Designed to enforce the 2025 minor-protection laws, these rules aim to close existing loopholes. The Lula administration expects to finalize the decree by the end of this month, amid ongoing debates over operator taxes and broader industry regulations.

The proposal mandates that gambling sites and advertisers move beyond self-reported birthdates, utilizing trustworthy verification methods or a unified national system. To protect user privacy, the rules will restrict how businesses store and monitor authentication data. These standards are expected to expand to other sensitive sectors, including alcohol promotion and adult content.

As authorities shutter thousands of illegal sites, Brazil is shifting away from its "wild west" era of digital services. Recent court rulings now hold platforms legally accountable for the illegal content they host. For operators eyeing the rapidly growing Brazilian market, upgrading onboarding and identity management systems is now essential for future compliance.