The Kansspelautoriteit, the Dutch gambling supervisory authority known by the KSA shorthand, published its consolidated 2024 enforcement record in early 2025. The headline figures — the total sanctions value, the number of enforcement notices issued against unlicensed cross-border operators, the licensed-operator compliance actions — were summarized in the trade-press coverage as the immediate news items the supervisory authority had wanted to communicate.
The record merits closer reading than the summary coverage typically provided. The methodological substance behind the figures, the case-by-case enforcement narrative the supervisor documented, and the pattern across the year of which intervention types the supervisory authority emphasized — these together tell a more substantive story about how the Wet Kansspelen op afstand framework is being operationalized in its third full enforcement year than the headline summary acknowledged.
The enforcement-action types that the record documents
The supervisory record distinguishes between several distinct enforcement-action categories. Cease-and-desist orders against unlicensed cross-border operators that the KSA has identified as targeting Dutch consumers constitute one principal category. Administrative-fine impositions against licensed Dutch operators for compliance breaches constitute a second. Warnings and informal-resolution outcomes that do not escalate to formal sanctions constitute a third. The annual record reports the case counts and the cumulative sanctions value for each category.
The cease-and-desist category against unlicensed operators is the volume-largest enforcement category in the 2024 record. The KSA has spent substantial supervisory attention on the cross-border unlicensed problem since the 2021 framework opening, and the case volume reflects the structural reality that the unlicensed offer continues to be accessible to Dutch consumers despite the framework. The case-by-case documentation in the annual record establishes which operator categories the supervisor prioritized and what the principal targeting evidence consisted of in each successful enforcement.
The administrative-fine category against licensed operators tells a different story. The licensed-operator compliance breaches that triggered formal sanctions in 2024 fall into recognizable thematic groups — advertising-standards breaches under the Reclame Code voor Online Kansspelen, responsible-gaming protocol failures, and Cruks-integration deficiencies. The thematic pattern across the year suggests where the supervisory authority believes operational implementation of the framework requirements has been weakest.
What the cross-border targeting evidence consists of
The cease-and-desist enforcement against unlicensed cross-border operators requires evidentiary showing that the operator is in fact targeting Dutch consumers — not simply that the operator's services are accessible from Dutch IP addresses, which would not constitute targeting under the relevant case law. The targeting-evidence methodology the supervisor applies is documented in the annual record at a level that provides useful detail for analytical readers trying to understand how the framework is being operationalized.
The principal targeting indicators include Dutch-language website content and advertising, accepted payment methods specific to the Dutch market such as iDEAL, customer-service availability in Dutch, and active marketing channels targeting Dutch audiences. The supervisor builds the targeting case through documented evidence on each indicator, with the case-record documentation establishing what evidence the supervisor relied on in each successful enforcement action.
The targeting-evidence pattern across the 2024 enforcement cases is methodologically informative. The supervisor has been able to establish targeting for a substantial volume of cross-border operators, but the case record also documents cases where evidentiary showings did not meet the threshold and enforcement was not pursued formally. The asymmetry establishes that the framework is operating selectively rather than comprehensively, which has implications for what consumers can and cannot expect about enforcement coverage.
The licensed-operator compliance pattern
The administrative-fine record against licensed Dutch operators in 2024 produces a thematic picture of where the supervisory authority sees the licensed-operator compliance gaps. The advertising-standards breaches under the Reclame Code voor Online Kansspelen are the most-cited single category — operators that breached the responsible-marketing requirements through messaging that targeted prohibited audiences, that included prohibited content elements, or that breached the placement and frequency requirements the framework imposes.
The responsible-gaming protocol failures constitute a second substantial category. The framework imposes specific protocol requirements on licensed operators around player-monitoring, intervention-protocol implementation, and the technical specifications for the affordability and harm-detection systems. The 2024 enforcement record documents specific licensed-operator breaches across these protocol categories, with the documentation providing detail that compliance professionals working in the Dutch market should engage with directly.
The Cruks-integration deficiencies that produced enforcement in 2024 are the third recognizable thematic group. The Cruks central self-exclusion register requires licensed operators to verify each customer interaction against the register and to enforce the self-exclusion when matches occur. The 2024 enforcement record documents specific operator breaches of the verification or enforcement requirements, with the cases establishing what the supervisor expects operational implementation to look like.
What the record implies for the framework going forward
The enforcement pattern across 2024 has implications for how the Wet Kansspelen op afstand framework is likely to develop through 2025 and beyond. The cross-border unlicensed problem is structurally persistent — the supervisor cannot enforce against operators located outside Dutch jurisdiction without targeting evidence, and the targeting evidence is necessarily case-specific and resource-intensive to assemble. The annual case volume reflects sustained supervisory commitment to the cross-border enforcement work, but the structural problem does not appear to be resolving through enforcement alone.
The licensed-operator compliance pattern suggests where supervisory policy guidance is likely to focus in the coming year. The advertising-standards breaches in particular have been a sustained supervisory concern, and the framework requirements have been progressively tightened through successive policy reviews. The trajectory suggests further policy guidance and further enforcement intensity in this area is likely.
The Cruks-integration deficiencies pattern in 2024 is methodologically significant because the technical specifications for the Cruks verification have been stable since the framework opening. Operators that produced enforcement in 2024 for Cruks-integration failures had had three years to operationalize the framework requirements. The persistence of the deficiency suggests that supervisory attention to the technical-implementation quality of licensed-operator systems is likely to remain elevated.
What this means for Dutch consumers
The enforcement-record reading has implications for Dutch consumers exposed to the iGaming market. The licensed-operator framework is being enforced actively, with the 2024 record documenting substantive sanctions against licensed operators for compliance breaches that affected consumer interests. The licensed framework should be understood as supervised rather than nominal — the regulatory authority is intervening when licensed operators breach the framework requirements.
The unlicensed cross-border market is being targeted by enforcement but selectively. Consumers who interact with unlicensed cross-border operators are exposed to the consumer-protection gaps the framework was built to address, and the supervisory authority cannot reach those operators except through cease-and-desist enforcement that is necessarily case-specific. The protection that the licensed framework provides does not extend to the unlicensed market, and consumers should understand the distinction explicitly when considering which offers to engage with.
The protection structure under the framework — Cruks self-exclusion, advertising standards, responsible-gaming protocols, complaint-resolution mechanisms — is available specifically through licensed operators. The unlicensed cross-border alternatives do not provide the corresponding protections regardless of how the marketing materials present the offer. The 2024 enforcement record is a documentation of exactly that distinction in operational reality.
