Spillemyndigheden (Danish Gambling Authority) — Standards Explorer
All 35 Danish standards, organised by theme
A searchable, filterable index of Denmark's remote-gambling rulebook, drawn from Spilleloven (Consolidation Act 1182/2025), Executive Orders 682 and 684 of 11 June 2025 on online casino and online betting, Spillemyndigheden's Standards Compliance Programme (SCP), the AML Act (1463/2025) and the DGA's operator guidelines. Standards are grouped by theme, tagged editorially, and deep-linkable.
The four statutory purposes of Spilleloven — moderate consumption, youth and vulnerable protection, fair and transparent play, and crime prevention — and the licence, age and credit rules that anchor every downstream obligation.
4 standards4 player-flagged
100%
player-flagged
Regulatory risks this theme addresses
Offering gambling in Denmark without a DGA licence
Onboarding or transacting with under-18 customers
Extending credit to players or accepting third-party credit deposits
Spilleloven (Consolidation Act 1182/2025) 4
§ 1
Statutory purposes of the Gambling Act
RG CriticalPlayer Rights
Establishes the four purposes against which all operator conduct is measured: keep gambling consumption at a moderate level, protect young and vulnerable persons from exploitation and addiction, ensure gambling is fair, responsible and transparent, and prevent gambling from supporting crime.
Requirements
Align internal policies and governance with the four statutory purposes
Evidence purpose-consistent decision-making during DGA inspections
Apply the purposes when interpreting ambiguous rules or guidance
Reflect the purposes in staff training and onboarding materials
§ 14
Licence requirement for online casino and betting
Player RightsGame Design
No person may offer or arrange gambling in Denmark without a Spillemyndigheden licence. Online casino and betting licences are issued for up to five years and require fit-and-proper owners, directors and key staff.
Requirements
Hold a valid DGA online casino or betting licence before accepting Danish players
Pass fit-and-proper vetting for beneficial owners, directors and key functions
Maintain adequate financial resources proportionate to volume
Pay the annual licence fee scaled to GGR
Notify the DGA of material changes to licence conditions
§ 26
Minimum age 18
RG CriticalBonus & Ads
Gambling may only be offered to persons who have reached the age of 18. Age must be verified before any real-money play and reinforced in all marketing.
Requirements
Verify age at registration via MitID or equivalent electronic ID
Block all under-18 account creation and play attempts
Display the 18+ age limit prominently in all advertising
Reject deposits from verifiably underage customers and refund without fees
§ 36
Prohibition on operator credit
RG CriticalPlayer Rights
Licence holders may not extend credit to players and may not accept payment from third-party credit on the player's behalf. Deposits must come from the player's own funds.
Requirements
Block deposit chains that amount to operator-extended credit
Do not advance stake against a future deposit or loyalty balance
Do not finance play through cashback structured as a loan
Reject third-party deposits and payment instruments not held by the registered player
B
Theme B
Executive Order on online casino (EO 682/2025)
The operational rulebook that governs player accounts, deposit limits, session tools and fund segregation for DGA-licensed online casino operators under Executive Order 682 of 11 June 2025.
4 standards4 player-flagged
100%
player-flagged
Regulatory risks this theme addresses
Accepting play from unverified or duplicate accounts
Failing to enforce mandatory deposit limits or reality checks
Commingling player funds with operating capital
Executive Order 682/2025 — Online casino 4
EO 682 § 7
Player account and MitID registration
RG CriticalPlayer Rights
Every player must hold a single registered account, identified through MitID (which replaced NemID in 2022), before any real-money play can begin.
Requirements
Maintain exactly one active player account per natural person
Identify each player through MitID before first deposit or play
Store identity attributes as required by the AML Act and retention rules
Block all real-money activity until registration and identification complete
Re-verify on material changes such as name, address or payment instrument
EO 682 — Limits
Mandatory deposit limits (daily, weekly, monthly)
RG Critical
Operators must require each player to set daily, weekly and monthly deposit limits before the first deposit. Lowering a limit takes effect immediately; raising a limit takes effect only after 24 hours.
Requirements
Force limit-setting at registration before any deposit is possible
Honour limit reductions in real time
Delay any limit increase by at least 24 hours
Prevent any deposit from clearing above the live ceiling
Log every limit change with timestamp for DGA inspection
EO 682 — Session tools
Reality checks, session timer and in-client self-exclusion
RG Critical
Operators must offer an in-session clock, recurring reality-check pop-ups and a self-exclusion mechanism reachable from within the player account.
Requirements
Display a visible session timer on all play surfaces
Serve recurring reality-check prompts at configurable intervals
Offer in-client temporary self-exclusion of at least 24 hours
Offer an in-client permanent self-exclusion path that also triggers ROFUS sign-up
Log exclusion events to SAFE for regulator oversight
EO 682 — Fund segregation
Payout and player-funds segregation
Player Rights
Player balances and winnings must be payable on demand and protected from operator insolvency. Funds held for players must be segregated from the operator's own working capital.
Requirements
Hold player funds in a segregated account separate from operating capital
Pay winnings without undue delay once KYC is complete
Document the segregation arrangement to the DGA
Refund the full balance to the player on account closure
C
Theme C
Executive Order on online betting (EO 684/2025)
Integrity, market and match-fixing rules for DGA-licensed online betting operators under Executive Order 684 of 11 June 2025, read alongside the match-fixing Executive Order 43/2025.
3 standards3 player-flagged
100%
player-flagged
Regulatory risks this theme addresses
Offering bets on events that undermine public morality or integrity
Settling live markets from unverifiable data
Missing or delayed reporting of suspicious betting patterns
Executive Order 684/2025 — Online betting 3
EO 684 — Catalogue
Betting-market integrity and prohibited bets
Game DesignPlayer Rights
Operators may not offer bets on events that undermine public morality or integrity, including bets on bookings in youth sport, or on events the operator or its staff can directly influence.
Requirements
Maintain a written betting-catalogue policy
Exclude youth competitions below a stated age or level from the catalogue
Prohibit staff, owners and related parties from betting on the operator's markets
Submit catalogue changes to the DGA on request for supervisory review
EO 684 — Live data
Live-betting event data and audit trails
Game Design
Live betting must be settled from a verifiable data source. Operators must keep event and odds records available to the DGA for reconstruction of any settlement.
Requirements
Document the live-data sourcing chain
Maintain audit logs of live odds and market state changes
Be able to reconstruct each settlement on DGA request
Reconcile live market records against the SAFE data warehouse
EO 43/2025
Match-fixing monitoring and reporting
Player Rights
Under Executive Order 43/2025 on match-fixing, operators must monitor, record and report suspicious betting patterns and cooperate with sporting bodies and the national match-fixing secretariat.
Requirements
Operate a suspicious-bet monitoring function with documented rules
Notify the DGA and the national match-fixing secretariat of red-flag patterns
Cooperate with sporting bodies, federations and law-enforcement requests
The DGA's technical rulebook, refreshed in February 2025 — RNG, base platform, game requirements, SAFE data warehouse, TamperToken and, from 1 January 2025, a separate B2B supplier licence for any company providing games to Danish-licensed operators.
6 standards6 player-flagged
100%
player-flagged
Regulatory risks this theme addresses
Launching games or platform changes without current SCP certification
Gaps or tampering in the SAFE data feed to the DGA
Unlicensed B2B supply into the Danish market
SCP technical certifications 6
SCP.01.00
Random Number Generator (RNG) requirements
Game Design
Random Number Generators used for casino games must be independently certified to the DGA's statistical and security requirements before go-live. From 2026, recertification is triggered by changes affecting compliance rather than an automatic annual cycle.
Requirements
Use a certified RNG that meets the DGA's statistical requirements
Submit test reports from an accredited testing laboratory
Document entropy sourcing and reseeding behaviour
Recertify on any change that affects compliance, per the 2026 policy
SCP.02.00
Base platform requirements
Game DesignPlayer Rights
The operator's base platform — covering player-account handling, transaction ledgers and session management — must meet the DGA's baseline set out in SCP.02.00 (February 2025 edition).
Requirements
Maintain a single identifiable player account with no duplicates
Keep an immutable transaction log for all wagers, wins and transfers
Use secure, synchronised time across all system components
Apply role-based access controls for all administrative functions
Document disaster-recovery and business-continuity arrangements
SCP.07.03
Requirements for games — online casino
Game DesignRG Critical
Each online-casino game must comply with SCP.07.03 on stake and win display, theoretical return-to-player disclosure, and prohibited mechanics.
Requirements
Publish the theoretical return-to-player for every game
Display stake and win values in real currency without ambiguity
Prohibit features that obscure loss, including misleading near-miss animations
Allow the player to interrupt play at any time without penalty
Recertify on any game change that affects compliance
SCP — SAFE
SAFE data warehouse reporting
Game DesignPlayer Rights
Operators must transmit gambling data — accounts, bets, deposits, withdrawals and exclusion events — to the DGA's SAFE data warehouse on a continuous basis for supervision and reconciliation.
Requirements
Implement the SAFE feed per DGA specification
Reconcile transmitted data against source systems daily
Tag self-exclusion and limit events so SAFE can correlate them
Preserve raw underlying records for DGA inspection
Give DGA continuous access to the SAFE feed
SCP — TamperToken
TamperToken integrity signing
Game Design
Outbound regulatory reports must be signed using the TamperToken mechanism so the DGA can detect tampering and verify provenance.
Requirements
Sign every outbound report with TamperToken per DGA specification
Rotate signing keys on the prescribed cadence
Alert operations on signing failures and remediate before resuming
Preserve signed originals alongside any derivative extracts
B2B licence
B2B game-supplier licence (from 1 January 2025)
Game Design
Since 1 January 2025, suppliers of games to Danish-licensed B2C operators must themselves hold a DGA supplier licence, bringing the supply chain inside the inspection and AML perimeter.
Requirements
Apply for and hold a DGA B2B supplier licence before any supply to Danish operators
Maintain fit-and-proper standards for owners, directors and key functions
Submit to DGA inspection and cooperate on SCP certification for supplied games
Notify the DGA of changes of control or material change to supply scope
E
Theme E
ROFUS — central self-exclusion register
Denmark's distinctive national self-exclusion register, ROFUS, sits at the heart of the responsible-gambling regime and also carries a 'No thank you to marketing' flag that operators must honour across every channel and every affiliate.
3 standards3 player-flagged
100%
player-flagged
Regulatory risks this theme addresses
Allowing a ROFUS-excluded player to log in, deposit or play
Direct-marketing to a ROFUS-flagged player via any channel
Affiliates or ad networks breaching the suppression list on the operator's behalf
ROFUS obligations 3
ROFUS — Lookup
Pre-session ROFUS lookup
RG Critical
Before allowing a player to log in or deposit, operators must check the player against ROFUS in real time and block access for any excluded player.
Requirements
Call the ROFUS API on every login and before every deposit
Block login and deposit if the player is excluded
Do not permit workaround accounts that bypass ROFUS
Log every ROFUS lookup with timestamp and outcome
Re-check on return after significant inactivity
ROFUS — Registration
Registration pathway on the operator site
RG Critical
Operators must enable players to register for temporary or permanent ROFUS exclusion directly from their platform, without friction or dissuasion.
Requirements
Expose a visible ROFUS link on all player-facing surfaces
Deep-link to rofus.nu or provide an in-platform equivalent flow
Do not introduce friction, retention messaging or upsell at the exclusion step
Confirm in the player account once the exclusion is registered
ROFUS — Marketing suppression
"No thank you to marketing" compliance
RG CriticalBonus & AdsAffiliate Rules
ROFUS registration also flags a player as opted out of gambling marketing. Operators must suppress all direct marketing to that player and extend the suppression to affiliates acting on their behalf.
Requirements
Suppress email, SMS, push and in-app gambling marketing to ROFUS-flagged players
Check the suppression list before every campaign send
Retain evidence of suppression for regulator inspection
Apply the same suppression to affiliate marketing carried out on the operator's behalf
F
Theme F
Responsible gambling & player protection
DGA label visibility, StopSpillet helpline access, pre-play risk information developed with a recognised treatment centre, and active intervention on high-risk play.
3 standards3 player-flagged
100%
player-flagged
Regulatory risks this theme addresses
DGA label or StopSpillet contact missing from key player-facing surfaces
Pre-play risk information that is generic or not developed with a treatment centre
Failure to intervene on clear high-risk indicators
Responsible-gambling obligations 3
RG — Label
DGA licence label and StopSpillet visibility
RG CriticalPlayer Rights
Licensed operators must display the DGA licence label and contact details for the StopSpillet helpline on every player-facing surface, with links to treatment resources.
Requirements
Show the DGA label on the home page and in the site footer
Surface the StopSpillet number (+45 70 22 28 25) from every page
Link to treatment resources, not only to the operator's own support
Reference multiple treatment centres rather than a single named clinic
RG — Pre-play
Pre-play risk information
RG Critical
Before a player gambles, they must receive information about the 18+ age limit, the risks of gambling and available treatment, prepared in collaboration with a recognised treatment centre.
Requirements
Present the pre-play risk screen before the first real-money action
Develop the content with a recognised Danish treatment centre
Refresh the content on a documented cadence
Retain evidence of the collaboration for DGA inspection
RG — Intervention
Active intervention on high-risk play
RG Critical
The DGA expects operators to actively monitor high-stake or distressed players and to intervene where indicators warrant, escalating to permanent exclusion where needed.
Requirements
Maintain a documented risk-scoring model with reviewable rules
Operate a soft and hard intervention playbook with owner roles
Keep case files of interventions and their outcomes
Escalate to permanent exclusion through ROFUS where indicators warrant
G
Theme G
Anti-money-laundering (Hvidvaskloven)
Gambling operators are obliged entities under the Danish AML Act (Consolidation Act 1463/2025). The DGA supervises AML compliance directly, refreshed its guidance in 2025, and restructured registration through Executive Order 239/2025.
4 standards4 player-flagged
100%
player-flagged
Regulatory risks this theme addresses
Onboarding without CDD or ignoring trigger events for enhanced due diligence
Failing to file suspicious-transaction reports to the Danish FIU
Gaps in record retention or audit access for DGA inspection
AML Act obligations for gambling operators 4
AML — Risk assessment
Risk assessment and AML policies
Player Rights
Gambling operators are obliged entities under the AML Act and must maintain a written firm-wide risk assessment and board-approved AML policies, and register in the DGA's AML register under Executive Order 239/2025.
Requirements
Document a firm-wide AML risk assessment refreshed at least annually
Obtain board approval for AML policies, procedures and controls
Appoint a designated AML officer with defined authority
Register in the DGA's AML register per Executive Order 239/2025
AML — CDD / EDD
Customer due diligence and enhanced due diligence
Player Rights
Customer due diligence must be applied at onboarding and on trigger events; enhanced due diligence is required for high-risk customers, PEPs and unusual transactions.
Requirements
Verify identity via MitID at onboarding
Screen customers against PEP and sanctions lists
Trigger EDD at defined risk thresholds and on unusual activity
Document source of funds where risk indicators warrant
Refresh CDD on a documented periodic cadence
AML — Monitoring / STR
Transaction monitoring and STR reporting
Player Rights
Operators must monitor transactions for suspicious patterns and report suspicious-transaction reports to the Danish FIU (Hvidvasksekretariatet) without undue delay.
Requirements
Run automated transaction-monitoring rules tuned to gambling typologies
Investigate alerts through to disposition with recorded rationale
File STRs to the Danish FIU without undue delay
Maintain STR records for at least 5 years
Respect the tipping-off prohibition in all customer-facing channels
AML — Records
Record keeping and DGA audit access
Player Rights
KYC, transactional and monitoring records must be retained and made available to the DGA on request.
Requirements
Retain KYC and transaction records for at least 5 years after relationship end
Store records in a structured, searchable form
Provide DGA inspectors with timely access on request
Securely delete records after the retention period
Subject AML controls to an internal-audit cadence
H
Theme H
Marketing & advertising
How Danish licensees may promote their products — fair odds representation, audience protection, the DKK 1,000 bonus cap with 10x wagering ceiling, required disclosures in every ad, and operator responsibility for affiliates acting on their behalf.
5 standards5 player-flagged
100%
player-flagged
Regulatory risks this theme addresses
Exaggerating winning chances or framing gambling as a path out of hardship
Targeting under-18s or vulnerable audiences through creative, channel or media choice
Bonus promotions that exceed the DKK 1,000 cap or the 10x wagering ceiling
Marketing obligations 5
MKT — Fair odds
Fair representation of winning chances
Bonus & Ads
Advertising must present winning odds in a correct and balanced manner and cannot depict gambling as a solution to financial or social problems.
Requirements
Do not exaggerate winning odds or frequency
Do not frame gambling as improving lifestyle or solving debt
Do not use celebrities as winners or social-status proof points
Frame gambling as entertainment rather than income
MKT — Audience
Audience protection: under-18s and vulnerable persons
Bonus & AdsRG CriticalAffiliate Rules
Marketing must not target under-18s through messaging or media selection, and must not appeal to vulnerable persons.
Requirements
Vet channels, creators and placements for under-18 audience share
Avoid cartoon characters, youth-culture references and teen-coded aesthetics
Suppress sends to ROFUS-flagged players across all channels
Apply the same audience rules to affiliate briefs and creatives
MKT — Bonus caps
DKK 1,000 bonus cap and 10x wagering ceiling
Bonus & Ads
Promotional offers are capped at DKK 1,000 in value, with wagering requirements no higher than 10x and a minimum 60-day completion window. Key terms must be visible alongside the offer.
Requirements
Cap individual bonus value at DKK 1,000
Set wagering requirements no higher than 10x and not applied to promo winnings alone
Allow at least 60 days to complete wagering
Disclose eligibility, exclusions and win caps clearly next to the offer
Offer promotions to at least 100 eligible players, not single-recipient drops
MKT — Disclosures
Required disclosures in every advertisement
Bonus & AdsAffiliate Rules
Every advertisement must state the 18+ age limit, the StopSpillet helpline and a reference to ROFUS, alongside clear operator or licensee identification.
Requirements
Include the 18+ age-limit mark in every creative
Mention StopSpillet as the independent help resource
Reference ROFUS as the self-exclusion route
Identify the operator or licensee clearly
Apply the same disclosures to affiliate placements
MKT — Affiliates
Affiliate oversight
Affiliate RulesBonus & Ads
Operators are responsible for marketing carried out on their behalf by affiliates; the same content, audience and disclosure rules apply to affiliate output.
Requirements
Maintain written affiliate agreements that bind partners to DGA rules
Pre-approve affiliate creatives and placements
Monitor affiliate output on an ongoing basis
Take down non-compliant content promptly on detection
Publish a code of conduct for affiliate partners
I
Theme I
Complaints, dispute resolution & enforcement
How player complaints move through the operator, Spillemyndigheden and the National Tax Tribunal, and how DGA's public naming of rulings and fines from 1 July 2024 changes the reputational stakes of non-compliance.
3 standards3 player-flagged
100%
player-flagged
Regulatory risks this theme addresses
Lacking a documented complaints procedure or missing DGA escalation signposting
Non-cooperation with DGA inquiries
Being publicly listed among the DGA's ruled-against operators
Complaints and enforcement obligations 3
Complaints — Operator
Operator internal complaints procedure
Player Rights
Licence holders must publish a documented complaints procedure and handle complaints within a reasonable time, retaining a complaints log for DGA review.
Requirements
Publish a plain-language complaints procedure on the operator site
Acknowledge and resolve complaints within stated service levels
Keep a complaints log with timestamps and dispositions
Signpost escalation routes when a complaint is not resolved
Complaints — DGA / Tribunal
Escalation to the DGA and National Tax Tribunal
Player Rights
Players dissatisfied with the operator may complain to Spillemyndigheden on licensing or regulatory matters, and DGA decisions may be appealed to the National Tax Tribunal (Landsskatteretten).
Requirements
Inform players of the DGA complaint route and contact details
Cooperate fully and promptly with DGA inquiries
Inform players of the right to appeal DGA decisions to Landsskatteretten
Publish complaints contact details alongside support channels
Enforcement — Public listing
Public listing of rulings and fines (from 1 July 2024)
Player Rights
Since 1 July 2024, court rulings and fines against licensed operators are published on the DGA site for five years.
Requirements
Treat public listing as a reputational sanction, not only a fine
Reflect rulings in integrity disclosures to counterparties
Factor the register into supplier and partner due diligence