Netherlands (KSA) gambling licence: cost, requirements, timeline (2026)

A Netherlands gambling licence is a remote gaming authorization issued by the Kansspelautoriteit (KSA) under the Remote Gambling Act (Wet kansspelen op afstand, "KOA"), permitting online casino and betting services to Dutch residents. The market opened in October 2021 and has since become Europe's most technically demanding licence: beyond policies and fees, it requires a regulator-inspected Control Database streaming every transaction, mandatory CRUKS self-exclusion checks at every login, and — as of 2026 — a 37.8% GGR tax that makes cost discipline a licensing requirement in all but name.

What the licence is

The KSA issues remote licences covering casino games, betting, or both, valid for five years. The application fee is €48,000, non-refundable. Ongoing costs stack in three layers: the gambling tax at 37.8% of GGR after the 2025 and 2026 increases; the gaming levy funding the KSA and addiction prevention, around 1.95% of GGR combined; and the operational cost of the technical regime — CDB hosting and maintenance, CRUKS connectivity, and Dutch-language player-protection staffing.

The Dutch regime is best understood as a data regime. The Control Database is not reporting about your system; it is a mirrored record of your system, inspected before launch by an accredited body and continuously available to the KSA and tax authority. Operators who treat it as an afterthought lose months.

Applicant requirements

Corporate structure. The applicant must be established in the EU/EEA (confirm current establishment requirements). The KSA reviews the full group and applies a reliability assessment covering the company, its policymakers and its UBOs.

UBO and integrity checks. Dutch law brings the Wwft (AML act) and a Bibob-style integrity screen: criminal antecedents, tax conduct, and — decisively — the applicant's own history of serving the Dutch market unlicensed. A documented clean "cooling-off" period was enforced against prior grey operators at market opening.

Financial requirements. No fixed minimum capital, but demonstrated continuity: audited financials, funding sources, and a guarantee or segregation arrangement for player balances.

Local presence. No Dutch office is mandatory, but several functions must be effectively local: a Dutch-reachable RG representative, Dutch-language customer service and RG communications, and the CDB accessible to Dutch authorities.

Step-by-step application process

1. Gap analysis. Map your platform against the KOA technical requirements (CDB data model, CRUKS flows, limits, RG dashboards). This determines your real timeline more than the KSA's clock does.
2. Build the policy stack. Addiction-prevention policy (with input from Dutch experts), AML/Wwft programme, advertising policy, outsourcing register.
3. Certify. Platform and games inspected against the Dutch technical framework by an accredited inspection body, including a CDB inspection report.
4. File with the KSA. Application plus reliability dossiers and the inspection evidence; pay the €48,000 fee.
5. Supplementation rounds. The KSA reviews within ~6 months; expect detailed questions on RG policy substance, not just existence.
6. Launch under supervision. Register with the tax authority for gambling tax, connect CRUKS in production, begin CDB streaming from the first bet, and file the mandatory reports (annual assurance, incident, AML).

Plan the critical path around the CDB: it must be inspected as built, not as designed, so platform selection and CDB implementation gate everything else. Operators arriving on a platform with prior Dutch integration work compress the programme; those building bespoke typically discover the KSA's data-model interpretations one supplementation round at a time.

What the Dutch licence does NOT cover

• Any market beyond the Netherlands. Single-territory, no passporting, no side benefits abroad.
• Viable economics by default. At 37.8% GGR tax plus levy, gross margin after content costs and payments is thin. Untargeted advertising is banned, role models in ads are banned, and bonus policy is tightly restricted — acquisition is structurally expensive. The licence permits you to compete; it does not make competing rational without a lean cost base.
• Young-adult segments. Players 18–24 face stricter limits and marketing exclusions; deposit-limit prompts and affordability-style checks apply above monthly net-deposit thresholds (around €700, lower for young adults — confirm current thresholds).
• Cryptocurrency. Crypto deposits are effectively incompatible with the Wwft expectations applied to licensees.
• Forgiveness for grey history. Applicants with recent unlicensed Dutch activity face rejection or delay; the KSA checks affiliate archives, complaint records and payment data.

Netherlands vs alternative jurisdictions

Comparative figures are indicative as of 2026 — confirm with each regulator.

Among Europe's hard Tier-1 regimes, the Netherlands has the highest tax and the deepest technical integration, but broader online product scope than Germany. Operators sequencing a Northern-European entry usually rank Sweden first on economics, the Netherlands second, Germany third — unless sports betting is the core product.

Ongoing obligations and realistic budget

Dutch supervision is data-first: the KSA reads your Control Database before it reads your policies. Ongoing obligations include continuous CDB availability and data quality (inspected periodically by accredited bodies), monthly gambling-tax filings, annual assurance reports by external auditors, Wwft transaction monitoring and reporting to FIU-Nederland, and documented duty-of-care interventions — the KSA has fined licensees specifically for weak intervention practice on high-losing players. Administrative fines scale with turnover, have reached into the millions of euros, and the KSA publishes decisions in full.

The realistic recurring budget beyond tax and levy includes CDB hosting and maintenance (a production system with regulatory SLAs), Dutch-language RG and support staffing, external audit and inspection fees, re-certification on material platform changes, and Dutch counsel for the steady flow of secondary regulation — deposit-limit rules, advertising decrees and RG guidance have all changed since market opening. For a mid-size operator this is a seven-figure-adjacent annual line; model it precisely before committing.

The planning consequence is blunt: the Netherlands rewards scale and punishes subscale entries. Operators below a defensible market-share ambition either share infrastructure costs through a platform provider or should not enter at all — a calculation several exiting brands made publicly in 2025–2026.

How Vuch helps

The KSA licenses the operator; the platform's job is to make the engineering mountain underneath tractable — and in the Dutch case the honest position matters more than anywhere else:

• CDB and CRUKS as deployment scope. The platform provides the data architecture — full transaction audit trail, position tracking, reporting exports from the admin back office — on which a Control Database implementation and CRUKS integration are built and inspected per deployment. Vuch has no pre-certified Dutch modules; the CDB is a defined, costed workstream in any Dutch project plan, not a checkbox.
• Certification roadmap. Accredited-body inspection of platform, games and CDB is mandatory. Certification and licensing strategy for the Dutch market is scoped as part of deployment; a certification roadmap and due-diligence pack are available on request.
• Risk and RG tooling. Login-time self-exclusion check capability, mandatory limit-setting flows, young-adult rule sets and net-deposit monitoring with configurable intervention thresholds — delivered via Vuch Shield and tuned per jurisdiction.
• Payments — a decisive gating item. The platform's live rails today are USDT; a fiat payment layer is on the roadmap. The Dutch regime is fiat-first and effectively incompatible with crypto deposits, so a Netherlands entry depends on the fiat roadmap — raise it in the first deployment conversation, not the last.

The operator keeps the licence, the Wwft accountability, the Dutch RG representative and the marketing decisions. Given Dutch margins, the platform's cost efficiency is not a procurement detail — it is the difference between a viable and a loss-making licence.