GICNT Registry · Certified Operators · Compliance Reports · Standards
EST. 2019
gicnt.org
Global iGaming Compliance & Trust
Independent Standards & Certification Authority
ISO 27001 Aligned FATF Observer UN Global Compact
GICNT's mission is to establish and uphold global standards for responsible, transparent and fair iGaming operations — protecting players, enabling regulators, and certifying operators who meet the highest standards of compliance. Our certification is not paid. It is earned.

Responsible Gambling Tools: Regulator Mandates Compared

Tools for responsible gambling stopped being an operator design choice in the largest regulated markets several years ago. The UK Gambling Commission, Germany’s GGL, the Dutch KSA, Sweden’s Spelinspektionen and Ontario’s AGCO each prescribe which controls must exist, how the gambling system enforces them and who fixes the number. The divergence is sharpest on that last point, and it decides how much of the work sits with the player.

What Counts as a Responsible Gambling Tool Under GICNT-PP

Four families of control sit under the heading. Pre-commitment covers deposit, loss, stake and time limits set before or during play. Interruption covers reality checks, session displays, time-outs and forced breaks. Exclusion covers site-level schemes and national or provincial registers. Product constraints cover the rules that apply whether or not the player touches anything: stake caps, spin speed, autoplay bans.

The certification baseline sits in the player protection requirements, which treat something as a responsible gambling tool only when the gambling system enforces it. A limit the player can breach by depositing through a second payment method fails the test. So does a self-exclusion that stops marketing but leaves the account reachable. Assessors look for three things: the control exists, the platform blocks the action, and the operator can produce the log showing that it did.

How the UKGC Requires Deposit Limits and Reality Checks

Great Britain sets no monetary ceiling. Instead the Commission dictates the mechanics of limit setting through the Remote Gambling and Software Technical Standards, tightened under the 2023 white paper and in force since 31 October 2025. The requirements for deposit limits read as follows, with the revised RTS 12B wording taking effect on 30 September 2026:

  • Customers must be prompted to set a limit during registration or at the first deposit, and limit-setting must be presented as the default choice, so declining takes a deliberate action.
  • Gross deposit limits must be offered as a minimum, with durations of 24 hours, 7 days and one month. Where a player sets overlapping periods, the most restrictive applies.
  • Once a limit is reached, the system must block further deposits until the defined period restarts or the player raises the limit.
  • Increases require a cooling-off period of at least 24 hours followed by a positive confirmation. Reductions take effect immediately.
  • Accounts active in a rolling 12 months get a review prompt at least every six months, and customers without limits are re-prompted annually.

Reality checks in online gambling sit in RTS 13. The player chooses the frequency, the screen shows elapsed time since the session began, and the message stays until acknowledged. Slot sessions display elapsed time throughout. None of this is discretionary under the LCCP licence conditions, and the Commission has treated reality check failures as compliance breaches since the requirement first landed in 2016.

Limit-Setting Rules Compared Across Five Regulators

Player protection requirements across jurisdictions split into two models. Britain, Sweden and Ontario force the conversation but let the player pick the number. Germany and the Netherlands set the number themselves and make the player prove they can afford more.

RegulatorWho sets the amountStatutory ceilingRequired durationsRaising a limit
UKGC (Great Britain)Player, prompted before the first depositNone24 hours, 7 days, one month24-hour cooling off plus positive confirmation
GGL (Germany)Player, inside a statutory capEUR 1,000 per calendar month across all licensed operatorsCalendar monthProof of economic capacity, up to EUR 10,000
KSA (Netherlands)Player, with mandatory operator contact above a thresholdNet EUR 700 per calendar month, EUR 300 for players aged 18–23Calendar monthMeans test on structural income
Spelinspektionen (Sweden)Player, before play startsNoneDay, week and monthContact obligation above SEK 10,000 per month
AGCO (Ontario)Player, offered at registrationNone24 hours, 7 days, one month24-hour cooling off

The German cap is the outlier because it follows the player rather than the account. Section 6c of the Glücksspielstaatsvertrag 2021 (State Treaty on Gambling) sets EUR 1,000 per calendar month across every licensed operator, reconciled in real time through the LUGAS limit file. Deposit at one site and the headroom shrinks at all the others. Raising the cap under the GGL compliance regime requires documented income evidence, and the tier between EUR 10,000 and EUR 30,000 is available to no more than 1% of an operator’s active players, measured on a rolling three-month average.

Where Affordability Checking Replaces a Fixed Ceiling

Affordability checking that gambling operators must run has moved from documents to data, and the thresholds are now public. The Commission confirmed Financial Risk Assessments on 7 July 2026 after piloting, and opted for staged rollout rather than a single date. Stage one covers the largest operators only, triggering on net deposits above £5,000 in a rolling 24 hours for customers aged 25 and over, and £2,500 for those under 25. At full implementation the triggers drop to £1,000 over 24 hours or £3,000 over 90 days, covering fewer than 3% of accounts. No start date has been set, and the Commission has said it will take no enforcement action for a failure to act on an assessment during early implementation.

Dutch practice runs the other way round. The ceiling applies by default and the means test is what lifts it, so the check happens before the money moves rather than after a spending pattern emerges. Guidance reissued in July 2026 narrowed what counts: structural income only, with savings, business assets and bonuses excluded, and the calculation documented in the player record. Under KSA licensing and CRUKS rules, an operator that cannot complete the test must block the deposit. Germany takes the same evidentiary line, and the GGL states plainly that a player’s own declaration of income is not sufficient.

Time-Outs and Self-Exclusion Run on Separate Tracks

The safer gambling tools an operator offers on its own site are not a substitute for register integration, and regulators increasingly police the two separately.

  • Ontario requires short breaks in play of one day, one week, one month, two months or three months under Standard 2.13, distinct from formal exclusion.
  • Site-level self-exclusion in Ontario must offer terms of six months, one year and five years, log the player out immediately and stop marketing, with unused funds returned on request.
  • Ontario’s centralised programme, BetGuard, went live on 14 May 2026. Operators must enrol registrants within one hour of registration, stop marketing and cancel and refund outstanding wagers within 24 hours, and keep exclusions enforced when the registry itself is unavailable.
  • Germany routes exclusion through OASIS, checked at login, while Sweden uses Spelpaus and the Netherlands uses CRUKS, verified before a session begins.
  • Canada outside Ontario and Alberta still has no register at all, which is why integration with national self-exclusion registers cannot be assumed as a global control.

Product Controls the Player Never Switches On

Limits depend on a player deciding to use them. Product rules do not, which is why three of these five markets now regulate the game itself.

ControlGreat BritainGermanyOntario
Maximum stake per spin£5, and £2 for players aged 18 to 24EUR 1, raisable to EUR 3 or EUR 5 on conditionsNo cap
Minimum length of a game cycle2.5 seconds5 seconds on average2.5 seconds
AutoplayNot permittedNot permittedNot permitted for slots
Turbo spin and slam stopNot permittedNot permitted, each round starts manuallyNot permitted
Several slots at onceNot permittedNot permittedNot permitted
Forced break in playNone5 minutes after 60 minutes of playNone
Session time and spend displayElapsed time shown throughout a slot sessionNot prescribed in this formNet position required, in Canadian dollars

British stake caps came in on 9 April 2025 at £5 per spin, with the £2 cap for adults aged 18 to 24 following on 21 May 2025. Germany caps virtual slot stakes at EUR 1 under section 22a, and the derogation allowing EUR 3 for players over 21, or EUR 5 after 90 days without addiction indicators plus dedicated monitoring, expires on 31 December 2027. Ontario prescribes no stake ceiling but matches the British pace rules almost exactly, and the AGCO iGaming standards also ban celebratory sound and animation for returns at or below the amount staked.

Monitoring Duties Sit Behind Every Tool

A tool set proves nothing on its own. Each of these regulators pairs the controls with a duty to watch behaviour and act on what the data shows, and the trigger points are specific. The KSA expects monitoring around the clock and intervention within one hour of identifying potentially harmful play. Sweden obliges the licensee to contact any player who sets or raises a limit above SEK 10,000 a month. Germany requires an algorithmic early-detection system, plus dedicated monitoring for anyone granted a raised deposit or stake limit.

Ontario approaches it through risk profiling, requiring operators to flag players at high risk of harm, tailor the intervention to severity and keep live support available around the clock. The common failure that shows up in enforcement is not the absence of a model but the gap between the alert and the action, which is the same gap that detecting markers of harm addresses at the procedural level. An operator that logs a signal and does nothing documented with it has a monitoring system and no duty of care.

Where GICNT-PP Asks for More Than the Local Minimum

Certification is not a licence check, so the responsible gambling tool set is assessed against a single standard rather than against whichever regulator happens to supervise the market. Four differences matter in practice.

  • Coverage travels with the operator. Limit setting, time-outs and exclusion must be available in every market served, including those where no local rule requires them.
  • Enforcement beats availability. A limit that the platform treats as advisory, or one that a second payment route bypasses, is recorded as absent rather than weak.
  • Evidence is part of the control. Assessors ask for the record showing that a deposit was blocked, that a cooling-off ran its course and that marketing stopped when exclusion began.
  • Where no register exists, the operator carries the gap. An operator-level scheme with defined terms and cross-brand reach is expected wherever a national or provincial register is unavailable.

Frequency is the other divergence. Player protection is reviewed on a bi-annual cycle rather than annually, which is shorter than most of the GICNT audit cycles. Tool configuration drifts between releases, and a limit journey that passed in March can fail in September after a checkout redesign nobody flagged as a compliance change.

Questions Operators Ask About Responsible Gambling Tool Requirements

Which Regulators Cap How Much a Player Can Deposit?

Germany and the Netherlands. The German cap of EUR 1,000 a month applies across all licensed operators at once, reconciled through LUGAS. The Dutch thresholds of net EUR 700 and EUR 300 a month apply per operator and lift only after a means test. Britain, Sweden and Ontario mandate the tool but leave the amount to the player.

How Quickly Does a Change to a Limit Take Effect?

Reductions apply immediately in Britain, subject to technical failure. Increases need a cooling-off period of at least 24 hours plus a positive confirmation, and Ontario applies the same 24-hour delay. In Germany and the Netherlands the delay is a function of evidence, since the operator cannot raise the ceiling until the income check is complete.

Are Reality Checks Required Outside Great Britain?

Not in that form. Britain requires a customer-set reality check that must be acknowledged to clear the screen. Germany substitutes a mandatory five-minute break after 60 minutes of play, which interrupts the session whether the player wants it or not. Ontario requires a means of tracking elapsed time and a running net position in slot sessions.

Does an Operator Need Limit Tools Where the Regulator Does Not Require Them?

For certification purposes, yes. GICNT-PP applies the same tool set to every market an operator serves, so a licence in a jurisdiction with no limit-setting rule does not remove the requirement. The assessment looks at what the player can reach and what the system enforces, not at the local floor.

What Happens to Open Bets When a Player Self-Excludes?

In Ontario a site-level exclusion voids and refunds a wager placed before the relevant event starts, while wagers on events already under way stand. Under the centralised programme, operators cancel and refund outstanding wagers within 24 hours of the registry entry, except where the event begins less than 24 hours after registration. Elsewhere the treatment follows the register’s own rules, and Sweden requires remaining funds to be returned without undue delay.