GGL Whitelist vs. Offshore Casinos: Security, Legality & Risks in Direct Comparison

For German players, the distinction between the official GGL whitelist and offshore casinos is existential. Only providers on the whitelist operate legally in accordance with the State Treaty on Gambling (GlüStV) 2021. They guarantee full consumer protection through the OASIS blocking system and are subject to German jurisdiction. Offshore platforms with licenses from Curaçao or Malta operate in a legal gray area. There, players face deposit risks, lack of payout guarantees, and the absence of state protection mechanisms.

Legal Foundations: GGL Whitelist vs. Offshore Licenses

The choice between the GGL whitelist and offshore casinos determines legal certainty or financial risk in Germany. Only providers listed on the official register of the Joint Gambling Authority of the States (GGL) operate legally under the GlüStV 2021. Anyone playing outside this list operates in a legal gray area where German player protection and OASIS blocks do not apply, and payouts are often unenforceable.

What is the official GGL whitelist?

The whitelist is the list of all approved providers published in accordance with Section 9(8) of the GlüStV 2021, which is monitored by the Joint Gambling Authority of the States (GGL). It serves as a central instrument for channeling the market and lists exclusively operators that hold a German permit. Well-known brands such as bwin or bet-at-home must be registered here to legally offer their services in Germany. The GGL reviews strict criteria such as financial stability and technical fairness before an entry is made.

For players, this means concrete security: Listed providers are required to participate in the OASIS blocking system and must adhere to deposit limits of a maximum of €1,000 per month. Unlisted platforms completely lack this state control. The whitelist is updated regularly. A current entry is therefore the only reliable proof of a casino's legality in Germany.

Why are Curaçao and Malta licenses risky in Germany?

Licenses from Curaçao or Malta offer no protection under German law. Providers such as bet-at-home strictly require a German permit for legal operation. Many offshore casinos advertise international licenses, but these are worthless in Germany as they do not comply with the requirements of the GlüStV 2021. Playing with such providers inevitably leads to a legal gray area where consumers have no legal recourse in disputes.

A critical risk is the technical payment block: German banks are required to block transactions to providers not on the whitelist. This can result in balances at offshore casinos being frozen, with no possibility of recovery. Furthermore, these platforms are not subject to the supervision of the Joint Gambling Authority of the States (GGL), meaning measures such as the €1 maximum bet per spin are ignored.

The Role of the GGL in Enforcing the GlüStV 2021

The Joint Gambling Authority of the States (GGL) monitors compliance with the regulations and can remove providers from the whitelist if violations of player protection occur. This dynamic control distinguishes the German market from static offshore models. The authority acts not only as a licensing body but as an active agency that identifies illegal offerings and blocks payment channels.

Providers such as bwin or Merkur Slots are under constant observation to maintain system integrity. If a license is missing, it is not a harmless alternative but an illegal operation that exposes players to significant risks. The GGL thus ensures that only reputable companies such as bet-at-home participate in the market, while offshore casinos without a German concession lack a legal basis for their operations in Germany.

Player Protection and Security: OASIS, Limits, and Data

The decisive difference between the GGL whitelist and offshore casinos lies in the technical and legal protection framework. While licensed providers must implement strict player protection measures such as the OASIS blocking system and hard betting limits on virtual slot machines, these safeguards are absent abroad. The Joint Gambling Authority of the States (GGL) monitors this compliance, ensuring that providers such as Merkur Slots or Löwen Play guarantee maximum transparency and data security, which is often not the case with offshore platforms.

OASIS: The Central Blocking System for German Players

The OASIS system (Online Player Status Inquiry) functions as a nationwide blocking database and is the cornerstone of the German player protection concept. Only providers on the whitelist of the Joint Gambling Authority of the States (GGL) are legally required to connect their systems to OASIS. This connection ensures that a gaming ban applies not only at a single casino but becomes effective nationwide across all licensed providers and land-based arcades.

In contrast, offshore casinos completely lack this central networking. Players who register a ban with an unlicensed provider can often bypass it simply by switching to the next platform. From a regulatory perspective, OASIS is therefore not merely a feature but an essential firewall against pathological gambling behavior that simply does not exist with illegal providers. The Joint Gambling Authority of the States (GGL) ensures that these bans are implemented technically without delay and without loopholes.

Betting Limits and Game Flow for Virtual Slot Machines

For virtual slot machines on the whitelist, strict technical regulations apply that limit the game pace and financial risk. Providers such as Merkur Slots or Löwen Play must adhere to a maximum bet of €1 per spin and are required to disable autoplay functions. Additionally, a minimum game duration of five seconds between two spins applies, which reduces the intensity of the game and makes impulsive decisions more difficult.

These restrictions apply specifically to licenses under the supervision of the Joint Gambling Authority of the States (GGL). Offshore casinos are not subject to these rules and often offer higher bets and faster game flows, which may be attractive to experienced players but increases the addiction potential. The whitelist guarantees here that the game mechanics are designed to comply with the requirements of the State Treaty on Gambling, whereas with unlisted providers, volatility is often uncontrollably high.

Data Protection and Security on the Whitelist

The Joint Gambling Authority of the States (GGL) requires all listed providers to comply with strict German data protection standards. This means that personal data and financial transactions are processed securely and are not transferred to third countries with lax laws. Providers on the whitelist must also strictly separate customer funds from corporate funds and provide high security guarantees, ensuring player protection in the event of insolvency.

This transparency is often absent with offshore casinos. Data is frequently stored in jurisdictions where European data protection regulations are not enforceable. Furthermore, in case of problems, there is no direct legal recourse through German authorities. While players at Merkur Slots or Löwen Play can rely on the protection of the Joint Gambling Authority of the States (GGL) and German arbitration bodies in disputes, users of offshore platforms are often left without legal recourse in case of payout problems.

Payment Methods and Payouts: PayPal vs. Crypto

The choice of payment method is the most effective indicator of a provider's legality. While the Joint Gambling Authority of the States (GGL) enforces strict regulations, offshore casinos often operate in a legal gray area that leaves players financially vulnerable. The decisive difference lies not only in the license but in the technical enforceability of claims and the availability of trusted services such as PayPal, which cooperates exclusively with whitelisted providers.

PayPal as a Trust Signal for Legal Providers

PayPal, a globally leading payment service provider, functions in Germany as a de facto seal of approval for the legality of an online casino. The cooperation is strictly regulated: PayPal works exclusively with providers here that hold a valid license from the Joint Gambling Authority of the States (GGL) and are listed on the official whitelist. This exclusive partnership means for players that the availability of PayPal guarantees a high level of security for deposits and withdrawals, as the payment service provider continuously monitors the license status of its partners.

If PayPal is missing from a provider's portfolio, this is a strong warning signal indicating a lack of a German license. Instead, unlisted platforms often use cryptocurrencies or obscure e-wallets to bypass regulatory hurdles. Providers such as bwin or bet-at-home, which are firmly anchored on the whitelist, integrate PayPal seamlessly into their payment structures, increasing the transparency and speed of transactions. For the player, this significantly reduces the risk of frozen balances, as PayPal acts as an intermediary instance that provides additional security in case of disputes.

Payment Risks with Offshore Casinos and Curaçao Licenses

In contrast to the strictly regulated German providers, offshore casinos often operate under licenses from Curaçao or other jurisdictions outside the EU. These Curaçao licenses offer no comparable protection mechanism as they are not bound by the requirements of the Joint Gambling Authority of the States (GGL). Players operate here in a legal gray area where German banks and payment service providers are legally required to block transactions to these unlisted providers.

This leads to concrete financial risks: Deposits may be rejected, or worse, balances are frozen in the provider's account without the player having any legal recourse. Since offshore casinos are not subject to German law, there is no way to reclaim payments via chargeback or through German arbitration bodies. In the event of non-payment, legal action is often a costly odyssey with no prospect of success, as operators are not required to demonstrate a physical presence in the EU.

Payout Guarantees and Tax Exemption

With providers on the whitelist of the Joint Gambling Authority of the States (GGL), such as bwin or bet-at-home, payout of winnings is guaranteed and legally enforceable. These providers must adhere to strict security standards that ensure verified players receive their winnings promptly. Although the provider deducts the statutory betting tax, the winnings are tax-free for the player in Germany and are not subject to arbitrary forfeiture.

In contrast, offshore casinos often advertise tax-free winnings but offer no guarantee for payouts. In the legal gray area, supervisory control by the GGL is missing, meaning operators can refuse payouts without stating reasons. The whitelist serves here as a decisive filter: Only those listed there are subject to German jurisdiction and must adhere to fair payout processes, which represents the decisive advantage for the player in case of disputes.

Game Offer and Brands: Who is on the Whitelist?

The GGL whitelist vs. offshore casinos reveals a fundamental difference in the German market: Only listed providers such as bwin or Merkur Slots operate legally under the GlüStV 2021. The Joint Gambling Authority of the States (GGL) strictly verifies these platforms, while offshore casinos operate in a legal gray area and leave players unprotected.

Well-Known Brands on the GGL Whitelist

The Joint Gambling Authority of the States (GGL) maintains an official register of all approved gambling providers in Germany as the central regulatory authority. This whitelist is the decisive criterion for the legality of an online casino. Established brands such as bwin have successfully completed their licensing and are firmly anchored in this list. bwin holds comprehensive licenses for virtual slot machines, online poker, and sports betting. bet-at-home also operates under the supervision of the GGL and offers a compliant game selection that meets strict German standards.

Alongside international giants, German traditional brands are also represented. Merkur Slots, operated by the Merkur Group, is also on the whitelist and offers games directly from Gauselmann that meet high German compliance standards. Löwen Play is also listed as a licensed provider, distinguished by its adherence to legal requirements. The Joint Gambling Authority of the States (GGL) updates this list regularly to ensure that only trustworthy operators with proven financial stability and fair winning odds are represented in the market. Players should therefore check before each registration whether their desired provider is currently on the whitelist.

Restrictions on Virtual Slot Machines

The offering of virtual slot machines is strictly regulated by the GlüStV 2021, which has a direct impact on the gaming experience. In contrast to unregulated markets, licensed providers are not allowed to offer progressive jackpots and must enforce a uniform monthly deposit limit of €1,000 across all providers. Additionally, the maximum bet per spin is limited to €1, and an autoplay function is prohibited. These restrictions serve player protection and are a prerequisite for inclusion in the whitelist of the Joint Gambling Authority of the States (GGL).

Despite these limitations, virtual slot machines on the whitelist offer a secure gaming environment. The games must demonstrably offer fair winning odds, and providers are required to connect to the OASIS blocking system. While offshore providers often allow higher bets and faster game rounds, this regulatory control is missing there. The GlüStV 2021 thus ensures that playing with listed providers such as Merkur Slots or bwin is less volatile, but legally secure and transparent.

Differences in Game Portfolio Compared to Offshore Providers

While offshore casinos often offer a broad, unregulated portfolio of live games and slots, whitelist providers focus on compliant products. The GGL whitelist vs. offshore casinos reveals a clear separation here: Licensed providers such as bet-at-home or Löwen Play are only allowed to offer games that meet the technical guidelines of the Joint Gambling Authority of the States (GGL). This includes, for example, the prohibition of table games in the live casino sector that do not comply with German requirements.

Offshore providers often operate under licenses from Curaçao or Malta, which are not recognized by the GlüStV 2021. They are not subject to the supervision of the Joint Gambling Authority of the States (GGL) and do not need to demonstrate an OASIS connection. This leads to a larger but riskier game offering. In contrast, providers on the whitelist, such as bwin or Merkur Slots, guarantee that all virtual slot machines and sports bets comply with German consumer protection standards. Players should be aware that playing with unlisted providers is not only illegal but also means losing statutory insolvency protection and legal assistance.

Conclusion: Why the GGL Whitelist is the Only Safe Choice

The decision between the GGL whitelist and offshore casinos is not a matter of taste, but of legal and financial security. While licensed providers operate under the supervision of the Joint Gambling Authority of the States (GGL) and adhere to strict requirements of the GlüStV 2021, players on platforms with licenses from Curaçao operate in a legal gray area. The decisive difference lies in player protection: Only the whitelist guarantees connection to the OASIS blocking system, effective deposit limits, and the enforceability of claims before German courts.

Playing at offshore casinos remains in a legal gray area without effective consumer protection, while the whitelist offers clear rights. Providers not listed on the register of the Joint Gambling Authority of the States (GGL) often operate with licenses from Curaçao or other third countries that offer no legal recourse in Germany. In the event of a dispute, such as refused payouts, players lack access to German arbitration bodies. Legal action is practically impossible due to a lack of jurisdiction.

In contrast, the whitelist guarantees that all listed operators meet the strict requirements of the GlüStV 2021. This includes not only fair winning odds but also the financial stability of the provider. Anyone playing outside this list consciously waives these safeguards and risks that their balance will be unrecoverable in the event of insolvency or license revocation abroad. The legal gray area thus means not only uncertainty but a concrete financial total risk.

The combination of OASIS connection and GGL monitoring offers the highest protection against gambling addiction and fraud. The OASIS system is a central component of the GlüStV 2021 and connects all licensed providers in Germany. A ban that a player applies for with one provider takes effect automatically and immediately with all other system participants, which is technically impossible with offshore casinos holding licenses from Curaçao.

The Joint Gambling Authority of the States (GGL) actively monitors these processes and can revoke licenses in case of violations, making the whitelist a dynamic security instrument. This regulatory framework ensures that player protection does not just exist on paper but is enforced through technical interfaces such as LUGAS and OASIS. Without this state control, unlisted providers lack any authority that could enforce binding limits or bans across platform boundaries.

Checklist for Choosing a Safe Casino

Players should always check whether the provider is on the GGL whitelist, accepts PayPal, and uses the OASIS system. A quick check on the official website of the Joint Gambling Authority of the States (GGL) provides immediate clarity on the legal status.

Whitelist Check: Search for the provider name directly in the current GGL whitelist. Only listed brands are legal. OASIS Integration: Ensure that the casino uses the OASIS blocking system, which is a mandatory requirement of the GlüStV 2021. Legal Certainty: Avoid providers from the legal gray area (often Curaçao-licensed), as German player protection does not apply here. Payment Methods: Legal providers offer secure methods such as PayPal, while transactions to offshore casinos are often blocked by banks.

Only those who verify these points play in compliance with German law and effectively protect their balance from the risks of the legal gray area.

About This Article - Editorial & Responsibility

Author: Sarah Weber - Casino Tester & Bonus Analyst Expertly reviewed by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst Last Updated: 2026-06-23.

This article on "GGL Whitelist vs. offshore casinos" was written by Sarah Weber and expertly reviewed by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus terms. All statements regarding licenses, authorities, and legal frameworks refer to publicly accessible sources (GGL (Joint Gambling Authority of the States), State Treaty on Gambling 2021 (GlüStV 2021)).

About the Author

8+ years of casino reviews, 200+ personally tested platforms in the EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: Wagering requirements, payout workflows, customer support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators under the State Treaty on Gambling 2021. PhD in Business Mathematics. Research focus: Bonus mathematics, wager analysis, player protection systems (OASIS).

Responsible Gambling

Gambling can be addictive. If you feel you are losing control over your gaming behavior, please contact BzgA Gambling Addiction Help, Check-dein-Spiel.de, or use the central blocking system (OASIS (central player blocking system)). Set personal deposit and loss limits before playing with real money. Breaks and cooldown functions of the providers are not a sign of weakness - they are a tool for sustainable enjoyment of the game.

Legal Notice

The information in this article serves exclusively editorial and comparison purposes. It does not constitute legal advice. The legal assessment of online gambling without a German license is a gray area and is subject to ongoing adjustments by the GGL (Joint Gambling Authority of the States). Players are themselves responsible for complying with local regulations.

FAQ

Is playing at offshore casinos with a Curacao license punishable in Germany?
Playing itself is not punishable for users in Germany, but it operates in a legal gray area as these operators do not hold a license under the GlüStV 2021. While players are not prosecuted, the operator acts illegally without a German license, meaning that state supervision by the Joint Gaming Authority of the States (GGL) does not apply. Consequently, offshore casinos with Curacao licenses are not subject to Germany's strict player protection regulations.
Which operators are currently on the GGL whitelist?
The official whitelist of the Joint Gaming Authority of the States (GGL) lists all operators that hold a valid license under the GlüStV 2021. Well-known brands that have successfully established themselves in the legal market and will continue to be listed in 2026 include, among others, bwin, Merkur Slots, Löwen Play, and bet-at-home. Users should regularly check the list on the official GGL website, as the status may change.
Why can I only bet €1 per spin at legal casinos?
This restriction is a direct requirement of the GlüStV 2021, which applies to all operators offering virtual slot games on the German whitelist. The maximum bet of €1 per spin serves player protection and aims to strengthen gambling addiction prevention by preventing high losses in a short period. In contrast, offshore casinos without a German license have not implemented this technical limitation, but in return, they offer no legal protection.
Is PayPal available at all online casinos in Germany?
No, PayPal is exclusively available as a payment method for operators that hold a license from the Joint Gaming Authority of the States (GGL) and are on the whitelist. Since PayPal adheres to strict compliance guidelines, the service provider does not cooperate with operators in the legal gray area or those with pure Curacao licenses. Therefore, if you play with providers like bwin or Merkur Slots, you can use PayPal. With unlisted offshore casinos, this is generally not possible.