Casino licenses explained: Curaçao, Anjouan, and Malta

A casino license tells you which regulator has authorized an operator and where you can complain if something goes wrong. It says nothing about your chances of winning and does not authorize gambling worldwide. At crypto casinos, you will mainly encounter two licenses: Curaçao and Anjouan. In our reviews, 39 crypto casinos cite Curaçao and 25 cite Anjouan; some list both. Tobique (Canada) and Kahnawake also appear occasionally.

We explain how Curaçao, Anjouan, and Malta differ, then show you how to verify a license in six steps before your first deposit.

At a glance: A license is regulatory approval for a specific company and specific domains. You can check it in the regulator’s public register - a logo in the footer is not proof on its own.

A casino license covers the operator, its services, and regulatory oversight

Four details matter when you assess a license: the regulator, the licensed company, the services covered, and the domains it applies to. The casino’s brand name often differs from the company you enter into a gambling agreement with. Slotoro, for example, belongs to Wiraon B.V., based in Curaçao.

The scope of the license matters, too. Permission to offer sports betting does not automatically cover slots, and a license for a game developer (B2B) does not authorize it to accept players directly (B2C).

Three licensing systems compared

Curaçao: The CGA has issued all licenses directly since 2025

Until late 2024, four private master license holders issued sublicenses in Curaçao. These included Antillephone, with numbers in the 8048/JAZ format. Under the new LOK gambling law, effective December 24, 2024, the Curaçao Gaming Authority (CGA) replaced that model. The CGA evolved from the former Gaming Control Board and now issues licenses only directly.

You can recognize new licenses by the format OGL/year/number/number. Examples from our reviews include Slotoro with OGL/2024/686/0183, NV Casino with OGL/2024/1363/0705, and Rollbit with OGL/2024/1260/0494.

What the CGA requires of license holders

Operators with a CGA license must register every player-facing domain in the regulator’s portal. The license applies only to those approved domains. Other requirements include identity verification, responsible gambling tools such as self-exclusion and deposit limits, an internal complaints process, and access to a CGA-certified alternative dispute resolution (ADR) provider. In 2025 and 2026, the CGA also published guidelines on player complaints and casino terms and conditions.

How to verify a Curaçao license

A valid CGA seal links to a certificate on cert.cga.cw. It should list the company, license number, and the domain you are currently visiting. The CGA also publishes its register on cga.cw, including license type, status, and domains. The regulator itself warns that a register entry alone does not guarantee current validity, so check the date of the list.

Warning: If a casino displays only an old number such as 8048/JAZ or a Curaçao eGaming seal, that information comes from the former sublicensing system. The footer at 7Bit, for example, still lists Antillephone 8048/JAZ2020-013. Cross-check these details against the current CGA register.

Anjouan: A low-cost license with a disputed legal basis

Anjouan is an autonomous island in the Comoros. Its licenses are based on the Computer Gaming Licensing Act 007 of 2005. The Anjouan Offshore Finance Authority (AOFA) is the responsible authority, while Anjouan Licensing Services Inc. has administered licenses since 2023. Many crypto casinos have moved from Curaçao to Anjouan in recent years because its license is faster and cheaper to obtain.

In our reviews, BC.Game, Cybet, and Bets.io are among the casinos with an Anjouan license. License numbers usually begin with ALSI; Cybet’s, for example, is ALSI-202409034-FI2.

What to watch for with Anjouan

The government of the Comoros disputes the authority of Anjouan’s authorities to issue gambling licenses. In October 2026, it asked the United Kingdom for help investigating the licensing network. For you, this means an Anjouan license comes from a regulator whose own authority is disputed.

The licensing administrator maintains a public register that you can search by license number, company, or domain. There is no independent, binding dispute resolution process comparable to Malta’s. If you have a withdrawal dispute, you therefore depend primarily on the operator.

Malta: Stricter oversight, rare among crypto casinos

The Malta Gaming Authority (MGA) is considered one of Europe’s strictest online casino regulators. For players, the relevant license is the B2C license, identifiable by the format MGA/B2C/number/year. The MGA’s Licensee Register lists the company, status, and approved domains. A separate register lists license suspensions and revocations.

MGA license holders must cover customer funds with their own funds, provide a complaints process, and refer players with unresolved disputes to an alternative dispute resolution (ADR) provider. The MGA’s Player Support Unit accepts complaints, but since 2019 it has no longer ruled on individual cases itself - that is the ADR provider’s role.

Crypto-only casinos with an MGA license are rare. Most operators in our reviews use Curaçao or Anjouan.

Verify a license in six steps before depositing

Before your first deposit, check that the license details, operator, and domain you have opened all match. What matters is whether you can verify the information independently.

1. Record the full domain. Copy the address from your browser’s address bar, including any subdomains. Watch for extra words, hyphens, and different domain endings: a similar-looking name is not the same address.

2. Collect the operator and license details. Check the legal notice, terms and conditions, and website footer for the full company name, address, named regulator, and a license or reference number. The casino’s brand name may differ from its legal operator; you need the company name for your checks.

3. Find the official verification source independently. Do not rely solely on a link from the casino. Find the named regulator’s official website separately and check its web address. Use the verification tool it provides, or its official contact channel if you cannot find a clear match.

4. Cross-check the operator, domain, and status. Check that the details match and review the current license status shown by the responsible authority. Where available, also check the scope of the license: approval for one activity does not automatically cover every game offered. A missing search result alone does not prove fraud, but do not deposit if the status remains unclear.

5. Read the residency, KYC, and withdrawal terms. Look specifically for excluded countries, required identity documents, withdrawal limits, fees, and any wagering requirements. If your place of residence is excluded or you cannot provide the required documents, being technically able to register is not a sufficient reason to deposit.

6. Check the complaints process and set your limits. Record whom you can contact about a disputed withdrawal and what escalation options are listed. Before playing, set an amount you can afford to lose and a time limit. Check which limit-setting and break features are available.

Tip: Save a dated screenshot of the register entry or certificate. If a withdrawal dispute arises later, you can show which license was listed when you deposited.

Payment and gambling risks remain even with a valid license

A valid license promises neither winnings nor a specific withdrawal time. Withdrawal limits, processing times, and identity checks are set out in the operator’s terms. At WinSpirit, for example, the withdrawal limit is €2,000 per week and €25,000 per month, regardless of its license.

A license does not imply “no KYC,” either. Curaçao requires identity checks under the LOK; most casinos request documents by the time you make larger withdrawals. If a withdrawal is stalled, never deposit more money just to complete a supposed release requirement.

How to file a complaint, step by step

1. Contact the operator first. Use the official complaints process listed in the terms and conditions, not just live chat.
2. Save your records. Keep your account ID, amount, transaction ID, the terms in effect at the time, and your correspondence.
3. Contact the dispute resolution provider. For Curaçao and Malta, the operator lists its designated ADR provider in its terms.
4. Inform the regulator. The authority accepts reports of rule violations, even if it does not always rule on your individual case.

Filing a complaint does not guarantee that you will receive your money within a particular timeframe. Before every deposit, set a fixed budget you can afford to lose, and use limits and gambling breaks.