Regulatory overview

The European gambling regulatory landscape entered a period of significant upheaval in late 2025, with new directives from the European Gaming and Betting Association (EGBA) and parallel national legislation in Germany, Netherlands, and Sweden introducing requirements that go substantially beyond existing AML and responsible gambling frameworks.

The headline change is a mandate for real-time transaction monitoring with sub-5-second alerting for suspicious activity — a standard that most operators' existing infrastructure cannot meet. The secondary change, more novel in scope, is a requirement for disclosure when AI agents transact on behalf of players.

Key requirements

The core requirements of the 2026 directive fall into four categories: real-time transaction monitoring (all transactions must be evaluated against AML thresholds within 5 seconds), AI agent disclosure (platforms must detect and log transactions made by autonomous AI agents), enhanced multi-account prevention (cross-platform identity verification for high-value players), and expanded data retention (7-year retention of all transaction and behavioural data).

Industry impact

The fines for non-compliance are material: up to €50M or 10% of annual EU revenue, whichever is greater. For large operators, this represents an existential risk. For smaller operators, the compliance cost may exceed the fine — creating pressure for consolidation.

Compliance roadmap

Serixo's compliance team has developed a 90-day roadmap for operators to achieve full compliance with the 2026 directives. Phase 1 (days 1–30): real-time monitoring infrastructure deployment. Phase 2 (days 31–60): AI agent detection and disclosure workflow integration. Phase 3 (days 61–90): data retention architecture and cross-platform identity verification.

Timeline

The 2026 EU Gambling Directive becomes enforceable on 1 September 2026. Operators in Germany and Netherlands face earlier deadlines under national legislation: 1 June 2026 and 1 July 2026 respectively. Sweden's timeline aligns with the EU-wide date. All operators should treat 1 June 2026 as their effective compliance deadline to allow buffer for audit preparation.