Spelinspektionen Sets Stricter Spelpaus Checks From August

Swedish gambling operators will face stricter technical rules for Spelpaus from 1 August 2026, after Spelinspektionen approved new standards for self-exclusion checks.

Good to Know

• Spelinspektionen approved the new rules on 23 April and published them on 29 April.
• Licensed operators must use unique Actor ID and API Key credentials.
• Operators remain responsible for compliance, even when third-party suppliers handle checks.

New API Rules Set Clearer Spelpaus Duties

Sweden is tightening how gambling operators connect to Spelpaus, the national self-exclusion register used across the regulated market.

Under the new rules, every licence holder will receive a unique Actor ID and API Key. Operators must use those credentials whenever they check whether a player has excluded themselves from gambling. The system will apply across registration, login and direct marketing processes.

Spelinspektionen has also separated the technical routes. Operators must use a login API for player registration and login checks, while direct marketing checks must go through a dedicated marketing API. A check only counts as finished once it clearly confirms whether the person appears in the self-exclusion register.

The rules also make one point very clear: the licence holder remains responsible. Operators can use third-party service providers for technical checks, but they cannot pass off compliance duties. The assigned Actor ID and API Key must remain in use at all times.

Spelpaus became part of the Swedish gambling market after the 2019 regulatory reform. Licensed operators must block users who have excluded themselves, with break options of one month, three months, six months, 12 months or longer.

The register also received updates in 2023, including easier access to gambling harm guidance and an option for players to extend their exclusion period.

However, some integration details remain missing. The new regulations set the wider technical framework, but they do not yet include full API specifications, response formats or service performance standards. Operators will need those details for final integration planning.

Spelpaus also faced questions last year after a documentary alleged a data breach. Spelinspektionen rejected the claim and said the information remained encrypted.

A spokesperson said at the time: “There is no information about whether the person who has excluded themselves is addicted to gambling or not.”