Home  /  News  /  Compliance & AML
Compliance & AMLAugust 2, 2026

Germany Gambling Regulation 2026: What Operators Must Know

A practical overview of Germany's 2026 gambling laws, licensing rules, AML obligations and what they mean for online casino operators.

Germany Gambling Regulation 2026: What Operators Must Know

Germany remains one of the most structurally complex regulated markets in Europe. As of mid-2026, operators holding or pursuing a licence under the Interstate Treaty on Gambling (Glücksspielstaatsvertrag 2021, GlüStV 2021) face a dense set of obligations spanning licensing, responsible gambling, anti-money laundering and advertising. This article distils the operational realities for online casino and sports-betting brands active in, or considering entry into, the German market.

The Regulatory Framework at a Glance

The GlüStV 2021 created a federal licensing structure administered primarily through the Joint Gambling Authority of the States (Gemeinsame Glücksspielbehörde der Länder, GGL), which became fully operational in mid-2023. The GGL issues licences for online slots, online poker and virtual slot machine products, while sports betting continues under a separate permit category. Land-based casinos remain a matter of individual state (Länder) law, meaning operators with both online and retail ambitions must manage a dual-track compliance posture.

Key structural features of the framework include:

  • A monthly deposit limit of EUR 1,000 per player across all licensed online gambling products, enforced via the cross-operator player database OASIS.
  • Mandatory real-time data reporting to GGL on player activity, deposits and self-exclusions.
  • A prohibition on live in-play casino games and an auto-spin ban on slot products.
  • Strict advertising restrictions, including a ban on television and online advertising between 06:00 and 21:00 for casino-type products.

AML and KYC Obligations for Licensed Operators

Germany transposes the EU Anti-Money Laundering Directives through the Money Laundering Act (Geldwäschegesetz, GwG). Online gambling operators licenced by the GGL are classified as obliged entities under the GwG and must implement a full risk-based compliance programme. In practice this means:

  • Customer due diligence (CDD) at account registration, with enhanced due diligence (EDD) triggered by risk indicators such as high transaction volumes or politically exposed person (PEP) status.
  • Ongoing transaction monitoring calibrated to the EUR 1,000 deposit ceiling and the OASIS self-exclusion register checks.
  • Appointment of a dedicated Money Laundering Reporting Officer (MLRO) who is notifiable to the GGL and the relevant supervisory authority.
  • Suspicious activity reporting to the Financial Intelligence Unit (FIU) Germany via the goAML system.

One practical tension operators encounter is the intersection of the deposit limit framework with AML thresholds. Because the EUR 1,000 monthly cap is relatively low, source-of-funds checks that would ordinarily trigger at higher deposit values must be recalibrated to the German risk context. An operator using a generic, jurisdiction-agnostic AML policy will routinely either over-block legitimate players or under-screen higher-risk profiles.

Licensing Timelines and Ongoing Compliance Costs

The GGL has made incremental progress in processing applications since it assumed responsibility from the Saxony-Anhalt authority. Operators report that initial licensing decisions for online slots can take between six and fourteen months depending on application completeness and the applicant's prior regulatory history. Conditional approvals, where a licence is granted subject to remediation of specific technical or compliance gaps, have become a common intermediate outcome.

Ongoing compliance carries material cost. Operators must budget for annual GGL supervisory fees, continuous OASIS integration maintenance, regular audits of responsible gambling tooling and periodic updates to AML risk assessments as the GGL publishes revised guidance.

Implications for Operators Considering Germany

Germany is a large, high-value market with a well-documented appetite for online casino products. However, the regulatory architecture rewards operators who invest in purpose-built compliance infrastructure over those who attempt to adapt generic frameworks. Specific areas that consistently cause difficulty include:

  • OASIS integration and real-time self-exclusion checking at login and deposit stages.
  • Product compliance for slot titles, particularly the five-second spin interval and EUR 1 maximum stake rules.
  • Advertising pre-approval processes and the restricted hours regime.
  • Substance requirements: the GGL expects meaningful operational presence or a demonstrable relationship with a locally-responsible compliance officer.

The OnlineShine Perspective

At OnlineShine, we support operators preparing for or already operating within the German framework by providing MLRO-as-a-service, AML policy localisation and GGL application support. The German market is not a jurisdiction where a copy-paste compliance approach survives regulatory scrutiny. Operators who treat Germany as a high-effort, high-reward market, and who invest accordingly in their compliance and player-protection infrastructure, are best placed to maintain their licence and avoid the reputational and financial costs of enforcement action.

Reported in the industry press; originally covered by Google News: online casino AML. Analysis and commentary by OnlineShine.io.
FAQ

Frequently asked questions

Which authority licenses online casino operators in Germany?

The Gemeinsame Glücksspielbehörde der Länder (GGL), the Joint Gambling Authority of the States, is responsible for issuing and supervising online gambling licences in Germany under the GlüStV 2021. It became the sole competent federal licensing body for online gambling products from mid-2023, replacing the interim arrangement managed through Saxony-Anhalt.

What is the OASIS database and why does it matter for AML compliance?

OASIS is Germany's centralised cross-operator player database used to enforce self-exclusions and the monthly EUR 1,000 deposit limit across all licensed online gambling products. Operators are legally required to check OASIS in real time at login and at each deposit attempt. From an AML perspective, OASIS data also informs player risk profiling, because unusual deposit patterns relative to the cap can serve as a trigger for enhanced due diligence.

Do German-licensed online casino operators need a dedicated MLRO?

Yes. Under the German Money Laundering Act (GwG), online gambling operators are obliged entities and must appoint a Money Laundering Reporting Officer (MLRO). The MLRO must be notified to both the GGL and the relevant supervisory authority, and is personally responsible for filing suspicious activity reports to the German Financial Intelligence Unit via the goAML platform.

How long does it take to obtain an online casino licence from the GGL?

Based on industry experience as of 2026, initial GGL licensing decisions for online slots typically take between six and fourteen months from submission of a complete application. Conditional approvals, where a licence is granted subject to the operator remedying specific technical or compliance deficiencies, are a common outcome and can extend the timeline before full commercial operation is permitted.

Keep reading

Related articles

Show us one brand.
We will find the leaks.

Book a 30-minute teardown. We walk through one of your brands and show you exactly where revenue, retention or compliance is slipping, no obligation.