What is the LUGAS Limit File? Function, Limits & Data Protection in 2026

What is the LUGAS limit file? It is a central state database that monitors the cross-operator deposit limit of a maximum of 1,000 euros per month for German online casinos and sports betting. As part of the LUGAS IT system, it protects players from over-indebtedness and is legally mandatory for all licensed gambling operators.

Definition & Legal Basis of the Limit File

What Exactly is the LUGAS Limit File?

The Interstate Gambling Supervision System (LUGAS for short) consists of three main components: the safe servers, the activity file for preventing parallel play, and the limit file. Legally speaking, the limit file forms the core of addiction prevention, as it strictly enforces the cross-operator deposit limit. According to the requirements of Section 6c GlüStV 2021, this cross-operator deposit limit may not exceed the default amount of 1,000 euros per month. The Interstate Treaty on Gambling 2021 strictly mandates LUGAS to ensure player protection in the legal market. Practice shows that deposits are blocked in real-time as soon as the limit is reached. An increase up to 10,000 euros is possible, but requires strict credit checks via Schufa. LUGAS is supplemented by the OASIS ban system, which completes player protection on another level.

Who Monitors the LUGAS Limit?

The administration of LUGAS falls under the Joint Gambling Authority of the States (GGL), based in Halle an der Saale. Historically, responsibility initially lay with the State Administration Office of Saxony-Anhalt from July 2021, before the Joint Gambling Authority of the States assumed full control in January 2023. The GGL ensures that all licensed operators are connected to the system. To preserve data protection, the system operates on special safe servers using only pseudonyms (player IDs), so the authority does not evaluate direct real names. This highly secure infrastructure is hosted by the state IT service provider Dataport.

How Does the Cross-Operator Limit Work?

The technical implementation is based on strict real-time communication between the casino and the central database. The following processes interlock:

Registration: Upon opening an account, a pseudonymized ID is assigned to the player and stored in the central files where all relevant data can be found. Limit check: Before every transaction, the operator cross-references the amount with the limit file to guarantee compliance with the requirements under Section 6c GlüStV 2021. Activity status: In parallel, the activity file prevents simultaneous logins at other bookmakers by setting the status to "active" or "inactive".

Through this networking, the cross-operator deposit limit is calculated centrally, regardless of how many legal platforms a user is registered with. Every euro deposited immediately reduces the remaining available limit. The Interstate Treaty on Gambling 2021 thus ensures that the financial burden remains capped across all operators.

Deposit Limits & Increasing the LUGAS Limit

The central database enforces a default cross-operator deposit limit of 1,000 euros per month. Players can increase this limit up to 10,000 euros through a strict credit check.

What is the Default LUGAS Limit?

Legally speaking, the limit file—a central instrument of the Joint Gambling Authority of the States (GGL) within the central files of the GlüStV—monitors the legal deposit limit. This deposit limit, which defines the maximum sum a user may transfer monthly across licensed operators, defaults to 1,000 euros. The limit file strictly enforces this deposit limit across all operators in order to prevent gambling addiction and ensure player protection. In practice, players must set this value themselves upon initial registration, whereby the statutory 1,000 euros must not be exceeded.

How Can I Increase the LUGAS Limit?

Since a legal adjustment in September 2023, it has been possible to raise the initial deposit limit to a maximum value of 10,000 euros. However, to increase the limit up to 10,000 euros, the legislator requires extensive proof. The deposit limit is increased exclusively through proven creditworthiness. This creditworthiness—meaning the player's financial reliability and solvency—is in practice frequently verified by Schufa. Schufa, Germany's largest credit agency, provides the database for the mandatory credit check. Such a credit check, which evaluates the user's financial history, ensures that gambling behavior does not lead to over-indebtedness.

In addition to creditworthiness, players must prove their economic capacity. Economic capacity, which describes disposable income after deducting all fixed costs, is proven through official documents. The process for this increase to 10,000 euros typically includes the following steps:

Contact: The player must contact customer support of the respective gambling operator. Self-disclosure: Submitting a form with detailed information on occupation and income. Data matching: Conducting the credit check (often via Schufa inquiry) to confirm creditworthiness. Document verification: Manual check of proofs of economic capacity by the operator.

Only when this information is verified does the bookmaker or casino forward the data to the Interstate Gambling Supervision System to adjust the limit.

How Long Does It Take for a LUGAS Limit Change to Take Effect?

When a player wants to raise their deposit limit following a successful credit check, a statutory waiting period applies. A requested increase beyond 1,000 euros is only implemented in the system after a waiting time of seven days. This delay serves player protection and is intended to prevent impulsive financial decisions. Limit reductions, on the other hand, become active immediately. Furthermore, it should be noted that when switching between different gambling operators, the activity file—which prevents parallel play—briefly sets the status to inactive and enforces an additional 5-minute break before a player is reported as active again with another operator.

Data Protection & Technical Implementation

The Interstate Gambling Supervision System stores deposit limits and activity status across all operators to ensure player protection within the framework of the GlüStV. Strict data protection applies here: Authorities do not see real names, working exclusively with encrypted data.

Is My Data Safe with LUGAS?

Legally speaking, the entire system is subject to the strict requirements of the General Data Protection Regulation (GDPR). Compliance with the General Data Protection Regulation (GDPR) is ensured by not transmitting any direct personal information to the Joint Gambling Authority of the States (GGL). Instead, strict pseudonymization is used. This pseudonymization ensures that the authority processes only anonymized hash values, while responsibility for the correct handling of real data remains with the respective gambling operators. There is therefore no danger of a "glass player".

What is the Player ID and the Pseudonym?

Upon initial registration on a platform, the operator generates a unique pseudonym for the user. This pseudonym significantly strengthens data protection, as third parties receive no access to sensitive user data. The pseudonym is inextricably linked to a specific player ID, which is sent to the central files via the LUGAS interface. The LUGAS interface, a certified communication channel, enables real-time data exchange. The status in the activity file is also controlled via this player ID.

Who Operates the Servers in the Background?

The technical infrastructure is not hosted by the casinos themselves. The GGL has commissioned Dataport AöR, the public administration IT service provider, to operate the safe servers. Dataport AöR ensures that the server landscape is located in Germany and meets the highest security standards to protect data against unauthorized access.

What is the LUGAS Activity File?

In addition to the deposit limit, the system prevents parallel play at multiple operators simultaneously. Practice clearly demonstrates this: If you log out, a statutory waiting time of five minutes must be observed. Only after that is the status of the player ID in the activity file set to "inactive", allowing a new login at another operator.

The Difference from the OASIS Ban System

The systems are often confused. While LUGAS merely regulates limits and current activity via the LUGAS interface, OASIS is a pure ban system for total exclusion from gambling. However, both systems use pseudonymization to meet the strict requirements of the General Data Protection Regulation (GDPR) and maximize player protection.

Distinction from Other Systems (OASIS & Activity File)

While the limit file caps deposits, the LUGAS activity file prevents simultaneous play across multiple operators. OASIS complements LUGAS as a strict ban system. All three instruments together serve player protection and addiction prevention.

What is the Difference Between LUGAS and OASIS?

Legally speaking, OASIS perfectly complements the LUGAS control system. LUGAS, the Interstate Gambling Supervision System, combines the central files—consisting of the limit file and the activity file—and regulates active gaming behavior as well as deposits. OASIS, on the other hand, is a pure ban system that completely excludes individuals at risk of gambling addiction from participating in gambling. Both databases are central pillars of player protection in Germany. So while LUGAS monitors ongoing transactions, OASIS acts as a final addiction prevention measure when problematic behavior is already present. For those affected, contact points such as the BZgA Gambling Addiction Help offer further support in such cases.

How Does the LUGAS Activity File Work?

The activity file, an essential component of LUGAS, documents the login status of every user across operators. Practice clearly shows the technical implementation: As soon as you log in, the casino transmits a pseudonymized player ID to the authority and sets the status to "active". This activity file effectively prevents parallel play, as it blocks any further login at another gambling operator in real-time. This strict separation strengthens addiction prevention, as users cannot place bets uncontrollably on multiple sites simultaneously.

What Happens During Parallel Play?

Parallel play—i.e., betting at two or more bookmakers or casinos at the same time—is technically impossible under the GlüStV 2021. When a user wants to switch operators, a defined mechanism takes effect: After logging out of the first platform, access for parallel play remains blocked for exactly 5 minutes. These 5 minutes serve as a mandatory cooling-off period for player protection. Only after this time span has elapsed does the activity file change the status of the player ID to "inactive", releasing login at the next casino. If you attempt to bypass this break, the system immediately denies login, as parallel play is strictly prohibited.

Bypassing, Whitelist & Support

Legal bypassing does not exist in Germany. All licensed gambling operators are mandatory connected to this Interstate Gambling Supervision System. For questions or to request self-disclosure, the supervisory authority in Halle (Saale) offers direct contact channels for players.

Can You Bypass the LUGAS Limit?

Practice shows: A legal bypass of the cross-operator deposit limit is impossible with licensed bookmakers in Germany. Every legal operator must connect to the IT control system. However, industry observers warn that this strict regulation in Germany could push players into the unregulated black market. Anyone active with other, unlicensed operators loses legal player protection.

What Role Does the Whitelist Play?

The official whitelist (gambling), the state register of all legally operating platforms, acts as a central filter for player protection. Only companies listed on this whitelist (gambling) are technically connected to the system. LUGAS consists of the so-called safe server and the two central files. This safe server belongs to the infrastructure of the Joint Gambling Authority of the States (GGL) and is used by supervision for seamless operator monitoring. Without an entry on the whitelist, there is no connection to the safe server, making illegal offers instantly recognizable.

How Can I Contact LUGAS?

For concerns regarding the system, the GGL based in Halle (Saale) is responsible. If players wish to request detailed self-disclosure regarding their stored data, they must contact the authority in Halle (Saale) directly. This self-disclosure provides transparent information on the personal activity log. The following contact options are available:

Contact form: The recommended way for specific inquiries or to request self-disclosure. Phone hotline: Set up for urgent queries. On-site visits: Direct visitor traffic at headquarters in Halle (Saale) is not possible.

About This Article - Editorial & Responsibility

Author: Sarah Weber - Casino Tester & Bonus Analyst

Fact-checked by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst

Last update: 2026-06-24.

This article on "what is the LUGAS limit file" was written by Sarah Weber and fact-checked by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus terms. All statements regarding licenses, authorities, and legal frameworks refer to publicly accessible sources (GGL (Joint Gambling Authority of the States), Interstate Treaty on Gambling 2021 (GlüStV 2021)).

About the Author

8+ years of casino reviews, 200+ personally tested platforms in the EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: Wagering requirements, payout workflows, customer support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators under the Interstate Treaty on Gambling 2021. PhD in Financial Mathematics. Research focus: Bonus mathematics, wager analysis, player protection systems (OASIS).

Responsible Gambling

Gambling can be addictive. If you feel you are losing control over your gambling behavior, please contact BZgA Gambling Addiction Help, Check-dein-Spiel.de, or use the central player ban system (OASIS (central player ban system)). Set personal deposit and loss limits before playing with real money. Operator pauses and cool-down features are not a sign of weakness—they are a tool for sustainable gaming fun.

Legal Notice

The information in this article is for editorial and comparison purposes only. It does not constitute legal advice. The legal assessment of online gambling without a German license is a gray area and subject to ongoing adjustments by the GGL (Joint Gambling Authority of the States). Players are responsible for complying with local regulations.