From Validation to Certification
FAQ (Frequently Asked Questions)
#FAQ2063264 - May 9th, 2021
Curaçao eGaming ("CEG") is migrating towards a process of certification
#FAQ2063264 - May 9th, 2021
Wat has changed?
Curaçao eGaming ("CEG") is moving away from the third party validation system via seals. CEG feels that the method of seal validation does not align with CEG’s vision for the future on enhanced fraud prevention policies. The validation technology has not shown sufficient resistance to falsification attempts by third parties and CEG has not seen sufficient attempts by its former merchant to upgrade such resistance to acceptable minimum compliance levels.
With shall the validation system be replaced?
It shall be replaced with a simple requirement to place specific mandatory footer information, including a downloadable certificate as well as a Sublicense Designation Reference (“SDR”), allocated to every sublicensee. The appropriate SDR’s shall be distributed to CEG’s trusted Corporate Service Professionals (“CSP’s”) within a few days. CSP's shall be able to do certificate applications as of Tuesday, May 11th, 2021.
What is the difference between validation and certification?
The main difference between these methods is that no links shall be used to any websites of third parties for purposes of validation. CEG found this method to be unreliable, also because the process was executed by a third party. The said method advanced fishing and has therefore been decommissioned. In the new certification process, the operator is provided with a certificate that shall be valid for a limited amount of time. As the certificate coding will change every quarter and operators are allowed to place the certificate on websites themselves, it shall be complicated to mass produce any falsifications.
What is the procedure?
The operator shall receive a Public Certificate, which is to be placed in the footer of every website that is mentioned in the said certificate. It shall hold the name of the operator, the date of issue and the domain names. The Public Certificate shall be valid for one quarter. As a result, operators need to refresh their Public Certificate each quarter, starting on respectively January 1st, April 1st, July 1st and October 1st. As CEG is making implementing this change mid quarter, the first to be distributed Public Certificates shall already expire on July 1st, 2021, after which another Public Certificate shall be distributed. Operators do not have to apply for the initial Public Certificate and it shall be free of charge. The possibility to apply for the Public Certificate Q3 shall open up two weeks prior to Q2 ending. No websites are allowed to be online without displaying a valid Public Certificate, with the exception of a grace period that expires on June 1st, 2021 (see also: "My Certria validation seal has vanished, is this normal and is there any risk of losing my license?") Any changes need to be communicated to CEG via the CSP before they have been made.
Besides the mandatory Public Certificate, CSP's may apply for a Private Certificate as well. There will be two types of Private Certificates. The "A" version provides for basic information as requested by third parties (such as a payment processor), it is however only valid in combination with a valid Public Certificate, which can be downloaded on the website of the operator. The "B" certificate provides any information by request, including aliases. Operators who do not yet have an active website and need a Private Certificate to, for example, apply for a bank account, can apply for the "B" Private Certificate. The "B" certificate shall also hold information on any requested aliases.
What is the cost?
As already mentioned, the initial Public Certificate is free of charge. The costs for the next Public Certificate as well as private certificates, shall until further notice be aligned with current fee schedules.
My Certria validation seal has vanished, is this normal and is there any risk of losing my license?
Yes, the seal validation system has been decommissioned. There is no risk for operators of losing their sublicense for not displaying a validation seal. Because CEG needed to implement the new system 'in one go' for logistical purposes, CEG has introduced a 'grace period' that shall exist until June 1st, 2021. During this period, it is recommended that operators place the required information, including the Public Seal on all CEG-regulated websites.
I need more information on this topic, what can I do?
As this policy change was recently implemented, we expect to update this topic on May 9th and May 10th, 2021. In the mean time, CEG kindly advises you to contact your CSP, as this party is familiar with your case file and will be informed in great detail on what procedures to follow and the actions to undertake. If you are during this short transition period experiencing any problems in connection with decommissioning the seal, please do not hesitate to contact us via the contact form that can be found on the main page of curacao-egaming.com.