iGaming platform for the German market

The German iGaming market is Europe's largest regulated online gambling market by population, governed by the Glücksspielstaatsvertrag 2021 (GlüStV 2021, the Interstate Treaty on Gambling) and supervised by the Gemeinsame Glücksspielbehörde der Länder (GGL), the joint gambling authority of the 16 federal states. The regime is hybrid: virtual slot machines, online poker and sports betting are licensed federally through the GGL, while online table games remain reserved to the individual Länder. Germany is also the most technically demanding market in Europe. A tax on stakes instead of GGR, a €1 stake cap on slots (confirm current game rules with the GGL), and mandatory integration with two central state systems — OASIS and LUGAS — define what a platform must deliver before a single spin is legal.

Regulatory status

GlüStV 2021 entered into force on 1 July 2021 and, for the first time, permitted virtual slot machines and online poker nationwide. The treaty created the GGL as a joint authority of all 16 Länder; it has been fully competent for licensing and enforcement since 1 January 2023, taking over from the transitional arrangements run by individual states.

The market model is hybrid:

• Federal open licensing through the GGL for virtual slot machines, online poker and sports betting. There is no numerical cap on permits for these verticals, but each is a separate authorisation with its own conditions.
• Länder-reserved online casino in the narrow sense — blackjack, roulette, baccarat and other bank-holding table games. Each state decides whether to allow them at all, and most that do operate through state monopolies or a very limited number of concessions tied to land-based incumbents — confirm the position in each target Land.

The GGL is an active enforcement regulator. It maintains a public whitelist of authorised operators, pursues payment blocking and IP-level measures against unlicensed sites, and has taken action against affiliates advertising illegal offerings. For operators, the practical consequence is that the compliant channel is well defended — but also that the GGL audits its own licensees with the same energy, particularly around limit enforcement and advertising.

Channelisation remains the market's structural debate: the combination of the stake tax, the €1 stake cap and the deposit limit narrows the licensed product against offshore alternatives, and industry studies put meaningful volume outside the licensed system. Operators entering Germany should plan product and marketing around the regulated envelope rather than against it.

Operator requirements

Licence types

The GGL issues separate permits per vertical. A multi-product operator applies for each individually:

Permits are granted for a limited term and tied to the approved game portfolio and technical setup: material changes — new games, RNG changes, platform migrations — require notification or prior approval — confirm current change-approval rules with the GGL.

Corporate and capital requirements

• EU/EEA establishment: the applicant must be a company seated in an EU or EEA member state
• Reliability and expertise: management and beneficial owners undergo checks on integrity, financial standing and sector competence, with certificates of good conduct and source-of-funds evidence
• Security deposit: a security of approximately €5 million, scalable upward with expected turnover, lodged as a bank guarantee to cover player claims and tax liabilities — confirm current amounts with the GGL
• Domestic representative: an authorised recipient or representative in Germany for service of official documents — confirm current requirements
• German-language obligations: player-facing interfaces, terms and responsible-gambling information must be available in German

Servers, data and local presence

GlüStV 2021 introduces the "safe server" concept: game and transaction data must be recorded in full, in a prescribed format, on infrastructure the supervisory authority can access for evaluation — effectively a regulator-readable evidence store covering every game round, payment and limit event — confirm current safe-server requirements with the GGL. Hosting must satisfy GGL access and audit conditions, and the technical concept is reviewed as part of the application. This is a platform-level deliverable: retrofitting safe-server recording onto a stack that was not designed for it is one of the most common causes of German go-live delay.

Review timelines

The GGL reviews applications per vertical; well-prepared applications typically complete in approximately 4–8 months (as of 2026 — confirm current timelines with the GGL), with the technical concept, social concept (responsible gambling programme) and payment flows attracting the most scrutiny. Applicants launching on a platform that already operates German integrations shorten the technical annex substantially — see the GlüStV 2021 licensing guide for the document set in detail.

Taxes

Germany does not tax GGR for the core online verticals. Instead, the Race Betting and Lottery Act levies a 5.3% tax on stakes (turnover) for virtual slot machines and online poker; sports betting stakes carry a similar turnover tax — confirm current rates with the German tax authorities.

The distinction is economically decisive. Because tax is paid on every wager rather than on win, the effective burden on gross gaming revenue depends on RTP. At a 96% RTP slot, a 5.3% stake tax consumes the equivalent of well over half of GGR; every point of RTP offered back to players increases the effective rate further. The practical consequences operators plan for:

• Game portfolios skew toward lower-RTP configurations certified for Germany, and content roadmaps are negotiated with studios on Germany-specific maths
• Bonus economics change: wagering-heavy bonus structures multiply taxable stakes without adding revenue
• Margin planning must model tax on turnover, not revenue — a fundamentally different P&L shape from GGR markets such as the Netherlands or Denmark

Corporate income tax and trade tax apply on profits in the ordinary way.

Technical requirements

Germany binds the platform more tightly than any other European jurisdiction. The obligations below are licence conditions, verified at application and audited in operation.

RNG and game certification

Games and the RNG must be certified against the GlüStV 2021 requirements by an accredited testing body recognised by the GGL. German certification is not a paper exercise on top of an existing MGA or UK certificate: the game rules differ materially — stake cap, spin timing, feature prohibitions — so each title requires a Germany-specific build and test report. Changes to certified components follow a controlled change process with re-certification for significant modifications — confirm the current certification requirements with the GGL.

Regulator reporting

Operators report to the GGL through several channels: the safe-server data store described above, which gives the authority direct evaluative access to game and transaction records; periodic regulatory returns covering turnover, taxes and responsible-gambling metrics; and event-driven notifications for incidents, material changes and suspected manipulation — confirm current reporting obligations with the GGL. The Vuch admin back office provides regulator-reporting tooling — reports and exports with a full audit trail; mapping those exports to the GGL's prescribed return formats and the safe-server data model is deployment scope.

OASIS — national self-exclusion registry

OASIS is Germany's nationwide, cross-provider self-exclusion register, and integration is a hard licence condition. The platform must:

• Query OASIS at every registration before an account is created
• Query OASIS at every login, blocking excluded players in real time
• Enforce exclusions across all gambling verticals — an exclusion entered through any provider applies to all
• Support player-initiated and third-party-initiated exclusions and the statutory minimum exclusion periods — confirm current periods with the GGL
• Provide the panic button: a one-click control on every game screen that imposes an immediate 24-hour self-lock, registered via OASIS

LUGAS, deposit limits and game-design restrictions

LUGAS is the second central system: a cross-operator activity and limit file. Through it the state enforces two rules no operator can implement alone:

• The cross-operator deposit limit of €1,000 per month (default level — confirm current rules and exceptions with the GGL) — deposits with every licensed operator count against a single shared ceiling, checked against LUGAS before each deposit is accepted
• The parallel-play ban — a player may hold an active gaming session with only one operator at a time; session starts and ends are written to the central activity file

On top of the central systems, GlüStV 2021 fixes the shape of the slot product itself:

• Maximum stake of €1 per spin — confirm current game rules with the GGL
• Minimum spin duration of five seconds
• No autoplay, no turbo modes
• No jackpot features, progressive or local
• Advertising restrictions, including time windows before 21:00 for virtual slots and poker broadcast advertising, and a general ban on targeting minors and excluded players — confirm current advertising rules

Restrictions of this kind need to be enforced at platform level through configuration. On the Vuch platform, operational limits and risk-engine thresholds are configuration parameters set per jurisdiction during the mapping phase of a deployment, logged with a full audit trail — see the compliance suite.

What a German licence does not cover

A GGL permit covers only the vertical it names, and only Germany. Virtual slots and poker permits confer no right to offer online table games — those remain a matter for individual Länder, and in most states are closed to private operators. The federal permits likewise grant nothing outside Germany, and German certification does not transfer to other jurisdictions, although accredited labs can reuse parts of the evidence base. Operators pairing Germany with GGR-taxed markets should model the two P&Ls separately; the stake tax makes German unit economics unlike anywhere else in Europe.

What Vuch provides for the German market

• Modular platform: prediction markets, casino (30,000+ games via provider integrations), or the full stack on a unified wallet with an AMM liquidity core
• Certification roadmap: Vuch holds no German certification or permits today; GlüStV 2021 certification and Germany-specific game builds are scoped as part of deployment, with a certification roadmap and due-diligence pack available on request
• Self-exclusion capability: OASIS registry integration — including panic-button registration — is implemented and certified per deployment; LUGAS limit and activity-file integration is likewise a deployment integration
• Jurisdiction configuration: stake caps, spin timing, feature suppression and deposit limits are enforced through platform configuration during the jurisdiction mapping phase; risk-engine thresholds are tunable for German requirements
• Regulator-reporting tooling: reports and exports generated from the admin back office with a full audit trail; safe-server recording and GGL return formats are deployment scope
• Payments: current rails are USDT deposits and withdrawals; a fiat payment layer is on the roadmap. For a fiat-first market like Germany, local fiat payment integration is a gating item and part of the deployment conversation
• Deployment timeline: white-label deployment typically takes 4–8 weeks depending on integrations and jurisdiction

Germany rewards operators who treat the regulatory envelope as a product constraint from day one rather than a compliance afterthought. The turnkey casino solution scopes the German market entry — integrations, certification and reporting — into a single delivery plan alongside your other licensed markets.