Non GamStop Casino UK Explained

A non GamStop casino is an online casino licensed outside Great Britain, most often in Curaçao, Anjouan or Kahnawà:ke, which therefore does not participate in the UK's national self-exclusion scheme. It is not licensed by the Gambling Commission, so British gambling protections do not apply to it, and it cannot offer a way round a GamStop exclusion.

The industry likes to sell these sites as freedom. Freedom from what, exactly, is the question this column tries to answer. A non GamStop casino UK players find is usually a perfectly ordinary casino with a worse regulator behind it, and the difference between it and a British site is not the colour of the buttons. It is what happens when something goes wrong: who has to answer for it, what the terms can lawfully say, and how long the money sits in someone else's account while a document is being checked.

I have spent years reading licence conditions and terms and conditions side by side, and the comparison is rarely flattering to the offshore side. Not because every offshore operator is a crook — most are ordinary businesses — but because the rules written around them are thin, and thin rules invite the sort of term that a British licensee would be fined for. This page sets out how the offshore market works, what it costs, where the genuine risk sits, and how a careful player sorts one operator from another without relying on anyone's affiliate list.

Offshore sites that hold no Gambling Commission licence are not connected to the scheme and are not covered by it, because the scheme's obligations apply only to UKGC-licensed operators (stated by trade and press sources rather than a regulator page, though consistent with the scheme's own terms of use). Worth saying plainly, and early: anyone struggling with their gambling can call the National Gambling Helpline on 0808 8020 133, free, 24 hours a day, every day of the year.

How the Market Actually Works

Who is licensed in Great Britain and who is not

Since 31 March 2020 every online gambling operator must be part of the national self-exclusion scheme as a condition of its Gambling Commission licence. Operators were notified of that deadline in January 2020. The requirement sits in the Commission's Licence Conditions and Codes of Practice at social responsibility code provision 3.5.5, which states that licensees must participate in the national multi-operator self-exclusion scheme.

That single sentence is the dividing line for this whole topic. A site inside the scheme is a site the Commission can fine, suspend or strip of its licence. A site outside it has no such relationship with the regulator, and the Commission's own remit covers only websites that trade or advertise to customers in Great Britain and hold a Commission licence.

The name on the door

A short factual note, because it trips people up constantly: the scheme is gamstop, usually typed as "gamestop" — the word "game" suggests itself, and the spelling sticks. The scheme's own name is GamStop.

Where the offshore licences come from

Curaçao is the most common. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority and replacing the old master-licence and sub-licence model. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and the Curaçao regulator's own guidance says a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. Anjouan, a constituent territory of the Union of the Comoros, licenses under legislation adopted in 2005. Kahnawà:ke has regulated interactive gaming since its regulations were enacted in July 1999.

Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs, and secured 287,961 URL removals. Across 160 illegal gambling websites, engagement fell by an average of 32 per cent after disruption. That is the enforcement picture, and it is worth holding in mind: this is not a market the regulator ignores.

What a British licence buys that an offshore one does not

Several things, and they are concrete. Credit cards have been banned for gambling since 14 April 2020 under licence condition 6.1.2. Reverse withdrawals — the option to cancel a withdrawal request and put the money back into play — were banned permanently on 31 October 2021 under remote technical standard 14B. Since 19 January 2026 wagering requirements on bonus funds are capped at ten times, and mixed-product promotions requiring two or more types of gambling are prohibited. None of that binds an operator licensed in Curaçao or Anjouan.

Comparing Sites by Licence, Not by Badge

The brief here is comparison, and the honest way to do it is by regulator rather than by brand. What follows compares four licensing routes on the things that actually decide how a dispute ends. A number here and a number in the text below are the same number.

Read the middle column slowly. The annual Curaçao fee for a B2C operator is EUR 47,450, made up of a EUR 24,490 licence fee to the National Treasury and a EUR 22,960 supervisory fee. Anjouan charges EUR 17,828 for issuance and the same for annual renewal. Kahnawà:ke's annual client provider authorisation fee is USD 20,000, with application fees rising on 1 January 2027 from USD 35,000 to USD 40,000. These are the numbers that fund the supervision, and they are small enough that one moderately successful site covers them many times over. Supervision is not funded by hope; it is funded by fees, and modest fees buy modest supervision.

What Being Outside the Scheme Really Changes

Here is the thing this topic turns on, and it is the identity check. Everything else — the licence, the bonus, the payout time — follows from when and how an operator is required to establish who you are.

How verification works at a British-licensed site

UK rules require the identity check before a customer is permitted to gamble. Licence condition 17, introduced on 7 May 2019, requires licensees to obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the information must include name, address and date of birth. In practice most of this happens invisibly, by matching an account against databases such as credit reference agencies and the electoral roll. In that case no documents are needed at all. The Commission expects identity and age checks to be brought forward to before a customer deposits or stakes, and has said that onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential — is not sufficient.

The second time round it is easier, not harder. Once an operator has established a customer's identity, ongoing due diligence only needs updating when circumstances or personal details change. Anti-money-laundering rules under the Money Laundering Regulations 2017 require identification and verification in remote casinos when a customer deposits, or withdraws funds or winnings, amounting to €2,000 or more, and linked transactions count together. That threshold explains most of the document requests people meet after a good run.

How it works at an offshore site

Offshore, the same check exists but the clock runs differently. Kahnawà:ke requires a licensee's relationship with players to be contractual and free of terms that are unfair or unreasonable. Anjouan requires operators to segregate player funds, use random number generators certified by an approved independent testing facility, and implement AML and age verification controls. Anjouan also requires licensees to designate an approved alternative dispute resolution provider and to name it in player-facing terms, with complaints expected to be resolved within 30 days before escalation. The four providers currently approved by Anjouan Gaming are EGIS ADR, Axion ADR, iGaming ADR and one named licensee.

Two of those requirements — certified RNGs and segregated funds — are real. The difference is enforcement. There is no equivalent of licence condition 17.1.1, under which a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier.

The warning signs

The Commission's guidance is unusually blunt on this. It states that it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, or to place the operator's commercial interests above their customers', and that it does not consider it fair, transparent or necessary to delay or prevent withdrawals purely for customer-interaction purposes. Where an operator has no regulatory concerns about a customer, the Commission says there is no valid reason to delay the payout.

The warning signs, then. A site that asks for documents only at withdrawal, never at deposit. A site whose terms state that withdrawals may take "up to" some generous number of days and that the operator "reserves the right" to void winnings. A site with no named ADR provider in its terms, or one whose named provider is not on the regulator's published list. And a site whose certificate of operation does not verify against the regulator's own register — the Curaçao authority requires a certificate of operation seal to redirect to its own verification domain, and says that if the certificate behind the seal shows a different domain from the site being visited, the certificate belongs to another operator entirely.

Five Signs an Offshore Operator Can Be Trusted

I am not going to pretend there is a shortcut. There is a short list, though, and each item can be checked in minutes. The first sign is the licence; the rest are how a licence behaves under pressure.

The licence verifies on the regulator's own register

Not on the operator's homepage, and not from a badge image. The Curaçao authority issues a Certificate of Operation seal only to B2C operators and only for an approved, registered player-facing domain, and clicking it must redirect to the regulator's verification site. If the seal's design, colour or format differs, the site is not authorised. Anjouan's framework states that licence certificates carry a unique licence number and a QR code linking to the public register, and that certificates which cannot be verified through that register should not be relied upon. On Kahnawà:ke, the Logo Certificate Program, effective 15 January 2010, lets a player click the Commission's logo on a site to generate a Certificate of Good Standing confirming whether that site holds a valid permit.

The terms name a real dispute route

Anjouan requires a named, approved ADR provider in player-facing terms. Kahnawà:ke employs a full-time Dispute Resolution Officer. Check that the provider named in the terms is on the regulator's published list, not a private complaints inbox.

Player funds are segregated and the rating is disclosed

Both Curaçao and Anjouan publish standards requiring player funds to be kept apart from operational funds. On the British side the disclosure is formalised: operators must select one of three customer-funds protection ratings — "not protected", "medium protection" or "high protection" — state which applies in their terms, and an operator rated "not protected" must remind the customer every six months that their funds are not protected in the event of insolvency. That reminder is a useful yardstick: an offshore operator that volunteers the same information unprompted is telling you something.

Withdrawal terms carry no cap and no discretion clause

The fair-terms principle is that operators may not impose a maximum limit on the amount a consumer may withdraw from their deposit balance, and should not use terms giving them sole discretion to void or withhold winnings. The Commission's published example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". Search the offshore terms for "reserves the right", "sole discretion", "maximum withdrawal" and "up to X days". Each hit is a decision made in advance against the player.

The bonus maths is published in full

Wagering multiple, contribution weightings, maximum bet while wagering, maximum cashout, and the time limit. A site that puts all five in one table is a site that has stopped hoping nobody reads them.

How to Judge an Offshore Casino in Six Steps

If the checks above come back clean, this is the order I would work through. Every step is something anyone can do from a laptop, and nothing here involves circumventing anything.

1. Verify the licence against the regulator's register, not the site's footer. The regulator's list is the only version that cannot be edited by the operator, and both Curaçao and Anjouan now publish verification paths precisely because forged seals are common.
2. Read the withdrawal section of the terms before depositing. The Commission says it is not acceptable for operators to introduce friction at withdrawal rather than at deposit. The same test works offshore: what the terms say about withdrawal is what the operator believes it can get away with.
3. Check the bonus terms for the five disclosure points. Wagering multiple, game contribution weightings, maximum bet, maximum cashout and expiry. Kahnawà:ke-style jurisdictions typically run 35x to 50x on welcome bonuses and 40x to 60x with a cashout cap on no-deposit offers, against a British cap of ten times.
4. Confirm the payment route is a regulated one. Under licence condition 5.1.2, effective 31 January 2024, British licensees may accept payment only by a method whose provider is a payment service provider within the Payment Services Regulations 2017. Offshore operators are not bound by that, which is exactly why the question matters.
5. Set up a bank gambling block as well as any site limit. The Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Blocks are applied at card level, so each card needs activating, and most banks use a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again.
6. Decide what happens if the money does not arrive. If the operator is offshore there is no complaint to the Commission, because the Commission is a regulator and not an ombudsman and cannot resolve individual disputes or recover money. The route runs through the operator's own procedure, then its named ADR provider. If none exists, there is no route.

Payouts, Delays and the Terms That Build Them In

Withdrawal speed is where the offshore question has a measurable answer on the British side, and the numbers are better than the reputation suggests. Gambling Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators in that period. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours.

Against that, the complaint data is stubborn. The Commission's Contact Centre receives over 6,000 calls annually, and problems with withdrawals from accounts were the number one topic raised by consumers; by July 2024 the Commission said it continued to receive around 2,000 complaints a year about withdrawal delays, still the number one subject. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed that it is quick and easy to withdraw and collect winnings, with 33 per cent neutral and 18 per cent disagreeing.

Enforcement has followed. On 21 October 2026 the Commission announced that an operator running seven websites would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals. The specific failures included a term stating customers could request only one withdrawal at a time and could not request another until the original was authorised, found unfair under the Consumer Rights Act 2015, and manual review of every fifth or tenth withdrawal for some customers that led to extra information being required before withdrawals were processed.

Note what that settlement establishes. Those terms were unlawful in Britain, and the operator paid for them. The identical clauses sitting in an offshore operator's terms are not unlawful anywhere, because no one with jurisdiction has said so. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and one of the most common dispute types referred to ADR providers. The mechanism is familiar: verification deferred to the withdrawal moment.

Self-Exclusion Reaches and Limits

Self-exclusion under GamStop Online blocks a person from signing up for or using online accounts with gambling companies licensed in Great Britain, and it holds for its full term. Registration blocks gambling with all online gambling companies licensed in Great Britain for 6 months, 1 year, 5 years or 5 years with auto-renewal. Signing up takes only a few minutes, but it can take up to 24 hours for the block to become effective.

Then the part that matters most here: once registered, a person cannot cancel or deactivate the registration during the exclusion period, and the exclusion stays in place after the end of the chosen period unless the person contacts GamStop to remove it. If it is not deactivated, the scheme holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Registrations cannot be removed early; the scheme's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends.

An offshore casino is not a way round that. It is simply a place the scheme does not reach, which is a different thing from a place where the exclusion does not apply. The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded and may have inadequate social responsibility and anti-money-laundering controls. In 2025 the Commission reported that over a quarter of complaints reaching its Contact Centre concern identity verification. The two facts sit next to each other for a reason.

Where the scheme does reach, it reaches properly: the licence conditions require licensees to close any customer account of an individual who has entered a self-exclusion agreement and return any funds held, and state it is not sufficient merely to prevent the individual from withdrawing funds while still accepting wagers.

The Scale of the Offshore Market

The market is smaller than the rhetoric on either side. The Commission's analysis published 5 November 2026 estimates that, across the whole population including non-gamblers, 0.6 per cent of respondents engaged with illegal gambling websites in the past 4 weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among those who had gambled online in the past 4 weeks, the estimate is 2.5 per cent, with an additional 1.5 per cent in the past 12 months.

The Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers identified in September 2026, 4 per cent less than the previous three-month average but 4 per cent more than September 2025. Over the monitored period from May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain.

Wider estimates vary enormously, and it is worth saying so rather than picking the largest. Market-intelligence firm H2 Gambling Capital estimates the amount staked with illegal operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent in 2019 to 92 per cent in 2025. A study by Frontier Economics for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, equal to 2.1 per cent of the £128 billion staked with GB regulated remote casino, betting and bingo operators. Yield Sec analysis for the Campaign for Fairer Gambling put the GB online market at £8.8 billion gross gaming revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. These do not reconcile, and anyone quoting one of them as settled fact is selling something.

Bonus Terms Offshore, and Why the Ten-Times Cap Exists

The single most useful number in this market is ten. Since 19 January 2026, the Commission's rules on rewards and bonuses require that licensees must not apply wagering requirements over a maximum of ten times. The Commission consulted on an outright ban or a cap at 1, 5 or 10 times, and chose 10, judging that licensees would otherwise be highly likely to introduce terms preventing customers cashing out bonuses. Its own words: the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements".

The same code bans including more than one type of gambling product within an incentive. The ban covers mixing products within an individual promotion, including where terms are linked and shared, and applies irrespective of whether a stake is required. A "bet £5 and get £10 free bet" offer is compliant because it does not mix product types between the initial activity and the prize; "bet £5 to get 20 free spins" is not.

Offshore, none of that applies. Typical welcome-bonus multipliers run at 35x to 50x, and no-deposit bonuses at 40x to 60x with a €50 to €100 cashout cap. Contribution weightings do the real damage: one offshore operator's published chart gives slots and specialty games 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer games and jackpot titles 0 per cent. A player grinding a roulette bonus is earning wagering credit at a twentieth of the rate the headline number implies.

Then the caps. One operator reserves the right to limit the amount withdrawable from winnings generated with bonus funds to 300 per cent of the credited bonus amount, with any excess voided. Another caps the maximum bet while wagering at €5 for regular players and €10 for VIP players, rejecting any bet above the limit, with the stated consequence of breach being account closure, forfeit of the bonus and forfeit of all winnings generated during wagering. In Britain, guidance says operators may not impose any maximum limit on the amount a consumer may withdraw from their deposit balance, and un-staked deposits remain the customer's.

The bonus-abuse clauses deserve their own paragraph, because they are where discretion gets written into the contract. One operator's terms describe prohibited play counted as abuse: low-margin, equal or risk-free bets, moving from a low-weighted game to a high-weighted one after a large win, and delaying free spins or bonus features until after wagering is met. British guidance requires that terms setting out promotional play restrictions specify all prohibited types or patterns of play, and not reserve sole discretion for the operator to decide when play breaches them. Offshore, the discretion clause is usually the whole clause. A £170,000 fine was levied in July 2025 on an operator for, among other things, a bonus term stating that it had the right at its own discretion to close accounts or forfeit winnings. That term is the sort that survives comfortably outside British jurisdiction.

KYC, Source of Funds and the Slow Cheque

Anti-money-laundering rules are where the offshore and British experiences converge most, because the Financial Action Task Force standard underneath is similar everywhere and the €2,000 threshold appears in both the UK's Money Laundering Regulations 2017 and the EU's Anti-Money Laundering Regulation. What differs is the ceiling on how far the operator can push.

In non-remote British casinos the threshold approach for tokens requires identification and verification when a customer purchases or exchanges tokens worth €2,000 or more; the gaming machine approach requires it when a customer pays €2,000 or more for use of machines or collects winnings of €2,000 or more. Remote casinos work on deposits and withdrawals at €2,000. The Gambling Commission's 2026 risk assessment rates the remote casino sector as high risk for money laundering, unchanged from the previous rating, and reports an increase in the scale and sophistication of attempts to bypass checks using false documentation, deepfake videos and face swaps generated by AI. The Commission also flags smurfing — numerous low-level transactions designed to evade the threshold — as a medium-likelihood, high-impact risk. On the source-of-funds side, companies may obtain bank statements to check that funds are legitimate, and may ask for information explaining irregular income patterns such as a pending house sale.

Where a British operator gets it wrong, the customer has recourse. Where the delay is caused by insufficient identity documentation, the operator may be in breach of licence condition 17 and may face regulatory action, and the operator cannot confiscate funds on the basis that ID has not been provided. Offshore, the same check is performed by a business whose regulator publishes standards but seldom publishes enforcement.

One practical consequence is worth spelling out. Under British rules a financial vulnerability check may use only publicly available information about risk flags such as a bankruptcy order, a County Court Judgment, an Individual Voluntary Arrangement, a High Court Judgment, an Administrative Order or a Debt Relief Order. That is a deliberately narrow list, and it is the kind of limit that only exists where someone has argued about it in public.

Why the Newest Casinos Are Rarely the Best

New sites arrive constantly, and the pattern is predictable. A fresh domain, a generous-looking offer, a Curaçao sub-licence converted into whatever the current regime issues, and a terms page copied from a template. The Curaçao regulator extended provisional licences issued when the LOK came into force for a further six months, until 24 December 2025, and said operators had to be fully compliant to be eligible for a full licence — which means the register has been churning. Anjouan's regulator stated on 10 June 2026 that an Anjouan Internet Gaming Licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world", and that no licensing authority can exempt an operator from local law where local authorisation is required.

The older jurisdictions have their own history. Kahnawà:ke's Commission has regulated interactive gaming since 1999; its regime issues a single Interactive Gaming Licence, held by one entity at a time and held by Mohawk Internet Technologies since 1999, plus Client Provider Authorizations, Key Person Licences and Live Dealer Studio Authorizations. It also suspended one client provider authorisation effective 29 September 2026 following a show cause notice, which is what enforcement looks like when it happens at all.

Newness is not itself a warning sign. A thin terms page, no verifiable certificate and no named ADR provider are — and those appear just as often on a decade-old domain as on a new one.

Where the Money Sits When Something Goes Wrong

Customer funds are the quiet part. In Britain, funds held by a remote operator must be kept in a separate client bank account, separate from the operator's business accounts, with "customer funds" defined to include cleared funds deposited for future gambling, winnings or prizes left on deposit, and crystallised but unpaid loyalty or bonus money. Money staked within an open bet is not customer funds and is not covered by any insolvency arrangement.

There is a hard limit to that protection, and it is worth stating without decoration. Keeping customer funds in a separate client account does not mean customers will get their money back if the operator becomes insolvent, and gambling businesses are legally allowed to hold customers' money in overseas bank accounts. A separate account is a bookkeeping fact, not a guarantee.

Offshore, the same segregation standard is published for both Curaçao and Anjouan. Whether it is audited is the open question, and the honest answer is that nobody outside the operator and its regulator knows.

Comparing Payment Methods

Payment methods shape how quickly a withdrawal becomes money in hand, and the fee schedules are public. Faster Payments is the workhorse: the scheme maximum is £1 million per transaction, raised from £250,000 on 10 February 2022, though that is a scheme ceiling and not an entitlement, since individual banks set lower per-payment limits. Over 90 per cent of Faster Payments transactions complete in under two seconds, and there is no minimum transaction size. Visa Direct's Fast Funds service processes transactions in real time and funds can be available within 30 minutes of approval.

E-wallets charge for the last leg. Skrill applies a fee of 2.80 per cent of the amount withdrawn, with a minimum charge of EUR 3.50, for transfers from a Skrill account to a bank account, effective 12 January 2026. Neteller charges 2.80 per cent of the amount withdrawn, or a minimum of USD 3.50, on the same basis from the same date. Both levy a monthly service fee of EUR 5.00 or USD 5.00 if the account is not used at least once every six months, and both apply a 4.49 per cent foreign-exchange fee where conversion is needed. MiFinity charges €1 for VISA EEA withdrawals and €2 for Mastercard Interregional, with a crypto withdrawal fee of 1.8 per cent. PayPal charges no fee to withdraw a balance to a UK bank account when no currency conversion is involved, though a failed withdrawal caused by incorrect bank details attracts a £0.50 bank return fee.

Crypto is faster and less forgiving. A Litecoin block arrives every 2 minutes 30 seconds on average, giving roughly 15 minutes for six confirmations, though only about 55.43 per cent of modelled six-confirmation spans actually complete within 15 minutes. Solana is faster still. Bitcoin is the slow one: a block every 10 minutes on average, with roughly 63 per cent probability of a block inside any 10-minute window, and most exchanges requiring six confirmations. Fees on Ethereum vary with network load — 21,000 gas for a standard transfer, priced at roughly $0.005 to $0.009 on 3 November 2026 — while a USDT transfer on TRON to an existing wallet consumes about 65,000 Energy and burns roughly 13 TRX without staked Energy. All of that is chain mechanics, and all of it applies identically to a British and an offshore site. What differs is what happens after the operator presses send.

Can a Site Block You If You Are on GamStop?

An offshore site has no access to the register and no licence obligation to check it, so the block that operates automatically at a British-licensed operator does not operate there. That is the mechanical answer, and it is not an argument for anything. A British-licensed operator must check its entire customer base for registration at least every 24 hours, which is why the block holds even at a site where an account was opened before the exclusion began.

A handful of offshore operators voluntarily run checks against the register, and some set their own self-exclusion tools with terms that make exclusion permanent and irrevocable — Kahnawà:ke, for instance, states that a player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity selected by the Commission. That is a stern rule, and it is a private one, enforced by a contract rather than by a regulator's licence condition.

The Direction of Travel in 2026

The British side keeps tightening, and the offshore side keeps consolidating. Curaçao's supplier licensing and supplier registration become fully mandatory and enforceable from 24 December 2026, at the end of a two-year transitional period, and suppliers established outside Curaçao that provide critical services will have to register. That matters to players more than it sounds: a licensing regime that registers the software suppliers behind the sites has, for the first time in that jurisdiction, a lever over the product itself.

At the same time the Commission announced on 7 July 2026 that financial risk assessments will be introduced in stages, starting with the largest operators at £5,000 net deposits in a rolling 24-hour period for customers aged 25 and over, and £2,500 for under-25s, falling at the final stage to £1,000 in 24 hours or £3,000 over 90 days for adults, and £750 or £2,000 for under-25s. The first-stage threshold is a spend pattern fewer than 0.5 per cent of customers exceed, and the pilot found 97 per cent of customers spending above the thresholds could be assessed frictionlessly. During the early stages no enforcement action will be taken for a failure to act following an assessment, though all other licence requirements still apply.

Read those two paragraphs together and the shape of the market is obvious. The British experience is becoming more frictionless at onboarding and more intrusive at the top end. The offshore experience is becoming more formal without becoming more accountable.

Casinos With PayPal and Low Deposits

Two questions come up constantly and both have short answers. On PayPal: a personal PayPal UK account incurs no fee to withdraw a balance to a bank account where no currency conversion is involved, and PayPal is a regulated payment service provider. Under British licence condition 5.1.2, effective 31 January 2024, licensees may accept payment from Great Britain customers only by a method whose provider is a payment service provider within the Payment Services Regulations 2017. Offshore operators are not bound by that condition, which is the substantive difference — not whether the wallet appears on the banking page.

On low deposits: a £10 minimum is common on both sides of the line and tells you nothing about the operator. What tells you something is whether the withdrawal minimums are set just as low, and whether the payment method used to deposit is the same one the operator insists on paying back to. The Commission's guidance requires players to be informed they are allowed to withdraw their deposit balance at any time, including when a bonus is pending or active, and must be allowed to withdraw without restriction except as necessary to comply with general regulatory obligations. Operators are not prevented from charging a cost-reflective processing fee for withdrawals, or reasonably limiting the size or number of separate withdrawals, provided the term is fair and transparent, is made clear before a deposit, and the charge does not exceed the direct cost of processing.

No Deposit Bonuses Outside the British Rules

A no-deposit bonus is the purest expression of the difference. In Britain, significant conditions for free bets and bonuses — which can include deposit, wagering or withdrawal requirements — must be made clear, with full terms easily accessible, usually one click away. Offshore, a no-deposit bonus is frequently a net-negative instrument: one operator states that no-deposit bonuses are not to be redeemed consecutively, and that redeeming two or more in a row can result in removal of subsequent winnings. Another states that if a deposit is made while a no-deposit bonus is active, the wagering requirements and maximum allowed cashout of the no-deposit bonus still apply, which is a trap for anyone who assumed a fresh deposit resets the terms.

And the classic offshore shape: a bonus amount that can be used for wagering but can never itself be withdrawn, removed on cash-out. British rules ended the practice behind that structure. LCCP guidance requires that wagering requirements must not apply to any play by a consumer with their deposit balance, that deposit and bonus balances must always be displayed separately, and that players must be allowed to withdraw their deposit balance at any time, including when a bonus is pending or active.

Licensing Law, in One Paragraph

It is worth being precise about the legal position, because it is frequently muddled. Section 33 of the Gambling Act 2005 makes it an offence for a person to provide facilities for gambling unless an exception applies or they hold an operating licence authorising the activity. On summary conviction it carries imprisonment for a term not exceeding 51 weeks, a fine not exceeding level 5 on the standard scale, or both, with a six-month term in Scotland. It is immaterial whether the facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK, and for remote gambling the section applies if at least one piece of remote gambling equipment used is situated in Great Britain, or if the person providing the facilities knows or should know that they are being used, or are likely to be used, in Great Britain.

The offence attaches to the operator, not the customer. The Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, including where the operator holds a licence in another jurisdiction. Sections 47 and 49 make it an offence to invite, cause or permit a child or young person to gamble, with narrow exceptions, confirming that the Act's general gambling offences attach to those who provide facilities rather than to adult consumers.

Enforcement is real but slow. In the quarter January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. In April to June 2026 it referred 366 websites, and in July to September 2026 it referred 1,835 websites and issued 546 cease and desist notices. Across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced, a total of one, in October to December 2025. The Commission's own assessment is that GEO IP blocking and registrar blocks are more effective than search-engine removals, because removing a site from search makes it harder to find but does not fully block access.

Complaints, ADR and What Happens at the End of the Line

The British complaint route is structured and free at the point of use. Social responsibility code provision 6.1.1 requires licensees to have arrangements for customers to refer any dispute to an ADR entity free of charge if it is not resolved within eight weeks of receipt, and a consumer must have gone through the operator's own complaints procedure first, with the operator able to issue a deadlock letter. ADR providers will not accept complaints about customer service issues, or about the refusal to accept a bet. Approved providers are ADR group, Pegasus ADR Service, one licensee, the Centre for Effective Dispute Resolution, eCOGRA, IBAS, ProMediate and Tattersalls Committee, and licensed operators may use only providers approved by the Commission.

The outcome data is instructive. eCOGRA's Great Britain report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which deposits and withdrawals accounted for 150 valid disputes, with an average time to resolve domestic disputes of 31 days and 17.8 per cent of completed disputes ruled in favour of the consumer. IBAS's report for the same period records 3,721 domestic disputes, of which 217 were categorised as banking and financial disputes, an average completion time of 20 days, and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25.

Read the numbers as a pair. The consumer wins roughly one dispute in six at eCOGRA and rather fewer at IBAS, and the operators pay up when they lose. An offshore operator that names an ADR provider is offering something structurally similar but without the licence condition behind it, and without a published compliance record. If none of it arrives, the same helpline is still there: the National Gambling Helpline on 0808 8020 133, free and open 24 hours a day.

A Closing View of the Best Casinos

The best non GamStop casino is the one whose licence you have verified on a regulator's own register, whose terms name a real dispute route, whose funds are segregated, and whose bonus maths is published rather than buried. Every one of those can be checked in an afternoon. None of them makes the site the equal of a British-licensed operator, because the licence conditions simply do not apply — no ten-times wagering cap, no ban on mixed-product promotions, no obligation to close a self-excluded account and return the money, no financial limit prompt before a first deposit. What has changed in the last few years is not that offshore sites became safer, but that the British baseline moved far enough ahead that the gap is now visible without a magnifying glass. That gap has a number attached, and the number is 3,140 — the cease and desist and disruption notices the Commission's Illegal Markets team has issued since April 2024 to sites operating without the licence the rest of the market pays for.

FAQ

What is a non GamStop casino?

It is an online casino licensed outside Great Britain — typically in Curaçao, Anjouan or Kahnawà:ke — which therefore does not participate in the national self-exclusion scheme, because the obligation to participate applies only to operators holding a Gambling Commission licence. Such a site is not licensed by the Commission and British gambling protections, including the ten-times wagering cap and the reverse-withdrawal ban, do not apply to it. It is not a route around a self-exclusion; it is simply outside the scheme's reach.

Are non GamStop casinos legal in the UK?

For the player, using one is not the offence. Section 33 of the Gambling Act 2005 makes it an offence for a person to provide gambling facilities without an operating licence, and it applies whether the facilities are provided inside or outside the UK where the equipment or the targeting reaches Great Britain. The Gambling Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, including where the operator holds a licence in another jurisdiction. The offence attaches to the operator.

Why do offshore sites ask for documents only when you withdraw?

Because there is no rule stopping them. British licence condition 17.1.1 states that a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested it earlier. Offshore, no equivalent exists, and the Commission has said it is not acceptable for operators to introduce friction at withdrawal rather than at deposit. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, which is what deferred checks look like from the outside.

Do non GamStop casinos pay out in a reasonable time?

Some do, and the terms tell you which. Peninsula-wide figures are hard to come by, but the British comparison is sharp: Commission data for June to September 2024 covering 44.2 million withdrawals by large online operators found 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. Operators have paid for breaching this — £900,000 in a regulatory settlement announced on 21 October 2026 for failures including unnecessarily delaying withdrawals. Outside British jurisdiction, no regulator imposes a limit on withdrawal days.

What can I check before depositing at an offshore casino?

Five things, each quick. Verify the licence certificate against the regulator's own register rather than a badge on the homepage. Confirm the terms name an ADR provider that appears on the regulator's approved list. Check for a maximum withdrawal clause or a "reserves the right" discretion clause in the terms. Read the bonus terms for wagering multiple, game weightings, max bet, max cashout and expiry. And check whether player funds are described as segregated.

What help is available if gambling stops being a choice?

The National Gambling Helpline is run by GamCare on 0808 8020 133, free, 24 hours a day, every day of the year, with live chat and WhatsApp on the same number. Callers in Wales can use 0808 2819 265. Beyond the helpline there is NHS treatment — the NHS National Gambling Clinic in London accepts self-referrals — and the statutory levy raised just under £120 million in its first year, ringfenced solely for research, prevention and treatment.

Does a GamStop exclusion stop an offshore casino accepting you?

Not mechanically. An offshore operator has no access route to the register in the way a licensed operator does, and no licence condition obliging it to check. British licensees, by contrast, must check their entire customer base for registration at least every 24 hours. The exclusion holds for its full term regardless, and stays in place afterwards until the person contacts GamStop to remove it — a block that does not follow someone to a particular website is not the same as a block that has expired.

Are the newest non GamStop sites better than older ones?

Rarely, and newness is not the signal. The Curaçao regulator extended provisional licences until 24 December 2025 and required full compliance for a full licence, so the register has been churning; supplier licensing becomes fully mandatory there from 24 December 2026. Anjouan's own regulator stated in June 2026 that its licence is not a universal authorisation and cannot exempt an operator from local law. A thin terms page, an unverifiable certificate and no named ADR provider are the things to look for, on a new domain or an old one.

The Last Word

The non GamStop casino UK market is not a secret and it is not a scandal; it is a parallel market with thinner rules, cheaper supervision and a complaints route that depends on the operator's goodwill rather than on a licence condition, and the ten-times wagering cap that took effect on 19 January 2026 is the clearest measure yet of the distance between the two.