Restrictions: strict advertising, control over responsible gambling
Spain is one of the "toughest" European jurisdictions for advertising gambling and protecting players. The Center for Online Regulation is the national law Ley 13/2011, which is supplemented by detailed by-laws. Two key "pillars" of restrictions are RD 958/2020 (advertising) and RD 176/2023 (the policy of "Juego más seguro" is a safe game). Offline, the rules are set by autonomous communities, but the general philosophy is identical: minimizing harm, protecting youth and vulnerable groups, and transparency of communications.
1) Constraint philosophy
Advertising is allowed only with licensed operators and only in valid forms/windows.
The age threshold is 18 +, age and personality verification measures are required.
Responsible play is part of the mandatory product design (limits, warnings, pauses, access to self-exclusion and help).
Zero tolerance for misleading advertising and targeting of minors/vulnerable persons.
2) Advertising (RD 958/2020): Do's and Don'ts
Time windows and channels
In television and radio broadcasting, gambling advertising is generally limited to the night window; in prime time and in children's/family slots - prohibited.
Online platforms and social networks are required to use hard targeting 18 +, filters and labeling, and store campaign logs.
Formats and creativity
Promises of easy earnings, "wagering" and other socially harmful messages are prohibited.
Influencers/opinion leaders cannot do native integration for wide/youth audiences; clear markings and age filters are required.
Sports sponsorship is strictly limited: logos cannot be placed on uniforms, children's equipment, near children's content; placements in stadiums and broadcasts are subject to strict exposure and timing rules.
The information plate of the responsible game and the visible legal identification of the advertiser are required.
Bonuses and promos
"Sign-in" bonuses for new customers are prohibited; promo is allowed only for already verified customers who meet the criteria for "safe play" (account experience, KYC, no signs of risk).
Aggressive mechanics of "quick" re-deposits, "dogon" and any pressure on the user to return to the game are prohibited.
3) "Juego más seguro" (RD 176/2023): how player protection works
Risk management and segmentation
Operators are required to implement risk-based monitoring: behavioral risk indicators, scoring, triggers for soft/hard intervention (from prompts and pauses to locks).
Groups of increased attention (including young people 18-25) are subject to stricter limits, frequent "reflective" reminders and restrictions on promotions.
Player-side tools
Deposit/time limits, transaction history, session timers, time reminders, timeout button.
Transparent RTP/probabilities and simple explanations of mechanics.
Help channels (telephones, NPOs) visible from the interface "in one click."
Operator procedures
Contact protocols with signs of risk: first - "soft" communication, then - limitation of functionality, if necessary - freezing.
Mandatory event logs and audit trail: all RG decisions are recorded and available for review by the regulator.
4) RGIAJ: Uniform Register of Self-Exclusion
The Registro General de Interdicciones de Acceso al Juego (RGIAJ) is a national register of self-exclusion: putting a player on the base blocks their access to all licensed online operators across the country.
Verification by RGIAJ takes place in real time at the entrance/login and before key actions (deposit, game).
Many autonomies synchronize with RGIAJ and offline bans on visiting halls.
5) KYC/AML and data protection
Hard KYC before the game and money transactions: verification of identity, age, address and means of payment; monitoring suspicious transactions.
AML procedures include source control, limits, reporting and freezing for suspected laundering.
GDPR compatibility: transparent privacy policies, data minimization, data subject rights, restrictions on profiling minors.
6) Offline: a regional framework, but the general spirit is the same
Autonomies establish the rules for the placement of halls, distances from schools, opening hours, requirements for personnel and consumer information.
18 + age limits, local access restriction registers, marketing control in outdoor advertising and sports facilities are applied.
7) Enforcement and sanctions
For violations - large fines, temporary suspension of licenses, requirements of corrective plans, public notifications.
For unlicensed activity, targeting a Spanish audience without a license or violation of advertising/RG standards - a shock block of measures: from de-marketing in platforms to payment restrictions and lawsuits.
8) "Checklist" of compliance for the operator
1. Marketing: night windows/channels with 18 +, marking, without "easy money," without native integrations for a youth audience.
2. Bonuses: only for verified customers; no "welcome bonuses."
3. Interface: limits, timers, reminders, quick access to help, visible RTP/rules.
4. Processes: end-to-end KYC/AML, RG decision logs, intervention regulations, support training.
5. RGIAJ: online checks at every critical step; Immediate execution of statuses
6. Data: GDPR compatibility, minimization, secure storage, DPIA for risk models.
9) What it means for industry and users
For operators: competitiveness is achieved not by aggressive promos, but by UX quality, accurate risk segmentation and impeccable compliance.
For players: the licensed market provides transparency, control tools and real protection - from understandable rules to the right to self-exclusion.
For society and sports: advertising becomes less intrusive, and the industry becomes more predictable and social.
Bottom line. Spain combines a very strict advertising frame with a technologically advanced system of responsible play. This approach supports market sustainability and public trust: gambling remains legal and accessible from licensed operators, but at the same time is built into "safety corridors," where the interest of the player and society is a priority.