Curaçao's T&C Deadline: What B2C Operators Must Rewrite

Most operators filed the CGA’s April terms-and-conditions guideline under “read later,” and that is the mistake. Every Curaçao B2C licensee has until 8 October 2026 to bring its player-facing terms into line with the regulator’s new Policy Guideline, and the six-month clock is already more than half gone. This is not a formatting refresh — the active-consent, crypto and KYC requirements make it a genuine legal and product build.

Why this is a product build as well as a rewrite

The reason operators are underestimating this is that “update your T&Cs” sounds like a legal-review task you hand to outside counsel and forget. The Version 1.0 guideline is broader than that. It prescribes nine distinct coverage areas, and several of them reach beyond the legal page into the product itself.

The clearest example is the consent mechanism. The guideline replaces passive acceptance with active acknowledgment — and it goes further: when you make a material change to your terms, you have to obtain active re-acceptance again and notify the player. That is a session-flow and account-state change. Someone has to design the interstitial, decide what counts as “material,” version the terms, store the acceptance record per player, and gate access until re-acceptance happens. That is engineering work with a legal specification attached, and it does not ship in a week.

The same is true of the KYC threshold. The guideline requires identity verification for any transaction exceeding XCG 4,000 (approximately EUR 2,000). If your current onboarding verifies at a different trigger, that means changing your payments and compliance logic and testing it end to end.

The nine areas your terms must cover

The guideline is explicit about scope, which is actually helpful — it doubles as a checklist. The table below is the fastest way to sanity-check your current terms against it. Read the middle column as the one most operators are weakest on today.

Two of the high-effort rows deserve a flag. The cryptocurrency terms are new territory for most legal templates: the guideline expects operators who accept crypto to spell out how they handle lost wallets, sanctioned addresses, delisted tokens and chain forks. These aren’t boilerplate clauses you can borrow from a fiat casino — they describe real operational decisions you have to have made before you can write them down. If you take crypto and your terms are silent on a chain fork or a delisted token, you have a gap, and our Curaçao crypto gambling rules breakdown covers where those edges sit.

Why the deadline won’t slip

There’s a comforting narrative floating around that Curaçao’s regulator is in flux and therefore soft on dates. It isn’t. The CGA’s supervisory board resigned in mid-September 2025, confirmed publicly around 14 October, and the authority moved under the Ministry of Justice effective 19 August 2025. But the CGA has stated plainly that these changes have no impact on LOK implementation. The supervisory machine is running under new governance, and it keeps issuing policy guidelines that it intends to supervise against.

This sits inside a wider regime that keeps tightening. The LOK reform already replaced the old master/sub-licence model with direct CGA licensing (the full picture is in our Curaçao LOK and CGA licence guide), and a separate local-substance and staffing enforcement date lands on 1 April 2027, which we cover in the Curaçao substance deadline analysis. Against B2C annual fees of €47,450, none of these obligations is optional. The T&C deadline is simply the nearest one on the calendar.

What to do before 8 October

The spine is straightforward, and the sequencing matters. First, run your current terms against the nine coverage areas above and mark the gaps. Most operators will find they are strong on the legal-boilerplate rows and weak on consent, KYC and crypto. Second, scope the product work early, because the active re-acceptance flow and any KYC-threshold change are the long-lead items; they need engineering time as well as a legal sign-off. Third, rewrite the terms to cover all nine areas, with Curaçao law and jurisdiction stated and the legal-identity disclosures prominent on every surface. Fourth, wire up the acceptance capture so you can prove, per player, that consent was given — and re-given on material change.

If, while you’re mapping this, you conclude the compliance load no longer fits your model, weigh your options now, while there is still time before 8 October to plan a move. That could be an orderly exit under the CGA wind-down rules, a move outlined in our Curaçao-to-Anjouan migration walkthrough, or a fresh look at the trade-offs in our best gambling licences 2026 framework. On the money side, the rules don’t change: gambling settlement runs through an EMI or neobank with the payment agent structured in Cyprus and the applicant entity in Costa Rica — never a mainstream consumer processor.

Six months was never much time for a job this size, and half of it is spent. The 8 October line has not moved despite the noise around the regulator either — see why the CGA governance probe changes nothing about your timetable. The same holds for the September 2026 breach of the regulator’s licensing portal: neither CGA statement moves a date, and we set out what operators should do after the CGA portal leak separately. If you’d rather not run the terms rewrite and the re-acceptance flow in-house, book a free consultation and we’ll scope your gaps against the guideline and drive the rewrite to the 8 October line.

Iryna H.

Gaming Licensing at Vantegris

Iryna H. is part of the Vantegris team, which prepares and files licence applications across 40+ jurisdictions. This article was reviewed by Vladyslav S. (Compliance & Legal).

Full profile Book a free consultation

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.