CPA Versus Revshare When Regulation Tightens
Germany's stake limits and the Netherlands' 2021 launch stressed CPA and revshare in opposite ways. A worked 24-month comparison of the risk.

The CPA-versus-revshare comparison usually gets made on a calm market: which pays more, on average, over a normal year. That comparison misses the case that actually decides which deal type was the right call — what happens to each one when the regulatory ground moves under the operator you referred players to. Two real events show the two different ways that shock lands, and the difference is worth modelling before it happens to you, not after.
Neither event below is exotic. A stake-and-deposit-limit tightening and a licensing-driven market restructure are the two recurring shapes regulatory change has taken across Europe's gambling markets over the last several years, and a new regulated market is more likely than not to eventually produce one or the other. Modelling both in advance is cheaper than discovering which one applies to you from a commission statement.
Two real events, two different shocks
Germany's Interstate Treaty on Gambling (GlüStV 2021) came into force on 1 July 2021 with an online slot stake limit of €1 per spin and a cross-operator monthly deposit limit of €1,000 — rules that compress how much a typical player can lose per session, independent of anything the operator does. The stake limit has since been loosened for qualifying players, with licensed operators able to offer €3 or €5 stakes to players who meet age and play-pattern conditions from mid-2026, reported by iGaming Business, which notes the deposit limit has not moved the same way — but the original 2021 limits are the shock this model uses, because a stake-limit-shaped regulation is the recurring pattern across regulated markets, not a one-off.
The Netherlands took a different route to the same category of shock. Ahead of that launch, a "cooling-off" reprieve had run for operators who had served Dutch players without a licence; the Dutch Minister for Legal Protection, Sander Dekker, instructed the regulator (Kansspelautoriteit) to terminate that reprieve ahead of the market going live, and unlicensed operators were told to cease all Dutch player services from 1 October. Several major operators — Kindred, LeoVegas, Betsson and Entain among them — withdrew from the Dutch market rather than risk their future licence eligibility, reported by Casino Beats, which cited Betsson's own estimate of a SEK 25 million (roughly £2.1 million) hit to operating profit from the exit. Germany's shock compressed spend per player who stayed. The Netherlands' shock removed operators — and their marketing budgets — from the market entirely.
A worked 24-month comparison
Model an affiliate with 100 active referred players on a revshare deal at 30% of net gaming revenue, averaging €150 in monthly net revenue per player — €45 per player, €4,500 a month in total, run rate. In parallel, model the same affiliate on a CPA deal paying €120 per new depositor, bringing in 10 new depositors a month, or €1,200 a month.
| Period | Revshare (100 players, 30%) | CPA (10 new depositors/month, €120) |
|---|---|---|
| Months 1–12 (pre-shock) | €4,500/month → €54,000 | €1,200/month → €14,400 |
| Months 13–24, Germany-style shock (spend per player down 35%, illustrative) | €2,925/month → €35,100 | unaffected per-deal (already-paid CPA does not reverse) |
| Months 13–24, Netherlands-style shock (new deal flow down 70%, as marketing paused/exited) | unaffected per-player (existing base keeps earning) | €360/month → €4,320 |
Read across the full 24 months and the asymmetry is the finding: a stake-limit-style regulation (Germany's shape) cuts revshare income on every existing referred player, indefinitely, because the clause is proportional to ongoing player spend — a 35% compression is a 35% cut to a recurring number for as long as the limit stands. CPA income already banked is untouched by that same shock, because it was a one-time payment tied to a signup event that already happened. A market-exit shock (the Netherlands' shape) does the opposite: it barely touches revshare income from players who are already active and still playing on a brand that stayed, but it can dry up new CPA deal flow to close to nothing if the operator pauses or exits the market you write for — because CPA income depends entirely on new signups continuing to arrive.
What this means for how a deal should be chosen, not just compared
The practical read is not "CPA is safer" or "revshare is safer" — it is that the two deal types are exposed to opposite halves of a regulatory shock. Revshare exposure is to per-player spend rules (stake limits, deposit limits, loss limits); CPA exposure is to market-access rules (licensing deadlines, operator withdrawals, marketing restrictions during a transition period like the Dutch cooling-off). A hybrid structure — reviewed in our revshare vs CPA vs hybrid guide — splits that exposure rather than betting the whole relationship on one half of it. Before signing a long-term deal in a market with a known pending regulatory review, it is worth asking a program manager directly which category of change is more likely there in the next 12 months — a stake-and-deposit-limit tightening, or a licensing-driven market restructure — because the answer points toward which deal type carries less of that specific risk. The account-manager conversation this question belongs in is covered in working with your affiliate manager.
A hybrid arrangement does not eliminate either exposure; it caps each one at a smaller share of total income. Modelled on the same 100-player, 10-signup-a-month base, a 50/50 hybrid split would have absorbed roughly half of either shock above rather than the full amount — €9,450 lost to the German-style shock instead of €18,900, or €5,040 lost to the Netherlands-style shock instead of €10,080. The trade-off is that a hybrid deal's headline numbers on each side are usually lower than either pure structure's best-case rate, which is the ordinary cost of paying for the diversification.
The one thing both shocks share
Neither event was sudden in the way a server outage is sudden. Germany's GlüStV was public policy debated for years before taking effect; the Dutch market opening date and cooling-off mechanism were published well in advance of the operators that chose to exit. The affiliates least exposed to either shock were the ones who had already read the relevant regulator's own timeline rather than learning about the change from a drop in commission. The broader compliance landscape by market is mapped in our compliance guide, and it is worth a periodic re-read for exactly this reason — not to predict the next change, but to not be the last to know about it.
FAQ
Does negative carryover make revshare worse under a stake-limit shock?
It compounds it. A stake-limit style shock already reduces per-player revenue; if the same agreement carries a negative carryover clause, a run of losing months on the smaller remaining player pool can push the balance negative more easily than it would have on the pre-shock revenue base. The mechanics of that clause specifically are in our negative carryover piece.
Is CPA always safer during a regulatory transition?
No — it depends which half of the shock materialises. CPA income already paid is untouched by a per-player spend restriction, but it depends entirely on new signups continuing to arrive, which is exactly what a market-exit or licensing-transition shock interrupts.
How would an affiliate actually see a shock like this coming?
Both examples in this piece were public well before they took effect — Germany's treaty was debated in public for years, and the Dutch market's opening date and cooling-off terms were published in advance. The regulator's own timeline is the first place to check, not a drop in a commission statement.