S
Sudonex
Location

iGamingDevelopmentCompanyinSpain

Sudonex builds DGOJ-licensed iGaming platforms for Spanish operators. Casino, sportsbook, RUA integration and full Spanish compliance engineering. Talk to...

GLI-19 / iTech ready
Modern stack
MGA / UKGC fluent
SC

Written by

Sudonex Compliance Desk

Compliance & Licensing

SE

Reviewed by

Sudonex Engineering Team

Senior Engineering

Published Updated Editorial standards
Author credentials & methodology

Sudonex Compliance Desk

AML/CFT certified · GLI/iTech liaison · UKGC LCCP-aligned reviewer

Sudonex's compliance desk advises operators on AML/CFT, responsible-gambling tooling, GLI-19 RNG submissions, and license-jurisdiction matchmaking. Cited in 17 client license filings.

Sudonex Engineering Team

GLI-19 audit experience · MGA technical reviewer · 12+ yrs in real-money game systems

The Sudonex engineering team has built licensed-grade casino, slot, and exchange platforms for operators across UKGC, MGA, AGCO, and Curacao. Specialties: matching engines, RNG certification, KYC/AML pipelines, and regulator-fluent architecture.

GLI-19 ready

RNG cert pipeline

MGA / UKGC

License-fluent

PCI DSS L1

Payment compliant

ISO 27001 aligned

Information security

Spain runs one of Europe's most prescriptive online gambling regimes. The Dirección General de Ordenación del Juego — the DGOJ — sits inside the Ministry of Consumer Affairs and enforces the Gambling Act (Ley 13/2011) along with a continuous stream of Royal Decrees on advertising, player protection, and technical standards. Operators serving Spain build to a high bar or they do not survive an audit. Sudonex builds to the bar.

The DGOJ Regime

The DGOJ licences online casino, online betting, exchange betting, contests and bingo, with state-level licences operating alongside the regional licences for land-based and some online activities. Recent regulatory pressure has focused on advertising restrictions, mandatory cooling-off periods for new players, hard limits during the early-relationship window, and tighter integration with RUA — the national self-exclusion register (Registro General de Interdicciones de Acceso al Juego). Operators positioning around Royal Decree 958/2020 need platforms that enforce its player-protection thresholds at the system level.

Why Spanish Operators Choose Sudonex

We build the entire DGOJ technical surface — RUA integration, mandatory deposit-limit enforcement during the new-player window, real-time reporting feeds, the technical-standards documentation the DGOJ requires from licensees, and the SCJ (sistema de control y verificación) hooks. Our platforms have been audited against DGOJ's Resolución técnica and pass it without retrofit.

Services for Spanish Operators

Sudonex delivers casino app development on the DGOJ perimeter, sports exchange development for peer-to-peer markets, iGaming API integration into the DGOJ-recognised studios, slot game development for studios pursuing Spanish B2B distribution, and iGaming MVP consultancy for new market entrants.

Payments and Identity

DNI/NIE verification at registration is mandatory, with KYC verification through DGOJ-recognised providers. Payments run through Bizum, the major card schemes, and bank-transfer rails — with the DGOJ's source-of-funds expectations enforced at the wallet level. EUR-native settlement; multi-currency wallets where the licence permits.

Player Protection and Advertising

The DGOJ's player-protection framework — daily, weekly and monthly deposit limits with the early-relationship reduction during the first 30 days, mandatory cool-offs after losses, and reality checks — is implemented as platform primitives. Marketing systems respect RUA exclusions in real time, and bonus engines comply with the advertising restrictions Royal Decree 958/2020 imposes.

Engineering Standards

EU and Spanish data residency by default. Real-time SCJ feeds generated from the platform event log. Tamper-evident audit logging that survives DGOJ inspection. Compliance dashboards exposing the player-protection metrics the DGOJ asks for in licence renewal cycles.

FAQ

Do you hold a Spanish gambling licence?
No. Sudonex is a technology vendor. Operators hold the licence; we build the platform.

Is RUA integration included by default?
Yes. Real-time RUA screening in registration and login flows, with marketing-send filtering inheriting the same exclusion state.

What about the SCJ feeds?
Generated automatically from the platform event log in the format the DGOJ's Resolución técnica requires.

How long does a Spanish-facing build take?
Sixteen to twenty weeks for an audit-ready stack.

Royal Decree 958/2020 Specifics

The Royal Decree's player-protection package — early-relationship deposit caps, mandatory cool-offs after losses, restricted bonus mechanics for new players — needs platform-level enforcement, not operator-discretion enforcement. Sudonex implements the full set as default. Bonus engines respect the new-player restrictions; deposit-limit machinery enforces the early-relationship reduction without operator override.

DGOJ Resolución Técnica Compliance

The technical resolution defines the SCJ data feeds, the event taxonomy, and the audit-evidence expectations. Sudonex generates the SCJ feed automatically from the platform event log in the schema and cadence the resolución requires. The audit-evidence layer is regulator-readable; operators do not assemble exports manually.

Marketing Operations

Spain's advertising restrictions reach deep into platform operations. The communications layer respects RUA exclusions in real time across email, SMS, push and in-app channels. Bonus terms generate in regulator-compliant formats. Affiliate flows are auditable end-to-end.

DGOJ Audit Posture and Inspection Readiness

DGOJ inspections sample event logs, query SCJ feeds against regulator-side ground truth, and probe RG enforcement evidence across deposit-limit windows and cool-off triggers. Operators that maintain audit-ready posture continuously — not just at renewal cycles — survive inspections cleanly. Sudonex platforms expose live compliance dashboards so operator compliance teams maintain readiness without manual evidence assembly.

Regional Licensing Considerations

Spain's regional layer adds complexity for land-based operations and certain online verticals. Catalonia, the Basque Country and Andalucia each maintain regional regulatory texture that interacts with the DGOJ's federal scope. Operators with regional exposure use Sudonex's licence-management layer to handle the federal-regional split without forking the codebase.

Affiliate and Marketing Compliance

Spain's advertising restrictions reach affiliate networks. Operators are responsible for ensuring affiliates comply with Royal Decree 958/2020 marketing rules. Sudonex platforms include affiliate-tracking with the audit trail operators need to demonstrate affiliate compliance to the DGOJ on demand.

Engagement Models for Spanish Operators

We work in three modes: fixed-scope MVP for new entrants validating a Spanish thesis, time-and-materials build for groups with evolving scope, and embedded squad for operators treating Spain as a long-horizon market. Each carries its own contracting and intellectual-property posture.

Operational Continuity

DGOJ inspections favour operators who maintain audit-ready posture continuously. Sudonex platforms include the operational maturity — documented incident response, regulator-notification timelines, change-management gates, SRE depth — that supports continuous readiness rather than burst-mode pre-renewal preparation.

Brief Engineering

If you are licensing in Spain, expanding from another EU market, or re-platforming for the DGOJ's player-protection framework, brief Sudonex.

FAQ

Frequently Asked Questions

Refer to the comparison sections in the article above. Sudonex's team helps operators pick the right path for their licensing region and roadmap.

Free 30-min discovery

Ready to build something operators trust?

Tell us about your build — region, licensing, timeline, budget. We'll come back with a technical scope and a fixed-bid roadmap within 48 hours.