Applicants operating player-facing gaming activities should implement responsible gaming and player protection measures appropriate to their products, customer base, and risk profile.
Responsible gaming controls are intended to reduce the risk of harm by giving players access to limits, exclusions, clear information, and intervention pathways where behaviour indicates elevated risk.
Applicants should demonstrate that these controls are not only described in policy documents but also embedded into actual workflows, account settings, and monitoring processes.
Where player-facing services are provided, applicants should explain what controls are available to players to help manage their activity. This may include account-level limits, temporary breaks, session visibility tools, or exclusion options depending on the operating model.
Controls should be clearly accessible and not hidden behind confusing navigation or unnecessary friction.
Applicants should maintain a framework for identifying patterns that may indicate elevated player risk. This may include frequency of play, repeated reversals, rapid deposit behaviour, unusually prolonged sessions, or other internally defined markers.
Where thresholds or behavioural indicators are used, applicants should explain how alerts are reviewed and how interventions are applied.
Define behavioural indicators or thresholds that may suggest elevated risk.
Assign internal responsibility for reviewing alerts and deciding whether action is required.
Apply the relevant action, such as communication, restriction, limit reinforcement, or exclusion support.
Maintain a clear internal record of the trigger, review, decision, and outcome.
Player protection measures should be supported by clear communications. Information should be understandable, appropriately placed, and consistent with the actual controls available in the product.
Disclosures should not misrepresent player control options or create the impression that protection tools exist where they do not.
Applicants should identify who owns responsible gaming controls internally, how those controls are reviewed, and how exceptions or incidents are escalated.
Where the platform or player-protection tooling is outsourced, the applicant should still be able to explain how the controls operate in practice and who remains accountable.
A responsible gaming framework should be supported by operational evidence. Useful evidence may include:
A statement that the business “supports responsible gaming” is not enough. Applicants should be able to show the actual tools, thresholds, workflows, and ownership structure behind that statement.
