Germany permits specific forms of online gambling under German authorisation. Our report explains the rules and audits what ten directory country tags actually establish.
Short answer: Online gambling is legal in Germany only within the applicable German permission framework. The operator, website, type of game and permitted territory matter. A website accepting German customers is not, by itself, evidence of authorisation.
Research checked: 31 October 2026. The official whitelist displayed a 2 October 2026 update date when consulted. This report combines regulator guidance with a dated audit of our directory’s Germany-tagged records.
The Interstate Treaty on Gambling 2021, commonly called the GlüStV 2021, is the central framework. The GGL explains that public gambling requires permission from the competent German authority and that advertising unauthorised gambling is prohibited. The treaty took effect on 1 July 2021. Read the GGL’s explanation of unauthorised gambling for the official position.
These distinctions follow the GGL’s game-category and authority guidance. A brand may operate several products, but each product needs the applicable permission. “Casino” in everyday marketing is broader than the legal category.
The GGL’s online casino FAQ explains that the Länder can organise online casino games themselves or issue a limited number of concessions for their territory. There is no general nationwide GGL licence for a private operator’s online casino table games. A virtual-slots permission therefore does not establish permission for live roulette or blackjack. Check the recorded territory as well as the game category; a state-specific entry should not be presented as nationwide authorisation.
A foreign licence does not replace the required German permission. The European Consumer Centre Germany explicitly explains that a licence from another EU country is insufficient on its own. Equally, an operator based in Malta can hold a German permission: its address alone does not decide the question. The relevant evidence is the German authorisation for the particular service.
A German-language interface, euro pricing, familiar payment methods, a .de-looking brand identity or a country flag cannot complete that check. Those details describe presentation or availability. The permission record describes legal scope.
We examined every record returned by our published casino-listing index whose countries array contained the exact value Germany on 31 October 2026. The sample contained 10 profiles. We compared the country tag with the existing licenseName and licenseJurisdiction text fields; we did not infer authorisation from scores, offers or affiliate relationships.
What this finding establishes: country availability and multi-market licence summaries are different kinds of information. A country tag cannot stand in for a documented, product-specific permission check. The four records may reflect incomplete editorial labelling or separate regional operations; this audit does not establish that those businesses lack German permission.
The ten sampled record names were AHTI Games, Betano, Betway Germany, DrückGlück, JackpotStar, Lottoland, LuckiNiki, Play OJO, Slots Magic and Turbo Nino. For the multi-market count, we checked whether the jurisdiction field also named Malta, the United Kingdom or Great Britain, Denmark, Sweden or Spain. For the licence-name count, we checked for GGL, Gemeinsame, Germany or Deutschland, without case sensitivity. Each record was counted once.
The underlying records had publication dates between 7 and 16 October 2026. The findings are a dated data-quality study, not a live tally, a representative survey of Germany’s gambling market or a verdict on any named operator. New profiles and editorial corrections can change the directory after this report. We did not open accounts, test payments or independently certify the ten services.
For example, a hypothetical brand’s international slots review and its German table-game service could concern different domains, products or entities. A permission belonging to one should not be silently transferred to the other. This is an editorial verification method, not an additional licensing rule.
The official GGL whitelist records permitted operators and intermediaries, with game categories, websites, territory and responsible authority. It includes permissions overseen by state authorities as well as the GGL. The page states that the list is updated when needed and at least monthly. Its displayed update date is separate from this report’s research date.
Use the register to check a specific authorisation claim. If a name does not immediately match, examine the legal entity and the exact website information; do not substitute a similarly named company. Where the scope or status remains unclear, seek clarification from the responsible authority. We do not publish a recommended-casino list in this report.
The GGL’s illegal-gambling identification FAQ states that an application alone does not authorise an offering. The authority identifies the whitelist as the key public reference. It also warns that intentional participation in unauthorised gambling can carry criminal consequences. Individual liability and disputes require advice on the facts; this report does not decide anyone’s legal position.
The GGL’s player-protection overview describes identity checks, named payment accounts and account controls. These are regulatory protections, not a guarantee against losses or a promise that withdrawals will never be delayed. The GGL’s account guidance states that people under 18 are not eligible to participate in the online gambling it describes.
LUGAS and limits: the GGL’s current limits FAQ describes a general cross-provider monthly deposit ceiling of €1,000, with regulated exceptions. It also describes €1 as the default virtual-slots stake and conditional exceptions introduced in July 2026. Accordingly, a generic “always €1” or “always €1,000” claim is incomplete. These are different limits and neither is a licensing certificate.
OASIS: this is the cross-product exclusion system. RP Darmstadt’s official FAQ explains how exclusions work and provides the official application route. A standard exclusion does not simply expire automatically; the rules differ from the separate 24-hour exclusion. A directory badge does not establish whether an individual is eligible to participate.
Availability is not proof of authorisation. Use the four checks above and the official register; a country tag alone cannot answer the legal question.
They are different legal categories. The relevant state-level online casino permission and territory need a separate check.
A badge needs supporting evidence identifying the company, website, product and territory. Read its source and date rather than treating the label as an unlimited assurance.
This report preserves its 31 October 2026 sample so readers can cite the research. The directory’s live comparison figures can change independently. A later research edition would need a new sample, method check and date.
General information, not individual legal advice or legal certification. Research checked on 31 October 2026. Consult the current official sources because permissions, rules and register entries can change.
Original research source: Affiliates Directory’s public casino-listing index, exact Germany country filter; sample names, fields and counting rules are disclosed above. The index is an editorial dataset and is separate from the official whitelist. The study measured field descriptions, not licence validity.