A UK gambling app is an app run by an operator holding a Gambling Commission licence, which must verify identity before it lets anyone stake and must return whatever is staked plus winnings. An offshore app, however polished, sits outside that system: its licence comes from elsewhere, British protections do not apply, and the money is harder to recover.
Everybody in Britain now wants to describe their business as an app. Bookmakers do it, bingo halls do it, and a great many websites with no British licence whatsoever do it, because "app" sounds like software rather than gambling, and software sounds harmless. I have been reading licence registers and complaint files for long enough to find the word almost useless as a guide. What matters is not the icon on a phone's home screen but who signed the licence the operator holds, and what that licence obliges it to do when a customer wants money back.
The Club's angle runs underneath the whole subject: self-exclusion here works, and it lasts. A British app has to check its entire customer base against Gamstop Online at least every 24 hours — a requirement in force since April 2020 — so an exclusion follows the customer into every licensed app in Great Britain, including one opened five minutes ago. An offshore app has no such obligation. A person on the register can be back on an offshore casino the same evening, and the Gambling Commission has said as much in its own notices. So this article takes the boring view: judge an app by its licence, by how it handles a withdrawal, and by what happens to a self-excluded customer who tries to sign up.
Table of Contents9
- British Licence First, Everything Else Second
- The Licence, the Table of Numbers
- Why the Licence Shows Up as an Identity Check
- Five Signs an App Can Be Trusted
- How to Check an App Before Depositing
- Offshore Apps and Their Position Outside the System
- Games, Stakes and a Number I Would Not Bet Against
- What Are the Best UK Gambling Apps
- The Short Version
British Licence First, Everything Else Second
The most common question in this market is which gambling app is best, or what are the best UK gambling apps — usually meant as which one pays out fastest. On the numbers, the honest answer is that British-licensed apps are much of a muchness on speed, and the thrills come from somewhere else. The Gambling Commission looked at 44.2 million withdrawals by customers of large online operators between June and September 2024: 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent took up to 48 hours. A British app that made a business of stalling its own payouts would be briefing the regulator about itself. What separates operators is not the queue, it is the paperwork they can insist on before the queue moves at all.
Something close to half of that paper trail is the licence. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission has stated that this includes an operator licensed in another jurisdiction but trading into Great Britain without a Commission licence. Two things follow, and both matter more than any app's user interface. First, an unlicensed app is not an edgy alternative, it is on the wrong side of a statute that carries up to 51 weeks' imprisonment on summary conviction. Second, the protection that a licence buys a customer is not abstract: it is licence conditions with numbers attached, enforced by a body that has a record of suspending licences. On 3 April 2020 the Commission suspended the licences of two online operators for failing to integrate the self-exclusion scheme by the deadline a few days earlier. That is what a licensing regime looks like when it bites.
Offshore licensing is a genuine market, and it is worth understanding a little of it, if only to see how thin a claim to respectability can be. Curaçao replaced its old master-licence model with direct licensing under the National Ordinance on Games of Chance, in force from 24 December 2024, and the Commission's own research counted 704 Curaçao licences held by 698 operators as of a read of the public register on 6 November 2026 — an entry in a third-party tracker rather than a regulator's press release, so take it as an indication. A Curaçao B2C licence costs a one-off application fee of EUR 4,592 and a total annual fee of EUR 47,450. An Anjouan B2C licence is EUR 17,828 to issue and the same to renew. Malta charges a non-refundable EUR 25,000 annual licence fee and takes 5 per cent gaming tax. Against that, the Gambling Commission's requirements are not a fee, they are a system: identity checks before a stake, fund protection rules, a complaints route with an eight-week clock, a mandatory contribution to a national self-exclusion scheme. Fewer rules at a lower price is the deal, and it is the whole of the deal.
Malta deserves its own sentence, because it is the one offshore licence that is genuinely supervised rather than merely issued. The MGA publishes a list of Unauthorised URLs declaring that any site on it referring to a Maltese licence is misleading, and it operates its own complaints process. Even so, a Maltese licence is not a British one. It does not put an operator inside Gamstop Online, does not oblige it to run its withdrawals past British licence conditions, and does not give a British customer a route to a British-approved alternative dispute resolution provider.
The Licence, the Table of Numbers
The cheapest way to see the difference is to put the licence types side by side. Every figure below comes from the licensing body's own published terms or, for the Gambling Commission, from the licence conditions and codes of practice in force from 29 July 2026.
| What governs the app | UK Gambling Commission | Malta (MGA) | Curaçao (CGA) | Anjouan |
|---|---|---|---|---|
| Who may offer it to British customers | Only the licence holder; offering without one is an offence under section 33 | Outside GB, unless also UK-licensed | Outside GB, unless also UK-licensed | Outside GB, unless also UK-licensed |
| Main cost of the licence | Statutory levy, 1.1% of previous-year GGY for online operators | EUR 5,000 application, EUR 25,000 annual fee, 5% gaming tax | EUR 4,592 once, EUR 47,450 a year | EUR 17,828 a year |
| Self-excluded customers blocked | Yes — at least every 24 hours, since April 2020 | No association with Gamstop Online | No association with Gamstop Online | No association with Gamstop Online |
| Withdrawal rules | Licence condition 17.1.1 on late information requests; fair and open terms under 7.1.1 | MGA complaints procedure | Certificate of Operation seal per domain | ADR provider must be named in terms |
| Where a dispute goes | Eight weeks internally, then an ADR provider the Commission has approved | MGA complaint form, operator first | Operator's named ADR, then the CGA | EGIS, Axion, iGaming ADR or an ADR provider |
| If the operator collapses | Customer funds must sit in a separate client account, with one of three protection ratings stated in the terms | Maltese insolvency law | Segregation required by CGA standards | Segregation required by Anjouan standards |
Read that table for what it does not say. The fourth column of numbers is not a stricter version of the second; it is a different kind of thing. A Curaçao licence tells a customer that an authority in Willemstad has taken money and asserted jurisdiction. It does not tell them that anyone in Britain will answer the phone.
Why the Licence Shows Up as an Identity Check
The single thing this whole market turns on is the identity check, and it is worth walking through properly because it is where money actually goes missing. A British operator must obtain and verify a customer's identity — name, address and date of birth at minimum — before permitting gambling, and the Commission has said plainly that onboarding on incomplete details, initials instead of full names, nicknames, commercial addresses in place of residential ones, is not sufficient. Most operators verify electronically against credit reference and electoral roll data, in which case nothing is asked of the customer at all. Where that fails, the standard list is a passport, a driving licence or a household bill.
Under the money laundering regulations, a remote casino's identification and verification obligations trigger at EUR 2,000 deposited or withdrawn, counting linked transactions, and the threshold approach lets an operator verify the age at registration and defer the rest. That design is defensible. The abuse of it is not: an app that waves a customer through for eight months and then discovers, on the first withdrawal, that it cannot confirm where the money came from. The Commission's licence condition 17.1.1 now says a withdrawal request must not result in a demand for extra information if the operator could reasonably have asked earlier — with the honest exception of information it is legally obliged to seek at that moment, such as anti-money-laundering data. Its own blog of 12 August 2026 reported that over a quarter of the complaints reaching its contact centre concern identity verification, typically raised precisely when someone tries to withdraw.
That is the mechanism worth understanding, and it has a second face. The Commission has warned that onboarding on a middle name rather than a forename creates mismatches with records held elsewhere — including Gamstop's. An app that took two seconds over the name check is an app that may not have found the exclusion, and a self-excluded person can then gamble on it happily until somebody notices.
The warning signs in an identity check
- The documents are requested for the first time when a withdrawal is made, and never before.
- A deadline arrives with the request: 14 days, 30 days, "as soon as possible".
- Identity verification is handled by a third party with no published complaints route.
- The terms mention that funds may be withheld where verification is incomplete — a term the Competition and Markets Authority has said should not exist.
- Bonus funds are separated from deposit money on screen, but the withdrawal button only works on the second of them.
How self-exclusion behaves the first time and afterwards
The site's own subject deserves its own explanation. Gamstop Online is the national online self-exclusion scheme, free to use, run by The National Online Self Exclusion Scheme Limited, and since 31 March 2020 participation has been a licence condition for every online operator in Great Britain, sitting in the Commission's code of practice at 3.5.5. It is often typed "gamestop", the word "game" suggesting itself; the scheme's name is GamStop, and the slip changes nothing about how it works. Registration takes a few minutes but may take up to 24 hours to take effect, which is the gap in which an app can still accept a bet.
The periods offered are 6 months, 1 year, 5 years, or 5 years with auto-renewal. Once registered, the exclusion cannot be cancelled or deactivated during its term, and it stays in place after the term ends unless the person contacts Gamstop to remove it. Where auto-renewal was chosen, the option may only be turned off during the last six months of a five-year period, and renewal runs for up to four further five-year periods. If nothing is done at the end of the chosen term, the scheme holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. For scale: 614,738 people were on the register as of July 2026, more than one in two of them on the five-year maximum, and 117,756 registered during 2025.
The warning signs in this area are all about an app presenting itself as a way around the register, and they are easy to spot. The offshore app's selling point is the absence of a rule, so an app advertised on the strength of what it does not check is advertising what it will not do for anyone.
Five Signs an App Can Be Trusted
These are ordinary, checkable things, in the order I would check them.
The licence number leads to a live register entry
Every British-licensed app must display its licence details, and the Commission's public register lets anyone see whether the site's activity and domain names match what was licensed. Check the domain in the app, not the domain in an advert. A licence number that appears nowhere but the footer, or a register entry whose listed domains do not include the one being used, is the plainest warning available. On the offshore side the equivalent check exists but is weaker: a Curaçao Certificate of Operation seal must redirect to the authority's own verification page, and a certificate showing a different domain from the one being visited belongs to another operator.
The terms say which protection the money has
Under licence condition 4.1.1, customer funds must sit in a separate client account, and under 4.2.1 the operator must state which of three ratings applies — not protected, medium protection, high protection — in writing, with the customer acknowledging before gambling, and must remind anyone in the lowest category every six months. A separate client account is not insurance: it does not guarantee a refund if the business fails, and operators may lawfully hold the money in an overseas bank account.
The withdrawals do not reverse and do not have a ceiling
Since 31 October 2021 remote operators have been barred by rule 14B from offering the option to cancel a withdrawal request, and no term may cap what can be withdrawn from a deposit balance. The Commission's own illustration of a prohibited clause is "You may withdraw up to £50 per day and up to £500 per week." An app that still has a reverse button, or a withdrawal cap buried in the small print, is either out of date or out of step.
There is a named complaints route with a clock on it
A licensee must let a customer take a dispute to an approved alternative dispute resolution provider, free of charge, if it has not been settled within eight weeks of the complaint, and the customer must have gone through the operator's own procedure first — an operator may issue a deadlock letter to say so. The Commission's list of approved providers includes IBAS, eCOGRA, CEDR and ADR Group. A complaints page that loops back to a contact form and stops there is not a complaints route.
The bigger the system, the less the app is the point
The Commission's 2026 risk assessment rates the remote casino sector high risk for money laundering, unchanged from the year before, and notes a rise in attempts to bypass checks using false documents, deepfake videos and face swaps. A trustworthy app is one whose compliance looks boring and institutional: a named licence, a named ADR provider, a stated funds rating, reminders that arrive on time. The flashy app with a bespoke, opaque verification process is the one I would look at twice.
How to Check an App Before Depositing
Six steps, each with a reason. All of them are lawful, ordinary and take a few minutes.
- Find the licence number and match the domain. Open the Gambling Commission's public register and check that the domain in use is listed against that licence. Reason: an app can be a licensed operator's product, a white-label clone, or neither, and only the register distinguishes them.
- Check whether the app is British-licensed or offshore, and read the terms differently afterwards. Reason: licence condition 17.1.1, the eight-week complaints clock and the withdrawal rules apply to one and not the other, so the same sentence in two sets of terms means two different things.
- Read the customer funds clause and note the rating. Reason: if the business fails, the rating is the difference between a queue of creditors and a protected balance, and the operator is obliged to tell you which it is.
- Search the terms for the words "maximum withdrawal", "reverse", "inactive" and "discretion". Reason: a cap on withdrawals, a reverse-withdrawal button, a confiscation clause for inactivity or a term letting the operator alone decide to void winnings is either banned or, in the Commission's view, unfair under the Consumer Rights Act 2015.
- Look at the bonus terms before the bonus. Reason: from 19 January 2026 wagering requirements on bonus funds are capped at ten times, mixed-product offers are banned, and significant conditions must be no further than one click away — all of which disappear the moment the app is offshore.
- Install a blocking app and a bank block before you need them. Reason: Gamban and BetBlocker are both signposted by the scheme, and eleven banks named by the Commission offer gambling blocks at card level, most with a 48- or 72-hour cooling-off before a block can be undone. Neither affects a credit score.
Offshore Apps and Their Position Outside the System
Three licensees, three different characters. Kahnawà:ke has regulated interactive gaming the longest, requires an operator's relationship with players to be contractual and free of unfair terms, and has a full-time dispute resolution officer — but its own voluntary self-exclusion is permanent and irrevocable. Curaçao has just rebuilt its regime, with mandatory supplier registration becoming fully enforceable from 24 December 2026. Anjouan requires segregation of player funds, certified random number generators and a named ADR provider from a list that includes EGIS ADR, Axion ADR, iGaming ADR or another approved provider, which is more than a mailing address. Meanwhile the ABC News investigation of 31 December 2025 was told by a former attorney-general of the Comoros that the licensing operation was "an illegal entity", and a Comorian financial intelligence official described Anjouan Corporate Services as operating illegally; the regulator replied on 10 June 2026 that its licence was never a universal authorisation and cannot exempt an operator from local law. That exchange is the honest picture of that market — claims, counter-claims, and nobody in Britain with jurisdiction.
Games, Stakes and a Number I Would Not Bet Against
For anyone comparing online gambling apps on what they offer, the two markets now differ by rule as much as by catalogue. Online slots stakes in Britain are capped at £5 per game cycle for adults and £2 for those aged 18 to 24, a minimum of 2.5 seconds must pass between game cycles, credit cards cannot be used for gambling, and since 31 October 2025 a financial limit must be offered as the default before a first deposit. An offshore app is bound by none of it. Nobody should mistake the absence of a stake cap for a better game: an app with no £2 ceiling has no ceiling, and slots generated £773 million of gross gambling yield in the quarter from January to March 2026 on 25.1 billion spins in the licensed market alone.
One more number, offered without decoration. The Commission estimates that among people who gambled online in the four weeks before its survey, 2.5 per cent had engaged with an illegal gambling website, with a further 1.5 per cent in the previous year. That is a small minority and a live one, and H2 Gambling Capital puts £16.6 billion staked with illegal operators in 2025, against roughly £5 billion in 2019.
What Are the Best UK Gambling Apps
Isn't an offshore app just a gambling app with a different flag on it?
No, and the difference is procedural rather than patriotic. A British-licensed app must verify identity before gambling, must not demand new documents at withdrawal that it could have asked for at sign-up, must not offer reverse withdrawals, must name an ADR provider and must return a self-excluded customer's funds rather than simply freeze the account. An offshore app may be honestly run and may pay quickly, and some are. It is simply not obliged to do any of that, and the obligation is the product.
What actually happens when a self-excluded person tries to open an account?
On a British-licensed app, the attempt fails. The operator must check its whole customer base against Gamstop Online at least every 24 hours, so registration is normally caught at sign-up or within a day, and since April 2020 the check also blocks direct marketing. The exclusion holds for its full term and then stays in place until the person contacts Gamstop to remove it. On an offshore app there is no such check, and an account can be opened and funded with no reference to the register at all.
Can a winning withdrawal really be held while documents are checked?
Yes, where the document request is one the operator is genuinely obliged to make at that moment, typically under anti-money-laundering rules, including a suspicious activity report and the need for a defence from the National Crime Agency before funds move. What is not allowed is using identity verification as a brake on withdrawal when the operator could reasonably have asked earlier — that is licence condition 17.1.1, and the Commission says a delay of that kind may breach it and attract regulatory action.
Are British apps faster at paying than the old days?
Measurably, yes. Of 44.2 million withdrawals by customers of large online operators between June and September 2024, 96.3 per cent cleared automatically and 3.5 per cent within 24 hours, leaving 0.1 per cent taking up to 48 hours. The friction that remains is largely front-loaded: complaints about identity verification make up over a quarter of what reaches the Commission's contact centre, and withdrawal problems were the single most complained-about subject in its annual report for 2024-25.
Do the bonus rules differ much between a British and an offshore app?
Enormously, and the cap is the tell. Since 19 January 2026 wagering on bonus funds is capped at ten times in Britain, and offers mixing two or more product types are banned outright — a £5 bet rewarded with 20 free spins is non-compliant. Offshore multipliers are commonly quoted in the 25x to 40x range and above, no-deposit offers often carry a cashout ceiling, and the Commission has no authority over any of it. The regulator's own words were that the cap would "take out extreme levels", with some licensees previously applying up to 60 times.
Why doesn't the regulator just close the illegal apps down?
It does what it can, within a remit that stops at the British border. Since April 2024 its Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 search-engine URLs and secured 287,961 removals, and among 160 illegal websites it measured an average 32 per cent fall in engagement afterwards. It reports that registrar blocks and GEO IP blocking work far better than search-engine removals, because delisting a site makes it harder to find rather than impossible to reach.
The Short Version
Judge a gambling app by its licence, its identity checks and what it does when a customer wants money — and remember that in Britain the one thing an app cannot sell its way out of is an exclusion that follows a person into every licensed operator in the country for as long as it was chosen to, and beyond it until they ask for it to end. The Commission's Illegal Markets team has referred 447,778 search-engine URLs since April 2024, and the National Gambling Helpline, run by GamCare on 0808 8020 133, answers at any hour — 0808 2819 265 for callers in Wales. If an app is advertising what it does not check, that is the check that matters.