Contents
DE Deutsch FR Français NL Nederlands

Difference between KSA and GGL Supervision: Gambling Regulation vs. Banking Supervision Explained

Those looking for the difference between GGL and KSA are comparing apples and oranges. The GGL (Joint Gambling Supervisory Authority of the States) is the state executive authority for the German online gambling market. The KSA (Standardized Approach for Credit Risk) is a banking calculation method for determining risk weights under Basel III. There is no substantive connection. The confusion arises from the similar abbreviation, although one authority ensures player protection while the other ensures financial stability.

Exploit European regulatory loopholes and legally switch to discreet crypto providers that are subject to neither the KSA nor the GGL.

Introduction: Why are GGL and KSA often confused?

Both terms appear in highly regulated environments, but belong to completely different industries. The Joint Gambling Supervisory Authority of the States (GGL) monitors the behavior of players and providers online to combat addiction and illegal gambling. The Standardized Approach for Credit Risk (KSA) is a method in banking and part of the international Basel III regulatory framework.

The GGL manages social risks through tools such as the Interstate Gambling Supervisory System (LUGAS) and the Interstate Gambling Treaty 2021 (GlüStV). It can revoke licenses or impose fines to enforce compliance with the GlüStV. The KSA is a computational requirement. Banking supervision (BaFin) monitors its compliance, but it is not a direct instrument for protecting end consumers from addiction. Anyone looking for gambling supervision means the GGL, not the internal banking standardized approach for credit risk.

Premium Slot Collection

The GGL: The Central Supervisory Authority for the German Gambling Market

The Joint Gambling Supervisory Authority of the States, headquartered in Halle (Saale), is a central public law institution. It regulates the interstate online gambling market. Its primary task according to the Interstate Gambling Treaty 2021 (GlüStV) is to ensure youth and player protection and to combat illegal offerings. The GGL reviews and approves licenses to create uniform framework conditions for providers and to prevent manipulation.

Legal Basis and Core Tasks

The Interstate Gambling Treaty 2021 (GlüStV) forms the legal foundation for the German online gambling market. It ended the previous gray area through uniform nationwide regulations. Based on this treaty, the GGL was established as the central supervisory authority. Its primary task is to ensure youth and player protection and to prevent gambling addiction, actively combating illegal offerings.

Organizationally, the authority is structured not only to issue permits but also to act as a coordination body for politics, associations, and providers to advise on developments early on. However, critics note that the Joint Gambling Supervisory Authority of the States sometimes acts hesitantly when sanctioning legal violations by licensed providers. This can undermine confidence in the GlüStV as a protective instrument. From a regulatory perspective, the authority must therefore not only administer but also decisively implement the GlüStV to prevent a drift into the black market.

Technical Implementation: The LUGAS System

A core instrument of the authority is the Interstate Gambling Supervisory System (LUGAS). The GGL is the specialist supervisory authority, while Dataport takes over the technical operation of the LUGAS infrastructure. Dataport, the service provider for the public administration of the state of Saxony-Anhalt, operates the necessary safe servers. It provides the technical infrastructure through which licensed gambling providers must transmit their data to the LUGAS system.

The core of this infrastructure consists of two specific data sets: the limit file and the activity file. The limit file stores deposit limits set by players themselves. This ensures their cross-provider compliance, particularly the statutory monthly limit of 1,000 euros. In parallel, the activity file prevents simultaneous play across multiple providers by monitoring active gaming sessions in real time. This strict separation of data streams enables the GGL to prevent manipulation and create a valid data basis for evaluating player protection. Without this technical connection to the systems managed by Dataport, licensing in Germany is not possible, as the data flow forms the basis for any regulatory intervention.

The KSA: The Standardized Approach for Credit Risk in Financial Supervision

In contrast to gambling supervision, the Standardized Approach for Credit Risk (KSA) is not a regulatory body, but a method in banking. It is part of the international Basel III regulatory framework. The KSA is used to calculate the required capital of banks based on the default risk of their loans. Each risk position is assigned a specific risk weight, which determines the amount of security reserves held.

Classification in Basel III and Function

The KSA determines the risk weight of claims. This directly influences how much capital a bank must hold for its lending. These regulatory requirements aim at the financial stability of institutions and were discussed in consultations with associations such as the GVB. The application of the KSA often relies on external ratings. Basel III now mandates stricter "due diligence" by investors to independently assess the creditworthiness of institutions and covered bonds.

The risk weight varies depending on the debtor. Claims against public authorities may be favorably treated under certain conditions. A higher risk weight leads to stricter loan terms or higher interest rates for the borrower, as the bank must hold more capital. This mechanism serves financial stability. However, it has no direct impact on deposit limits or gaming conditions at licensed online casinos supervised by the GGL.

Role of Associations and SME Financing

The GVB (Bavarian Cooperative Association) has positioned itself in this context. It pointed out that a strict granularity criterion in the KSA could severely restrict SME financing by small banks. The GVB advocates for banks to have more autonomy in calculating loss factors to avoid unnecessarily tightening credit supply. In contrast to the GGL, which enforces external behavioral rules for players, the GVB focuses on internal banking regulatory processes. This difference is clear: while gambling supervision (GGL) paternalistically protects the player, banking supervision aims at the stability of the financial system. The KSA serves as a method for risk weighting.

Impact on Consumers: Player Protection vs. Creditworthiness Checks

The difference between KSA and GGL supervision manifests for end consumers in two separate spheres. While the GGL, as an executive authority, makes direct interventions in gaming behavior, the KSA only acts indirectly through the lending policies of banks. The GGL enforces technical limits for player protection. The KSA determines the risk weight of claims and thus influences the availability of external capital, without directly dealing with gambling.

Player Protection Measures and Criticism of Creditworthiness Checks

Practical experience shows that the strict boundaries of LUGAS effectively structure player protection by making technical circumvention difficult. The GGL regularly publishes FAQs to create transparency regarding the functioning of these files and to dispel misunderstandings about the deletability of limits. However, critics note that strict monitoring by LUGAS and OASIS is perceived by some players as a restriction on privacy. Nevertheless, the legal certainty in case of disputes is higher than with international licenses.

When reviewing increased deposit limits, many providers rely on a SCHUFA-G report. This is problematic because a credit report only assesses the probability of debt repayment, not actual economic capacity or disposable income. Someone with low liquidity can have excellent creditworthiness. This makes the SCHUFA-G report insufficient for the actual purpose of player protection. This practice is legally criticized, as several courts do not view the report as a suitable substitute for actual income proof. Nevertheless, the authority sticks to the current practice. This results in primarily minimizing the default risk of providers rather than protecting players from financial overextension.

Indirect Effects of the KSA on Bank Customers

The KSA only affects consumers indirectly by steering the lending practices of institutions. External rating agencies are often used in the process. This has led to criticism in the past, as it increases dependence on external assessments. The risk weight determined by the KSA thus decides how expensive or available loans are for consumers. However, it has no direct interface with the regulation of gambling offerings or the GGL.

European Case Law and National Supervision

National regulation through the GlüStV and the GGL stands in tension with European law. The European Court of Justice has ruled multiple times in the past that national gambling monopolies or strict regulations are only justified if they coherently and systematically serve player protection. This case law of the European Court of Justice forces national legislators to constantly review their measures, such as those of the GGL, for proportionality and effectiveness.

If the supervisory practice of the GGL is perceived as inconsistent, for example through different treatment of providers or lack of sanctions, this can provide legal grounds for challenge. These could be taken up to the European Court of Justice. Therefore, uniform application of the law by the GGL is not only an administrative necessity but a prerequisite for maintaining the compatibility of the German Interstate Gambling Treaty with EU law. The European Court of Justice thus remains an important control authority for the design of national supervision.

About This Article - Editorial & Responsibility

Author: Sarah Weber - Casino Tester & Bonus Analyst Reviewed by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst Last Updated: 2026-06-26.

This article on "difference between KSA and GGL supervision" was written by Sarah Weber and fact-checked by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus terms. All statements regarding licenses, authorities, and legal frameworks refer to publicly accessible sources (GGL (Joint Gambling Supervisory Authority of the States), Interstate Gambling Treaty 2021 (GlüStV 2021)).

About the Author

8+ years of casino reviews, 200+ personally tested platforms in the EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout workflows, customer support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators under the Interstate Gambling Treaty 2021. PhD in Business Mathematics. Research focus: bonus mathematics, wager analysis, player protection systems (OASIS).

Responsible Gambling

Gambling can be addictive. If you feel you are losing control over your gaming behavior, please contact BzgA Gambling Addiction Help, Check-dein-Spiel.de, or use the central blocking system (OASIS (central player blocking system)). Set personal deposit and loss limits before playing with real money. Breaks and cooldown functions of providers are not a sign of weakness - they are a tool for sustainable enjoyment of the game.

Legal Notice

The information in this article serves exclusively editorial and comparison purposes. It does not constitute legal advice. The legal assessment of online gambling without a German license is a gray area and is subject to ongoing adjustments by the GGL (Joint Gambling Supervisory Authority of the States). Players are responsible for complying with local regulations.

FAQ

Is the KSA part of gambling supervision?
No, the KSA (Standardised Approach for Credit Risk) is not part of gambling supervision, but a regulatory instrument in the banking sector that originates from Basel III. While the GGL (Joint Gambling Authority of the States) regulates the German online gambling market and enforces the Interstate Treaty on Gambling 2021, the KSA is used by banks to calculate risk weights for loans. Confusion often arises because both terms appear in regulatory contexts, but they apply to completely different industries.
What is the exact difference between GGL and BaFin?
The GGL is the central supervisory authority for the cross-state online gambling market in Germany, headquartered in Halle (Saale). It focuses on player and youth protection as well as combating illegal offers. The BaFin (Federal Financial Supervisory Authority), on the other hand, supervises banks, insurance companies, and financial service providers, and also applies the KSA within the framework of banking supervisory regulations. For gambling providers, the GGL is primarily responsible, verifying compliance with the GlüStV, while the BaFin has no direct jurisdiction over casino licenses.
How does the KSA affect lending?
The KSA (Standardised Approach for Credit Risk) determines the risk weight of exposures. This directly influences how much capital a bank must hold for a loan. A higher risk weight leads to stricter loan terms or higher interest rates for the borrower, as the bank must allocate more capital. This mechanism is part of Basel III and serves financial stability. However, it has no direct impact on deposit limits or game conditions at licensed online casinos supervised by the GGL.
What data does the GGL's limit file store?
The limit file is a central component of the LUGAS system (Cross-State Gambling Supervision System), which is supervised by the GGL. It stores the deposit limits set individually by players as well as statutory maximum limits to ensure they are not exceeded. By cross-referencing in the limit file, it is ensured that a player adheres to the same protection limits across all licensed providers in Germany. This is a core objective of the Interstate Treaty on Gambling 2021.
Is the SCHUFA-G report mandatory for gamblers?
The GGL has faced criticism in the past for accepting or requiring the SCHUFA-G report as part of identity and creditworthiness checks. While secure player identification is legally mandated to prevent money laundering and gambling addiction, the exact necessity of a SCHUFA inquiry depends on the respective provider's risk assessment. Players should check what data the operator collects, as the GGL primarily focuses on compliance with the player protection framework and does not universally mandate a SCHUFA report for every player.
Who monitors compliance with the GlüStV 2021?
Compliance with the Interstate Treaty on Gambling 2021 (GlüStV) is centrally monitored in Germany by the Joint Gambling Authority of the States (GGL). This public-law institution checks whether gambling providers adhere to the rules protecting players from gambling addiction and manipulation. Additionally, the GGL combats active illegal gambling offers and their advertising to ensure a safe and regulated market.
What is the purpose of the activity file in the LUGAS system?
Alongside the limit file, the activity file is another central component of the LUGAS system, supervised by the GGL. It documents users' gaming activities to ensure that statutory requirements such as the break between two games or the maximum playing duration are met. Through this technical monitoring, the GGL helps ensure that the Interstate Treaty on Gambling 2021 is effectively implemented and that manipulation of the game sequence is prevented.
Does Basel III also apply to gambling providers?
No, Basel III is an international regulatory framework for banking regulation and primarily affects credit institutions, not gambling providers. The KSA (Standardised Approach for Credit Risk) contained within it is used to calculate credit risks and has no direct application to the licensing or operation of online casinos. Instead, gambling providers are subject to the Interstate Treaty on Gambling 2021 and the supervision of the GGL, which imposes different financial and technical requirements.
How can you verify a license with the GGL?
Players can check the validity of a license on the official website of the Joint Gambling Authority of the States (GGL), which maintains a whitelist of approved providers. The GGL ensures that only tested and authorized gambling offers operate online that meet the strict requirements of the GlüStV. Verification is recommended to ensure that the provider is integrated into the LUGAS system and thus uses statutory player protection mechanisms such as the limit file.
What role does Dataport play for the GGL?
Dataport operates as an IT service provider for the public sector and supports technical infrastructures that may also be relevant for administrative processes. In the context of the GGL and the LUGAS system, a secure and data-protection-compliant IT infrastructure is essential to operate the limit file and activity file. Although the exact contractual arrangements are not always publicly detailed, collaboration with specialized IT service providers like Dataport is typical for the secure operation of the GGL's central supervisory databases.
Are live casino games permitted under GGL supervision?
The Interstate Treaty on Gambling 2021 primarily permits online slots and sports betting. Live casino games and virtual table games are heavily restricted or not part of the standard licensing practice of the GGL. In its regulation, the GGL focuses on offers where player protection and addiction prevention can be technically implemented most effectively, such as through the limit file in LUGAS. Players should therefore check whether a provider holds a German GGL license for the specific game offering, as many live casino offerings are often only available via foreign licenses.
How does the KSA calculate the risk weight?
The KSA (Standardised Approach for Credit Risk) calculates the risk weight based on external ratings from rating agencies and defined risk classes for different debtors. This method is part of Basel III and helps banks determine the required capital for their loan portfolios. In contrast, the GGL does not calculate financial risk weights for players, but rather monitors compliance with deposit limits and gaming activities via LUGAS to prevent gambling addiction.