Self-Exclusion
A player's binding request to be barred from gambling for a set term, which every licensed operator must check against national registers and enforce across brands.
What it means
A player who self-excluded through GAMSTOP eighteen months ago opens an account with your second UK brand, using a new email and a new phone. He deposits £2,000 over a weekend. Nobody notices until his complaint reaches the Gambling Commission. That's self-exclusion from the operator's side: a standing promise, written into licence conditions, that a player who asked to be kept out stays out. Every brand you run, every device, every marketing list.
The request can be made with you directly (an operator-level scheme) or through a national register that every licensee in the market has to query. The register is the hard part. You don't hold the data, you get a yes or no from a third party, and you're liable if the question never gets asked. Responsible gambling covers a lot of ground; self-exclusion is the one tool where a single miss becomes a licence matter.
National registers
| Market | Register | Who runs it | What the operator must check |
|---|---|---|---|
| UK | GAMSTOP | The National Online Self-Exclusion Scheme Ltd, mandatory for UKGC remote licensees since 31 March 2020 | Query at registration and before each login; suppress all marketing |
| Sweden | Spelpaus | Spelinspektionen | Check at registration and at every login; no direct marketing to registered players |
| Netherlands | CRUKS | Kansspelautoriteit | Check at registration and every login via BSN-based identity; involuntary entries count too |
| Germany | OASIS | Regierungspräsidium Darmstadt, under the GGL | Check at registration and each session; one register for online and land-based |
| Spain | RGIAJ | DGOJ | Check at registration and on an ongoing basis; block bonuses and marketing |
| Italy | RUA | ADM (Agenzia delle Dogane e dei Monopoli) | Check at registration and login; terms of 30, 60, 90 days or indefinite |
| Ontario | Operator-level scheme | AGCO Registrar's Standards, iGaming Ontario | Offer and enforce exclusion on your own sites; a cross-operator program has been on the AGCO roadmap |
What the platform has to do
- Real-time register lookup at registration, before the account exists, not after the welcome email goes out.
- A second lookup at every login (the UK, Sweden, the Netherlands and Germany all expect it), with a hard block, not a soft flag.
- Matching that survives dirty data: name, date of birth, postcode, email and phone variants for GAMSTOP; BSN for CRUKS; ID number for RGIAJ. Pair it with KYC and device fingerprinting so a fresh email doesn't beat the check.
- Marketing suppression inside the register's window: excluded players come off every email, SMS, push and affiliate retargeting list, and stay off.
- Cross-brand enforcement. An exclusion on brand A blocks brands B and C on the same licence, and regulators increasingly expect the same across a group. That's a PAM architecture question: one player identity, many brands.
- Balance handling: pay out what's left, settle open bets under the market's rules, don't hold funds hostage.
- An audit log of every query, response and action with timestamps, because that's the first thing a regulator asks for.
- Failover. If the register API is down, block registrations and logins instead of waving them through.
Enforcement
- UKGC, 2017: 888 paid a £7.8m penalty after a technical failure left more than 7,000 self-excluded customers able to access their accounts on its bingo platform for over a year.
- UKGC, 2018: SkyBet paid £1m. Self-excluded customers had been able to open duplicate accounts, and tens of thousands of excluded customers received marketing emails.
- Spelinspektionen, 2019 to 2020: Genesis Global was sanctioned after Spelpaus-registered players were able to play, and its Swedish licence was later revoked.
The pattern is the same each time. Nobody decided to let excluded players in; a migration, a new brand or a marketing tool skipped the check.
How platforms handle it
In the iGamingHub catalog, the licences listed on a platform's card are a fair proxy for which registers its PAM already talks to. BetConstruct lists UKGC and MGA among its licences, so GAMSTOP and the UK marketing suppression rules are in scope. Digitain carries UKGC plus a Netherlands listing alongside ONJN, which means both GAMSTOP and CRUKS lookups. Delasport shows Netherlands, Denmark and Ontario, so CRUKS, Denmark's ROFUS and the AGCO standards. iGamingHub tracks licences as declared, not integration depth; ask about login-check latency and failover in the RFP.
Common confusions
Self-exclusion is a block the player can't undo during the term. Cool-off (or time-out) is short, 24 hours to six weeks, and lifts by itself. Deposit limits cap money in, not access; in the UK a limit increase needs a 24-hour delay while a decrease applies at once. Reality checks are on-screen reminders of time played and net position. They interrupt, they don't stop. The national register only covers self-exclusion, so the other three still need your own tooling. The responsible gambling tools article walks through the full set, and the UKGC and KSA pieces show how each regulator polices it.