Responsible gambling and affordability
Markers of Harm: What Gambling Operators Must Monitor
The indicators of gambling harm regulators expect operators to monitor from account opening, how to act in proportion, and how payment, support and CRM data feed in.
On this page
- What indicators does the UK Gambling Commission require?
- What does New Jersey require?
- How should operators act on markers?
- Who should act on markers of harm?
- What does a good interaction look like?
- How do harm monitoring rules compare?
- Worked example: tiered action
- What mistakes do operators commonly make?
- Checklist
- Frequently asked questions
- Sources
- More guides
Markers of harm are signals in a player’s spend, time, behaviour and account activity that suggest they may be experiencing gambling harm. In Great Britain, SR code 3.4.3 requires operators to monitor from account opening across seven indicator groups and act promptly and proportionately, including stopping marketing and bonuses on strong indicators. New Jersey’s October 2026 rule lists 13 triggers, from large deposits to repeated withdrawal cancellations.
Key takeaways
- Monitor from account opening, not after a pattern emerges [1].
- UK indicator groups: spend, patterns of spend, time, gambling behaviour, customer-led contact, use of tools, account indicators [1].
- Stop marketing and new bonuses once strong indicators are identified, across the group [1].
- New Jersey triggers include deposits over $10,000 in 24 hours, three limit increases in seven days and three withdrawal cancellations in ten days [2].
- Support conversations are a direct source of harm markers.
What indicators does the UK Gambling Commission require?
| Group | Examples |
|---|---|
| Customer spend | Amounts, affordability, comparison with other customers |
| Patterns of spend | Binges, payday deposits, escalation |
| Time spent | Long or increasing sessions, overnight play |
| Gambling behaviour | Chasing losses, erratic betting, high stakes after wins |
| Customer-led contact | Complaints, anger, asking for bonuses after losses, comments about harm |
| Gambling management tools | Raising limits, repeated time-outs, prior self-exclusion |
| Account indicators | Failed deposits, multiple or prepaid payment methods, not withdrawing winnings |
What does New Jersey require?
| Example trigger | Threshold |
|---|---|
| Deposits | Over $10,000 in 24 hours or $100,000 in 90 days |
| Turnover | Over $1,000,000 in 90 days |
| Limit increases | Three in seven days |
| Withdrawal cancellations | Three in ten days |
| Cool-offs | A second within 45 days |
| Self-exclusion page | Repeatedly opened without completing |
| Time | 50% rise in logged-in time versus prior two weeks |
How should operators act on markers?
- Detect quicklyFlag risk for automated action or prompt manual review.
- Act in proportionTailored messages first, escalating to limits, suspension or closure.
- Stop marketing on strong indicatorsAcross products and the group.
- Automate strong indicatorsAct automatically, review decisions, let customers contest them.
- EvaluateCheck whether interactions changed behaviour.
Support data matters: customer-led contact is a required indicator group. See CRM and customer support, compliance guardrails for AI agents and AI player support guardrails for iGaming.
Who should act on markers of harm?
| Role | Responsibility |
|---|---|
| Safer gambling team | Interactions, limits, closures |
| Automated systems | Immediate actions on strong indicators |
| Support agents | Spot customer-led indicators and escalate |
| CRM | Suppress marketing and bonuses |
| VIP | Escalate, never override |
What does a good interaction look like?
Interactions should be tailored, timely and evaluated. A message referencing the player’s actual pattern (“You have played after 2am on five nights this week”) is more effective than generic text. Evaluation means checking whether behaviour changed and escalating if not [1].
| Tier | Example |
|---|---|
| Early | Tailored message with tool links |
| Escalated | Automated deposit limit, live contact |
| Strong | Suspension, marketing stopped, account review |
| Severe | Closure and signposting to support |
How do harm monitoring rules compare?
| Market | Rule | Source |
|---|---|---|
| Great Britain | SR code 3.4.3 and customer interaction guidance | [1] |
| New Jersey | N.J.A.C. 13:69O-1.2 RG triggers (October 2026) | [2] |
| Malta | PPD: risk indicators including reversed withdrawals; licensee-imposed limits and exclusion | [3] |
| Sweden | Duty of care (omsorgsplikt) | [4] |
| Netherlands | Duty of care; affordability thresholds | [5] |
Worked example: tiered action
-
Player’s deposits double; sessions after 2am. Tailored safer gambling message sent; marketing paused.
-
Player asks support for a bonus after losses and raises their limit twice. Agent flags customer-led contact.
-
Automated deposit limit applied; live contact by the safer gambling team.
-
Player sets a time-out; CRM suppression extended.
What mistakes do operators commonly make?
Monitoring must start at account opening [1].
Strong indicators require stopping marketing and bonuses [1].
Customer-led contact is a required indicator group.
Interactions must be reviewed for effect.
Checklist
- Indicators across all seven groups.
- Monitoring from day one.
- Tiered action matrix.
- Marketing and bonus suppression on strong indicators.
- Support signals feed the RG system.
- Evaluation of outcomes.
- Roles for acting on harm defined.
- Interaction tiers documented.
- Evaluation of interaction outcomes.
Frequently asked questions
What are markers of harm?
Signals in spend, time, behaviour and account activity that suggest gambling harm.
When must operators start monitoring?
From account opening.
What must operators do on strong indicators?
Act promptly, including stopping marketing and new bonuses.
What are New Jersey’s RG triggers?
Thirteen criteria including large deposits, turnover, limit increases and withdrawal cancellations.
Can automated decisions be contested?
In the UK, customers should be able to contest automated actions.
Does support count as a source of harm markers?
Yes. Customer-led contact is a required indicator group in the UK.
Is a single marker enough to act?
It depends on strength; strong indicators justify immediate action.
What is a cool-off?
A temporary suspension the player chooses; in New Jersey at least 72 hours and irreversible.
Should interactions be personalised?
Yes, tailored interactions referencing actual behaviour are more effective.
What if an interaction does not change behaviour?
Escalate to stronger action, as UK guidance expects evaluation.
Sources
More guides
Affordability checks
UK financial vulnerability checks, Dutch thresholds, German limits and Sweden’s duty of care.
Self-exclusion schemes
GAMSTOP, Spelpaus, OASIS, Cruks, BetGuard, Brazil’s platform and US state lists compared.
CRM suppression and self-exclusion
How to suppress marketing after self-exclusion and RG flags: GAMSTOP, BetGuard, Spelpaus, OASIS.
CRM and customer support
Using support conversations as churn and retention signals, and closing the loop with CRM.
Deposit limits by market
Mandatory and default deposit limits in the UK, Netherlands, Germany, Sweden, Malta, Ontario and US states.
Further reading elsewhere
- Compliance guardrails for AI agents (igaming.cx)
- Fallback logic for AI support (igamingsupportai.com)
- AI player support guardrails for iGaming (www.cevro.ai)