Is Germany’s gambling regulator applying reliability rules equally?

Germany’s gambling regulation is built on a simple promise. Operators that want access to the regulated market must be reliable, financially capable and transparent about who owns, funds and controls them. That promise sounds straightforward, but the harder question is whether those standards are being applied with the same intensity across the market.

This is not a small technical issue. In Germany, licensing is not only about whether a company can fill out the right forms or provide the right compliance manuals. The law asks deeper questions about ownership, financial substance, lawful funding, operational reliability and whether the business can be monitored properly by the authorities. Those are the questions that decide who gets market access, who loses it and who is allowed to continue operating after serious problems.

Under §4a of the Glücksspielstaatsvertrag 2021, a licence for sports betting, online poker or virtual slot games may only be granted where special conditions are met. These include extended reliability, disclosure of ownership and participation structures, the lawful origin of funds, sufficient capital for permanent business activity, transparent operation and the ability for the regulator to monitor the distribution network. The law also requires that neither the applicant nor certain connected or controlling parties are involved in unauthorised gambling.

That framework gives the regulator considerable responsibility. It also gives the market a legitimate expectation of consistency. If reliability is treated strictly for one operator, the same standard should be visible when larger or better-known licensed groups face serious legal, technical or operational questions.

Why reliability is the core issue

The German licensing model does not treat reliability as a soft reputational concept. It is written into the legal architecture of market access. §4a refers to the reliability and expertise of the applicant and responsible persons, the proper and comprehensible conduct of gambling for players and the authority, the lawful origin of funds and the absence of unauthorised gambling activity by certain connected parties.

That matters because reliability is not limited to whether an operator has a clean brand image. It reaches into the structure behind the company. Who owns it? Who controls it? Where does its funding come from? Can the regulator understand the business model, monitor the network and verify the gambling activity in real time?

The same provision also addresses financial capability. The applicant must have enough own funds for sustainable business activity, demonstrate the economic viability of the intended gambling offer and prepare necessary security or insurance arrangements for player protection. These are not decorative requirements. They are designed to test whether an operator is strong enough, transparent enough and controlled enough to participate in a sensitive regulated market.

This is where the consistency question begins. If the regulator interprets reliability broadly when assessing one operator, it should not interpret it narrowly when problems arise around another. A credibility-based licensing regime cannot be selective in how it notices risk.

The GGL’s public role creates a higher transparency burden

The Gemeinsame Glücksspielbehörde der Länder, or GGL, describes its central task as regulating Germany’s online gambling market by reviewing and approving cross-state online gambling offers, ensuring that permitted providers follow rules on player protection and manipulation prevention and combating illegal gambling and advertising.

That is a broad mandate. It covers both the front door of market admission and the ongoing supervision of those already inside the regulated system. It means the GGL is not only a licensing body. It is also the authority that must maintain confidence that licensed providers remain suitable after authorisation has been granted.

The GGL’s official whitelist is part of that confidence system. According to the authority, it publishes an official list under §9(8) GlüStV 2021 showing organisers and intermediaries that have a permit or concession under the treaty. The whitelist page states that the list is updated on an event-related basis and at least monthly, with the version available on 30 June 2026 describing the listed providers as those holding authorisation under the German framework.

The whitelist therefore does more than inform players which websites are legal. It sends a signal to banks, media partners, affiliates, clubs, suppliers and competitors that a provider sits inside the regulated market. If that signal is not supported by consistent follow-up when problems emerge, the whitelist risks becoming a snapshot rather than a meaningful supervision tool.

Strict rules are not the problem

A strict reliability test is not inherently unfair. In gambling, strictness can be justified. Operators handle player funds, personal data, identity documents, betting behaviour, payment flows and high-risk consumer interactions. A regulator that treats the sector casually would be failing players and undermining the legal market.

The problem arises when strictness appears uneven. If one operator faces heavy scrutiny because of ownership questions, historical disputes, funding concerns or alleged operational deficiencies, while another large licensed name continues with limited visible consequence after serious problems, market participants will inevitably ask whether the same legal yardstick is being used.

That question should not be confused with a demand for weaker regulation. It is the opposite. The regulated market needs strong supervision, but strong supervision must be predictable. Operators should not have to guess whether reliability is a legal standard, a discretionary pressure point or a standard that becomes more flexible when a company is already powerful in the market.

The GGL has itself argued that its work in 2024 helped create equal and fair competitive conditions among permitted providers, while using payment blocking, geo-blocking, prohibition orders and coercive fines against illegal offerings. That claim makes consistency even more important. Equal competitive conditions do not only depend on how illegal operators are handled. They also depend on how licensed operators are treated when their own systems, structures or conduct raise difficult questions.

Serious incidents should trigger visible regulatory logic

The German market has already seen public reporting around serious incidents involving licensed or connected gambling operations. One example is the reported player data security issue connected to Merkur’s online gambling sites. iGaming Business reported in March 2025 that a player data breach across Merkur gambling sites in Germany had raised questions about cyber risk in the sector, with an ethical hacker saying she had accessed sensitive player data through a GraphQL query.

The Times of Malta also reported that the researcher said she informed the German gambling authority and that the GGL subsequently issued public warnings to The Mill Adventure, Solis Ortus Service Ltd and Cashpoint Malta Ltd in relation to the security flaw. These are serious matters for any regulated gambling market, especially where identity documents, financial information or player activity may be involved.

The point is not to conclude from media reports alone that any named company is unreliable under German gambling law. That would require a detailed legal and factual assessment by the competent authorities. The point is narrower but important. Where incidents of that seriousness arise, the market should be able to understand how the regulator treats them within the reliability framework.

Does a major data security failure affect the assessment of operational reliability? Does the use of third-party technology affect the regulator’s view of control and transparency? Does the involvement of service providers change the supervisory response? Does the same level of scrutiny apply when the provider is a major name as when the affected operator is smaller, newer or already politically inconvenient?

Ownership and control cannot be selective concerns

Ownership transparency is one of the clearest requirements in §4a. Applicants must disclose ownership and participation structures, including shareholders or capital providers above certain thresholds and trust arrangements. This is not a bureaucratic detail. It is central to assessing who really stands behind a gambling business.

The importance of that requirement becomes obvious when the market contains complex corporate groups, cross-border structures, white-label arrangements, service providers, platform operators and entities based outside Germany. In such a market, the formal licence holder may not always tell the full story of who influences technology, funding, operational decisions or commercial risk.

If the regulator applies ownership and control questions intensely in some cases, the same seriousness should be visible across the market. That includes large groups with layered structures, operators using external suppliers and businesses where strategic control may sit in a different entity from the licensed company. Reliability loses meaning if ownership transparency is treated as a problem only when the operator is already under suspicion.

The same applies to connected-party risk. §4a expressly looks beyond the applicant itself and refers to connected companies, controlling persons and persons controlled by those controlling persons in relation to unauthorised gambling activity. That is a broad concept. It suggests the law was designed to prevent regulatory blind spots, not to create them.

Financial capability should mean more than survival

Financial capability is another area where consistent application matters. A gambling operator may be able to continue trading, process payments and maintain a website, but that does not automatically prove regulatory resilience. The law asks for enough own funds for permanent business activity and an economically viable gambling offer, taking into account levies and related obligations.

That test should matter equally for operators in different commercial positions. A company under financial pressure, a company dependent on opaque support or a company carrying significant unresolved liabilities should not be assessed differently merely because it has market recognition. Equally, a smaller or disputed operator should not face assumptions that would not be made against a larger competitor.

The question is not whether every commercial challenge should become a licensing crisis. That would be unreasonable and harmful to the market. The question is whether the regulator explains how financial strength, liabilities, funding sources and ownership support are assessed when they become relevant to licensing confidence.

A system that demands financial proof from one operator but relies on reputation from another is not a system based on equal standards. It is a system where size starts to look like evidence.

Market fairness depends on visible consistency

Germany’s legal gambling market is still competing with illegal supply. The GGL’s own 2024 reporting highlights both its work against illegal gambling and its supervision of legal providers. It also presents the fight against illegal gambling as an ongoing challenge.

That fight becomes harder when the regulated market itself is perceived as uneven. Operators that comply with burdensome requirements need to believe that their competitors are held to the same expectations. Players need to believe that a licensed brand is not merely approved once, but monitored continuously. Suppliers, media partners and sporting organisations need to know that licensing status is meaningful beyond a line on a whitelist.

This is why reliability rules must not become a tool of selective pressure. If strict enforcement is used to keep questionable actors out of the market, that can strengthen regulation. If the same strictness appears to disappear when powerful licensed names face serious issues, the result is damaging. It creates the impression that the law is strict at the gate, but softer once a major operator is already inside.

That impression may be unfair to the regulator in some cases. There may be confidential investigations, legal limits on public disclosure or factual distinctions that justify different treatment. But if those distinctions are never visible, the market is left with uncertainty. In regulation, unexplained discretion often becomes almost as damaging as inconsistency itself.

The unanswered question for Germany

The core question is not whether Germany’s gambling regulator has the legal tools. It clearly does. The GlüStV gives the authority a framework that reaches into reliability, ownership, funding, operational transparency, monitoring, player protection and connected-party conduct. The GGL also has a public mandate to approve legal offers, supervise licensed providers and combat illegal gambling.

The harder question is whether those tools are applied in a way the market can understand. When a licence is refused, restricted, delayed or placed under pressure, the reasoning should be consistent with how other licensed operators are treated after serious incidents. When a large brand faces a legal, technical or operational problem, the market should see that the same reliability principles are still alive.

This does not mean that every case must end with the same outcome. Different facts can justify different regulatory responses. A data security incident is not the same as an ownership disclosure issue, and a historical legal dispute is not automatically equivalent to a financial capability concern. Consistency does not require identical decisions.

But consistency does require a visible method. The market should be able to see that the regulator asks the same core questions every time. Who controls the business? Is the funding lawful and sufficient? Can the operation be monitored? Are players protected? Has the operator shown the reliability required for a sensitive gambling licence?

Our final thoughts and conclusion

Germany’s gambling regulator is entitled to apply strict reliability rules. In a high-risk sector, it would be worrying if it did not. But strict regulation only works when it is even-handed, transparent in method and credible across the whole licensed market.

The reliability test in §4a GlüStV is not a slogan. It is a detailed legal standard covering ownership, competence, lawful funding, financial capability, transparency, monitoring and connected-party conduct. If that standard is applied with force against some operators, it should be applied with the same seriousness when major licensed names face serious operational or technical problems.

The public question for Germany is therefore not whether one operator deserves sympathy or another deserves punishment. That would be too narrow. The real question is whether the regulated market can see a consistent supervisory logic behind licensing decisions and post-licence oversight.

A whitelist can show who is licensed. It cannot, by itself, prove that reliability rules are being enforced equally. For that, Germany needs visible consistency, clearer explanations and a regulator willing to show that size, status and market position do not soften the legal test.

FAQs

What is the main purpose of Germany's gambling licensing system?
Germany's licensing system is designed to ensure that gambling operators meet strict standards for financial stability, transparency, player protection and regulatory compliance before entering the regulated market.

What does the GGL do in Germany?
The Gemeinsame Glücksspielbehörde der Länder (GGL) oversees Germany's regulated online gambling market, issues licences, supervises licensed operators and takes action against illegal gambling.

Why is reliability important in German gambling regulation?
Reliability is a legal requirement that assesses whether an operator and its controlling individuals are suitable to offer gambling services while protecting players and maintaining market integrity.

What is §4a of the GlüStV 2021?
Section 4a of the Glücksspielstaatsvertrag 2021 sets out the licensing requirements for online gambling operators, including ownership transparency, financial capability and operational reliability.

Why is ownership transparency required for gambling operators?
Ownership transparency allows regulators to identify who controls and funds a gambling business, helping prevent illegal activity and ensuring effective supervision.

How does Germany monitor licensed gambling operators?
The GGL conducts ongoing supervision through compliance monitoring, licensing reviews and enforcement measures to ensure operators continue to meet legal obligations.

Why is consistency in gambling regulation important?
Consistent regulation helps create fair competition, strengthens public confidence and ensures that all licensed operators are assessed using the same legal standards.

Can a gambling licence be affected by operational or security incidents?
Yes. Serious operational, financial or cybersecurity issues may be considered by regulators when evaluating whether an operator continues to satisfy licensing requirements.

What is the GGL whitelist?
The GGL whitelist is the official public register of gambling operators that hold valid licences under Germany's gambling framework.

Why does financial capability matter in gambling licensing?
Financial capability demonstrates that an operator has sufficient resources to operate responsibly, protect players and meet its ongoing legal and financial obligations.