How Does the LUGAS Activity File Work?
The LUGAS activity file is a central IT system of the Joint Gambling Authority of the States (GGL). The authority uses it to monitor the login status of players in Germany across all providers. As soon as you log in to a licensed online casino, your status is set to active. This simultaneously blocks logins with other providers, thus preventing parallel play.
Basics & How the LUGAS Activity File Works
What is the LUGAS activity file and how does it prevent parallel play?
The Cross-State Gambling Supervision System (LUGAS) originates from the Interstate Treaty on Gambling 2021 and has two modules: the limit file and the activity file. LUGAS is not an exclusion file like OASIS. OASIS is the "bouncer", while the LUGAS activity file controls and blocks parallel play.
Parallel play means that a user places wagers simultaneously with multiple gambling providers or on multiple slots at the same casino. The database cross-checks every login attempt in real time. If an account is in use, the system blocks any further login across all providers, making parallel play impossible.
How does the switch between active and inactive work?
The technical process is simple. When a user logs in, the casino sends a pseudonymized player ID to the GGL database. The activity file assigns the status "active" to the profile. This status remains throughout the entire session. If the central file reports an active status with another operator, the current casino denies access.
The switch between active and inactive happens in real time. A VPN does not bypass this mechanism. The assignment is tied to the verified identity, not the IP address. In the event of a system error that falsely causes the status to persist, the database automatically changes the state to "inactive" after a period of inactivity.
The 5-minute waiting time when switching providers explained
The activity file controls a statutory waiting time of five minutes. When you log out of a casino and want to switch to another platform, this mandatory pause takes effect immediately. During these five minutes, your profile remains linked to the previous provider in the background.
Only after the time has elapsed does the system unlock you. Then the new operator can activate you. You must strictly observe this pause, even if you only log out briefly and log back in directly with the same provider. After one hour of uninterrupted playing time, the system also forces such a pause. You must actively confirm this.
Technology, Data Protection & Player Data Storage
A central database of the Joint Gambling Authority of the States (GGL) takes care of technical implementation. The system collects pseudonymized player data via an API interface. In this way, it monitors and enforces the cross-provider deposit limit and the ban on parallel play in real time.
Which data is stored in the LUGAS activity file?
Data collection is strictly regulated. The Joint Gambling Authority of the States (GGL) is the state supervisory body headquartered in Halle (Saale). From there, it manages the information flows.
Communication between the casino and the central file runs via an encrypted API interface. This data connection transmits the status in real time. If the connection breaks, legal casinos must interrupt the game immediately. According to the GGL in Halle (Saale), the database collects specific parameters. These include basic data such as name, date of birth, and place of residence. The system also stores the monthly deposit limit including the date of change, deposits made so far, the current activity status, and a derived pseudonym. The technical infrastructure keeps the API interface stable so that the system works without downtime even during high traffic.
Pseudonymization and Player ID: Is data protection guaranteed?
Data processing is subject to the General Data Protection Regulation (GDPR). The system uses pseudonymization, replacing real names with unrecognizable character strings.
Every user receives a unique player ID. This code is directly linked to the pseudonym. The pseudonym prevents direct conclusions about the real person. The casino sends this player ID to the safe servers upon every login. A VPN does not change the status, as the system evaluates the verified player ID. When switching gambling providers, the mentioned protective lock of five minutes applies.
Only the respective provider knows the true identity behind the pseudonym. Thanks to this separation, data protection is maintained.
How can I have my data deleted from LUGAS?
The deletion of the player ID is governed by the GDPR. Players do not have direct access to the database. They must permanently close their player account at the casino to have information removed.
The provider then sends a signal via the API interface to remove the player ID. The operator thus requests the deletion of the records. The system automatically deletes the information after profile deactivation with the license holder. BZgA gambling addiction support recommends account closure if gambling becomes a financial burden.
Legal Background: GGL, GlüStV 2021, and OASIS
The Interstate Treaty on Gambling 2021 provides the legal basis for the LUGAS activity file. The law obliges all licensed providers to use the system. The GGL manages the central database. It enforces the cross-provider deposit limit and prevents parallel play.
The Role of the GGL and the Interstate Treaty on Gambling 2021
The Interstate Treaty on Gambling 2021 (GlüStV) regulates the German market. It stipulates that all online gambling providers with a German license must be connected to the IT system. This applies equally to platforms for sports betting and virtual slot games. Since January 2023, the GGL has managed this infrastructure. The authority, based in Halle an der Saale, is the central state supervisory authority. It controls the legal market and enforces player protection. Board members such as Ronald Benter regularly point out the necessity of this data-driven supervision.
LUGAS vs. OASIS: What is the exact difference?
Players often confuse the two central systems. However, they fulfill different tasks in player protection. The technical difference looks like this:
| System | Main function | Mode of operation |
|---|---|---|
| OASIS | Pure exclusion system ("bouncer") | Completely prevents gambling-addicted or at-risk individuals from further participating in gambling. |
| LUGAS | Activity and finance tracker | Prevents parallel play across multiple bookmakers simultaneously and monitors deposits made. |
OASIS blocks general access. LUGAS intervenes during active gaming operations.
How the limit file complements the 1,000-euro limit
LUGAS comprises the activity file and the limit file. The limit file enforces the statutory 1,000-euro monthly limit across all providers. When a user makes a deposit, the system checks via the player ID whether the 1,000-euro limit has been reached.
The activity file simultaneously blocks parallel play. It sets the status to "active" or "inactive" and enforces the 5-minute waiting time when switching providers. GGL Board Member Ronald Benter emphasizes that this combination of limit file and activity file secures player protection in terms of time and finances.
Troubleshooting: Resolving Issues with Active Status
The system blocks parallel play across providers. If the status gets stuck, it is often due to a communication error between the casino and the Saxony-Anhalt State Administration Office. However, after a certain period without transactions, the database automatically logs the user out.
Why am I reported as active in LUGAS even though I am not playing?
This problem occurs with major bookmakers like Tipico. The sports betting provider reports every login to the database. If you only close the browser window, the player ID remains stuck in the evaluation system. The IT infrastructure then waits in vain for the logout signal.
The GGL uses this session control in accordance with the GlüStV for player protection. Parallel play must be strictly prevented. Users occasionally confuse this with the panic button. The panic button triggers an immediate 24-hour ban and blocks access completely. A stuck LUGAS status merely prevents logging in with another gambling provider.
How long does it take for LUGAS to automatically set me to inactive?
If the evaluation system records no transactions on the account over a longer period, a safety mechanism kicks in. LUGAS then automatically changes the status to "inactive".
The Saxony-Anhalt State Administration Office has been responsible for administration since mid-2021 and integrated this timeout function. The authority thus ensures that customers do not remain blocked indefinitely after a lost connection. After a proper logout, exactly five minutes must elapse. Only then is a new login with another operator like Tipico possible.
What to do if the evaluation system or safe server hangs?
The safe server is a local interface at the gambling provider. It is directly connected to the GGL and LUGAS. If the connection fails, the server does not transmit the inactive command. The limit file continues to track data in the meantime.
If a technical problem at the casino causes the disruption, you should first close all open browser tabs on all devices. If that does not help, contact customer support. The staff is obligated to correct the status manually. The panic button or a VPN will not solve the server problem. The block is firmly tied to the verified identity.
Bypassing, Black Market & Alternatives
Legally bypassing the system is impossible in Germany. Players who avoid LUGAS end up on the black market. There, there is neither a credit check nor reliable protection against gambling addiction.
Can the LUGAS system be legally bypassed?
Licensed platforms in Germany do not allow any bypassing. The limit file enforces the cross-provider deposit limit of 1,000 euros. It is technically inextricably linked to LUGAS.
Increasing this amount requires an in-depth credit check by the operator. Without a positive solvency check, the standard limit remains in place. The German Sports Betting Association (DSWV) supports these requirements. The trade association of legal betting providers considers these hurdles necessary to prevent illegal gambling.
Are there safe online casinos without LUGAS?
In Germany, there are no legal online casinos without this connection. Every legal operator is on the official whitelist. This state register lists all permitted gambling providers. Anyone missing from the whitelist operates illegally. The DSWV points out that only licensed providers offer legal certainty.
The Dangers of the Black Market and Lack of Player Protection
Anyone bypassing state controls ends up on the black market. Unregulated providers lure players with unlimited stakes, but offer no player protection. Neither the deposit limit nor the OASIS exclusion file applies there. Without these systems, the risk of gambling addiction increases. Impulsive betting is not blocked on the black market.
About This Article - Editorial & Responsibility
Author: Sarah Weber - Casino Tester & Bonus Analyst
Fact-checked by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst Last
update: 2026-06-24.
This article on "how the LUGAS activity file works" was written by Sarah Weber and fact-checked by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus terms. All statements regarding licenses, authorities, and legal frameworks refer to publicly accessible sources (GGL (Joint Gambling Authority of the States), Interstate Treaty on Gambling 2021 (GlüStV 2021)).
About the Author
8+ years of casino reviews, 200+ personally tested platforms in EU and international markets. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout workflows, customer support evaluation.
About the Reviewer
12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators under the Interstate Treaty on Gambling 2021. PhD in Financial Mathematics. Research focus: bonus mathematics, wager analysis, player protection systems (OASIS).
Responsible Gambling
Gambling can be addictive. If you feel that you are losing control of your gambling behavior, please contact BZgA Gambling Addiction Support, Check-dein-Spiel.de, or use the central exclusion system (OASIS (central player exclusion system)). Set personal deposit and loss limits before playing with real money. Pauses and cooldown features provided by operators are not a sign of weakness—they are a tool for sustainable gaming enjoyment.
Legal Disclaimer
The information in this article is for editorial and comparison purposes only. It does not constitute legal advice. The legal evaluation of online gambling without a German license is a gray area and subject to ongoing adjustments by the GGL (Joint Gambling Authority of the States). Players are solely responsible for complying with local regulations.