Gambling Not on GamStop and the Offshore Market

Gambling not on GamStop means gambling with an operator that holds no Gambling Commission licence, so it never joins the British self-exclusion scheme. Those sites take British customers under Curaçao, Anjouan or Kahnawá:ke licences, or none. British consumer protections, dispute routes and stake limits do not apply to them.

The scheme's name trips people up — it is often typed "gamestop", and Google has quietly accepted the misspelling for years. GamStop Online is the national self-exclusion register: run by The National Online Self Exclusion Scheme Limited, free to use, and binding on every operator holding a Gambling Commission licence since 31 March 2020, when participation became a licence condition. Register once and you are blocked from all of them for six months, a year, five years, or five years with auto-renewal.

It is worth being blunt about the rest. Offshore sites are not licensed in Great Britain, which means the licence conditions that shape a British account — the wagering cap, the ban on reverse withdrawals, the requirement to verify consumers before they gamble rather than after they win — simply do not follow the consumer across the border. For anyone who wants help rather than a lecture, the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day. For callers in Wales the number is 0808 2819 265. GamCare, GamFam, Gamblers Anonymous and NHS gambling clinics are all reachable, and none of them care which licence your site of choice happens to hold.

This page looks at the offshore market the way I look at any market: what it claims, what its licences are actually worth, and how British rules compare with the ones behind the door marked "not on GamStop".

Gambling Sites Not on GamStop UK and Licence Validity

The first thing to understand is that "offshore" is not one thing. It is a spectrum running from a regulator with a real statute and a real fee schedule to an address that amounts to a rented mailbox. The licence logo at the foot of a page tells you where the operator is answerable — and to whom nobody in Britain can appeal.

Start with the British baseline, because it is the comparison everything else is measured against. A Gambling Commission licence is not a rubber stamp. It comes with a stake limit of £5 per spin on online slots for adults, and £2 for those aged 18 to 24, live since April and May 2025. It comes with a cap on bonus wagering requirements of ten times, in force since 19 January 2026, down from terms that once ran to 60 times. It comes with a ban on reverse withdrawals, in force since 31 October 2021, and a prohibition on credit cards, live since 14 April 2020. It comes with mandatory financial vulnerability checks, triggered at £150 net deposits over 30 days since 28 February 2025. And it comes with the requirement to check every customer against the GamStop register at least every 24 hours.

Now look at what sits behind an offshore badge. Curaçao is the most common. Its National Ordinance on Games of Chance took effect on 24 December 2024 and replaced the old master-licence model, where private licensors sold sub-licences under seals such as 1668/JAZ or 8048/JAZ. Those legacy "orange" certificates ended on 15 October 2025. Licensing activity ceased for the four former master licensors on dates running from 18 August 2024 to 31 January 2025. An old /JAZ number, in other words, is now decoration, and the Curaçao Gaming Authority says so itself.

The money is instructive. A Curaçao B2C application fee is €4,592, non-refundable, with €150 per ultimate beneficial owner. The total annual B2C fee is €47,450 — €24,490 to the National Treasury and €22,960 in supervision — payable in full by 15 January. Anjouan charges €17,828 for issuance and the same again each year for renewal, plus €500 per extra domain. Kahnawá:ke charges a Client Provider Authorization application fee of USD 35,000, rising to USD 40,000 on 1 January 2027, with an annual fee of USD 20,000. Malta, the EU's most serious online gambling regulator, charges a €5,000 application fee, a €25,000 annual licence fee, 5% tax on gaming revenue and a minimum share capital of €100,000.

Those are real numbers, and they are the point: a serious licence costs serious money and a serious regulator keeps a public register you can search. But the fees buy supervision, not British-style protection. None of these jurisdictions imposes a £5 slot stake cap, a ten-times wagering ceiling, a credit card ban or a route into the GamStop register. Some require player-fund segregation and certified random number generators — Anjouan's published standards do — and some require an approved alternative dispute resolution provider, which Anjouan also does, naming EGIS ADR, Axion ADR, iGaming ADR and an alternative operator. That is a floor, not a ceiling.

And then there is the bottom of the market, where the paperwork is a "data processing licence" that Costa Rica does not actually issue. Costa Rica has no comprehensive gambling licensing regime at all, and its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have created one. A site displaying that badge is not licensed anywhere, whatever the footer says.

Gambling Websites Not on GamStop and Illegal Operations

There is a distinction that offshore marketing prefers to blur. Operating without a British licence while offering gambling to British customers is not a grey area; it is an offence. Section 33 of the Gambling Act 2005 makes it illegal to provide facilities for gambling without an operating licence, and the provision applies whether the facilities are provided inside or outside the United Kingdom, and where at least one piece of remote gambling equipment sits in Great Britain. On summary conviction it carries up to 51 weeks' imprisonment, a fine at level 5, or both. The Gambling Commission states plainly that offering commercial gambling services to consumers in Great Britain without its licence is illegal even where the operator holds a licence elsewhere.

The Commission has been busy on this. Since April 2024 its Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs, and secured 287,961 removals. Across 160 illegal websites with traffic data, engagement fell by an average of 32% after disruption. The methods are not equal: registrar blocks and website suspensions produced an average fall of 91% each, GEO IP blocking 60%, Bing removal 52%, Google removal 30% and Facebook removal 8%. Blocking beats de-listing, which is why the Commission says so.

The market is not small. Over the monitored period from May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain. The Commission's estimate of time spent on illegal sites was 306 million minutes in January 2025, falling to 116 million in June 2025 and 152 million in July 2025. H2 Gambling Capital puts stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019. Industry-commissioned work from Frontier Economics gives a far lower £2.7 billion staked annually online, equal to 2.1% of the £128 billion staked with regulated British remote operators. I do not pretend to know which figure is right; I do notice that the industry's number is the smaller one and the analyst's number is the larger, and that both camps have an interest.

What is not contested is who gets targeted. The Commission issued an industry warning notice on 20 January 2025 about casino games from licensed operators turning up on unlicensed websites available to British consumers, noting that those sites often target customers who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. That is the honest summary of the segment: the marketing is aimed, in part, at people the British system has just excluded.

The Exclusion Term, and Why It Holds

Of all the differences between a British and an offshore account, the one that matters most is the simplest: GamStop applies only to operators licensed in Great Britain, and it can only exclude you from participating operators. Offshore sites holding no Commission licence are not connected to it — a point stated by trade sources rather than on a regulator's page, though it follows directly from GamStop's own terms of use.

So here is the fact, plainly. When someone registers with GamStop Online, the exclusion runs for its full chosen term and stays in place after that term ends until they contact GamStop to remove it.

The scheme's own numbers show how many people choose the long version. At the end of 2025 there were 561,983 active exclusions, with 117,756 new registrations during the year and 58,675 in the final six months — an average of 319 a day. Registrations rose 16% year on year in the first half of 2026, and May 2026 set a monthly record of 12,236 sign-ups. As of July 2026 GamStop Online reported 614,738 consumers on the register, more than one in two of whom had opted for the maximum five-year exclusion, while only one in four across all age groups had chosen six months. Under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26% year-on-year increase. The 2025 annual report recorded the gender split as 94.3% male and 5.7% female.

That is a register of people who have made a decision about their own gambling, and it is not a list of people looking for a loophole. An offshore site is not a way round the exclusion; it is simply a place the exclusion was never written to reach.

The same principle runs through the land-based schemes, which people often confuse with the online one. SENSE covers licensed land-based casinos, with a minimum six-month exclusion extendable to twelve, removal only in person at a casino during the six-month "Thinking" period, and a 24-hour cooling-off. Gamstop Betting Shops, formerly MOSES, runs by telephone on 0800 294 2060, excludes a customer from named bookmakers' areas for a fixed 12 months that cannot be ended early, and applies a 24-hour cooling-off on return. Across the year to 1 April 2026 the Commission's freedom-of-information response put active self-excluded customers at 12,445 for SENSE and 9,075 for Gamstop Betting Shops. Kahnawá:ke goes further in one respect and less far in another: its voluntary self-exclusion is permanent and irrevocable, and a player who breaches it forfeits funds deposited or won to a charity chosen by the Commission.

How Offshore and British Terms Compare, Line by Line

The table below compares British licence conditions with what the main offshore licences require, by criterion rather than by brand. Where a figure appears here it appears in the text above, and it is the same figure.

Two readings of that table are possible and I hold to both. The first is that an offshore licence is not the same as no licence: Anjouan's standards on fund segregation, certified random number generators and anti-money-laundering controls are real, and Curaçao's fee schedule is not a fig leaf. The second is that the gap on the rows that actually decide whether a withdrawal arrives — the wagering cap, the withdrawal rules, the self-exclusion link, the dispute route — is the whole story. The costs also run the wrong way round: the cheapest licences are the ones with the least supervision behind them, which is the opposite of a reassurance.

Identity Checks and Regulatory Standards

If there is a single mechanism that separates a decent offshore experience from a grim one, it is when identity verification happens — before the first bet, or at the moment of the first withdrawal.

In Britain, Licence Condition 17 has required since 7 May 2019 that a licensee obtain and verify information establishing a customer's identity before that customer is permitted to gamble, including name, address and date of birth. The Commission's expectation, restated in August 2026, is that identity and age checks come before a deposit or a stake, and it has criticised operators onboarding customers on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential ones. There is a narrow exception: a remote casino may identify a customer and verify age at registration but defer full verification until the €2,000 threshold under the money-laundering regulations is reached, the so-called hybrid approach.

The first time, then, a British account is typically verified by matching the details against databases such as credit reference agencies and the electoral roll, with no documents needed. Later, checks continue: customer due diligence is ongoing and must be updated when circumstances change, and for higher-risk accounts an operator will need source of wealth rather than merely source of funds. Documents, when asked for, are passports, driving licences and household bills; a selfie may be requested where identity theft is suspected. The Commission will not give a timescale because there is not one — electronic verification can be instant, documents take longer.

The warning sign is the inversion. Licence Condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier, and the Commission has said that delaying a withdrawal for insufficient ID may breach that condition. It has also reported that over a quarter of complaints reaching its contact centre concern identity verification, raised when documents are demanded only at the point of withdrawal. On an offshore site there is no equivalent condition and no Commission to breach. A site that lets anyone deposit instantly with a card and then asks for a notarised utility bill, a selfie holding a passport and a bank statement the moment a balance is requested for withdrawal has told the customer what it is. Verification that arrives with the withdrawal is not compliance; it is a retention mechanism, and it works because the money is already in the account.

The same logic applies to bonuses. In Britain, wagering requirements cannot exceed ten times and cannot apply to play with your own deposit balance; deposit and bonus balances must be displayed separately; and operators may not impose a maximum limit on what can be withdrawn from a deposit balance, with the Commission's example of a prohibited term being "You may withdraw up to £50 per day and up to £500 per week". Offshore, no such rules exist. Published offshore terms include a 25× playthrough, a maximum withdrawable limit of 300% of the credited bonus amount with the excess voided, a maximum bet while wagering of €5 for regular players and €10 for VIPs, and a clause allowing the operator to confiscate funds and cancel free bets for abuse of the offer. None of those terms is unlawful where the operator sits. All of them are worth reading before the first deposit rather than after.

Five Signs an Operator Can Be Trusted

The licence resolves to a register, not to a picture

A licence badge should lead somewhere. Curaçao's Certificate of Operation Seal must redirect to the Curaçao Gaming Authority's verification address, and the CGA states that if the seal differs in design, colour or format the website is not authorised; if the certificate behind it names a different domain, the site is displaying someone else's paperwork. Anjouan certificates carry a unique licence number and a QR code linking to the public register, and Anjouan says certificates that cannot be verified through that register should not be relied on. Kahnawá:ke's Logo Certificate Program generates a "Certificate of Good Standing" on click. Quick check: click the badge. If it does not resolve to a register entry naming the same domain, close the tab.

The withdrawal terms are published before the first deposit

The Commission's position is that where an operator has no regulatory concerns about a customer there is no valid reason to delay a payout, and that introducing friction at withdrawal rather than at deposit is unacceptable. Offshore, the equivalent signal is a terms page that states processing times, any fee, and whether a maximum applies — before you deposit. Quick check: search the terms page for "withdraw". If the only hit is a sentence reserving the operator's discretion, that is the answer.

The stake and bonus terms are stated as numbers

A trustworthy operator states the wagering multiple, which games contribute and at what percentage, the maximum bet while wagering, and any cashout ceiling. Published offshore examples run to a contribution chart giving slots 100%, table games 20%, video poker and blackjack 10%, roulette and baccarat 5%, and craps, live dealer and jackpot games 0%. Quick check: if the multiple is missing from the offer page and buried in a linked document you cannot find, treat the offer as unpriced.

Complaints go to a named independent body

British operators must offer a free route to a Commission-approved ADR provider if a complaint is unresolved after eight weeks, and the approved list includes IBAS, eCOGRA, CEDR, ProMediate, ADR Group, Pegasus and the Tattersalls Committee. IBAS reports 100% operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. Anjouan requires a named ADR provider in the player-facing terms. Quick check: find the dispute clause. A site with no named adjudicator has told you where a complaint ends.

Funds are described, and the description is specific

British rules require an operator to choose one of three customer-funds ratings — not protected, medium protection or high protection — state it in the terms, and remind a "not protected" customer every six months. Keeping funds in a separate client account does not guarantee their return on insolvency, and operators are legally allowed to hold customer money in overseas accounts. Anjouan's standards require segregation of player funds from operational funds. Quick check: read the funds clause. "Your funds are held in a segregated account with a named bank" is a sentence; "your funds are safe" is a slogan.

How to Check a Site Before You Trust It With a Penny

1. Find the licence and verify it at source. Open the regulator's public register and confirm the domain is listed and the licence is current. Reason: a badge is an image, a register entry is a record, and Curaçao's own guidance says an unverifiable certificate should not be relied on.
2. Read the withdrawal clause in full before depositing. Note the processing time, any fee, any maximum, and whether the site asks for documents only when you request a payout. Reason: this is the term that decides whether the money is yours in practice as well as in law, and British licence conditions that prevent the worst version of it do not apply offshore.
3. Price the bonus, or refuse it. Multiply the bonus by the wagering multiple, note the contribution percentages and the maximum bet while wagering. Reason: a 40× requirement on a €100 bonus is €4,000 of play before anything is withdrawable, and a 0% contribution on the game you actually play makes it infinite.
4. Check the dispute clause for a named adjudicator. Look for an approved ADR provider with contact details in the terms. Reason: without one, an unresolved complaint has no next step, and the Commission cannot help — it is a regulator, not an ombudsman, and does not resolve individual disputes or retrieve money.
5. Set your own limits before you deposit, not after. Use the account limits tools, and use bank-level gambling blocks if the site's tools are thin — Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling all offer one, applied at card level, with a 48- or 72-hour cooling-off before gambling payments resume. Reason: blocks that live at the card work across every operator, including the ones with no British licence.
6. Register with GamStop Online if the decision is made. Signing up takes minutes and the block can take up to 24 hours to become effective, so it is not a same-evening fix. Reason: it is free, it is binding on every British-licensed operator, and it holds for its full term and then stays in place until you contact GamStop to remove it — and remember that it reaches none of the sites this page is about.

FAQ

What gambling sites are not on GamStop?

Any operator without a Gambling Commission licence, because participation in the scheme is a condition of that licence. That covers Curaçao-licensed casinos, Anjouan-licensed casinos, Kahnawá:ke permit holders and a long tail with no meaningful licence at all. The practical test is not the marketing copy but the regulator's public register: if the domain is not listed against a current licence, the site is outside GamStop by definition.

Are UK gambling sites not on GamStop legal to use?

The operator commits the offence, not the customer. Section 33 of the Gambling Act 2005 makes it illegal to provide facilities for gambling without an operating licence, and it applies where at least one piece of remote gambling equipment sits in Great Britain, or where the provider knows or should know the facilities are likely to be used in Great Britain. So the site is breaking the law; that does not make the player a criminal, but it does mean no British regulator is watching.

Do offshore casinos offer instant withdrawals?

Some advertise them and a few deliver, but the terms decide. Offshore sites are not bound by the British requirement that a withdrawal must not trigger information requests the operator could have made earlier, nor by the ban on reverse withdrawals. Bitcoin's ten-minute average block time sets a floor for crypto payouts — a transaction is unconfirmed until it is six blocks deep — while bank transfers ride on Faster Payments, where over 90% of transactions complete in under two seconds, but the operator's own approval step comes first.

Are bonuses better at casinos not on GamStop?

Larger, usually; safer, not necessarily. British rules cap wagering at ten times and forbid applying it to your own deposit balance, and they require deposit and bonus balances to be shown separately. Offshore terms commonly run at 25× to 50×, sometimes with a maximum withdrawable amount such as 300% of the bonus and a maximum bet while wagering of €5 or €10. A bigger headline number attached to a longer playthrough is a smaller offer, not a bigger one.

Do Welsh gambling sites not on GamStop exist?

Not as a category. Licensing is a matter for the operator and its regulator, not for the nation within Great Britain where a customer happens to live, so a site is either Commission-licensed or it is not. What does differ by nation is support: the National Gambling Helpline is 0808 8020 133 for England and Scotland, while callers in Wales are given 0808 2819 265, and Gamban blocking software is free for residents of Wales.

What happens if a site not on GamStop refuses to pay?

There is no British route back. The Commission is a regulator, not an ombudsman, and cannot resolve individual complaints or retrieve money, though it records them and typically refers disputes to an independent third party. The only leverage is the operator's own regulator and its named dispute body — Anjouan requires one, Curaçao supervises directly — which is why the dispute clause belongs in the pre-deposit reading, not the post-loss reading.

Comparing Gambling Rules Not on GamStop

Offshore gambling is not a hidden corner of the market but a licensed one in several jurisdictions, and the honest way to judge it is to compare rulebooks rather than badges — which is the whole point of looking at this from the British side of the fence.

The comparison lands in an awkward place. The jurisdictions with the least supervision charge the least and attract the most operators, and the protections people assume they are carrying with them — the wagering cap, the withdrawal rules, the GamStop link, the free ADR route, the £5 slot stake limit — stop at the British border and do not travel. Anjouan's €17,828-a-year licence and Curaçao's €47,450 buy supervision of a kind, and segregation of player funds is not nothing, but neither buys the ten-times cap or the right to be verified before you stake rather than after you win.

One last number, from the Commission's own disruption data: registrar blocks cut engagement at illegal sites by an average of 91%, Google removals by 30%. Enforcement works best where it is hardest to sidestep. That is as good a description as any of the difference between a licence you can verify and one you can only believe in.