Cross-Channel Self-Exclusion: How Six Regulators Handle Land-Based to Online Exclusion Inheritance
Six regulators, six approaches to cross-channel self-exclusion. See which regimes create genuine barriers between channels and where the gaps leave operators exposed.
When a player registers a self-exclusion at a land-based casino and then opens an account on a licensed online platform the following week, what obligation does the online operator have? The answer depends entirely on which regulator’s framework governs both channels and whether those channels are connected by statute, a shared database, or nothing at all. Six of the world’s active licensing regimes take materially different positions on this question, and the divergence has direct consequences for compliance architecture, data-sharing arrangements, and the inherited-exclusion obligations that operators must manage at onboarding.
Two Models, One Problem
The fundamental design choice facing any regulator is whether to operate a single unified exclusion register that covers all licensed gambling verticals or to maintain separate channel-specific schemes and require operators to coordinate between them. The centralised model produces cleaner cross-channel protection but requires significant infrastructure investment and statutory authority to compel land-based and online operators to share data. The fragmented model is easier to build incrementally but creates gaps at the channel boundary that a determined player can exploit and that regulators increasingly treat as operator failures.
Where a regulator operates a single unified register, the operator’s channel-spanning obligation is clear, where it does not, the compliance gap is the operator’s problem to solve.
Germany’s OASIS system and Sweden’s Spelpaus represent the clearest examples of the centralised model. France’s Interdiction Volontaire and Spain’s RGIAJ operate similarly in principle, though each carries channel-boundary complications that operators in those markets must map carefully. The United Kingdom’s framework sits in a structurally separate category: GAMSTOP covers remote gambling and local multi-operator schemes cover land-based venues, but the two systems are not automatically linked. Ontario’s BetGuard, launched in May 2026, covers only the regulated online market. The MGA imposes no mandatory cross-operator or cross-channel scheme at all. Each of these positions carries distinct operator obligations and distinct enforcement exposure.
UKGC: Parallel Schemes With No Automatic Bridge
The UK Gambling Commission’s Licence Conditions and Codes of Practice contains two distinct regimes that address multi-operator self-exclusion, and they operate in parallel rather than in tandem. Compliance officers holding both remote and non-remote licences under the UKGC will find a detailed breakdown of all LCCP obligations in the UKGC LCCP explorer.
Social Responsibility Code Provision 3.5.5 governs remote multi-operator self-exclusion. It requires all remote gambling licensees, with limited exceptions for ancillary remote lottery licences, to participate in GAMSTOP, the national online self-exclusion scheme. The Commission made participation mandatory in March 2020. A 2023 consultation extended the GAMSTOP obligation to licensees that accept bets by telephone and email, closing a gap that had allowed some remote betting operators to argue they fell outside the online scheme’s scope.
Social Responsibility Code Provision 3.5.6 governs non-remote multi-operator self-exclusion. It applies to all non-remote casino, bingo, and betting licensees plus adult gaming centre operators. Under 3.5.6, when a licensee enters a self-exclusion agreement with a customer at a land-based premises, it must offer that customer the ability to also self-exclude from facilities for the same kind of gambling offered in their locality by other licence holders, through participation in one or more available local multi-operator self-exclusion schemes. Ordinary Code Provision 3.5.7 directs these same licensees to contribute to and participate in the development of such local schemes.
The structural gap is what is absent from both codes: neither 3.5.5 nor 3.5.6 requires that a GAMSTOP registration automatically propagate to local land-based schemes, or vice versa. A player who self-excludes via GAMSTOP is blocked from all participating online operators but is not automatically enrolled in a land-based multi-operator scheme. A player who excludes at a land-based premises is enrolled in the local non-remote scheme but retains online access unless they separately register with GAMSTOP. Operators holding both remote and non-remote licences must maintain distinct compliance processes for each channel and cannot rely on one registration to satisfy both obligations.
LCCP self-exclusion timeline: Under SR Code 3.5.4, self-exclusion must remain in place for a minimum of seven years after the initial period ends, unless the customer takes positive action to resume gambling. Re-engagement must be by phone or in person, online re-registration is not sufficient. No marketing material may be sent until the customer has affirmatively requested it, regardless of the exclusion period’s nominal expiry.
Source: UK Gambling Commission, Licence Conditions and Codes of Practice, SR Codes 3.5.4, 3.5.5, 3.5.6, and Ordinary Code 3.5.7, version effective 6 April 2026.
Sweden: Spelpaus as a True Cross-Channel Instrument
Sweden’s Gambling Act (Spellagen 2018:1138) established Spelpaus as the national self-exclusion register following the 2019 licensing reform, and it is the closest European equivalent to a genuinely channel-spanning instrument among the six regulators covered here. All licensed operators, online casino, sports betting, and land-based commercial gambling, must check Spelpaus before permitting play, creating a statutory bridge between channels by design rather than by operator discretion.
Spelinspektionen formalised the technical obligations through SIFS 2026:3, decided on 23 April 2026 and entering into force on 1 August 2026. The regulation assigns each licensee a unique Actor ID and API Key, which are mandatory credentials for all Spelpaus queries. Three trigger events require a mandatory check: before sending any direct marketing communications (using a dedicated marketing API endpoint), at new player registration, and at each login attempt (using a distinct login API endpoint). A check is considered legally complete only once it definitively confirms whether the individual is or is not excluded, an incomplete or inconclusive response does not satisfy the obligation.
Spelpaus registrations exceeded 134,500 individuals as of the SIFS 2026:3 implementation period, a figure that underscores the scale of the infrastructure operators must query in real time. Spelinspektionen’s channelisation data also reveals a compliance-related tension: players who are self-excluded under Spelpaus are among the primary users of unlicensed offshore platforms, with those seeking access to Spelpaus-blocked licensed operators accounting for a measurable share of Sweden’s 84% licensed-market channelisation rate reported for 2025. The cross-channel design of Spelpaus creates pressure on channelisation as a side effect, a regulatory trade-off that Spelinspektionen has acknowledged.
For operators holding licences under Sweden’s land-based framework (LIFS 2018:6) as well as an online licence, the single Spelpaus database means that a registration made at a physical casino is reflected in the same register queried by online operators. The technical integration obligations under SIFS 2026:3 apply specifically to licensees required to register players under Chapter 12 §1 of Spellagen. Operators uncertain whether their specific licence category falls within this scope must seek written clarification from Spelinspektionen before the 1 August 2026 deadline. A detailed breakdown of SIFS 2026:3’s five substantive provisions is available in the Spelinspektionen SIFS 2026:3 analysis on this site.
France: Interdiction Volontaire and Its Cross-Channel Reach
How does France’s Interdiction Volontaire work across channels?
The Interdiction Volontaire de jeu is a voluntary self-exclusion mechanism administered by the ANJ (Autorité Nationale des Jeux). Registration prohibits access to both physical casinos and clubs de jeux and to all ANJ-licensed online gambling: sports betting, horse racing, and poker. A single registration covers both channels by statutory design. By end of 2023, more than 58,000 individuals were registered in the system, with the ANJ’s operator obligations framework requiring all licensed online operators to query the device before permitting account activity.
The ANJ’s obligations framework makes clear the dual-channel reach: online operators must prevent access by persons inscribed in the Interdiction Volontaire file, and physical casino operators are independently subject to Ministry of the Interior oversight with annual responsible gambling reports submitted to the ANJ college. The channel boundary in France is a regulatory boundary, online is ANJ-supervised, land-based casinos sit under Interior Ministry authority, but the Interdiction Volontaire file itself crosses that boundary.
The ANJ’s enforcement decision of 10 July 2026 (Décision n°2026-031) imposed a €500,000 fine on an unnamed online betting operator for failing to correctly identify and support 29 high-risk players. The investigation covered account data for the period from 1 October 2023 to 31 March 2024. Six of the 30 highest-risk players identified by the ANJ’s scoring model, which considers deposit frequency, betting intensity, loss patterns, and self-exclusion history, were missed entirely by the operator. The ANJ explicitly rejected the operator’s technical objections and held that the duties of identification and accompaniment are independently enforceable obligations, not alternatives.
The ANJ held that identification and accompaniment are separately enforceable: failing on one does not excuse the other, and offering bonuses to high-risk players at the moment of their risk classification is an aggravating factor in any sanction assessment.
Spain: RGIAJ, Federal Online Coverage, Regional Land-Based Complexity
Spain’s Registro General de Interdicciones de Acceso al Juego (RGIAJ) is established under Law 13/2011 as the national prohibition register applicable to online gambling at the federal level. All DGOJ-licensed online operators must query the RGIAJ through the Player Verification Service, which simultaneously confirms whether a customer is registered with the RGIAJ, whether the customer’s data matches a minor, and whether the identity presented corresponds to individuals in the civil registry as deceased. Operators must inform customers of the prohibition on participating in games for persons included in the RGIAJ and must integrate self-exclusion tools into their platforms under the responsible gambling obligations derived from Law 13/2011 and Royal Decree 176/2023 on safer gambling environments.
The cross-channel complication in Spain arises from the constitutional division of gambling regulation. Land-based gambling, casinos, bingo halls, betting shops, and gaming machines at physical premises, is regulated by each of Spain’s 17 autonomous regions, not the DGOJ. Each region maintains its own prohibition registers and responsible gambling requirements. A player who self-excludes via the DGOJ’s RGIAJ has their exclusion enforced at all DGOJ-licensed online operators, but land-based enforcement depends on whether the relevant autonomous region’s own register is checked and whether that region has implemented cross-reference arrangements with the federal RGIAJ.
For operators active in both online and land-based segments, this means simultaneously managing the federal RGIAJ query obligation for online activity and each relevant regional prohibition list for physical premises. The DGOJ is currently consulting on a Draft Resolution introducing a unified mechanism for detecting risky gambling behaviour, derived from Law 13/2011 and Royal Decree 176/2023, which may eventually strengthen the cross-channel data architecture, but no final approval timeline has been confirmed as of mid-2026. Operators active in Spain should consult qualified legal counsel on the status of regional-federal coordination in each autonomous community where they hold premises licences.
AGCO/iGO Ontario: BetGuard, Online Scope, Land-Based Gap
Does Ontario’s BetGuard self-exclusion apply to land-based casinos?
BetGuard, launched by iGaming Ontario on 14 May 2026, is a centralised self-exclusion platform that covers all AGCO-registered online gambling sites in Ontario. Under AGCO Registrar’s Standard 2.14.1, all iGaming Ontario operators must participate in the Centralized Self-Exclusion Program. Operators are prohibited from sending marketing to enrolled players, from permitting account access, and from allowing new account creation by persons on the register. Within two weeks of launch, over 500 individuals had self-excluded through the platform, blocking access across 77 gaming websites operated by 44 licensed operators including the Ontario Lottery and Gaming Corporation’s iGaming brands.
The scope boundary is material: BetGuard covers iGaming Ontario’s regulated online market. The OLG’s land-based casino network, operated under a separate regime, maintains its own self-exclusion programme. A player who self-excludes via BetGuard is not automatically enrolled in the OLG land-based programme. Conversely, a player on the OLG land-based exclusion list is not automatically prevented from creating an account and gambling online with an iGaming Ontario-registered operator. Operators within the iGaming Ontario market must not treat BetGuard registration as evidence that a player is clear of land-based exclusion obligations.
iGaming Ontario has indicated it intends to expand responsible gambling tools and awareness of BetGuard among at-risk communities, and the AGCO committed to reviewing individual site self-exclusion rules within 12 months of the CSE programme launch. Whether a formal cross-channel bridge to OLG’s land-based exclusion register will emerge within that window remains an open question. Compliance teams at operators with both online iGaming Ontario registration and land-based presence in Ontario should establish internal protocols to cross-check both lists at onboarding.
Source: AGCO Registrar’s Standards for Internet Gaming, Standard 2.14.1, Centralized Self-Exclusion Program, iGaming Ontario BetGuard launch, May 2026.
MGA: Operator-Level Self-Barring With No Cross-Channel Mandate
The Malta Gaming Authority’s Player Protection Directive (Directive 2 of 2018, made under article 7(2) of the Gaming Act, Cap. 583) requires all B2C licensees to offer players the ability to self-exclude for either a definite or an indefinite timeframe. The ability to self-exclude must be simple and easily accessible. Self-barring under the MGA framework is operator-specific: a registration with one licensee does not propagate to other MGA licensees, and there is no national Maltese self-exclusion register that operators must query.
The MGA’s approach reflects a deliberate structural choice. Malta’s B2C licences authorise the provision of gambling services globally from a Maltese base, and many MGA licensees operate purely online without any land-based presence in Malta. A national cross-channel register would add significant infrastructure obligations for this population of licensees with limited practical player-protection benefit in Malta itself. The MGA’s Commercial Communications Committee Guidelines require that marketing communications not be sent to players the authorised person knows, or reasonably should have known, are in a self-exclusion period, with a 24-hour grace window after the self-exclusion request. The obligation rests on the individual licensee’s own records, not on a shared register.
For operators holding MGA licences alongside licences from regulators with mandatory national registers, UKGC, Spelinspektionen, or DGOJ, the absence of a Maltese cross-channel requirement creates a compliance architecture asymmetry. Players excluded under GAMSTOP cannot access UK-licensed online products, but if the same operator holds an MGA licence targeting a non-UK jurisdiction, the MGA licence’s self-exclusion record is siloed to that brand. Operators in this position must build manual or automated data-sharing workflows between licences to prevent a player excluded at one brand from accessing another brand in the same group.
Regulatory Comparison: What Each Model Requires at Onboarding
| Regulator | Register / Scheme | Channel Scope | Operator Query Obligation at Login | Cross-Channel Automatic Propagation |
|---|---|---|---|---|
| UKGC (online) | GAMSTOP | Remote gambling only | Yes, mandatory participation (SR Code 3.5.5) | No, separate from land-based schemes |
| UKGC (land-based) | Local multi-operator schemes | Non-remote premises, locality-based | Yes, participation mandatory (SR Code 3.5.6) | No, separate from GAMSTOP |
| Spelinspektionen | Spelpaus (SIFS 2026:3) | All licensed verticals including land-based | Yes, real-time API check per login (effective 1 Aug 2026) | Yes, single register, all channels |
| ANJ (France) | Interdiction Volontaire | Online + casinos/clubs de jeux | Yes, mandatory query before account access | Yes, single file, dual-authority enforcement |
| DGOJ (Spain) | RGIAJ | Federal online, regional land-based separately | Yes, via Player Verification Service (Law 13/2011) | Partial, online federally, land-based by region |
| AGCO / iGO (Ontario) | BetGuard (Standard 2.14.1) | iGaming Ontario online only | Yes, mandatory operator participation | No, OLG land-based is a separate programme |
| MGA (Malta) | No national register | Operator-brand level only | No, operator’s own records only | No, no cross-operator or cross-channel mandate |
Operator Obligations on Inherited Exclusions
The concept of an “inherited exclusion,” where an operator must act on an exclusion not generated within its own system, arises directly from cross-channel and cross-operator register design. Where a register is mandatory and centralised, every operator within scope inherits every registration on the register, irrespective of which operator or channel generated it. Where a register is operator-specific or siloed to one channel, inheritance does not exist as a formal regulatory concept.
The practical compliance obligations differ sharply between these models. Under Spelpaus and Germany’s OASIS system, an operator must treat any register hit at login as an inherited exclusion and deny access immediately. OASIS, Germany’s cross-channel central exclusion database, accumulated nearly 350,000 registrations in its first four years, reflecting the scale of inherited obligations German licensees manage in real time. Under GAMSTOP, a hit at registration reflects an exclusion registered by any participating online operator: the inheriting operator did not generate it and has no independent judgment to exercise. Under the MGA framework, no inherited exclusion exists unless the operator has shared data contractually with another licensee.
The data-sharing architecture required to support inherited exclusion obligations spans three distinct technical layers. Identity resolution requires the operator to match an incoming registration or login attempt against the national register’s records with sufficient accuracy to catch name variations and data entry errors. A 2019 UKGC investigation found that GAMSTOP registrations could be circumvented by minor name variations, an issue that contributed to subsequent improvements in matching logic. Query timing is the second layer: under SIFS 2026:3, the Spelpaus check must occur at login, not as a periodic batch reconciliation. Marketing suppression is the third: across the UKGC, Spelinspektionen, and ANJ frameworks, marketing communications to excluded players are prohibited from the moment of exclusion registration, and operators cannot treat the end of a self-exclusion period as automatic permission to recommence contact.
The inherited-exclusion obligation also raises a data-protection dimension. The processing of self-exclusion data, which is effectively health-related data indicating a person has identified themselves as at risk of gambling harm, attracts heightened sensitivity requirements under GDPR for EU/EEA-licensed operators and equivalent data protection regimes elsewhere. Operators should confirm with qualified legal counsel that their query architecture, data retention periods, and staff access controls are aligned with the data minimisation and purpose limitation principles applicable in each jurisdiction where they query a national register.
The Channelisation Implication
Cross-channel self-exclusion design has a channelisation dimension that regulators are increasingly acknowledging. Spelinspektionen’s 2025 annual channelisation report identified self-excluded players, those blocked from accessing any licensed operator’s platform, as among the primary users of unlicensed offshore gambling sites. Germany’s OASIS system produces the same effect: queries for “casino ohne OASIS” in German search results return unlicensed operators specifically marketing to players who want to circumvent the central exclusion check. A robust cross-channel register, by closing every licensed access point, may push a population of at-risk players toward unregulated channels where no responsible gambling safeguards apply at all.
This tension does not argue for weaker exclusion architecture. It argues for regulators to address cross-channel exclusion design alongside channelisation enforcement. France’s ANJ has stated explicitly that anti-black-market efforts and player protection obligations must advance in tandem. The practical implication for operators is that robust compliance with inherited exclusion obligations is a necessary component of a well-run RG programme, and that the residual question of where excluded players go is a regulatory problem, not an operator liability. For a detailed overview of how these responsible gambling obligations interconnect across all 17 regulated jurisdictions tracked on this site, the Responsible Gambling Compliance hub provides the full cross-jurisdiction framework.
Key Resources
UKGC, Licence Conditions and Codes of Practice (version effective 6 April 2026), Social Responsibility Codes 3.5.4, 3.5.5, 3.5.6, and Ordinary Code 3.5.7. Available at gamblingcommission.gov.uk.
Spelinspektionens Författningssamling SIFS 2026:3, decided 23 April 2026, in force 1 August 2026. Full text at spelinspektionen.se. Technical API specifications for Spelpaus integration.
MGA Player Protection Directive, Directive 2 of 2018, made under article 7(2) of the Gaming Act, Cap. 583 of the Laws of Malta, in force 1 August 2018. Available at mga.org.mt.
AGCO Registrar’s Standards for Internet Gaming, Standard 2.14.1 (Centralized Self-Exclusion Program). Current version available at agco.ca. See also iGaming Ontario’s BetGuard platform documentation.
ANJ, Obligations des opérateurs / Interdiction volontaire de jeu. Primary obligations framework available at anj.fr. Enforcement decision Décision n°2026-031 du 10 juillet 2026.
DGOJ, Gambling Laws and Regulations Report 2026 (Spain), Chambers and Partners / ICLG. Covers RGIAJ obligations under Law 13/2011 and Royal Decree 176/2023. See also DGOJ Player Verification Service documentation at ordenacionjuego.es.
Matt Denney
Editorial · gamingcompliance.io
Reads the primary source so you don't have to. Fifteen years inside iGaming compliance: operator, supplier, and crown-corporation lottery.
The Tuesday brief, every week.
One email. Every regulator change we surface, every standard we re-index, every enforcement decision we read. No marketing, no fluff.
Unsubscribe with one click. We'll never share your address.