Dirección General de Ordenación del Juego Licence requirements, fees and the Spanish gambling regime

The Dirección General de Ordenación del Juego is the national regulator of state-wide gambling activity in Spain. It was established by Law 13/2011 of 27 May 2011, the foundational Spanish Gambling Act that opened the country’s online gambling market to private operators for the first time. The DGOJ today sits within the Ministry of Consumer Affairs, reporting through the General Secretariat for Consumer Affairs and Gambling, and is the authority responsible for the regulation, licensing, supervision, control and sanctioning of all state-level gambling activity in Spain.

The Spanish regulatory architecture has two layers. The DGOJ regulates state-wide online gambling and has national jurisdiction over the products it licenses. Land-based gambling (commercial casinos, bingo halls, slot arcades and the like) is regulated by Spain’s seventeen Autonomous Regions, each of which maintains its own land-based gambling authority. The DGOJ coordinates with the Autonomous Regions and supervises the points where the two regimes meet, but it does not itself license land-based premises. State-owned lottery products are operated by SELAE (Sociedad Estatal de Loterías y Apuestas del Estado) and ONCE (Organización Nacional de Ciegos Españoles); both are inside the broader DGOJ supervisory orbit but operate on a different statutory footing.

Governance is direct ministerial. The DGOJ is led by a Director General appointed through the Ministry of Consumer Affairs. The Consejo de Políticas del Juego (Gambling Policy Council) coordinates the national framework with the Autonomous Regions, and the DGOJ’s decisions are subject to administrative appeal and, ultimately, to judicial review by Spanish administrative courts. That judicial review is not theoretical: in April 2024 the Supreme Court annulled key parts of the advertising restrictions imposed by Royal Decree 958/2020 on the basis that the underlying primary statute did not provide sufficient legal cover for the executive-level restrictions, a ruling that materially reshaped the Spanish advertising perimeter and that the DGOJ and the Ministry are still working to address through primary legislation.

Operators preparing for Spanish market entry should understand the DGOJ as a national consumer-protection-aligned regulator with a clear statutory remit, an active and rapidly escalating enforcement programme, and a regulatory framework that has been updated repeatedly over the last three years: Royal Decree 958/2020 on advertising, Royal Decree 176/2023 on safer gambling environments, and a Draft Royal Decree (currently in consultation as of 2025) on cross-operator deposit limits and standardised risk-detection.

A general licence is the operator-level authorisation. It runs to a ten-year term and is renewable. There are three categories of general licence and an operator must hold the appropriate general licence before applying for any singular licence in the products covered by that category.

Singular licences are product-level authorisations granted under a general licence. They run to three to five years depending on the product and are also renewable. An operator may hold multiple singular licences under a single general licence; each must be separately applied for and registered.

An operator should model the cost line as a two-part stack. The fixed regulatory cost is modest: under €100,000 in year-one application, certification and registration fees on a typical multi-product application, plus the €2 million financial-guarantee tie-up. The variable cost is large: 20 percent GGR tax (or 10 percent under the Ceuta/Melilla regime) plus the small 0.075 percent DGOJ administrative fee on gross operating revenue. For a high-GGR operator, the Spanish total tax-and-levy load on operating revenue runs at roughly 20 percent of GGR, materially lower than the post-April-2026 UK Remote Gaming Duty (40 percent plus the 1.1 percent statutory levy) and higher than Malta’s current 5 percent gaming-tax line (rising to 10–15 percent under the 1 October 2026 reform).

KYC is required before any deposit or play. Operators verify against the national identity infrastructure and against the RGIAJ in a single workflow. Anonymous play is not permitted; all accounts are linked to a verified DNI or NIE.

The DGOJ’s technical regulation (Reglamento Técnico) sets the system, security and reporting floor. Operators must maintain certified random number generation, secure data hosting (with Spanish localisation for designated record categories), real-time transaction reporting to the regulator, and pre-launch certification by an approved testing lab.

Operators file monthly and quarterly returns to the DGOJ on revenue, player activity, RG metrics and AML exposure, notify key events (changes in ownership, key persons, material technical change), and respond to ad hoc information requests. The DGOJ runs both routine and targeted inspections and audits, and has shown willingness to pursue technical non-compliance as a discrete sanction line (Codere’s €17,500 fine for technical non-compliance is one example).

The 2020 Royal Decree restricted audiovisual gambling advertising to the 1 a.m. to 5 a.m. time slot, banned welcome bonuses targeted at new customers (loyalty bonuses to verified existing customers were still permitted after a thirty-day account age), prohibited sport sponsorship, and restricted the use of celebrities and influencers. Promotion targeted at new customers was forbidden; promotion targeted at existing verified customers was permitted only under tight conditions. The regime was widely cited as among the strictest gambling-advertising frameworks in Europe and was seen as a model by other regulators reviewing their own rules.

In April 2024 the Spanish Supreme Court issued Ruling 527/2024, nullifying key articles of Royal Decree 958/2020 on the basis that the underlying primary statute (Law 13/2011) did not give the executive sufficient legal cover for the breadth of restrictions imposed at decree level. The reversal reinstated welcome bonuses to new customers, celebrity and influencer endorsements, sport sponsorship, and the broader set of digital advertising placements that had been restricted under the 2020 decree.

Standing obligations on operators remain: no targeting of minors, no portrayal of gambling as risk-free or as a means of generating income, mandatory responsible-gambling messaging in commercial communications, and operator accountability for affiliate-led promotion. Sanctions on licensed operators in 2024 and 2025 for advertising non-compliance (Codere’s €100,000 Facebook-ad fine being the most-cited example) demonstrate that the regulator continues to enforce against the standing obligations even with the 2020 decree partially annulled.

The Registro General de Interdicciones de Acceso al Juego was established under Law 13/2011 and has been operated by the DGOJ since 2015. It is the national self-exclusion register and registration takes effect throughout Spain: any licensed online operator must block access by a registered person, and where the autonomous region requires identity verification at the door of a land-based venue, in-person access is also blocked. Enrolment is immediate; the minimum term is six months before a removal request can be made in person.

The DGOJ has progressively modernised enrolment paths. The web portal at ordenacionjuego.es accepts digital-certificate, Cl@ve PIN and form-based registration; the Stop Juego mobile app, supported by the DGOJ, provides a digital enrolment path that automatically registers the user with the RGIAJ. The register has seen double-digit growth in registrations in recent years as awareness has improved and the digital paths have lowered the friction to enrol.

Article 36 of Royal Decree 1614/2011 requires every licensed operator to maintain daily, weekly and monthly deposit limits at the account level for each participant. The default limits are operator-set within the regulatory floor; players can lower the limits themselves and the operator must honour reductions in real time. Increases are subject to a cooling-off window.

The 2025 Draft Royal Decree amending RD 1614/2011 introduces a voluntary cross-operator deposit cap that would allow a player to set a single aggregate ceiling across all licensed operators with whom they hold accounts. The draft is expected to be approved and published in Q3 2025 with a twelve-month transition period before entry into force. The cross-operator cap addresses one of the most-cited Spanish RG gaps: a player who tops up to a per-operator monthly limit at one site can simply move to a second licensed site and start over.

Royal Decree 176/2023 of 14 March establishes the safer gambling environments framework and assigns the DGOJ responsibility for developing a mandatory standardised mechanism for detecting risky gambling behaviour. The 2025 Draft Resolution published by the DGOJ sets out the common criteria and thresholds operators will use to flag a "risk player": indicators include excessive spending, large wins or losses in a defined period, prolonged gaming sessions, sustained activity over consecutive days, and behavioural patterns that suggest loss of control. When the mechanism becomes mandatory, every licensed operator will apply the same detection methodology and trigger the protective measures prescribed by RD 176/2023 to the flagged player.

Three patterns stand out across the 2024 and 2025 record. First, the financial total is dominated by very-serious-offence sanctions on unlicensed supply. The €5 million fine plus two-year operating ban is the DGOJ’s standard penalty for offering gambling without a Spanish licence to Spanish residents, and the regulator has shown willingness to apply it across multiple operators in a single sanction round. Second, licensed-operator sanctions are now a routine supervisory tool rather than a rare event. The €3.5 million coordinated round across 26 licensed operators in early 2025 confirmed that the regulator will use the same mechanism against the licensed base when a thematic compliance failing is identified. Third, the perimeter is extending to novel product types: the 2026 Polymarket and Kalshi blocking actions targeted prediction-market platforms operating without a Spanish gambling licence, a product type the regulator has formally treated as gambling and therefore as subject to the same supply restrictions as more traditional unlicensed casino or sportsbook offerings.