Real-money casino play online means staking your own money on games run by a licensed operator. In Great Britain that operator must hold a Gambling Commission licence; offshore sites taking UK players without one are trading illegally, are not covered by GamStop, and offer no UK protections. The help line is 0808 8020 133.
The phrase "casino online play real money" carries a promise inside it — that the money is real, the games are real, the winnings will actually arrive. In Great Britain, whether that promise holds depends less on the games than on who is allowed to sell them. That is the part I find most people skip, and the part the regulator spends most of its enforcement budget on.
Since April 2024 the Gambling Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 search engine URLs and secured 287,961 URL removals. Across 160 illegal gambling websites with usable traffic data, engagement fell by an average of 32 per cent after disruption. Those are not small numbers, and they tell you what the regulator's own view of the offshore trade is: not a grey area, but a problem to be closed down.
So the honest way to look at real-money internet casino play is to split the market in two. On one side sit operators licensed by the Commission, bound by the Licence Conditions and Codes of Practice, plugged into the national self-exclusion scheme, and answerable for identity checks and payout behaviour. On the other sit sites licensed in Curaçao, Anjouan, Kahnawà:ke or nowhere at all, and the difference between those two sides is not a matter of taste.
One note on the name of the scheme, because it trips people up: it is written GamStop, and it is very often typed "gamestop".
Table of Contents16
- What the Regulator Does About Unlicensed Sites
- Online Casino Play for Real Money, With a British Licence
- Play Casino Online for Real Money, and Where the Terms Change
- How Different Licensing Regimes Compare
- Understanding Identity Verification Requirements
- Five Signs an Operator Can Be Trusted
- How to Judge a Casino Before You Put Money In
- What Promotional Offers Actually Mean
- The Rules That Delay a Payout
- Industry Numbers and Market Trends
- Game Economics and Operating Costs
- How Winnings Are Processed and Verified
- What Is an Offshore Casino Licence Actually Worth?
- How Do You Know Where the Site Is Licensed?
- Frequently Asked Questions
- The Short Version
What the Regulator Does About Unlicensed Sites
The Commission is not an ombudsman and it does not chase individual refunds. What it does have is an Illegal Markets team, and a quarterly habit of publishing what that team did.
In July to September 2026 it referred 1,835 websites to search engines — 7,677,211 individual URLs — and issued 546 cease and desist notices to illegal operators. In the quarter before, April to June 2026, it referred 366 websites (147,721 URLs) and began zero criminal investigations. Prosecutions are rarer still: across the whole year April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced, a total of one.
What actually works, by the Commission's own measurement, is not search removal. Registrar blocks and website suspensions each produced an average 91 per cent fall in engagement; GEO IP blocking produced 60 per cent; Google removal 30 per cent; Bing removal 52 per cent; Facebook removal 8 per cent. Search removal makes a site harder to find. A registrar block makes it stop resolving. Only one of those is a wall.
There is a wearier figure underneath. Commission analysis published 5 November 2026 estimates that 0.6 per cent of the whole population, including non-gamblers, engaged with an illegal gambling website in the past four weeks, and a further 0.4 per cent in the past 12 months. Among those who had gambled online in the past four weeks, the estimate is 2.5 per cent, with another 1.5 per cent in the past year. Those proportions are small and they are not the point. The point is that a person who lands on one of these sites is outside the whole protective apparatus at once.
Online Casino Play for Real Money, With a British Licence
To offer real-money casino games to consumers in Great Britain, an operator needs a licence from the Gambling Commission, and it needs one even if it already holds a licence somewhere else. That is the Commission's plain statement, published 21 October 2024, and it is the sentence on which the entire two-tier market rests.
Licensed play is defined less by the games and more by the apparatus around them. The stake limits are a useful illustration because they are specific: a £5 maximum stake per game cycle on online slots for all adults, live since 9 April 2025, and £2 for players aged 18 to 24, live since 21 May 2025. Both came in through the Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025, which attached a condition to every remote casino operating licence. They apply to online slots only. Roulette and blackjack are untouched.
Around that sit the slower rules. Since 31 March 2020, participation in GAMSTOP has been a licence condition, sitting in social responsibility code provision 3.5.5 of the LCCP, which says licensees "must participate in the national multi-operator self-exclusion scheme". Since April 2020 the entire customer base must be checked against the register at least every 24 hours. Credit cards have been banned for gambling since 14 April 2020. From 31 October 2025, every operator must prompt a customer to set a financial limit before the first deposit. From 19 January 2026, wagering requirements on bonus funds are capped at ten times and mixed-product promotions are banned outright — the Commission said the cap "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements".
None of this is glamorous. All of it is what "real money" means in a licensed market: the money is real, and so is the recourse.
Play Casino Online for Real Money, and Where the Terms Change
An offshore site is not licensed in Great Britain. It may hold a Curaçao, Anjouan or Kahnawà:ke licence, or claim to hold one; it may hold nothing beyond a Costa Rican data-processing registration, which is not a gambling licence in any strict sense. Costa Rica has no comprehensive gambling licensing regime, and its Legislative Assembly rejected Bill No. 25,057 in early 2026 — the bill that would have introduced one.
The first thing to understand is that a licence from somewhere else is not a substitute. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it applies to remote gambling if at least one piece of remote gambling equipment is situated in Great Britain, or if the provider knows or should know the facilities are likely to be used in Great Britain. The Commission's own summary lists offering gambling facilities in Great Britain without a licence as an operator offence under that section, punishable on summary conviction by up to 51 weeks' imprisonment, a level 5 fine, or both.
The second thing is what that leaves the player with. No GamStop registration, because the scheme can only exclude people from participating operators and offshore sites are not connected to it. No access to a Commission-approved ADR provider as a matter of right. No customer funds protection rating, no LCCP conditions on withdrawal terms, no requirement to return the balance when an account is closed. A warning notice the Commission issued on 20 January 2025 said such sites often target customers who have self-excluded via GAMSTOP and may have inadequate social responsibility and anti-money-laundering controls. That is the trade described from the outside.
Self-exclusion itself does not bend to this. A GamStop exclusion holds for its full term — six months, one year, five years, or five years with auto-renewal — and once registered it cannot be cancelled during that period. When the term ends it stays in place until the person contacts GamStop to remove it. The terms of use allow auto-renewal to be switched off only in the last six months of a five-year minimum exclusion period, and auto-renewal can run for up to four further five-year periods. If nothing is done after the chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. An offshore site is not a way around any of that. It is simply a place the scheme does not reach.
The Curaçao market is worth a paragraph on its own, because it is where most offshore casino licences advertised to UK players come from, and because it is mid-reform. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority. The old master-licence and sub-licence model is gone; the legacy "orange" certificates of operation ended on 15 October 2025 and should not be treated as proof of a current licence. Licensing ceased for the four former master licensors on 18 August 2024, 1 October 2024, 1 November 2024 and 31 January 2025 respectively. A historic /JAZ number or legacy seal is not independent proof that an operator holds a valid CGA licence. There is a real reform happening; there is also a great deal of obsolete paperwork still displayed on websites.
How Different Licensing Regimes Compare
The table below compares the licensing frameworks a UK player is most likely to encounter behind a real-money casino site — not by brand, which tells you nothing, but by the regime the operator is actually answerable to.
| Licensing regime | Who supervises | Cost of holding it | What it gives a GB player | Reach of self-exclusion |
|---|---|---|---|---|
| Great Britain (Gambling Commission) | Gambling Commission | Licence conditions plus the statutory levy: 1.1% of prior-year Gross Gambling Yield for online operators | Gambling Act 2005 protections, LCCP conditions, 10× wagering cap, credit card ban, £5/£2 slots stake limits, ADR access | GamStop Online — 6 months to 5 years, plus a 7-year data retention period |
| Curaçao (LOK, from 24 December 2024) | Curaçao Gaming Authority | EUR 4,592 one-time B2C application fee; EUR 47,450 total annual B2C fee (EUR 24,490 treasury + EUR 22,960 supervisory) | Segregation of player funds and certified RNGs under CGA standards | None connected to GamStop |
| Anjouan (Comoros) | Anjouan Gaming Authority / AOFA | EUR 17,828 B2C issuance, EUR 17,828 annual renewal, EUR 500 per extra domain | Published standards on fund segregation, certified RNGs, AML and age verification; a designated ADR provider with a 30-day internal window | None connected to GamStop |
| Kahnawà:ke | Kahnawà:ke Gaming Commission | CPA application rising to USD 40,000 on 1 January 2027; annual CPA fee USD 20,000 | Contractual relationship with the player, limit-setting including zero, a full-time Dispute Resolution Officer, clickable logo certificate check | The KGC's own voluntary self-exclusion is permanent and irrevocable; no link to GamStop |
| Costa Rica | No comprehensive gambling licensing regime | The "data processing license" is not a gambling licence in the strict legal sense | Nothing enforceable | None |
| No licence at all | Nobody | Zero | Nothing | None |
One number in that table is worth pausing on. The annual Curaçao B2C fee of EUR 47,450 — roughly the price of a mid-range car — buys a licence that covers the operator's whole player base. The comparison is not that a British licence is morally superior. It is that the two regimes are not the same product, and the price difference is a hint about how much supervision sits behind each.
There is one further wrinkle in Curaçao's numbers: a third-party tracker reading the CGA's public register reported 704 Curaçao licences held by 698 operators, of which 552 were active, as of 03:30 UTC on 6 November 2026. That is an aggregator's read, not a CGA publication, and it should be treated as such. But it does suggest the register is not a small, curated list.
Understanding Identity Verification Requirements
If there is one thing that decides whether real-money play goes smoothly or turns into a fortnight of email, it is identity verification. It is also the single largest source of complaints about online casinos.
Under Licence Condition 17, introduced on 7 May 2019, a licensee must obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the information must include, at a minimum, name, address and date of birth. The Commission expects those checks to be brought forward to before a deposit or a stake, and says onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential — is not sufficient. Its August 2026 blog noted a specific consequence: onboarding a customer with a middle name instead of a forename can create mismatches with records held elsewhere, including GAMSTOP, undermining the whole point of self-exclusion.
Under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, the trigger for full CDD in a remote casino is a deposit or withdrawal of €2,000 or more, whether in a single transaction or in linked transactions — linked meaning, for instance, transactions in the same game or within a single logged-on period. A remote casino may take what the Commission calls the hybrid approach: identify the customer and verify age at registration, then defer full identity verification until the €2,000 threshold is reached. Where an operator runs a shared wallet across products, CDD bites when the customer first enters the casino part of the site and deposits.
On documents, the Commission names passports, driving licences and household bills as things a business can ask for, and notes that matching an account against databases such as credit reference agencies and the electoral roll often removes the need for documents altogether. There is no published timescale, because the Commission says the length of the process varies. If verification is electronic it can be instant; if documents are requested, it takes longer.
The warning signs are specific. First, being asked for documents for the first time at withdrawal — Licence Condition 17.1.1 says a withdrawal request must not create a requirement for information the licensee could reasonably have requested earlier, and the Commission has said operators delaying a withdrawal for insufficient ID may be in breach. Second, friction that appears only on the way out. In October 2026 the Commission announced that one licensee would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals, with specific failures being a term restricting customers to one withdrawal at a time until the previous one was authorised, and manual review of every fifth or tenth withdrawal for some customers. Third, a business that asks for the same document twice, or for documents it does not explain. The Commission's Contact Centre receives over 6,000 calls a year, and more than a quarter of complaints concern identity verification, raised most often by customers asked for documents only when they try to withdraw.
None of that means asking for ID is suspicious. It means the timing is the tell. A licensed operator that cannot verify electronically will tell you, before you deposit, what it might need. A site that discovers an appetite for paperwork at the cashier has told you something else.
Five Signs an Operator Can Be Trusted
The licence is checkable, and it names the domains you are using
The Gambling Commission's advice is to click through to its public register and see whether the site's activities and domain names match what is on the licence. A licence certificate that exists but does not list the domain you are actually on is not evidence of anything.
The withdrawal terms contain no cap, no fee surprise and no forced one-at-a-time request
The Commission's guidance says operators may not impose any term stating a maximum amount a consumer may withdraw from their deposit balance, with the example given as "You may withdraw up to £50 per day and up to £500 per week". Cost-reflective processing fees and reasonable limits on the number of separate withdrawals are permitted, but only under a fair, transparent term made clear before you deposit.
The bonus terms are short, legible and capped
Since 19 January 2026 a licensed operator cannot apply wagering requirements above ten times, and cannot mix products inside one incentive. The Commission's fair-terms guidance says marketing of a promotional offer must comply with LCCP social responsibility code 5.1.9, and that simply burying the conditions in website terms and conditions is not sufficient. If the headline offer needs a calculator and a timeline to understand, that is the finding.
The complaints path ends somewhere other than the operator
LCCP social responsibility code provision 6.1.1 requires licensees to let customers refer an unresolved dispute to an ADR entity free of charge if it has not been sorted within eight weeks, after the operator's own complaints process has been used. The Commission's approved list includes ADR Group, Pegasus ADR Service, Blexr, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. IBAS is the gambling specialist and is free to consumers. A site with no named ADR provider has no end to the corridor.
Customer funds protection is stated, in writing, before you play
Licence condition 4.2.1 requires a licensee holding customer funds to state clearly in its terms whether those funds are protected on insolvency, at what level, and by what method — and the disclosure must be acknowledged in writing on the first deposit. The ratings are "not protected", "medium protection" and "high protection". An operator rated "not protected" must remind the customer every six months. Note the limit: keeping money in a separate client account does not mean you get it back if the operator fails, and gambling businesses may hold customer funds in overseas bank accounts.
How to Judge a Casino Before You Put Money In
- Open the public register and match the domain. The Commission advises checking that the business holds a British licence and that the site's activities and domain names appear on the register entry. Reason: a licence number in a footer proves nothing if it belongs to a different company or a different website.
- Read the withdrawal clause before reading the welcome offer. Look for a maximum withdrawal limit on the deposit balance, a processing fee, a minimum withdrawal size, or a clause restricting how many withdrawal requests can be outstanding. Reason: LCCP licence condition 7.1.1 requires terms not to be unfair within the meaning of the Consumer Rights Act 2015, and the Commission's guidance already rules out maximum withdrawal limits on deposit balances.
- Check the customer funds rating and the ADR provider in the same sitting. Both must be disclosed, and both tell you what happens when something goes wrong rather than when everything goes right. Reason: the funds rating matters only in insolvency, and the ADR provider matters only in a dispute, which is exactly why neither is prominent.
- Read the bonus terms against the ten-times cap. Count the wagering multiple, check whether the requirement attaches to the bonus only or to deposit plus bonus, check the maximum bet allowed while wagering, and check the game contribution weightings. Reason: since 19 January 2026 a UK-licensed operator cannot set wagering above 10×, so anything higher tells you which market you are in.
- Set a financial limit at the first deposit prompt, and note the withdrawal method fees. Since 31 October 2025 operators must prompt for a financial limit before the first deposit, present it as the default, and offer a free-text box at account level. Reason: an e-wallet withdrawal can carry a 2.80 per cent fee with a minimum, so the money leaving is not always the money you won.
- If you want a hard barrier rather than a setting, use GamStop and blocking software. GamStop registration blocks all online gambling companies licensed in Great Britain, takes a few minutes to set up and up to 24 hours to become effective, and cannot be cancelled inside the term. Gamban and BetBlocker are signposted by GamStop for an extra layer; BetBlocker reports blocking over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Reason: account-level limits are a promise a determined person can undo in a settings menu; a national register is not.
What Promotional Offers Actually Mean
The free-play searches are the ones most likely to lead someone somewhere unfortunate, so it is worth being exact. In Great Britain, a no-deposit or free-play offer is a promotional incentive, and since 19 January 2026 it is bound by LCCP social responsibility code 5.1.1: no more than one type of gambling product inside an incentive, terms that are clear, transparent, fair and readily accessible, and no wagering requirement above ten times.
The Commission's fair-terms guidance for the UK market goes further and removes the machinery that made "free" bonuses sticky. Wagering requirements must not apply to play with a consumer's deposit balance. Deposit and bonus balances must always be displayed separately. A player must be allowed to withdraw their deposit balance at any time, including while a bonus is pending or active. Un-staked deposits remain the customer's, and operators may not have terms allowing confiscation of money deposited but not yet staked.
Offshore, the same words mean different arithmetic. A published offshore comparison table puts welcome-bonus multipliers typically at 35× to 50×, and no-deposit bonuses at 40× to 60× with a €50–€100 cashout cap. Individual operators state their own terms: one large offshore casino describes a 25× playthrough requirement calculated on either the bonus alone or the bonus plus deposit, with a contribution chart that gives slots 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer games and jackpot games 0 per cent. Another caps the maximum bet while wagering at €5 for regular players and €10 for VIPs, and reserves the right to limit withdrawals from bonus winnings to 300 per cent of the credited bonus amount, voiding the excess.
Convert the two into plain English. A ten-times cap on a £10 bonus asks for £100 of play. A forty-times requirement on the same bonus, weighted at 20 per cent on table games, asks for £2,000 of play on those games. The deposit was real money in both cases. Only one of them is a promotion in any useful sense.
The Rules That Delay a Payout
Reverse withdrawals are gone in the UK. Requirement 14B of the RTS came into force on 31 October 2021 and states that "Consumers must not be given the option to cancel their withdrawal request" — once a withdrawal is requested, the funds cannot be turned back into a deposit. The Commission's reason was evidence that the reverse withdrawal function presents a risk to engaged and vulnerable gamblers.
What remains is disclosure. Where an operator has no regulatory concerns about a customer, the Commission says there is no valid reason to delay a payout, and operators should explain why a withdrawal has been delayed or refused, subject to the statutory prohibition on tipping off in money-laundering cases. Money-laundering rules can genuinely require a delay: where an operator suspects or has knowledge of laundering, it must submit a Suspicious Activity Report and obtain a Defence Against Money Laundering from the National Crime Agency before moving or returning customer funds. The Commission has been clear that this does not give operators the right to confiscate deposits.
Withdrawal complaints have fallen over time. Complaints to the Commission's Contact Centre coded "Withdrawals and/or financial transactions" dropped from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Separately, Commission data for June to September 2024 covering large online operators recorded 44.2 million withdrawals, of which 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours.
The gap between 96.3 per cent clearing automatically and the persistence of withdrawal complaints is instructive. For nearly everyone the cashier is a non-event. For the small remainder it is the entire experience, and the LCCP sets no fixed maximum number of days within which a withdrawal must complete — the regime relies on the fair and open condition 7.1.1, the identity-verification condition 17.1.1 and the prohibition on unfair terms. If that absence of a deadline is comfortable for anyone, it is not the player.
Industry Numbers and Market Trends
Two sets of numbers sit behind all of this, and they pull in opposite directions.
The first describes a licensed market that is large and growing. Total Great Britain gambling industry Gross Gambling Yield was £17.5 billion in the year April 2025 to March 2026, up 4.4 per cent on the previous financial year. Remote casino, betting and bingo contributed £8.3 billion of that, up 6.9 per cent, while land-based sectors generated £4.9 billion, up 1.1 per cent. In the quarter January to March 2026, total online GGY was £1.55 billion, up 7 per cent year-on-year, across 26.8 billion bets and spins and 13.4 million average monthly active accounts. Online slots alone rose 12 per cent to £773 million on 25.1 billion spins.
The second describes a black market that is contested and hard to count. H2 Gambling Capital estimates the amount staked with illegal operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. A study by Frontier Economics for the Betting and Gaming Council put the black market conservatively at £2.7 billion staked annually online, involving 1.5 million Brits. Yield Sec, analysing for the Campaign for Fairer Gambling, put the GB online market at £8.8 billion gross gaming revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. Mine these against each other and the honest conclusion is that every estimate depends on its assumptions, and that the Commission's own October 2024 methodology explicitly notes it does not capture activity hidden by VPNs.
What the Commission can count is the sites. Its illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, 4 per cent below the previous three-month average but 4 per cent above September 2025. In Quarter 2 of 2026 to 2027, 311 illegal gambling websites had disruption action taken against them, 38 per cent more than the previous quarter, and 77 per cent of disrupted websites saw a reduction in estimated traffic.
There is a taskforce now, too. The Illegal Gambling Taskforce's terms of reference were published by DCMS on 13 May 2026, with three priorities: reducing payments to and from illegal operators, tackling the online advertising of illegal gambling, and improving cross-agency enforcement. It runs for 12 months and meets at least twice a year. The reference to payments is the one to watch — the Commission has described reporting payment transaction data to the Visa Operator Scheme as a critical and still early-stage part of its financial disruption strategy, and it made its first referral to Visa in January 2025 following a test purchase on an unlicensed website, with three further referrals since.
Game Economics and Operating Costs
Not every game is treated the same way, and the differences matter more than the lobby design suggests.
Online slots are the most regulated product in the market. Since 9 April 2025 the maximum stake is £5 per game cycle for all adults, and since 21 May 2025 it is £2 for players aged 18 to 24. A minimum of 2.5 seconds must elapse from the start of a game until the next game cycle can be commenced under RTS 14D. Slots are also where the money is: the remote casino sector generated £5.0 billion of gross gambling yield in April 2024 to March 2025, of which £4.2 billion came from slot games.
Roulette and blackjack sit outside the stake limits entirely — the £5 and £2 caps apply to online slots only. They also carry very different weightings in bonus terms, which is why the offshore table above gives roulette and baccarat 5 per cent and craps and live dealer games 0 per cent. A bonus that looks generous in the lobby can be nearly unplayable if the games you actually want to play are weighted away from it.
Live dealer games are an interesting case because they combine two sets of rules. The Commission's gambling machine thresholds apply only in premises-based casinos; automated and semi-automated table games such as touch-bet roulette are not "gaming machines". A live dealer game is a remote product with a human croupier and a video feed, and it is regulated as remote casino activity — which means the identity-verification regime applies, and the bonus weighting is likely to be zero.
The practical upshot is that the phrase "casino games" conceals a set of quite different economics. A £100 deposit on slots at a licensed operator obeys one set of rules; the same £100 on live roulette at an offshore site obeys almost none of them.
How Winnings Are Processed and Verified
Winning is the part of the process that most coverage skips, because it is where the disappointments live.
The first gate is identity. Once a customer requests a withdrawal, the operator cannot ask for information it could reasonably have requested earlier, unless another legal obligation — typically anti-money-laundering — requires it at that moment. This is what makes the timing of a document request a meaningful signal rather than a mere annoyance.
The second gate is the terms. A licensed operator cannot impose a maximum withdrawal limit on the deposit balance and cannot confiscate un-staked deposits, nor deduct from a deposit balance on the basis that identity or age verification has failed. It cannot use inactivity to confiscate a balance either; where a credit balance account has been inactive at least 12 months, the operator must try to repay it to the last payment method used, and only a reasonable maintenance charge is permitted after 12 months of the player being unable to verify their identity, with at least 30 days' notice. Operators should not use terms giving them sole discretion to void or withhold winnings, because the Commission considers such terms unfair within the meaning of the Consumer Rights Act 2015.
The third gate is arithmetic on the payment method. Winning £500 is not the same as receiving £500, depending on the route. An e-wallet that charges 2.80 per cent of the amount withdrawn with a minimum charge will take a slice. The rate is the rate whether the money moved out of a wallet or off a balance.
And the fourth gate, which contradicts everything above, is that the LCCP sets no fixed maximum number of days for completing a withdrawal. The protections are about fairness and process, not about a clock. That is not a loophole anyone should rely on, but it is a fair reading of the rulebook, and it is why the complaints figures exist at all.
How Does GamStop Fit Into All This?
GamStop Online is the UK's national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited, company number 10504973, with its registered office at 3 Greengate, Cardale Park, Harrogate, HG3 1GY. It was established in June 2017 by the Remote Gambling Association at the request of DCMS and the Gambling Commission, and went live on 27 April 2018. In November 2025 it was renamed "Gamstop Online" following a website update, and the betting shop scheme formerly known as MOSES became "Gamstop Betting Shops". It is free to use.
Registration blocks you from gambling with all online gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. It takes a few minutes to sign up and up to 24 hours for the block to become effective. Once registered, the exclusion cannot be cancelled or deactivated during the period, and it stays in place after the period ends unless the person contacts GamStop to remove it. Auto-renewal can be turned off only during the last six months of a five-year minimum exclusion period, and continues for up to four new five-year periods.
The numbers are substantial. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of that year, with 58,675 registrations in the final six months — an average of 319 a day. The first half of 2026 saw a 16 per cent year-on-year increase, with May 2026 setting a monthly record of 12,236 sign-ups. As of July 2026 the register held 614,738 consumers, of whom more than one in two had chosen the maximum five-year exclusion. Of the periods selected in 2025, 29 per cent chose six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. Under-25s accounted for nearly one in three self-exclusions in the first half of 2026, a 26 per cent year-on-year increase. The 2025 annual report recorded the gender split as 94.3 per cent male and 5.7 per cent female.
Land-based gambling runs on separate schemes, which is a frequent source of confusion. SENSE covers all licensed land-based casinos in Great Britain, with a minimum six-month exclusion extendable to twelve months and a six-month "Thinking" period afterwards, during which removal can only be requested in person at a casino by speaking to a manager, followed by a 24-hour cooling-off period. Gamstop Betting Shops is telephone-based on 0800 294 2060, covers a fixed 12-month term that cannot be ended early, works with over 60 operators across approximately 6,000 shops, and applies a 24-hour cooling-off period on return. Arcades self-exclude through a BACTA scheme and Boomerang Digital; bingo clubs through the Bingo Association. The Commission's May 2026 FOI response put active SENSE self-exclusions at 12,445 and Gamstop Betting Shops at 9,075 for the year to 1 April 2026.
For anyone who wants a barrier that does not depend on a company's goodwill, there are two more layers. Bank gambling blocks are offered by Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, per the Commission's list last updated 16 October 2026. They work by declining payments to merchants categorised under gambling Merchant Category Codes, are applied at card level so must be activated on each card, and involve a cooling-off period of 48 or 72 hours at most banks before gambling transactions are allowed again. They do not affect your credit score. Separately, blocking software such as Gamban and BetBlocker can be installed on phones, tablets and computers. Gamban states that it blocks licensed and unlicensed sites; its free UK licence scheme, TalkBanStop, ended on 31 March 2026, and Gamban is now free for residents of Wales but costs £4.99 a month or £29.99 a year in England and Scotland after a seven-day trial.
What Is an Offshore Casino Licence Actually Worth?
It is worth being precise, because the answer depends on which one. A Curaçao licence under the new LOK framework is a real licence issued by a real authority with published fees, published certification standards and a public register. The CGA issues two distinct seals — a Certificate of Operation Seal, issued only to B2C operators and only for an approved and registered player-facing domain, and a License Certificate Seal, available to B2B and B2C entities and not domain-specific — and clicking a Certificate of Operation Seal must redirect to cert.cga.cw. If the certificate behind the seal displays a different domain name from the site being accessed, the site is displaying a certificate belonging to another operator.
Anjouan's position is more contested. The Anjouan Gaming Authority names the Anjouan Offshore Financial Authority as the competent regulatory authority, with Anjouan Licensing Services Inc. as the sole authorised licence administrator. Its published standards require segregation of player funds, random number generators certified by an approved independent testing facility, and AML and age-verification controls. Licence certificates carry a unique number and a QR verification code linking to a public register, and Anjouan says certificates that cannot be verified through that register should not be relied upon. Against that, an ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; a former attorney-general of the Comoros called Anjouan Licensing Services, which sells the licences, "an illegal entity". One licensee publishes an independent legal opinion, issued on 19 September 2024 and reconfirmed in February 2026 by a law firm regulated in England and Wales and Quebec, which is reported to confirm that the AOFA is the lawful regulatory authority — that is the licensee's own statement, not a regulator's. Anjouan Gaming itself said in a statement on 10 June 2026 that "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world", and that no licensing authority can exempt an operator from local law where local authorisation is required.
Kahnawà:ke is the oldest of the three, with the Kahnawà:ke Gaming Commission established in 1996 and its Regulations concerning Interactive Gaming enacted on 8 July 1999. It imposes real structure: operators licensed by the KGC must be hosted at Mohawk Internet Technologies, the Commission's voluntary self-exclusion is permanent and irrevocable, a player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity, and a full-time Dispute Resolution Officer handles disputes. It also issues an Interactive Gaming Licence held by only one entity at a time — Mohawk Internet Technologies since 1999 — with operators sitting under Client Provider Authorisations, and it suspended the CPA held by Polar Ventures SDRL effective 29 September 2026 following a show cause notice.
So: real frameworks exist, and they are not nothing. What none of them is, is a British licence. None carries LCCP conditions, none connects to GamStop, none gives a UK player a statutory route to a Commission-approved ADR provider as a matter of right, and none imposes the ten-times wagering cap or the withdrawal-term rules that licence condition 7.1.1 and condition 17.1.1 impose. That is the whole of the comparison, and it is not a matter of opinion.
How Do You Know Where the Site Is Licensed?
Ask the certificate, not the footer. A licence seal that does not verify against a public register should not be relied upon as evidence of licensing status, and that principle holds whether the seal says Curaçao, Anjouan or nothing at all. The Commission's advice is to check that a business holds a British licence and to click through to the public register to see whether the site's activities and domain names match. The CGA's rule for its own seals is the same test: click it, and see where it goes and whose domain it names. Anjouan's published framework makes the same demand of its certificates.
The things that make this hard are rarely mysterious. A licence number left in a footer after a licensing regime changes is the commonest example — the legacy Curaçao seals tied to the master licensors are obsolete, because the master licences themselves ended on 18 August 2024, 1 October 2024, 1 November 2024 and 31 January 2025. A certificate naming a domain the site does not use is the second commonest. Displaying a genuine CGA Cookie licence certificate as a stand-in for a Certificate of Operation is a compliance breach in its own right, and the two are not interchangeable.
One more thing is worth noting about the direction of travel in Curaçao. Supplier licensing and supplier registration become fully mandatory and enforceable there from 24 December 2026, the end of a two-year transitional period, and from that date suppliers established outside Curaçao that provide critical services or goods to Curaçao gaming licence holders must register with the CGA. That is a serious tightening. It does not make a Curaçao licence a British one, and it does not create any of the protections a UK player would otherwise have.
Frequently Asked Questions
Can you play casino games online for real money in Great Britain?
Yes. Real-money online casino play is lawful in Great Britain when the operator holds a Gambling Commission licence, which every site serving GB consumers is required by law to have. Licensed operators must verify identity before you gamble, cannot accept credit cards, cannot offer slots stakes above £5 per game cycle — £2 for 18 to 24s — and cannot set bonus wagering above ten times.
Where can I play online casino for real money safely?
Anywhere the Gambling Commission's public register confirms the licence covers the domain being used. That check takes a minute and settles more than any review. Beyond it, look for three disclosures: the customer funds protection rating under licence condition 4.2.1, a named ADR provider under social responsibility code 6.1.1, and withdrawal terms with no maximum limit on the deposit balance.
What casino games can I play online for real money?
Slots, roulette, blackjack, baccarat, video poker, live dealer tables and bingo all run for real money at licensed operators. They are not regulated identically: the £5 and £2 stake caps apply to online slots only, and bonus contribution weightings vary enormously — a typical offshore chart gives slots 100 per cent, table games 20 per cent and roulette 5 per cent.
Do offshore casinos appear in GamStop?
No. A GamStop exclusion blocks you from gambling with companies licensed in Great Britain, and the scheme can only exclude you from participating operators, so offshore sites that hold no Commission licence are not connected to it. The Commission issued a warning notice on 20 January 2025 saying such sites often target customers who have self-excluded and may have inadequate controls.
How long does a GamStop exclusion last, and can it be lifted early?
It lasts for the term chosen — six months, one year, five years, or five years with auto-renewal — and it cannot be cancelled during that period. It also stays in place after the term ends unless the person contacts GamStop to remove it. Its 2025 annual report devotes a section to the Group's refusal to remove registrations before the chosen term ends.
How do I make a complaint about an online casino?
Use the operator's own complaints process first, because ADR providers will not accept a dispute that has not been through it — eCOGRA recorded that 361 of 499 invalid disputes in its 2024–25 reporting year had not. If it is unresolved after eight weeks, refer it free of charge to a Commission-approved ADR provider such as IBAS or eCOGRA. The Commission itself is a regulator, not an ombudsman, and does not resolve individual complaints.
What is the free play no-deposit real money offer really worth?
Less than the headline suggests, and the terms decide. In the UK, licensed rewards are capped at ten times wagering, cannot mix products since 19 January 2026, and cannot apply wagering requirements to play with your deposit balance. Offshore no-deposit offers typically run 40× to 60× with a €50–€100 cashout cap, so the practical value is a capped experiment, not money.
The Short Version
Real-money casino play in Great Britain is a regulated product, and the regulation is the product — a licence that is checkable on a public register, identity checks before you gamble, a ten-times cap on bonus wagering, a credit card ban, and a national self-exclusion register that does not take early release requests. Offshore sites are not licensed in Great Britain, UK protections do not apply to them, and no offshore licence changes that. The Commission's Illegal Markets team referred 1,835 websites to search engines in a single quarter — 7,677,211 URLs — and its own measurement says a registrar block cuts engagement by 91 per cent where a Google removal cuts it by 30. If you or someone you know needs help, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, and is operated by GamCare.
