A turnkey platform signs an operator on Monday. By Friday, the operator has asked where the license comes from. The answer sends them to a licensing consultant, a corporate services provider, and a due diligence queue. Two months later they either come back or they don't, and by then a competing platform has usually offered them something faster.

The platform did nothing wrong in that sequence. It simply had no answer to the one question that gates every launch, and the deal stalled in the gap. Platforms in their first two years lose more deals at this stage than at any other. The demo goes well, the commercial terms get agreed, and then the operator vanishes into a licensing process the platform neither controls nor earns anything from.

The Tuvalu Principal License closes that gap directly, and few structures on the market do.

The Tuvalu framework operates under the Tuvalu Online Gaming Act 2023, administered by the Tuvalu Gaming Authority through a single authorised representative. The TGA issues three categories of authorisation: B2C for consumer-facing operators, B2B for software and platform suppliers, and Principal.

Under the Principal model, one master licensed entity may oversee up to 15 separate operator entities within a single regulatory framework. Each client project runs as its own unit with its own corporate entity, its own brand, and its own player relationship. The platform holds the authorisation that permits all of them to operate.

The commercial mechanics are simple. A platform onboards a client under its existing licensed infrastructure and monetises the relationship through setup fees, platform fees, ongoing support, or revenue share. Those are the same instruments the platform already uses, applied to a service it previously could not offer.

A conventional white label works differently. The provider holds the license, the operator functions as a marketing skin, and access to player data and control over the cashier and bonus logic stay with the provider. Under a Principal structure the client shares the platform's authorisation and keeps ownership of everything else.

The arithmetic for the platform depends on slot utilisation. A principal authorisation carries a fixed annual cost whether one of the fifteen positions is filled or all fifteen, so the structure loses money at one client, breaks roughly even at three, and turns materially profitable from the fourth.

That calculation leaves out the larger effect. A platform charging a setup fee for onboarding under its principal license is selling the removal of a two-month interruption between a signed term sheet and a live brand, and the license itself is the smaller part of what the client is paying for.

For the operator, the calculation has a different shape. They give up direct standing with the regulator and accept dependency on the platform's compliance conduct. In exchange they launch in a fraction of the time, avoid the fixed annual fee, and skip the drafting exercise entirely. For a first brand testing a market, that trade is often rational. For an established operator with three years of revenue history, it rarely is.

The Principal License holder is the licensee. The TGA's counterparty is the platform, not the fifteen brands operating beneath it, and an AML failure or geo-blocking breach anywhere inside the structure lands in the principal's file whichever brand caused it.
Rikk's position is that a platform intending to run a principal structure should have five things in place before it onboards its first client:

Legal separation between brands means that one client's difficulties do not automatically flow upward into the principal license, provided the separation, oversight, and compliance controls are genuinely maintained. That proviso carries the weight of the entire structure. Separation that exists only in the corporate register offers no protection when the regulator examines how the principal supervised its clients in practice.

This is the objection that decides most deals, and it deserves a direct answer rather than reassurance.

Risk in a principal structure runs asymmetrically. A single brand failing does not automatically compromise the principal, provided separation holds. A principal authorisation being suspended or revoked compromises every brand beneath it, simultaneously, because those brands never held an authorisation of their own. Their permission to operate was always derivative.

Operators are right to be alert to this, and they have a recent precedent in mind. Curacao ran a sublicensing model for two decades, built on a 1993 ordinance and administered by four private master license holders. At its peak, more than 1,200 active operators depended on it. When the National Ordinance on Games of Chance took effect and legacy sub-licenses expired on 31 January 2025, the operator count contracted to roughly 400 within a year. A large number of businesses discovered that what they had been calling their license was a contract with a private company.

Platforms that want to sell the principal model credibly should address this in the client agreement rather than in the sales conversation. Rikk advises building four provisions into the standard onboarding contract:

The fifteen-slot cap works in the platform's favour here. Concentration means the principal's exposure comes overwhelmingly from its own supervisory conduct, which it controls, rather than from an unbounded population of licensees it has never met.

The Principal License is unsuitable in several situations, and a platform that sells it into the wrong profile will inherit the resulting problem.

The principal authorisation should sit in its own entity, separate from the platform's technology and IP holding company. Housing the license, the source code, and the client contracts in a single vehicle concentrates regulatory and commercial risk in one place, and it complicates any future sale of the technology independently of the licensed operation.

A common configuration places the platform's proprietary software in a Cyprus holding entity, licensed to the operating business under a software license agreement that qualifies for the IP Box regime, with the principal authorisation held by a separate offshore entity under the other beneficial ownership. Payment processing is structured at a third layer, typically Cyprus, to preserve PSP access independent of the licensing position.

Beneficial ownership consistency across the layers matters more than the individual jurisdiction choices. Regulators and payment providers both treat a change in UBO as a trigger for fresh due diligence, and a structure designed to keep ownership stable across the corporate stack avoids repeating that exercise at every counterparty.