Spain is tightening on-line playing fee checks whereas creating a typical system to determine probably dangerous playing behaviour. Royal Decree 813/2026 requires operators to confirm fee possession, whereas the Directorate General for Gambling Regulation (DGOJ) has reopened session on month-to-month player-risk assessments.
The measures have an effect on withdrawals and the therapy of shoppers categorized as probably in danger.
Payment Verification Could Delay Winnings
Royal Decree 813/2026 updates Spain’s anti-money laundering framework beneath Law 10/2010. Published within the Official State Gazette on 10 October, it takes impact on 28 October 2026.
Under Article 21, operators should guarantee deposit and withdrawal strategies belong to the registered account holder. The regulation states that “payment ownership must match the gambling account. Operators must verify that payment methods used for deposits and withdrawals belong to the registered account holder.”
Existing clients have six months to finish verification. They can proceed depositing and playing throughout this era however can’t withdraw winnings till possession checks are happy. The transitional provision states that affected gamers “may not withdraw the winnings they have obtained”.
Operators should terminate contracts with clients who stay unverified after the deadline, notify the DGOJ and return excellent balances, together with withheld winnings, topic to anti-money laundering obligations.
The decree additionally strengthens distant identification requirements and recognises Spain’s nationwide id doc in bodily and digital codecs. Electronic identification and information-retention necessities will apply after an 18-month adaptation interval.
Monthly Risk Assessments Would Become Standardised
The DGOJ has reopened session on a proposal requiring state-licensed on-line playing operators to run the identical automated danger take a look at month-to-month. The session runs from 14 to 22 October 2026, following revisions prompted by a Spanish Data Protection Agency report issued on 15 June.
Operators would assess the earlier 183 days of exercise through the first seven calendar days of every month. After excluding sporadic gamers, they might apply preliminary thresholds based mostly on exercise, internet features or losses, stakes and deposits. A machine studying mannequin would then assess remaining accounts utilizing 48 variables, together with withdrawals, session length, product decisions and fee classes.
The mannequin makes use of operator-held account knowledge, excluding social media, searching historical past, geolocation, exterior monetary information and well being knowledge. The classification represents a regulatory class, not a medical prognosis.
Flagged Players Face Restrictions
Operators must clarify classifications and their most important contributing components in plain language. Players would have 72 hours to reply; in any other case, their accounts can be suspended till they comply.
For a minimum of six months, flagged clients would lose entry to promotions, VIP companies and advertising and marketing emails. They would additionally want fee strategies registered in their very own names, and bank cards can be prohibited.
Players might request an operator assessment earlier than escalating complaints to the DGOJ. Restrictions would stay energetic throughout each phases.
The first session spherical attracted 18 submissions. Industry contributors questioned implementation prices, mannequin accuracy and unbiased auditing. The DGOJ estimates implementation at €130,000 per operator, or round €7.4 million throughout 57 licensed operators.
The proposed decision would take impact two months after publication within the official gazette. Payment verification and the danger mannequin stay separate regulatory processes.
