Online Gambling Sites UK Licensing and Industry Figures Compared With Offshore

An online gambling site UK players can use lawfully holds a Gambling Commission licence. That licence carries identity checks, a self-exclusion scheme, a cap on bonus wagering terms and access to free dispute resolution. Offshore sites hold no British licence, so none of it applies. What follows compares the two on evidence, not on slogans.

I have covered this trade long enough to be tired of two opposite fictions. The first is that every offshore casino is a den of thieves; the second is that they are simply British sites with a friendlier paint job. Neither survives contact with the paperwork. What survives is a duller, more useful question: which rules actually bind the operator, and which protections exist only where a regulator with a statute behind it is watching.

British rules compare with offshore ones in one broad way. Great Britain is one of the few markets where the regulator writes down what a bonus term may say, how fast a withdrawal must be handled and who must sit on the self-exclusion register. Offshore rules tend to be lighter, differently enforced, and aimed at the operator's commercial comfort. That is not a moral distinction. It is an enforceable one, and enforceability is the whole of the argument.

So this page does three things. It sets out how many sites there are and how the British licence works. It puts the withdrawal and bonus numbers side by side, with the Commission's own figures and the offshore terms printed in the operators' own documents. And it describes what goes wrong — the delays built into terms, the identity checks that appear only when money leaves — because that is where a careful player does the judging. Practical checks, in other words, rather than a ranking. Self-exclusion, wherever it appears below, is a fact and not a tactic: a GamStop exclusion holds for its whole term and then stays in place until the person asks GamStop to remove it. One short note on the spelling: the scheme's name is GamStop, though it is often typed "gamestop".

How Many Online Gambling Companies Hold a British Licence, and How the Two Regimes Differ

The honest answer to how many online gambling sites are there in the UK is that no single number means much, because the market has two populations that are counted differently. British-licensed operators are named individually on the Commission's public register, which is why the Commission tells consumers to check a site there and to see whether the licensed activities and domain names match. Offshore operators are counted by whoever is selling something — a licence register read, an affiliate tracker. An aggregator reading the Curaçao register reported 704 licences held by 698 operators, of which 552 were active, as of a read at 03:30 UTC on 6 November 2026, a third-party figure rather than a Curaçao Gaming Authority publication.

The British population is also large in money terms. Total Great Britain gross gambling yield was £17.5 billion in the year to March 2026, a 4.4 per cent increase on the previous year, with the remote casino, betting and bingo sectors together producing £8.3 billion. A licence is not a formality: under section 33 of the Gambling Act 2005 it is an offence to provide facilities for gambling without one, and the Commission states plainly that a licence from another jurisdiction does not excuse operating here without a Commission licence.

The two regimes differ in four practical places:

• Where complaints go. British-licensed sites must be able to send a dispute to an approved alternative dispute resolution provider, free of charge, if eight weeks pass without resolution. Offshore, the route is whatever the licence and the terms say.
• What a bonus may say. Since 19 January 2026 British licensees cannot apply wagering requirements above ten times bonus funds, and cannot mix gambling products in one incentive. Offshore terms are unrestricted, and 25x to 60x is common.
• What happens to your money if the operator fails. British licensees must publish an insolvency protection rating — "not protected", "medium" or "high" — and a "not protected" operator must remind customers of that every six months.
• Who must be excluded on request. Every British-licensed online operator must participate in the national multi-operator self-exclusion scheme, checked against their whole customer base at least every 24 hours.

The Commission's Withdrawal Data as a Performance Benchmark

One figure does more work than the rest of this page. Gambling Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators in that period. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. That is the benchmark, and it is worth reading twice, because the Commission is not a cheerleader for the industry. Where an operator has no regulatory concerns about a customer, the Commission says there is no valid reason to delay the payout of a withdrawal.

The other side of the same ledger is the complaint file. Withdrawal problems were the number one topic consumers raised with the Commission's Contact Centre, and by July 2024 it continued to receive around 2,000 complaints a year about withdrawal delays — still the top subject. Complaints coded "withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Both things are true at once: the machine mostly works, and it is where the friction is deliberately placed that matters.

Three Papers That Decide What a British-Licensed Site May Do

The licence is not one document. Three things sit underneath it.

The LCCP. Licence conditions and codes of practice govern identity verification, fair terms, self-exclusion and complaints. Licence condition 17.1.1 is the one to know: a withdrawal request must not generate a demand for information the licensee could reasonably have requested earlier.

The Consumer Rights Act 2015. Terms must be fair. Licence condition 7.1.1 says so, and the Competition and Markets Authority's undertakings from its 2016–2019 investigation went further: no maximum limit on what a customer may withdraw, and no confiscating a balance for inactivity or for missing identity documents.

The self-exclusion rules. Social responsibility code 3.5.5 requires participation in the national multi-operator self-exclusion scheme, and the Commission introduced a requirement in April 2020 for operators to check their entire customer base against the register at least every 24 hours.

Differences in Comfort Across Four Offshore Regimes

Offshore is not one thing either, and treating it as a single bloc is where most commentary goes wrong.

Curaçao rebuilt its regime. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing authority and ending the old master-licence model; legacy "orange" sub-licence certificates ended on 15 October 2025. A B2C licence costs a one-time EUR 4,592 application fee and EUR 47,450 a year. Curaçao also publishes two seals, and the detail matters: clicking a Certificate of Operation Seal must redirect to the authority's certificate page, and if the certificate behind the seal names a different domain, the site is displaying someone else's paperwork.

Anjouan is cheaper and more contentious. Its published fees are EUR 17,828 for B2C licence issuance and the same for annual renewal. ABC News reported on 31 December 2025 that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; the same investigation reported a former attorney-general of the Comoros calling the licensing entity "an illegal entity". Anjouan Gaming responded on 10 June 2026 that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world".

Kahnawà:ke has regulated interactive gaming since 1999 and is the oldest of the four. It issues one Interactive Gaming Licence, held by a single data centre since 1999, plus Client Provider Authorizations — and its fees rise sharply on 1 January 2027, with the CPA application fee going from USD 35,000 to USD 40,000.

Malta is the most rigorous of the offshore options in supervisory terms, though a Maltese licence is not a British one. A B2C licence carries a EUR 5,000 application fee, a EUR 25,000 annual fee and 5 per cent gaming tax on revenue, with minimum share capital of EUR 100,000 for Type 1 and Type 2 licences. The authority also publishes a list of Unauthorised URLs and declares the Maltese licence claims on those domains false and misleading.

And then there is Costa Rica, which is not a licensing jurisdiction in the strict sense at all: the "data processing license" sometimes cited is not a licence, and a bill that would have created a real regime was rejected in early 2026.

What the Withdrawal Route Actually Looks Like, by Method

The table below compares withdrawal routes by method, using published figures from the payment providers' own schedules. A number here and in the text is the same number.

Why Delays Appear in Payment Timelines

Two mechanisms explain most slow payouts, and both are about timing rather than speed.

The first is identity verification arriving late. Under the money laundering regulations, remote casinos must identify and verify a customer when they deposit or withdraw funds or winnings amounting to €2,000 or more, and the threshold applies to linked transactions too. A British operator may verify identity with databases and never ask for a document. But over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, which is what happens when the request arrives only at the point of withdrawal.

The second is a term. One licensee agreed a £900,000 payment in October 2026 including failures over unnecessarily delaying consumer withdrawals: a term allowing only one withdrawal request at a time, and manual review of every fifth or tenth withdrawal for some customers.

The Rule Offshore Sites Are Not Bound By

The single thing the British offshore comparison turns on is the licence, and everything follows from it.

In Great Britain, licence condition 17 means identity is verified before a customer gambles, not when they try to leave with winnings. It works the same way the first time and every time after: the check is done at the door, and a term that requires fresh documents at withdrawal is not permitted when the operator could reasonably have asked earlier. Note also that the reverse withdrawal — the button that let a player cancel a payout request and spend the money — was banned outright for remote operators by requirement 14B on 31 October 2021. There is no such rule offshore.

The warning signs, in order of how often I see them: a term requiring documents before withdrawal that were never requested at sign-up; a maximum cashout clause; a "sole discretion" power to void winnings; wagering requirements above ten times; and a withdrawal condition that the account must first be verified to a standard that only appears after a win.

How Many Sites Are Offshore, and Who Uses Them

Not many people, on the Commission's own measurement. Its analysis published 5 November 2026 estimates that across the whole adult population, including non-gamblers, 0.6 per cent engaged with illegal gambling websites in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among respondents who had gambled online in the past four weeks, the estimate is 2.5 per cent, with 1.5 per cent more in the past year. The same publication recorded 586 illegal gambling websites accessible to British consumers in September 2026.

The disruption figures are the interesting part, because they show what actually works. Since April 2024 the Commission's Illegal Markets team issued 3,140 cease and desist and disruption notices and secured 287,961 URL removals. Registrar blocks and website suspensions produced the largest average fall in engagement — 91 per cent each — ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent and Google removal at 30 per cent. The Commission makes the point itself: search-engine removal makes a site harder to find but does not fully block access. Engagement across 160 illegal websites fell by an average of 32 per cent after disruption action.

What the Checks Cost Offshore Sites Nothing

Here is the sting. An offshore operator's licence obligations usually do not include a £5 per spin stake limit for adults, a £2 limit for 18 to 24 year olds, a ten-times wagering cap, a credit card ban, monthly prompts to review a financial limit, or mandatory participation in a self-exclusion register. Those are British costs, and they are why the terms differ. Curaçao, to its credit, requires operators to segregate player funds, certify random number generators with an approved testing facility and run age verification and anti-money laundering controls. Anjouan requires a designated alternative dispute resolution provider, with operators expected to resolve complaints within 30 days. Kahnawà:ke requires a player to be able to set limits including zero, and its voluntary self-exclusion is permanent and irrevocable — a stricter promise than the British scheme makes.

None of that is a British licence. The protections above — the ADR route, the ten-times cap, the stake limits, the insolvency rating, the shared register — exist because a regulator with statutory power enforces them. Offshore, they exist only where a lighter authority enforces them and where the operator has chosen to write them down. Which is why the practical question is not "which jurisdiction sounds respectable" but "what does this site's own term sheet promise, and who can make it keep the promise".

Five Signs a Site Can Be Checked Before You Trust It

These are checks, not endorsements. Each one is a document or a page anyone can look at, and each takes a few minutes.

The Licence Is on the Public Register, With the Right Domain Name

Start with the Commission's register. A British licence entry tells you the licensed activities and the domain names attached to them, and the whole point of checking is to see whether the site in front of you matches what the register says. A licence claimed in a footer is a logo; a licence entry that names the domain is a fact.

Quick check: open the register, search the operating company name, and compare the licensed domains with the address bar.

The Bonus Terms Are Readable in Full, One Click Away

British licensees must publish the significant conditions of a promotion transparently and prominently, and where displayed online, in full no further than one click away. Offshore, the terms are the whole game and there is no cap on the multiplier. If the wagering figure is not visible without a search, that is the answer.

Quick check: count the clicks to the full terms, then find the wagering multiplier and any maximum cashout clause in writing.

The Identity Request Arrives Before the Win, Not After It

This is the cleanest test in the whole market. British rules forbid a withdrawal request generating a demand for information the operator could reasonably have asked for at the start. Over a quarter of complaints to the Commission are about identity verification, which tells you how commonly the request is saved for later.

Quick check: before depositing, read what documents the site says it may ask for and when — a site that names them up front is a site that has thought about it.

There Is a Named Dispute Route, Free to the Customer

British licensees must let a customer refer a dispute to an approved alternative dispute resolution provider if eight weeks pass without resolution — and must complete their own complaints process within that window. The approved list includes gambling specialists. eCOGRA's report for the year to 30 September 2025 records 911 disputes received, of which 150 valid disputes concerned deposits and withdrawals, with 17.8 per cent of completed disputes decided for the consumer. IBAS, over the same period, recorded 3,721 domestic disputes and reported 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25.

Quick check: find the ADR provider named in the terms, and confirm it appears on the Commission's approved list.

A Payout Test Ends in Money, Not Excuses

The Commission's benchmark is the number to hold a site against: 96.3 per cent of withdrawals cleared automatically across 44.2 million withdrawals in four months. A site that treats every payout as a project is not operating to that standard, whatever its licence says.

Quick check: read how the withdrawal will arrive and what could stop it, then check that the method and the fee were described before the first deposit.

A Sensible Order of Operations, in Six Steps

The sequence matters more than any single check. Doing these in order costs nothing and rules out most of the expensive mistakes.

1. Read the licence entry before the welcome offer. Find the operator on the Commission's register and confirm the domain matches. Reason: a licence that does not name the domain tells you nothing about the site you are looking at.
2. Find the wagering multiplier and any maximum cashout clause in the full terms. Reason: these two numbers decide whether bonus winnings are ever withdrawable, and offshore terms often run 25x to 60x with a cashout cap.
3. Check the identity documents policy before the first deposit. Reason: the request that arrives only at withdrawal is the most common complaint in the market, and it is avoidable at this stage.
4. Confirm the withdrawal method, fee and any stated timeframe. Reason: Skrill and Neteller charge 2.80 per cent with a minimum, and a cost-reflective fee must be clear before you deposit, not after.
5. Check the insolvency protection rating in the terms. Reason: a separate client account does not mean money comes back if the business fails, and a "not protected" rating means exactly that.
6. Know the exit route before you need it. Reason: the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year. Callers in Wales are given 0808 2819 265. GamCare also runs live chat and WhatsApp on the same number.

Two of those deserve a second look. On self-exclusion, the fact is plain: a GamStop registration blocks gambling with every online operator licensed in Great Britain, is free, takes a few minutes to set up and can take up to 24 hours to become effective. It cannot be cancelled during the term, and it stays in place after the chosen period ends until the person contacts GamStop to remove it. An offshore site is not a way round that, and the Commission issued an industry warning notice on 20 January 2025 about casino games appearing on unlicensed websites that often target people who have self-excluded. On the paperwork, the figures speak for themselves: 614,738 consumers were on the register as of July 2026, and more than one in two had chosen the maximum five-year exclusion.

Questions About Online Gambling Sites in the UK

Are the safest online gambling sites uk-based, or can an offshore site be equally safe?

Safe is not a of a domain's postcode. A British licence comes with enforceable obligations: an approved dispute route, a ten-times wagering cap, a withdrawal rule that blocks late document demands, and an insolvency protection rating that must be published. Offshore, the equivalent protection depends on the jurisdiction and the operator's own terms. Malta publishes an Unauthorised URLs list; Curaçao publishes two seals with a verification redirect. Weaker regimes publish less.

How many online gambling sites are there in the UK?

No single figure is reliable, because the two populations are counted differently. British-licensed operators appear individually on the Commission's public register with their licensed activities and domain names. Offshore counts come from licence registers: an aggregator read of Curaçao's register reported 704 licences held by 698 operators, 552 of them active, at 03:30 UTC on 6 November 2026. Separately, the Commission recorded 586 illegal gambling websites accessible to British consumers in September 2026.

Do new online gambling sites uk players see each year work the same way as older ones?

The obligations are the same on day one, because a licence is a licence. What differs is operational maturity. A newer site may verify identity electronically and pay out in minutes, or it may still be learning the rules on identity checks and withdrawal friction. Two dates are worth knowing: the ten-times wagering cap and the ban on mixed-product incentives came in on 19 January 2026, so a bonus written before then may still be in circulation.

What are the top 10 online gambling sites uk comparison pages actually comparing?

Usually not the thing that matters. A ranking by brand, or by welcome offer size, tells you nothing about the four numbers that decide whether money can be taken out: the wagering multiplier, any maximum cashout clause, the identity-check policy and the withdrawal timeframe. The Commission's own benchmark is 96.3 per cent of withdrawals cleared automatically across 44.2 million withdrawals in four months to September 2024.

Why is a withdrawal held for identity checks at some sites and not others?

Because the operator chose to take the check at withdrawal rather than at the door. British rules require identity to be verified before a customer gambles, and licence condition 17.1.1 forbids a withdrawal request creating a demand for information the operator could reasonably have asked for earlier. The money laundering threshold for remote casinos is €2,000 for deposit or withdrawal, and it catches linked transactions too.

Are there online gambling sites in the UK that a self-excluded person can still use?

Only unlicensed ones, which is precisely what the register and the warning notices are about. Every operator licensed in Great Britain must participate in the national self-exclusion scheme and must check its entire customer base against it at least every 24 hours. A GamStop registration holds for its full term and then remains until the person asks GamStop to remove it. Nothing removes it early.

The Licence Is the Whole of the Argument

Strip away the offers and the slogans and the comparison reduces to one line: British rules compare with offshore ones by being enforceable, with a named regulator, a published benchmark and a fee for breaking it — so the only question worth asking about any site is which set of rules binds it. Two numbers close the case for me. Of 44.2 million withdrawals by customers of large online operators between June and September 2024, 96.3 per cent cleared automatically. And over a quarter of the complaints reaching the Gambling Commission's Contact Centre are about identity verification — the check that British rules say should have happened at the door. Anyone who needs support can call the National Gambling Helpline, run by GamCare, free on 0808 8020 133, 24 hours a day, every day of the year; callers in Wales are given 0808 2819 265.