Online Gambling Sites UK and Self-Exclusion

Online gambling sites UK players use split into two groups: those licensed by the Gambling Commission, which must block anyone on GamStop, and offshore sites holding no British licence, which are not connected to the scheme at all. GamStop is free, lasts from six months to five years, and cannot be lifted early.

The Register That Splits the Market in Two

The thread running through this whole subject, for me, is a single register. Online gambling sites UK players actually reach divide cleanly: those the Gambling Commission licenses, and those it does not. The first group must check its entire customer base against GamStop every 24 hours. The second group has never heard of it.

The name trips people up. It is GamStop — often typed "gamestop", because the word "game" suggests itself — and it has been running since April 2018 under The National Online Self Exclusion Scheme Limited. Since 31 March 2020, participation has been a licence condition, sitting in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice: "Licensees must participate in the national multi-operator self-exclusion scheme." Two operators found that out the hard way. On 3 April 2020 the Commission suspended the licences of Dynamic, trading as Prophet, and Sportito, under section 118(2) of the Gambling Act 2005, for missing the integration deadline.

The numbers are the interesting part, and they are not small. GamStop reported over 562,000 people actively excluded at the end of 2025, and 58,675 registrations in the final six months of that year — an average of 319 a day. By 16 July 2026 it counted 614,738 consumers currently on the register. More than one in two had chosen the maximum five-year term; across all age groups only one in four had picked six months. Under-25s accounted for nearly one in three of all exclusions in the first half of 2026, a 26 per cent year-on-year increase.

Then the uncomfortable sentence, which belongs early and plainly. Offshore sites that hold no Gambling Commission licence are not connected to GamStop, and by the Commission's own logic the protections of the British regime — fair terms, a complaints route, the credit card ban, the deposit limits — do not reach them either. Where things go wrong, the help is the National Gambling Helpline on 0808 8020 133, free and open 24 hours a day through GamCare, with 0808 2819 265 for callers in Wales. There is also GamFam for families, Gam-Anon UK & Ireland, Gamblers Anonymous on 0330 094 0322, and NHS gambling treatment clinics that took almost 5,000 referrals a year as of February 2026.

How Long a Self-Exclusion Actually Lasts

People expect the register to be a switch. It is more like a sealed contract, and I think the design is right, however much it stings at month four.

The first time is quick and unremarkable. Registration takes a few minutes, and the block takes effect within 24 hours — a gap the scheme does not hide and which matters if a person registers on a Friday night. The term is chosen at sign-up: six months, one year, five years, or five years with auto-renewal. In 2025, 29 per cent of registrants chose six months, 24 per cent chose a year, 25 per cent chose five years and 22 per cent chose auto-renewal.

Then the door closes behind the choice. Registration cannot be cancelled or deactivated during the exclusion period, and the exclusion stays in place after the chosen period ends unless the person contacts GamStop to remove it. GamStop Online registrations cannot be removed early; the Group's 2025 annual report devotes a whole section to its refusal to do so. On the five-year with auto-renewal option, the terms of use — last updated 20 May 2026 — allow auto-renewal to be switched off only during the last six months, and it runs for up to four further five-year periods. If nobody deactivates after the chosen term, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded.

Later registrations change shape, mostly in how much paperwork returns. The block itself is the same for a returning name as for a new one, and the licence duty to check is no lighter. The warning signs that the scheme is being misunderstood are consistent: treating six months as a cooling-off period that lapses on its own; assuming a different email address or a new card resets the term; believing a VPN changes anything; and, worst of all, treating an offshore site as a way round it. An offshore site without a Commission licence is not a loophole in GamStop — it is a site outside the scheme entirely, which is a different and larger problem. The Commission has been blunt about the audience such sites chase: its industry warning notice of 20 January 2025 said unlicensed sites appearing to GB consumers often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls.

Reading a Licence, Not a Logo

The one checkable benchmark that does more work than any review page is the Commission's public register of licensed operators. It carries the domain names each licensee may use, which is why the Commission's instruction is to click through and see whether the site's activities and domain names match what the register says. Check it once and a great deal of marketing evaporates.

A British licence is the standard of comparison, and the gap is not rhetorical. The Commission's Illegal Markets team issued 3,140 cease and desist and disruption notices between April 2024 and 21 October 2025 — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites with traffic data, average engagement fell 32 per cent after disruption. The enforcement mix is instructive: registrar blocks and site suspensions each produced a 91 per cent average fall in engagement, GEO IP blocking 60 per cent, Bing removal 52 per cent, Google removal 30 per cent, Facebook removal 8 per cent.

The offshore regulators vary enormously, and it is worth knowing which words on a footer mean what.

Curaçao Licence in Transition

The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority. The old master-licence and sub-licence model is gone; legacy "orange" certificates of operation ended on 15 October 2025 and should no longer be treated as proof of a current licence. Licensing ended for the four former master licensors between 18 August 2024 and 31 January 2025. A historic /JAZ number or legacy seal is not independent proof of a current licence. Operators holding a valid licence on 24 December 2024 received a six-month provisional licence, extended a further six months to 24 December 2025. The CGA said on 7 October 2026 that its previous online portal would not return to service and that it is working on an alternative way to verify licensed domains. Fees are published and modest: a one-time non-refundable EUR 4,592 application fee for B2C, and EUR 47,450 a year in total — a EUR 24,490 licence fee plus a EUR 22,960 supervisory fee, due in full by 15 January.

Kahnawà:ke as the Oldest and Smallest Regulator

The Kahnawà:ke Gaming Commission was established in 1996 and enacted its interactive gaming regulations on 8 July 1999. Operators must be hosted at Mohawk Internet Technologies, and the Commission issues one Interactive Gaming Licence at a time — held by that data centre since 1999 — plus Client Provider Authorizations, with no limit on how many it issues. Its Logo Certificate Program, effective 15 January 2010, lets a player click the Commission's logo to generate a Certificate of Good Standing. Client Provider Authorization and Key Person Permit fees rise on 1 January 2027 — the CPA application from USD 35,000 to USD 40,000 and Key Person Permit from USD 5,000 to USD 6,000 — while the annual CPA fee stays at USD 20,000 and the annual Key Person Permit fee at USD 1,000. It also acts: the CPA held by Polar Ventures SDRL was suspended effective 29 September 2026.

Understanding the Malta Licence

The Malta Gaming Authority requires a B2C Gaming Service Licence for a Maltese or EU/EEA entity offering a gaming service from Malta, to a Maltese person, or through a Maltese legal entity. Fees are a one-time non-refundable EUR 5,000 application fee, a non-refundable fixed annual licence fee of EUR 25,000 and gaming tax of 5 per cent of gaming revenue. Minimum issued and paid-up share capital is EUR 100,000 for Type 1 and Type 2 licences and EUR 40,000 for Type 3 and Type 4. The MGA also publishes a list of Unauthorised URLs, declaring that any reference to the MGA or a Maltese licence on those domains is false and misleading, with the most recent entries carrying notice dates of 30 October 2026.

Anjouan Licensing Status

Anjouan is a constituent territory of the Union of the Comoros, with a framework founded on legislation adopted in 2005. Its published fee schedule is EUR 17,828 for B2C licence issuance, the same for annual renewal and the same for B2B, with EUR 500 per additional domain. Its licences carry no territorial restriction under Anjouan law, but holders must comply with the law where they operate — a point the regulator made itself on 10 June 2026, saying an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". Its own certificate framework says certificates carrying a unique licence number and QR code should be verifiable on the public register, and that certificates which cannot be verified there should not be relied upon. That caveat matters, because an ABC News investigation on 31 December 2025 reported more than 1,300 licences issued at around EUR 17,000 each a year, a former attorney-general of the Comoros calling the licensing seller "an illegal entity", and Comorian banking laws of 2013 and 2015 stripping the offshore financial authority of recognised-regulator status. The regulator's own legal opinion of 19 September 2024, reconfirmed in February 2026, is reported to affirm the licences' validity — a claim to weigh, not to absorb.

No Licence at All

Costa Rica operates no comprehensive gambling licensing regime; the "data processing license" sometimes quoted in the trade is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced mandatory licensing. Under Costa Rican law, games whose outcome depends primarily on luck are generally prohibited, so gambling services should not be offered to or marketed towards Costa Rican residents.

Comparing the Licence Regimes on Paper

Same three columns for every row, because the differences that matter are structural, not aesthetic.

The statutory levy in the top row is worth a second look, since it is the only item on the list that is a percentage of takings rather than a flat fee. Online operators pay 1.1 per cent of previous-year Gross Gambling Yield, and the first year raised just under £120 million, ringfenced for research, prevention and treatment.

The Terms That Build In Delay

If I had to name the single thing this subject turns on, it is verification timing — and the offshore industry has made a business model of it.

The British rule is narrow and unfashionable. Licence condition 17.1.1 requires that a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier — though it does not stop a licensee seeking information it must obtain at that point under another legal obligation, such as anti-money-laundering rules. The first time, this usually means nothing at all: a British operator can verify electronically against credit reference agencies and the electoral roll, and the Commission says an electronic check may be instant while documents take longer. The threshold approach allows a remote casino to identify a customer and verify age at registration and defer full verification until the €2,000 threshold is triggered.

Later, the same machinery gets used less innocently. The Commission has said it receives around 2,000 complaints a year about withdrawal delays and that this remains the number one subject of complaints, with identity verification accounting for over a quarter of the complaints reaching its Contact Centre as of 12 August 2026. It has also expressed concern about operators using "fuzzy matching" through third-party verification providers and onboarding customers on partial or equivocal verification. The warning signs are all in the timing: documents first demanded at the withdrawal screen and never at deposit; a period during which a customer is permitted to stake but not to withdraw, which is not what self-exclusion looks like anywhere; a term giving the operator sole discretion to withhold winnings; and withdrawal caps. On that last point the Commission is explicit — operators may not impose, use, enforce or seek to rely on any term imposing a maximum limit on what a consumer may withdraw from their deposit balance, its example of a prohibited term being "You may withdraw up to £50 per day and up to £500 per week".

The hard numbers on speed come from the Commission's own data covering June to September 2024: 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed that "it is quick and easy to withdraw and collect my winnings", against 18 per cent who disagreed. Note what the LCCP does not contain: there is no fixed maximum number of days for completing a withdrawal. The regime relies on licence condition 7.1.1 — terms must not be unfair within the meaning of the Consumer Rights Act 2015 — rather than a stated payout deadline.

Offshore terms are where delay is designed rather than discouraged. Wagering requirements of 25× to 50× are ordinary on welcome bonuses, with 40× to 60× on no-deposit offers, and none of it is touched by the British cap of ten times that came into force on 19 January 2026. Maximum cashout clauses are common: one operator's terms, last updated 15 October 2026, cap withdrawable winnings from bonus funds at 300 per cent of the credited bonus and void the excess. Maximum bet rules while wagering do the same job more quietly — €5 for regular players and €10 for VIP players at one casino, and at another a cap of 20 per cent of the deposited amount, with failure potentially meaning account closure, forfeit of the bonus and forfeit of winnings generated during wagering. Sticky bonuses, where the bonus itself can never be withdrawn and is removed at cashout, still exist offshore; British guidance ended the practice behind them by requiring that wagering requirements not apply to play with the deposit balance, that the two balances always be displayed separately, and that players be allowed to withdraw the deposit balance at any time, including while a bonus is active.

Five Signs a Site Can Be Trusted

Each sign is a two-minute check. None of them requires believing a review.

The Register Entry Matches the Domain

Pull up the Commission's public register, find the operator, and compare the listed domain names with the address bar, including the suffix. The Commission's own advice is exactly this: check that the site's activities and domain names match those on the register. A licence statement in a footer is a claim; a register entry is a record.

Withdrawals Are Not the First Time You Meet Verification

Look for the verification policy before depositing and see when documents are asked for. A site that says it verifies before allowing gambling, and tells customers in advance what documents or information they may need and in what form, is describing what licence condition 17 requires. A site that mentions documents for the first time at the withdrawal screen is describing a delay strategy.

The Bonus Terms Fit on One Screen

Wagering requirement, maximum bet while wagering, maximum cashout, game contribution and expiry, plus a link to the full terms. Under social responsibility code 5.1.9, significant conditions must be provided transparently and prominently and, online, displayed in full no further than one click away. If the headline multiple is 35× and the cap on cashout is buried in a different document, the headline is the product and the rest is the escape hatch.

There Is a Named Dispute Route With Teeth

The test is a provider a customer can name and reach free of charge. Since social responsibility code 6.1.1, British licensees must have arrangements for a customer to refer a dispute to an ADR entity free of charge if it is not resolved within eight weeks. The gambling-specialist options on the Commission's approved list handle most of these disputes — IBAS for the remote, adult gaming centre, betting, bingo, casino and lotteries sectors, and eCOGRA across all sectors. Useful calibration: eCOGRA's Great Britain report for 1 October 2024 to 30 September 2025 recorded 911 disputes received, of which "Deposits & Withdrawals" accounted for 150 valid disputes, with 17.8 per cent of completed disputes ruled in favour of the consumer, and IBAS's 2024-25 report recorded 3,721 domestic disputes, 217 of them banking or financial, with 65 consumer complaints upheld by written decision against 693 not upheld.

The Licence It Claims Is Verifiable Where It Was Issued

Click the seal if there is one. A Curaçao Certificate of Operation seal must redirect to cert.cga.cw, and if the certificate behind it shows a different domain from the one being visited, the site is displaying someone else's certificate. An Anjouan certificate should carry a licence number and QR code verifying against a public register. An MGA badge should not appear on the regulator's Unauthorised URLs list. Where the regulator publishes no route to verify, treat the badge as decoration.

Five Ordinary Checks Before Anyone Opens an Account

All of these are lawful, all are free, and none involve a deposit.

1. Read the register entry, not the homepage. Confirm the exact domain is licensed for the activity on offer. Reason: a register entry is the only statement about a licence that the operator does not write itself.
2. Find the withdrawal page before the bonus page. Look for stated processing times, the fee policy, the identity-check policy and whether a maximum withdrawal is mentioned anywhere. Reason: the terms that bite are the terms the marketing hides.
3. Check the dispute route in writing. Confirm an ADR provider is named and that the operator's own complaints process is capped at eight weeks. Reason: a route cannot be used later if it cannot be found now.
4. Test the self-exclusion question directly. Search the site's help pages for its GamStop policy and, if the operator already holds an account, check that the registered details match exactly — middle name included, since onboarding under a middle name instead of a forename creates mismatches with records held elsewhere, including GamStop. Reason: a mismatch is how a block quietly fails.
5. Switch on a bank-level block as a backstop. The Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Blocks work by declining payments to gambling merchant category codes and are applied at card level, so each card needs activating. Reason: most banks apply a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again after a block is switched off, and the block costs nothing and does not affect a credit score.
6. Know where to go if it fails anyway. The National Gambling Helpline is on 0808 8020 133, free, 24 hours a day through GamCare, and the Commission's ADR list is the route for money that has gone missing. Reason: the Commission is a regulator, not an ombudsman — it records complaints but cannot resolve individual disputes or retrieve money.

One distinction worth holding mentally: blocking software is a different layer. GamStop signposts Gamban and BetBlocker; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps and requires no registration, while Gamban is free for residents of Wales and costs £4.99 a month or £29.99 a year in England and Scotland following the end of TalkBanStop funding on 31 March 2026.

The real market is not evenly divided, whatever the marketing suggests. The Commission's analysis published 5 November 2026 estimates that, across the whole population including non-gamblers, 0.6 per cent of respondents engaged with illegal gambling websites in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among those who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal sites, with an additional 1.5 per cent in the past 12 months. Its illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, 4 per cent more than September 2025. So the honest summary of this market is that offshore is a small slice attracting a disproportionate share of enforcement, and the British licence remains the line that separates who a person can call when something goes wrong.

Questions About Online Gambling Sites UK

How many online gambling sites are there in the UK?

No one publishes a defensible total, which is itself the answer. The Commission licenses a defined list and publishes it; offshore operators come and go faster than any list can track. Its illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, 4 per cent more than September 2025 and 4 per cent below the previous three-month average. Identified sites using the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025, after crypto-casino search terms were added to the methodology in December 2024.

What are the safest online gambling sites UK players can pick?

Safety is a licence fact before it is an opinion. A site on the Commission's public register, with domain names matching the register entry, must participate in GamStop, must offer free ADR within eight weeks and must not impose a maximum limit on withdrawing a deposit balance. An operator with a real offshore licence and no British one has a supervisor, which is better than nothing, but no GamStop obligation and no British fair-terms condition applies to it.

Are the top 10 online gambling sites UK rankings worth reading?

Mostly they are affiliate lists, and the tell is what they compare: brands and bonuses rather than licence status, withdrawal terms and dispute routes. A useful comparison on this subject is by licence regime, because that is what determines whether a self-exclusion holds, whether terms must be fair and where a complaint can go. Rankings that never mention the register are selling, not reviewing.

Do new online gambling sites UK players see follow the same rules?

Only if they hold a Commission licence. Any operator offering commercial gambling services to consumers in Great Britain without one is breaking the law under section 33 of the Gambling Act 2005, even if it holds a licence elsewhere, and the Commission has said so plainly since 21 October 2024. A new site launched under an offshore licence may be new and legal in its own jurisdiction while offering GB consumers no GamStop coverage and none of the British consumer protections.

Can a self-exclusion be cancelled early?

No. Registration cannot be cancelled or deactivated during the exclusion period, and the exclusion stays in place afterwards unless the person contacts GamStop to remove it; GamStop Online registrations cannot be removed early, and its 2025 annual report sets out the refusal. Auto-renewal can only be switched off during the last six months of a five-year term, and it runs for up to four further five-year periods. Offshore sites are never a way round this.

Does self-exclusion cover betting shops and casinos?

No — it is split by venue type. GamStop Online covers online operators licensed in Great Britain. Land-based casinos use SENSE, whose minimum term is six months and which allows removal only in person at a casino during the six-month "Thinking" period that follows, after which a 24-hour cooling-off period applies. Bookmakers' shops use Gamstop Betting Shops, formerly MOSES, on 0800 294 2060, which excludes a customer from named shops for a fixed 12 months that cannot be ended early.

The Register Decides, Not the Filter

The phrase online gambling sites UK returns is really two markets wearing the same words, and the register is the only thing that tells them apart: 614,738 people currently sitting on GamStop as of July 2026, of whom more than one in two chose the maximum five-year term — and not one of them blocked by an offshore site, because an operator outside the scheme cannot be reached by it. If something has gone wrong with a bet, the National Gambling Helpline is on 0808 8020 133, free and available 24 hours a day.