Curaçao LOK Substance — The '3 Key Persons' Rule, Then and Now (2026)

Where the “3 key persons” figure came from

Search for Curaçao LOK substance and you’ll still find the same line everywhere: at least 3 key persons, who can be international qualified residents. It’s worth being precise about where that came from — and why it no longer describes the regime.

The LOK (Landsverordening op de Kansspelen) was adopted in 2023, and through 2023-2024 the industry worked from discussion drafts, transition guidance, and advisory commentary. The “3 key persons (can be international)” formulation circulated widely in that period as the expected substance bar. It was attractive: it suggested operators could satisfy Curaçao substance with an internationally-distributed senior team and no local hires beyond a registered office.

Then the framework came into force on 24 December 2024, with the new Curaçao Gaming Authority (CGA) replacing the old Gaming Control Board and the four private master-licence holders. And the substance requirement that landed is more local than the early expectation suggested.

What the CGA actually requires now

The current LOK substance requirements, as the CGA applies them:

Curaçao-registered entity — the operator must be incorporated in Curaçao. Foreign-domiciled entities can’t hold the CGA direct licence.

At least one Curaçao-resident managing director — this is the biggest shift from the earlier formulation. It’s not a count of internationally-mobile key persons; it’s a residency requirement for at least one managing director. Other directors and senior managers can be international, subject to fit-and-proper review, but the fully non-resident management model is gone.

Local office and staff — a real Curaçao presence is required, beyond a corporate-services-provider address. The registered office still runs through local providers in practice, but the CGA expects local operational staffing behind it.

Designated compliance officer — every licensee names a compliance officer responsible for the AML programme, aligned with FATF standards: customer due diligence, sanctions screening against OFAC, EU, and UN lists, and suspicious-transaction reporting to the Curaçao FIU.

Full UBO disclosure — beneficial-ownership verification for qualifying shareholders, including source-of-wealth review, criminal-record checks, and reputation review.

Demonstrable operational engagement — the operator has to show real involvement in operations, not nominal arrangements. And the CGA tests that throughout supervision, not just at application.

What changed, in one table’s worth of words

The early expectation: three key persons, anywhere in the world, verifiable and reachable. The rule as it stands: at least one managing director physically resident in Curaçao, a local office with staff, and a named compliance officer.

The practical difference is real. Under the old formulation, an operator could plan zero local hires. Under the current regime, the local layer — resident director, office, staff — is the core of the substance build, and it’s what the CGA checks first. Fit-and-proper review still applies to the whole senior team, international members included: criminal-record checks across every jurisdiction of nationality and residence, reputation review, prior regulatory history, and evidence of qualifications and experience.

If your corporate-services provider is still quoting a “3 key persons” package, ask them to walk you through how it satisfies the resident-managing-director and local-office requirements. If they can’t, the package predates the framework.

The compliance function — the other half of the build

LOK AML obligations are real, and they track FATF standards. The designated compliance officer carries a programme that covers:

Written AML programme — customer due diligence, beneficial-ownership verification, ongoing monitoring, sanctions screening, suspicious-transaction reporting, training, and audit.

FIU reporting — timely, accurate suspicious-transaction reports to the Curaçao FIU. The reporting infrastructure has to support that.

Customer due diligence — CDD at onboarding to FATF standards, with enhanced due diligence for higher-risk profiles (PEPs, high-volume customers, customers from FATF grey-listed jurisdictions).

Sanctions screening — real-time screening against OFAC, EU, and UN lists. For crypto-payment operators, that means on-chain transaction monitoring with sanctions screening on addresses.

Budget for it as its own workstream. Operators that sort out the director and office but defer the AML build-out stall at review — it’s the most common failure pattern.

Substance compared to other gambling jurisdictions

LOK’s bar is well above the pre-reform framework, but lighter than the Tier 1 jurisdictions:

MGA (Malta) — requires Maltese-resident senior management with documented physical presence and the ability to attend the MGA in person on short notice. Heavier than LOK.

IoM GSC — requires an IoM-resident Designated Official with personal regulatory accountability, plus moderate operational presence. Heavier than LOK on the DO requirement, comparable on the rest.

Gibraltar Gambling Commissioner — requires real local management, key staff in Gibraltar, and audited Gibraltar operations. One of the strictest substance bars anywhere. Well above LOK.

UKGC — no formal local-substance rule for the operating entity, but Personal Management Licence holders must be available and a UK-resident compliance setup is usually needed. A different model — and heavier in practice.

Anjouan ABGB — minimal substance, local registered address only, no resident-staff requirement. Well below LOK.

So LOK lands Curaçao as a credible mid-tier offshore option — above Anjouan and Costa Rica, below Tier 1. That positioning is deliberate. The reform was built to lift Curaçao’s reputation without forcing Tier 1 cost economics on operators.

Cost economics of LOK substance

The recurring regulatory cost is now split by licence category: roughly EUR 47,450 a year for a B2C operator licence and EUR 24,490 a year for a B2B service-provider licence (government licence plus CGA supervisory fee), on top of a EUR 4,592 application fee per licence.

Around that sit the substance costs — the resident managing director, the local office and staff, the compliance officer, and the corporate-services layer. Provider pricing varies enough that quoting a single figure would mislead; what’s consistent is that a realistic first-year budget lands around EUR 30,000-60,000+ all-in. Far above the pre-reform sub-licence economics, but still well under Tier 1.

Building LOK substance

For operators planning a Curaçao application, here’s the build approach:

Secure the resident managing director first — it’s the hardest piece and the one the CGA checks first. Ideally someone with relevant gambling-industry experience and a clean fit-and-proper profile, with documented operational involvement, not a nominal appointment.

Set up the local office and staffing — a real Curaçao presence behind the registered-office arrangement. Map what local roles the operation genuinely needs.

Stand up the AML programme early — written, FATF-aligned, compliance officer designated, sanctions screening live, FIU reporting in place. Don’t defer it to post-licence. That’s the trap most first-timers fall into.

Complete UBO documentation — beneficial-ownership verification for every qualifying shareholder, source-of-wealth files, criminal-record checks — all done before you apply, not after.

Incorporate the Curaçao entity — with registered-office services contracted and local corporate-services arrangements running.

Plan ongoing CGA engagement — periodic reporting, supervisory contact, AML-programme demonstration. Map it before submission. The application itself runs roughly 3-4 months, in two review phases of about four weeks each.

Operators that invest in the build up front have a far easier ride through CGA review than those who try to bolt it on after applying.

When LOK substance is workable

LOK fits operators that match what the framework was built for:

Crypto-payment iGaming operators serving non-EU markets — the mid-tier cost (real, but not Tier 1) lines up with crypto-payment operations targeting markets where reputational signal is a moderate concern.

Mid-tier operators wanting a credible offshore base — if pre-reform Curaçao was enough but Tier 1 cost is overkill, post-LOK Curaçao is the sweet spot.

Operators willing to build a genuine local layer — the resident director and local office aren’t optional. Teams that can absorb that build get a licence with materially more weight than the old sub-licences carried.

It’s the wrong choice in three cases: operators chasing minimum-cost paper licences (use Anjouan), operators that need Tier 1 reputational signal (use MGA, IoM, or Gibraltar), and operators unwilling to put real management presence on the island — the requirement the old “3 key persons” framing let them believe they could skip.