The Guardian
· collected 2026-09-26 · by Rob Davies and Maxence Peigné
The secrets of thousands of online casinos have been laid bare in a vast leak of data that could have seismic consequences for offshore gambling firms, including some accused of illegally targeting consumers around the world.
uncertain
that → lay → world
The Casino Secrets leak reveals tens of thousands of previously confidential files stored by the gambling regulator on the Caribbean island of Curaçao.
asserted
leak → reveal → Curaçao
The files detail the inner workings of some of the world’s largest online casinos, including the crypto-focused Everton FC sponsor Stake.com and the Santeda network, which was exposed in an investigation by the Guardian and Investigate Europe in April.
asserted
which → detail → April
Some of the businesses appear to be owned or operated by British citizens, while others, such as the Leicester City FC sponsor BC.Game, have previously been accused of targeting UK customers illegally.
asserted
others → appear → customers
The leak has rocked Curaçao, whose opaque licensing regime has transformed the former Dutch colony into a thriving but sometimes controversial hub for gambling firms, hosting more than 8,000 casinos, one for every 20 people living there.
asserted
regime → rock → people
A Berlin-based hacker, Lilith Wittmann, claims to have obtained internal documents by accessing a database kept by the Curaçao Gaming Authority (CGA).
uncertain
hacker → base → Authority
The CGA has confirmed it was subject to “unauthorised access” of its portal.
asserted
it → confirm → portal
Data published in the leak includes information about the owners of some of the world’s largest offshore casinos and details including the source of their wealth.
asserted
Data → publish → wealth
Companies whose data has been published include Santeda International, the global casino network traced by the Guardian and Investigate Europe this year.
asserted
data → publish → Europe
The investigation found that casinos owned by Santeda appeared to have targeted vulnerable UK gamblers who were trying to quit, despite it having no licence from the Gambling Commission, which is illegal.
asserted
which → find → Commission
The investigation also uncovered a digital paper trail leading to a business called Upgaming, which is owned and operated by a group of Georgian businessmen.
asserted
which → uncover → businessmen
At the time, lawyers for Upgaming said their client denied operating the Santeda network but the Casino Secrets leak has raised new questions about this claim.
uncertain
leak → say → claim
Information submitted by Santeda to the CGA names a Georgian called Onise Chimakhidze as its owner.
asserted
Information → submit → owner
It also gives Upgaming email addresses as contact details, while a cache of files submitted to the CGA refer to Upgaming in their filenames.
asserted
cache → give → filenames
Lawyers for Upgaming said their client could not “speculate as to why a third-party has listed their contact details without further information, or without having seen the documents”.
uncertain
party → say → documents
They said this could be because Upgaming previously had a business relationship with Santeda, which has since ceased.
uncertain
which → say → Santeda
A document submitted in 2025 described a man named Torniki Kapanadze as Santeda’s finance chief.
asserted
document → submit → chief
A LinkedIn profile shows a Tornike Kapanadze works for Upgaming.
asserted
Kapanadze → show → Upgaming
Lawyers for Upgaming said this was a common name in Georgia and noted the difference in spelling.
asserted
this → say → spelling
Santeda also extended six loans totalling €15,590,000 (£13,420,000) to Buda Capital, a Luxembourg-based company owned by a group of Georgians who own stakes in or are directors of Upgaming.
asserted
who → extend → Upgaming
Upgaming did not provide an explanation for this loan.
asserted
Upgaming → provide → loan
The lawyers said Upgaming believed it was “subject to a targeted campaign by various parties, including with vested commercial interests of their own”, without providing further explanation.
asserted
it → say → explanation
The leak also reveals data about Oddsbet, a betting company focused on “VIP” gamblers that was owned until 2025, the data suggests, by Robert Bostock, from Goole in the East Riding of Yorkshire.
uncertain
data → reveal → Yorkshire
Documents submitted to the CGA by Bostock’s company claimed that the source of his funds derived from “long-term crypto currency investments” and a £100,000 loan from another person based in the UK.
asserted
source → submit → UK
He sold the business for $240,000 in 2025, the documents suggest.
asserted
documents → sell → 2025
Lawyers for Bostock said the £100,000 loan was never drawn.
asserted
loan → say → Bostock
They said the business only served customers outside the UK.
asserted
business → say → UK
BC.Game also appears in the leak.
asserted
BC.Game → appear → leak
The company has previously been accused of accepting business from UK customers, even after surrendering its licence to do so.
asserted
company → accuse → licence
The leak also reveals information about Stake.com, the vast online casino that pulled out of the UK in 2025 after a string of controversies.
asserted
that → reveal → controversies
Stake’s Curaçao-registered company, Medium Rare NV, gave its owner as Serbian national Mladen Vučković, who declared assets of more than $1bn to the regulator in 2024.
asserted
who → register → 2024
Regulators questioned whether he owned the business, after finding millions of dollars to companies tied to Stake’s founders, Ed Craven and Bijan Tehrani.
asserted
he → question → founders
Neither appeared on the licence application, according to the investigative journalism platform Follow the Money, which first reported the findings.
uncertain
which → appear → findings
But the Curaçao regulator still issued a licence, one example among several that Follow the Money said indicated that it failed to act on red flags about applicants.
asserted
it → issue → applicants
The UK Gambling Commission said it could not comment on leaks.
uncertain
it → say → leaks
“Illegal activity linked to gambling is a threat that we take seriously, and we work closely with partners to identify and disrupt those seeking to operate outside the regulatory framework,” it said.
asserted
it → link → framework
The CGA said it could not answer questions about an “ongoing, complex forensic matter”.
uncertain
it → say → matter
It said it was “committed to transparency” and would issue further updates.
asserted
it → say → updates
The Guardian has approached BC.Game and Stake.com for comment.
asserted
Guardian → approach → comment
The Aporia
