What is the LUGAS Limit File? Function, Limits & Data Protection in 2026

What is the LUGAS Limit File? It is a central, state-run database that monitors the cross-provider deposit limit of a maximum of €1,000 per month for German online casinos and sports betting. As part of the LUGAS IT system, it protects players from over-indebtedness and is legally mandatory for all licensed gambling providers.

Definition & Legal Basis of the Limit File

What exactly is the LUGAS Limit File?

The Cross-State Gambling Supervision System (LUGAS for short) consists of three main components: the Safe Servers, the Activity File to prevent parallel play, and the Limit File. From a legal perspective, the Limit File is the cornerstone of addiction prevention, as it strictly enforces the cross-provider deposit limit. According to the requirements of § 6c GlüStV 2021, this cross-provider deposit limit must not exceed €1,000 per month as standard. The Gambling State Treaty 2021 mandates LUGAS to ensure player protection in the legal market. Practice shows that deposits are blocked in real-time once the limit is reached. An increase to up to €10,000 is possible, but requires strict creditworthiness checks via Schufa. LUGAS is supplemented by the blocking system OASIS, which completes player protection on another level.

Who monitors the LUGAS Limit?

The administration of LUGAS is the responsibility of the Joint Gambling Authority of the States (GGL) based in Halle an der Saale. Historically, responsibility lay with the State Administration Office of Saxony-Anhalt from July 2021, before the Joint Gambling Authority of the States took full control in January 2023. The GGL ensures that all licensed operators are connected to the system. To maintain data protection, the system operates on special Safe Servers using only pseudonyms (player IDs), so the authority does not evaluate direct names. This highly secure infrastructure is hosted by Dataport, the state IT service provider.

How does the cross-provider limit work?

The technical implementation is based on strict real-time communication between the casino and the central database. The following processes interact:

Registration: When opening an account, the player is assigned a pseudonymized ID and stored in the central files, where all relevant data is located. Limit Check: Before each transaction, the provider compares the amount with the Limit File to ensure compliance with the requirements of § 6c GlüStV 2021. Activity Status: In parallel, the Activity File prevents simultaneous login at other bookmakers by setting the status to "active" or "inactive".

Through this networking, the cross-provider deposit limit is calculated centrally, regardless of how many legal platforms a user is registered with. Every euro deposited immediately reduces the available remaining limit. The Gambling State Treaty 2021 thus ensures that financial burden remains capped across all providers.

Deposit Limits & Increase of the LUGAS Limit

The central database enforces a cross-provider deposit limit of €1,000 per month as standard. Players can increase this limit to up to €10,000 through strict creditworthiness checks.

What is the LUGAS Limit by default?

From a legal perspective, the Limit File, a central instrument of the Joint Gambling Authority of the States (GGL) within the central files of the GlüStV, monitors the statutory deposit limit. This deposit limit, which defines the maximum amount a user can transfer monthly to licensed providers, is €1,000 by default. The Limit File strictly enforces this deposit limit across providers to preventively counter gambling addiction and ensure player protection. In practice, players must set this value themselves upon initial registration, with the statutory €1,000 not being exceeded.

How can I increase the LUGAS Limit?

Since a legislative amendment in September 2023, there is the possibility to increase the initial deposit limit to a maximum value of €10,000. However, to increase the limit to up to €10,000, the legislator requires extensive evidence. The deposit limit is increased exclusively through demonstrated creditworthiness. This creditworthiness, meaning the player's financial reliability and payment capacity, is often verified in practice through Schufa. Schufa, Germany's largest credit bureau, provides the data basis for the mandatory creditworthiness check. Such a creditworthiness check, which evaluates the user's financial history, ensures that gambling behavior does not lead to over-indebtedness.

In addition to creditworthiness, players must demonstrate their economic capacity. Economic capacity, which describes freely available income after deducting all fixed costs, is proven through official documents. The process for this increase to €10,000 typically includes the following steps:

Contact: The player must contact the customer service of the respective gambling provider. Self-disclosure: Submission of a form with detailed information about occupation and income. Data comparison: Conducting the creditworthiness check (often via Schufa query) to confirm creditworthiness. Document review: Manual review of evidence of economic capacity by the provider.

Only once this information is verified does the bookmaker or casino forward the data to the Cross-State Gambling Supervision System to adjust the limit.

How long does it take for a change to the LUGAS Limit to take effect?

When a player wants to increase their deposit limit after successful creditworthiness verification, a statutory protection period applies. A requested increase beyond the €1,000 is only implemented in the system after a waiting period of seven days. This delay serves player protection and is intended to prevent impulsive financial decisions. Reductions of the limit, however, become active immediately. It should also be noted that when switching between different gambling providers, the Activity File, which prevents parallel play, temporarily sets the status to inactive and enforces an additional 5-minute pause before a player is registered as active again at another provider.

Data Protection & Technical Implementation

The Cross-State Gambling Supervision System stores cross-provider deposit limits and activity status to ensure player protection within the framework of the GlüStV. Strict data protection applies: authorities do not see names, but work exclusively with encrypted data.

Are my data safe at LUGAS?

From a legal perspective, the entire system is subject to the strictest requirements of the General Data Protection Regulation (GDPR). Compliance with the General Data Protection Regulation (GDPR) is ensured by the fact that no direct personal information is transmitted to the Joint Gambling Authority of the States (GGL). Instead, strict pseudonymization is used. This pseudonymization ensures that the authority only processes anonymized hash values, while responsibility for the correct handling of clear data remains with the respective gambling providers. There is thus no risk of a "transparent player".

What is the Player ID and the Pseudonym?

Upon first registration on a platform, the provider generates a unique pseudonym for the user. Through this pseudonym, data protection is significantly strengthened, as third parties do not have access to sensitive user data. The pseudonym is inseparably linked to a specific Player ID, which is sent to the central files via the LUGAS interface. The LUGAS interface, a certified communication channel, enables real-time data exchange. The status in the Activity File is also controlled via this Player ID.

Who operates the servers in the background?

The technical infrastructure is not hosted by the casinos themselves. The GGL has commissioned Dataport AöR, the IT service provider of public administration, to operate the Safe Servers. Dataport AöR ensures that the server infrastructure is located in Germany and meets the highest security standards to protect data from unauthorized access.

What is the LUGAS Activity File?

In addition to the deposit limit, the system prevents parallel play at multiple providers simultaneously. Practice clearly demonstrates this: when you log out, a statutory waiting period of five minutes must be observed. Only after this period does the status of the Player ID in the Activity File change to "inactive", allowing a new login at another operator.

The Difference to the Blocking System OASIS

The systems are often confused. While LUGAS only regulates limits and current activity via the LUGAS interface, OASIS is a pure blocking system for complete exclusion from gambling. However, both systems use pseudonymization to comply with the strict requirements of the General Data Protection Regulation (GDPR) and maximize player protection.

Distinction from Other Systems (OASIS & Activity File)

While the Limit File caps deposits, the LUGAS Activity File prevents simultaneous play at multiple providers. OASIS complements LUGAS as a strict blocking system. All three instruments together serve player protection and addiction prevention.

What is the difference between LUGAS and OASIS?

From a legal perspective, OASIS perfectly complements the LUGAS control system. LUGAS, the Cross-State Gambling Supervision System, bundles the central files - consisting of the Limit File and the Activity File - and regulates active gambling behavior and deposits. OASIS, on the other hand, is a pure blocking system that completely excludes people at risk of gambling addiction from participating in gambling. Both databases are central pillars for player protection in Germany. While LUGAS monitors ongoing transactions, OASIS acts as a final measure of addiction prevention when problematic behavior already exists. For those affected, contact points such as BZgA gambling addiction help offer further support in such cases.

How does the LUGAS Activity File work?

The Activity File, an essential component of LUGAS, documents the login status of each user across providers. Practice clearly demonstrates the technical implementation: as soon as you log in, the casino transmits a pseudonymized Player ID to the authority and sets the status to "active". This Activity File effectively prevents parallel play, as it blocks any further login at another gambling provider in real-time. Through this strict separation, addiction prevention is strengthened, as users cannot uncontrollably place bets on multiple sites simultaneously.

What happens with parallel play?

Parallel play, that is, simultaneous betting at two or more bookmakers or casinos, is technically excluded under the GlüStV 2021. When a user wants to switch providers, a defined mechanism applies: after logging out on the first platform, access for parallel play remains blocked for exactly 5 minutes. These 5 minutes serve as a mandatory cooling-off period for player protection. Only after this period has elapsed does the Activity File change the status of the Player ID to "inactive", allowing login at the next casino. If you try to bypass this pause, the system immediately refuses login, as parallel play is strictly prohibited.

Bypass, Whitelist & Support

Legal bypassing does not exist in Germany. All licensed gambling providers are mandatory connected to this Cross-State Gambling Supervision System. For questions or to request self-disclosure, the supervisory authority in Halle (Saale) offers direct contact options for players.

Can the LUGAS Limit be bypassed?

Practice shows: legal bypass of the cross-provider deposit limit is impossible at licensed bookmakers in Germany. Every legal provider must connect to the IT control system. However, industry observers warn that this strict regulation in Germany could push players to the unregulated black market. Those who become active with other, unlicensed operators lose legal player protection.

What role does the Whitelist play?

The official Whitelist (Gambling), the state register of all legally operating platforms, serves as a central filter for player protection. Only companies listed on this Whitelist (Gambling) are technically connected to the system. LUGAS consists of the so-called Safe Server and the two central files. This Safe Server is part of the infrastructure of the Joint Gambling Authority of the States (GGL) and is used by the supervisory authority for comprehensive control of operators. Without an entry in the Whitelist, there is no connection to the Safe Server, making illegal offers immediately identifiable.

How can I contact LUGAS?

For matters related to the system, the GGL based in Halle (Saale) is responsible. If players want to request detailed self-disclosure about their stored data, they must contact the authority in Halle (Saale) directly. This self-disclosure provides transparent information about the personal activity log. The following contact options are available:

Contact form: The recommended way for specific inquiries or to request self-disclosure. Phone hotline: Set up for urgent questions. On-site visits: Direct visitor traffic at the headquarters in Halle (Saale) is not possible.

About This Article - Editorial & Responsibility

Author: Sarah Weber - Casino Tester & Bonus Analyst

Professionally reviewed by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst Last

Update: 2026-06-24.

This article on "what is the LUGAS limit file" was written by Sarah Weber and professionally reviewed by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus terms. All statements regarding licenses, authorities, and legal framework conditions refer to publicly accessible sources (GGL (Joint Gambling Authority of the States), Gambling State Treaty 2021 (GlüStV 2021)).

About the Author

8+ years of casino reviews, 200+ personally tested platforms in EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout workflows, customer support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators under the Gambling State Treaty 2021. PhD in Mathematical Economics. Research focus: bonus mathematics, wager analysis, player protection systems (OASIS).

Responsible Gambling

Gambling can be addictive. If you feel you are losing control over your gambling behavior, please contact BzgA Gambling Addiction Help, Check-dein-Spiel.de, or use the central blocking system (OASIS (central player blocking system)). Set personal deposit and loss limits before playing with real money. Breaks and cooldown functions offered by providers are not a sign of weakness - they are a tool for sustainable gambling enjoyment.

Legal Notice

The information in this article is for editorial and comparison purposes only. It does not constitute legal advice. The legal assessment of online gambling without a German license is a gray area and is subject to ongoing adjustments by the GGL (Joint Gambling Authority of the States). Players are responsible for complying with local regulations.