Gambling Regulations in Germany Lay Ground for Robust Player Verification

User engagement with digital platforms has grown at an exponential pace, and online gambling is one industry where that growth meets heavy regulation. Operators offering services to German players carry both moral and legal obligations, and in Germany, those obligations are among the strictest in Europe.

Germany regulates online gambling under the Interstate Treaty on Gambling (Glücksspielstaatsvertrag, GlüStV 2021), and in 2026, that framework is under formal review. This blog explains the current gambling landscape in Germany, what the 2026 treaty evaluation means, the rules operators must meet, and why identity verification of online players is essential.

What Are Online Gambling Requirements?

There is no single global authority that governs the online gambling industry. Given the nature of the services involved, operators carry a corporate social responsibility to safeguard minors from age restricted products, which makes age verification a baseline obligation alongside identity verification and anti-money laundering duties set by each jurisdiction they operate in.

The Online Gambling Market in Germany

Online gambling is a large and growing global market, and Germany is one of its most tightly regulated. For years, Germany lacked a clear national framework, which held the regulated market back and pushed activity toward unlicensed offshore operators.

That changed with GlüStV 2021, which created a single nationwide licensing regime. The central question in 2026 is “channelization”, how many players stay with licensed operators rather than the illegal market, and it is one of the main issues the treaty review is examining.

Germany’s Gambling Regulatory Framework

Germany’s gambling regime was reshaped by the Interstate Treaty on Gambling 2021 (GlüStV 2021), which came into force on 1 July 2021. Unlike the fragmented state-by-state rules before it, GlüStV 2021 created a single national framework and, importantly, legalized online sports betting, virtual slot machines, and online poker across all 16 federal states.

The central regulator is the Gemeinsame Glücksspielbehörde der Länder (GGL), the Joint Gambling Authority of the Federal States, which issues licenses, supervises operators, and enforces the rules. Online casino table games such as roulette and blackjack are regulated separately at the state level. The Money Laundering Act (Geldwäschegesetz) applies on top, adding KYC, transaction monitoring, and reporting duties.

Section 1 of the treaty sets out its core purpose: preventing gambling addiction, channeling demand into a supervised legal market, protecting minors and players, and combating the black market, which is why thorough customer due diligence and KYC verification of every player is required.

What Is Happening With the 2026 GlüStV Review?

GlüStV 2021 was never meant to be permanent. The treaty is built on an evaluation, and that review reaches its decisive point in 2026, with a final report due by 31 December 2026. It assesses whether the framework’s player-protection goals are being met without pushing players toward the illegal market.

Ahead of the final report, German interior ministers have already endorsed a draft Second State Treaty amending GlüStV 2021, citing urgency. The draft strengthens enforcement, including clearer powers to block illegal gambling sites, and tightens rules around the Oasis exclusion system. For operators, the direction is clear: oversight and verification standards will rise, not relax.

What About In-Game Purchases and Multi-Accounting?

Many gaming and gambling platforms offer in-game purchases bought with real money, which can fuel “pay-to-win” dynamics. These microtransactions can also be misused for money laundering, for example, by creating multiple accounts to move funds in favour of a single player. This is why robust player verification and a ban on multi-accounting matters: each customer must hold only one account, supporting both fair play and anti-money laundering compliance.

Player Verification Requirements for Operators

Under the Treaty, “games of chance” offered online must be licensed by the competent authority, and operators must run identity verification before customers can use their services. Player verification obligations include confirming the age and identity of every player, so that minors are not exposed to gambling, and identity theft and financial crime are kept out of the platform.

Sports Betting, Virtual Slots, and Online Poker

The treaty sets product-specific rules. For sports betting, it restricts bets on irregular in-game events and governs how live betting may be offered. For virtual slot machines, the maximum stake is capped at EUR 1 per spin, a measure intended to slow play and reduce both rapid losses and money laundering risk. For online poker, the rules require human players (automated players are prohibited) and the random assignment of players to virtual tables.

How Do Operators Verify Players in Germany?

Player verification under GlüStV begins the moment a player registers. Identity verification compares the player against a government-issued document, usually with biometric or liveness checks to prove the person is genuine and present. Age verification confirms the 18-year minimum. OASIS screening checks the player against the national self-exclusion register, and payment verification confirms the player owns the payment method used.

Because anonymous gambling is prohibited and checks apply at registration, manual review does not scale; operators rely on automated identity verification to keep onboarding fast while staying compliant.

How can Shufti help?

Operators serving German players must meet GlüStV obligations regardless of where they are based, while also accounting for state-level rules. Shufti supports this with automated identity, age, and document verification built for regulated onboarding. Government-issued IDs are verified against authoritative sources, with biometric and liveness checks confirming the player is genuine and not a minor or a barred player using a borrowed identity.

Every check produces an auditable record that operators can present to the GGL. Delivered through a single integration, this lets operators apply consistent verification at registration, meeting GlüStV, AML, and player protection obligations while keeping onboarding smooth for legitimate players.

Does your business serve an age-restricted audience? See how Shufti can help you meet your regulatory requirements. Request a demo or talk to our compliance team.