Spain's cross-operator deposit limits start in March 2027, not immediately

Spain has approved a deposit-control system that follows the player across licensed online gambling operators. The default combined limits are €700 in a day, €1,750 in a week and €3,300 across four weeks. Deposits at one platform reduce what remains available at the others during the same period.

The earlier design applied limits separately at each operator. A person with several accounts could therefore deposit the maximum repeatedly by spreading activity across brands. Royal Decree 520/2026 adds a national layer managed by the DGOJ so the total is calculated by person, not by account.

The decree requires operators to connect their deposit-control systems to the regulator's combined-limit service. Before accepting a deposit, an operator must use the information returned by that system. If the payment would exceed the available ceiling, it must be refused and the player informed.

The DGOJ will hold the information needed to coordinate the check, avoiding a model in which every operator shares full player data with every competitor. The law specifies categories of personal data the authority may process and prohibits collection of irrelevant sensitive information.

A player may set a lower combined limit, which takes effect immediately. The system also allows an express request to raise or remove a limit. An increase or removal becomes effective after three working days, and a player who previously chose a lower ceiling must wait three months before raising or deleting it.

That makes the published amounts default protective limits rather than absolute lifetime caps. A headline claiming nobody can ever deposit more than €700 a day would be false. The regulation combines a common starting point with delayed, informed changes initiated by the player.

The decree was published on 25 June 2026, but the main combined-limit provisions enter into force nine months later, on 25 March 2027. Six months before that date, the DGOJ must make a test version available so operators can connect systems and explain the change to registered players.

Several technical and guarantee provisions follow different dates. For readers and operators, the practical point is that approval in June 2026 did not switch on the national deposit counter overnight. Implementation, testing and user information come before the cross-operator block becomes operational.

That transition creates a clear reporting boundary. Before March 2027, an operator may be preparing a connection or explaining the future rule without yet rejecting a deposit against the national total. Atlas will treat technical testing, legal commencement and live enforcement as separate events rather than collapsing them into a single launch date.

The DGOJ’s operator specification is now at version 1.1.0, dated September 2026. It covers deposit and cancellation messages, security, retries, business continuity and test users. This supplies an implementation document that was missing from Atlas’s earlier account.

The specification separates testing from production access and requires evidence of successful tests before production credentials are supplied. Its publication does not prove that every operator has connected or that the legal start has moved forward. The DGOJ’s public guidance continues to give 25 March 2027 as the applicable date.

The government says 31% of active online gamblers use more than one operator. The decree's explanatory text also says roughly 80% of accumulated player losses are concentrated among 10% of participants. A limit that resets at each brand offers less protection to the group most able to move deposits between accounts.

The measure does not predict how many players will hit a ceiling or how revenue will change. Its confirmed effect is structural: once active, every licensed operator must account for deposits already made elsewhere. The next important evidence will come from testing guidance, the live technical launch and post-implementation data.

The later data will need the same care as the law. A fall in deposits would not by itself prove lower harm, and an increase in limit-change requests would not show that every request was approved. The useful measures are completed checks, rejected deposits, lower-limit choices and the timing of approved increases.