Self-Exclusion in Betting: The Platform's Obligation to Block User Access
Self-exclusion on betting sites is often presented to the public as a user-oriented feature: a button, a form, an option to "pause" the account. This perception, however, hides the true legal nature of the institution. The regulation of fixed-odds betting in Brazil does not treat self-exclusion as a courtesy offered by the platform, but rather as a legal and operational obligation that falls directly on the game operator.
The Regulatory Framework and the Centralized Platform
Law No. 14,790/2023, which regulates the operation of fixed-odds betting in the country, and Ordinance SPA/MF No. 1231/2024, issued by the Secretariat of Prizes and Bets of the Ministry of Finance, establish a set of specific duties for operators (the so-called "bets") regarding responsible gambling. Among these, the most important is the obligation to recognize and process both specific self-exclusion (restricted to a single operator) and centralized self-exclusion (valid for all platforms authorized to operate in the country), requested by the user themselves through the Federal Government's Centralized Self-Exclusion Platform.
Since the end of 2025, these requirements have gained an additional technical component: operators have had a regulatory deadline to integrate their betting management systems (Sigap) with the national self-exclusion registry. This means that verification of the user's status, whether self-excluded or not, must occur before processing any bet, and not afterwards, through an audit or complaint.
The Nature of the Obligation: Effective User Blocking
The central point of this regulatory framework is that the platform's duty is not limited to providing the self-exclusion mechanism. The obligation is to ensure that the block effectively works from the moment it is requested. Essentially, it is an obligation of result: it is not enough for the operator to have a self-exclusion button on its interface; the system must actually prevent new deposits, bets, and access during the exclusion period chosen by the user.
Risks and Consequences of Non-Compliance
Failure to comply with the duty to self-exclude exposes the operator to consequences on at least three fronts:
- Administrative sanctions: Law No. 14,790/2023 provides for penalties within the scope of the administrative sanctioning process conducted by the Secretariat of Prizes and Bets, ranging from warnings to fines, and may even compromise the authorization for the platform to operate in the country.
- Civil liability: since this is a consumer relationship governed by the Consumer Protection Code (Law No. 8.078/1990), non-compliance may give rise to the obligation to reimburse amounts moved after the self-exclusion request and, depending on the circumstances of the case, to compensate the user for moral damages, especially when the consumer's hyper-vulnerability is characterized, as occurs in cases of diagnosed gambling addiction.
- Reputational and regulatory risk: In a newly regulated sector under strong public scrutiny, failures to apply self-exclusion tend to negatively impact the operator's credibility with the regulator, business partners, and the consumer market itself.
Best Practices and Compliance Recommendations
In practical terms, regulatory compliance regarding self-exclusion presupposes, at a minimum:
- Active technical integration into the national self-exclusion registry, with prior verification before each betting attempt;
- Internal processes for handling both specific and centralized self-exclusion requests, with the minimum timeframes and revocation rules stipulated in the regulations;
- A routine of periodic audits to proactively identify any blocking failures, not just reactively to complaints;
- A formal responsible gaming policy, aligned with the requirements of Ordinance SPA/MF No. 1231/2024, and customer service channels prepared to handle this type of request with the sensitivity that the issue demands.
Article written by: Leonardo Neri, Nicoly Crepaldi, Isabela Melo and Ana Carolina Silva Takekoshi.
“"Self-exclusion is not a courtesy from the platform to the user: it is a legal obligation that the operator must ensure works from the very first request."”
“"In a newly regulated sector, the difference between being compliant and being legally exposed often lies precisely in this type of operational obligation."”