The Kansspelautoriteit (KSA) has published two comprehensive investigations and updated guidance regarding the execution of the “duty of care” by online gambling licensees. This regulatory pivot follows an intensive period of market scrutiny, during which the Dutch regulator identified significant shortcomings in how operators monitor real-time player behaviour and execute timely interventions to prevent problem gambling.
The newly released documents serve as a prescriptive framework for the industry, moving beyond theoretical obligations to provide clear, actionable mandates for player protection. By formalising these expectations, the KSA aims to eliminate the operational ambiguity that has previously resulted in multi-million euro fines and binding enforcement orders across the Dutch iGaming sector.

Strategic Outlook: High-Level Implications for Regulatory Compliance
The KSA’s latest publication aims to harmonise the industry’s approach to player protection by providing concrete examples of regulatory expectations. For executives and compliance officers, these findings signal a shift from discretionary monitoring to a more prescriptive intervention model.
- Mandatory Intervention Triggers: Operators must now ensure that “personal contact” is not merely a procedural check but a meaningful intervention when players hit specific financial thresholds.
- Enhanced Affordability Verification: Following recent binding orders against major market participants, the KSA is reinforcing that self-reported income data is insufficient for raising deposit limits.
- Cruks Registration Protocols: The guidance provides clarity on the involuntary registration process for the Central Register of Exclusion from Gambling (Cruks), emphasising the operator’s role in identifying high-risk individuals.
- Operational Consistency: By detailing findings from recent investigations, the regulator is setting a baseline for what constitutes “sufficient” monitoring, reducing the ambiguity that previously led to enforcement actions.
Operational Benchmarks: Key Findings from KSA Investigations
The KSA’s investigations into the current market landscape revealed inconsistencies in how licensees handle “at-risk” players. While many operators have automated systems to flag unusual betting patterns, the regulator found that the subsequent human intervention often lacked the necessary depth to prevent harm effectively.
Specifically, the regulator noted that some licensees allowed players to maintain high deposit limits without verifiable proof of income. This follows the precedent set by the Beleidsregel verantwoord spelen 2024 (Responsible Gaming Policy Rule 2024), which introduced stricter financial thresholds. Under these rules, players aged 24 and older are subject to a €700 monthly net deposit limit, while young adults (18–24) are restricted to €300, unless an affordability check, supported by objective evidence, is completed.
The guidance also addresses the “duty of care” in the context of sports betting, ensuring that operators do not cross the boundaries of their specific licences. This follows previous warnings from the KSA regarding the unauthorised offering of specific sports markets, which the regulator views as a breach of consumer protection standards.
Mandatory Reporting and Involuntary Cruks Registration Protocols
A significant portion of the new guidance focuses on the practical application of involuntary Cruks registration. Licensees are required to notify the KSA when a player displays signs of addiction and refuses voluntary exclusion. The KSA’s documentation now provides a clearer roadmap for this “knowledge notification” process, ensuring that operators fulfil their legal obligation to report “unmoderate participation” or risks of gambling addiction.
This regulatory push aligns with recent enforcement trends where the KSA has issued significant fines for advertising breaches, such as untargeted marketing incidents. The regulator maintains that the duty of care extends beyond the gaming platform itself and into the way products are marketed to vulnerable demographics.
2026 Enforcement Landscape: Affordability and Financial Oversight
The publication of this guidance comes on the heels of a €734,000 fine recently imposed on an unnamed licensee for failing to protect young adults. In that case, the KSA found that the operator had not adequately intervened despite clear signals of problematic play. Furthermore, a binding order issued to Hillside (Bet365) earlier this year highlighted that setting deposit limits at 30% of a player’s net income is a critical benchmark that must be verified through “sufficient, correct, and verifiable” documentation.
The KSA has indicated that it will continue to “intensify” its oversight throughout 2026. For operators in the Dutch market, the message is clear: the period of regulatory adjustment is over, and the era of strict, evidence-based enforcement of the duty of care has begun.