“Casino Secrets” Offers Insight into the Structures of Illegal Online Casinos

Under the name “Casino Secrets,” IT security expert Lilith Wittmann and several European media outlets have investigated the structures behind illegal online casinos. Internal documents from the Curaçao Gaming Authority provide insight into owners, licensing procedures, and corporate ties. In Germany, the focus is particularly on Platincasino and the question of who is profiting from offerings that lack a German license.

Who Is Behind These Services

According to Wittmann, she had access to the Curaçao Gaming Authority’s internal systems for about nine months. Together with journalists from outlets including NDR, NRK, SVT, and Follow the Money, she analyzed documents from gaming authorities and commercial registries. We had already reported in March 2026 on an earlier security incident at the Malta Gaming Authority, which Wittmann had publicly acknowledged.

Lilith Wittmann’s research overview leads to three in-depth reports on licensing in Curaçao, Platincasino, and the software provider Softswiss. [Golem.de also provided context on the findings](https://www.golem.de/ news/lilith-wittmann-hacker-exposes-network-of-illegal-online-casinos-2609-213319.html).

According to an analysis by Follow the Money, approximately 800 owners were identified behind just under 650 gambling companies licensed in Curaçao. Together, these companies operate thousands of gambling websites. According to the journalists, the documents also reveal cases in which licenses were granted despite unresolved questions regarding ownership structures or potential target markets. However, this does not mean that every one of these companies is operating illegally in every country.

A Curaçao License Is Not Sufficient in Germany

A Curaçao license does not authorize a provider to offer gambling in Germany. This requires a permit from the relevant German authority. The official whitelist of the Joint Gambling Authority of the German States lists which providers and offerings hold such a permit.

It is precisely this restriction that makes the research relevant to the German market. In its report on licensing, Wittmann describes internal audit notes that address the legal risks of individual target markets. The Curaçao authority told Follow the Money that its gambling regulation is in a transitional phase. Companies have been given time to gradually meet the new requirements. Furthermore, the distinction between specifically targeting a country and merely accepting customers from there is complex.

Platincasino and the Question of Possible Back Tax Payments

A key focus of the German investigation is Platincasino. According to the documents analyzed, the brand, domains, and player data were transferred in 2023 from a Maltese company to Latiform B.V. in Curaçao. Wittmann also describes connections between the subsequent operation and the previous business environment. The attorney for entrepreneur Thomas Kalman, who is named in the investigation, rejects the allegations against his client as baseless.

Wittmann estimates that German gambling taxes that may not have been paid since the move to Curaçao amount to approximately 250 million euros for the period from 2023 to 2025. Her calculation is based, among other things, on assumptions regarding the proportion of German players and the amount of wagers placed. The amount is a journalistic estimate, not an officially determined back tax assessment.

Softswiss Is Also Under Scrutiny

Another part of the investigation examines connections between the gambling software provider Softswiss and companies that operate online casinos. Wittmann points to financing, overlapping personnel, and business relationships. As early as 2024, Bayerischer Rundfunk had reported on possible connections between Softswiss and platforms not licensed in Germany.

Softswiss disputes the interpretation of the new documents. In a statement to the media outlet dev.by on September 23, the company explained that information had been taken out of context and misinterpreted. It is reviewing the publications with legal assistance. The connections described by the journalists and the liability of individual companies are therefore disputed.

Investigation in Frankfurt

Regardless of Wittmann’s own tax calculation, an investigation into a group accused of illegal online gambling and failing to fully pay gambling taxes became public in early September. According to the Frankfurt Public Prosecutor’s Office, as [reported by tagesschau.de] (https://www.tagesschau.de/inland/regional/hessen/hr-fast-sechs-milliarden-euro-mit-illegalem-online-gluecksspiel-umgesetzt-100.html), wagers totaling approximately 5.86 billion euros are said to have been processed between July 2021 and the end of 2023. Investigators estimate the alleged tax loss for 2024 alone at 77.6 million euros. This figure comes from the preliminary investigation and should not be equated with Wittmann’s estimate of 250 million euros. The accused are presumed innocent.

The GGL welcomed the success of the investigation and explicitly warned against illegal gambling sites such as Platincasino. However, its statement does not specify who was arrested or which specific gambling sites are the subject of the proceedings.

The “Casino Secrets” reveal, above all, how difficult oversight becomes when licensees, beneficial owners, software providers, and payment flows are spread across multiple countries. For players, the practical question remains simpler: Whether an offering is permitted in Germany can be verified using the official whitelist—a foreign license seal is not sufficient for this purpose.