Regulation · Spain
Spain's DGOJ tightens up: joint deposit limits, AI risk detection
Spain already runs one of Europe's strictest advertising regimes; from June 2026 the DGOJ adds cross-operator joint deposit limits and mandates AI-driven risk detection, reshaping how operators can acquire and retain players.
Spain’s online gambling market is regulated by the Dirección General de Ordenación del Juego (DGOJ) and has, since a landmark 2020 advertising decree, been one of the most constrained promotional environments in Europe. In 2026 the DGOJ is extending that restrictive logic from advertising into the mechanics of play itself — with cross-operator deposit limits and mandatory risk-detection tools that change how the market can operate.
The licensing and tax baseline
The DGOJ issues general licences — for betting, contests and other games, running ten years and renewable — alongside singular licences for each game vertical such as slots, roulette, blackjack, poker and fixed-odds betting. Licence windows open periodically. Tax sits at 20% of GGR for most online games under the Law 13/2011 regime, with reduced rates of roughly 10% in Ceuta and Melilla. That framework is stable; the action in 2026 is on consumer-protection rules.
The advertising regime that set the tone
Spain’s reputation for strict advertising rests on measures that sharply curtailed gambling marketing — limiting when operators can advertise, restricting sponsorship and constraining the bonusing used to acquire players. The market impact was immediate and well documented: customer-acquisition strategies that worked elsewhere in Europe simply were not available in Spain, forcing operators to compete on product and retention rather than on promotional generosity. The 2026 measures build directly on that philosophy — the state intervening in the operator-player relationship rather than trusting the market to self-regulate.
Joint deposit limits — the 2026 headline
The most consequential new rule concerns deposit limits that follow the player across operators. From 23 June 2026, Spain applies cross-operator joint deposit limits — a default of €700 per day, €1,750 per week and €3,300 per four weeks — enforced through a DGOJ real-time monitoring tool. This is a significant step beyond per-operator limits: rather than each site capping its own players, the state caps a player’s total deposits across the entire licensed market and monitors compliance centrally in real time.
For operators, a joint limit changes the economics of high-value players, because a player’s spend is now bounded market-wide rather than site by site. It is one of the more aggressive responsible-gambling interventions in Europe and a clear signal of where the DGOJ’s priorities lie.
AI risk detection and AML tightening
Two further strands reinforce the direction. The DGOJ has mandated a risk-behaviour detection mechanism — an AI-driven responsible-gambling algorithm operators must run, with a target around March 2026 — and is pushing operators to replace generic “play responsibly” messaging with data-driven, individualised risk warnings. Separately, a draft Royal Decree tightens AML controls, notably requiring that the payment-method holder match the account holder, with consultation extended to 6 April 2026 ahead of Spain’s 2026 FATF evaluation.
Why it matters
Spain shows what a mature market looks like when the regulator’s focus shifts decisively from market development to harm reduction. The advertising restrictions already reshaped acquisition; the 2026 joint deposit limits reshape retention and monetisation; the AI risk-detection mandate reshapes the operational stack every operator must build. Together they make Spain a market where compliance capability, not marketing spend, is the competitive differentiator.
For operators, the practical implication is investment: real-time integration with the DGOJ monitoring tool, an AI risk-detection layer, and AML processes aligned with the account-holder matching rule. For suppliers, those same mandates are a product opportunity — the tools operators are now required to run have to be built and certified. Teams tracking how the joint limits and risk-detection rules bed in can follow the Spanish file in the iGaming regulatory tracker, and set it against the wider affordability debate across Europe in the State of European iGaming 2026 report.
FAQ
What are Spain’s new joint deposit limits?
From 23 June 2026 Spain applies cross-operator joint deposit limits — a default of €700 per day, €1,750 per week and €3,300 per four weeks — enforced through a DGOJ real-time monitoring tool that caps a player’s total deposits across all licensed operators.
How is online gambling taxed in Spain?
Most online games are taxed at 20% of GGR under the Law 13/2011 regime, with reduced rates of around 10% in Ceuta and Melilla.
What is the DGOJ’s AI risk-detection requirement?
The DGOJ has mandated a risk-behaviour detection mechanism — an AI-driven responsible-gambling algorithm operators must run, targeted around March 2026 — alongside a shift from generic responsible-gambling messaging to data-driven, individualised risk warnings.