Online Gambling Sites UK: What the Licence Says and What Self-Exclusion Actually Does

Updated November 2026

Licensed

Available in GB

Fast payouts

18+ Only

Great Britain’s regulated online gambling market generated £8.3 billion in gross gambling yield in the year to March 2026, and only sites holding a Gambling Commission licence may trade into it. Those sites must join GamStop, the national self-exclusion scheme: registration lasts six months to five years, and it stays in place afterwards until the person contacts GamStop to remove it.

There are roughly 3,000 words of argument to come, so let me start with the number that shrinks the whole debate. Every online operator serving British customers must participate in the national self-exclusion scheme as a condition of its licence. Not should. Must. The requirement sits in Social Responsibility Code provision 3.5.5 of the Licence Conditions and Codes of Practice, in force since 31 March 2020, and in April 2020 the Commission added the obvious companion rule: check the entire customer base against the register at least every 24 hours.

That single sentence separates the market into two halves. On one side sits everything licensed here — scrutinised, taxed, obliged to report, obliged to answer to an alternative dispute resolution provider when it gets a payout wrong. On the other sits everything that is not, and the figures suggest a market measured in billions of pounds of stakes. The argument of this page, written from the plainest angle available — how self-exclusion works and how long it lasts — is that the difference is not marketing. It is arithmetic, paperwork and, occasionally, a court date.

One housekeeping note, because it trips people up constantly: the scheme is spelled GamStop, and it is very often typed “gamestop” for reasons the word “game” explains.

The number that matters most

Start with the register, because it is the one figure in this industry that has grown every single year without a marketing budget.

GamStop recorded 117,756 new registrations during 2025 and closed the year with 561,983 active exclusions. That is more than half a million people who have asked, in writing, to be kept out. In the first half of 2026 registrations rose 16 per cent year on year, and May set a monthly record of 12,236 sign-ups. By July 2026 the register stood at 614,738 people currently excluded.

The composition of that number is more interesting than its size. Of those on the register in July 2026, more than one in two had chosen the maximum five-year term, and across all age groups only one in four had picked six months. Under-25s made up nearly one in three of all new self-exclusions in the first half of 2026, a 26 per cent year-on-year rise. The 2025 gender split was 94.3 per cent male and 5.7 per cent female.

So the picture of self-exclusion that emerges is not the one the leaflets suggest. It is not mostly a two-season cooling-off period chosen by people hedging their bets. It is a long, deliberate, male-dominated, increasingly young commitment to stay out of the market for years — made by people who have clearly read the terms more carefully than most of the industry’s customers ever do.

How GamStop Actually Works, First Time and Afterwards

This is the thing the topic turns on. Get it wrong and the rest of the page is decoration.

GamStop Online is the UK’s national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited, and it is free. It was established in June 2017 by the Remote Gambling Association at the request of what was then the Department for Digital, Culture, Media and Sport and the Gambling Commission, went live on 27 April 2018, and was renamed “Gamstop Online” in November 2025 when the betting-shop scheme formerly called MOSES became “Gamstop Betting Shops”.

The first time is straightforward. A person registers, chooses a term of six months, one year, five years, or five years with auto-renewal, and the sign-up takes a few minutes. The block can take up to 24 hours to become effective, which is worth knowing before the last evening in. From that point, online operators licensed in Great Britain must refuse the account, and the daily customer-base check added in April 2020 also stops direct marketing reaching the excluded person.

Then comes the part everyone misreads. Once registered, the exclusion cannot be cancelled or deactivated during the term. It does not quietly lapse at the end either: it stays in place beyond the chosen period unless the person contacts GamStop to remove it. Under the terms of use, last updated 20 May 2026, the auto-renewal option can only be switched off during the final six months of a five-year minimum exclusion period — and where it runs, it continues for up to four further five-year periods. If nobody acts at all, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Registrations cannot be removed early, and the Group’s 2025 annual report devotes a whole section to its refusal to do so.

Warning signs around self-exclusion are rarely about the scheme itself. They are about the site in front of it. A site that implies an exclusion can be lifted on request is misrepresenting the rules. A site that suggests the register only covers some operators is wrong: it covers every operator licensed in Great Britain, and it cannot reach operators that do not participate. And a site presented as a way round an exclusion — the “we’re offshore, so the register doesn’t apply” pitch — is selling a breach of the rules as a feature.

Because that is the sentence which must be said plainly, early, and more than once. Offshore sites that hold no Gambling Commission licence are not connected to GamStop and are not covered by it. British protections — the payout rules, the fair-terms condition, the dispute route, the credit-card ban — do not travel with a person who moves their money outside the licensed market.

If gambling is causing harm, help is free and available now: the National Gambling Helpline, run by GamCare, on 0808 8020 133, 24 hours a day, every day of the year. Callers in Wales can use 0808 2819 265. BeGambleAware points to the same helpline, and NHS treatment services, GamFam and Gamblers Anonymous all run alongside it. Gamblers Anonymous in England, Wales and Ulster answers on 0330 094 0322, with around 250 meeting locations and no appointment needed.

How Many Online Gambling Sites UK Players Actually Have to Choose Between

The question turns up constantly, and it has no clean answer, so here is what can honestly be said.

There is no single published figure for the number of gambling websites and apps permitted to take British customers, because a licence covers operations and domains rather than brands, and operators add and retire domains quietly. What is measurable is the other side of the market: the Commission’s illegal gambling dashboard logged 586 illegal gambling websites accessible to British consumers in September 2026, four per cent above September 2025.

Then there is the money. Market-intelligence firm H2 Gambling Capital estimates the amount staked with illegal gambling operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent to 92 per cent. A study by Frontier Economics for the Betting and Gaming Council put the black-market total more conservatively, at £2.7 billion staked annually online, involving 1.5 million Brits. Yield Sec, working for the Campaign for Fairer Gambling, put the whole British online market at £8.8 billion of gross gambling revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. Three different methodologies, three different totals — and not one of them describes a market where offshore sites are a rounding error.

The Commission’s own analysis, published 5 November 2026 and covering April 2025 to April 2026, is the most sober of the lot. Among respondents who had gambled online in the past four weeks, it estimates 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent having done so in the past 12 months.

What a Licensed Site Does That an Offshore One Does Not

The benchmark for every comparison on this page is the British licence, and it is worth naming a few of the rules that follow from holding one, because they are the ones that show up when something goes wrong.

Since 14 April 2020, credit cards cannot be used for gambling with a Commission-licensed operator, and where an e-wallet is accepted, the operator must ensure the money was not loaded from a credit card. Since 31 October 2021, no remote operator may offer a reverse withdrawal: requirement 14B states that consumers must not be given the option to cancel their withdrawal request. Since October 2025, every operator must prompt a customer to set a financial limit before the first deposit. Since 19 January 2026, wagering requirements on bonus funds are capped at ten times, and mixed-product promotions are banned outright — the Commission had previously described licensees applying up to 60 times.

Underlying all of it is Licence Condition 7.1.1, which requires terms to be fair within the meaning of the Consumer Rights Act 2015, and Condition 17.1.1, which says a withdrawal request must not trigger a demand for information the operator could reasonably have asked for earlier. Enforcement has teeth: in July 2025 a firm was fined £170,000 for failures that included a bonus term letting it “at their own discretion” forfeit winnings, and in October 2026 a group running seven websites agreed a £900,000 payment in lieu of a penalty, including a term allowing only one withdrawal at a time.

An offshore operator is not bound by any of that. Which is why the honest comparison is not “offshore sites pay more” — sometimes they do — but “offshore sites pay more and have agreed to nothing.”

Bonus Terms and the Ten-Times Ceiling

The clearest measurable difference between the two halves of the market sits in the bonus terms, so here it is as a table, by rule rather than by brand.

The wagering cap is the single most useful number in that table. Before the change, the Commission consulted on capping at 1×, 5× or 10× and settled on 10×, on the reasoning that an outright ban risked licensees inventing other terms to stop customers cashing out. That is a sensible piece of regulation-making. It is also a ceiling, not a standard: most licensed sites sit well below it, and a licensed offer at 10× is legal and generous only by comparison with an offshore one at 35×.

The cashout cap deserves its own line. In the UK, operators may not impose any maximum limit on the amount a consumer can withdraw from their deposit balance — a clause of the “you may withdraw up to £50 per day” variety is the Commission’s own worked example of a prohibited term. Outside that regime, a cap of, say, 300 per cent of the credited bonus is an ordinary contract term, and excess winnings above it simply disappear.

Self-Exclusion Beyond the Screen

Online self-exclusion does not cover a person’s whole gambling life, which is a fact the industry is not keen to spread.

Land-based operators holding premises licences in the arcade, betting, bingo and casino sectors must participate in their own multi-operator schemes under Social Responsibility Code 3.5.6. SENSE, the official national scheme for licensed land-based casinos, has a minimum exclusion of six months, extendable to twelve, with removal only requested in person at a casino during the six-month “Thinking” period that follows, then a 24-hour cooling-off. The Commission’s May 2026 FOI response put SENSE’s active self-excluded customers at 12,445 between 1 April 2025 and 1 April 2026, with a further 8,695 enrolled under previous terms subject to auto-removal. Gamstop Betting Shops, formerly MOSES, is telephone-based on 0800 294 2060, runs with over 60 operators across roughly 6,000 shops, and applies a fixed twelve-month term that cannot be ended early.

The land-based figures are a useful reality check. Some 12,445 people are excluded from British casinos, against 614,738 excluded online. Self-exclusion in this country is overwhelmingly a digital act.

And it is not a firewall. For an extra layer, GamStop signposts blocking software: BetBlocker, a Delaware non-profit that states it blocks over 1,368,000 gambling websites and 3,100 apps and is free worldwide, and Gamban, which blocks licensed and unlicensed sites but has been chargeable in England and Scotland since TalkBanStop funding ended on 31 March 2026 — £4.99 a month or £29.99 a year after a seven-day trial, and free for residents of Wales. Bank blocks help too. The Commission’s list, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling; blocks are applied at card level, so each card needs switching on, and most banks apply a 48-hour or 72-hour cooling-off before gambling transactions are allowed again.

Five Signs an Operator Can Be Trusted

The register entry matches, exactly

The Commission keeps a public register, and the test is not whether the site claims a licence but whether the registered domain matches the one on screen. A licence in another jurisdiction is not a British licence, and the Commission has said plainly that offering commercial gambling services to British consumers without one is illegal. If the register entry is missing or the domain differs, that is the answer.

The licence is listed as British, not as a jurisdiction that has stopped issuing them

Curaçao’s reform is the clearest recent case: the National Ordinance on Games of Chance took effect on 24 December 2024, the legacy “orange” sub-licence certificates ended on 15 October 2025, and historic JAZ numbers must not be treated as proof of a current licence. Anjouan licences cost EUR 17,828 for issuance and the same again annually, and the authority itself has said an Anjouan licence has never been a universal authorisation to operate everywhere. A site leaning on a legacy seal is telling you what it does not have.

Withdrawal terms are visible before a deposit, not after a win

Under Condition 17.1.1 an operator cannot demand information on withdrawal that it could reasonably have requested earlier, and over a quarter of complaints reaching the Commission’s contact centre concern identity verification raised at exactly that moment. The check is simple: does the site say, before the first deposit, what documents may be needed and when. The Commission’s own guidance expects that disclosure up front.

The bonus terms fit on one screen and the big numbers are in them

Significant conditions for free bets and bonuses must be clear and easily accessible, and for online advertising usually no more than one click away under LCCP SR 5.1.9. If the wagering multiple, the maximum bet while wagering and any cashout cap are not all findable in a couple of clicks, the offer is being sold rather than described.

There is a real dispute route with a name on it

Licensed operators must let a customer refer an unresolved dispute to a Commission-approved ADR provider free of charge after eight weeks, and the approved list includes IBAS, eCOGRA, CEDR and ProMediate, among others. IBAS reported 3,721 domestic disputes in 2024-25 with an average completion time of 20 days and full operator compliance with decisions in the consumer’s favour. A site with no named ADR provider, or one outside that list, has no route past its own support desk.

Checking a Site in Six Steps

1. Verify the licence on the Commission’s public register. Not the footer badge — the register itself, checking that the domain on screen matches the entry. A licence is specific to the operator and the domains it covers, so a badge proves nothing on its own.
2. Confirm your own self-exclusion status and term. If a GamStop exclusion is in force it holds for its full term and then stays in place until the person contacts GamStop to remove it, so knowing the end date matters. Registration takes minutes and the block can take up to 24 hours.
3. Read the withdrawal section before depositing. Look for what identity documents may be requested, when, and in what form. Condition 17.1.1 exists precisely because too many operators used to save that question for the moment of a win.
4. Do the bonus arithmetic. Write down the wagering multiple, what it attaches to — bonus alone or bonus plus deposit — the maximum bet while wagering and any cashout cap. Multiply the first by the second and decide whether the offer is worth the effort.
5. Set a financial limit at the prompt, before the first deposit. Since 31 October 2025 every operator must offer that prompt and present it as the default; declining requires a deliberate action and a confirmation. A limit set at the front is the cheapest protection available.
6. Check the dispute route and the bank block. Find the ADR provider named in the terms, and switch on a gambling block with the card issuer if it offers one — each card needs doing separately, and a cooling-off period applies before gambling payments clear again.

What Actually Protects a Player Here

Ask what distinguishes a safe British site from a risky one and the honest answer is not a rating, a forum thread or a badge. It is the stack of obligations attached to the licence, and the register that either contains a domain or does not.

The stack is specific. Customer funds must be kept in a separate client account under Licence Condition 4.1.1, and every operator must publish one of three protection ratings — “not protected”, “medium protection” or “high protection” — with an operator rated “not protected” obliged to remind customers every six months that their money is not protected if the business fails. Under Condition 5.1.2, money from British customers can only be accepted by a method whose provider is a payment service provider under the Payment Services Regulations 2017. Under Condition 6.1.2, credit cards are out.

Enforcement adds a second layer, and it is the one the offshore market should fear. Since April 2024 the Commission’s illegal markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Google and Bing URLs and secured 287,961 removals. Across 160 illegal websites with traffic data, engagement fell by an average of 32 per cent after disruption — and by 91 per cent where a registrar block landed, against just 30 per cent for a Google removal. The Commission’s own conclusion is that GEO IP blocking and registrar blocks work better than making a site hard to find. It is right. A site nobody can reach is a site nobody can lose money on.

How People Find an Offshore Site Without Meaning To

Nobody sets out to open an account with an unlicensed operator. The route in is usually a search result, a social post or a tip from someone who genuinely believes they are recommending a bargain.

The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators appearing on unlicensed websites available to British consumers, and noted two things about those sites: they often target customers who have self-excluded through GamStop, and they may have inadequate social responsibility and anti-money-laundering controls. That is the tell. The pitch that a site “doesn’t check the register” is not a service. It is the product.

The scale of the funnel is documented. Over the monitored period from May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain, and the number identified through the Commission’s affiliate-page method rose from 364 in May 2024 to 535 in July 2025, with crypto-casino search terms added to the methodology in December 2024. In the quarter July to September 2026 the Commission referred 1,835 websites to search engines — 7,677,211 URLs — and issued 546 cease and desist notices. That is not a tidy-up operation. It is a running battle.

There is one more thing worth saying about the deposits that travel to those sites, and it concerns the person rather than the operator. Money sent to an unlicensed site is money inside a business with no client-account obligation under British rules, no licensing condition to satisfy on withdrawal, and no route to a Commission-approved dispute scheme. When a payout stalls there, the paperwork runs out.

Trust Isn’t a Badge

There is a whole genre of site that offers to rank the “safest” places to gamble, and almost none of it survives contact with the register.

Six operators found the limits of that genre the hard way. The Competition and Markets Authority investigated online gambling from 21 October 2016 to 29 April 2019 and obtained written undertakings from six firms — Ladbrokes, William Hill, PT Entertainment, BGO, Jumpman Gaming and Progress Play — under which they agreed not to impose maximum withdrawal limits, not to confiscate funds from accounts left inactive, and, in one case, not to remove a player’s money for failure to complete identity verification. The Commission’s position is that those principles apply to all online operators, which must follow them to demonstrate compliance. It is a decent, dull, unglamorous set of rules, and it is exactly what an offshore site does not have.

Frequently Asked Questions

What are the best online gambling sites UK players should look at first?

There is no published ranking worth trusting, and anyone selling one has a commercial stake in the order. The workable method is to start from the Gambling Commission’s public register and treat a matching licence entry as the entry ticket, then compare three things: the withdrawal terms, the bonus conditions and the dispute route. Everything licensed here must meet the same baseline: credit cards banned since April 2020, reverse withdrawals banned since October 2021, wagering capped at ten times since January 2026.

Which are the safest online gambling sites UK wide, and what makes them safe?

Safety here is not a rating, it is a stack of obligations. A licensed operator must keep customer funds in a separate client account, publish an insolvency protection rating, accept British customer payments only through a payment service provider under the Payment Services Regulations 2017, and give access to a free ADR provider after eight weeks. On top sits the daily check of its whole customer base against the GamStop register. A site outside the licence regime has none of these duties.

How many online gambling sites are there in the UK, roughly?

No reliable total exists for licensed sites, because licences attach to operators and domains rather than brands, and domains come and go without announcement. The unlicensed side is measured more closely: the Commission’s dashboard recorded 586 illegal gambling websites accessible to British consumers in September 2026, and 311 of these had disruption action taken against them in one quarter, with 77 per cent of those seeing reduced traffic.

How long does a GamStop exclusion last, and what happens at the end?

Terms run six months, one year, five years, or five years with auto-renewal. The exclusion holds for the full term, cannot be cancelled during it, and then stays in place until the person contacts GamStop to remove it. Auto-renewal can only be switched off in the final six months of a five-year period, and if nobody acts, GamStop holds the data through a further automatic seven-year self-exclusion period.

Can an offshore site be used to get around a self-exclusion?

It can be signed up to, which is not the same thing. Offshore sites holding no Gambling Commission licence are not connected to GamStop and are not covered by it, so a person who is excluded can sometimes open an account there. Doing so is not a way round the exclusion; it is a way out of the protections that came with the licence — the payout rules, the fair-terms condition and the dispute route all stop applying.

What does a new online gambling site UK launch have to prove before it takes a deposit?

More than most people assume. It must hold a Commission licence for the gambling it offers, participate in GamStop under Social Responsibility Code 3.5.5, check its entire customer base against the register at least every 24 hours, prompt for a financial limit before the first deposit, publish its customer-funds protection rating, and name a Commission-approved ADR provider in its terms. All of that is checked before trading, not after.

The Register Is the Only Badge That Counts

Strip the branding away and British online gambling divides along one line: a site either holds a Gambling Commission licence, joins GamStop and answers to the conditions that follow, or it does none of that and sells the absence as freedom. The register is public, the licence can be checked in seconds, and a domain either matches an entry or it does not.

Which is why the figure to leave on is the one from the scheme itself. In July 2026 GamStop Online reported 614,738 consumers currently on the register — more than half a million people who decided, deliberately, that the licensed market was not where they wanted to be. Every one of those exclusions holds for its full term, and stays in place afterwards until they contact GamStop to remove it. No offshore site has ever been a way round that. The National Gambling Helpline remains free on 0808 8020 133, day and night, for anyone who needs to talk to a person rather than check a table.

Content created by the «Casino Not on GamStop» team