SPA-MF publishes rules to prevent betting by self-excluded individuals, and operators have 30 days to implement them.

The Prizes and Betting Secretariat (SPA) of the Ministry of Finance published in the Official Gazette of the Union this Monday (10) a Normative Instruction ( SPA/MF No. 31 – 07/11/2025 ), which establishes mandatory procedures to prevent the registration and use of betting systems by self-excluded persons. In addition, an Ordinance was published that updates the self-exclusion rules, with a 90-day period for operators to adapt. The document, signed on November 7 by the Secretary of Prizes and Betting, Regis Dudena, determines that operators must consult the Betting Management System (SIGAP) to verify CPF numbers registered in the centralized self-exclusion database.

Companies in the fixed-odds betting sector will need to perform checks on SIGAP during the registration process for new users and upon their first daily login. The regulation also requires periodic checks every 15 days of all users already registered on the platforms.

When checking the bettor's CPF (Brazilian tax identification number), the system will return one of two possible responses: "Blocked – Centralized Self-Exclusion" or "Not Blocked". When the status indicates a block during a registration attempt, the company must immediately deny the request.

For already registered users who appear as blocked during login, operators will need to block new bets and initiate the account closure process within three days of consulting SIGAP.

The operator must inform the user of the reason for the block via email, messaging apps, SMS, or other available channels, within a maximum of one day. In the same communication, the bettor must be informed of the possibility of voluntarily withdrawing the funds in their account within a period of two days.

If the user does not voluntarily withdraw the funds, the operator is responsible for returning the resources. The transfer must occur within two days of the account closure, via deposit into one of the bank or payment accounts registered by the user.

All communications with individuals registered in the self-exclusion system must be documented with a record of the date, time, channel used, and message content. Companies are required to store this information for at least five years.

Decree No. 2.579/25 , published in the Official Gazette, updates the rules for self-exclusion and introduces new concepts regarding return to bettor (RTP), internet applications, specific self-exclusion, and centralized self-exclusion. The document defines specific self-exclusion as the "voluntary request by the bettor to delete their registration made directly in the betting system of a specific betting operator," while centralized self-exclusion is the "voluntary request by the bettor made on the platform maintained by the Secretariat of Prizes and Bets for exclusion and prevention of registration in the betting system of all betting operators."

The operator must provide responsible gambling control tools, ensure a visible and prominent link for centralized self-exclusion, not enter into partnerships that facilitate access to credit, and require prudential betting limits. There are also new registration requirements, which ask for more data from the bettor, including gender identification, full address, country of residence, telephone number, email, payment account details, prudential betting limits, and a scanned copy of a valid photo ID.

If there are difficulties in returning the funds, the operator must maintain accounting records and continue trying to contact the bettor. Any amounts not returned within 180 days of the date of notification will be allocated to the Student Financing Fund (FIES) and the National Fund for Public Calamities (FUNCAP).

The implementation of the new rules will follow a specific schedule. Companies will have 30 days to put into practice all the procedures foreseen in the normative instruction. A period of 45 days has been established for operators to consult SIGAP and review all CPF numbers already registered on their platforms.

To adapt to the changes established in the Ordinance, operators will have 90 days from the date of publication, especially regarding the provision of a link for centralized self-exclusion and user registration, including prudential limits. After this period, the bettor must complete their registration data to continue using the service, in the first registration update that occurs on their own initiative after the system adaptation.

For open bets placed by users identified as self-excluded, operators must cancel them and provide a full refund if the bettor has not made a voluntary withdrawal. The restriction on using the betting system applies exclusively while the user's CPF (Brazilian taxpayer ID) is registered in the SIGAP's (Integrated System for Betting and Access Control) database.

Readmission to the betting system will only be possible when the CPF (Brazilian taxpayer ID) is no longer listed in the database, provided there are no other legal impediments. For users registered in the self-exclusion system for an indefinite period, readmission will only occur upon full compliance with the conditions established by SPA.

The regulation prohibits operators from carrying out any active communication, targeted advertising, or direct notification to the user to inform them about the possibility of readmission after the exclusion of their CPF (Brazilian taxpayer ID) from the database. It also prohibits the consultation or processing of data from the Blocked Users Module for purposes other than those stipulated in the Normative Instruction.

Operators must report, via SIGAP, with the status “Exclusion – Centralized Self-Exclusion”, the CPF (Brazilian taxpayer ID) of users prevented from registering or using the betting systems. As long as there are funds from the user in the transactional account, the operator must maintain this status recorded in the system.

Companies that fail to comply with the rules will be subject to the sanctions provided for in SPA/MF Ordinances No. 1.225 and No. 1.233, both of July 31, 2024, in accordance with articles 41 and 42 of Law No. 14.790, of December 29, 2023. The normative instruction entered into force on the date of its publication.

The new normative instruction is based on article 2, item XXIII, of SPA/MF Ordinance No. 1.231, of July 31, 2024, and on article 5 of SPA/MF Ordinance No. 2.579, of November 7, 2025. Consultations with SIGAP must follow the rules of the Manual for the Ineligible Players Module, available on the official website of the Secretariat of Prizes and Bets.