That said, the practical reality for German players is more nuanced than a simple licence check. Since the fourth amendment to the German Interstate Treaty on Gambling (GlüNeuRStv) took full effect in 2021, the enforcement landscape has shifted considerably. The old “grey market” era, where Curacao-licensed sites operated with impunity, is largely over. Today, the Gemeinsame Glücksspielbehörde der Länder (GGL) in Halle actively monitors and blocks operators that lack the required German permit. This is not just a theoretical legal shift; the GGL has already issued blocking orders against multiple foreign-facing brands, many of which held Curacao master licences.
What does this mean for a platform like Candyland Casino? If it operates under a Curacao licence and accepts German players without a German concession, it technically falls on the wrong side of the new regulatory line. The legal basis for this is § 4 Abs. 5 GlüStV, which states that offering online casino games to players in Germany without a permit is a prohibited unlawful activity. The GGL has the authority to impose fines of up to €500,000 per violation, and in repeated cases, it can coordinate with payment providers to block transactions. For a user, this creates a tangible risk: winnings from an unlicensed operator may be considered invalid under German civil law, and payment processors may refuse to settle withdrawals.
But the situation is not as simple as “Curacao bad, MGA good.” The initial assumption that a Malta Gaming Authority (MGA) licence automatically solves the German problem is also flawed. The MGA does not grant the right to operate in Germany; it merely allows the operator to hold a licence within Malta’s own regulatory framework. To legally serve German customers, an operator must obtain a separate German licence under the GlüNeuRStv. The German system is unique in the EU heavily restricts slot games, caps monthly deposits at €1,000, and enforces a five-second spin interval. Many MGA-licensed operators, such as 888 Casino or Betway, initially struggled to adapt to these ultra-restrictive rules. They had two choices: apply for the new German licence and comply with the strict slot settings, or exclude German players from their target markets.
The enforcement activity in 2025 makes this choice more consequential. The GGL reported that it had initiated proceedings against roughly 50 offshore operators, many of which hold Curacao licences issued through sub-licensors. The regulator’s strategy is to first issue a formal blocking order, then work with ISPs and payment providers to degrade the operator’s access. In practice, this means a player with a funded account can find himself unable to withdraw via Skrill or Neteller almost overnight. That is a real, operational headache, but it is also where the difference between Curacao and MGA licences starts to blur. The MGA may have a better reputation for consumer protection, but it has no legal authority in Germany. An MGA-licensed operator that ignores German law will face the same GGL blocking measures as a Curacao-licensed one.
Let’s put the licensing question in perspective with data from authoritative public sources. The GGL’s official list of approved operators contains only brands that have obtained a German concession—those are currently a handful of white-label platforms and established land-based groups. Among the names you will find there are Bet365, Admiral, and some smaller regional brands. Meanwhile, the big international players like Casumo or Unibet initially applied for German licences but then withdrew their applications, because the combination of the €1,000 deposit cap, mandatory loss limits, and the prohibition of online poker made the economics unattractive. They now use their MGA licences to serve other European markets, but they geo-block Germany.
What about the Curacao-issued licences? Since 2023, the Curacao Gaming Control Board has undergone a significant reform, moving from a sub-license model to direct licensing under the new National Ordinance on Games of Chance (LOK). However, that reform does not change the fact that a Curacao licence does not carry any automatic recognition in Germany. Even a new-style Curacao licence is essentially a permit for “remote gaming” that is only valid within the legal framework of the Kingdom of the Netherlands. The pragmatic consequence: any serious operator aiming for the German market should not rely on Curacao as a compliance pillar, unless it is willing to operate in a legal grey zone and risk being blocked.
For a specific case, look at how German players talk about Candyland Casino in forums and social media. The casino often promotes itself with a Curacao licence and accepts German language settings. In practice, however, players report slow payouts after a few months of activity. That is not surprising, because without a German licence the operator cannot use the legal dispute resolution process available to licensed sites. The German state also does not recognise the operator’s terms as enforceable in local courts. As a result, a player has little recourse beyond writing a chargeback letter to his bank. This is a stark contrast to MGA-licensed casinos, which have an independent dispute mediation service and are often more compliant with anti-money laundering rules. But again, if an MGA casino does not hold a German permit, the player’s protection is only as good as the operator’s willingness to abide by its own rules.
The core takeaway from the jurisdictional comparison is not that Curacao is inherently unlawful and MGA is always lawful. Both are foreign regulatory frameworks. The decisive question is whether the operator has obtained a German concession under the GlüNeuRStv. Since the market re-regulation in July 2021, only operators with a valid German licence can offer online slots, table games, and live casino games legally in Germany. That licence is issued by the GGL, and it carries strict technical standards: each slot game must have a maximum bet of €5 in the regular game and a minimum spin duration of five seconds. For live casino, the game speed is capped, and the operator must have an on-site server in Germany or use a service provider with a physical presence in the country. These requirements are so specific that some international software providers, such as NetEnt and Evolution, had to develop dedicated compliance modules for the German market.
From an SEO and content perspective, the practical advise is to filter casino reviews by licence and German attendance, rather than by brand familiarity. A UK player browsing a page about Candyland Casino might assume that a Curacao licence is a minor detail. For a German player, that same detail is decisive because it determines whether the casino is legal and, more importantly, whether the winnings are safe. The German online casino market has a legal white list, and any operator not on that list is susceptible to a blocking order. The GGL issued its first official blocklist in March 2023, and it has been expanding ever since. In late 2025, the regulator announced that it would begin collecting data from licensed operators for a central player account system, which will further limit the ability of offshore sites to circumvent rules by creating new domains.
Now, let’s address the financial penalties in more concrete terms. Under § 14 Abs. 1 Nr. 2 GlüStV, the GGL can impose fines on both the operator and, in certain circumstances, on the management staff individually. The maximum fine for an organised violation is not explicitly capped in the treaty for cases of intent; instead, it follows the general German administrative fine framework, which can go up to €1 million. For grossly negligent violations, the cap is €500,000. Recent practice from the GGL shows that it has issued fines to smaller operators in the low six-figure range, but it has not yet taken a €1 million fine against a major Curacao operator. However, the threat alone has pushed many brands to withdraw from the German market. For instance, in 2024, several Curacao-based brands that had relied on affiliates to funnel German traffic suddenly disappeared, leaving affiliate commissions unpaid and causing a shift in the affiliate landscape.
The human element here is worth noting. German players are becoming more knowledgeable; they check the GGL registry before depositing. The registry is publicly accessible, and it lists not only the operator’s name but also the licensed domains. If a brand such as Candyland Casino is not on that list, you simply cannot lawfully offer games to a player with a German IP address. That is why many global brands have implemented geo-blocking for German players. It is not a technical marketing decision; it is a legal necessity. In the long run, offshore casinos that attempt to serve the German market without a licence operate on borrowed time. The GGL has a whistleblower hotline, and many players use it to report unlicensed sites.
In comparison, the MGA framework provides an intermediate level of credibility. Since the MGA introduced its updated “Player Protection Directive” in 2023, the authority has shown a stronger willingness to suspend licences for negligent behaviour. However, the MGA itself often recommends that players check the legal status of an online casino in their own country of residence. In other words, even Malta acknowledges that a licence does not create global legality. This is a critical point that many review sites miss: they use “licence jurisdiction” as a proxy for trustworthiness, but they fail to connect it to the player’s actual country. For a UK or German player, the relevant question is not “Is the operator licensed in Curacao or Malta?” but rather “Does the operator hold a permit issued by the UKGC or GGL?” Only those two regulators have enforcement powers over the operator’s activities in the player’s jurisdiction. In that sense, both Curacao and MGA are in the same boat for the German market: they are foreign and thus not equivalent to a German licence.
Let’s take a practical scenario to illustrate the difference. Imagine a player based in Berlin deposits €200 at a Curacao-licensed casino like Candyland. He plays a few progressive slots, luck is on his side, and he hits a €1,400 jackpot. When he attempts to withdraw, the casino requests additional KYC documents—passport, proof of address, and a selfie. This is standard, but then the casino claims that his address proof shows a German postal code, and therefore his account is “in a restricted jurisdiction”. It cancels his withdrawal, refunds his deposit, and closes the account. The player files a complaint with the Curacao Gaming Control Board. The board acknowledges the complaint but explains that it can only request mediation, not compel payment. In practice, the player waits several months and receives nothing. Within the same timeframe, if the casino had had a German licence, the player could file a complaint with the GGL, which has the authority to order the operator to release the winnings and can issue a fine for non-compliance. The enforcement difference is night and day.
From the operator’s side, there are also cost implications. Holding a Curacao licence costs around €20,000 per year nowadays, but maintaining a German licence is significantly more expensive: application fees, monthly regulatory fees based on GGR, and technical audit costs often total several hundred thousand euros annually. Yet the legal security from holding a German licence is worth it for operators that are serious about the market. Several mid-sized operators, such as Betano or Parimatch, have obtained German licences through partnerships with established land-based venues. Others, like MrQ and PlayOJO, have taken a different route and simply geo-blocked Germany. The market has segmented into those who pay for compliance and those who take the risk.
What will the next few years bring? The GGL has already started to share data with payment providers on a regular basis. Under § 9 Abs. 2 GlüStV, the authority can order the prohibition of payments to and from unlicensed operators. This is not a distant possibility; it is happening in practice. Visa and Mastercard have both confirmed that they comply with GGL blocking requests. As a result, German players looking for offshore casinos routinely find that their credit card transactions are declined. The only way around this is crypto, which adds another layer of complexity and risk. Therefore, the days of easy Curacao-powered online casinos for German players are numbered.
To sum up this jurisdictional matter in plain terms: Curacao licences are not a badge of dishonesty, but they are no longer a ticket into the German market. MGA licences carry more prestige, but they do not automatically change the legality of an online casino in the eyes of the German state. For a player in the UK, the situation is slightly different—the UKGC is the sole regulator—but for a German reading this article, the message is simple: check the GGL list first, and treat any casino that lacks that permit as a high-risk entertainment option. Now, if you are still specifically interested in Candyland Casino, let’s examine its legitimate alternatives within the regulated German market. The list is short, but it contains brands with solid track records: Bet365, which holds both a German licence and a UK licence; 888 Casino, which recently re-entered Germany through a partnership; and newer entries like 32Red, all of which have adapted to the slower spin speed and the deposit cap.
These licensed operators have another advantage that offshore sites cannot duplicate: they can use payment methods like instant bank transfer and direct debit, which are the standard in the German-speaking world. The integration with Giropay was phased out, but Sofort and Paydirekt have taken its place. A licensed operator also has to comply with German data protection law (BDSG), which is more stringent than the GDPR baseline. Offshore platforms, by contrast, often.
