Session Management
How a platform tracks a player's authenticated session from login to logout, controlling access, timeouts and the responsible-gambling limits that apply during play.
Definition
Session management governs the authenticated period between a player logging in and logging out, or being timed out. It issues and validates session tokens, ties activity to the right player and device, enforces inactivity timeouts and re-authentication, and coordinates single or concurrent session rules. It is also where several player-protection features live or are surfaced: reality checks that remind a player how long they have been playing, session time and loss limits, and forced breaks or cool-off enforcement. Session management interacts with the game launch flow, passing session context to games, with geolocation, rechecking location during a session, and with security systems, detecting hijacked or duplicated sessions. Clean session handling is both a security control and a responsible-gambling mechanism.
Worked example
A player logs in and starts a session; after 60 minutes a reality check interrupts play to show elapsed time and net position, an inactivity timeout would log them out after a period of no activity, and if a session token appeared from a second, distant location at once, the system would treat it as suspicious.
Why it matters
For learners, it is what keeps you logged in safely and powers reminders about how long you have been playing. For professionals, session management sits at the intersection of security and player protection, so its tokens, timeouts and hooks for reality checks and limits matter to engineering, security and compliance alike.