Gambling Websites UK: The Block That Outlasts the Excuse

Updated November 2026
Licensed
gbAvailable in GB
Fast payouts
18+ Only

Gambling websites in the UK split into two kinds: those licensed by the Gambling Commission, which must join the GamStop self-exclusion scheme as a condition of that licence, and offshore sites with no British licence, which need not. A GamStop exclusion runs for its full term, cannot be cancelled, and stays in place afterwards until the person contacts GamStop to remove it.

Gambling Websites UK and the Facts of Self-Exclusion

How long a self-exclusion actually lasts is the question this whole market turns on, and it is not a question the market answers honestly. GamStop registrations run for 6 months, 1 year, 5 years or 5 years with auto-renewal, and a person cannot cancel mid-term for any reason. When the chosen term ends, the entry does not evaporate; it stays until the person contacts GamStop Online and asks for it to be taken off. A section of the scheme’s 2025 annual report is devoted to its refusal to remove registrations early. That is the design, and the design is deliberate.

Which is why the offshore trade has spent years selling itself as the way round a block, and why it keeps failing as a story. GamStop’s own terms say it can only exclude a person from participating operators. A site with no Commission licence is not a participating operator. It is also, under section 33 of the Gambling Act 2005, not lawfully offering commercial gambling to consumers in Great Britain at all — and the Commission said so plainly on 21 October 2024, noting that the offence applies even where the operator holds a licence somewhere else.

That sentence is doing more work than any bonus table, and I will come back to it. Before the reader looks at a single welcome offer, the useful facts are these: the national online register held 614,738 people as of July 2026, and the helpline that anyone can call, for any reason, is the National Gambling Helpline on 0808 8020 133, free, 24 hours a day, run by GamCare. Where a licence is absent, the protections are absent too. That is the entire argument, and everything below is detail.

Where the British Licence Draws the Line

The standard of comparison for any UK gambling website is the Commission licence, and it is not a certificate on a wall. It is a bundle of obligations that a site either carries or does not.

Holders must participate in the national multi-operator self-exclusion scheme — Licence Conditions and Codes of Practice social responsibility code provision 3.5.5 — a requirement in place since 31 March 2020. Since April 2020 they must also check their entire customer base against the register at least every 24 hours. Fail that, and the consequences are real: on 3 April 2020 the Commission suspended the licences of two online operators for missing the integration deadline.

Then the money rules. Credit cards have been banned for gambling since 14 April 2020, and an operator must ensure that money arriving from an e-wallet was not loaded from a credit card. From 19 January 2026, wagering requirements on bonus funds are capped at ten times, and mixed-product promotions requiring two or more types of gambling are banned outright. From 31 October 2025, every operator must prompt for a financial limit before the first deposit and invite a review every six months.

Offshore, none of that applies. Some offshore operators are competent businesses that publish their own standards; others are shells with a logo. The honest way to describe the category is not “rogue” but “unregulated in Britain”, and it does not matter how respectable the website looks.

One instance, because it shows the direction of travel. In January 2025 the Commission issued an industry warning notice about casino games from licensed suppliers turning up on unlicensed sites available to GB consumers, noting that such sites often target customers who have self-excluded and may have weak social responsibility and anti-money-laundering controls. The point is not that the games are rigged. It is that the supply chain leaks, and the customer at the end of it has nobody to complain to who can do anything.

What GamStop Covers, and What It Never Will

GamStop Online — run by The National Online Self Exclusion Scheme Limited, free to use, and often typed “gamestop” by people in a hurry — is the national online self-exclusion scheme, established in June 2017 and live since 27 April 2018.

The first time. Registering takes a few minutes and asks for a name, address, date of birth and email. The block is not instant: it can take up to 24 hours to become effective, which is worth knowing if anyone is doing this on a Friday night. Choose a term of 6 months, 1 year, 5 years, or 5 years with auto-renewal. The operator then has to close the account, return any funds held, and stop marketing — a point the LCCP makes explicitly, saying it is not enough merely to stop someone withdrawing while still taking their wagers.

The later times. The exclusion cannot be cancelled or deactivated during the term. At the end it does not lapse: it remains until the person contacts GamStop to remove it. Where auto-renewal was chosen, that option can only be switched off during the final six months of a five-year Minimum Exclusion Period, and renewal can carry on for up to four further five-year periods. Someone who never deactivates is carried through a further automatic seven-year self-exclusion period, during which operators are told the person was previously excluded.

The warning signs on the other side. An operator that markets hard to a newly excluded customer, that hints an offshore account solves anything, or that reports self-exclusion defined as a mere withdrawal restriction. Also treat with suspicion any site claiming a self-exclusion can be lifted early on request: the register does not work that way, and a “registration” held on an operator’s own server is not the register.

The numbers show how many people choose the long option. Of the periods selected in 2025, 29 per cent chose 6 months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. As of July 2026, more than one in two of the people on the register had taken the maximum five-year term. Under-25s accounted for nearly one in three exclusions in the first half of 2026, a 26 per cent year-on-year rise, and May 2026 set a monthly record with 12,236 sign-ups. Registrations for 2025 were 117,756, with 561,983 active exclusions at the year’s end.

Two smaller schemes matter, because they show the same logic. GamStop Betting Shops, until November 2025 known as MOSES, excludes a customer from betting shops in the areas they name for a fixed 12-month term that cannot be ended early, with a 24-hour cooling-off period if they return afterwards. The land-based casino scheme, SENSE, sets a six-month minimum extendable to twelve, and removal can only be requested in person at a casino during the six-month “Thinking” period that follows — after which 24 hours of cooling off apply. The Commission’s May 2026 FOI response put active SENSE self-exclusions at 12,445 between 1 April 2025 and 1 April 2026, and GamStop Betting Shops at 9,075.

Five Signs a Gambling Website Can Be Trusted

None of these require an account, and all five are checkable in under ten minutes.

The Licence Is Named, Verifiable and in Great Britain

A British-licensed site shows a Gambling Commission licence number, and the Commission’s public register confirms that the entity, the activities and the domain names all match. Checking matters because the register is specific: a licence that does not list the domain in front of you is not a licence for that domain. Any site whose footer names Curaçao, Anjouan, Kahnawake or Costa Rica instead is not licensed in Great Britain, whatever the licence number looks like.

Customer Funds Are Given a Real Rating

Under licence condition 4.2.1, an operator holding customer funds must state in writing whether those funds are protected if the business becomes insolvent, at which level — “not protected”, “medium protection” or “high protection” — and by what method, with the customer acknowledging receipt on the first deposit. An operator rated “not protected” must remind the customer of that every six months, stating the value held. A site that is vague about this has told you something.

Withdrawals Are Frictionless and Terms Are Not Unfair

The Commission says it is unacceptable for an operator to introduce friction at withdrawal rather than at deposit, and licence condition 17.1.1 forbids demanding extra information at withdrawal that could reasonably have been requested earlier. Reverse withdrawals have been banned since 31 October 2021, and maximum withdrawal limits on a deposit balance are prohibited — “you may withdraw up to £50 per day” is the Commission’s own example of a term that is not allowed. A site advertising one withdrawal at a time, or manual review of every fifth one, is drifting towards the conduct that cost one licensee a £900,000 settlement in October 2026.

A Second Opinion Exists, and It Costs Nothing

Disputes that an operator cannot resolve within eight weeks go free of charge to an approved alternative dispute resolution provider, under social responsibility code 6.1.1. IBAS and eCOGRA handle most of the volume; IBAS reports 100 per cent operator compliance with decisions in the consumer’s favour in both 2023-24 and 2024-25. Offshore sites answer to other bodies, if any: Anjouan currently approves EGIS ADR, Axion ADR, iGaming ADR and one private provider, and Kahnawake employs a full-time dispute resolution officer, while a Costa Rica operation has nothing behind it at all.

Bonus Terms Are Written Down Before Anyone Deposits

Since 19 January 2026 the maximum wagering requirement on bonus funds is ten times, and the terms must be clear, transparent, fair and readily accessible — with online offers displaying the significant conditions in full no more than one click away, under social responsibility code 5.1.9. Offshore, the multipliers are unconstrained: trade comparisons put typical welcome offers at 35x to 50x, no-deposit bonuses at 40x to 60x with a €50 to €100 cashout cap. Some offshore terms also cap the maximum bet while wagering at a few pounds or units, and void winnings for exceeding it.

The Comparison That Matters, and Why It Is Not the Bonus

Every published “top 10 gambling websites UK” table I have seen ranks by brand. That is the least informative column available. Rank by what the terms do to the money instead, and the picture inverts: the table below compares British-licensed and offshore terms by criterion, using the regulators’ own numbers where they exist.

The Comparison That Matters, and Why It Is Not the Bonus

Criterion UK-licensed site Offshore site, typical terms
Licence and register Gambling Commission; public register lists entity and domain Curaçao, Anjouan or other; CGA seals must redirect to cert.cga.cw to be genuine
Self-exclusion Must join the national scheme; scheme reported 614,738 people on the register as of July 2026 Not connected to the scheme; scheme’s terms say it reaches participating operators only
Deposit restrictions Credit cards banned since 14 April 2020; financial limit prompted before first deposit since 31 October 2025 Set by the operator; no British requirement
Withdrawal friction Reverse withdrawals banned since 31 October 2021; extra ID cannot be demanded late under licence condition 17.1.1 Reverse withdrawals and per-week caps common; terms include maximum cashout clauses such as 300% of the bonus credited
Bonus wagering Capped at 10x since 19 January 2026; mixed-product promotions banned Typically 35x to 50x for welcome offers, 40x to 60x for no-deposit offers, per trade comparisons
Complaint route Free ADR after eight weeks; IBAS and eCOGRA approved Operator’s own ADR provider; Anjouan names four, Costa Rica offers no framework

The last row is the one people skip. A complaint is what a gambling website is for about one customer in fifty, and it is the only moment the difference between a licence and a logo becomes money.

Who Actually Turns Up on the Unlicensed Sites

Independent estimates of the black market disagree, and the disagreement is instructive rather than embarrassing. Market-intelligence firm H2 Gambling Capital put stakes with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. A study by Frontier Economics for the Betting and Gaming Council estimated £2.7 billion staked online annually on the black market — 2.1 per cent of the £128 billion staked with regulated remote operators — involving 1.5 million people, with up to £4.3 billion if illegal in-person venues are counted. Yield Sec, working for the Campaign for Fairer Gambling, put the unregulated share at 9 per cent of a £8.8 billion market in 2025.

The Commission’s own survey work sits at the other end. Analysis published 5 November 2026 covering April 2025 to April 2026 estimated that 0.6 per cent of respondents across the whole population, including non-gamblers, had engaged with an illegal gambling website in the past four weeks, with a further 0.4 per cent in the past 12 months and 94.4 per cent showing no indication at all. Among people who had gambled online in the past four weeks, 2.5 per cent had engaged with one.

Two things reconcile those figures. First, method: the Commission’s October 2024 approach combines web-traffic data with an assumption of £0.32 of gross gaming yield per minute of online slots, and explicitly does not capture activity hidden behind VPNs. Second, concentration: a lot of the unlicensed market’s money comes from a small number of people, which is precisely the pattern the Commission flagged when it warned about sites targeting customers already on the register. The £16.6 billion figure and the 0.6 per cent figure can both be roughly right, describing a market that is small in headcount and expensive per head.

Enforcement has moved, slowly, towards attacking the rails rather than the websites. Since April 2024 the Commission’s Illegal Markets team issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs, and secured 287,961 removals. Across 160 illegal websites, engagement fell by an average of 32 per cent after disruption; registrar blocks produced a 91 per cent average fall and GEO IP blocking 60 per cent, against 30 per cent for Google removals. That last comparison is the honest one, and the Commission makes it itself: deleting a search result makes a site harder to find without actually blocking it. In April to June 2025, 108 illegal websites were geo-blocked by their own operators, 22 were removed or suspended by a registrar or host, and 214 came off search engines — a ratio that says most of the “crackdown” is cosmetic.

Reading KYC as a Signal, Not an Obstacle

The single thing this topic turns on is identity verification, and it is where trust is easiest to test, because the rules are crisp about timing.

The first time. Under licence condition 17, a customer’s identity must be established before they are permitted to gamble, using at least their name, address and date of birth. In practice a British site will try to match those against databases such as credit reference agencies and the electoral roll, in which case no documents are needed at all. Money-laundering rules set a threshold of €2,000 for identification and verification where a customer deposits or withdraws at a remote casino, measured per transaction and across linked transactions — for example activity within a single logged-on period. Some operators use what the Commission calls the hybrid approach: verifying age and identity at registration, then full verification when the threshold trips.

The later times. Checks are ongoing. Circumstances change, details drift, and a site may refresh what it holds. Enhanced due diligence follows for higher-risk accounts, including a source-of-wealth question, and non-face-to-face business is treated as high risk unless safeguards are in place. Documents a business can ask for include passports, driving licences and household bills; a selfie may be requested where fraud is suspected, and bank statements may be sought to test source of funds. The Commission says it cannot give a timescale because the process varies, and that electronic verification can be instant while document-based checks take longer.

The warning signs. Document requests that appear for the first time at withdrawal are the classic, and the Commission has been blunt about them: over a quarter of complaints reaching its Contact Centre concern identity verification, and it worries about operators using “fuzzy matching” through third-party providers and onboarding people on partial or equivocal verification. It has also noted that accepting a middle name instead of a forename creates mismatches against records held elsewhere — including GamStop’s, which quietly undermines a self-exclusion. If a site asks for verification before the first deposit, that is not friction. That is the requirement working. If it asks for a utility bill the moment a withdrawal is requested, licence condition 17.1.1 says it should have asked earlier.

What to Check, in Order, Before Depositing Anything

The sequence below is the one I would follow, and it costs nothing but a few minutes.

What to Check, in Order, Before Depositing Anything

  1. Confirm the licence on the public register. Take the licence number from the site’s footer and check it against the Commission’s register, confirming the entity name, the licensed activities and the domain all match. Reason: it establishes a British licence rather than a foreign one, and a foreign licence means no GamStop coverage, no credit card ban and no British complaint route.
  2. Read the customer-funds rating in the terms. Find the insolvency rating — “not protected”, “medium protection” or “high protection” — and the method behind it. Reason: money in a separate client account does not guarantee return on insolvency, and businesses may hold customer funds in overseas bank accounts.
  3. Read the withdrawal terms before the bonus terms. Look for maximum withdrawal limits, one-withdrawal-at-a-time clauses, processing fees and any manual review thresholds. Reason: these terms, not the headline percentage, decide whether winnings arrive, and they are exactly what the Commission and the CMA treat as unfair.
  4. Check the bonus conditions in full. Find the wagering multiple, the maximum bet while wagering, the game contribution table and any maximum cashout clause. Reason: an offshore 40x requirement with a €100 cashout cap can make a large win unreachable, and only the small print says so.
  5. Learn where a dispute would go. Identify the approved ADR provider named by the operator, and note that IBAS and eCOGRA are approved for all sectors and free to consumers. Reason: it establishes whether there is any avenue at all once the operator says no — and offshore, the answer is often that there is not.
  6. Use the protections that exist, and the helpline if anything is wrong. Bank gambling blocks are available from a list of banks including Barclays, HSBC, Lloyds, Monzo, NatWest, Santander and Starling, applied at card level, usually with a 48- or 72-hour cooling-off; blocking software is signposted by the scheme itself. Reason: these work whether or not a site chooses to be decent. The National Gambling Helpline is on 0808 8020 133, free and open 24 hours a day.

What Compliance Costs, in Numbers

Fine words about “safe and secure” are cheap. The figures below are the ones that separate a regulated site from a website with an ethical font.

Curaçao charges a one-time, non-refundable EUR 4,592 application fee for a B2C gaming licence, plus EUR 150 per ultimate beneficial owner and per qualified interest holder, with a total annual fee of EUR 47,450 — a EUR 24,490 licence fee to the National Treasury and a EUR 22,960 supervisory fee to the authority. Anjouan publishes EUR 17,828 for issuance and EUR 17,828 for annual renewal, with EUR 500 per additional domain or URL. Kahnawake’s Client Provider Authorization application fee rises from USD 35,000 to USD 40,000 on 1 January 2027, and the five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it. The Malta Gaming Authority takes a one-time EUR 5,000 application fee, a fixed annual licence fee of EUR 25,000 and 5 per cent of gaming revenue, against minimum paid-up share capital of EUR 100,000 for its first two B2C types.

I am not going to pretend that a bigger fee buys better conduct. Kahnawake has regulated interactive gaming since 1999 and suspended a Client Provider Authorization as recently as 29 September 2026, effective following a show cause notice; Curaçao’s LOK reform took effect on 24 December 2024 and by 7 October 2026 its online portal still had not returned to service, with the authority working on an alternative way to verify licensed domains. The point is narrower and it is the one that matters here: a jurisdiction with real obligations on a real register is expensive to inhabit, and the ones that cost nothing to enter attract operators who count the cost of everything else. Costa Rica charges no licensing fee for a comprehensive regime because it has no comprehensive regime — the “data processing license” the industry mentions is not a licence in any strict legal sense.

The Commission, meanwhile, must be paid for out of something. The statutory levy, commenced 6 April 2025, charges 1.1 per cent of previous-year gross gambling yield from all online operators and from software licences, with lower rates for land-based and lottery categories. It raised just under £120 million in its reported year, ringfenced for research, prevention and treatment and split 20 per cent to research, 30 per cent to prevention and 50 per cent to treatment. Since 1 April 2026 NHS England has commissioned gambling-harms treatment in England, funded by roughly £100 million a year from the levy. An operator outside the British system pays none of that, and its customers do.

Questions About Gambling Websites UK

How long does a GamStop exclusion last, and can it be lifted early?

It lasts for the term chosen at registration — 6 months, 1 year, 5 years, or 5 years with auto-renewal — and it cannot be cancelled or deactivated while that term runs. When the term ends it does not lapse automatically: it remains in place until the person contacts GamStop Online to remove it. Choose auto-renewal and it can continue for up to four further five-year periods.

Are there gambling websites UK players can use that are not on GamStop?

Not lawfully. Every operator holding a Gambling Commission licence must participate in the national self-exclusion scheme under social responsibility code provision 3.5.5, in force since 31 March 2020, and must check its whole customer base against the register at least every 24 hours. Sites that are not on GamStop hold a foreign licence or none, and offering commercial gambling to consumers in Great Britain without a Commission licence is unlawful.

Is an offshore site a way around a self-exclusion?

No, and it should not be described as one. GamStop’s own terms state that the scheme reaches participating operators only, so an unlicensed site sits outside it — but that is an absence of protection, not an exemption. The Commission warned in January 2025 that unlicensed sites available to GB consumers often target customers who have self-excluded and may have weak social responsibility controls.

What actually happens if I type “gamestop” instead of GamStop?

Nothing breaks. It is the common misspelling of the scheme’s name — the word “game” suggests itself — and the register is GamStop Online, run by The National Online Self Exclusion Scheme Limited. It is free to use, and registration details are checked by operators whenever anyone tries to use an online gambling account. Signing up takes a few minutes and the block can take up to 24 hours.

How long do withdrawals take from a British-licensed site?

Commission data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent within 48 hours. Earlier data from some of the largest firms showed around 99 per cent of requests approved, processed and fulfilled within 24 to 48 hours. Complaints about withdrawals remain the number one subject raised with the Commission.

What if a site refuses to pay out?

Complain to the operator first — that step is compulsory and cannot be skipped. If it is not resolved within eight weeks, any dispute can go free of charge to an approved alternative dispute resolution provider, and operators must tell customers this under social responsibility code 6.1.1. The Commission itself is a regulator, not an ombudsman: it records complaints and refers disputes onwards, but it cannot get anyone’s money back.

Does a foreign licence mean a site is automatically a scam?

No, and saying so would be lazy. Some offshore operators are well-run businesses that publish real standards, and Anjouan requires fund segregation, certified random number generators and anti-money-laundering controls. But a foreign licence means no British licence condition applies: no credit card ban, no 10x wagering cap, no 24-hour register check, no free British ADR. What it costs a player is not honesty. It is recourse.

The Line That Decides Everything

Ranking gambling websites by anything other than the licence is ranking them by marketing budget, and the licence is the only column that changes what happens when something goes wrong — which is why the register, not the welcome offer, is where any sensible reading of this market starts. The number worth carrying away is that 614,738 people were on it as of July 2026, more than one in two of them for five years; and if anything here has gone wrong for anyone, the National Gambling Helpline answers free, day and night, on 0808 8020 133.

Content created by the «Casino Not on GamStop» team