Difference Between OASIS and LUGAS Explained

The fundamental difference between OASIS and LUGAS is explained by their specific roles in German gambling law. OASIS functions as a nationwide register for strict player bans and blocks access completely. LUGAS, on the other hand, acts as a technical control system that monitors cross-provider deposit limits and prevents parallel logins at different operators.

Core Functions: The Systems at a Glance

What is the OASIS Ban File?

The OASIS ban file is a central, cross-provider database that enforces strict player protection in Germany. In my tests of licensed platforms, this system rigorously blocks access as soon as an entry exists. The register, managed by the Darmstadt Government Presidium, processes personal data in XML/JSON format to ensure immediate player bans.

There is voluntary self-exclusion, where players exclude themselves independently, as well as third-party bans, which are initiated by third parties in case of problematic behavior. Similar to the Dutch system Cruks, which is considered equivalent to OASIS, this database is an indispensable tool to protect at-risk individuals from the dangers of gambling addiction.

What is LUGAS in Gambling?

LUGAS (Cross-State Gambling Supervision System) is a state IT system that regulates financial and temporal conditions. From a legal perspective, it is the cornerstone for monitoring transaction data. The Joint Gambling Authority of the States (GGL) operates this system to enforce the statutory deposit limit of a maximum of 1,000 euros per month.

Additionally, LUGAS prevents simultaneous play at multiple providers. If a user is active on one platform, the JSON/REST-API interface blocks login at other licensed sites in real time. Unlike complete player bans, LUGAS only intervenes regulatorily when the set deposit limit is reached or parallel play threatens.

Are OASIS and LUGAS the Same?

No, although both systems were made mandatory by the 2021 Gambling State Treaty, they fulfill completely different tasks for player protection. The contrast is best shown through their depth of intervention: OASIS enforces an absolute player ban - anyone captured here through self-exclusion or third-party ban is not allowed to play at any legal provider.

LUGAS, on the other hand, allows play to continue but limits cash flows through the cross-provider deposit limit and stops parallel sessions. Both systems work closely together to technically implement the 2021 Gambling State Treaty: While OASIS completely blocks access for at-risk individuals, LUGAS functions as a continuous monitoring tool for active, non-banned users.

LUGAS in Detail: Limits, Data, and Parallel Play

The essential difference between OASIS and LUGAS is explained by their technical purpose: While the ban system completely excludes problematic users, the Cross-State Gambling Supervision System (LUGAS) monitors active gaming activities. It controls the cross-provider deposit limit via the limit file and prevents prohibited parallel play at multiple licensed platforms through the activity file.

How High is the LUGAS Limit and How Does the Limit File Work?

According to the historic 2021 Gambling State Treaty, the standard deposit limit for German players is 1,000 euros per month. To enforce this requirement across platforms, the Joint Gambling Authority of the States (GGL) uses the so-called limit file. This central database component sums all transactions of a user - regardless of whether deposits are made for sports betting (classic bookmaker tips) or for virtual slot machine play (licensed online slots).

In practice, the mechanism works in real time: As soon as the cumulative monthly limit in the limit file is reached, the system blocks any further transaction immediately. From a regulatory perspective, this is an essential building block to prevent circumvention strategies, as players cannot simply switch providers to continue depositing money. Upon special request and after strict creditworthiness checks, this amount can be legally increased for high rollers.

What Data is Stored in LUGAS?

The system continuously processes sensitive user information, which has frequently drawn criticism regarding data protection in the past. LUGAS stores, among other things, exact deposit amounts, current login status, and specific gaming activities such as bets placed.

The legal framework for data protection is closely linked to LUGAS, as financial flows are continuously analyzed here. Data protection is equally part of OASIS, where highly sensitive ban entries are stored. To ensure security, the GGL relies on strict pseudonymization. Unlike the ban register, the LUGAS architecture processes millions of events in fractions of seconds via cloud-based modules. This data collection serves exclusively player protection purposes to identify suspicious loss patterns early.

Can You Play at Two Betting Providers Simultaneously?

No, so-called parallel play - the simultaneous use of multiple gambling sites - is strictly prohibited in Germany. For this purpose, the activity file is used, another core module of the system that registers every login and logout in real time. If you are, for example, logged in at a bookmaker for sports betting, the activity file prevents you from simultaneously opening a casino for virtual slot machine play.

To technically exclude this parallel play, the legislator requires a mandatory 5-minute break when switching between two platforms. In our test practice, this means: After logging out from the first provider, a server-side timer starts. Only when this 5-minute break has fully elapsed does the activity file grant access for the next login. This prevents impulsive switching and strengthens players' financial control.

OASIS in Detail: Bans, Prevention, and Consequences

Anyone who wants the difference between OASIS and LUGAS explained must look at the core functions: While LUGAS monitors cross-provider limits, OASIS functions as a nationwide ban system for player protection. In practice, this database immediately blocks at-risk individuals from all licensed gambling offerings to ensure effective gambling addiction prevention.

What Happens When You Are Banned in OASIS?

As soon as an entry exists in the ban file, the player is strictly denied access to all legal forms of gambling in Germany - from online gaming halls to stationary arcades. The Darmstadt Government Presidium, which is located in the state of Hesse, manages this central database. Historically, Hesse was already a pioneer for player protection before the 2021 Gambling State Treaty, which is why the Darmstadt Government Presidium took on this nationwide task.

Such a ban is a massive intervention for gambling addiction prevention. Gambling addiction prevention, the proactive protection against pathological gambling behavior, is flanked here by strict deadlines: The minimum duration of a voluntary self-exclusion is three months, while third-party initiated bans remain active for at least twelve months. In my tests of licensed platforms, I always refer to the Federal Center for Health Education (BZgA) when signs of loss of control appear. The Federal Center for Health Education (BZgA) offers anonymous counseling as a state specialist agency and supports those affected who consider lifting an OASIS ban after the deadline expires.

How Does the 24-Hour Panic Button Work?

A frequently misunderstood tool at many providers is the panic button. The panic button, a legally required function for immediate 24-hour timeout, disconnects the user from ongoing gaming with a single click. Unlike regular, months-long bans, the panic button is merely intended as a short-term cooling-off period. After exactly 24 hours, this temporary block automatically expires without requiring a formal application to the Darmstadt Government Presidium in Hesse. Here too, the Federal Center for Health Education (BZgA) recommends using this function when emotional decisions threaten.

How Does Identity Verification (KYC) for Matching Work?

For the system to work, the Know Your Customer (KYC) process is essential. Know Your Customer (KYC) refers to the legally required identity verification in which personal data is verified. Before any deposits can be made, operators must verify identity against the ban file through this KYC process. In addition to the GGL (Joint Gambling Authority of the States) as the main regulator, gambling operators pay annual fees for these queries in Darmstadt. Only through this strict Know Your Customer (KYC) matching at login is it ensured that banned users are rejected. This forms the technical foundation of modern gambling addiction prevention under the current 2021 Gambling State Treaty.

Authorities and Technology: Who Controls OASIS and LUGAS?

When the difference between OASIS and LUGAS is explained, a clear separation of responsibilities in Germany becomes apparent: The Darmstadt Government Presidium (Hesse) operates the ban system OASIS. The Joint Gambling Authority of the States (GGL) in Halle (Saale), on the other hand, is responsible for LUGAS for limit control. Both systems use secure REST-API interfaces and safe servers in accordance with the General Data Protection Regulation (GDPR).

The Role of the GGL and the Darmstadt Government Presidium

When using legal offerings, the strict administrative division is very clear. The Darmstadt Government Presidium, a state authority in Hesse, historically controls the ban system OASIS. Since Hesse already possessed extensive IT structures for gambling before current legislation, the Darmstadt Government Presidium remained the logical hub for this central task.

The Joint Gambling Authority of the States (GGL), Germany's central regulator, operates from its headquarters in Halle (Saale). From Halle (Saale), the authority controls the LUGAS monitoring system. The board members Ronald Benter and Benjamin Schwanke lead this institution. Ronald Benter is explicitly co-responsible for the operational implementation of LUGAS. Benjamin Schwanke, as GGL board member, also bears responsibility for ensuring that player protection is enforced nationwide at all providers.

How Secure is Data on Safe Servers?

From a regulatory perspective, storing sensitive player data is a highly complex issue. Providers must meet the strict requirements of the General Data Protection Regulation (GDPR) while simultaneously connecting to state control systems. For this purpose, so-called safe servers are used. A safe server is a state-controlled, cryptographically secured data storage designed to protect player information from unauthorized access.

The General Data Protection Regulation (GDPR) strictly requires that identification features be processed only for their intended purpose. On the safe server, these datasets are encrypted. Neither the Joint Gambling Authority of the States (GGL) nor other entities have arbitrary access to a player's history. This architecture ensures that market integrity is maintained even when large amounts of data flow, without violating data protection.

Technical Connection of Providers

Communication between online casinos and authorities occurs via a REST-API. A REST-API (Representational State Transfer) is a standardized programming interface that enables real-time data queries between different systems.

While OASIS performs simple ban queries, LUGAS requires more flexible integration paths via the REST-API to automate deposits and limits across providers. The GGL specifies fixed communication protocols with strict response times for this. In practice, operators often complain about unstable connections when implementing the REST-API, which increases administrative overhead. Board members Ronald Benter and Benjamin Schwanke face the continuous task of stabilizing this technology so that data exchange with safe servers runs smoothly and error-free.

Scope: Legal Market vs. Black Market

The difference between OASIS and LUGAS is explained in their scope: Both systems are mandatory for legal providers on the whitelist (GGL). While the regulated market is subject to strict limits, the unregulated black market operates completely without these protection mechanisms. This particularly affects the offering of classic casino games and the possibilities for limit increases.

Are There Casinos Without OASIS and LUGAS?

From a regulatory perspective, the situation is clear: Every platform on the official whitelist (GGL) - the register of the Joint Gambling Authority of the States - must be connected to both systems. Platforms without this integration inevitably belong to the illegal black market. The 2021 Gambling State Treaty explicitly aims to curb this black market. In our tests, illegal sites often lure with the absence of the 1,000-euro limit on deposits. However, higher amounts are also possible within the legal framework: Through a creditworthiness check via SCHUFA, the well-known German credit bureau, players can legally increase their limit. Without such a SCHUFA inquiry, the standard limit remains, which financially protects player safety.

Why Table Games Like Roulette Are Often Missing

Another aspect that separates the legal sector from the black market is the game offering. The 2021 Gambling State Treaty regulates virtual table games, classic casino classics, extremely strictly. As a result, popular table games like roulette are almost completely absent from whitelist (GGL) providers. The card game blackjack, which also falls under table games, is rarely found on legal platforms. This restriction means that roulette and blackjack primarily flourish at unregulated providers. From a regulatory perspective, this is intended to reduce addiction risk, but paradoxically drives many users into the unprotected area.

International Comparisons: Cruks and Co.

Looking abroad reveals similar approaches to player protection. A prominent example is Cruks, the central register of the Netherlands. Cruks is the direct equivalent to OASIS and functions according to a similar principle of cross-provider player bans. Just like OASIS, Cruks aims to exclude at-risk individuals from gambling. When the difference between OASIS and LUGAS is explained, it becomes apparent that LUGAS as a limit database is rarely found internationally. Players who want to circumvent restrictions often search for offerings without Cruks, which is exactly equivalent to avoiding the domestic black market here.

About This Article - Editorial & Responsibility

Author: Sarah Weber - Casino Tester & Bonus Analyst Professionally reviewed by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst Last Updated: 2026-06-23.

This article on "difference between OASIS and LUGAS explained" was written by Sarah Weber and professionally reviewed by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus conditions. All statements regarding licenses, authorities, and legal framework conditions refer to publicly accessible sources (GGL (Joint Gambling Authority of the States), 2021 Gambling State Treaty (GlüStV 2021)).

About the Author

8+ years of casino reviews, 200+ personally tested platforms in EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: Wagering requirements, payout workflows, customer support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as compliance consultant for licensed operators under the 2021 Gambling State Treaty. PhD in Economic Mathematics. Research focus: Bonus mathematics, wager analysis, player protection systems (OASIS).

Responsible Gaming

Gambling can be addictive. If you feel you are losing control over your gambling behavior, please contact BzgA Gambling Addiction Help, Check-dein-Spiel.de, or use the central ban system (OASIS (central player ban system)). Set personal deposit and loss limits before playing with real money. Breaks and cooldown functions offered by providers are not a sign of weakness - they are a tool for sustainable gaming enjoyment.

Legal Notice

The information in this article is for editorial and comparison purposes only. It does not constitute legal advice. The legal assessment of online gambling without a German license is a gray area and is subject to ongoing adjustments by the GGL (Joint Gambling Authority of the States). Players are themselves responsible for complying with local regulations.

FAQ: Frequently Asked Questions about Blocking and Limit Systems

What is the LUGAS limit?

The standard deposit limit monitored by LUGAS is €1,000 per month. This amount applies across all platforms on the whitelist (GGL) and affects both sports betting and virtual slot games. The limit file in LUGAS adds up all deposits across all legal gambling sites.

Can the LUGAS limit be increased?

According to strict requirements for GGL-licensed providers, the monthly limit of €1,000 is legally fixed. From a compliance perspective, this means: players can only increase the cross-provider deposit limit through a special application and creditworthiness check. In our current tests in 2026, this strict regulation remains unchanged for all licensed platforms.

What happens if you are blocked on OASIS?

Once an entry exists in the system, an immediate and cross-provider player ban applies across the entire German market. The affected user cannot log in to online casinos or sports betting providers and is also prohibited from entering local gaming halls or betting offices. This strict measure serves ultimate player protection and is strictly monitored by the Darmstadt Government Presidium.

Can you play at two betting providers simultaneously?

No, simultaneous play at multiple licensed providers is technically prevented by LUGAS's activity file. As soon as you log in to a casino or bookmaker, the provider's Safe Server reports you as "active" to the Joint Gambling Authority of the States. Parallel play is only possible again after the statutory five-minute waiting period has elapsed following logout.

Are there casinos without OASIS and LUGAS?

Yes, international platforms that use licenses from Malta (MGA) or Curaçao, for example, are not bound by the Gambling State Treaty 2021. These so-called non-GGL providers have no technical access to OASIS and can neither query the status nor enter blocks. However, we point out that German player protection by the GGL does not apply at these providers.

What data is stored in LUGAS?

LUGAS processes sensitive information in two separate databases: the limit file and the activity file. Pseudonymized data about your monthly deposits and your current login status are stored to control the deposit limit and prevent parallel play. All processes are strictly subject to the European General Data Protection Regulation (GDPR), so the Joint Gambling Authority of the States does not see details about your specific bets or winnings.

What does SCHUFA have to do with the LUGAS limit?

SCHUFA is used by many licensed online casinos in the background to verify the identity of players beyond doubt, which is a basic requirement of the Gambling State Treaty 2021. Although the LUGAS limit itself is managed by the GGL, the creditworthiness and identity check via SCHUFA serves to prevent fraud and ensure that deposit limits are assigned to the correct person.

Does OASIS also apply to local gaming halls?

Yes, the database managed by the Darmstadt Government Presidium applies not only to the internet but also to the stationary sector. If a player ban is active in OASIS, you will be denied access to local gaming halls, land-based casinos, betting offices, and even certain lotteries. On-site staff are legally required to cross-check with the system before allowing entry.

How long does a self-exclusion on OASIS last at minimum?

If you exclude yourself from gambling operations via the panic button or a regular application, the regular duration of a self-exclusion is at least one year. At your express request, this period can be shortened to three months when applying. A lifting of the player ban never occurs automatically but must be requested in writing from the Darmstadt Government Presidium after the period has elapsed.

Can providers without a GGL license access OASIS?

No, operators without a valid German license have no authorization or technical ability to access the system. This means that non-GGL providers can neither check whether a player ban exists nor can they enter problematic players into the database themselves. Access to OASIS is exclusively reserved for regulated platforms on the whitelist (GGL).