A major data breach has exposed confidential information from thousands of online casinos licensed in Curaçao, raising concerns about offshore gambling operators and their compliance with regulatory standards. The leak, which includes tens of thousands of internal documents from the Curaçao Gaming Authority (CGA), reveals details about some of the largest online gambling firms and their ownership structures.
The exposed files provide insight into the inner workings of casinos such as Stake.com, a sponsor of Everton FC, and BC.Game, which has been linked to Leicester City FC. Both companies have previously faced allegations of illegally targeting customers in the United Kingdom, despite lacking valid UK gambling licenses. The leak further fuels scrutiny on these operators’ practices and raises questions about regulatory oversight from the Caribbean island, which hosts more than 8,000 online casinos despite its small population.
Among the data is information about Santeda, a network of casinos previously investigated for allegedly targeting vulnerable UK gamblers attempting to quit, without holding a UK Gambling Commission license. The documents also shed light on Upgaming, a firm owned by Georgian businessmen, previously connected with Santeda. While Upgaming’s representatives denied direct involvement with Santeda, they acknowledged a past business relationship between the two entities that has since ended. A 2025 document identifies a Torniki Kapanadze as the finance chief of Santeda, which aligns closely with the name of a current Upgaming employee, though legal counsel highlighted differences in spelling and emphasized the commonality of the name in Georgia.
The leak also includes data on Oddsbet.io, a betting company focused on “VIP” gamblers and reportedly owned until 2025 by Robert Bostock from Goole, East Riding of Yorkshire. Bostock’s legal team contested allegations that the business served UK customers, asserting it only operated outside the UK market.
Stake.com, which withdrew from the UK in 2025 following multiple controversies, is another major operator referenced in the leak. The documents indicate that its Curaçao-registered company, Medium Rare NV, is owned by Serbian national Mladen Vuckovic, who declared assets exceeding $1 billion to the regulator in 2024. However, regulators questioned Vuckovic’s role after uncovering significant financial transactions linked to Stake’s founders Ed Craven and Bijan Tehrani, neither of whom were listed on the regulator’s licensing applications.
The CGA declined to comment on the leak, citing the ongoing nature of a complex forensic investigation. Requests for comment from BC.Game and Stake.com were also made, but no immediate responses were provided.
The breach has intensified concerns over the transparency and regulation of Curaçao’s gambling licensing regime, which has long been criticized for its opacity. Given the scale of the leak and the prominence of the operators involved, the data may trigger further investigations into offshore gambling practices and their impact on consumers worldwide.