Portugal's RSA Is a Central Self-Exclusion Register. The Word "Central" Is Doing Almost All the Work.

Portugal quietly turned on a piece of infrastructure that does more work than the word "portal" suggests.

The Registo de Auto-Exclusão — RSA for short — is a single-registration self-exclusion list maintained by Serviço de Regulação e Inspeção de Jogos, the Portuguese regulator most people outside the industry have never heard of. The mechanics are simple enough that they fit in one sentence: you register once, and every operator licensed by SRIJ is legally required to block you. Not one brand. Every brand. That is the thing you need to understand about this launch, and it is the thing most coverage will skip.

We want to walk through what the RSA actually blocks, where it sits relative to GAMSTOP in the UK and OASIS in Germany, and why the person reading this — the Lisbon IT engineer, the Porto resident with a hospital shift, the Coimbra student whose rent is tighter than they admit — needs the mechanism explained before they decide whether to trust it.

Because the mechanism matters more than the launch.

A Central Register Is Only as Strong as the Operators It Legally Binds

Here is what RSA does. A Portuguese resident registers once on the SRIJ portal. From that moment forward, every SRIJ-licensed operator is legally obligated to refuse them a login and a deposit. The register binds the licensed perimeter. It does not bind anything outside it.

The word "licensed" there is doing the same work the word "central" is doing in the headline. SRIJ is the Portuguese regulator; its licensed operators pay 25% tax on online casino revenue and between 8% and 16% on sports betting revenue depending on stake flow. Those tax rates are the filter. An operator paying 25% GGR to Portugal sits inside the perimeter and is bound by RSA. An operator running a Portuguese-language site from a jurisdiction that charges the operator next to nothing is not.

This is not a theoretical complaint. Flutter Entertainment, which sits near the top of listed gambling groups by revenue, disclosed in its March 2025 annual report that roughly 5% of its exposure still sits in grey markets. Entain, the parent of Ladbrokes, Coral, bwin and PartyCasino, reports 12%. Bet365 — private, Stoke-on-Trent, run by the Coates family, £3.388bn in FY2024 revenue — carries 22% grey market exposure. Those are the disclosed numbers from the groups that actually publish disclosed numbers. They describe the part of the market the RSA cannot reach by design. A central register is precisely as useful as the jurisdiction's ability to enforce it, and enforcement stops at the licence boundary.

This is the part that matters if you are the reader who needs the register most. Self-exclusion on a licensed site that is bound by RSA works. Self-exclusion from a register that has no authority over a Curacao-licensed casino a friend forwarded to you on WhatsApp does not. The register is real. Its boundary is also real. You need both facts at the same time.

GAMSTOP Has 420,000 Registered Users and Germany Caps Deposits at €1000 a Month. Portugal Sits Between Them.

The clearest way to understand where RSA fits is to compare it, carefully, to the two nearby regimes that have already been running for a few years.

GAMSTOP is the UK self-exclusion register. It covers every operator licensed by the Gambling Commission — 268 of them on the current public register — and it does so automatically. You register once, you pick 6 months, 1 year, or 5 years, and every UKGC-licensed brand must block you for that term. The GAMSTOP numbers are worth sitting with: roughly 420,000 registered users as of late 2024, with annual registrations increasing around 35%. Those are not small numbers. They are also a rough proxy for how many people in a single regulated market eventually decide that per-brand controls are not enough. The per-brand controls are never enough. That is the entire argument for a central register.

Germany goes further in a different direction. The GGL — Germany's cross-state gambling authority — runs OASIS, which is its central self-exclusion register, and then layers on something the UK and Portugal do not have. German-licensed operators must integrate with a cross-operator deposit enforcement system. A user cannot exceed €1000 in combined monthly deposits across every German-licensed operator, regardless of how many logins they keep. The system tracks the aggregate. Deposit €800 at one operator and then try to deposit €300 at another, the second transaction fails. The cap does not care which brand you prefer.

Portugal's RSA is structurally closer to GAMSTOP than to OASIS. It is a binary exclusion register, not a financial cap. Once you register, licensed operators block you entirely. But the register does not, based on what SRIJ has published, run a cross-operator spending enforcement layer. That is a real design difference, and it matters if you are thinking about which register to actually use. RSA removes the login decision. The German system removes the spend ceiling. The gap between "you cannot log in" and "you cannot spend above this line" is the gap between a nuclear option and a financial speed limit. You should know which one you are signing up for.

For a Portuguese resident, the practical read is that RSA is the nuclear option. It is the right tool for the person who has decided the relationship with online gambling is over for a defined period. It is not the right tool for the person who wants to keep playing at some reduced level and cap their bleed. Portugal does not currently operate a Germany-style cap. If that is what you need, this is not it.

If You Are the Reader Who Needs This Most, You Are Not the Reader Operator Marketing Was Written For

We want to be specific about who this article is written for, because the standard Portuguese iGaming listicle is written for somebody else entirely.

The operator marketing pipeline is optimised for the reader choosing between welcome bonuses. That reader exists, and the pipeline is very good at finding them. This article is not written for that reader. This article is written for the salaried professional in Lisbon who has been depositing on Friday nights for eight months, the resident in Porto whose card statement is telling a story the household budget does not want to hear, the student in Coimbra whose bank app shows a pattern they stopped wanting to look at sometime in January. You know who you are. We are not pretending otherwise.

For that reader, the question is not "which Portuguese licensed casino has the highest RTP slot". The answer to that question, incidentally, is knowable from the certification bodies: Pragmatic Play publishes RTP ranges of 94.00 to 97.00 across its slot catalogue, Play'n GO publishes 94.20 to 96.50, NetEnt 94.00 to 96.70. Those are real numbers from real suppliers audited by iTech Labs and Gaming Laboratories International, and they are almost completely irrelevant to the reader we are actually addressing here.

The relevant question is the one nobody in the affiliate pipeline writes about, because answering it destroys the funnel. The question is: what is the single action I can take once that removes the decision from me. RSA is an answer to that question. Registering binds every SRIJ-licensed operator. It requires one form, not twenty. It replaces the daily act of willpower with a structural block. That is the entire point. The fact that it only covers the licensed perimeter is a feature, not a caveat — licensed operators are where the marketing budget lives, which is where the decision you are trying to remove is also living.

If you are reading this and you also hold accounts on sites that are not SRIJ-licensed, the honest answer is that RSA handles half the problem and you need to handle the other half yourself. GAMSTOP faces the same limitation in the UK. OASIS faces it in Germany. Central registers stop where the licensing authority stops, and no regulator has yet solved the jurisdictional edge of the internet. That is not a failure of RSA. It is the shape of the problem.

Responsible gambling mechanics worth knowing, because they exist and they are specific: Portuguese licensed operators must honour RSA exclusions during the registered term, GAMSTOP runs 6-month, 1-year and 5-year terms, and Germany adds the €1000 monthly cross-operator cap on top of its register. If you register with RSA and then find yourself able to play on a site that lets you straight through the front door, that site is not SRIJ-licensed, and that is useful information now in your hands.

This piece started as a news explainer about Portugal's central self-exclusion launch. It turned into an argument that the launch is a real piece of infrastructure, that RSA is structurally closer to GAMSTOP than to Germany's OASIS, and that the reader who needs this portal most has never been the reader the standard "best casino Portugal" article was written to capture. We think both of those things matter more than the launch date does.