A UK casino not on GamStop is an offshore operator holding a licence from Curaçao, Anjouan, Kahnawake or Malta rather than from the Gambling Commission, so it sits outside the national self-exclusion scheme and outside British consumer protections. A complaint against one can only go to its own disputes body, not to the regulator.
GamStop is the closest thing British online gambling has to a single door. One registration, blocked everywhere in Great Britain, free, and enforced by a licence condition that since 31 March 2020 has applied to every operator the Gambling Commission licenses. The scheme has been live since 27 April 2018; it is often typed "gamestop", which is a slip and not the name. It recorded 117,756 new registrations during 2025 and held 561,983 active exclusions at the end of that year. Those are not fringe numbers. They are a large minority of the online market's customer base stepping behind a wall.
Which is precisely why a second market exists beside it. Sites licensed elsewhere, with no obligation to join the scheme, accept British players and British deposits. From the player's chair the appeal is obvious and usually unspoken. From where I sit, the interesting question is not whether they take the bet — of course they do — but what happens eighteen months later when something goes wrong and no British regulator has any power over the firm that took the money. That is the thread this page pulls.
The Commission's own figures show the scale of the adjacent problem. Across the whole population, 0.6% of respondents reported engaging with illegal gambling websites in the previous four weeks, and among people who had gambled online in that period the figure was 2.5%. Not huge. Not trivial either, when H2 Gambling Capital puts stakes with illegal operators at £16.6 billion in 2025, up from around £5 billion in 2019. Every one of those players eventually has a question about a withdrawal, and every one of them has to find someone to ask.
Offshore sites are not licensed in Great Britain. UK protections do not apply to them — not the credit card ban, not the fairness rules on bonus terms, not the statutory withdrawal protections, not the self-exclusion scheme. If gambling stops being fun, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, and it is the same number whether the site that took the money was licensed here or not.
Table of Contents9
- The Benchmark for Withdrawal Success
- How a UK Casino Not on GamStop Differs From a Licensed One
- Where a Complaint Can Go, and Who Decides It
- Five Signs an Offshore Operator Is Run Properly
- How to Judge an Offshore Casino in Six Steps
- The Check That Appears When the Money Is Owed
- What Self-Exclusion Actually Holds, and What It Does Not
- Frequently Asked Questions
- The Body That Decides Is the Licence
The Benchmark for Withdrawal Success
Take one number, because it does more work than a dozen adjectives.
Between June and September 2024, customers of large UK-licensed online operators made 44.2 million withdrawals. Of those, 96.3% cleared automatically, 3.5% cleared within 24 hours, and 0.1% took up to 48 hours. The Commission cited those figures in a speech on 6 November 2025. Set that against what the same regulator says about the other end of the same process: its Contact Centre, which receives over 6,000 calls a year, has for years named problems withdrawing money as the single most common consumer topic, running at around 2,000 complaints a year by July 2024.
Both things are true. Almost every withdrawal is invisible, and the visible ones generate more complaints than anything else in British gambling. The gap between 96.3% and the complaint queue is where offshore operators live and trade, because in a licensed market the queue has somewhere to go and in an unlicensed one it does not.
How a UK Casino Not on GamStop Differs From a Licensed One
Here is the comparison that matters, and it is not a comparison of sites. It is a comparison of what happens after something goes wrong, method by method, stripped of the reassuring language that every site in both columns uses.
| Criterion | Licensed in Great Britain | Licensed offshore, accepting UK players |
|---|---|---|
| Self-exclusion | Registration blocks all licensed operators within 24 hours | Outside the scheme; nothing to register with |
| Bonus wagering on a customer's own deposits | Wagering requirements, where used, capped at 10 times | No cap; offshore welcome offers are reported at 25× to 50× |
| Withdrawal complaint goes to | A UK-approved dispute body, free of charge, after the operator's own procedure | Whatever body the offshore licence names, under that body's own rules |
| Regulator behind the dispute body | Gambling Commission, with licence conditions and financial penalties | Curaçao Gaming Authority, Anjouan Gaming, Kahnawake Gaming Commission or the Malta Gaming Authority |
| Marketing to a person who has self-excluded | Must not be sent; the entire customer base is checked at least every 24 hours | No duty of that kind |
| Credit card funding | Banned since 14 April 2020 | Only if the offshore operator chooses to ban it |
Read the second row again, because it is the one that turns up in complaints most often. Since 19 January 2026, Social Responsibility Code 5.1.1 of the Licence Conditions and Codes of Practice has forbidden licensed operators from applying wagering requirements of more than ten times bonus funds. The Commission chose a cap over an outright ban, and said plainly that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore, the number stays where it was.
Where a Complaint Can Go, and Who Decides It
This is the single thing the topic turns on, and it is almost never explained before a deposit is made.
The Commission is a regulator, not an ombudsman. It cannot resolve an individual complaint or get anyone's money back. What it can do — what the licence conditions force it to do — is require licensed operators to have a disputes route that ends somewhere independent. Under Social Responsibility Code 6.1.1, if an operator cannot settle a complaint to the customer's satisfaction within eight weeks, the customer may refer the dispute to an approved Alternative Dispute Resolution provider, free of charge, having gone through the operator's own procedure first. The approved list runs from ADR Group to the Tattersalls Committee, with IBAS and eCOGRA historically handling the bulk of gambling disputes. Approval is not decoration: it is the difference between a decision the operator must answer for and a correspondence that goes nowhere.
The first time through is quick. You complain, the operator answers, and if the operator's answer is unsatisfactory an approved body takes it up. Later it is harder, because timing bites. The operator should allow complaints for at least six months from the incident, complete its whole internal process within eight weeks of first receiving it, and ADR entities may refuse a dispute where the site is not on their approved list, where two weeks have not passed since the problem began, or where the dispute arose more than a year earlier.
The offshore version of this system exists, and it is thinner than it sounds. Kahnawà:ke requires its licensees' player relationships to be contractual and free of unfair terms, lets a player set limits including zero, and employs a full-time Dispute Resolution Officer — the most robust of the offshore arrangements. Anjouan requires licensees to name an approved ADR provider in their terms and to try to resolve a complaint within 30 days before the player escalates. Curaçao, under the National Ordinance on Games of Chance in force since 24 December 2024, has rebuilt its licensing regime around direct supervision, but the complaint route still depends on the operator naming and honouring a disputes body, and legacy /JAZ licence numbers should not be taken as proof of anything current.
The warning signs are consistent. A terms page with no named dispute provider, no address and no decision timescale. A complaints clause reserving sole discretion — the Commission treats "we reserve the right" language as unfair under the Consumer Rights Act 2015, and offshore terms still carry it. A support form with no email. An ADR named in the terms that has never heard of the operator. And the oldest one: an identity check that appears for the first time the moment a withdrawal is requested, which is the subject of the next section but one.
Five Signs an Offshore Operator Is Run Properly
Each of these is checkable before a card number goes anywhere, in a few minutes, with no account.
The Licence Is Real, Current and Matches the Domain
Check the number, not the seal. Curaçao's Certificate of Operation seals must, when clicked, redirect to cert.cga.cw; if the seal's design, colour or format differs, the site is not authorised. If the certificate behind the seal names a different domain from the one being browsed, the site is displaying another operator's certificate. Anjouan certificates carry a unique licence number and a QR code pointing at a public register, and Anjouan's own guidance is that a certificate which cannot be verified there should not be relied on. The Kahnawà:ke Gaming Commission's Logo Certificate Program, running since 15 January 2010, generates a Certificate of Good Standing when the logo is clicked. A registered seal with an unverifiable number is worse than no seal at all, because the seal is the sales pitch.
The Terms Say in Plain Words How a Dispute Ends
Search the terms for the word "dispute", then for "ADR" or "arbitration". What has to be there is the name of the body, a way to contact it, a decision timescale and a statement that the service is free to the player. Anjouan licensees must designate an Authority-approved provider and list it in player-facing terms; the current approved providers are EGIS ADR, Axion ADR, iGaming ADR and a licensee. If the terms instead end the argument with the operator's own final say, that is the answer and the site offers no independent route for disputes.
Withdrawal Terms Are Stated Before a Deposit, Not After
Look for a maximum cashout figure, a per-transaction withdrawal cap and any processing fee, in the bonus terms rather than in an FAQ. One offshore casino publishes a clause limiting withdrawals from bonus-generated winnings, free spins and cashback to 300% of the credited bonus amount, with the excess voided; another caps a wager at 20% of the deposited amount while a bonus is running and warns that breaching it may mean account closure and forfeiture of winnings. None of that is unlawful offshore. It is simply a term, and the only fair moment to read it is before the money arrives.
Losses Are Not Repaired With Deposit Bonuses
A phrase like "up to" in the offer headline, followed by a wagering multiplier in the small print, tells an experienced reader where the offer is priced. Offshore bonus multipliers are commonly reported at 25× to 50× on welcome offers and 40× to 60× on no-deposit offers, against a hard UK cap of ten. A site that leads with a free-spins offer and buries a five-figure playthrough requirement has told you what its business model is; believe it.
There Is a Named Route Out of the Account, Not Just Into It
Check whether the withdrawals page names the payment methods it pays out by, whether there is a stated processing window, and whether a phone number or postal address appears anywhere on the site. A firm that takes the deposit in ninety seconds and spends a week deciding whether to return it has already demonstrated which direction of travel it cares about. Read the withdrawals page first. It is the only marketing copy a casino never writes for fun.
How to Judge an Offshore Casino in Six Steps
- Confirm the licence and match it to the domain. Open the seal, read the certificate, check the domain name on it against the address bar. Reason: a copied certificate is the single cheapest deception in the market and the easiest to spot.
- Read the dispute clause before the bonus clause. Find the named ADR body and its decision timescale. Reason: this is the only lever that exists after everything else has failed, and it cannot be conjured later.
- Compare the wagering multiplier with the UK's ten-times cap. Convert a deposit-plus-bonus offer into the total playthrough it actually demands. Reason: the multiplier, not the headline amount, is the price of the offer.
- Hunt for maximum cashout and maximum bet clauses. Check the bonus terms specifically, not the general terms. Reason: these are the clauses that turn a win into a balance that cannot be withdrawn in full.
- Note which payment methods it pays out by, and test with a small withdrawal early. Reason: processing is the first thing an operator optimises and the last thing it advertises.
- Write down the licence, the ADR body and the dates. Reason: eCOGRA may decline a dispute that began more than a year earlier, so the clock matters from the first unanswered message.
The Check That Appears When the Money Is Owed
Identity verification is the hinge of this whole topic, and the same numbers keep surfacing under every licence.
Under Licence Condition 17.1.1, which came in on 7 May 2019, licensed operators must establish a customer's identity before that customer gambles — name, address and date of birth at minimum — and the withdrawal itself must not trigger a request for information the operator could reasonably have asked for earlier. The Commission expects identity and age checks to be brought forward to before a deposit or a stake, and has described onboarding on initials instead of full names, nicknames and commercial addresses as not good enough, warning that a middle name instead of a forename can create mismatches with records such as GamStop and undermine self-exclusion itself.
The first time a check runs, nothing much happens. Most accounts are matched electronically against credit reference agencies and the electoral roll, and the customer never sees a document request. Under anti-money-laundering rules, the €2,000 threshold — for depositing, or withdrawing, or a set of linked transactions in one logged-on session — is where a remote casino must have identified and verified the customer properly. Where an operator can verify electronically, the customer experiences an instant. Where it cannot, papers arrive: passports, driving licences and household bills are the examples the Commission gives, bank statements where the source of funds needs checking, and a selfie where fraud is suspected.
Later, it gets messy, and the mess is upstream of the individual player. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, a figure the regulator raised in August 2026, and it is one of the most common categories referred to dispute bodies. The same blog noted concern about operators using fuzzy matching through third-party providers and onboarding people on partial verification — which produces an account that works perfectly until the day it owes money that has to be reconciled against a name. Onshore, that is a licence breach the Commission can act on, and it has: a 2026 regulatory settlement of £900,000 involved, among other failures, terms allowing only one withdrawal request at a time and manual review of every fifth or tenth withdrawal that demanded extra information before processing.
Offshore, with no such condition and no such settlement, the same dynamic operates without a floor under it. The warning signs are a document request that arrives only with a withdrawal, a request for documents already supplied, and a verification provider's name appearing without any statement of what constitutes failure. The Commission's position is that operators cannot confiscate funds because identity has not been provided, and the Competition and Markets Authority's undertakings from its 2016–2019 investigation say the same. Offshore, the money is simply held, and the dispute route is the only remedy.
What Self-Exclusion Actually Holds, and What It Does Not
Self-exclusion is often described as a block. It is better understood as a term that runs long, because the periods are the point.
On GamStop Online a person chooses six months, one year, five years, or five years with auto-renewal, and once registered cannot cancel or deactivate during the period. The exclusion stays in place after the end of the chosen period unless the person contacts GamStop to remove it. If they do not, a further automatic seven-year self-exclusion period follows, during which operators are told the person was previously excluded. During the last six months of a five-year term, and only then, auto-renewal can be switched off, and that runs for up to four further five-year periods. Registration takes minutes; the block can take up to 24 hours to bite, during which operators must check the entire customer base at least once a day under a requirement introduced in April 2020.
That is why the offshore market is not a route around anything. It is simply a market in which the term was never agreed. The Commission issued an industry warning notice on 20 January 2025 about casino games from licensed operators appearing on unlicensed sites available to British consumers, noting that such sites often target people who have self-excluded and may have inadequate social responsibility and anti-money-laundering controls. There is no version of that sentence in which the player comes out ahead. Alongside the scheme itself, blocking software — Gamban, BetBlocker — and bank-level gambling blocks from names on the Commission's list including Barclays, HSBC, Lloyds, Monzo, NatWest, Santander and Starling add layers that no licence requires and no operator can silently withdraw.
The numbers say people take the long option. Of GamStop registrations in the final half of 2025, 58,675 arrived — 319 a day — and by July 2026 the register held 614,738 people, more than half of whom had chosen the maximum five-year term, while only one in four across all age groups had taken six months. Registrations rose 16% year on year in the first half of 2026, with May 2026 setting a monthly record at 12,236. Under-25s accounted for nearly one in three of those exclusions, up 26%. Anyone who tells you self-exclusion is a soft option has not read the register.
Frequently Asked Questions
Are any UK casinos not on GamStop?
Yes, though "UK casino" is doing loose work in the phrase. A site accepting British players without a Gambling Commission licence is not a UK casino in any legal sense: it is an offshore operator, licensed in Curaçao, Anjouan, Kahnawà:ke or Malta. The Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere.
Are offshore casinos not on GamStop legal for a British player?
The player is not the one committing the offence — section 33 of the Gambling Act 2005 targets the person providing facilities for gambling without an operating licence, with a maximum of 51 weeks' imprisonment, a level 5 fine, or both. But that asymmetry is not protection. It means the state pursues the operator while the player is left with no licence conditions, no approved dispute body and no route to the regulator.
Can a person still use a casino not on GamStop if they are self-excluded?
Self-exclusion holds for its full term, and after that term it stays in place until the person contacts GamStop to remove it. Offshore sites are not connected to the scheme, so they will not see the registration — that is a licensing gap, not a permission. The Commission's January 2025 warning notice specifically flags unlicensed sites that target people who have self-excluded while running weak social responsibility controls.
How are withdrawals handled at these sites, and what if one is delayed?
Withdrawal pace depends on the payment rail, not the licence: Faster Payments completes over 90% of transactions in under two seconds and takes a £1 million scheme maximum per transaction, while a bitcoin withdrawal is quoted in block intervals — an average ten minutes, with six confirmations the common merchant requirement. If money is held, the operator's own complaints procedure comes first, then whatever dispute body its licence names, under that body's timescale.
What does a no-deposit bonus at a not-on-GamStop casino really cost?
Usually a maximum cashout. Offshore no-deposit offers commonly carry 40× to 60× wagering with a cashout cap reported in the €50–€100 range, and clauses voiding anything above a specified multiple of the bonus. One offshore operator limits withdrawals from bonus-generated winnings to 300% of the credited bonus amount. The UK's ten-times wagering cap does not reach these terms, so the cashout limit is the real value of the offer.
Where does a complaint end up if the operator is offshore?
With the dispute body its licence names — EGIS ADR, Axion ADR, iGaming ADR or a licensee on an Anjouan licence, a full-time Dispute Resolution Officer at Kahnawà:ke — and not with the Gambling Commission, which is a regulator rather than an ombudsman and cannot resolve individual complaints or recover money. IBAS and eCOGRA handle most gambling disputes generally, but only for sites on their approved lists. Help is at the National Gambling Helpline on 0808 8020 133.
The Body That Decides Is the Licence
The licence on the masthead is not the holiday detail of this topic; it is the whole of it, because the licence decides who arbitrates when the account stops behaving. A British licence means an approved disputes provider within reach, wagering capped at ten times, self-exclusion with teeth, and a regulator able to fine a firm £900,000 for dragging its feet. An offshore licence means a named tribunal somewhere, timescales of its own composing, and no British regulator in the room. The market is smaller than the noise around it suggests — roughly one in forty online gamblers touched an illegal site in a four-week window — and it is growing, from about £5 billion staked in 2019 to £16.6 billion in 2025 on one estimate.
That leaves one number to carry away. Across a single quarter, customers of large licensed operators made 44.2 million withdrawals and 96.3% of them cleared without anyone having to ask a question. The figure to hold on to is the 3.7% that did not, because every one of those players needed a body with the power to look at the operator and say no — and 0808 8020 133 answers either way.