Skip to content
2,151 standards indexed across 19 jurisdictions View the Atlas
3 hubs live · 3 more in the pipeline See all compliance topics
Daily news + multi-week series Browse all insights
3 tools live · 4 interactive tools in development Roadmap
Responsible Gambling · Player Protection

iGaming Responsible Gambling
Compliance

Self-exclusion architectures, mandatory limits, customer-interaction triggers and the safer-gambling rulebooks across 17 regulated markets. Primary-source guidance on what you must do, when, and how.

2
Architectural models
17
Jurisdictions covered
10
RG topic streams
May 2026
Last updated

Two architectural models

Two Models. One Player-Protection Obligation.

Every regulated iGaming market protects players through either a national cross-operator self-exclusion register or an operator-level self-exclusion mechanism. The two architectures produce materially different operator obligations, supervisory expectations and integration costs. Both demand mandatory deposit and time limits, reality checks, customer-interaction triggers and a designated responsible-gambling officer.

National Self-Exclusion Register Model

Used by: UK (GAMSTOP), Denmark (ROFUS), Sweden (Spelpaus), Germany (OASIS), Spain (RGIAJ), France (Interdiction Volontaire), Colombia (single-CC register), Brazil (centralised under Portaria 2.579/2025)

Cross-operator register operated by the regulator or a state-appointed body
Mandatory real-time register check Every account opening and every login must query the national register
Cross-operator exclusion A single exclusion blocks every licensed operator in the jurisdiction; no operator-level workarounds
Minimum exclusion terms set by regulation UK 6 months / 1 year / 5 years; Denmark 1 month to permanent; Sweden default 12 months
Cross-channel scope where applicable GAMSTOP, RGIAJ, Spelpaus and OASIS extend to operator-side marketing communications
Reactivation requires a regulator-mediated step Self-exclusion cannot be lifted unilaterally by the operator
Audit trail mandatory Operators must evidence every register query and every blocked attempted registration
Explore national-register articles

Operator-Level Self-Exclusion Model

Used by: Curaçao (post-LOK), MGA (Maltese B2C), most US states (NJ DGE, MGCB, PGCB, OCCC), Peru (DGJCMT MINCETUR), Ontario (AGCO BetGuard transitioning to cross-operator)

Self-exclusion lists maintained by each licensed operator under regulatory standards
Operator-maintained exclusion list Each operator runs its own register against its own customer base; no cross-operator query
Mandatory standardised minimums Regulator-set minimum terms (e.g. 72 hours / 30 days / 1 year / 5 years / lifetime); operator cannot offer shorter
No cross-operator block by default Self-excluded bettor can still register with a different licensed operator in the same jurisdiction unless a national register exists
Marketing-suppression mandatory Exclusion triggers immediate cessation of all marketing communications by that operator
Customer-interaction triggers separately required Operators must independently detect markers of harm and intervene; not solely register-driven
Audit trail mandatory Operators must evidence exclusion registration and marketing-suppression compliance
Explore operator-level articles

Quick reference

Key Thresholds at a Glance

Side-by-side comparison of mandatory reporting thresholds, program requirements, and compliance obligations across both frameworks.

Obligation 🏛️ National Register Model 🏢 Operator-Level Model
Self-exclusion architecture Cross-operator register operated by the regulator Per-operator register maintained under regulator standards
Register query at login Mandatory real-time check against national list Operator queries its own customer base only
Cross-operator block Yes, by design (single exclusion blocks every licensed operator) No (unless a national list exists separately)
Minimum exclusion term Set by regulation (e.g. UK 6 months / 1 year / 5 years; Sweden 12-month default) Set by regulation (e.g. NJ DGE 1 year / 5 years / lifetime)
Reality checks / session limits Mandatory under social-responsibility code Mandatory under operator standards
Mandatory deposit limit Mandatory in most national-register markets (DE, FR, ES, SE pending; UK affordability framework) Voluntary tools mandatory; default cap by operator under regulator standards
Customer-interaction triggers Codified in operator licence conditions plus algorithmic detection Operator-defined risk-detection mandated by the regulator standard
Marketing suppression on exclusion Mandatory across every licensed operator in the jurisdiction Mandatory by the operator on whose list the bettor self-excluded

⚠ Jurisdiction-specific rules apply within each model; the table above identifies the architectural differences, not the local rule for any individual operator decision. Always verify against the regulator instrument that applies. Not legal advice.

Browse by topic

Coverage by Topic

Each topic section below curates articles from the Responsible Gambling pillar. Click a chip to jump straight to that topic.

Self-Exclusion Registers

National vs operator-level self-exclusion architectures: GAMSTOP, ROFUS, Spelpaus, RGIAJ, Interdiction Volontaire, Registro de Personas Prohibidas and cross-channel mechanics.

6

Deposit, Loss & Time Limits

Mandatory affordability mechanics: deposit limits, loss limits, time limits, single-bet caps and the regulator-set vs operator-set frameworks.

2

Reality Checks & Session Controls

Session-time notifications, net-position reminders, cooling-off, take-a-break, mandatory pause mechanics.

0

No articles published yet — first article on Reality Checks & Session Controls is coming. Check back soon.

Problem-Gambling Markers

Behavioural-monitoring markers of harm, PGSI screening, at-risk-bettor identification and disordered-gambling indicators.

0

No articles published yet — first article on Problem-Gambling Markers is coming. Check back soon.

Customer Interaction

Mandatory operator-to-bettor intervention triggers, outbound contact, safer-gambling messaging and the customer-interaction code provisions.

0

No articles published yet — first article on Customer Interaction is coming. Check back soon.

RG Marketing & Advertising

RG-protective advertising standards: whistle-to-whistle bans, vulnerable-customer targeting prohibitions, bonus disclosure, mandatory safer-gambling logos.

0

No articles published yet — first article on RG Marketing & Advertising is coming. Check back soon.

VIP & High-Value Customer Rules

VIP-scheme controls, enhanced affordability for high-value customers, account-management restrictions and the VIP-ban regimes.

0

No articles published yet — first article on VIP & High-Value Customer Rules is coming. Check back soon.

RG Officer & Training

Mandatory RG officer designation, senior-management responsibility, RG training cadence and policy-document requirements.

0

No articles published yet — first article on RG Officer & Training is coming. Check back soon.

Treatment, Helpline & Levy

Treatment funding, statutory levy, helpline signposting, GamCare / BeGambleAware / Adictel partner integration.

0

No articles published yet — first article on Treatment, Helpline & Levy is coming. Check back soon.

Cross-Channel & Cross-Operator

Cross-channel land-based-to-online RG mechanics, cross-operator player-level data sharing, single-account rules and unified protection frameworks.

4

Corpus

Primary Sources Indexed

Every article in this pillar cites the primary regulatory text directly — not summaries or secondary commentary. The sources below are fully indexed in our compliance corpus.

PCMLTFA (Canada)PCMLTFR SOR/2002-18431 CFR Part 1021 (FinCEN)18 U.S.C. § 1084 (Wire Act)UIGEA 2006FINTRAC Compliance Program GuidanceFINTRAC STR GuidanceFINTRAC LCTR GuidanceFINTRAC PEP / HIO GuidanceFINTRAC KYC GuidanceFinCEN 314(a) / 314(b)

All articles cite primary regulatory text. Updated May 2026. Not legal advice — verify obligations with qualified AML counsel before implementing a compliance program.