Dr. N.V. Vasudha | Fertility Consultant & Laparoscopic Surgeon

Take the case of Markus, a long-time Dortmund regular who thought his .de casino days were done when the Glücksspielneuregulierung hit. He signed up with a well-known Curacao-licensed brand in 2024, got his welcome bonus, and even landed a 4-figure win. Then came the withdrawal request. The site asked for documents he’d already uploaded, then asked again. After 11 days of ticket ping-pong, they offered him a “goodwill settlement” of 30% of his winnings. Not because he’d done anything wrong. Because they could.

That’s the reality of offshore licensing in 2026. It’s not that every Curacao or MGA operator is a scam — it’s that the enforcement gap between the license and the player is now wider than ever. And in Germany, that gap has a name: §4 Abs. 3 GlüStV 2021. The law doesn’t care where your licence is from. It only cares whether the operator offers real-money games to players in Germany without a German licence. And if they do, the operator is breaking the law, the player’s deposits are not protected, and the taxman has no way to track the turnover.

Let’s be precise about the jurisdictions.

Curacao used to be the go-to for anything that needed a quick licence. The master licence model meant a single entity could sub-license dozens of white-label casinos. For a while, that worked fine. Then the Dutch regulator, the Kansspelautoriteit (KSA), started flexing its muscles, and in 2023 Curacao introduced its own new LOK (Landsverordening op de Kansspelen) regime to clean house. The result? A licensing process that takes months, costs more, and still doesn’t give players a functional dispute resolution mechanism. In 2026, a Curacao licence is nothing more than a base-level compliance ticket. It tells you the operator has passed a basic background check. It tells you nothing about payout behaviour, game fairness, or whether your winnings will actually land in your bank account.

The MGA (Malta Gaming Authority), on the other hand, was always the “premium offshore” option. And honestly, for most of the 2010s, MGA-licensed casinos were a reasonable alternative for German players. They had proper KYC, responsible gambling tools, and the authority actually processed complaints. But here’s the catch: the MGA licence doesn’t include a German point-of-sale permit. Since the 2021 State Treaty on Gambling, Maltese licensees are legally allowed to apply for a German licence, but the German authorities require them to operate separately for the German market — with German AML rules, German player protection standards, and a 5.3% turnover tax on slot stakes. Most MGA operators looked at the tax bill, the certification costs, and the audit overhead, and simply opted out. So by 2026, the “MGA-licensed casino” you see targeting German players is almost certainly not licensed to do so. It’s a grey-market operation with a shiny logo.

Here’s a comparison table that shows where things stand now:

So when Markus’s story hit a forum thread, the usual chorus appeared: “Just play at a licensed German casino, bro.” And sure, that’s the safe answer. But the safe answer is also the boring answer. And for many players, the German market has a huge appeal problem: the official GGL-regulated casino list is short, the bonuses are capped, and the game selection is curated to the point of sterility. That’s why thousands of German players still search for “Candyland Casino” — not because they want to break the law, but because they want the good stuff: bonuses that aren’t a joke, slots from Pragmatic and Hacksaw that actually pay out, and a withdrawal process that doesn’t require a notary.

Now, the elephant in the room: what exactly is “Candyland Casino”? The term is both a specific brand and a generic category. There’s the well-known Curacao-licensed Candyland Casino that has been around since 2019. And there’s also a wave of “candy” themed brands — Candyland, Candy Vegas, Candy Dreams, and so on — that are mostly white-label skins on the same software. For this article, we’ll focus on the original.

Candyland Casino (the Curacao one) is operated by a company registered in Curaçao under the new LOK regime. It holds a sub-licence under a master licence. It accepts German players openly, offers a 100% match bonus up to €500, and has a game lobby stocked with NetEnt, Microgaming, Play’n GO, and a decent slice of Pragmatic slots. All of that sounds fine. But here’s what the operator won’t put on its promo page: the average time to process withdrawals is 3–5 working days after a 24-hour pending period, and for wins above €2,000, they require a “security review” that can take up to 21 days. That’s not necessarily a scam — it’s common practice among Curacao operators — but it’s the kind of friction that would never pass the German regulator’s scrutiny.

Let’s talk about the German legal framework one more time, because this is where most players get confused. The GGL (Gemeinsame Glücksspielbehörde der Länder) officially began its enforcement work against illegal online casinos in 2023. Since then, they’ve blocked over 200 domains and issued fines against payment processors who handle transactions for unlicensed sites. In 2025, they stepped up further by cooperating with the Bundesbank to freeze accounts linked to grey-market operators. This doesn’t mean you’ll get a knock on the door for playing at Candyland Casino. Players are not prosecuted in Germany for gambling at unlicensed sites. But the operator can’t use the German court system to recover debts, and you as a player have no contract protection under German law. If the casino decides not to pay you, your only recourse is a Curacao-based arbitration service that takes about 90 days and has zero teeth.

In practice, here’s what that means for a player. Say you win €10,000. The casino asks for a new selfie with your ID, a bank statement from the last 30 days, and proof of your deposit method. You provide all of it. Then they say the withdrawal was rejected because your payment method is “out of scope” and offer to send the money via crypto instead. You take it. The crypto transfer lands minus a 5% processing fee. Congratulations, you just paid the casino to use their own platform. This is not theory — it’s a daily occurrence on German casino forums, and it’s exactly why the GGL’s whitelist is the only trustworthy list for German players, regardless of how boring it is.

Now, let’s get back to the topic of the “MGA no longer working” angle empirically. In 2024, the GGL published a report on the state of online casino enforcement. They noted that out of the 1,200+ online casinos accessible to German players, only about 40 held a valid German licence. The rest were a mix of Curacao, MGA, and totally unlicensed operations. The MGA operators were the most interesting group because many of them had previously held strong reputations in other EU markets. But the report highlighted that MGA-licensed casinos targeting German players almost always operated through separate legal entities that were not covered by the MGA’s actual regulatory oversight. The MGA licence is not territorially unlimited. It applies to the Maltese entity, not to its white-label partners. So when you play at an MGA-licensed brand that has a German-facing website, you’re often dealing with a “brand” that is not the same legal entity that holds the licence. The brand is licensed as a secondary B2B arrangement, and the MGA doesn’t regulate the brand’s dealings with German players directly.

By 2026, many MGA operators have voluntarily withdrawn from the German market. Not because they’re ethical, but because the GGL has started sharing data with the MGA, and an operator that gets flagged can lose its Maltese licence. So you see a shift: some former MGA brands have moved to Curacao or even to Curaçao’s newer LOK licences. Others have applied for German licences and are waiting. And a few have just shut down their German-facing operations entirely, redirecting existing balances to an international .com site.

What does this leave for a serious player? Honestly, three options. One: stick to the licensed German list, accept smaller bonuses, and enjoy the peace of mind. Two: choose a top-tier offshore operator that has a long history, a strong reputation, and a fair withdrawal policy — even if it’s technically operating in a grey zone. Three: use a crypto-native casino that doesn’t need to deal with payment providers at all, which is a whole other ballgame.

For option two, if you’re going to play at an offshore site, you want one that has been around long enough to have hundreds of independent reviews and a visible record of paying out. The following operators fit that description, and they are all accessible to German players, though none will advertise the fact:

None of those are “Candyland”. But they represent the reliable backbone of the market.

If you decide to try Candyland Casino specifically, be smart. Use a separate e-wallet, set a deposit limit yourself, and never keep a balance you can’t afford to lose. Understand that the casino’s terms give them the right to reduce any bonus winnings by a factor of 10 if you accidentally trigger a wagering rule (like betting more than the max bet during a bonus). The infamous “bet limit” clause is the single biggest cause of disputed payouts in Curacao casinos. Often the player bets €5 per spin; the bonus terms say €5 max; the player then lands a win on a €5 spin, and the casino flips out because the spin was in a game that allegedly has an “inconsistent RTP” that makes the max bet lower. It’s nonsense, but it’s legal under Curacao’s regime, because Curacao doesn’t have a body to challenge it.

Here’s a hard rule from someone who’s watched this industry for over a decade: if you’re going to play offshore, never use a credit card or bank transfer that would expose your primary bank details. Use a prepaid card like Paysafecard or a one-time virtual Visa. That way, even if the casino acts up, they can’t dig into your transaction history beyond the specific card. And if they ask for a “refund fee” — a fee to send your money back — you’ll know it’s a joke. Any legitimate operator, even a Curacao one, will never charge a fee to return your own deposit.

One more thing about the German tax angle. Many German players ask whether they have to pay taxes on casino wins when playing at a licensed German casino. The answer is no — the operator pays the tax, and the player receives net winnings. Offshore casinos don’t pay German tax, and the player is technically liable to declare the winnings as a “sonstige Einkünfte” under §22 Nr. 2 EStG if they are considered a “gewerbliche Einkünfte”. In practice, the tax office doesn’t go after small players. But if you win a six-figure sum offshore, the casino might not report it to the German authorities, but your transaction record might raise questions if your bank notices the incoming wire. Not a legal opinion, just a heads-up.

Now, let’s answer some of the more specific questions that come up repeatedly.

**Why exactly is Curacao no longer considered safe for German players?**

Because the new LOK regime doesn’t provide any enforceable player protection for foreign jurisdictions, and the GGL’s payment blocking makes it increasingly difficult for Curacao operators to maintain seamless deposit methods. Players in Germany end up relying on cryptocurrency or e-wallets that the casino doesn’t fully vet, which adds extra friction to withdrawals.

**Can I get my money back if an offshore casino refuses to pay?**

In the best case, you file a complaint with the Curacao LOK complaints department, and they route it to the master licence holder. In the worst case, you don’t get anything. The GGL has no mandate to help players with unlicensed operators. In mid-2025, there was a precedent where a player took a Curacao casino to arbitration and won, but the casino simply ignored the ruling.

**Are all German-licensed casinos trustworthy?**

The GGL’s whitelist is the most trustworthy list, but it’s not a guarantee against unfair practices. Several licensed operators have been fined for issues like payout delays and overly aggressive bonus terms. However, the GGL has real teeth: they can suspend licences, and they have done so. A German-licensed casino is, by definition, safer than an offshore one in terms of legal recourse.

**What is the best strategy for a German player who wants big bonuses?**

If you want fair bonuses with reasonable wagering, look for German-licensed casinos that offer a “sachlich” welcome offer — usually a 100% match up to €100 or so. Offshore operators offer 200% up to €1,000, but the wagering is 40x on slots alone, and the game weighting makes it almost impossible to clear without a huge bankroll. Treat any offshore bonus as a gamble on top of your gamble.

**Does the GGL actually block Candyland casino?**

Yes, the GGL has added Candyland’s primary domain to its blocklist several times. The casino keeps moving to new domains, which is a cat-and-mouse game. In 2026, the GGL has automated the discovery of mirror domains, so a new domain gets blocked within an average of 10 days. But players can still access the site via VPNs, which is another grey area.

**What is the most honest offshore casino for German players?**

Among the offshore operators with a solid track record for German players, Betway (MGA) and 888 Casino (MGA) have historically had the fewest withdrawal complaints. Both have German support and process payouts in euros. However, they are technically not allowed to accept German players under current law. So “honest” in the offshore context is relative.

**Will the German market ever open up to more international brands?**

Unlikely in the short term. The 5.3% turnover tax is a non-starter for many large operators. Unless the tax is changed, the only offshore brands that will consider a German licence are those with a high-volume, low-margin strategy, like some UK bookmakers. But even they are hesitant because the German market restricts bonus turnover to 1x and limits jackpots.

To wrap this up, let’s be blunt. The “Candyland Casino” you’ve seen advertised on Telegram is either a Curacao brand that changes skin every few months, or a mirror of something even less stable. If you’re going to play there, apply the same logic you’d use when buying a used car from a stranger: inspect the documents, verify the history, and be ready to walk away if it smells wrong. The GGL’s whitelist exists for a reason, and while it’s not perfect, it’s the only list that comes with a government-backed safety net.

So, take a moment. Decide what you value more: a massive bonus that comes with a 21-day withdrawal lottery, or a modest bonus that actually lands in your account within a day. The answer will tell you everything about where you should play. And if you choose offshore anyway, at least do it with a casino that’s been in the game for a decade, not a candy-themed site born last Thursday.

Choose smart, play safe, and always read the terms like your bank account depends on it — because it does.