Gambling Sites UK Regulation and Dispute Resolution

A UK gambling site holds a Gambling Commission licence, must be part of GamStop, and must send an unresolved dispute to a free adjudicator. The Commission regulates but does not settle individual cases, so a player's real remedy is the operator's complaint procedure and then an approved ADR provider. Offshore sites carry none of this.

Complaints are the part of this market nobody markets. Every other page about gambling sites UK talks about welcome offers; the interesting question is what happens when a withdrawal stalls and the person on the other end of the chat stops replying. That question has an answer, and the answer is a chain: the operator first, then an adjudicator approved by the regulator, and a regulator in the background that counts the failures. Each link in that chain exists because a licence condition says it must.

Where a complaint can go and who decides it is a decent way to judge any operator, licensed or not, because it is the one feature of a casino that cannot be dressed up in a landing page. A British licence buys the chain. A licence from somewhere else usually buys a clause promising to look into it. The difference shows up on the worst afternoon of a player's year, which is exactly when a promise is worth what it costs.

This piece sets out how the British framework works, what the regulator's own numbers say about withdrawals, how identity checks operate the first time and later, how to tell a trustworthy operator from a well-dressed one, and what a player gives up by signing up somewhere that holds no Commission licence. Two names need saying early, because the second one is what most of this traffic is really about. GamStop — often typed "gamestop" — is the national online self-exclusion scheme, and a site outside it is not a loophole; it is simply outside the scheme that every British-licensed operator must join.

None of the British protections described here follow a player offshore. Offshore sites hold no Great Britain licence, so the Commission has no remit over them, no duty to investigate them and no power to order a payout. Help is free and does not depend on where anyone gambles: the National Gambling Helpline, run by GamCare, is on 0808 8020 133, 24 hours a day, every day of the year. GamCare also offers live chat and WhatsApp. The same number is repeated near the end of this piece.

The Regulation of UK Gambling Sites

British-licensed gambling sites are the standard of comparison for everything below, so it is worth being precise about what that standard contains. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence — including where the operator holds a licence somewhere else. The provision is not theoretical: on 3 April 2020 the Commission suspended the licences of two online operators, under section 118(2) of the Act on the single ground that they had failed to integrate GamStop by the 31 March 2020 deadline.

That deadline was the moment self-exclusion stopped being optional. Since 31 March 2020, participation in GamStop has been a condition of a Commission licence, sitting in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which states that licensees "must participate in the national multi-operator self-exclusion scheme". In April 2020 operators were further required to check their entire customer base against the register at least every 24 hours, which also stops a registered person receiving direct marketing.

The register itself is substantial. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of that year. As of July 2026 it reported 614,738 consumers currently on the register — and more than one in two of them had chosen the maximum five-year term, while only one in four across all age groups had self-excluded for six months. Those numbers explain why an offshore site advertising itself to excluded players is not offering a service so much as a workaround, and the Commission's own warning notice of 20 January 2025 said as much: unlicensed sites appearing to GB consumers often target people who have self-excluded via GamStop.

One thing about self-exclusion deserves stating flatly, because it is the single most misunderstood rule in this market. A GamStop exclusion holds for its full term, and when the term ends it does not lapse — it stays in place until the person contacts GamStop to have it removed. Registrations cannot be cancelled early, and the scheme's own terms carry an automatic further seven-year retention period if the chosen term is not deactivated: during that period operators are told the person was previously excluded. An offshore site is a way to gamble while excluded. It is not a way round the exclusion, and it removes the one thing the exclusion was protecting.

What the Regulator's Own Numbers Say About Payouts

For a page about complaints and adjudication, the right benchmark sits in Commission data covering June to September 2024, which recorded 44.2 million withdrawals by customers of large online operators. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours. Read as a complaint rate, that is a very good record. Read as a volume, it means the sliver that does not clear is a sizeable number of people waiting.

What they are waiting for is usually identity verification. The Commission's 2026 blog on the subject reported that over a quarter of complaints reaching its Contact Centre concern identity verification, a concern customers raise when they are asked for documents only on attempting to withdraw. Its Annual Report and Accounts 2024–25 puts it more bluntly: despite work with operators, withdrawal issues continue to cause most of the complaints the Commission receives. Complaints coded "Withdrawals and/or financial transactions" to its Contact Centre fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — an improvement, and still the top subject.

Trust in the other direction is softer. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed that it is quick and easy to withdraw and collect winnings, 33 per cent were neutral and 18 per cent disagreed.

The rules here are more specific than most players assume. Reverse withdrawals — the option to cancel a pending withdrawal and put the money back into play — were permanently banned by requirement RTS 14B, in force since 31 October 2021, and the Commission's reason was evidence that the function presents a risk to engaged and vulnerable gamblers. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier, without preventing checks that another legal obligation, such as anti-money-laundering rules, requires at that moment. Licence condition 7.1.1 requires the terms themselves to be fair within the meaning of the Consumer Rights Act 2015, and the Commission's guidance names a prohibited term in plain English: an operator may not impose a maximum limit on what a consumer can withdraw from their deposit balance, and "you may withdraw up to £50 per day and up to £500 per week" is the example it gives.

None of it amounts to a deadline. The LCCP sets no fixed maximum number of days within which an operator must complete a withdrawal; the regime relies on fair and open terms, on the identity-verification condition and on the prohibition of unfair terms rather than a stated payout clock. That is the honest answer to a question this market asks constantly, and it is why the complaint chain matters more than any advertised payout speed.

Where a Complaint Actually Goes, and Who Decides

Where a complaint can go is a rule, not a courtesy. LCCP social responsibility code provision 6.1.1 requires licensees to have arrangements for a customer to refer a dispute to an alternative dispute resolution entity free of charge if it is not resolved to the customer's satisfaction within eight weeks, and the customer has to have gone through the operator's own procedure first — an operator may issue a deadlock letter confirming that the internal route is exhausted. When it reaches ADR, licence holders should respond to the adjudicator's requests for information in full and within ten working days.

Who decides is worth knowing by name, because the names recur. The Commission's list of approved ADR providers is ADR Group, Pegasus ADR Service, an approved provider, the Centre for Effective Dispute Resolution (CEDR), eCOGRA, IBAS, ProMediate and Tattersalls Committee, and an operator may use only a provider the Commission has approved. IBAS, the Independent Betting Adjudication Service, covers the remote, adult gaming centre, betting, bingo, casino and lotteries sectors and is free to consumers. eCOGRA takes complaints in English, free to consumers, and may refuse a dispute where the website is not on its approved list, where at least two weeks have not passed since the problem began, or where the dispute arose more than a year ago. Providers generally may require submission within not less than 12 months of the operator's notice that it could not resolve the complaint.

Their published figures are the least flattering material in this sector and the most useful. eCOGRA's Great Britain report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which 150 valid disputes were about deposits and withdrawals, an average domestic resolution time of 31 days, and just 17.8 per cent of completed disputes ruled in favour of the consumer — 82.2 per cent for the operator. Its biennial report covering the two years to 30 September 2025 puts the average domestic resolution time at 27 days with 12.4 per cent of completed disputes decided for the consumer. IBAS's annual statistical report for 2024–25 records 3,721 domestic disputes, 217 of them categorised as banking or financial disputes, an average domestic completion time of 20 days, 65 consumer complaints upheld by written decision against 693 not upheld and 737 resolved by a consumer-satisfactory pre-ruling outcome — and 100 per cent operator compliance with decisions in the consumer's favour in both 2023–24 and 2024–25.

Two lessons follow. First, the odds in an adjudication are not with the complainant, and a player who arrives with screenshots of the bonus terms rather than a story about unfairness is in a stronger position. Second, a rule that is only as good as the operator's willingness to obey it is a rule that has already been broken once. IBAS notes that the government's 2023 review of gambling legislation recommended creating a Gambling Ombudsman with an expanded remit. The Commission, meanwhile, is a regulator and not an ombudsman: it cannot resolve an individual complaint or help a consumer get money back, though it records complaints and typically refers disputes to an independent third party. That distinction is the whole architecture of the system in one sentence, and it is routinely ignored by operators who suggest a player should "take it to the Commission".

Comparing UK and Offshore Gambling Sites

The comparison below is by rule and mechanism, not by brand, because brands change hands and the rules do not. Every row describes a right or a duty that attaches to a licence, and therefore travels only as far as the licence does.

The table is dull on purpose. The interesting rows are the last three. A maximum withdrawal limit is the term most likely to cost a player real money, and on a British licence it is simply not available: the Commission's guidance gives "you may withdraw up to £50 per day and up to £500 per week" as an example of a prohibited term, and the CMA's published do's and don'ts say firms must not place maximum limits on withdrawals or confiscate funds after inactivity or a failure to supply identity documents. Offshore, that clause is normal. BlueChip Casino reserves the right to limit the amount withdrawable from winnings generated with bonus funds to 300 per cent of the credited bonus amount, with the excess voided; Ignition Casino states that a no-deposit bonus keeps its own wagering requirement and cash-out ceiling even if a deposit is made while the bonus is active. Both are lawful in their own terms, and neither could be written into a British licence.

Bonuses make the same point. From 19 January 2026 the Commission caps wagering at ten times — it chose the cap over an outright ban because it judged licensees would otherwise introduce terms to stop customers cashing out bonuses, and it said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore, the multiples run higher: trade coverage of offshore welcome offers describes 25x to 40x as typical [unconfirmed], and a 2026 casino-guide comparison table puts offshore welcome bonus multipliers at 35x to 50x and no-deposit bonuses at 40x to 60x with a €50 to €100 cashout cap [unconfirmed]. The same offshore terms also price in delay: Ignition Casino's wagering chart gives slots and specialty games 100 per cent contribution, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, Hot Drop Jackpots and live dealer games 0 per cent, with a time limit attached. A player can satisfy a 40x requirement faster on a British licence than a 25x requirement on that chart, which is the sort of arithmetic no welcome banner ever performs.

Identity Verification and Withdrawals

Identity checks are what the whole topic turns on, because they are the mechanism that most often decides whether a payout arrives and whether a complaint has legs. In the British market, Licence Condition 17 has required since 7 May 2019 that a licensee obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the information must include, though is not limited to, name, address and date of birth. Before permitting a deposit, licensees should tell customers what types of identity documents or information they may need to provide, in what circumstances and in what form. Under the money-laundering regulations, a remote casino faces the €2,000 threshold: identification and verification are required when a customer deposits to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more — and the threshold applies both to a single transaction and to transactions that appear to be linked, such as those forming part of a customer's activity in a single logged-on period. The Commission calls the middle way a "hybrid approach": a remote casino may identify customers and verify their age at registration and defer full identity verification until the threshold is triggered.

The first time, then, is usually frictionless and sometimes invisible. Companies can often verify identity by matching the account against databases such as credit reference agencies and the electoral roll, in which case no documents are needed, and the Commission says it cannot give a timescale for checks because the process varies: electronic verification may be instant, documents take longer. Later, the experience changes shape. Checks are ongoing and may need updating when circumstances or personal details change, and for some higher-risk accounts the operator will also need to establish source of wealth. That is where passports, driving licences and household bills come in, and where the Commission has said it expects identity and age checks to be brought forward to before a customer deposits or stakes rather than sitting at the withdrawal.

The warning signs are specific, and they are worth memorising.

• Documents demanded only at the point of withdrawal. Licence condition 17.1.1 forbids requiring additional information on withdrawal if the licensee could reasonably have requested it earlier, and a business that delays a payout for insufficient ID may be in breach of Licence Condition 17 and subject to regulatory action.
• Funds confiscated for a failed check. Operators cannot confiscate a customer's funds on the ground that ID has not been provided; that is the CMA's position as well as the Commission's guidance.
• A "fuzzy match" onboarding. The Commission has expressed concern about operators using fuzzy matching through third-party verification providers and onboarding customers on partial or equivocal verification.
• A middle name or nickname on the account. The Commission notes that onboarding a customer using a middle name instead of a forename can create mismatches with records held elsewhere, such as GamStop, undermining the effectiveness of self-exclusion — a small clerical detail with a large consequence.
• Delays justified as safer gambling. Commission guidance states it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, and not fair, transparent or necessary to delay or prevent withdrawals purely for customer-interaction purposes.

The gap between the rules and the practice is documented, not imagined. Manual review of every fifth or tenth withdrawal for some customers was among the failures behind a £900,000 regulatory settlement agreed in October 2026 by an operator, which runs seven websites, alongside a term stating that customers could request only one withdrawal at a time and could not request another until the original was authorised — a term the Commission found unfair under the Consumer Rights Act 2015. Nobody had to cheat to lose the argument. The operator had simply written the delay into the paperwork.

Five Signs a Gambling Site Can Be Trusted

Trust in this market is not a feeling; it is a set of checkable facts. Five signs do most of the work.

The Licence and the Domain Match on the Public Register

A licence certificate that names a company is not the same as a licence that covers the website in front of you. The Commission advises consumers to check before gambling that the business holds a British Commission licence and to click through to the public register to see whether the site's activities and domain names match. A licence held by a parent company for a different domain, or a certificate showing a different address, is the commonest version of this problem.

GamStop Registration Is Genuinely Honoured

A trustworthy operator does not merely say it is connected to the scheme. Since April 2020 the licence requires it to check the whole customer base against the register at least every 24 hours, and the LCCP requires a licensee to close the account of anyone who has entered a self-exclusion agreement and return the funds held in it, stating explicitly that it is not sufficient merely to prevent the individual from withdrawing while still accepting wagers. An operator that keeps taking bets from an excluded person has failed the clearest test the licence sets.

The Terms Name a Real Dispute Route

Check the terms for a named ADR provider from the Commission's approved list — ADR Group, Pegasus ADR Service, an approved provider, CEDR, eCOGRA, IBAS, ProMediate or Tattersalls Committee — and for a stated eight-week internal process. An operator whose terms promise only that it will "consider the matter carefully" has not provided the thing the licence requires under social responsibility code provision 6.1.1, and a player has no free adjudicator to escalate to.

Customer Funds Are Rated and the Rating Is Disclosed

Gambling businesses must select one of three customer-funds protection ratings — "not protected", "medium protection" or "high protection" — make clear in their terms which applies, and, if rated "not protected", remind the customer every six months that funds are not protected in the event of insolvency and state the value of funds held. A separate client bank account is not a guarantee of a refund if the operator fails; it is only the minimum standard. A site that cannot say which rating it carries has not read its own licence conditions.

Withdrawal Terms Contain No Ceiling and No Confiscation Clause

Look for a maximum withdrawal limit, a single-withdrawal-at-a-time rule, a fee that is not cost-reflective or a clause reserving sole discretion to void winnings. The Commission's guidance warns specifically against terms giving an operator sole discretion — "may" or "reserve the right" — to void or withhold winnings, because such terms are unfair within the meaning of the Consumer Rights Act 2015. Operators may lawfully charge a cost-reflective processing fee and may reasonably limit the size or number of separate withdrawals, but only under a fair and transparent term made clear before the first deposit.

How to Judge a Gambling Site Before Registering

Five or six checks, in this order, take about half an hour and answer almost everything.

1. Open the public register and match the domain. Search the Commission's register for the trading name, then confirm the licence's activities and domain names include the site being used. Reason: a licence that does not name the domain is not a licence for that site, and the operator knows it.
2. Read the withdrawal page before the bonus page. Find the stated processing time, the list of accepted withdrawal methods and any fee. Reason: payout terms are the least advertised and most consequential terms in the document, and they are the ones a complaint will be about.
3. Search the terms for three phrases: "maximum withdrawal", "one withdrawal at a time" and "sole discretion". Reason: each is a known type of unfair term, and each has been the subject of regulatory action rather than theory.
4. Confirm the ADR provider is on the Commission's approved list and note the eight-week internal clock. Reason: the complaint route is only real if the named provider is one the Commission permits, and the eight weeks start from first receipt of the complaint.
5. Check whether the account asks for a financial limit before the first deposit. From 31 October 2025 all gambling businesses must prompt customers to set a financial limit before their first deposit, must present setting a limit as the default option, and must make it easy to review and alter it, with a review reminder every six months. Reason: an operator that has not built this in is either out of date or not licensed here.
6. Look for the customer-funds disclosure and its insolvency rating. Reason: the condition requires the disclosure in writing, on the first deposit and after any change to the terms, with the customer acknowledging receipt before using funds to gamble — a requirement a player can simply test.

If any of the six comes back empty, the sensible reading is not that the operator is a fraud. It is that the operator cannot be judged, and an unjudgeable counterparty in a market where the regulator will not settle individual disputes is a bad trade at any bonus rate.

What Changes on an Offshore Site

Offshore sites are not licensed in Great Britain, and the consequences are structural rather than moral. The Commission's remit allows it to regulate gambling websites which trade or advertise to customers in Great Britain, and those websites must hold a Commission licence. A site without one is not regulated by anybody in this country, whatever it says about being regulated elsewhere.

The overseas licences themselves vary enormously, and it pays to know what is being shown. Curaçao has replaced its old master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority, the legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and the authority says a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. Curaçao's application fee for a B2C licence is a one-time non-refundable €4,592, and the total annual B2C fee is €47,450, with supplier licensing fully mandatory from 24 December 2026.

Anjouan is cheaper and more contentious. Its B2C licence is €17,828 to issue and the same to renew each year, with €500 per additional domain or URL, and the authority states plainly that an Anjouan licence is not and has never been presented as a universal authorisation to operate in every country in the world. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 each per year, and that Comorian financial intelligence officials described Anjouan Corporate Services as operating illegally. A former attorney-general of the Comoros, in the same report, described the entity selling those licences as "an illegal entity". The regulator's own verification framework, to its credit, says certificates that cannot be verified through its public register should not be relied on.

Kahnawà:ke has regulated interactive gaming since 1999 and runs a logo certificate programme that lets a player click the Commission's logo to generate a Certificate of Good Standing. It also attaches unusual consequences to self-exclusion: a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a charity selected by the Commission, and Kahnawàke states that its own voluntary self-exclusion is permanent and irrevocable. Malta's Gaming Authority charges a one-time application fee of €5,000, a non-refundable annual licence fee of €25,000, and gaming tax of 5 per cent of revenue, and publishes a list of unauthorised URLs on which any reference to a Maltese licence is declared false and misleading. Costa Rica is in a different category again: it has no comprehensive gambling licensing regime, the "data processing license" sometimes cited is not a licence in the strict legal sense, and its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have created one.

Now the part that matters for anyone excluded in Britain. The Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, and in Quarter 2 of 2026 to 2027, 311 illegal gambling websites had disruption actions taken against them — 38 per cent more than the previous quarter — with 77 per cent of disrupted websites seeing a reduction in estimated traffic. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease-and-desist and disruption notices and secured 287,961 URL removals. Those are the sites a British player reaches by searching for gambling sites not on GamStop. The exposure is not abstract: market-intelligence firm H2 Gambling Capital estimates the amount staked with illegal gambling operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019.

One more point, and it is a legal rather than a commercial one. If someone gambles on a site with no British licence and the operator refuses to pay, there is no ADR route in this country, no Commission complaint that can compel anything, and the operator's chosen overseas adjudicator decides — if it accepts the case at all. Anjouan, for instance, requires licensees to designate an authority-approved ADR provider and lists EGIS ADR, Axion ADR, iGaming ADR and an approved provider as approved, with operators expected to resolve complaints within 30 days before a player may escalate. That is not nothing. It is also not IBAS, not free of a foreign regulator's tolerance for the operator in question, and not enforceable by anyone in Great Britain. A player who wanted a decision from an independent party has swapped that for a decision from an entity the operator itself selected.

Paying In, Paying Out and What Goes Wrong

Payment behaviour is where the British framework is most concrete and where offshore sites are hardest to hold to account.

Start with the ban nobody expects. The Gambling Commission banned credit cards for gambling with effect from 14 April 2020, adding licence condition 6.1.2 to the LCCP, and it covers all remote gambling licensed by the Commission — online betting, online casino and bingo, and lotteries accepting online or telephone payments. Operators must also ensure that where they accept payment from an e-wallet, the money was not loaded from a credit card, and it is an offence under section 245 to supply or make available a gaming machine allowing payment by credit card. The ban does not extend to non-remote lottery operating licences, so credit cards still buy scratchcards in a shop. On an offshore site with no Commission licence, none of this applies — which is why questions about gambling sites that accept credit cards lead where they lead.

Ordinary withdrawals on a British licence run through the Faster Payments scheme, which settles most transactions in under two seconds and carries a scheme ceiling of £1 million per transaction, a figure raised from £250,000 on 10 February 2022. The ceiling is not an entitlement: banks set their own limits, and Faster Payments limits apply per transaction rather than per day, so a larger sum can be split. Card payouts use Visa Direct's Fast Funds service, which processes in real time with funds available within 30 minutes of approval. E-wallets are not free at the edge — Skrill and Neteller both charge 2.80 per cent of the amount withdrawn, with a minimum of around €3.50 or $3.50, for transfers to a bank account — and crypto has its own arithmetic. Bitcoin targets a ten-minute average block interval, but the probability of a block arriving within any ten-minute window is about 63 per cent; a TRC-20 USDT transfer to an existing wallet consumes about 65,000 Energy and burns roughly 13 TRX without staked Energy, while a transfer to a new wallet costs about double that. The headline withdrawal time quoted by an operator is the shortest branch of a distribution, not the average.

The protections behind all of it are British-specific. Licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider within the Payment Services Regulations 2017. Licence condition 4.1.1 requires customer funds to be kept in a separate client bank account as defined in the LCCP, and licence conditions 4.1.1 and 4.2.1 require the three-tier protection rating to be disclosed in writing on the first deposit. Even so, the Commission is candid that a separate account does not mean customers get their money back if an operator becomes insolvent, and that businesses may lawfully hold customer money in overseas bank accounts. Money staked within an open bet is not treated as customer funds at all and is not covered by any protection arrangement.

Two further things go wrong often enough to plan around. First, funds linked to money laundering: where an operator suspects or knows of it, it must submit a suspicious activity report and obtain a Defence Against Money Laundering from the National Crime Agency before moving or returning funds, which may necessitate a delay — but the Commission has said that does not give operators the right to confiscate deposits. Second, inactivity: account inactivity cannot be used to confiscate or deduct any part of a deposit balance, and where an account has been inactive for at least 12 months operators must try to repay the balance to the last payment method used. A reasonable maintenance charge is permitted only after 12 months of a player being unable to verify their identity, and only with at least 30 days' notice.

New Sites, Free Spins and the Offers That Read Badly

The offers this market searches for most often are the ones most governed by rules a player never reads, so it is worth taking them in order.

A new gambling site carries no presumption of quality in either direction, and a new brand on an old platform is the commonest shape of the thing. The checks do not change: the register, the ADR provider, the withdrawal terms. What does change is institutional memory — a site with two years of history has two years of complaint decisions a player can look up, and a site with two months has none.

Free spins and no-deposit bonuses are governed by the same 2026 rules as any other incentive. Since 19 January 2026, wagering requirements on bonus funds are capped at ten times, and licensees must not include more than one type of gambling product within an incentive. The Commission's guidance on the second rule is unusually concrete: "Bet £5 and get £10 free bet" is compliant because it does not mix product types between the initial activity and the prize, whereas "Bet £5 to get 20 free spins" is not, and a prize that is itself mixed — "Bet £5 and get a £5 free bet and 20 free spins" — is not either. An offer where the customer freely chooses which product category to use bonus money on is compliant. Significant conditions must be provided transparently and prominently, and where displayed online, in full no further than one click away.

The phrase "no wagering" is a description of a bonus, not of a casino, and it is not regulated as a term of art. What is regulated is what happens next. Licensees must not alter or increase the receipt, value or amount of an incentive if the qualifying activity is reached sooner than the full period over which the benefit is offered, and incentives designated "high value" or "VIP" must be offered consistently with the licensing objectives. Two older protections still stand and are worth knowing: operators must not impose a maximum limit on what a consumer may withdraw from their deposit balance, and marketing of promotional offers must comply with social responsibility code 5.1.9 — simply burying the conditions in the website terms is not sufficient.

A "safe" gambling site, finally, is not one with a padlock icon or a trust badge. It is one whose licence names its domain, whose terms name an adjudicator, whose withdrawal page contains no ceiling and whose customer-funds rating is disclosed. Everything else — the welcome offer, the game count, the brand recognition — is decoration on top of those four facts, and one of them is enforceable while the rest are not.

Common Questions About UK Gambling Sites

How many online gambling sites are there in the UK?

There is no single published total. The Commission regulates websites that trade or advertise to customers in Great Britain, and its register is the only authoritative count of domains it licenses. Against that, its illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026 alone, and H2 Gambling Capital estimated £16.6 billion staked with illegal operators in the UK in 2025. The licensed list is long; the unlicensed one is longer than most people assume.

Are gambling sites outside the UK legal to use?

The offence attaches to the operator, not to the adult customer. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere. A British player commits no equivalent offence by using such a site, but the operator has no permission, and none of the British protections apply.

Can a self-excluded person gamble on an offshore site, and does that end the exclusion?

An offshore site cannot end a self-exclusion. A GamStop exclusion holds for its full term and then stays in place until the person contacts GamStop to have it removed, and registrations cannot be cancelled early, with an automatic further seven-year retention period if the term is not deactivated. What an offshore site removes is the practical effect of the block — a choice the Commission warned about in its January 2025 notice on unlicensed sites targeting excluded customers.

What is the minimum withdrawal at a UK-licensed casino?

There is no single figure, and there is no lawful maximum either. Licence condition 7.1.1 and the Commission's fair-terms guidance prohibit a maximum limit on what a consumer may withdraw from their deposit balance, giving "you may withdraw up to £50 per day and up to £500 per week" as a prohibited example. A minimum withdrawal threshold and a cost-reflective processing fee are permitted, provided both are stated clearly before the first deposit.

What happens if a UK casino refuses to pay out?

Go through the operator's complaints procedure and expect a resolution or a deadlock letter within eight weeks of first receipt. If it is unresolved, the dispute must be referable free of charge to a Commission-approved ADR provider under social responsibility code provision 6.1.1. Expect an uphill argument: eCOGRA's GB report for 1 October 2024 to 30 September 2025 found 17.8 per cent of completed disputes decided for the consumer. The Commission itself cannot order a payment.

Which gambling sites can a British player complain about to an adjudicator?

Only those licensed in Great Britain, because the requirement to offer free ADR sits in the licence. The approved providers are ADR Group, Pegasus ADR Service, an approved provider, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee, and IBAS covers remote betting, bingo, casino, lotteries, adult gaming centres and betting shops free of charge. An offshore operator that names its own overseas adjudicator has not offered an equivalent route, and no British body can compel it.

The Licence Is the Product

Strip away the banners and a British licence is the product: it buys GamStop checks every 24 hours, a ten-times wagering cap, a ban on reverse withdrawals, no ceiling on what a player can take out, and a free adjudicator who decides the argument when the operator will not. Take the licence away and every one of those features goes with it, which is why the sites promising a way round self-exclusion are selling an unpriced trade rather than an offer.

The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day and every day of the year. For anyone in Wales the number given is 0808 2819 265, and the same 0808 8020 133 line covers England and Scotland through live chat and WhatsApp as well as by voice. It is not a crisis line — staff cannot transfer a caller at immediate risk of harm and instead follow their own safeguarding procedures — so callers in urgent danger should reach emergency services first. The registered charity GamFam, set up by people affected by the gambling of family and friends, runs its GRA5P five-stage peer-support programme for affected families and for people in recovery, with meetings currently held remotely. Citizens Advice offers free, confidential help with debt linked to gambling, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, open Monday to Friday from 10am to 3pm.

And the number that gives the whole page its point: 614,738 people were on the GamStop register as of July 2026, more than one in two of them for the full five years. That is not a market segment waiting to be served by a site outside the scheme. It is a decision that most of them made deliberately, and the one thing an offshore operator cannot do is leave it standing.