Difference Between OASIS and LUGAS Explained

The fundamental difference between OASIS and LUGAS is explained through their specific roles in German gambling law. OASIS functions as a nationwide register for strict player blocking and completely blocks access. LUGAS, on the other hand, acts as a technical control system that monitors cross-provider deposit limits and prevents parallel logins at different operators.

What is the OASIS blocking file?

The OASIS blocking file is a central, cross-provider database that enforces strict player protection in Germany. In my tests of licensed platforms, this system rigorously blocks access as soon as an entry exists. The register, managed by the Government Presidium Darmstadt, processes personal data in XML/JSON format to ensure immediate player blocking.

There is voluntary self-exclusion, where players exclude themselves independently, as well as third-party blocking, which is initiated by third parties in case of problematic behavior. Similar to the Dutch system Cruks, which is considered equivalent to OASIS, this database is an indispensable tool to protect at-risk individuals from the risks of gambling addiction.

What is LUGAS in gambling?

LUGAS (Cross-State Gambling Supervision System) is a state IT system that regulates financial and temporal framework conditions. From a legal perspective, it is the cornerstone for monitoring transaction data. The Joint Gambling Authority of the States (GGL) operates this system to enforce the statutory deposit limit of a maximum of 1,000 euros per month.

Additionally, LUGAS prevents simultaneous play at multiple providers. When a user is active on one platform, the JSON/REST API interface blocks login at other licensed sites in real time. Unlike complete player blocking, LUGAS only intervenes regulatorily when the set deposit limit is reached or parallel play threatens to occur.

Are OASIS and LUGAS the same?

No, although both systems were made mandatory by the 2021 Gambling State Treaty, they fulfill completely different tasks for player protection. The contrast is best shown through their depth of intervention: OASIS enforces absolute player blocking - anyone captured here through self-exclusion or third-party blocking is no longer allowed to play at any legal provider.

LUGAS, on the other hand, allows play to continue but limits cash flows through the cross-provider deposit limit and stops parallel sessions. Both systems work closely together to technically implement the 2021 Gambling State Treaty: While OASIS completely blocks access for addiction-prone individuals, LUGAS functions as a continuous monitoring tool for active, non-blocked users.

LUGAS in Detail: Limits, Data, and Parallel Play

The essential difference between OASIS and LUGAS is explained through their technical purpose: While the blocking system completely excludes problematic users, the Cross-State Gambling Supervision System (LUGAS) monitors active gaming activities. It controls the cross-provider deposit limit via the limit file and prevents prohibited parallel play at multiple licensed platforms through the activity file.

How high is the LUGAS limit and how does the limit file work?

According to the historical 2021 Gambling State Treaty, the standard deposit limit for German players is 1,000 euros per month. To enforce this requirement across platforms, the Joint Gambling Authority of the States (GGL) uses the so-called limit file. This central database component sums all transactions of a user - regardless of whether deposits are made for sports betting (classic bookmaker tips) or for virtual slot machine play (licensed online slots).

In practice, the mechanism works in real time: As soon as the cumulative monthly limit in the limit file is reached, the system immediately blocks any further transaction. From a regulatory perspective, this is an essential building block to prevent circumvention strategies, as players cannot simply switch providers to continue depositing money. Upon special request and after strict creditworthiness review, this amount can be legally increased for high rollers.

What data is stored in LUGAS?

The system continuously processes sensitive user information, which has frequently attracted criticism regarding data protection in the past. LUGAS stores, among other things, exact deposit amounts, current login status, and specific gaming activities such as bets placed.

The legal framework for data protection is closely linked to LUGAS, as financial flows are continuously analyzed here. Data protection is equally important to OASIS, where highly sensitive blocking notes are stored. To ensure security, the GGL relies on strict pseudonymization. Unlike the blocking register, the LUGAS architecture processes millions of events in fractions of seconds via cloud-based modules. This data collection serves exclusively player protection purposes to identify suspicious loss patterns early.

Can you play at two betting providers simultaneously?

No, so-called parallel play - the simultaneous use of multiple gambling sites - is strictly prohibited in Germany. For this purpose, the activity file is used, another core module of the system that registers every login and logout in real time. If you are, for example, logged in at a bookmaker for sports betting, the activity file prevents you from simultaneously opening a casino for virtual slot machine play.

To technically exclude this parallel play, the legislator prescribes a mandatory 5-minute break when switching between two platforms. In our test practice, this means: After logging out from the first provider, a server-side timer starts. Only when this 5-minute break has completely elapsed does the activity file release access for the next login. This prevents impulsive switching and strengthens players' financial control.

OASIS in Detail: Blocking, Prevention, and Consequences

To understand the difference between OASIS and LUGAS, one must examine their core functions: While LUGAS monitors cross-provider limits, the Cross-State Gambling Supervision System (LUGAS) monitors active gaming transactions. In practice, this database immediately blocks at-risk individuals from all licensed gambling offerings to ensure effective gambling addiction prevention.

What happens if you are blocked in OASIS?

Once an entry exists in the blocking file, the player is strictly denied access to all legal forms of gambling in Germany - from online gaming halls to brick-and-mortar arcades. The Government Presidium Darmstadt, which is located in the state of Hesse, manages this central database. Historically, Hesse was already a pioneer for player protection before the 2021 Gambling State Treaty, which is why the Government Presidium Darmstadt took on this nationwide task.

Such a block is a massive intervention for gambling addiction prevention. Gambling addiction prevention, the proactive protection against pathological gambling behavior, is flanked here by strict deadlines: The minimum duration of voluntary self-exclusion is three months, while third-party blocks initiated by others remain active for at least twelve months. In my tests of licensed platforms, I always refer to the Federal Center for Health Education (BZgA) when signs of loss of control appear. The Federal Center for Health Education (BZgA) offers anonymous counseling as a state specialist agency and supports those affected who consider lifting the OASIS block after the deadline expires.

How does the 24-hour panic button work?

An often misunderstood tool at many providers is the panic button. The panic button, a legally required function for immediate 24-hour timeout, disconnects the user from ongoing gaming with one click. Unlike regular, months-long blocking, the panic button is only intended to serve as a short-term cooling-off period. After exactly 24 hours, this temporary block automatically expires without requiring a formal application to the Government Presidium Darmstadt in Hesse. Here too, the Federal Center for Health Education (BZgA) recommends using this function when emotional decisions threaten.

How does identity verification (KYC) for the comparison work?

For the system to work, the Know Your Customer (KYC) process is essential. Know Your Customer (KYC) refers to the legally required identity verification in which personal data is verified. Before any deposits can be made, operators must verify identity against the blocking file through this KYC process. In addition to the GGL (Joint Gambling Authority of the States) as the main supervisor, gambling operators pay annual fees for these queries in Darmstadt. Only through this strict Know Your Customer (KYC) comparison at login is it ensured that blocked users are rejected. This forms the technical foundation of modern gambling addiction prevention under the current 2021 Gambling State Treaty.

Authorities and Technology: Who Controls OASIS and LUGAS?

When the difference between OASIS and LUGAS is explained, a clear separation of responsibilities in Germany becomes apparent: The Government Presidium Darmstadt (Hesse) operates the OASIS blocking system. The Joint Gambling Authority of the States (GGL) in Halle (Saale) is responsible for LUGAS for limit control. Both systems use secure REST API interfaces and safe servers in accordance with the General Data Protection Regulation (GDPR).

The role of the GGL and the Government Presidium Darmstadt

When using legal offerings, the strict administrative division is very clear. The Government Presidium Darmstadt, a state authority in Hesse, historically controls the OASIS blocking system. Since Hesse already had extensive IT structures for gambling before current legislation, the Government Presidium Darmstadt remained the logical hub for this central task.

The Joint Gambling Authority of the States (GGL), the central German regulator, operates from its headquarters in Halle (Saale). From Halle (Saale), the authority controls the LUGAS monitoring system. The board members Ronald Benter and Benjamin Schwanke lead this institution. Ronald Benter is explicitly co-responsible for the operational LUGAS implementation. Benjamin Schwanke, as GGL board member, also bears responsibility for ensuring that player protection is enforced nationwide at all providers.

How secure is the data on the safe servers?

From a regulatory perspective, storing sensitive player data is a highly complex issue. Providers must meet the strict requirements of the General Data Protection Regulation (GDPR) while simultaneously connecting to state control systems. For this purpose, so-called safe servers are used. A safe server is a state-controlled, cryptographically secured data storage designed to protect player information from unauthorized access.

The General Data Protection Regulation (GDPR) strictly requires that identification features be processed only for their intended purpose. On the safe server, these data sets are encrypted. Neither the Joint Gambling Authority of the States (GGL) nor other entities have arbitrary access to a player's history. This architecture ensures that market integrity is maintained even when large amounts of data flow without violating data protection.

Technical connection of providers

Communication between online casinos and authorities occurs via a REST API. A REST API (Representational State Transfer) is a standardized programming interface that enables real-time data queries between different systems.

While OASIS performs simple blocking queries, LUGAS requires more flexible integration paths via the REST API to automate deposits and limits across providers. The GGL sets fixed communication protocols with strict response times for this. In practice, operators often complain about unstable connections when implementing the REST API, which increases administrative overhead. Board members Ronald Benter and Benjamin Schwanke face the continuous task of stabilizing this technology so that data exchange with safe servers runs smoothly and error-free.

Scope: Legal Market vs. Black Market

The difference between OASIS and LUGAS is explained in their scope: Both systems are mandatory for legal providers on the whitelist (GGL). While the regulated market is subject to strict limits, the unregulated black market operates completely without these protection mechanisms. This particularly affects the offering of classic casino games and the possibilities for limit increases.

Are there casinos without OASIS and LUGAS?

From a regulatory perspective, the situation is clear: Every platform on the official whitelist (GGL) - the register of the Joint Gambling Authority of the States - must be connected to both systems. Platforms without this integration inevitably belong to the illegal black market. The 2021 Gambling State Treaty explicitly aims to curb this black market. In our tests, illegal sites often lure with the absence of the 1,000-euro deposit limit. However, higher amounts are also possible within the legal framework: Through a creditworthiness check via SCHUFA, the well-known German credit bureau, players can completely legally increase their limit. Without such a SCHUFA inquiry, the standard limit remains, which financially secures player protection.

Why table games like roulette are often missing

Another aspect that separates the legal sector from the black market is the game offering. The 2021 Gambling State Treaty regulates virtual table games, classic casino classics, extremely strictly. As a result, popular table games like roulette are almost completely absent from whitelist (GGL) providers. The card game blackjack, which also counts as a table game, is rarely found on legal platforms. This restriction means that roulette and blackjack flourish primarily at unregulated providers. From a regulatory perspective, this is intended to reduce addiction risk, but paradoxically drives many users into the unprotected area.

International comparisons: Cruks and others

Looking abroad shows similar approaches to player protection. A prominent example is Cruks, the central register of the Netherlands. Cruks is the direct equivalent to OASIS and functions according to a similar principle of cross-provider player blocking. Just like OASIS, Cruks aims to exclude at-risk individuals from gambling. When the difference between OASIS and LUGAS is explained, it becomes clear that LUGAS as a limit database is rarely found internationally. Players seeking to circumvent restrictions often look for offerings without Cruks, which is exactly equivalent to avoiding the domestic black market here.

About This Article - Editorial & Responsibility

Author: Sarah Weber - Casino Tester & Bonus Analyst

Professionally reviewed by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst Last

Update: 2026-06-23.

This article on "difference between OASIS and LUGAS explained" was written by Sarah Weber and professionally reviewed by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus terms. All statements regarding licenses, authorities, and legal framework conditions refer to publicly accessible sources (GGL (Joint Gambling Authority of the States), Gambling State Treaty 2021 (GlüStV 2021)).

About the Author

8+ years of casino reviews, 200+ personally tested platforms in EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: Wagering conditions, payout workflows, customer support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as compliance consultant for licensed operators under the 2021 Gambling State Treaty. PhD in economic mathematics. Research focus: Bonus mathematics, wager analysis, player protection systems (OASIS).

Responsible Gaming

Gambling can be addictive. If you feel you are losing control over your gambling behavior, please contact BzgA Gambling Addiction Help, Check-dein-Spiel.de, or use the central blocking system (OASIS (central player blocking system)). Set personal deposit and loss limits before playing with real money. Breaks and cooldown functions from providers are not a sign of weakness - they are a tool for sustainable gaming enjoyment.

Legal Notice

The information in this article is for editorial and comparison purposes only. It does not constitute legal advice. The legal assessment of online gambling without a German license is a gray area and is subject to ongoing adjustments by the GGL (Joint Gambling Authority of the States). Players are personally responsible for complying with local regulations.