What the platform has to offer
SPA/MF Ordinance No. 1,231/2024, as amended by SPA/MF Ordinance No. 2,579/2025, details the responsible-gaming tools every licensed operation must make available to players, in a way that is accessible and configurable from within the account itself — not a support ticket the player has to go hunting for.
| Tool | What it does |
|---|---|
| Prudential betting limit | A cap by total amount deposited or number of bets, tied to daily, weekly, monthly, or other periods, which the platform must make available to the player (Art. 4, IV, "a") |
| Loss and time limits | Caps on financial loss and elapsed time that the operator is required to demand from the player at registration — not merely offer (Art. 4, XVI) |
| Session alerts and blocks | Configurable alerts or usage blocks based on elapsed session time (Art. 4, IV, "b") |
| Pause periods | Intervals where the player keeps account access but cannot place bets (Art. 4, IV, "c") |
| Operator-specific self-exclusion | Closes the account at that operator, for a fixed or open-ended period; the player can only re-register once the period ends (Art. 4, IV, "d") |
| Centralized self-exclusion | A request made on the platform maintained by the SPA that excludes and blocks registration at every authorized operator, for a fixed or open-ended period; the link to that platform must be available in the betting system clearly and prominently (Art. 4, IV, "e") |
Two wording corrections that come up often: the rule speaks of self-exclusion for an open-ended period (prazo indeterminado), not "permanent"; and loss and time limits stopped being an optional feature offered to the player and became a requirement at registration, with the values recorded in the player's registration data (Art. 31, XI and XII).
These tools have to actually work: a limit the platform quietly lets a player bypass, or a self-exclusion that does not block login, does not meet the requirement — it only simulates compliance.
How risky behavior gets detected
Beyond the tools a player triggers themselves, an operation needs to watch for patterns that signal risk before the player asks for help. The most common signals include a fast escalation in the size of bets over a short window, repeated deposit attempts right after a loss ("chasing losses"), sessions that keep getting longer or that cluster at unusual hours, and hitting a deposit limit repeatedly the moment it resets.
Catching this requires betting, deposit, and session-time history to be available for continuous analysis — much of the same data that also feeds AML monitoring, though for a different purpose. When the system flags these patterns, the expected response is not just logging an internal alert, but proactively reaching the player and surfacing self-exclusion and limit tools.
Mandatory tools vs. recommended ones
Not everything that helps a player is, today, a formal requirement — some of what mature platforms offer goes beyond the regulatory minimum.
| Mandatory (SPA/MF Ordinance 1,231/2024, as amended by 2,579/2025) | Recommended, beyond the minimum |
|---|---|
| Demand loss and time limits at registration | Automatic limit suggestions based on play patterns |
| Make a prudential limit by deposit amount or bet count available | A play-history dashboard visible to the player |
| Session-time alerts or blocks, and pause periods | Automatic cooling-off after a significant losing streak |
| Operator-specific self-exclusion, fixed or open-ended | Proactive support outreach when risk is flagged |
| A clear, prominent link to the SPA's centralized self-exclusion | Enforcing the block across the operator's own marketing channels |
| A channel to access help resources | Internal reporting on how well the tools are working |
Is responsible gaming only compliance, or also retention?
Both at once, and treating them as opposites is a common mistake. On the regulatory side, offering functional self-exclusion and honoring the limits a player sets is not a differentiator — it is an obligation, and its absence puts the license at risk regardless of how good the rest of the product is. On the business side, a player who feels they are in control of their own play tends to stay active longer than one who feels exposed to losses they cannot contain; the opposite — players who leave feeling they lost control — is a direct source of complaints, avoidable churn, and brand exposure. An operation that treats responsible gaming as part of the product, rather than as an extra layer bolted on for compliance, tends to hold a more stable player base over the medium term.