The corporate structure is required to be signed by the director of the company. Sign accordingly and resubmit.

The corporate structure is required to be signed by the director of the company. Sign accordingly and resubmit.

Submit documentation as to how the company and its operations are being funded and by whom, including documents evidencing funds owned by the company through cashflow or other means.

Submit documentation as to how the company and its operations are being funded and by whom, including documents evidencing funds owned by the company through cashflow or other means.<br><br><b><u>Update: 9/16/2025</u></b><br>Dear Applicant,<br>The requested information is still outstanding. Kindly ensure that it is duly submitted at your earliest convenience. Thank you for your cooperation.

The PHDF must be filled out, signed, and verified digitally. Please resubmit.

The PHDF must be filled out, signed, and verified digitally. Please resubmit.

The reference letter is not valid. Please submit a reference letter from a financial institution dated within the last six months confirming that the person is a valid customer.

The reference letter is not valid. Please submit a reference letter from a financial institution dated within the last six months confirming that the person is a valid customer.<br><br><b><u>Update: 9/16/2025</u></b><br>Dear Applicant,<br>The requested information is still outstanding. Kindly ensure that it is duly submitted at your earliest convenience. Thank you for your cooperation.

The GGR and NGR figures provided in the financial projections are unclear. Kindly clarify why NGR is at times lower and other times higher than GGR. Furthermore, the projections do not include a cashflow statement and balance sheet. Please update the projections accordingly.

The GGR and NGR figures provided in the financial projections are unclear. Kindly clarify why NGR is at times lower and other times higher than GGR. Furthermore, the projections do not include a cashflow statement and balance sheet. Please update the projections accordingly.<br><br><b><u>Update: 9/16/2025</u></b><br>Dear Applicant,<br>The requested information is still outstanding. Kindly ensure that it is duly submitted at your earliest convenience.<br>Thank you for your cooperation.

Most of the registered domains refer to a Costa Rica entity EOD Code SRL, with no apparent license, when accessed through a Netherlands IP address, even though MIBS N.V.'s terms and conditions state that the Netherlands is a prohibited jurisdiction. Furthermore, it was noted that a few of the domains registered under MIBS N.V. refer to other entities in the site footer. For example, luckyblock.com refers to Igloo Ventures SRL, another Costa Rica entity, as the site owner/operator, seemingly an Anjouan licensed entity, however upon logging in it refers to Entretenimiento Rojo B.V., which is another GCB license applicant. Please ensure that all domains registered with the GCB correspond to MIBS N.V.

<div>Most of the registered domains refer to a Costa Rica entity EOD Code SRL, with no apparent license, when accessed through a Netherlands IP address, even though MIBS N.V.'s terms and conditions state that the Netherlands is a prohibited jurisdiction.</div><div><br></div><div>Furthermore, it was noted that a few of the domains registered under MIBS N.V. refer to other entities in the site footer. For example, luckyblock.com refers to Igloo Ventures SRL, another Costa Rica entity, as the site owner/operator, seemingly an Anjouan licensed entity, however upon logging in it refers to Entretenimiento Rojo B.V., which is another GCB license applicant.</div><div><br></div><div>Please ensure that all domains registered with the GCB correspond to MIBS N.V.<br><br><b><u>Update: 9/16/2025</u></b><br>Dear Applicant,<br>Kindly confirm if this requirement has been duly rectified.<br>Thank you for your cooperation.<br><br></div>

It was noted on most of the registered sites that there is an AML policy available, however this makes reference to EU AML directives. The AML policy must be compliant with Curacao AML laws.

It was noted on most of the registered sites that there is an AML policy available, however this makes reference to EU AML directives. The AML policy must be compliant with Curacao AML laws.

The RG policy available on the domains only mentions self-exclusion as an available RG tool (in some of the sites not even that). Users must be able to self-exclude and also set session time limits and loss limits through their profile settings.

The RG policy available on the domains only mentions self-exclusion as an available RG tool (in some of the sites not even that). Users must be able to self-exclude and also set session time limits and loss limits through their profile settings.<br><br><b><u>Update: 9/16/2025</u></b><br>Dear Applicant,<br>Kindly confirm whether this requirement has been addressed accordingly.<br>Thank you for your cooperation.

The Business Plan lacks information regarding the company's technical setup. Please upload as an annex to the Business Plan.

The Business Plan lacks information regarding the company's technical setup. Please upload as an annex to the Business Plan.<br><br><u><b>Update: 9/16/2025</b></u><br>Dear Applicant,<br>The requested information is still outstanding. Kindly ensure that it is duly submitted at your earliest convenience.<br>Thank you for your cooperation.

ID verification procedure

The RG policy must outline the procedure carried out by the operator to verify the player's age.

Account closure procedure upon the operator becoming aware that the player is a minor post-registration.

The RG policy must outline the procedure for post-registration account closure upon the operator becoming aware that the player is a minor.

Record-keeping

The RG policy must state the operator's record-keeping policy.

Procedure on how the player can contact the operator regarding RG concerns via email or chat

The RG policy must describe the procedure for how the player can contact the operator regarding RG concerns via email or chat.

Must be available in English and target market language

The RG page/policy must be available in English and the site's target market language.

RG policy should include a structured process on flagging potential vulnerable gamblers

The RG policy must include a structured process on flagging potential vulnerable gamblers.

Must have a structured process for responding to indicators of problem gambling

The RG policy must contain a structured process for responding to indicators of problem gambling. The key monitoring factors include: - Deposit and wagering frequency - Repeated failed transactions due to insufficient funds - Reversing withdrawals - A pattern of inexplicable extended play sessions - Unreasonable increased communication with customer support, including requests for bonuses - Frequent changes to RG tools - Players maxing out a credit card - Attempts to open multiple accounts to bypass deposit or loss limits

Establish player profiles to assess risk levels

The RG policy must establish player profiles to assess risk levels

Adopt RBA to determine level of monitoring and intervention

The RG policy must adopt RBA to determine level of monitoring and intervention

Record all RG interactions in PAM system

The RG policy must state that the operators records all RG interactions in the PAM system

Procedure to follow for players identified as vulnerable persons

The RG policy must define the procedure to be followed for players identified as vulnerable persons

Operator must offer players option to activate a cooling-off period

The operator must offer players the option to activate a cooling-off period

Options for cooling-off must include duration and marketing opt-out at minimum

The options for cooling-off may include Duration, brand, vertical and marketing, of which the duration and marketing opt-out are mandatory. Furthermore, the duration must be for a minimum of at least 24 hours

Operator must offer players the option to self-exclude themselves for a duration of at least 1 year

Operator must offer players the option to self-exclude themselves for a duration of at least 1 year

Players must be able to set limits on the total amount they deposit

Players must be able to set limits on the total amount they deposit

Operators must train customer service and Responsible Gaming staff to handle player interaction profesionally and effectively

Training should cover, at least: - Recognizing signs of gambling distress - Conducting sensitive and structured conversations with at-risk players - Directing players to appropriate support resources and RG tools

Operators must not engage in irresponsible advertising

The RG policy must state that the operator must not engage in irresponsible advertising, including: - No targeting of Vulnerable Groups - No portrayal of Gambling as an Investment - No misrepresentation of Skill vs Chance - No Emotional Manipulation - Marketing materials must not feature minors or depict them engaging with gambling content - No explicit content - No encouragement of Unrelated Harmful Behaviours - Bonuses and promotions must be communicated transparently - Operators must not use bonuses to encourage excessive gambling - Operator is responsible for materials provided to affiliates, representatives, sponsorships, ambassadors, social media influencers - Operator must make any contracted third-party aware of their RG policy - All advertising must include a clearly visible RG message or slogan

The operator is advised to remind adults that they should take precautions when sharing devices with minors

The operator is advised to remind adults that they should take precautions when sharing devices with minors, such as safeguarding usernames, passwords and payment details.

Operators may employ automatic or manual pop-up notifications in response to concerning behaviours

Operators may employ automatic or manual pop-up notifications in response to concerning behaviours

When a player exhibits behaviour that reasonably suggests they may be a Vulnerable Player, the operator must initiate direct contact

When a player exhibits behaviour that reasonably suggests they may be a Vulnerable Player, the operator must initiate direct contact

Other limits may be considered including loss limits, time limits or wager limits, in line wth the operator's target player and/or market

Other limits may be considered including loss limits, time limits or wager limits, in line wth the operator's target player and/or market