainment B.V.’s 362 listed domains) are not brand counts; mirrors are included and are our own count method, not a regulator classification.
  • Some figures come from the investigation’s own aggregates (for example the SOFTSWISS-associated revenue totals) that are publisher assertions, not verified consolidated company accounts.
  • Register and certificate statuses for the same licence sometimes conflict on the same day; we report both dated observations rather than choosing one.

Sources

Corrections and right of reply

Any company or entity named on this page can send us a correction or a response to a specific claim, and we add published or supplied responses next to the relevant claim rather than in a separate statement. Records are rechecked periodically and this page is updated when a regulator register, certificate or court record changes.

Curaçao Leak is not affiliated with the Casino Secrets / Curaçao Files project, its journalists or media partners, the Curaçao Gaming Authority, or any company named on the site; we do not host, quote at length, republish or link to leaked documents, and instead link to public reporting and official records.

Explore This Page With AI

CL

Curaçao Leak Research Desk

Independent research desk

We cross-check public regulator records and published reporting about the September 2026 Casino Secrets / Curaçao Files investigation into offshore gambling licensing. Our research is dated to 29 September 2026, with records rechecked on 30 September 2026. We are not affiliated with the Casino Secrets / Curaçao Files project, its journalists or media partners, the Curaçao Gaming Authority, or any gambling operator, and we do not carry affiliate links or casino recommendations.