Online Gambling UK: The Licence, the Numbers, and the Line GamStop Draws

Updated November 2026

Licensed

Available in GB

Fast payouts

18+ Only

Online gambling in the UK runs on one licence, granted by the Gambling Commission, and one national self-exclusion scheme, GamStop — often typed “gamestop”. GamStop had 614,738 people on its register by July 2026. Sites without a Commission licence sit outside both arrangements, and no British protection reaches them.

The promise of online gambling in the UK is, on paper, a simple one: a licensed operator, a fair set of terms, your money back when you ask for it, and a national scheme that can shut you out of all of it with a single form. It is an unusually tidy arrangement, and for most of the time it works. The trouble starts at the edges, and there are more edges than the industry likes to admit.

Two numbers matter more than the rest. GamStop had 614,738 consumers currently on its register by July 2026, and more than one in two of them had chosen the maximum five-year exclusion. Set that against 117,756 new registrations during 2025, a 16 per cent year-on-year rise in the first half of 2026, and a monthly record of 12,236 sign-ups in May 2026. This is not a fringe service for a handful of people at the end of a bad run. It is now a mainstream feature of the market, and the direction of travel is unmistakable.

Here is the uncomfortable part. Every one of those exclusions binds only the operators the Gambling Commission licenses. GamStop itself states plainly that it can only exclude a person from participating operators and cannot prevent access to gambling services run by organisations that do not participate in the scheme. Offshore sites that hold no Commission licence are not connected to it. That is the whole reason this topic exists, and it is worth being blunt about it at the outset: an offshore site is not a way round a self-exclusion. It is a place where the self-exclusion simply does not reach.

The Licence Is the Whole Argument

Ask whether online gambling is legal in the UK and the honest answer is that the question is aimed at the wrong party. There is no general offence of placing a bet. Section 33 of the Gambling Act 2005 makes it an offence to *provide* facilities for gambling without an operating licence, or without an exception applying — and the Commission’s own summary logs that offence against the operator. The Act’s other gambling offences follow the same pattern: section 47 and section 49 cover inviting, causing or permitting a child or young person to gamble. The duties land on the business, not the customer.

The provision bites regardless of where the operator sits. Section 33 is immaterial as to whether facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK. Under the wording amended in 2014, it applies to remote gambling if at least one piece of remote gambling equipment used is situated in Great Britain, or if the provider knows or should know the facilities are likely to be used in Great Britain. The Commission stated on 21 October 2024 that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction.

An offshore licence is therefore not a lighter version of a British one. It is a different thing entirely, issued by a different authority, answering a different set of rules — and the protections that come with a Commission licence travel with that licence only.

What a British Licence Actually Buys

Strip away the branding and a Commission licence is a bundle of obligations. Operators must participate in the national multi-operator self-exclusion scheme under social responsibility code provision 3.5.5 — the requirement has applied since 31 March 2020, and two operators had their licences suspended on 3 April 2020 for failing to integrate by the deadline. Since April 2020 operators must check their entire customer base against the register at least every 24 hours, which also stops registered people receiving direct marketing.

Around that sit the withdrawal rules. Reverse withdrawals — the option to cancel a pending payout and put the money back into play — were banned outright by RTS requirement 14B from 31 October 2021. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for extra information the operator could reasonably have asked for earlier. Licence condition 7.1.1 requires terms to be fair within the meaning of the Consumer Rights Act 2015. Un-staked deposits remain the customer’s property, and inactivity cannot be used to confiscate a balance.

Then there are the stake and bonus rules. The £5 maximum stake per game cycle on online slots for all adults went live on 9 April 2025, with £2 for adults aged 18 to 24 from 21 May 2025 — the limits were attached by regulations to every remote casino operating licence, and they apply to online slots only, not to roulette or blackjack. From 19 January 2026, wagering requirements on bonus funds are capped at ten times, and mixed-product promotions requiring two or more types of gambling are banned.

None of that reaches an operator without a Commission licence. Not the stake cap, not the ten-times wagering cap, not the reverse-withdrawal ban, not the 24-hour register check, not the fair-terms condition.

The Self-Exclusion Question, Answered Slowly

This is the section the whole subject turns on, so it is worth walking through properly. Registering with GamStop blocks a person from gambling with all online gambling companies licensed in Great Britain, for six months, one year, five years, or five years with auto-renewal. Signing up takes a few minutes; the block can take up to 24 hours to become effective, which is worth knowing in a week when a person might otherwise assume the job is done the moment the confirmation email lands.

Once registered, the registration cannot be cancelled or deactivated during the exclusion period. The schedule reports that registrations cannot be removed early, and the Group’s 2025 annual report devotes a section to its refusal to do so before the chosen term ends. The five-year option with auto-renewal has its own machinery: under the terms of use, auto-renewal may only be switched off during the last six months of a five-year minimum exclusion period, and it otherwise continues for up to four further five-year periods.

Here is the detail that catches people out. The exclusion does not evaporate when the chosen term runs out. Under the terms of use, if the registration is not deactivated after the chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. So a person who chooses six months and does nothing else has, in practice, set a rather longer clock running than they intended. That is a deliberate design decision, and a defensible one — the alternative is a system that quietly drops people back into the market by inaction — but it is not obvious from the sign-up page, and it should be.

The warning signs around this topic are easy to list. A site that describes self-exclusion as reversible on request. A site that treats a GamStop registration as a customer-service problem rather than a stop signal. A term buried in the small print making an exclusion “temporary”. A sign-up journey that asks for documents only when a withdrawal is attempted. Any of those is a reason to stop reading and close the tab.

The distribution of choices is worth a look, because it says something about how people read their own situation:

Under-25s accounted for nearly one in three of all GamStop registrations in the first half of 2026, a 26 per cent year-on-year increase, and across all age groups only one in four had self-excluded for six months. The gender split in the 2025 annual report was 94.3 per cent male and 5.7 per cent female.

The wider protection picture is patchier. Land-based casino self-exclusion runs through SENSE, with a minimum six-month period extendable to twelve, removal only in person at a casino during the six-month “Thinking” period, and a 24-hour cooling-off before play resumes. Betting shops use Gamstop Betting Shops, telephone-based on 0800 294 2060, with a fixed twelve-month term that cannot be ended early. The Gambling Commission’s block on credit cards for gambling took effect on 14 April 2020, and its list of banks offering gambling blocks, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling — applied at card level, so each card needs switching on, with most banks using a 48-hour or 72-hour cooling-off before gambling payments resume.

If any of this is close to home, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day, run by GamCare, and for callers in Wales the number given is 0808 2819 265. GamCare also takes contact by live chat and WhatsApp. It is not a crisis line, and staff cannot transfer someone at immediate risk of harm, so an emergency belongs with the emergency services.

Five Signs an Operator Can Be Trusted

Trust in this market is checkable, not a matter of feel. These are the tests I would apply, in this order.

The Commission licence matches the domain

The operator holds a licence from the Gambling Commission and it covers the site in front of you. The Commission tells consumers to check the business holds a British licence and then click through to the public register to see whether the site’s activities and domain names match. A licence number with no matching domain is not a licence for that site.

The exclusion scheme is wired in, not promised

GamStop registration is checked against the customer base at least every 24 hours, as the Commission required from April 2020. The practical check is a straight one: register, wait the up-to-24 hours, and see whether the account is closed and the balance returned. The LCCP requires licensees to close the account of someone who has self-excluded and return the funds — merely blocking withdrawals while still taking wagers is explicitly not good enough.

Withdrawals are not a maze

Withdrawal speed is the best single indicator of how a firm behaves. The Commission’s data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators; 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. The check is to read the terms for a stated maximum withdrawal, a one-request-at-a-time clause, or a “may” clause letting the operator void winnings — all of which the Commission has treated as unfair.

The customer-funds rating is stated on the page

Operators must pick one of three statements — “not protected”, “medium protection” or “high protection” — and set out which applies in their terms, and an operator rated “not protected” must remind customers every six months that funds are not protected in insolvency, stating the value held. A separate client account is not a guarantee of return either: businesses may hold customer money in overseas bank accounts, and money staked in an open bet is not customer funds at all.

Complaints run to a named ADR provider

Licensees must let customers refer an unresolved dispute to an approved alternative dispute resolution provider, free of charge, if it is not settled within eight weeks. The Commission’s approved list includes IBAS, eCOGRA, CEDR, ADR Group, Pegasus ADR Service, Blexr, ProMediate and Tattersalls Committee. The Commission is a regulator and not an ombudsman: it cannot get anyone’s money back, and it refers individual disputes onward.

How to Judge an Offshore Site Without Being Fooled

The offshore question is where careful players earn their keep, because a licence is not a binary. Curaçao is the useful case study. The National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority. The legacy “orange” sub-licence certificates of operation ended on 15 October 2025, and the CGA says a historic /JAZ number or legacy seal must not be treated as proof of a current licence. A single company may not hold a combination of B2B and B2C licences under Curaçao’s framework. The CGA announced on 7 October 2026 that its previous online gaming portal would not return to service and that it is working on an alternative mechanism for verifying licensed domains, because the previous digital licence seal may be affected by the transition — which means the verification route a player might reasonably expect to use is, for the moment, in the shop.

Anjouan is a different shape of problem. Its regulator publishes a certificate framework with unique licence numbers and QR codes, and states that certificates which cannot be verified through the public register should not be relied upon. It also states that Internet Gaming Licences contain no territorial restrictions under Anjouan law, while licence holders must comply with all applicable laws in the jurisdictions in which they operate — and its own statement of 10 June 2026 was that an Anjouan licence “is not, and has never been presented as, a universal authorisation to operate in every country in the world”. An ABC News investigation published on 31 December 2025 reported that a former attorney-general of the Comoros described the licensing entity as “an illegal entity”, and that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,828 each per year. Anjouan’s own legal opinion confirming the authority’s status is a licensee’s statement, not an independent finding.

Malta is the one that sits closest to the British standard, and it is still not the British standard: the MGA requires a B2C licence for gambling offered from Malta to a Maltese person or through a Maltese entity, charges a one-time EUR 5,000 application fee, a fixed annual licence fee of EUR 25,000 and gaming tax of 5 per cent of revenue, and publishes a list of Unauthorised URLs whose most recent entries carried notice dates of 30 October 2026. Kahnawà:ke has regulated interactive gaming since 1999 and runs a logo programme that generates a Certificate of Good Standing when clicked. Costa Rica operates no comprehensive gambling licensing regime at all, and the “data processing license” sometimes cited is not a licence in the strict legal sense; its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced one.

The pattern is worth reading twice. A “not protected” rating in the UK is at least a statement a player is entitled to see. Offshore, there is often no rating to read, no GamStop check, and no cap on the stake, the wagering or the terms.

Six Steps to Take Before Opening an Account

1. Establish which licence applies and verify it at source. Note the licence number and jurisdiction, then check the register the authority itself runs. A seal that does not redirect to an official verification page, or that shows a different domain, is the clearest signal there is. The CGA, Anjouan and Kahnawà:ke all publish exactly this kind of check.

1. Read the withdrawal terms before the deposit, not after. Look for a maximum withdrawal figure, a restriction to one pending request at a time, a fee exceeding the direct processing cost, and any “at our discretion” clause on voiding winnings. The Commission has treated maximum withdrawal limits and discretionary voiding clauses as unfair, and the LCCP sets no fixed deadline for a payout — the regime rests on fairness, transparency and identity rules instead.

1. Compare the bonus terms against the British cap. Ten times wagering is the British ceiling; offshore offers commonly sit well above it, and offshore welcome multipliers in the 35× to 50× range are ordinary, with no-deposit offers at 40× to 60× and cashout caps attached. Many offshore bonuses are sticky, meaning the bonus itself is never withdrawable and is stripped on cashout.

1. Set the account limits at sign-up. Since 31 October 2025 all gambling businesses must prompt customers to set a financial limit before the first deposit, make it easy to review and alter, and remind customers every six months to review their account and transaction information. Under RTS 12E, setting a limit must be presented as the default option, with an action required to decline it.

1. Write down what the site says about self-exclusion. GamStop registration takes minutes and can take up to 24 hours to take effect, and it holds for its full term — and then stays in place until the person contacts GamStop to remove it. An offshore site cannot be excluded from, and no British licence condition reaches it.

1. Keep the paper trail and know the escalation route. Complaints go to the operator first; if unresolved within eight weeks, they can go free of charge to an approved ADR provider. ADR providers will not take customer-service complaints or disputes about a refusal to accept a bet, so the route only works for the things it is designed for. If money is stuck, Citizens Advice offers free, confidential help including with debt, and Citizens Advice Scotland runs a gambling support advice line on 0800 328 1131.

What the Wider Market Looks Like

The market’s size is often quoted loosely, so it is worth pinning down. Total Great Britain gambling industry gross gambling yield was £17.5 billion in the year April 2025 to March 2026, a 4.4 per cent increase, with the remote casino, betting and bingo sector at £8.3 billion, up 6.9 per cent. Remote casino alone was rated high risk for money laundering in the Commission’s 2026 assessment, unchanged from the previous rating, on gross gambling yield of £5.0 billion in the year to March 2025, of which £4.2 billion came from slot games.

Where people gamble is the other half of the picture. The Commission’s analysis published on 5 November 2026 estimated that, across the whole population, 0.6 per cent of respondents had engaged with illegal gambling websites in the past four weeks and a further 0.4 per cent in the past 12 months, with 94.4 per cent showing no indication of using one; among those who had gambled online in the past four weeks, the estimate was 2.5 per cent, with a further 1.5 per cent in the past 12 months. Its dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026.

The industry-funded estimates are far larger, and they are industry-funded estimates. H2 Gambling Capital put stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, equal to 2.1 per cent of the £128 billion staked with GB regulated remote casino, betting and bingo operators. Yield Sec’s analysis for the Campaign for Fairer Gambling put the GB online market at £8.8 billion of gross gaming revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. The Commission’s own October 2024 methodology explicitly notes it does not capture activity hidden by VPNs. I would treat the £16.6 billion figure as the top of a very wide range, not as a measurement.

Enforcement has scaled up, and its limits are visible in the same figures. Since April 2024 the Commission’s Illegal Markets team issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs, and secured 287,961 URL removals. Measured across 160 illegal websites, engagement fell by an average of 32 per cent after disruption, with GEO IP blocking producing a 60 per cent average fall and a registrar block 91 per cent. The Commission says plainly that search-engine removal makes a site harder to find but does not fully block access. In July to September 2026 it referred 1,835 websites and issued 546 cease and desist notices, while across April 2025 to March 2026 every quarter recorded 0 or 1 prosecutions commenced — one in total. Two facts sit together there, and a reader can judge for themselves which one matters.

On the pre-existing problem, the Commission’s survey is steady. Its third annual Gambling Survey for Great Britain, published 16 July 2026 and based on 20,775 adults, found 2.4 per cent with a Problem Gambling Severity Index score of 8 or more, described as stable across three years at 2.5, 2.7 and 2.4 per cent. 3.4 per cent of those who had gambled in the past 12 months had sought support because of their own gambling. The levy that funds that support — 1.1 per cent of previous-year gross gambling yield for online operators, commenced 6 April 2025 — raised just under £120 million in its year, ringfenced for research, prevention and treatment, and split 50 per cent treatment, 30 per cent prevention, 20 per cent research.

What Bonus Terms Tell You About a Licence

Bonus terms are where a licence becomes visible, because they are the part of the offer a player actually reads. Since 19 January 2026 British licensees cannot impose wagering requirements above ten times on bonus funds, and cannot mix products within an incentive — “bet £5 to get £10 free bet” passes, “bet £5 to get 20 free spins” does not, because it crosses from betting into casino. The Commission said when it set the cap that it would “take out extreme levels as some licensees currently apply up to 60 times wagering requirements”, having consulted on thresholds of 1, 5 and 10 times.

Offshore terms read differently, and in detail. One operator’s published terms state a 25× playthrough before bonus-derived winnings may be withdrawn, with contributions varying by game — slots at 100 per cent, table games at 20 per cent, video poker and blackjack at 10 per cent, roulette and baccarat at 5 per cent, and craps, jackpot games and live dealer at zero unless stated otherwise. The same operator caps the bet per wager at 20 per cent of the deposited amount and warns that breaching it may mean account closure, forfeiture of the bonus and loss of winnings generated while wagering. Another reserves the right to limit withdrawals from bonus-generated winnings to 300 per cent of the credited bonus amount, with any excess voided, and caps the maximum bet while wagering at €5 for regular players and €10 for VIP players.

That is the distinction in one line: in Britain, a maximum limit on what a customer may withdraw from a deposit balance is a prohibited term; offshore, a maximum cashout tied to the bonus is standard drafting. The cap on the operator’s appetite is the licence, and it is not attached to a foreign one.

Questions About Online Gambling UK

Is online gambling legal in the UK?

Placing a bet is not the offence; providing facilities for gambling without an operating licence is. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling unless an exception applies or an operating licence authorises it, and the Commission’s own summary lists it as an offence by the operator under section 33. The Gambling Commission stated on 21 October 2024 that offering commercial gambling services to British consumers without a Commission licence is illegal, including where the operator holds a licence elsewhere.

How many online gambling sites are there in the UK?

No reliable count of licensed sites exists, because the same operator may run many domains under one licence. A better measure is the register of what is being policed. The Commission’s dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, and it referred 1,835 websites to search engines in July to September 2026 alone. Over May 2024 to July 2025 it identified just over 1,000 unique illegal sites that consumers in Great Britain had accessed.

How many people gamble online in the UK?

The Gambling Survey for Great Britain’s third annual report, published 16 July 2026 from 20,775 adults, found 47 per cent of adults had gambled in any form in the past four weeks, falling to 27 per cent once lottery-only participants are excluded. Operator data for January to March 2026 showed average monthly active online accounts of 13.4 million, down 1 per cent, covering roughly 70 per cent of the online market — the largest operators — so it is not a national headcount.

Do you pay tax on online gambling winnings in the UK?

Betting winnings are not taxed as income in the ordinary way; the tax falls on the operator through the statutory levy and the duty regime. The statutory gambling levy, introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, charges 1.1 per cent of previous-year gross gambling yield for all online operators and software licences, and raised just under £120 million in its first year. A customer stands outside that entirely. Offshore operators pay no British levy.

Can you use a prepaid Visa for online gambling in the UK?

It depends on the issuer, and the rule is on the operator’s side rather than the card’s. Licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider under the Payment Services Regulations 2017. Separately, credit cards have been banned for gambling since 14 April 2020, and operators must ensure that money arriving from an e-wallet was not loaded from a credit card.

Are the best online gambling sites in the UK the ones with the biggest bonuses?

Rarely. A large headline offer usually carries the largest wagering requirement, and in Britain that figure is now capped at ten times. The tests that correlate with a better experience are duller: no maximum withdrawal limit, no discretionary voiding clause, deposits held under a stated protection rating, a named ADR route, and a prompt response to a self-exclusion registration. The Commission’s own data recorded 96.3 per cent of 44.2 million withdrawals by large operators’ customers clearing automatically.

The Line, and Where It Stops

The British model is an unusually coherent one — a single licence, a national register of 614,738 people, a ten-times ceiling on wagering, a ban on reverse withdrawals — and its one honest weakness is that its edges are jurisdictional, not technical. Everything on this page that protects a player stops at the licence. Where the licence stops, an offshore site begins, and no amount of clean design changes which side of the line it sits on. GamStop holds for its full term and then stays in place until the person contacts GamStop to remove it; that is the arrangement, and it is the reason the number on the register keeps climbing. The National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day, and 0808 2819 265 for callers in Wales.

Content created by the «Casino Not on GamStop» team