A major leak of confidential documents from Curaçao’s gambling regulator has offered insight into the ownership, finances and regulatory oversight of offshore gambling operators operating around the world, including in the UK.
The so-called Casino Secrets leak contains thousands of confidential documents obtained by German hacker Lilith Wittmann. Journalists examining the material say it could reveal how some of the largest offshore gambling networks operate and who profits from them.
The leak comes amid growing concerns over the scale of unregulated gambling in Great Britain, as Gaming Compliance International numbers suggest that the global unregulated gambling market accounted for $5.9 trillion in bets in 2025.
In the UK, a 2024 report by the Betting and Gaming Council estimated that approximately £2.7 billion was being wagered annually on illegal gambling websites.
Offshore Sites Remain Largely Accessible
To operate legally in the UK, gambling brands must first acquire a license from the UK Gambling Commission, and only then can they offer their product to consumers across the country.
However, British players can still access offshore gambling websites. Some sites allow UK users, while customers can also resort to using VPNs to bypass geo-location restrictions.
It can also be tricky for consumers to find the difference between legal UK casinos and unregulated platforms. Offshore casinos often look identical to licensed platforms and may hold licences issued by foreign jurisdictions.
Still, some players deliberately play on offshore sites after taking a break from regulated operators via self-exclusion. There are also others who prefer them for their relaxed restrictions on betting. High-stakes players can also bet on them as they often lack the limits of licensed platforms.
The availability and popularity of crypto casinos is another factor to take into account. UK users commonly seek offshore alternatives to services unavailable within the regulated British market.
Curaçao at the Centre of Offshore Gambling
Over the last few years, Curaçao has become a major hub for offshore online gambling, with over 8,000 licensed online casinos under its jurisdiction.
Wittmann reportedly gained access to information held by the Curaçao Gaming Control Board after identifying a vulnerability. She subsequently monitored the regulator's systems for nine months.
The leaked files include information on casino owners, licence applicants and the sources of funds declared by gambling businesses.
Rob Davies, a reporter who has investigated the gambling industry, said the data could provide a clearer picture of the people behind major offshore gambling operations.
The files reportedly contain information relating to the Curaçao-based Santeda network, which has previously been linked to several large offshore casinos used by customers in the UK.
The documents also raise questions about the level of scrutiny applied to some licence applicants. In one case examined by Davies, a company's source of funds was reportedly described simply as ‘cryptocurrency investments’.
The information suggests that offshore gambling is increasingly structured around international networks, with operators, licence holders, payment providers and other businesses spread across multiple jurisdictions.
Offshore Licences Offer Legitimacy
Offshore licences do not permit operators to serve UK customers, but they can still be important to their businesses. Payment companies, banks and software providers may be more willing to work with operators that can demonstrate some form of regulatory authorisation.
Davies described such licences as a form of legitimacy that can help offshore gambling companies establish commercial relationships.
Usually, Curaçao has attracted gambling businesses with its position as an international gambling hub and comparatively lighter regulatory requirements. However, some operators have started looking towards other jurisdictions where regulatory requirements may be even less strict.
These include certain First Nations jurisdictions in the US and Canada, as well as Anjouan in the Indian Ocean.
Alarms Over Consumer Protection
The growth of offshore gambling also presents challenges for consumer protection.
UK-licensed operators are subject to rules designed to identify and respond to problem gambling, while customers have access to regulatory and dispute-resolution tools. At the same time, unlicensed operators do not provide the same level of protection.
Davies said his main concern was the potential exploitation of vulnerable gamblers. He has reported cases involving customers who lost significant sums on offshore websites without receiving interventions despite displaying signs of problem gambling.
Some customers have also reportedly encountered difficulties receiving winnings from offshore operators, leaving them with limited legal options when disputes arise.
By comparison, UK-licensed gambling companies can face substantial fines or licence suspensions if they breach regulatory requirements.
International Cooperation is Required
The UK is on track to introduce additional measures to strengthen the UK Gambling Commission’s ability to tackle illegal gambling. However, the international nature of the offshore market makes enforcement difficult.
For instance, unregulated operators can move between jurisdictions, while websites can quickly appear again under different domain names after being blocked.
Therefore, the latest Curaçao leak highlights the complexity of the issue, with gambling companies and their financial and technology partners frequently operating across several countries.
Davies argued that tackling offshore gambling would require greater international cooperation. Yet, differences between national regulations and enforcement capabilities make a coordinated response virtually impossible.
Nevertheless, the Casino Secrets leak could provide regulators and journalists with new information about an industry that has traditionally operated with limited transparency.
Meanwhile, Wittmann could face legal proceedings in Germany over her unregulated access to the Curaçao regulator’s systems. She has argued that obtaining the information was justified by the public interest, citing potential lost tax revenue and the need to identify those benefiting from offshore gambling.
