Gambling websites in the UK split into two groups. Sites holding a Gambling Commission licence must obey British rules: identity checks before a bet, wagering capped at ten times, a payout that cannot be reversed, and GamStop. Offshore sites hold no such licence, so none of those protections apply and no British regulator can help.
The pitch for offshore is always the same: fewer questions, bigger bonuses, faster money. The British counter-pitch is duller and, I think, better — that the questions are the product. Since 31 March 2020 every online operator licensed in Great Britain must belong to GamStop, the national self-exclusion scheme, under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice. That single obligation shapes what a UK-licensed site can be. The scheme is often typed "gamestop"; the spelling in the licence condition is GamStop, and the habit is now old enough to have outlived the original branding, since the online register was renamed Gamstop Online in November 2025.
This is an article about how British rules compare with offshore ones, and about the numbers either side of that line. The market is not small: total Great Britain gross gambling yield was £17.5 billion in the year to March 2026, up 4.4 per cent. The illegal fringe is not small either. Gambling Commission analysis published on 5 November 2026 puts engagement with illegal gambling websites at 2.5 per cent of people who had gambled online in the past four weeks, and H2 Gambling Capital reckons £16.6 billion was staked with illegal operators in the UK in 2025, against about £5 billion in 2019. Those two facts sit awkwardly together, and most of this page is about why. As of 07 November 2026, the comparison has never been more lopsided — or easier to check.
Table of Contents9
What The Licence Actually Changes
The Regulator Publishes Its Own Scorecard
The checkable benchmark on this topic is the Commission's own withdrawal data. Covering June to September 2024, it records 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. That is a licence-condition artefact, not a courtesy. Since 31 October 2021, remote operators have been barred from offering reverse withdrawals — requirement 14B states flatly that consumers must not be given the option to cancel a withdrawal request. The temptation to un-withdraw a pending payout, which offshore terms happily preserve, was removed by rule.
The complaints still arrive. Over a quarter of complaints reaching the Commission's contact centre concern identity verification, typically raised when documents are demanded only at the point of withdrawal — and LCCP licence condition 17.1.1 forbids exactly that where the operator could reasonably have asked earlier. Complaints coded "withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Fewer, but not few.
Where The Offshore Sites Sit
Offshore sites that hold no Gambling Commission licence are not connected to GamStop and are not covered by it, since the scheme's obligations fall on UKGC-licensed operators [unconfirmed — stated by trade and press sources rather than a primary regulator page, though consistent with GamStop's own terms of use]. The Commission is blunt about the legal position: section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission says it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence — including where the operator holds a licence elsewhere. It issued an industry warning notice on 20 January 2025 about licensed casino games appearing on unlicensed sites, noting those sites often target people who have self-excluded through GamStop and may have thin social responsibility and anti-money-laundering controls.
The regulators offshore are not decorative, but they are not British. Curaçao's National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence model; the legacy orange sub-licence certificates ended on 15 October 2025, and a historic /JAZ number proves nothing about a current licence. A Curaçao B2C licence costs a one-off EUR 4,592 to apply and EUR 47,450 a year. Anjouan charges EUR 17,828 to issue and the same to renew. Malta's regulator charges EUR 5,000 to apply, EUR 25,000 a year, plus 5 per cent of gaming revenue, and keeps a public list of unauthorised URLs. Costa Rica, by contrast, has no comprehensive gambling licensing regime at all — the "data processing license" sometimes cited is not a licence in the strict sense — and its Legislative Assembly rejected Bill No. 25,057 in early 2026.
The tell is what happens when something goes wrong. A dispute with a British licensee goes to an ADR provider approved by the Commission — IBAS, eCOGRA, CEDR and others — free of charge, and IBAS reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. An Anjouan licensee must nominate an approved ADR provider; the approved list runs to four names. A Kahnawà:ke licensee answers to a Commission with a full-time dispute resolution officer, and a player who breaches its self-exclusion rule forfeits funds to charity. None of that is worthless. All of it is weaker than a regulator that can suspend a licence, which is what happened to two operators on 3 April 2020 for failing to integrate GamStop by the deadline.
Terms That Build In Delay
Delay is where offshore terms earn their keep, and it is usually written in plain sight. Some terms cap withdrawals — a maximum limit on what may be taken out of a deposit balance is a prohibited term under Commission guidance, whose own example is "You may withdraw up to £50 per day and up to £500 per week". Offshore terms can and do impose exactly that shape of restriction, and can hold a payout for review on no stated timetable. In October 2026 the Commission announced that one licensee would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals, one of them a term allowing only one withdrawal at a time. That is a British operator being caught doing a British-regulated version of an offshore habit. The rules did not prevent it; the rules made it expensive.
Note also the credit card ban, in force since 14 April 2020 under licence condition 6.1.2. A UK-licensed site cannot take a credit card deposit, and must check that e-wallet money was not loaded from one. Offshore sites are under no such obligation, which is one of the quieter reasons their cashier pages look so generous.
The Bonus Cap, And What It Replaced
If one thing separates British gambling websites from their offshore cousins in 2026, it is wagering. From 19 January 2026, Social Responsibility Code 5.1.1 caps wagering requirements on bonus funds at ten times and bans promotions that mix more than one gambling product. The Commission chose a cap over an outright ban because it judged licensees would otherwise invent new terms to stop people cashing out, and it said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements".
How it works the first time: a new customer claims a welcome offer, and the site must show the deposit balance and the bonus balance separately, because UK guidance forbids applying wagering to play with the deposit balance and requires the player to be able to withdraw that balance at any time, bonus pending or not. Later, the same machinery keeps running — terms must be clear, transparent, fair and readily accessible, and significant conditions must be no more than one click away under SR Code 5.1.9. The awkward case is the sticky bonus, a non-cashable amount that can be wagered but never withdrawn. British rules effectively ended the practice by demanding separate balances and a withdrawable deposit; offshore terms still carry it, alongside maximum cashout clauses such as a cap at 300 per cent of the credited bonus, and maximum bets while wagering that void winnings if broken.
The warning signs are specific. A wagering multiplier above ten times on a UK-licensed site is a compliance failure, not a bargaining position. A cashout cap on bonus winnings, a maximum bet rule buried in a second document, a term letting the operator decide at its sole discretion whether play breached the promotion, or a bonus that cannot be exited without losing your own money — each is either prohibited here or a red flag there. The Commission fined one licensee £170,000 in July 2025 for failures including a term asserting a right to close accounts or forfeit winnings at the operator's own discretion.
Five Signs A Site Is Worth The Trouble
The Licence Matches The Domain
Check the Commission's public register and click through to see whether the site's activities and domain names match what is listed. A licence held by a parent company for a different domain is not the same thing, and the Commission advises exactly this cross-check. Offshore, the equivalent test is harder: click a Curaçao Certificate of Operation seal and it must redirect to cert.cga.cw, and if the certificate behind it names a different domain, the site is displaying someone else's paperwork.
Identity Checks Happen Before You Play
Licence condition 17 has required identity verification before a customer is permitted to gamble since 7 May 2019, and the Commission expects checks brought forward rather than held back to the withdrawal screen. A site that lets money go down without knowing who you are, then asks for a passport at cash-out, is describing its priorities. Offshore, remote business is treated as higher risk absent safeguards, and a thin onboarding process usually means thin controls everywhere.
The Cashier Cannot Undo A Payout
Look for a cashier with no reverse-withdrawal button and no single-withdrawal-at-a-time rule. Requirement 14B has forbidden the option since 31 October 2021, and guidance says the process should be as frictionless as possible. A "pending" state that lasts days and can be cancelled is the oldest trick in the trade, and it survives offshore because nothing forbids it.
Customer Funds Are Labelled Honestly
Under licence conditions 4.1.1 and 4.2.1 an operator must pick one of three insolvency ratings — not protected, medium or high — state it in writing, and make the customer acknowledge it. A "not protected" operator must remind customers every six months that their money is not protected and say how much is held. Any site that cannot tell you which rating applies has told you something.
Help And Limits Are Real, Not Decorative
A UK-licensed site must offer financial limits, prompt you to set one before your first deposit, and remind you to review every six months. Self-exclusion through GamStop must be honoured, and self-exclusion is not a suggestion: it holds for its full term — six months, one year, five years or five years with auto-renewal — and then stays in place until the person contacts GamStop to remove it. An offshore site is never a way round that, and any site that markets itself as one has answered the trust question.
How To Check A Site In Six Steps
- Open the Gambling Commission's public register and search the brand. Compare the domain names listed with the address in your browser. Reason: a licence number in a footer proves nothing if it belongs to another company or another domain.
- Read the customer funds section of the terms. Look for the insolvency rating — not protected, medium or high. Reason: it is the one disclosure that tells you what happens to your balance if the business fails, and it is a licence requirement to state it.
- Read the bonus terms before opting in, and count the wagering multiplier. Anything above ten times on a UK-licensed site is a breach; on an offshore site it is simply the price. Reason: the multiplier and the cashout cap decide whether a bonus is a gift or a debt.
- Look for the withdrawable deposit balance and the absence of a reverse button. Reason: reverse withdrawals have been banned here since 31 October 2021, so their presence tells you which rulebook you are under.
- Set a financial limit at account level before your first deposit, using the free-text box. Reason: since 31 October 2025 the limit prompt is a licence requirement, and a limit set at account level applies across products rather than to one game.
- Decide about self-exclusion before you need it, and know it is final. Registering with GamStop Online blocks UK-licensed online gambling for six months, one year, five years or five years with auto-renewal, takes a few minutes, and can take up to 24 hours to take effect. Reason: it cannot be cancelled during the term, and it stays in place afterwards until you contact GamStop to remove it.
What The Numbers Say About The Trade
The register tells its own story. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at 31 December 2025; by July 2026 the figure was 614,738, of whom more than one in two had chosen the maximum five-year term, and only one in four had picked six months. Under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26 per cent year-on-year increase. The exclusion terms selected across 2025 were 29 per cent six months, 24 per cent one year, 25 per cent five years and 22 per cent auto-renewal.
The demand for an exit is not shrinking, and the offshore market is the answer some people reach for instead. I think that is the wrong reading of the evidence, and the Commission's own disruption figures suggest why the sites are worth avoiding even on their own terms. Since April 2024 the Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 search engine URLs and secured 287,961 removals. Across 160 illegal gambling websites, engagement fell an average of 32 per cent after disruption; registrar blocks cut it by 91 per cent on average and GEO IP blocking by 60 per cent. In July to September 2026 alone the Commission referred 1,835 websites and issued 546 cease and desist notices. The operators rotate domains; the customers do not always follow, but enough do.
There is also the money question, which is not really about payouts at all. UK-licensed sites must participate in the statutory levy, introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, at 1.1 per cent of previous-year gross gambling yield for online operators. It raised just under £120 million in its first year, ringfenced for research, prevention and treatment, split 50 per cent treatment, 30 per cent prevention and 20 per cent research. Offshore sites pay none of it. That is the whole competitive advantage, stated plainly: they are cheaper because they are not paying for the harm.
On Payouts, Delays And What To Do About Them
Speed is the head-line promise of the whole niche, so it is worth saying what the British baseline is. Of 44.2 million withdrawals recorded across June to September 2024, 96.3 per cent cleared automatically — that is the standard, not the aspiration. Where the operator has no regulatory concerns about a customer, the Commission says there is no valid reason to delay a payout, and it says it is not acceptable to introduce friction at withdrawal rather than at deposit. It has also said it does not consider it fair, transparent or necessary to delay withdrawals purely for customer-interaction purposes, which rules out the excuse most often given.
The LCCP sets no fixed maximum number of days for a withdrawal to complete; the regime relies on the fair-and-open condition 7.1.1, the identity condition 17.1.1 and the prohibition on unfair terms. So if a payout stalls, the route is the operator's own complaints procedure first, then an ADR provider free of charge if the matter is not resolved within eight weeks. eCOGRA's Great Britain report for 1 October 2024 to 30 September 2025 records 150 valid "Deposits & Withdrawals" disputes, an average domestic resolution time of 31 days, and 17.8 per cent of completed disputes decided in the consumer's favour. IBAS handled 3,721 domestic disputes in 2024-25, of which 217 were banking and financial disputes, completing domestic cases in 20 days on average.
Two structural facts matter more than any of this. First, the Commission is a regulator and not an ombudsman: it cannot resolve individual complaints or get money back, though it records everything and refers disputes onward. Second, an operator rated "not protected" on customer funds is allowed to hold that money in an overseas bank account, and keeping it in a separate client account does not mean customers are repaid if the business becomes insolvent. That is British law being honest rather than generous, and it is still a stronger position than a site with no rating to disclose.
Where To Get Help
The National Gambling Helpline is run by GamCare on 0808 8020 133, free, 24 hours a day, every day of the year, also reachable by live chat and WhatsApp. Callers in Wales are given 0808 2819 265. BeGambleAware, the public-facing brand of the charity GambleAware, points people to the same number. Gamblers Anonymous England, Wales and Ulster can be reached on 0330 094 0322 and runs around 250 meeting locations with no appointment needed; Gam-Anon UK & Ireland supports family and friends; Citizens Advice gives free confidential help with debt, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131. The NHS National Gambling Clinic in London takes self-referrals, and NHS England has opened 15 specialist gambling clinics since 2019.
Blocking software is worth naming too, since it catches what a licence cannot. GamStop signposts Gamban and BetBlocker; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps and is free worldwide, while Gamban is free in Wales and costs £4.99 a month or £29.99 a year in England and Scotland since TalkBanStop funding ended on 31 March 2026. Bank-level blocks cover a list of banks the Commission last updated on 16 October 2026, work at card level and must be switched on per card, and most banks apply a 48-hour or 72-hour cooling-off before gambling payments go through again. None of it affects a credit score.
Questions About Gambling Websites UK
What are the best gambling websites in the UK?
There is no honest list by brand, and any page offering one is selling something. Judge by what is checkable: a Gambling Commission licence whose listed domain matches the address bar, wagering capped at ten times since 19 January 2026, no reverse-withdrawal option, a stated insolvency rating for customer funds, and honoured GamStop exclusions. Those five tests separate the field far better than a ranking.
Are UK gambling websites safer than offshore ones?
Safer in the ways that are written down. A British licence brings identity checks before play, the ten-times wagering cap, the ban on reverse withdrawals and a free route to an approved ADR provider. An offshore site may be perfectly solvent and honest, but if it goes wrong there is no British regulator with power over it, and the Commission cannot get your money back.
Do UK online gambling websites have to use GamStop?
Yes. Since 31 March 2020, participation in the national multi-operator self-exclusion scheme has been a condition of every online licence, sitting in social responsibility code provision 3.5.5. Operators must also check their whole customer base for GamStop registration at least every 24 hours, a requirement introduced in April 2020, which also stopped registered people receiving direct marketing.
How long does a GamStop exclusion last?
Registrations run for six months, one year, five years, or five years with auto-renewal. Auto-renewal can only be switched off during the last six months of a five-year term and continues for up to four further five-year periods. The exclusion cannot be cancelled during its term, and it stays in place at the end unless the person contacts GamStop to remove it.
Can an offshore site get round a self-exclusion?
No, and the framing is the problem. An offshore site is not a way round an exclusion; it is a site outside the scheme entirely. GamStop can only block accounts with operators licensed in Great Britain, so it cannot prevent access to services run by organisations that do not participate. Self-exclusion holds for its full term regardless, and the Commission's January 2025 warning notice noted that unlicensed sites often target exactly these customers.
What is a UK online gambling website with sustainability certifications?
There is no certification scheme of that name. The equivalent here is regulatory status plus recognised assurance: a Gambling Commission licence, an ADR provider from the Commission's approved list such as IBAS or eCOGRA, a stated customer-funds insolvency rating, and, offshore, a live Curaçao or Kahnawà:ke permit that can be verified in the regulator's own register rather than trusted from a badge image.
Why do withdrawals get delayed for checks?
Usually because the operator asked too late. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier, though anti-money-laundering duties can still require documents at the time. Over a quarter of complaints to the Commission's contact centre concern identity verification, and the Commission has criticised onboarding customers on partial or equivocal checks.
Is it legal to use an offshore casino from the UK?
The offence in section 33 of the Gambling Act 2005 attaches to the operator providing facilities without a licence, not to the adult customer. The Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, including where the operator holds a licence in another jurisdiction. That is a statement about the operator's conduct, and it is why the protections are absent.
The Short Version
British gambling websites are not better because they are British; they are better because a licence makes certain things compulsory — identity before play, ten-times wagering since 19 January 2026, no reverse withdrawals since 31 October 2021, an insolvency rating for your money and a GamStop exclusion that holds its full term and stays until you ask GamStop to remove it — and an offshore site, however well run, is outside all of it. What the licence buys is not excitement. It is a complaints route, a cap and a regulator with a memory, and the levy that funds treatment raised just under £120 million in its first year.