Best Casino Not on GamStop and the Regulator's Half of the Story

The best casino not on GamStop is not an endorsement of the offshore market; it is a measurement problem. No offshore site holds a Gambling Commission licence, so none of the UK's protections apply to it. What exists is a hierarchy of licences, from Malta down to Anjouan, and a regulator with a disruption budget and a shrinking patience. Everything below is about reading that hierarchy, not about picking a brand.

The scheme's name is GamStop, and it is often typed "gamestop" — a slip the word "game" invites. That matters, because in the United Kingdom self-exclusion is one of the few protections that genuinely bites, and it bites only inside the licensed market. Registering with GamStop Online blocks a person from every online gambling company licensed in Great Britain, and since 31 March 2020 participation in the national multi-operator self-exclusion scheme has been a condition of every such licence, set out in the Commission's social responsibility code provision 3.5.5. Offshore sites that hold no Commission licence sit outside that structure entirely. That is the whole reason this keyword exists, and also the reason the Gambling Commission spends a growing share of its enforcement effort on it: since April 2024 the Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. A search for the best offshore casino is, whether the searcher knows it or not, a search conducted inside somebody else's enforcement campaign.

The Numbers Behind the Offshore Question

Two figures frame everything else. The Commission's analysis published 5 November 2026 estimates that among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent doing so in the past 12 months. That is a small minority, and it is not shrinking. The Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, four per cent more than in September 2025.

Then there is the disruption data, which is the more interesting half. Across 160 illegal gambling websites for which traffic data existed, there was an average 32 per cent decrease in engagement after disruption activity. But the averages hide a wide spread by method. Registrar blocks and website suspensions each produced an average 91 per cent fall in engagement; GEO IP blocking produced 60 per cent; Bing removal 52 per cent; Google removal only 30 per cent; Facebook removal 8 per cent. The Commission's own conclusion is that search-engine removal makes a site harder to find without fully blocking access — which is precisely why a well-optimised offshore casino can stay visible in UK search results long after its name has appeared in a cease and desist notice.

Self-exclusion, wherever it comes up on these sites, is worth stating flatly. A GamStop exclusion runs for its full chosen term — six months, one year, five years or five years with auto-renewal — and cannot be cancelled partway. When the term ends it stays in place until the person contacts GamStop to remove it; the scheme's 2025 annual report devotes a section to its refusal to lift registrations early. An offshore site is not a way round that, and anyone presenting it as one is selling something.

What Regulator Does About Unlicensed Sites

This is the part the affiliate pages leave out. The Commission does not simply publish warnings; it runs an industrial-scale takedown operation with a measured hit rate.

The figures for the most recent quarters are striking in their scale and their volatility. In January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. In April to June 2026 it referred 366 websites covering 147,721 URLs. In July to September 2026 it referred 1,835 websites and 7,677,211 URLs — and issued 546 cease and desist notices. Over the same run, prosecutions were essentially absent: across April 2025 to March 2026 every quarter recorded zero or one prosecutions commenced, one in total.

That asymmetry is the honest picture. Criminal prosecution of offshore operators is rare because jurisdiction rarely allows it. What the Commission can do is make a site harder to reach — and it says, in its October 2025 review, that this works unevenly. It also reports that payment transaction data sent to the Visa Operator Scheme is a critical but still early-stage part of the strategy, with the first referral made in January 2025 after a test purchase and three more since.

The Scale of the Market

Just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain over the monitored period from May 2024 to July 2025. The number identified through the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025, after crypto-casino search terms were added to the methodology in December

1. Estimates of the money involved vary wildly by who is paying for the research: H2 Gambling Capital put

stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, while a Frontier Economics study commissioned by the Betting and Gaming Council estimated £2.7 billion staked online annually. The Commission's own methodology combines web-traffic data with a licensed-play assumption and openly notes it does not capture activity hidden by VPNs. Treat every black-market estimate, including the regulator's, as a floor rather than a measurement.

The Licence Ladder and Four Regimes Compared

A comparison of offshore markets is not a comparison of casinos. It is a comparison of how much supervision stands behind the licence printed at the foot of the page, and what that supervision costs the operator. Cost is a crude proxy for rigour, but it is the only public one.

The Maltese figures are a €100,000 paid-up share capital requirement for Type 1 and Type 2 B2C licences, plus a non-refundable fixed annual licence fee of €25,000 and gaming tax at five per cent of revenue. The Curaçao total of €47,450 comprises a €24,490 licence fee to the National Treasury and a €22,960 supervisory fee to the CGA, payable in full by 15 January. Kahnawake's numbers are the ones to watch: from 1 January 2027 the Client Provider Authorization application fee rises from USD 35,000 to USD 40,000, and the five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it — the KGC's advisory notice of 13 August 2026 made that explicit.

What none of those four columns buys is access to British customers. An operator holding a licence in another jurisdiction and offering commercial gambling services to consumers in Great Britain without a Commission licence is acting illegally, and the Commission says so in terms. The licence ladder tells you how much the operator has invested in being regulated somewhere; it tells you nothing about whether it may lawfully take a bet from Manchester.

The Identity Check That Turns Up Late

If one thing decides how a person's experience of an offshore casino goes, it is when identity verification happens. Everything else — bonuses, withdrawal times, the look of the lobby — is downstream of it.

In the UK-licensed market the rule is now front-loaded. Licence Condition 17 requires licensees to obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the information must include name, address and date of birth. The Commission expects age and identity checks to be brought forward to before a deposit or a stake, and it has been pointed about onboarding on partial information: initials instead of full names, nicknames, a commercial address in place of a residential one. It has also flagged the knock-on effect that matters here — a middle name used where a forename was expected can create a mismatch with records held elsewhere, including GamStop's, undermining the self-exclusion it was meant to enforce.

The first time a check runs on a well-run UK site, it usually runs invisibly. Companies can verify identity by matching account details against databases such as credit reference agencies and the electoral roll, in which case no documents are needed at all. Money Laundering Regulations 2017 require identification and verification in a remote casino when a customer deposits or withdraws €2,000 or more, and the €2,000 threshold applies to linked transactions as well as single ones — in a remote casino, transactions count as linked if they form part of the customer's overall activity during a single logged-on session. Some remote casinos use what the Commission calls a hybrid approach: identify and verify age at registration, defer full verification to the €2,000 trigger.

Later checks are where it goes wrong. Licence Condition 17.1.1 states that a withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested it earlier, and a business that delays a withdrawal for insufficient ID may be in breach of the condition and face regulatory action. Operators cannot confiscate funds because ID has not been provided; the Competition and Markets Authority's view is that consumers are entitled to deposited money, winnings from money deposited and gambled, and bonus winnings where conditions are met. Over a quarter of complaints reaching the Commission's contact centre concern identity verification, a concern customers raise when documents are requested only at the point of withdrawal — and in the year to December 2025 the contact centre logged 1,791 complaints coded "Withdrawals and/or financial transactions", down from 2,416 in the year to December 2022. Falling, but still the largest single category of grievance in British online gambling.

Warning signs that verification is being used as a brake rather than a gate: a site that never mentions documents until a withdrawal is requested; terms reserving the right to void winnings at the operator's discretion; a maximum cashout clause attached to bonus funds; and no named alternative dispute resolution provider in the terms. Anjouan, for what it is worth, requires licensees to designate an approved ADR provider and to publish its name and contact details, with complaints expected to be resolved within 30 days before escalation — the currently approved names are EGIS ADR, Axion ADR, iGaming ADR and one licensee. Kahnawake rules require the player relationship to be contractual and free of unfair terms, and the Commission there employs a full-time Dispute Resolution Officer. Neither of those gives you the Financial Ombudsman-style backstop that a British licence does, but an ADR name you can find is better than silence.

Five Signs an Offshore Operator Can Be Trusted

Not one of these signs is a guarantee. Each of them is a question that has a checkable answer, which is a different and more useful thing.

A Licence You Can Verify on the Regulator's Own Register

The check is mechanical, not interpretive. Every regime publishes a way to confirm a licence without asking the casino. A Curaçao Certificate of Operation Seal must, when clicked, redirect to cert.cga.cw; if the seal differs in design, colour or format, the site is not authorised. If the certificate behind the seal names a different domain from the one being visited, the site is displaying another operator's paperwork and should be treated as unauthorised or fraudulent. Anjouan certificates carry a unique licence number and a QR code linking to the public register, and its own framework says a certificate that cannot be verified there should not be relied on. A historic /JAZ number or legacy orange seal proves nothing: the legacy sub-licence certificates ended on 15 October 2025, and licensing activity ceased for Gaming Curaçao on 18 August 2024, Curaçao eGaming on 1 October 2024, Antillephone on 1 November 2024 and Curaçao Interactive Licensing on 31 January 2025.

Terms That Do Not Reserve Discretion to Void Winnings

Search the terms for the words "may", "reserve the right" and "sole discretion". The Commission's fair-terms guidance says operators should not use terms giving them sole discretion to void or withhold winnings, because such terms are unfair within the meaning of the Consumer Rights Act 2015. A UK-licensed site carrying such a term is a regulatory failure waiting to be found — and it has been found. One licensee was fined £170,000 in July 2025 for failures including a bonus term stating that the operator had the right at its own discretion to close accounts or forfeit winnings. In October 2026 one licensee agreed a £900,000 regulatory settlement that included a breach of Licence Condition 7.1.1 on fair and transparent terms. If a term that the Commission has fined British operators for carrying sits unchallenged in an offshore contract, that tells you what the licence costs its holder and what the holder thinks of it.

A Bonus Whose Arithmetic You Can Do in Your Head

Since 19 January 2026, wagering requirements on bonus funds for UK licensees are capped at ten times, under Social Responsibility Code 5.1.1 — a cap the Commission chose after noting that some licensees had been applying up to 60 times. Mixed-product promotions requiring two or more types of gambling are banned outright. Offshore, multiples typically run far higher: 25× at one well-known offshore casino, with a published contribution chart giving slots 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps and live dealer games 0 per cent unless stated otherwise. Read the contribution chart before the headline number, because a 25× requirement on a game that contributes 5 per cent is arithmetically a 500× requirement on the bonus.

Player Funds Held Separately, and a Stated Insolvency Rating

Ask whether player money sits in a separate client account, and whether the operator publishes an insolvency rating. UK licensees must state in writing, and obtain acknowledgement for, whether customer funds are protected in the event of insolvency, at what level, and by what method, under conditions 4.1.1 and 4.2.1 — with a reminder every six months for operators rated "not protected". Keeping funds in a separate client account does not mean customers get their money back if the operator fails, and businesses are legally allowed to hold customer money in overseas accounts. Anjouan's published standards require operators to segregate player funds from operational funds, to use random number generators certified by an approved independent testing facility, and to maintain AML and age-verification controls. That is a standard on paper — but a published, specific standard is better evidence than a badge with no register behind it.

A Complaints Route That Ends Somewhere Independent

Look for a named ADR provider, its acceptance criteria and its time limits. On the British side, social responsibility code 6.1.1 requires licensees to let a customer refer an unresolved dispute to an ADR entity free of charge if it is not resolved within eight weeks, and the Commission's approved list includes IBAS, eCOGRA, CEDR, ProMediate, ADR Group, Pegasus ADR Service, Blexr and the Tattersalls Committee. The market data is sobering: eCOGRA's Great Britain report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which 150 valid ones concerned deposits and withdrawals, with 17.8 per cent of completed disputes decided in the consumer's favour and an average of 31 days to resolve a domestic case. IBAS recorded 3,721 domestic disputes in 2024-25 with a 20-day average completion time and 65 consumer complaints upheld by written decision. Those percentages are not encouraging for a punter, but a published percentage is a form of accountability that an offshore operator with no ADR provider at all simply does not have.

How to Judge an Offshore Site Before Depositing

Six steps, in order. None of them requires anything unlawful; all of them take about twenty minutes.

1. Verify the licence on the regulator's register, not the site's badge. Click the seal and confirm where it

lands, then check that the certificate names the domain you are on. Prompt: a seal that does not redirect, or that names another site, is the end of the assessment.

1. Read the terms for discretion clauses and maximum cashout limits. Search for "reserve the right", "sole

discretion" and "maximum withdrawal". Reason: these are the clauses that decide whether winnings are paid, and they are the ones the Commission has fined British operators over.

1. Work out the real wagering requirement, including game contribution. Multiply the headline multiple by the

contribution weighting for the game you actually play. Reason: the headline number is the marketing, the contribution chart is the contract.

1. Establish where the money sits and what happens if the operator fails. Look for a stated insolvency

rating and separate client accounts. Reason: an operator rated "not protected" must say so, and a site that says nothing is telling you something.

1. Identify the ADR provider and its deadline for accepting a dispute. Note that ADR providers generally may

require submission within not less than 12 months, and that eCOGRA may refuse a dispute where the site is not on its approved list or where at least two weeks have not passed since the problem began. Reason: the clock starts at the incident, not at the moment of grievance.

1. Set a financial limit before the first deposit and read the identity-check policy. Since 31 October 2025 UK

licensees must prompt customers to set a financial limit before their first deposit and present that as the default, under RTS 12E; offshore sites are under no such obligation. Reason: the one control that reliably works is the one set before any money moves.

A note on the limits themselves. The £5 maximum stake per game cycle for online slots for all adults came into force on 9 April 2025, with a £2 limit for adults aged 18 to 24 from 21 May 2025, under the Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025 — and neither applies to roulette, blackjack or any other casino game. Offshore, no such ceiling exists. That is the trade this keyword is really offering: no stake limit, no GamStop check, no ADR with a statutory footing, and no British licence for the Commission to suspend.

Does an Offshore Licence Mean Anything?

A licence means whatever the issuing authority can actually do to the holder. Malta issues a B2C Gaming Service Licence where a Maltese or EU/EEA entity wishes to offer a gaming service from Malta, to a Maltese person, or through a Maltese legal entity, and it maintains a published list of unauthorised URLs, declaring that any reference to the MGA or a Maltese licence on those domains is false and misleading, with entries carrying notice dates as recent as 30 October 2026. That is a regulator with a functioning enforcement register.

Curaçao's position is mid-reform and genuinely unclear in places. The National Ordinance on Games of Chance took effect on 24 December 2024, replacing the master-licence and sub-licence model with direct licensing by the CGA, and provisional licences granted by operation of law were extended to 24 December 2025. On 7 October 2026 the CGA announced that its previous online gaming portal would not return to service and that an alternative domain- verification mechanism is being developed because the previous digital licence seal may be affected — which leaves a window in which a genuine Curaçao operator may struggle to prove itself. Supplier licensing becomes fully mandatory there on 24 December 2026.

Anjouan is the case that should give any reader pause, and the facts are worth setting out plainly because they are disputed. The Anjouan Gaming Authority names the Anjouan Offshore Financial Authority as the competent regulator, with Anjouan Licensing Services Inc. as the sole authorised licence administrator, and states that an independent legal opinion issued on 19 September 2024 and reconfirmed in February 2026 by a law firm regulated in England and Wales and Quebec confirms the AOFA's lawful authority. That claim comes from the regulator's own side and is not independently confirmed. Against it, an ABC News investigation published 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 per licence per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, with a former attorney-general of the Comoros calling the licensing body "an illegal entity" and the AOFA reported stripped of recognised-regulator status by Comorian banking laws passed in 2013 and 2015. Anjouan Gaming's own statement of 10 June 2026 concedes the essential point: a licence is "not, and has never been presented as, a universal authorisation to operate in every country in the world", and no licensing authority can exempt an operator from local law where local authorisation is required. Read that against section 33 of the Gambling Act 2005, under which the offence does not care whether the facilities are provided wholly or partly by remote communication, or whether they are provided inside or outside the United Kingdom.

What UK-licensed Sites Still Do Better

It is worth being precise about the benchmark, because the comparison is not sentimental. A British licence buys a defined set of behaviours, each with a rule behind it.

The credit card ban, effective 14 April 2020 under licence condition 6.1.2, removed one of the fastest routes into debt-funded gambling, and operators must also satisfy themselves that money arriving from an e-wallet was not loaded from a credit card. Reverse withdrawals were banned permanently from 31 October 2021 under RTS 14B: "Consumers must not be given the option to cancel their withdrawal request." Financial vulnerability checks became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days, lowered to £150 from 28 February 2025, using only publicly available risk flags such as a bankruptcy order, County Court Judgment, Individual Voluntary Arrangement, High Court Judgment, Administrative Order or Debt Relief Order. Financial Risk Assessments were announced on 7 July 2026, starting with the largest operators at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over and £2,500 for under-25s, and ending at £1,000 in 24 hours or £3,000 over 90 days for adults once fully staged.

The withdrawal figures are the ones that make the strongest case. Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. The Commission has said plainly that where it has no regulatory concerns about a customer there is no valid reason to delay a payout, and that it is not acceptable to introduce friction when a customer tries to withdraw rather than when they deposit. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed that it is quick and easy to withdraw winnings, against 18 per cent who disagreed. A licence also buys the protection that a self-exclusion agreement triggers: licensees must close the account of an individual who has entered one and return the funds held in it, and the LCCP states it is not sufficient merely to prevent the individual from withdrawing while still accepting wagers.

The counter-argument, and it is a real one, is that the offshore market exists because some players want out of these controls. The Commission recorded gross gambling yield for the remote casino sector at £5.0 billion for April 2024 to March 2025, of which £4.2 billion came from slots alone, and it rated the sector high risk for money laundering in its 2026 assessment, unchanged from the previous rating. It reports a rise in the sophistication of attempts to bypass customer due diligence using false documents, deepfake videos and AI face swaps, and records "smurfing" — many small transactions designed to stay under the threshold — as a medium-likelihood, high-impact customer risk. None of that is a surprise. It is simply the environment in which any offshore casino operates, and the reason its terms are written the way they are.

Where to Get Help

GamStop Online registration is free and takes a few minutes, though the block can take up to 24 hours to become effective. It is not the only tool. GamStop signposts Gamban and BetBlocker as blocking software for phones, tablets and computers — BetBlocker is a non-profit that states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide, while Gamban blocks licensed and unlicensed sites, ended its free UK licence scheme on 31 March 2026 and now costs £4.99 a month or £29.99 a year in England and Scotland, though it remains free for residents of Wales. Bank gambling blocks work by declining payments to merchants categorised under gambling Merchant Category Codes, apply at card level so must be activated on each card, and most banks apply a 48-hour or 72-hour cooling-off period before gambling transactions are permitted again. The Commission's list of banks offering the service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling.

Beyond the online controls, the National Gambling Helpline is operated by GamCare on 0808 8020 133, free and available 24 hours a day, every day of the year, by phone, live chat and WhatsApp; callers in Wales can also use 0808 2819 265. It is not a crisis line. GamCare's support covers England and Scotland through the helpline, live chat, WhatsApp and Facebook, plus a peer-support chatroom and forums. GamFam, a registered charity set up by people affected by the gambling of family and friends, runs the GRA5P five-stage peer-support programme, currently remote, usually with six to ten members per group. Gamblers Anonymous England, Wales and Ulster can be reached on 0330 094 0322 and runs around 250 meeting locations with no appointment needed. Gam-Anon UK & Ireland supports the family and friends of compulsive gamblers whether or not the gambler attends GA. Citizens Advice Scotland runs a gambling support advice line on 0800 328 1131, Monday to Friday, 10am to 3pm, for free confidential support on debt, housing, work and relationships. The NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB takes self-referrals on 020 7381 7722, and NHS England has opened 15 specialist gambling clinics since 2019, while integrated care boards commission eight regional services receiving close to 5,000 referrals a year.

For a dispute with an operator rather than a need for support, the route runs through the site's own complaints procedure first. eCOGRA's figures show why that matters: of 499 invalid disputes in its 2024-25 Great Britain report, 361 — 72.3 per cent — had not been through the operator's internal complaint procedure first. The Commission itself is a regulator, not an ombudsman, so it cannot resolve an individual complaint or retrieve anyone's money.

Questions About the Offshore Market

Are offshore casinos that take UK players legal?

They are not licensed here, and the Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, including where the operator holds a licence in another jurisdiction. The offence under section 33 of the Gambling Act 2005 attaches to the person providing the facilities, not to the adult customer. So the operator is the one committing an offence, and the practical point for a player is not legality but recourse: no British licence means no Commission, no licence condition and no statutory footing for anything.

Are the best online casino not on GamStop the ones with the highest payouts?

Payout percentage and payout reliability are different things, and the second matters more. A licensed site with an ordinary return-to-player can still clear a withdrawal automatically, as the vast majority do — 96.3 per cent of 44.2 million withdrawals recorded between June and September 2024. An offshore site advertising a generous percentage may attach a maximum cashout clause, such as a cap at 300 per cent of the bonus amount with the excess voided. Read the cap, not the percentage.

Why do some offshore sites hold a licence nobody in Britain recognises?

Because a licence is a cost of doing business in a jurisdiction, not a passport. Anjouan states that its licences contain no territorial restrictions under Anjouan law, while also requiring holders to comply with the law of every jurisdiction in which they operate — and conceding that no licensing authority can exempt an operator from local authorisation requirements. Kahnawake, similarly, regulates clinical detail such as mandatory hosting at a single data centre in the Mohawk Territory, without conferring any right to serve British customers. The licence tells you where the operator is supervised. It does not tell you where it may legally trade.

Do offshore casinos see a GamStop self-exclusion?

No. GamStop Online blocks access only to gambling companies licensed in Great Britain, and its own terms state it is unable to prevent access to services run by organisations that do not participate in the scheme. Participation is a condition of a Commission licence under social responsibility code 3.5.5, so an operator without one is not in the system and is not checked against it. A self-exclusion is not a locked door worldwide; it is a locked door across the British licensed market, and it holds for its full term until the person contacts GamStop to remove it.

What does a UK licence actually give a player that an offshore one does not?

A defined set of rules with an enforcer behind them. Wagering requirements on bonus funds capped at ten times from 19 January 2026; reverse withdrawals banned since 31 October 2021; credit cards banned since 14 April 2020; a withdrawal that must not trigger new document requests that could reasonably have been made earlier; account closure and return of funds on self-exclusion; and a free route to an approved ADR provider if a complaint is not resolved within eight weeks. None of that is guaranteed to feel generous, and the complaint statistics show it often does not. It is simply enforceable.

Are the regulator's takedown figures good news or bad?

Both, and the Commission is unusually candid about it. Of its 3,140 cease and desist and disruption notices since April 2024, registrar blocks and suspensions cut engagement by an average of 91 per cent, while Google removal managed 30 per cent and Facebook removal 8 per cent — search removal makes a site harder to find without blocking it. Meanwhile four quarters from April 2025 to March 2026 produced one prosecution in total. The disruption machine works unevenly and the criminal deterrent barely operates at all, which is why offshore sites remain findable in UK search results.

The Only Benchmark That Holds

Strip the marketing away and the search for the best casino not on GamStop comes down to a comparison of supervision, not of brands, because an unlicensed operator offers no protection that can be enforced on this side of the water — no licence to suspend, no ADR with a statutory footing, no self-exclusion check. The practical test is whether the operator has invested enough in being regulated somewhere that a genuine register confirms it, and the Commission's own data shows why the question keeps being asked: in July to September 2026 alone it referred 1,835 websites and 7,677,211 URLs to search engines, and still recorded not a single prosecution commenced that quarter.