Kansspelautoriteit (KSA) Licensed Casinos

🗝️ Key Takeaways

• The Kansspelautoriteit (KSA) is the Dutch Gambling Authority, responsible for licensing, supervising, and enforcing all gambling regulation in the Netherlands. It has issued 30 remote gambling licences since the market opened in October 2021.
• Licences are granted for five-year terms. The first batch expires in October 2026, and the new policy rules, effective from January 2026, impose stricter renewal requirements, including mandatory exit plans and AML risk assessments. Renewal is not automatic.
• All KSA licensed operators must integrate with CRUKS, the national self-exclusion register, and verify every player through DigiD, the Dutch digital identity system. Over 100,000 players have registered for self-exclusion since launch.
• Operators face a combined tax and levy burden of approximately 39.75% on gross gaming revenue (37.8% gambling tax plus 1.95% regulatory levy) as of January 2026. The application fee is €48,000, non-refundable.
• Advertising restrictions are among the harshest in Europe. Untargeted advertising has been banned since July 2023, sports sponsorship since July 2025, and cashback bonuses are prohibited. The new coalition government has signalled a near total advertising ban.
• GGR-based channelisation fell to 49% in the first half of 2025. The black market now accounts for more of the gambling spend than the licensed sector, the worst ratio in any open licensed European market.

The KSA licence was designed to build one of the most protective gambling environments in Europe. Four years into the experiment, the protections are real, but the framework is struggling to keep players within the regulated market.

The Dutch regulator enforces strict standards: mandatory identity verification before a player can place a single bet, automatic self-exclusion checks at every login, age-based deposit limits, and a duty of care that requires operators to detect risky behaviour within 1 hour. These are not theoretical requirements.

The KSA fined a major licensed operator €4 million in December 2025 for failing to intervene when players deposited thousands of euros per day without adequate checks. For games, payment methods, bonuses, and tax on winnings, see our Online Casinos Netherlands review.

📜 Licence Structure

The KSA issues remote gambling licences under the Remote Gambling Act (Wet Kansspelen op Afstand, KOA), which came into force on 1 April 2021. Operators can apply for licences covering casino games, peer-to-peer games such as poker, sports betting, and horse race betting.

These categories can be combined in a single application. The application fee is €48,000, non refundable regardless of the outcome.

Operators must also provide a €50,000 financial security deposit. All supporting documentation must be in Dutch or a certified translation.

Licences are awarded for five years. The first batch expires in October 2026. New policy rules effective from January 2026 require all applicants to submit an exit plan and a risk analysis under the Dutch Anti Money Laundering Act (WWFT).

Only B2C operators can hold a KSA licence. The licensee is fully responsible for all outsourced activities.

The game system must be hosted in the EU or EEA, and a control database must be hosted in the Netherlands with open access for the KSA. Operators failing to comply with enforceable court rulings at the time of application are automatically deemed untrustworthy.

🛡️ Player Protection

The KSA requires a level of player protection that no other European regulator matches in combination. CRUKS, the national self-exclusion register, is the foundation.

Every player must be verified against CRUKS at registration and at every subsequent login. The system is linked to DigiD, the Dutch digital identity platform, making it technically impossible for an excluded player to access any licensed platform.

Over 100,000 players have registered with CRUKS since launch. Most players choose either a minimum of 6 months or an indefinite exclusion, with fewer opting for short-term periods.

An eight day reflection period prevents impulsive unsubscriptions after the minimum six month exclusion period. Third parties, including family members and employers, can also request involuntary exclusion.

Deposit limits are age based, with lower monthly caps for players under 24. Anyone who wants to exceed the standard threshold must contact the operator, who must issue a risk warning before approving it.

Operators must detect signals of problematic gambling within one hour. The December 2025 enforcement action demonstrated that the KSA treats these obligations as absolute.

📄 Dispute Resolution

The KSA accepts complaints against licensed operators through its official website, covering withheld winnings, suspected fraud, and underage gambling. Anonymous reporting is permitted.

However, the KSA does not act as a direct mediator between you and the operator. There is no equivalent to the UKGC's requirement for licensed ADR providers.

If you cannot resolve a dispute directly, your only option is Dutch civil courts. If you play at unlicensed offshore sites, the KSA has no jurisdiction over your complaint.

The 51% of gambling expenditure flowing to unlicensed operators carries no regulatory recourse.

🌐 Country Access and Jurisdiction

The KSA licence is strictly domestic. It authorises operators to offer gambling services to players physically located in the Netherlands only.

The Netherlands is part of the Kingdom of the Netherlands, which also includes Aruba, Curaçao, and Sint Maarten. The KSA has no authority over gambling in the Caribbean constituent countries.

Curaçao operates its own licensing regime, entirely separate from the Dutch framework. If you are outside the Netherlands, you cannot register at KSA licensed sites.

DigiD verification restricts access to holders of a Dutch citizen service number. Non-Dutch residents can register using foreign identity documents through the KSA directly.

⚖️ KSA vs Other Regulators

The KSA occupies a unique position among European gambling regulators. Its player protection requirements are among the strongest, but its market outcomes are among the weakest.

Compared to the UKGC, the KSA requires pre-play identity verification (the UKGC allows 72 hours), mandatory CRUKS integration (GAMSTOP does not use government identity), and age based deposit limits (the UK is still consulting on affordability checks). Against the Swedish Gambling Authority (SGA), the parallels are closer: both require national self-exclusion checks, and both face channelisation challenges.

Sweden's GGR channelisation sits between 65% and 79% for casino, significantly above the Netherlands' 49%. Sweden's gambling tax is 22%, compared to the Netherlands' effective rate of nearly 40%.

The MGA in Malta operates on a fundamentally different model: international licensing with limited advertising restrictions and no mandatory cross-operator self-exclusion. The core dilemma is that the KSA has implemented stronger protections than any of these regulators but has lost more market share to the black market than any of them.

🌟 Vistagamble's Honest Assessment

We assessed the KSA against every other licensing authority we review. Here is where it leads and where the model is failing.

➕ The Positives

• DigiD plus CRUKS creates the most effective identity and exclusion system in online gambling: No other regulator combines government digital identity verification with a mandatory cross platform self-exclusion register checked at every login.
• One hour risk detection is the most aggressive intervention timeline we have seen: Operators must identify problematic behaviour within 60 minutes, a standard that goes further than any other European regulator.
• The new fine policy demonstrates genuine enforcement capability: Five category fines scaling to €2 million, turnover related penalties of 3% of gross revenue, and the €4 million December 2025 fine show the KSA is willing.
• Licence renewal is a genuine reassessment, not a formality: The 2026 renewal process requires exit plans, fresh AML analysis, and a full review of player protection compliance, which means operators with poor track records face real consequences.

➖ The Negatives

• Half of all Dutch gambling spend now goes to the black market: A channelisation rate of 49% by GGR means the KSA's protections cover less than half of actual gambling activity in the Netherlands. Every player who moves offshore loses all protection.
• The tax burden is unsustainable at its current level: The 37.8% GGR tax plus 1.95% levy generated less revenue than the lower rate it replaced. The policy has failed on its own terms.
• No direct ADR route for players: The KSA handles complaints as part of its supervisory function, but does not provide binding dispute resolution between players and operators. Players must escalate to the Dutch civil courts.
• Advertising restrictions have removed legal operators from public visibility: With untargeted advertising banned, sports sponsorship banned, and social media marketing restricted, licensed operators are less visible than unlicensed ones in most online environments. 

🔒 Conclusion

The KSA has built the most technically advanced player protection framework in European online gambling. DigiD verification, CRUKS integration, age based deposit limits, and one hour risk detection represent genuinely meaningful safeguards for any player within the regulated market.

The problem is that the regulated market is shrinking. Tax policy, advertising bans, and deposit limits have pushed more than half of Dutch gambling expenditure offshore, where none of these protections exist.

The first licence renewals in October 2026, a new coalition government, and the question of whether the 37.8% tax rate will survive its own revenue shortfall will determine whether the Dutch model can be corrected or continue to lose ground to the black market.

Frequently Asked Questions❓

How does the KSA protect my money at licensed casinos?

Licensed operators must segregate player funds from operating capital and host a control database in the Netherlands that is open to the regulator. If the operator faces financial difficulties, your balance is protected in a separate account.

What is the difference between CRUKS and GAMSTOP?

CRUKS uses DigiD, the Dutch government identity system, to verify exclusion at every login. GAMSTOP relies on personal details submitted by the player.

Can the KSA block unlicensed websites?

The KSA does not currently have ISP blocking powers equivalent to those used by regulators in Belgium or Italy. However, the new coalition government has proposed expanded enforcement powers that would allow the KSA to block illegal websites more effectively.

How much does a KSA licence cost?

The application fee is €48,000, non refundable even if the application is rejected. Operators must also provide a €50,000 financial security deposit.

Why have operators left the Dutch market?

The combined tax burden of approximately 40% on GGR, strict advertising restrictions, and high compliance costs have made the Dutch market unprofitable for some operators.

What happens if I play at an unlicensed casino in the Netherlands?

You are not committing a criminal offence. Dutch law targets operators, not players. However, you lose all regulatory protections: no CRUKS coverage, no deposit limits, no KSA complaint process, and no operator duty of care.