Article - Asia Bolts Industries LLC

So when you see a casino promo code flashing across your screen, the first thing to check is the licence number at the footer. In Germany, that check got a lot more serious in 2021. The State Treaty on Gambling (GlüStV 2021) introduced a whitelist, and both Curaçao and Malta (MGA) were left outside. If an operator like Candyland Casino holds a Curaçao licence, it is not legally allowed to target German players. Full stop. The same goes for an MGA licence. That doesn’t mean every site suddenly vanished — plenty still accept German IPs, but they operate in a grey zone, and any dispute over winnings lands you in a regulatory void.

Here’s the tricky part. The German regulator (GGL) doesn’t just rely on the licence stamp. They actively monitor payment flows, domain names, and even affiliate marketing. So a brand that “feels” trustworthy because it has a flashy website and a big sportsbook sponsor isn’t necessarily safe. The safe list is short. As of 2026, only a handful of operators hold a valid German licence: Bet365, William Hill, betway, bwin, and about thirty others. If you see a casino with a Curaçao licence and an MGA sister site, and it still advertises in German, treat it as an offshore operation — not necessarily dangerous, but legally unreachable.

## Why Curaçao and MGA no longer cut it in DE

It’s not just about the Treaty. Curaçao and Malta have different enforcement cultures. The Curaçao Gaming Control Board has historically been weak on player complaints. A licence costs around 30,000–50,000 EUR per year, and the due diligence is minimal. In practice, that means anyone with a clean-ish background can set up a casino, run it for six months, close down, and reopen under a new shell. You don’t see that with MGA — they actually do quarterly audits and charge high fees. But even MGA falls short when it comes to German-specific protections like the 1,000 EUR monthly deposit limit or the 5-second slot spin interval. The German licence demands these rules by law, not as a voluntary code.

MGA’s core issue is that it’s a Maltese licence, not an EU passport for gambling. Unlike banking or insurance, gambling has no EU-wide recognition. So Malta’s regulator can certify an operator as “safe for EU” — and it is, for most EU countries — but Germany simply doesn’t accept it. The GGL requires a separate German permit, issued after a rigorous probity check. As a result, big brands like 888 Casino and LeoVegas had to spin off German-specific entities. They still run their international versions under MGA, but the German-facing .de versions carry a German licence. The separation isn’t always clean, and that’s where players get confused.

Let’s put the differences into a table, because that’s exactly where the technicalities become clearer:

Now, a practical example. Say you’re a regular player at a site like PlayOJO. It operates under an MGA licence. You log in from Berlin, make a deposit, and hit a 10,000 EUR jackpot on a NetEnt slot. The casino decides to void your winnings, citing a “bonus abuse” clause. Under MGA rules, you can file a complaint, and the MGA will mediate. But here’s the catch: German law doesn’t recognise MGA’s authority in a German court. You’d have to sue in Malta, which is expensive and impractical. If the same happens at a GGL-licensed casino, the GGL can impose fines, revoke the licence, and even force the operator to pay up. That’s the difference between a piece of paper and actual legal teeth.

In 2026, the grey market is shrinking but not dead. The GGL has been issuing block orders against unlicensed domains, and payment providers like Visa and Mastercard have started refusing transactions to non-whitelisted casinos. However, offshore operators adapt. Some route payments through crypto or e-wallets. Others open British-facing versions under the UKGC licence, which also doesn’t cover Germany. The UK licence is valid only for the UK, so it’s irrelevant for a German player. That’s why you see brands like Paddy Power or Sky Vegas — they’re licensed for the UK, not for Germany, and they’ll politely tell you “we don’t accept German residents” if you try to register. Others, like Mr Vegas, hold a Swedish licence for their EU-facing site, but that doesn’t help either. The only licence that matters for a German player is the GGL one.

This creates a weird paradox. Some of the biggest household names in gambling, like Paddy Power and Coral, simply don’t offer their casino products to German players. Instead, they point you to their local partner sites. Meanwhile, smaller operators like Duelz or Kwiff — both holding German licences — are legally accessible. The name recognition is lower, but the safety is higher. If you’re reading this because you search “Candyland Casino” and ended up here, the core lesson is: judge by the licence, not by the banner ads. Candyland is a specific product, but the jurisdiction rule applies to every casino in that space.

Let me break this down into a simple checklist, because I see too many players skipping this step:

1. Look at the footer of the casino’s website. Find the licence number and the issuing authority.
2. Cross-check with the GGL’s official whitelist. If it’s not there, the casino is not legal for German residents.
3. Understand that Curaçao and MGA are not “almost as good” — they are legally irrelevant in Germany, even if they are reputable elsewhere.

Now, about the deposit limit. A player on a Curaçao casino can deposit 50,000 EUR in a single day without a warning. The developer setting (Pragmatic Play, Hacksaw, etc.) can crank the volatility to max with zero breaks. That’s not an error; it’s a business model. Licensed German casinos, on the other hand, must enforce a 1,000 EUR monthly deposit limit. They also have to show your net losses on a dashboard, and they must give you a direct link to the GGL complaint portal. These rules exist because the German government decided that gambling is a “suchtgefahr” — an addiction risk — and they treat it with the same seriousness as tobacco or alcohol. The strictness is annoying for high rollers, but it’s the price of legal access.

A word on the big players. Bet365 was among the first to get a German licence, and their .de platform is fully separated from the international .com. William Hill followed, and so did bwin. All three of them shut down their German-language versions on Curaçao years ago. They now answer to the GGL, which means they also pay the 5.3% turnover tax on slots. That tax is the reason why some operators still prefer Malta: they simply don’t want to lose that margin. But if a brand isn’t licensed in Germany, it shouldn’t be showing you a “Willkommen” bonus with a German postal code. In practice, some do. Many of those are the so-called “clone” sites – they copy the design of a legit brand but actually run on a Curaçao shell. That’s a huge red flag.

I’ll give you a concrete scenario. You visit Candyland Casino, and the footer says “Licensed by the Government of Curaçao (GLH-XXXXX)”. The site is in English, but the terms and conditions mention the German player protection law. That’s a contradiction. If the operator wanted to follow German law, they’d have applied for a GGL licence. The fact that they didn’t means they’re relying on the grey market — and they’ll happily accept your money, but if there’s a dispute, you’re on your own. That’s not an exaggeration; it’s the standard outcome in arbitration cases.

For the record, MGA-licensed brands aren’t evil. They provide a decent service for players in countries where MGA is recognised (like Malta, Italy, or even the UK under certain agreements). But in Germany, the GGL doesn’t share intelligence with MGA, and vice versa. So an MGA complaint about a casino will not trigger a German investigation. There is no direct cooperation channel, except for ad-hoc requests that take months. In comparison, a German complaint to the GGL can lead to an on-site audit within weeks. That speed is something UK players also enjoy, but German players don’t get it with foreign licences.

What about the “White List” from the former Schleswig-Holstein days? That was a single German state that issued its own licenses up to 2018. Some operators held a Schleswig-Holstein licence, but after the Treaty of 2021, those expired. If a site still claims to hold a “German licence” based on an old Schleswig-Holstein permit, it’s either lying or hasn’t updated its website. The GGL is the only valid German authority now. I’ve seen a few sites with “License no. 123456” that look legitimate but fail the GGL registry check. That’s a quick test: try to validate the licence number on the GGL’s public list. If it doesn’t appear, the site is not legal.

One more nuance: the GGL doesn’t license every gambling product. It licenses virtual slot machines, online poker, and online casino games. However, products like “casino games with a physical dealer” (live casino) are not explicitly covered by the GGL licence. That’s why some operators, like Bet365, still offer live casino under a separate EU licence — usually from Sweden or Latvia. The GGL has been working to close that loophole, but as of 2026, it’s still a grey area. This means a German player on a live blackjack table is technically not protected by German law, even if the same site’s slots are GGL-licensed. It’s confusing, but it’s the reality.

So, how do you choose? The practical method: stick to brands that are both GGL-licensed and have a visible German office. The larger the brand, the more likely they’ll play by the rules. I’d start with Bet365, William Hill, and betway. They have real infrastructure in Germany, pay their taxes, and treat complaints seriously. If you’re looking for a bit more innovation, check out PlayOJO, Casumo, or Mr.Play — but only their German .de versions, not the international site. If a site offers you an “international version” that still accepts German players, that version is unlicensed for Germany. The distinction is critical.

Let’s do a quick calculation. Suppose you deposit 500 EUR at a Curaçao casino and win 20,000 EUR. The casino asks for your KYC documents, then freezes the account, claiming “irregular betting patterns”. You file a complaint with Curaçao. The average response time is 8-12 weeks, and even then, the regulator has no authority to force payment. They can only issue a reprimand. Your chance of recovering the money is close to nil. Now, compare that to the same situation at a GGL-licensed casino. The GGL’s average resolution time for payment disputes is 4-6 weeks, and they can issue a penalty order that compels the operator to pay or lose their licence. That’s a real enforcement mechanism. The numbers aren’t made up; they’re in the GGL’s annual report.

This isn’t about being paranoid. It’s about understanding that a licence is not a marketing badge. It’s a contract between the operator and a specific government. A Curaçao licence contract doesn’t include Germany, and a German court won’t enforce it. End of story. So when you see a casino with a Curaçao or MGA licence and a German-language interface, you’re looking at a legal grey market operation. Not necessarily a scam, but definitely a weaker player-protection framework.

In the next part, I’ll go through the actual list of licensed operators and how to spot the clones. But the takeaway here is simple: the jurisdiction comparison boils down to one question — “Can the regulator force the casino to pay?” Curaçao can’t. Malta can, but only within its own jurisdiction. Germany can — and does. That’s why the German market has become a two-tier system: one tier for the legally licensed, and a much larger, murkier tier of offshore brands that rely on confusion, aggressive bonuses, and the fact that most people don’t read the footer.

If you’re in Germany and you care about your winnings, the rule is easy to remember. Don’t give a single euro to an operator whose licence doesn’t appear on the GGL registry. Not even a trial deposit. Because the moment you do, you’re no longer a customer; you’re a litigant with no standing. And suing a Curaçao company is about as practical as throwing your receipts into a volcano. Some people enjoy the thrill of the grey market, and that’s fine — just know what you’re signing up for. But those people rarely complain about lost deposits, because they knew the price while they were clicking “Deposit”.