Three years after the Netherlands opened its regulated online gambling market under the Remote Gambling Act (KOA), the Kansspelautoriteit (KSA) is signaling that the existing advertising rulebook may not be fit for purpose. Reports emerging this week indicate the regulator is actively mulling a blanket ban on gambling advertising — a measure that would go well beyond the broadcast watershed restrictions already in place and bring the Netherlands closer to the maximalist model Italy adopted in 2019. At the same time, the market is contending with documented gaps in Cruks, the national self-exclusion register, raising questions about whether consumer protection architecture is keeping pace with the commercial growth it was designed to accompany.
How the Dutch Model Got Here
The KOA came into force in October 2021 after years of parliamentary delay, licensing a cohort of operators — including established European names such as Bet365, Unibet, and Holland Casino's digital arm — under strict conditions tied to responsible gambling compliance. The KSA moved quickly to fine operators for early violations, issuing penalties against several licensees for advertising breaches and for accepting registrations from players who should have been blocked by Cruks. That enforcement posture established credibility but also surfaced a recurring problem: the self-exclusion system's reach is only as good as operators' real-time integration with it, and integration failures have been more than theoretical.
The advertising conversation has been building since at least 2023, when the Dutch government restricted the use of "role models" — athletes, celebrities, and influencers — in gambling promotions. That was widely read as an interim step rather than a terminus. The current deliberations over a blanket ban suggest the political appetite for further restriction has not abated, and may have intensified as problem gambling visibility has grown in public discourse.
What a Blanket Ban Would Actually Mean
A full prohibition on gambling advertising is not unprecedented in the EU regulatory environment, but it carries significant commercial and legal complexity. Italy's 2019 Dignity Decree banned virtually all gambling advertising, including sponsorships, and prompted years of litigation and workarounds — online affiliates operating from outside Italian jurisdiction, sports clubs restructuring international kit deals. The Dutch market, which generated roughly €1 billion in gross gaming revenue in its first full licensed year, would face similar pressures.
For operators holding KSA remote gambling licences, the compliance calculus would shift dramatically. Marketing budgets built around digital acquisition — paid search, display, streaming pre-rolls — would need reorientation toward CRM, loyalty mechanics, and organic brand presence. Smaller licensees without the retention infrastructure of a Flutter Entertainment or Entain would be disproportionately affected. Some compliance consultants in the Amsterdam market have noted privately that a blanket ban could inadvertently strengthen the unlicensed grey market, since offshore operators unconstrained by Dutch law would fill the visibility vacuum.
The KSA has not yet published a formal consultation, and the legislative path through the Dutch parliament is uncertain. But regulators rarely float proposals of this magnitude without a directional commitment behind them.
The Self-Exclusion Problem Is the More Immediate Risk
While the advertising debate draws attention, the Cruks gaps may be the more operationally urgent issue for compliance teams. Self-exclusion registers work on a premise of near-instantaneous verification: a player self-excludes, the operator's system queries the register at login or registration, and the block is applied. When that chain breaks — through API latency, incomplete data-matching, or inadequate operator-side controls — vulnerable players access accounts they should be barred from.
The KSA has previously fined operators for precisely this failure mode. The concern now is systemic rather than operator-specific: are there structural gaps in how Cruks data is maintained, updated, and transmitted? Comparable registers in other jurisdictions have faced similar critiques. GAMSTOP in the United Kingdom, operated under UKGC oversight, underwent significant technical upgrades following early adoption complaints about matching failures tied to name variations and date-of-birth discrepancies. The Dutch system, still relatively young, may be encountering analogous growing pains at scale.
For operators, the regulatory exposure is direct. A licensee that processes a transaction for a Cruks-registered player — regardless of whether the failure originated on the register's side or its own — faces enforcement action. That asymmetric liability makes investment in real-time verification infrastructure not optional but existential.
The Takeaway
The Netherlands is entering a second, harder phase of regulated market governance. The first phase was about getting licensed operators online and establishing baseline enforcement. The current phase is about whether the consumer protection framework can withstand scrutiny as player volumes and harm data accumulate. A blanket advertising ban, if enacted, would represent one of the most restrictive postures in Western Europe and would force a fundamental rethink of customer acquisition economics for every KSA licensee. The self-exclusion gaps are a separate but related problem — one that speaks to the technical and operational maturity of a market that is, by European standards, still young. Operators who treat both issues as distant regulatory noise are misreading the signal coming from The Hague.
