Difference between OASIS and LUGAS explained
The fundamental difference between OASIS and LUGAS is explained by their specific roles in German gambling law. OASIS functions as a nationwide register for strict player exclusion and blocks access completely. LUGAS, on the other hand, acts as a technical control system that monitors the cross-operator deposit limit and prevents parallel logins with different operators.
What is the OASIS exclusion database?
The OASIS exclusion database is a central, cross-operator database that enforces strict player protection in Germany. In my tests of licensed platforms, it is clear that this system rigorously blocks access as soon as an entry is present. The register, managed by the Darmstadt Regional Council, processes personal data in XML/JSON format to ensure an immediate player ban.
There is the voluntary self-exclusion, where players exclude themselves, as well as third-party exclusion, which is initiated by third parties in the event of problematic behavior. Similar to the Dutch Cruks system, which is considered the equivalent of OASIS, this database is an indispensable tool to protect vulnerable people from the risks of gambling addiction.
What is LUGAS in gambling?
LUGAS (Cross-State Gambling Supervision System) is a state IT system that regulates financial and time frameworks. Legally speaking, it is the centerpiece for monitoring transaction data. The Joint Gambling Authority of the Federal States (GGL) operates this system to enforce the statutory deposit limit of a maximum of 1,000 euros per month.
Additionally, LUGAS prevents parallel playing at multiple operators simultaneously. If a user is active on one platform, the JSON/REST API interface blocks the login on other licensed sites in real time. In contrast to a complete player ban, LUGAS only intervenes for regulatory purposes when the specified deposit limit is reached or parallel play is imminent.
Are OASIS and LUGAS the same?
No, although both systems were mandatorily introduced by the 2021 State Treaty on Gambling, they fulfill completely different tasks for player protection. The contrast is best shown by their depth of intervention: OASIS enforces an absolute player ban - anyone registered here through a self-exclusion or third-party exclusion is no longer allowed to play with any legal operator.
LUGAS, on the other hand, allows play to continue but limits cash flows through the cross-operator deposit limit and stops parallel sessions. Both systems work closely together to technically implement the 2021 State Treaty on Gambling: while OASIS completely blocks access for people at risk of addiction, LUGAS functions as a continuous monitoring tool for active, non-blocked users.
LUGAS in detail: Limits, data, and parallel play
The essential difference between OASIS and LUGAS is explained by their technical objectives: while the exclusion system completely excludes problematic users, the Cross-State Gambling Supervision System (LUGAS) monitors active gaming processes. It controls the cross-operator deposit limit via the limit file and prevents forbidden parallel play on multiple licensed platforms through the activity file.
How high is the LUGAS limit and how does the limit file work?
According to the historic State Treaty on Gambling of 2021, the default deposit limit for German players is 1,000 euros per month. To enforce this requirement across platforms, the Joint Gambling Authority of the Federal States (GGL) uses the so-called limit file. This central database component sums up all transactions of a user - regardless of whether the deposits are made for sports betting (classic bookmaker tips) or for virtual slot games (licensed online slots).
In practice, the mechanism operates in real time: as soon as the cumulative monthly limit in the limit file is reached, the system immediately blocks any further transaction. From a regulatory perspective, this is an essential building block to prevent bypass strategies, as players cannot simply switch operators to continue depositing money. However, upon special application and after a strict credit check, this amount can be legally increased for high rollers.
What data is stored in LUGAS?
The system continuously processes sensitive user information, which has often sparked criticism regarding data protection in the past. LUGAS stores, among other things, the exact deposit amounts, the current login status, and specific gaming activities such as the wagers placed.
The legal framework for data protection is closely linked to LUGAS, as financial flows are continuously analyzed here. Data protection also belongs to OASIS, where highly sensitive block flags are located. To ensure security, the GGL relies on strict pseudonymization. Unlike the exclusion register, the LUGAS architecture processes millions of events in fractions of a second via cloud-based modules. This data collection serves exclusively for player protection to detect conspicuous loss patterns at an early stage.
Can you play at two betting operators at the same time?
No, so-called parallel play - i.e., the simultaneous use of multiple gambling sites - is strictly prohibited in Germany. For this purpose, the activity file is used, another core module of the system that registers every login and logout in real time. For example, if you are logged in to a sports betting bookmaker, the activity file prevents you from opening a virtual slot machine casino at the same time.
To technically rule out this parallel play securely, the law prescribes a mandatory 5-minute break when switching between two platforms. In our testing practice, this means: after logging out from the first operator, a server-side timer starts. Only when this 5-minute break has completely expired does the activity file release access for the next login. This prevents impulsive switches and strengthens the players' financial control.
OASIS in detail: Bans, prevention, and consequences
Anyone who wants to have the difference between OASIS and LUGAS explained must look at the core functions: while LUGAS monitors cross-operator limits, OASIS acts as a nationwide exclusion system for player protection. In practice, this database immediately blocks vulnerable people from all licensed gambling offers to ensure effective gambling addiction prevention.
What happens if you are blocked in OASIS?
As soon as an entry in the exclusion database exists, the player is strictly denied access to all legal forms of gambling in Germany - from online casinos to land-based arcades. The Darmstadt Regional Council, which is located in the federal state of Hesse, manages this central database. Historically, Hesse was already a pioneer in player protection before the 2021 State Treaty on Gambling, which is why the Darmstadt Regional Council took over this federal task.
Such an exclusion is a massive intervention for gambling addiction prevention. Gambling addiction prevention, i.e., proactive protection against pathological gambling behavior, is accompanied here by strict deadlines: the minimum duration of a voluntary self-exclusion is a quarter of a year, while third-party exclusions initiated by third parties remain active for at least twelve months. In my tests of licensed platforms, I always refer to the Federal Centre for Health Education (BZgA) in case of signs of loss of control. The Federal Centre for Health Education (BZgA), as a state specialist authority, offers anonymous counseling and supports affected individuals who are considering a lifting of the OASIS ban after the deadline has expired.
How does the 24-hour panic button work?
An often misunderstood tool at many operators is the panic button. The panic button, a legally required function for an immediate 24-hour timeout, disconnects the user from the ongoing game action with a single click. In contrast to the regular, months-long exclusion, the panic button is only intended to serve as a short-term cooling-off phase. After exactly 24 hours, this temporary block expires automatically without a formal application having to be submitted to the Darmstadt Regional Council in Hesse. Here, too, the Federal Centre for Health Education (BZgA) recommends using this function if emotional decisions are imminent.
How does the identity verification (KYC) process work for database matching?
For the system to take effect, the Know Your Customer (KYC) process is essential. Know Your Customer (KYC) refers to the legally required identity check in which personal data is verified. Before the first deposits can be made, operators must match the identity with the exclusion database via this KYC process. In addition to the GGL (Joint Gambling Authority of the Federal States) as the main supervisor, gambling operators pay annual fees for these queries in Darmstadt. Only through this strict Know Your Customer (KYC) matching during login is it ensured that blocked users are rejected. This forms the technical foundation of modern gambling addiction prevention under the current 2021 State Treaty on Gambling.
Authorities and technology: Who controls OASIS and LUGAS?
When the difference between OASIS and LUGAS is explained, a clear separation of responsibilities in Germany is revealed: the Darmstadt Regional Council (Hesse) operates the OASIS exclusion system. The Joint Gambling Authority of the Federal States (GGL) in Halle (Saale), on the other hand, is responsible for LUGAS for limit control. Both systems use secure REST API interfaces and safe servers in accordance with the General Data Protection Regulation (GDPR).
The role of the GGL and the Darmstadt Regional Council
When using legal offers, the strict official division is very clear. Due to historical reasons, the Darmstadt Regional Council, a state authority in Hesse, controls the OASIS exclusion system. Since Hesse already had extensive IT structures for gambling before the current legislation, the Darmstadt Regional Council remained the logical hub for this central task.
The Joint Gambling Authority of the Federal States (GGL), the central German supervisor, operates on the other hand from its headquarters in Halle (Saale). From Halle (Saale), the authority controls the LUGAS monitoring system. The board members Ronald Benter and Benjamin Schwanke lead this institution. Ronald Benter is explicitly co-responsible for the operational implementation of LUGAS. As a GGL board member, Benjamin Schwanke also bears the responsibility for ensuring that player protection is enforced nationwide across all operators.
How secure is the data on the safe servers?
From a regulatory perspective, storing sensitive player data is a highly complex issue. Operators must fulfill the strict requirements of the General Data Protection Regulation (GDPR) and at the same time connect state control systems. For this purpose, so-called safe servers are used. A safe server is a state-controlled, cryptographically secured data storage device designed to protect players' information from unauthorized access.
The General Data Protection Regulation (GDPR) strictly requires that identification features are only processed for specific purposes. These data sets are encrypted on the safe server. Neither the Joint Gambling Authority of the Federal States (GGL) nor other bodies have arbitrary access to a player's history. This architecture ensures that market integrity is maintained, even when large volumes of data flow, without violating data protection.
Technical integration of operators
Communication between online casinos and the authorities takes place via a REST API. A REST API (Representational State Transfer) is a standardized programming interface that enables real-time data queries between different systems.
While OASIS performs simple exclusion queries, LUGAS requires more flexible integration paths via the REST API to automate deposits and limits across operators. The GGL specifies fixed communication protocols with strict response times for this. In practice, operators often complain about unstable connections during REST API implementation, which increases the administrative burden. Board members Ronald Benter and Benjamin Schwanke face the continuous task of stabilizing this technology so that the data exchange with the safe servers works smoothly and without errors.
Scope: Legal Market vs. Black Market
The difference between OASIS and LUGAS is explained in their scope of application: both systems are mandatory for legal operators on the whitelist (GGL). While the regulated market is subject to strict limits, the unregulated black market operates completely without these protective mechanisms. This particularly affects the offering of classic casino games and the possibilities for limit increases.
Are there casinos without OASIS and LUGAS?
From a regulatory perspective, the situation is clear: every platform on the official whitelist (GGL) - the register of the Joint Gambling Authority of the Federal States - must be connected to both systems. Platforms without this integration inevitably belong to the illegal black market. The 2021 State Treaty on Gambling explicitly aims to curb this black market. In our tests, illegal sites often lure players with the absence of the 1,000-euro deposit limit. However, higher amounts are also possible within the legal framework: through a credit check via SCHUFA, the well-known German credit agency, players can increase their limit completely legally. Without such a SCHUFA query, the default limit remains in place, which financially secures player protection.
Why table games like roulette are often missing
Another aspect that separates the legal sector from the black market is the range of games. The 2021 State Treaty on Gambling regulates virtual table games, i.e., classic casino classics, extremely strictly. As a result, popular table games like roulette are almost completely missing from whitelist (GGL) operators. The card game blackjack, which is also considered a table game, is also hardly to be found on legal platforms. This restriction leads to roulette and blackjack flourishing mainly at unregulated operators. From a regulatory perspective, this is intended to reduce the risk of addiction, but paradoxically drives many users into the unprotected area.
International comparisons: Cruks and Co.
A look abroad shows similar approaches to player protection. A prominent example is Cruks, the central register of the Netherlands. Cruks is the direct equivalent to OASIS and works on a comparable principle of cross-operator player exclusion. Just like OASIS, Cruks aims to exclude vulnerable people from gambling. When the difference between OASIS and LUGAS is explained, it is noticeable that LUGAS is rarer internationally as a limit database. Players who want to bypass restrictions often look for offers without Cruks, which corresponds exactly to evading to the local black market.
About this article - Editorial & Responsibility
Author: Sarah Weber - Casino Tester & Bonus Analyst
Expertly reviewed by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst Last
Update: 2026-06-23.
This article on “difference between OASIS and LUGAS explained” was written by Sarah Weber and expertly reviewed by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus terms. All statements regarding licenses, authorities, and legal frameworks refer to publicly accessible sources (GGL (Joint Gambling Authority of the Federal States), State Treaty on Gambling 2021 (GlüStV 2021)).
About the Author
8+ years of casino reviews, 200+ personally tested platforms in the EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout workflows, customer support evaluation.
About the Reviewer
12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators under the 2021 State Treaty on Gambling. PhD in Business Mathematics. Research focus: bonus mathematics, wager analysis, player protection systems (OASIS).
Responsible Gambling
Gambling can be addictive. If you feel that you are losing control of your gaming behavior, please contact BzgA Spielsuchthilfe, Check-dein-Spiel.de or use the central exclusion system (OASIS (central player exclusion system)). Set personal deposit and loss limits before playing with real money. Breaks and cooldown functions from operators are not a sign of weakness - they are a tool for sustainable fun in the game.
Legal Disclaimer
The information in this article is for editorial and comparison purposes only. It does not constitute legal advice. The legal evaluation of online gambling without a German license is a gray area and is subject to ongoing adjustments by the GGL (Joint Gambling Authority of the Federal States). Players themselves are responsible for compliance with local regulations.