Online casinos not on GamStop are sites that hold no Gambling Commission licence, so the national self-exclusion scheme cannot reach them. GamStop only binds operators licensed in Great Britain. An exclusion runs for its full six months, one year or five years, and then stays in place until the person asks GamStop to remove it.
The phrase sells a loophole. What it describes is a category of website that has opted out of the British licensing system altogether, and the loophole language quietly skips over the part that matters: the exclusion does not end when the term ends. GamStop's own terms, last updated 20 May 2026, say plainly that a registration stays in place after the chosen period unless the person contacts the scheme to remove it, and that no one can cancel during the term. Register and the block holds. That is the whole design.
I have spent years reading the trade press on this and the pattern is consistent. Offshore operators that market to British players do not advertise the absence of protection; they advertise the absence of friction. No GamStop check, no stake limit of £5 a spin, no financial vulnerability check at £150 net deposits in a 30-day window, no cap of ten times on wagering requirements. Those are the things a licence buys, and the sites that sit outside the licence do not have them. Gambling Commission data for June to September 2024, cited in a speech of 6 November 2025, recorded 44.2 million withdrawals at large online operators, of which 96.3 per cent cleared automatically. That is what a regulated payout looks like. Offshore terms are constructed to make the opposite possible.
It is also illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and the Commission said so in terms in October 2024. The offence sits with the operator, not the player. But the practical consequences sit with whoever holds an account. There is no UK regulator to complain to, no Alternative Dispute Resolution provider the site must use, no statutory protection for money held on deposit, and no route back through GamStop. Where help is needed, the National Gambling Helpline run by GamCare is free on 0808 8020 133, twenty-four hours a day, every day of the year.
Table of Contents6
Online Casino Not on GamStop and What the Category Means
A site outside the scheme is simply a site outside the licence. Under the Gambling Commission's Licence Conditions and Codes of Practice, social responsibility code provision 3.5.5, every operator must participate in the national multi-operator self-exclusion scheme. That requirement has applied since 31 March 2020, and the Commission has shown what happens when a firm ignores it: on 3 April 2020 it suspended the licences of two online operators for failing to integrate in time.
So the shorthand needs care. A UK-licensed operator can be described as "not covered by GamStop" in the narrow sense that a self-exclusion places the person, not the site, outside reach. The site's licence continues exactly as before. What the market means by an online casino not on GamStop is something different: a domain run under a Curaçao, Anjouan, Kahnawà:ke or Maltese licence, or in some cases under no gambling licence at all, that accepts British customers and is not obliged to check the register.
The name of the scheme is worth a note, because it comes up in search boxes constantly. GamStop is frequently typed "gamestop", and the word "game" suggests itself. That is a spelling slip, not a second scheme.
Online Casinos Not on GamStop and Registers Worth Reading
The regulatory landscape shifted underneath this market during 2025 and 2026, and the older shortcuts for spotting a genuine offshore licence have stopped working.
Curaçao replaced its master-licence model with direct licensing by the Curaçao Gaming Authority under the National Ordinance on Games of Chance, in force from 24 December 2024. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and the CGA states that a historic /JAZ number or legacy seal must not be treated as proof that an operator currently holds a valid licence. Provisional licences granted by operation of law expired on 24 December 2025. In October 2026 the CGA announced that its previous online gaming portal would not return to service and that it was building an alternative way to verify licensed domains, because the former digital seal may be affected by the transition.
Anjouan is the other volume jurisdiction, and its paperwork is thinner. Anjouan Gaming publishes a fee of EUR 17,828 for B2C licence issuance and the same for annual renewal, and an ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year. The same report said a former attorney-general of the Comoros described Anjouan Licensing Services as "an illegal entity" and that the AOFA lost recognised-regulator status under Comorian banking laws passed in 2013 and 2015. Anjouan Gaming said in a statement on 10 June 2026 that a licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". That last sentence is the one to remember.
A third category needs no register at all, because there is no register. Costa Rica operates no comprehensive gambling licensing regime and has no formal framework for issuing gambling licences; the "data processing license" that sometimes appears in industry marketing is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced mandatory licensing.
Comparing Offshore and Licensed Payouts
Set the two systems side by side and the differences are not stylistic. They are the terms that decide whether money comes back.
| Criterion | UK-licensed operator | Typical offshore operator |
|---|---|---|
| Self-exclusion check | Must check the whole customer base against the register at least every 24 hours | No connection to the scheme |
| Wagering on bonus funds | Capped at 10 times, from 19 January 2026 | Commonly 25x to 40x, sometimes 60x |
| Maximum cashout on bonus winnings | No maximum on the deposit balance permitted | Caps of, for example, 300% of the bonus credited |
| Withdrawal limits | No maximum limit on withdrawing the deposit balance | A term such as one withdrawal at a time is unfair under UK law |
| Stake limit on online slots | £5 per game cycle, £2 for ages 18 to 24 | None |
| Reverse withdrawals | Banned since 31 October 2021 under RTS 14B | Frequently still offered as a cancel option |
| Customer funds on insolvency | Disclosure required, rated not protected, medium or high | No UK rating obligation |
| Dispute resolution | Free ADR through an approved provider | An operator-nominated ADR, or none |
The stake limits went live on 9 April 2025 for adults and on 21 May 2025 for the 18-to-24 group, attaching to every remote casino operating licence. The wagering cap arrived on 19 January 2026 under social responsibility code 5.1.1. Offshore sites are not bound by either, and the withdrawal-limit line is not hypothetical: on 21 October 2026 the Commission announced a £900,000 regulatory settlement with an operator whose terms allowed only one withdrawal request at a time, which was found unfair under the Consumer Rights Act 2015.
How Long a GamStop Exclusion Lasts, and Why It Outlives Its Term
This topic turns on one mechanism, and it is the mechanism almost every page about it describes wrongly. So here it is properly.
The first time. Registration takes a few minutes and the terms offer four choices: six months, one year, five years, or five years with auto-renewal. The block can take up to 24 hours to become effective across participating operators, so signing up on a Friday evening does not necessarily stop a Saturday morning session. Operators are required to check, and the Commission's rules introduced in April 2020 also prevented registered people receiving direct marketing. There is no fee. When the person registers, the exclusion applies to every online gambling company licensed in Great Britain.
Later. The exclusion cannot be cancelled or deactivated during the term. When the term ends, it does not lapse. GamStop's terms, last updated 20 May 2026, state that the registration stays in place unless the person contacts the scheme to remove it. On a five-year exclusion with auto-renewal, the auto-renewal can only be switched off during the final six months of the period, and renewal continues for up to four further five-year periods if it is not. If nothing is done after the chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period, during which operators are told the person was previously excluded. The scheme's group annual report for the financial year 2025 devotes a section to its refusal to remove registrations before the chosen term ends, so this is a settled position rather than an oversight.
The figures show what people actually choose. Of the exclusion periods selected by registrants in 2025, 29 per cent chose six months, 24 per cent a year, 25 per cent five years and 22 per cent five years with auto-renewal. As of July 2026 GamStop Online reported 614,738 consumers currently on the register, and among them more than one in two had taken the maximum five-year option. Across all age groups only one in four had self-excluded for six months. The register grew by 117,756 new registrations during 2025 and, in the first half of 2026, registrations rose 16 per cent year on year, with May 2026 setting a monthly record of 12,236 sign-ups.
The warning signs are the ones that look like kindness. A page that frames an offshore site as a way to keep gambling while excluded has misread the mechanism, because the exclusion term is not a pause that a change of domain can shorten. A claim that a registration can be lifted early is false. A suggestion that using a different email address or a new site sidesteps the register ignores that operators are told the person was previously excluded for seven years after the term. And any pitch built on "no GamStop check" is really a pitch to be left alone with an unregulated counterparty.
Five Signs an Offshore Site Can Be Trusted to Pay
Trust here is not a feeling, and it is not a score out of ten. It is a small number of things that can be looked up in minutes. Five of them do most of the work.
A Licence That Verifies at Source
The regulator's own register is the only check that counts. Curaçao issues a Certificate of Operation Seal only to B2C operators and only for an approved, registered player-facing domain, and clicking it must redirect to cert.cga.cw; if the certificate behind the seal shows a different domain from the one being visited, the site is displaying someone else's certificate. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and Anjouan states that a certificate which cannot be verified there should not be relied upon. An unverifiable seal is a finding in itself.
Terms That Do Not Build in Delay
Read the withdrawal clause first, not the bonus. A term allowing only one withdrawal request at a time, or imposing a maximum you may withdraw per week, is the pattern the Commission found unfair under the Consumer Rights Act in October 2026. A maximum cashout clause on bonus winnings — a cap at, say, 300 per cent of the bonus credited — is another. The check takes one page of reading and tells you more than any review.
A Named ADR Provider in the Terms
In the UK, operators must let customers refer an unresolved dispute to an approved ADR provider free of charge after eight weeks. Offshore, look for a named provider in the player-facing terms, with contact details. Anjouan requires licensees to designate an approved ADR provider and expects complaints to be handled within 30 days before escalation, naming EGIS ADR, Axion ADR, iGaming ADR and an operator. A site with no named provider has no dispute route other than email.
Payout Speed Consistent With the Method
Compare what the site promises with what the rail can physically do. A Bitcoin block targets ten minutes on average, with roughly a 63 per cent chance of a block in any ten-minute window. Litecoin targets 2.5 minutes. A TRC-20 USDT transfer consumes roughly 65,000 Energy to an existing wallet and about 130,000 to a new one. A site promising instant card payouts is describing Visa Direct, where funds can be available within 30 minutes of approval — not describing a standard bank transfer. Vague arithmetic about "instant" is the tell.
Protection Stated for Customer Funds
Ask what happens to money left on deposit if the business fails. UK licensees must state an insolvency rating — not protected, medium or high — and an operator rated not protected must remind customers every six months. Offshore, a segregation clause in the terms is the minimum; a total silence on insolvency is the answer you are looking for.
How to Judge an Offshore Operator Before Depositing
Six steps, in this order. Each exists because it closes a specific gap.
- Check the licence on the regulator's register, not on the site. The seal on the page proves nothing; the entry under the domain name on the regulator's own list is the evidence. Curaçao's seal must redirect to cert.cga.cw and match the domain being viewed.
- Read the withdrawal and bonus terms in full before depositing. UK practice accepts no maximum limit on withdrawing the deposit balance, and ten times wagering at most. Compare against that benchmark and write down the multipliers, the cashout caps and any maximum bet while wagering.
- Find the dispute route and note the deadlines. Identify the named ADR provider, then check the provider's own period for accepting a dispute. eCOGRA, for instance, may refuse a case where two weeks have not passed since the problem began or where it arose more than a year ago.
- Confirm the payment rails and their real timings. Faster Payments completes over 90 per cent of transactions in under two seconds and has a scheme ceiling of £1 million per transaction, though individual banks set lower limits. Match the site's promise to the rail it is using.
- Decide what is affordable to leave at risk. Customer funds held in a separate client account does not mean money comes back if the operator becomes insolvent, and gambling businesses are permitted to hold customer money in overseas accounts. That decides the size of any balance held.
- Separate the protections that still work from those that do not. Registering with GamStop blocks UK-licensed operators and only those. Blocking software and a bank gambling block are the tools that keep working across the line, and all the checks above exist to decide whether a deposit is worth making at all.
Questions About Self-Exclusion
Are online casinos not on GamStop legal?
The offence is the operator's, not the player's. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Gambling Commission states that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal even where the operator holds a licence elsewhere. The player commits no offence by holding an account, but loses every UK protection.
Can a casino remove a GamStop registration early?
No. The registration cannot be cancelled or deactivated during the exclusion period, and GamStop's terms say the exclusion stays in place after the chosen period unless the person contacts the scheme to remove it. The scheme's 2025 annual report includes a section on its refusal to remove registrations before the term ends. A site claiming otherwise is simply misinforming.
Do offshore casinos check the self-exclusion register at all?
They are not connected to it. The licence condition that requires participation applies only to operators licensed in Great Britain, and GamStop's own terms state the scheme blocks gambling sites and apps licensed in Great Britain only. An offshore domain has no register to query and no obligation to query one.
Which licence should an offshore site hold?
There is no single answer, which is the point. Curaçao now licenses directly through the Curaçao Gaming Authority, and legacy orange sub-licence certificates ended on 15 October 2025. Anjouan licenses under Comorian law with published fees. Malta runs a full regime with a EUR 25,000 annual licence fee. Costa Rica issues no gambling licence at all. Verify the specific claim rather than the flag on the homepage.
What happens to money held on an unregulated site?
It depends entirely on that operator's own arrangements. UK licensees must disclose an insolvency rating and remind customers every six months where funds are not protected; offshore sites carry no such duty. Money staked within an open bet is not treated as customer funds even under UK rules. Assume nothing about a balance left in an offshore account.
What should anyone struggling do instead?
An offshore site is never a way round a self-exclusion, and the exclusion holds for its full term regardless. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, twenty-four hours a day, every day of the year, with the same number reaching live chat and WhatsApp. In Wales the number given is 0808 2819 265.
The Long Odds on a Shortcut
Every claim about an online casino not on GamStop comes back to the same arithmetic: the site is outside the licence, the protections are outside with it, and the exclusion outlasts the term that provoked the search in the first place. What a licence buys is measurable — a £5 stake limit on online slots, a cap of ten times on wagering, a ban on reverse withdrawals, 96.3 per cent of withdrawals clearing automatically — and none of it travels offshore. The register itself is the proof: of the 614,738 people on it as of July 2026, more than one in two chose the maximum five-year term.