New Non GamStop Casinos: The Line Where Self-Exclusion Stops
New non GamStop casinos are sites that accept UK players but hold no Gambling Commission licence, so they sit outside the national self-exclusion scheme. A GamStop registration blocks all operators licensed in Great Britain for the full term chosen, and stays in place until GamStop itself is contacted. Offshore sites that never joined the scheme are not covered by it.

I have been reading Gambling Commission notices for years, and the phrase “new non GamStop casinos” always arrives with the same little shrug attached to it — as though a casino can be new in some way that matters, and as though the absence of GamStop is a feature rather than an address. It is neither. What is new, in the great majority of cases, is a domain name painted over an old licence from somewhere else, and what is missing is the one piece of infrastructure that British players have come to rely on more than any bonus.
That infrastructure is worth describing properly, because the entire market segment depends on people not understanding it. GamStop — note the spelling, since the word “game” invites itself in and people type “gamestop” instead — is the national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited, which has held company number 10504973 since its registration. It went live on 27 April 2018 after the Remote Gambling Association designed it at the request of the Department for Digital, Culture, Media and Sport and the Gambling Commission. In November 2025 it was renamed Gamstop Online after a website update. Since 31 March 2020, participation has been compulsory: Licence Conditions and Codes of Practice social responsibility code provision 3.5.5 states plainly that “Licensees must participate in the national multi-operator self-exclusion scheme”. Operators were told about that deadline in January 2020, and in April 2020 the Commission added the requirement to check the entire customer base against the register at least every 24 hours.
Two firms found out what happens when you ignore it. On 3 April 2020 the Commission suspended the licences of two operators under section 118(2) of the Gambling Act 2005 for failing to integrate by the deadline. That is the shape of the scheme: not a badge, a licence condition with teeth.
So the offshore market is not an alternative to that system. It is the space the system cannot reach. Offshore sites holding no Commission licence are not connected to GamStop, a point that trade and press sources state consistently and that follows from GamStop’s own terms, though no regulator page says it in quite those words [unconfirmed]. Gambling Commission licence condition social responsibility code 3.5.5 binds licensees; a business with no licence owes it nothing.
Before anything else, the plain facts. Offshore operators are not licensed in Great Britain. UK protections do not apply to them — no LCCP conditions, no approved alternative dispute resolution, no fair-terms enforcement, no client-funds rules. And if gambling stops being fun or stops being controllable, the help is free and it is here: the National Gambling Helpline on 0808 8020 133, run by GamCare, 24 hours a day, every day of the year; GamFam; Gamblers Anonymous; and NHS gambling clinics.
How Long Does Self-Exclusion Last, and Why It Never Lifts on Its Own
This is the question the whole segment turns on, and the answer is more absolute than most people expect. Registering with Gamstop Online blocks you from gambling with all online gambling companies licensed in Great Britain for 6 months, 1 year, 5 years, or 5 years with auto-renewal. Signing up takes a few minutes; the block can take up to 24 hours to become effective. Once registered, you cannot cancel or deactivate that registration during the exclusion period.
The end of the chosen term is not a release date. The exclusion stays in place after the end of the chosen period unless the person contacts GamStop to remove it. That single sentence is why GamStop registrations cannot be removed early — the Group’s 2025 annual report devotes a whole section to its refusal to do so — and why the numbers behave as they do.
Then there is the tail nobody reads. Under the terms of use, last updated 20 May 2026, the auto-renewal option may only be switched off during the last six months of a five-year minimum exclusion period, and auto-renewal continues for up to four new five-year periods. If a person does not deactivate after their chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the individual was previously excluded.
The scheme’s own figures show how many people let it run. Of the periods selected by registrants in 2025: 29% chose 6 months, 24% chose 1 year, 25% chose 5 years and 22% chose auto-renewal. As of July 2026 Gamstop Online reported 614,738 consumers currently on the register, of whom more than one in two had opted for the maximum five-year exclusion; across all age groups only one in four had self-excluded for six months. Anyone who imagines the register is mostly short-term commitments should sit with those two numbers for a moment.
The active count at the end of 2025 was 561,983, with 58,675 registrations recorded in the final six months of the year — an average of 319 per day. During 2025 as a whole there were 117,756 new registrations. The first half of 2026 brought a 16% year-on-year increase in registrations, with May 2026 setting a new monthly record of 12,236 sign-ups. Under-25s accounted for nearly one in three of all Gamstop Online self-exclusions in that half-year, a 26% year-on-year increase. GamStop’s 2025 annual report recorded the gender split as 94.3% male and 5.7% female. The Group also states it can no longer report a total lifetime registration figure, because the seven-year retention period from the 2018 launch has begun to expire.
None of this is a loophole in search of a solution. Self-exclusion under GamStop holds for its full term and then stays in place until the person contacts GamStop to remove it. A casino operating outside the scheme does not shorten that term, does not override it, and does not launder it. It simply sits where the register cannot see.
The warning signs of a site built around the gap
The marketing tells you where the gap is. A site that defines itself principally by the exclusions it does not honour, rather than by the games it offers, has told you what it thinks its customers are. The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators turning up on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and AML controls. That is not my inference; it is the regulator’s own language.
New Non GamStop Casinos and Licences
A new non GamStop casino is, almost without exception, a site attached to a licence issued outside Great Britain. Since April 2024 the Commission’s Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs and secured 287,961 URL removals. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent after disruption. This is a market being repeatedly rebuilt rather than a market of stable, established names. Hence “brand new”.
The licence behind the domain is the thing worth examining, because the fees explain the economics. Curaçao reformed its regime: the National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority, replacing the old master-licence and sub-licence model. Licensing activities ceased for the four former master licensors on dates through 2024 and into 31 January 2025, and the legacy “orange” sub-licence certificates of operation ended on 15 October 2025. A historic /JAZ number or legacy seal must not be treated as proof of a current Curaçao licence.
The arithmetic is worth stating plainly. A Curaçao B2C licence costs a one-time non-refundable application fee of EUR 4,592, and a total annual B2C fee of EUR 47,450 — a EUR 24,490 licence fee to the National Treasury and a EUR 22,960 supervisory fee to the CGA, payable in full by 15 January. Anjouan publishes EUR 17,828 for B2C licence issuance and the same for annual renewal, with EUR 500 per additional domain or URL. Malta sits at the other end: a one-time non-refundable application fee of EUR 5,000, a non-refundable fixed annual licence fee of EUR 25,000, gaming tax of 5% of gaming revenue, and minimum paid-up share capital of EUR 100,000 for Type 1 and Type 2 B2C licences.
One of those regimes is not like the others in reputational terms. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, and that a former attorney-general of the Comoros called Anjouan Licensing Services “an illegal entity” [unconfirmed as to the individuals’ characterisation, though reported by ABC News]. Anjouan Gaming’s own statement of 10 June 2026 was refreshingly direct: “An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world.”
That sentence does a great deal of work. It means the licence does not authorise the site to serve British customers. And section 33 of the Gambling Act 2005 makes it an offence for a person to provide facilities for gambling without an operating licence, applying to remote gambling where at least one piece of remote gambling equipment used is situated in Great Britain, or under the post-2014 wording where the provider knows or should know the facilities are being used, or are likely to be used, in Great Britain. The Commission states it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction. On summary conviction the offence carries imprisonment for up to 51 weeks, a fine up to level 5, or both; in Scotland the term is six months. That is the operator’s problem, not the player’s — but it is worth knowing that the site’s “licence” is doing none of the work the website implies.
New Non GamStop Casinos UK and Market Share
New non GamStop casinos UK searches describe a smaller market than the advertising suggests, and the Commission has begun measuring it properly. Analysis published 5 November 2026 estimates that, across the whole population including non-gamblers, 0.6% of respondents engaged with illegal gambling websites in the past 4 weeks and a further 0.4% in the past 12 months, while 94.4% showed no indication of using one. Among respondents who had gambled online in the past 4 weeks, the estimate is 2.5% engaged with illegal sites, with an additional 1.5% in the past 12 months. The Commission’s illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, 4% less than the previous three-month average but 4% more than September 2025.
The wider estimates diverge so wildly that I would trust none of them as a precise figure. H2 Gambling Capital puts the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97% in 2019 to 92% in 2025. A Frontier Economics study for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, equal to 2.1% of the £128 billion staked with GB regulated remote casino, betting and bingo operators, involving 1.5 million Brits. Yield Sec, analysing for the Campaign for Fairer Gambling, put the GB online gambling market at £8.8 billion GGR in 2025, split 91% regulated and 9% unregulated. Industry-commissioned, campaign-commissioned, commercially interested: pick your sponsor and you pick your number. What survives the disagreement is direction, and the direction is up.
Meanwhile the legitimate market is not shrinking. Total Great Britain gambling Gross Gambling Yield was £17.5 billion in the year April 2025 to March 2026, a 4.4% increase on the previous financial year. Remote Casino, Betting and Bingo GGY was £8.3 billion, up 6.9%. Online slots alone generated £773 million in the quarter to March 2026, up 12% year-on-year, on 25.1 billion spins. The regulated market’s problem is not lack of choice.
Comparing Licensing Regimes
The table below compares the licensing regimes rather than the brands, because the brands change every few months and the regimes do not. Fees are the published figures of each regulator.
| Regime | Cost of a B2C licence | Capital or tax requirement | What it does not do |
|---|---|---|---|
| Great Britain (Gambling Commission) | Licence fees under LCCP; statutory levy of 1.1% of previous-year GGY for online operators | Must join GamStop Online (SRCP 3.5.5); LCCP conditions apply in full | — |
| Curaçao (CGA, under the LOK) | EUR 4,592 one-time, non-refundable; EUR 47,450 total annual fee | EUR 24,490 to the National Treasury plus EUR 22,960 supervisory fee to the CGA | Does not replace a GB licence; legacy /JAZ seals are no proof of a current licence |
| Anjouan (Anjouan Gaming) | EUR 17,828 issuance; EUR 17,828 renewal; EUR 500 per extra domain | No territorial restriction under Anjouan law | The regulator itself says the licence is not universal authorisation |
| Kahnawà:ke (KGC) | USD 40,000 CPA application fee from 1 January 2027 (up from USD 35,000) | USD 20,000 annual CPA fee | Requires hosting at Mohawk Internet Technologies |
| Malta (MGA) | EUR 5,000 one-time, non-refundable application fee | EUR 25,000 fixed annual licence fee, 5% gaming tax, EUR 100,000 paid-up capital for Type 1/2 | The MGA publishes an Unauthorised URLs list; it has no connection with those sites |
Two things in that table deserve to be read twice. The first is that a Curaçao B2C annual fee of EUR 47,450 is not trivial — the “no-regulation jurisdiction” story is out of date, and the CGA has spent 2025 and 2026 consolidating. Supplier licensing becomes fully mandatory in Curaçao from 24 December 2026, the end of a two-year transition from the LOK’s entry into force. The second is that Kahnawà:ke, which enacted its interactive gaming regulations in 1999 and issues a single Interactive Gaming Licence held by Mohawk Internet Technologies since that year, runs a scheme where the licence holder is not the operator at all: Client Provider Authorisation holders are hosted inside it. That is a structure, not a brand endorsement.
Malta’s position in the British conversation is peculiar. An MGA licence is a real licence with real capital requirements, and it is still not a Gambling Commission licence. The MGA maintains a published Unauthorised URLs list, declaring it has no connection with those domains and that any reference to the MGA or a Maltese licence on them is false and misleading; the most recent entries carry notice dates of 30 October 2026. When a regulator has to publish a page of sites lying about holding its licence, you have a useful sense of the neighbourhood.
Five Signs an Operator or Service Can Be Trusted
Trust here is not a feeling. It is a set of things that can be checked in a browser tab, and every one of them is bureaucracy rather than vibes.

The licence is on the Commission’s public register, and the domains match
Check, not the badge: the Commission advises consumers to check before gambling that the business holds a British Gambling Commission licence and to click through to the public register to see whether the site’s activities and domain names match. The Commission’s regulatory remit only extends to gambling websites which trade or advertise to customers in Great Britain, and those must hold a Commission licence. A badge is a picture; the register is a record. Where the domain in the register differs from the one in front of you, you have your answer.
The self-exclusion terms are stated as absolute, not as a policy
A trustworthy operator treats GamStop as a licence condition, because it is one. SRCP 3.5.5 requires participation; a breach of a social responsibility code is a breach of licence condition by virtue of section 82(1) of the Gambling Act 2005. The practical check takes a minute: does the site’s own help material say it is part of the national scheme, and does it say the exclusion cannot be lifted on request? Anything softer than that is either ignorance or sales copy.
Disputes go to an approved ADR provider, free of charge
LCCP social responsibility code provision 6.1.1 requires licensees to have arrangements for customers to refer any dispute to an ADR entity free of charge if it is not resolved to the customer’s satisfaction within eight weeks, and the consumer must have gone through the operator’s own complaints procedure first; the operator may issue a deadlock letter. The Commission’s approved list runs to ADR group, Pegasus ADR Service, an independent provider, the Centre for Effective Dispute Resolution, eCOGRA, IBAS, ProMediate and Tattersalls Committee. IBAS covers remote gambling and is free to consumers. A named provider with a public case record is a check; “contact our support team” is not.
Records exist of complaints and how they were decided
Ask whether the provider publishes statistics. eCOGRA’s Great Britain ADR report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which “Deposits & Withdrawals” accounted for 150 valid disputes, with an average time to resolve domestic disputes of 31 days and 17.8% of completed disputes ruled in favour of the consumer. IBAS’s report for the same period records 3,721 domestic disputes, 217 of them Banking/Financial, an average completion time of 20 days, and 100 per cent operator compliance with decisions in the consumer’s favour in both 2023-24 and 2024-25. Numbers that can be audited are the point. Where no independent body has ever ruled on a site’s disputes, the absence is the finding.
The money is segregated and the protection rating is disclosed
Licence condition 4.1.1 requires customer funds held by a remote operator to be kept in a separate client account, separate from business accounts. Operators must select one of three customer-funds protection ratings — “not protected”, “medium protection” or “high protection” — must state in their terms which applies, and an operator rated “not protected” must remind the customer once every six months that their funds are not protected in the event of insolvency, stating the value of funds held. The quick check: find the phrase in the terms. If there is no rating, the site has not done the paperwork, and a site that will not do the paperwork has not been asked to.
A Practical Way to Judge One of These Sites
None of the following requires breaking a rule, contacting anyone on a forum, or taking a stranger’s word for anything. It is an afternoon’s clerical work, and it is dull precisely because dull checks are the ones that work.
- Read the licence claim, then verify it against the register. Open the Commission’s public register and search the operator’s name and domain. Reason: a licence referenced in a footer can be a licence from anywhere, and the register distinguishes a claim from a record. If the site is not on the register, no GB protections apply and the page you are reading applies instead.
- Check the self-exclusion wording on both sides of the line. Read what the site says about GamStop and read what GamStop says about participating operators. Reason: the scheme’s own terms state that an exclusion holds for its full term and then remains in place until GamStop is contacted to remove it, and that registrations cannot be cancelled during the term. If a site’s material implies otherwise, the material is wrong and the site knows it.
- Find the customer-funds rating in the terms and conditions. Look for “not protected”, “medium protection” or “high protection”, and note the date of the terms. Reason: the rating tells you what happens to money sitting in an account if the business fails, and money staked within an open bet is not treated as customer funds at all, so it falls outside any protection arrangement.
- Identify the ADR provider and check its published record. Find the named dispute body in the terms, then look for its last annual statistical report. Reason: it takes two minutes and gives you a sample size, a resolution time and a share of decisions that went the consumer’s way. A provider with no reportable history on the site is a blank page, not a clean record.
- Read the bonus terms for the clauses UK rules forbid, then compare. In Great Britain, from 19 January 2026, wagering requirements on bonus funds are capped at a maximum of ten times under Social Responsibility Code 5.1.1, and mixed-product promotions requiring two or more types of gambling are banned. Reason: the same code also requires terms to be “clear, transparent, and fair and readily accessible”. Offshore terms are under no such constraint, and maximum cashout clauses are where the value quietly disappears.
- Work out the total cost of the money route before you need it. Compare the fee on each withdrawal method you would actually use — Skrill charges 2.80% with a minimum of EUR 3.50 for a bank transfer, MiFinity 1.8% for cryptocurrency and €1 for VISA EEA, Jeton £10 to £10,000 with no sender or receiver fee on its local bank transfer. Reason: on a modest balance the withdrawal fee can exceed the bonus that attracted the deposit, and the published schedule is the only honest quote you will get.
What the Numbers Say About Money In and Money Out
The regulator counts withdrawals, which makes for uncomfortable reading for anyone selling “instant” as a headline. Gambling Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators; of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Earlier data from some of the largest companies showed approval, processing and fulfilment of around 99 per cent of withdrawal requests within 24 to 48 hours. The infrastructure for paying people promptly already exists onshore.
What does not exist is a fixed deadline in the rules. The LCCP sets no fixed maximum number of days within which an operator must complete a withdrawal; the regime relies on the fair-and-open condition 7.1.1, the identity-verification condition 17.1.1 and the prohibition on unfair terms rather than a stated payout deadline. The Commission says it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, or to place the operator’s commercial interests above their customers’, and does not consider it fair, transparent or necessary to delay or prevent withdrawals purely for customer-interaction purposes. Where there are no regulatory concerns about a customer, it says there is no valid reason to delay.
The complaints data gives the picture. Complaints to the Commission’s Contact Centre coded “Withdrawals and/or financial transactions” fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — better, and still the largest single category. A 2026 Commission blog reported that over a quarter of complaints reaching its Contact Centre concern identity verification, raised when documents are demanded only on attempting to withdraw. Its Annual Report and Accounts 2024-25 states that, despite work with some operators, issues relating to withdrawals continue to be the cause of most complaints it receives.
Offshore terms build in the delay by design, and the mechanism is usually the bonus, not the banking. A maximum cashout clause is the purest example: BlueChip Casino reserves the right to limit the amount withdrawable from winnings generated with bonus funds, including free spins and cashback, to 300% of the credited bonus amount, with any excess voided. Compare that with the UK position, where the Commission’s fair-terms guidance states operators may not impose, use, enforce or seek to rely on any term imposing a maximum limit on the amount a consumer may withdraw from their deposit balance. The Commission’s example of a prohibited term is “You may withdraw up to £50 per day and up to £500 per week”.
Wagering multipliers tell the same story. Offshore welcome bonuses commonly run at 35x to 50x and no-deposit bonuses at 40x to 60x, per a 2026 casino-guide comparison [unconfirmed], and trade coverage describes offshore welcome offers as typically 25x to 40x [unconfirmed]. The UK ceiling — ten times, in force since 19 January 2026 — was chosen precisely because licensees “currently apply up to 60 times wagering requirements”, in the Commission’s own words. A 60x requirement on a £100 bonus demands £6,000 of play before a penny is withdrawable. A 10x requirement demands £1,000. The difference is not a small print detail; it is the product.
The maximum-bet rule while wagering is the trap underneath all of this. BlueChip caps the maximum bet while wagering a bonus at €5 for regular players and €10 for VIP players, rejecting any bet above the limit. Ignition states that unless stated otherwise, all bonuses have a max bet restriction relative to the deposit amount, and the casino max bet per wager is 20% of the deposited amount, adding that failure to adhere may result in account closure, forfeit of the bonus, and any winnings generated during the wagering of the bonus. A rule whose breach forfeits everything, applied to a bet a player may not notice they placed, is not a term. It is an exit.
Why the Licence Is the Only Thing That Matters
If one factor decides everything else on this page, it is the licence, because every protection British players take for granted hangs from it. The Commission’s remit only allows it to regulate gambling websites which trade or advertise to customers in Great Britain, and those sites must hold a Commission licence. Outside that boundary, none of the machinery has any purchase: not the 10x wagering cap, not the ban on mixed-product promotions, not the client-funds rating, not the eight-week dispute window before ADR.

The most consequential of those absences is identity verification, because it is where self-exclusion lives or dies. Licence Condition 17 was introduced on 7 May 2019 and requires licensees to obtain and verify information establishing a customer’s identity before that customer is permitted to gamble, covering name, address and date of birth. In remote casinos under the money-laundering regulations, identification and verification are required when a customer deposits funds to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more, applied to single transactions and to transactions that appear to be linked.
The first-time experience and the later experience are different, and the difference is where trust is won or lost. First time, most people sail through: companies can often verify identity by matching the account against databases such as credit reference agencies and the electoral roll, in which case no documents are needed, and the Commission states it cannot provide a timescale because the process varies — instant if electronic verification works, longer if documents are requested. Passports, driving licences and household bills are the usual asks; a selfie may be requested where fraudulent activity such as identity theft is suspected. Later, when source of funds becomes an issue, gambling companies may obtain bank statements, and for some higher-risk accounts the operator will need to establish source of wealth as well.
The rule that protects the second-time experience is licence condition 17.1.1: a customer’s request to withdraw funds must not result in a requirement for additional information to be supplied as a condition of withdrawal if the licensee could reasonably have requested that information earlier — though this does not prevent a licensee seeking information it must obtain at that time under another legal obligation, such as an anti-money-laundering rule. Where a business delays a withdrawal because of insufficient ID it may be in breach of Licence Condition 17 and may be subject to regulatory action. And operators cannot confiscate funds on the basis that ID has not been provided; a customer’s un-staked deposits remain their property.
Offshore, the verification cadence is whatever the operator says it is, and the operator’s ADR provider is one it designated. Anjouan requires licensees to appoint an Authority-approved ADR provider and to list its name and contact details in player-facing terms, with complaints expected to be resolved within 30 days before escalation; the currently approved providers are EGIS ADR, Axion ADR, iGaming ADR and an independent provider. Kahnawà:ke runs a stricter-sounding regime: a licensee’s relationship with players must be contractual and free of terms that are unfair or unreasonable, sites must let a player set limits including zero, and its own voluntary self-exclusion is permanent and irrevocable. It also states that a player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity selected by the Commission, and it employs a full-time Dispute Resolution Officer. That is not nothing. It is also not a statutory scheme with a licence condition behind it, and it is not GamStop.
The enforcement reality deserves the last word in this section, because it explains why this market keeps producing “new” sites. The Commission’s disruption toolkit works unevenly: by method, registrar blocks and website suspensions produced the largest average fall in engagement at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission’s own conclusion is that GEO IP blocking and registrar blocks are more effective than search-engine removals, because search-engine removal makes a site harder to find but does not fully block access. In July to September 2026 it referred 1,835 websites to search engines — 7,677,211 URLs — and issued 546 cease and desist notices. Across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced, one in total. Somewhere in that gap between disruption volume and prosecution volume, a domain name gets retired and another one opens.
Where GambStop Ends and the Ground Gets Soft
Half the difficulty here is arithmetic, and it is worth doing properly. If someone is registered with Gamstop Online, the block covers every online gambling company licensed in Great Britain for the term chosen — and the term does not lapse quietly, since the exclusion stays in place after the end of the chosen period unless the person contacts GamStop to remove it. Meanwhile, the share of UK online gamblers who say they have engaged with an illegal site in the past four weeks is estimated at 2.5%, with another 1.5% in the past year. Simplify that into “everyone’s at it” and you will have made the mistake the segment is engineered around: 94.4% of the population shows no indication of using one.
There is a second device, and it is more sophisticated than a domain swap. Every bank gambling block in the Gambling Commission’s published list — Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, page last updated 16 October 2026 — works by declining payments to merchants categorised under gambling Merchant Category Codes, is applied at card level so it must be activated on each card, and is commonly reversible after a cooling-off period of 48 or 72 hours. The list is worth reading as a list. On the same reasoning, PMU-style crypto rails bypass it entirely, and so do e-wallets loaded through channels a card block cannot see. Blocking software closes more of the gap: GamStop signposts Gamban and BetBlocker, and BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. GamStop also points people towards it for an extra layer, which is an unusually honest thing for a scheme to do — it knows where its edges are.
So the practical picture is this. A British licence is a set of obligations with a regulator behind them: the 10x wagering cap, the mixed-product ban, the client-funds rating, Condition 17, Condition 7.1.1, the eight-week ADR window, the never-cancelled self-exclusion record. An offshore licence is a set of fees paid to a regulator with no jurisdiction over British customers, and it can be perfectly genuine — Malta’s EUR 100,000 capital requirement is not theatre — without giving a British player a single one of those protections. The site can be honest, the games can be fair, the payouts can arrive. The rules that would have caught it if they did not simply are not there.
A Note on What Changed in 2026
Two shifts will shape next year’s version of this page. On 7 July 2026 the Commission announced that Financial Risk Assessments will be introduced in stages, starting with the largest operators at £5,000 net deposit in a rolling 24-hour period for customers aged 25 and over and £2,500 in a rolling 24-hour period for under-25s, moving at the final stage to £1,000 in a rolling 24 hours or £3,000 over 90 days for the over-25s and £750 in 24 hours or £2,000 over 90 days for under-25s. The Commission confirmed that during the early stages no enforcement action will be taken for a failure to act following a Financial Risk Assessment. The first-stage £5,000 threshold is a spend pattern fewer than 0.5 per cent of customers exceed, and the pilot found 97 per cent of customers spending above the thresholds could be assessed frictionlessly, against the 80 per cent estimated in the 2023 white paper.
The second shift is the money that now funds treatment. The statutory levy, introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, charges 1.1% of previous-year Gross Gambling Yield for all online operators, and raised just under £120 million in the year reported, ringfenced solely for research, prevention and treatment of gambling-related harm; funding splits 20% to research, 30% to prevention and 50% to treatment. From 1 April 2026 NHS England took commissioning responsibility for gambling-harms treatment in England, funded by a levy worth approximately £100 million a year. None of that money comes from offshore operators, and none of it reaches anyone using one. It is paid by the licensed market, for the harm the licensed market and its neighbours generate.
Which is the uncomfortable symmetry of the whole subject. In the third annual Gambling Survey for Great Britain, published 16 July 2026 and based on 20,775 adults, 2.4% had a Problem Gambling Severity Index score of 8 or more, stable across the survey’s three years at 2.5%, 2.7% and 2.4%. Those are the people a self-exclusion scheme exists for, and the register’s own behaviour shows they use it seriously: 561,983 active exclusions at the end of 2025, 614,738 by July 2026, more than one in two on the maximum five-year term. A market segment defined by the one mechanism it cannot honour is not an alternative. It is a gap with a search phrase attached.
FAQ
Do new non GamStop casinos have to check GamStop?
No, and they cannot. Participation in the national multi-operator self-exclusion scheme is a condition of a Gambling Commission licence, under social responsibility code provision 3.5.5, and a breach of a social responsibility code is a breach of licence condition by virtue of section 82(1) of the Gambling Act 2005. A site with no Commission licence has no condition to breach and no access to the register. GamStop itself states it can only exclude people from participating operators, and that it is unable to prevent access to gambling services run by organisations that do not participate.
How long does a GamStop exclusion actually last?
For the full term chosen at registration — six months, one year, five years, or five years with auto-renewal — and then it stays in place until the person contacts GamStop to remove it. It cannot be cancelled or deactivated during the exclusion period, and the Group’s 2025 annual report devotes a section to its refusal to remove registrations early. Miss that step and a further automatic seven-year self-exclusion period follows, during which operators are told the individual was previously excluded. There is no third option in which it simply expires.
Is a Curaçao licence a sign of a trustworthy casino?
It is a sign of a licensed casino, which is not the same claim. Curaçao is a real regime now: the LOK took effect on 24 December 2024, the Curaçao Gaming Authority licenses directly, a B2C licence costs EUR 4,592 to apply for and EUR 47,450 a year in total fees, and legacy “orange” sub-licences ended on 15 October 2025. But a CGA licence says nothing about British consumer protections, and the Commission says it is illegal to offer commercial gambling to GB consumers without a Commission licence even where the operator holds a licence elsewhere.
Can a UK player use an offshore casino after self-excluding?
Nothing prevents a determined person from opening an account at a site outside the scheme, which is the entire commercial appeal of the segment. That is not the same as the exclusion being lifted. The GamStop registration holds for its term and remains in force until GamStop is contacted to remove it, and the Commission’s January 2025 warning notice specifically noted that unlicensed sites often target customers who have self-excluded via GAMStop while operating inadequate social responsibility and AML controls.
What is the maximum wagering requirement on a UK site?
Ten times, since 19 January 2026, when Social Responsibility Code 5.1.1 came into force with a rule that licensees must not apply wagering requirements over a maximum of ten times. The Commission chose a cap rather than a ban because it judged that licensees would otherwise be highly likely to introduce terms preventing customers cashing out bonuses, and it said the limit “will take out extreme levels as some licensees currently apply up to 60 times wagering requirements”. The same code bans mixed-product promotions.
Why do withdrawals get held up for documents?
Because identity verification has to happen at some point, and the rules set out when. In remote casinos, identification and verification are required when deposits or withdrawals reach €2,000 or more. The Commission’s expectation is that age and identity checks are brought forward to before a customer deposits or stakes, and licence condition 17.1.1 bars demanding extra information at withdrawal if the operator could reasonably have asked earlier. Where that happens the Commission treats it as a possible breach of Licence Condition 17.
The Line the Register Cannot Cross
The whole of this subject comes down to one mechanism and one number, and neither is flattering to the marketing. That mechanism is a licence condition — participation in GamStop under social responsibility code provision 3.5.5, checked against every customer’s details at least every 24 hours since April 2020 — and that number is 614,738, the consumers Gamstop Online reported on the register as of July 2026, of whom more than one in two had chosen the maximum five-year exclusion. A casino outside that licence has no condition to meet and no register to query; it has a domain, a fee paid to a regulator in another jurisdiction, and terms written to suit itself. Judge it on those terms, verify the licence rather than the badge, read the withdrawal clause rather than the headline, and treat the absence of the national scheme as the first fact about a site rather than the last. And should any of it stop being an interesting market and start being a personal one, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year.
Casinos Not on GamStop
Content created by the «Casino Not on GamStop» team
