Knowledge · Compliance
Responsible gaming — operator playbook
Every regulated iGaming jurisdiction mandates responsible-gaming tools. This guide covers the controls, integrations and audit trails required to stay compliant.
Updated January 2025 · AS Tech iGaming editorial
Deposit, loss and session limits
Every player must be able to set daily/weekly/monthly deposit, loss and session-length limits. Decreases apply immediately; increases apply after a cooling-off window (24 hours minimum). Store limits in the ledger with a full change history.
Self-exclusion
Players must be able to self-exclude for a fixed period (24h, 7d, 30d, 6mo, permanent). Self-exclusion cannot be reversed before expiry — even by operator staff. Enforce at the wallet level so bets fail regardless of frontend attempts.
Reality checks
Popup or in-frame notifications every 30–60 minutes of session time showing time spent, net loss/win and player action buttons: continue, take a break, self-exclude.
National self-exclusion registers
UKGC-licensed operators must integrate with GAMSTOP; Danish operators with ROFUS; German operators with OASIS; Swedish operators with Spelpaus. On registration and login, hit the register API to block excluded players platform-wide.
Audits and reporting
Regulators require quarterly or annual reports covering: number of players with limits set, self-exclusion events, average session length distribution, RG-related complaints and staff training hours. Auto-generate from the ledger.
Frequently asked questions
Are RG tools optional?+
In regulated jurisdictions (UK, Malta, Denmark, Sweden, Germany, Ontario) they are mandatory. In grey/offshore markets they are best practice.
How fast should limit decreases apply?+
Immediately — no cool-off. Only increases need a cool-off period.
Can players increase their own limits?+
Yes, after the cool-off period. Some jurisdictions (Germany) require an operator review before allowing increases above a threshold.
Is GAMSTOP free?+
Yes — integration is free but mandatory for UKGC operators. API access requires a signed data-sharing agreement.
What about VIP players?+
VIP schemes must include RG affordability checks. UKGC and MGA increasingly audit VIP journeys — poor affordability screening triggers major fines.