Online Gambling UK and Who Decides When It Goes Wrong

Online gambling in the UK is legal only through operators holding a Gambling Commission licence. Sites licensed elsewhere are not licensed in Great Britain, and the protections built into a British licence — self-exclusion checks, withdrawal rules, access to an independent adjudicator — do not apply to them.

A complaint about a British-licensed operator has a route: the firm's own process, then an approved alternative dispute resolution provider, free of charge. Against an unlicensed site, there is no route at all, and that is the difference worth understanding before anything else.

That the scheme is called GamStop, not "gamestop", matters less than what it does; it is often typed "gamestop", and the register it feeds is checked by operators before an account is used.

The gambling industry in Great Britain generated £17.5 billion in gross gambling yield in the year to March 2026, and remote casino, betting and bingo alone accounted for £8.3 billion of it. Those are commandingly large numbers, and they are the reason the paperwork matters. A complaint that cannot be resolved is not a rounding error to a firm of that size; it is a line in a quarterly return to a regulator that reads those lines carefully. The Commission's own figures put 2.4% of adults with a problem gambling severity score of 8 or more in the 2025 survey year, stable across three years — which is a reminder that the market's size and its harms scale together, and that the rules exist in the space between them.

The Licence Is the Whole Argument

What a British licence actually guarantees

A Gambling Commission licence is not a badge on a footer. It carries conditions, and the ones that touch players most are these: customer identity must be verified before someone is allowed to gamble, un-staked deposits remain the customer's, no maximum limit may be placed on what a person can withdraw from their deposit balance, and every operator must join the national multi-operator self-exclusion scheme under social responsibility code provision 3.5.5. Since 31 March 2020 that participation has been a condition of holding a licence, not a courtesy. A 2020 reminder came cheaply: the Commission suspended the licences of two online operators for missing the integration deadline.

What the offshore sites are, legally

It is an offence under section 33 of the Gambling Act 2005 to provide facilities for gambling without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, or inside or outside the UK. The Commission's position is blunt: offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, including where the operator holds a licence in another jurisdiction. Note where the offence lands. It attaches to the operator, not to the adult who opens an account. The player is not the criminal; the player is the one holding an unprotected balance.

The promises offshore licences make

Three jurisdictions come up again and again. Curaçao rewrote its regime: the National Ordinance on Games of Chance took effect on 24 December 2024, the old master-licence and sub-licence model is gone, and the legacy "orange" sub-licence certificates of operation ended on 15 October 2025. A historic /JAZ number is not proof of a current licence. Anjouan had issued, by one trade investigation's account published on 31 December 2025, more than 1,300 gambling licences at around EUR 17,000 a year, and the same investigation reported former Comorian officials describing the selling entity as illegal — the regulator itself says an Anjouan licence is not, and has never been presented as, a universal authorisation to operate in every country. Kahnawà:ke has regulated interactive gaming since 1999 and issues one Interactive Gaming Licence held by a single data centre, with operators taking Client Provider Authorizations beneath it. These are real administrative systems. They are also not the Gambling Commission, and a licence from one of them buys a player nothing in a British dispute.

FAQ

Yes, if the operator holds a Gambling Commission licence — and only then. The Commission's regulatory remit covers websites that trade or advertise to customers in Great Britain, and those sites must hold a Commission licence. Its public register lists licensees and their domain names, and the advice is to check that the site's activities and domains match what the register says. A company advertising in Britain while licensed in Curaçao, Anjouan or Kahnawà:ke is outside that remit and outside the Commission's protection. The practical test is not the logo in the footer but the entry in the register: if the operator is there and the domain matches, the British rules apply, including the ones about withdrawal limits and identity checks.

Best Online Gambling Sites UK and What Separates Them

The phrase is a search query, not a standard. If it means anything, it means sites that clear four hurdles: a live Commission licence matching the domain, verified identity before play, withdrawal terms that cannot be capped, and access to an approved adjudicator. Measured that way, the field splits not by brand but by method.

The wagering line is the one that has shifted most. From 19 January 2026 the Commission caps wagering requirements on bonus funds at ten times and bans promotions mixing two or more gambling products; it said the cap "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore terms published in 2026 still run at 25× at one operator and 35×–50× across welcome offers, per guide tables, with cashout caps such as 300% of the credited bonus amount.

Online UK Gambling and the Bonus Trap

The single thing most complaints turn on is bonus term design — specifically the wagering requirement, because it decides whether money in the account is ever leaving it.

How it works the first time

A welcome offer arrives with a headline and a condition set. The condition is usually expressed as a multiple: wager 40 times the bonus before any of it is withdrawable. Contributions are rarely equal — one offshore schedule gives slots 100%, table games 20%, video poker and blackjack 10%, roulette and baccarat 5%, and craps, live dealer and progressive jackpots 0%. A player wagering £500 on roulette satisfies £25 of a requirement at 5%, which is not a rule hidden in malice but a rule hidden in percentages.

How it works the second time

The second time, the terms have usually changed and the balance is usually mixed. Under British rules that mixture is no longer allowed to be used against the player: deposit and bonus balances must always be displayed separately, wagering requirements must not apply to play with the deposit balance, and the deposit can be withdrawn at any time even with a bonus pending or active. The Commission's fair-terms guidance also bars terms that reserve sole discretion for the operator, which is why one £170,000 penalty in July 2025 included a clause letting the firm "at their own discretion" close accounts or forfeit winnings.

Warning signs

A maximum cashout clause, phrased as a percentage of the bonus. A maximum bet while wagering — one offshore schedule caps it at €5 for regular players and rejects any bet above it, with forfeiture of winnings. A prohibition on low-risk or "equal" bets, dressed as anti-abuse. A no-deposit bonus whose terms still bite if a deposit is later made. And the phrase "we reserve the right", anywhere, which on a British-licensed site is the sort of term the CMA's guidance lists as unfair.

Is Online Gambling Legal in the UK, and What Changes Offshore?

Nothing changes about legality; everything changes about remedy. A British-licensed operator with a dispute must allow referral to an approved ADR provider free of charge if the complaint is not resolved within eight weeks, and the customer must have gone through the firm's own process first — which is what a deadlock letter is for. The approved list covers ADR Group, Pegasus ADR, Blexr, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee.

Now the numbers. IBAS's ADR report for 2024-25 records 3,721 domestic disputes, 217 of them banking and financial, an average domestic completion time of 20 days, 65 consumer complaints upheld by written decision against 693 not upheld and 737 resolved before a ruling — and 100% operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. eCOGRA, for 1 October 2024 to 30 September 2025, received 911 disputes, of which 150 valid ones concerned deposits and withdrawals; 17.8% of completed disputes went the consumer's way and the average domestic resolution took 31 days. Note how many disputes die on procedure rather than merit: 361 of eCOGRA's 499 invalid disputes, 72.3%, had not been through the operator's internal complaint procedure first. That is the single most expensive mistake available, and it costs nothing to avoid.

An unlicensed site's terms may name an ADR provider — Anjouan requires licensees to designate one, and its approved list includes several names. But there is no licence condition behind that obligation here, no approval by the Commission, and no compliance figure of the kind IBAS publishes. The Gambling Commission is a regulator, not an ombudsman: it cannot get anyone's money back, and it says so on its own pages. Complaint numbers are, for this reason, a migration: complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025.

The Payout Rule That Decided a Case

The benchmark, with its period

The checkable benchmark is the Commission's own withdrawal data: across June to September 2024, customers of large online operators made 44.2 million withdrawals, of which 96.3% cleared automatically, 3.5% within 24 hours, and 0.1% took up to 48 hours. Those are excellent numbers, and they sit beside an awkward one. In its Annual Report and Accounts 2024-25 the Commission said withdrawal issues continued to cause most of the complaints it receives, and one 2026 blog noted that over a quarter of complaints reaching its Contact Centre concern identity verification — the paperwork asked for at the moment of leaving, not joining.

Where the friction is built in

Reverse withdrawals are gone: RTS requirement 14B, in force since 31 October 2021, states that consumers must not be given the option to cancel a withdrawal request. Licence condition 17.1.1 forbids demanding extra information at withdrawal that the licensee could reasonably have requested earlier. But the rules also leave room. Identity verification is legally due at €2,000 of deposits or withdrawals in a remote casino, and transactions that "appear to be linked" count as one — including activity in a single logged-on period. A firm may verify at registration or defer to the threshold; if it defers, the delay lands on the withdrawal. Compliance is contractual: six operators signed CMA undertakings, and in October 2026 one company paid £900,000 in a regulatory settlement for failures including a rule allowing only one withdrawal at a time and manual review of every fifth or tenth withdrawal.

Five Signs an Operator Can Be Trusted

The domain is on the public register

Check the Commission's register and confirm the operator's licence covers the activities and the exact domain in front of you. A licence that exists but does not list the domain is not cover for that site.

Identity was verified before the first bet

Licence condition 17 requires identity to be established before a customer is permitted to gamble, with name, address and date of birth as the minimum. If documents are demanded only when a withdrawal is attempted, that is a signal about the firm's priorities, and it is the top subject of complaints to the Commission.

Nothing caps what can be withdrawn

No term may impose a maximum limit on withdrawals from the deposit balance, and un-staked deposits remain the customer's. Search the terms page for "maximum withdrawal" and "reserve the right". If either phrase appears, read the clause twice.

Customer funds are declared

Operators holding customer funds must state in writing, and obtain acknowledgement, which insolvency rating applies — "not protected", "medium protection" or "high protection". A firm rated "not protected" must remind customers of it every six months. A missing disclosure is not a small omission.

There is a free route to an adjudicator

A British-licensed firm must offer ADR referral free of charge after eight weeks. Check the terms for a named approved provider. No named provider, no route — and no compliance statistics to look at afterwards.

How to Check a Site Before Depositing

1. Look up the licence, then the domain. The register shows licensees and the domains they may use. Do it before registering, because the footer logo tells you nothing about which entity holds which permission.
2. Read the withdrawal clause in full. You are looking for a stated maximum, a manual review policy, or a fee. A cost-reflective processing fee is permitted; a limit on the deposit balance is not.
3. Find the bonus terms behind one click. Significant conditions must be transparent and prominent, and where displayed online, in full no further than one click away. If the terms take three clicks, that is the answer.
4. Convert the wagering requirement into cash. Multiply the requirement by the contribution rate for the game you actually intend to play. That number, not the headline, is the price.
5. Note the ADR provider before you need one. Save the name and the date of your first complaint. The eight-week clock runs from receipt, and eCOGRA will not take a dispute that has not been through internal complaints first.
6. Set a financial limit at sign-up. Since 31 October 2025 the prompt is mandatory, must be the default option, and must be offered at account level in a free-text box. Declining is an action, not a passive state.

Online UK Gambling Sites and the Payout Mechanics

Deposit and withdrawal methods are not neutral. Licence condition 5.1.2, effective 31 January 2024, requires a British-licensed operator to accept payment from Great Britain customers only by a method whose provider is a payment service provider under the Payment Services Regulations 2017. Credit cards have been barred from gambling since 14 April 2020, and an operator taking e-wallet money must ensure it was not loaded from a credit card. Bank gambling blocks decline payments tagged under gambling merchant category codes; the Commission's October 2026 list names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, applied at card level, with a 48- or 72-hour cooling-off before gambling transactions are allowed again, and no effect on credit score.

Speed varies by rail, and the variance is worth knowing. Visa Direct's Fast Funds service runs in real time, with funds available within 30 minutes of approval. Faster Payments has a £1 million scheme ceiling, though individual banks set lower per-payment limits, and over 90% of transactions complete in under two seconds. A personal PayPal withdrawal to a UK bank account carries no fee where no currency conversion is involved, but a failed withdrawal due to wrong details attracts a £0.50 bank return fee. Card and e-wallet routes are quicker to fund and often slower to cash out; that asymmetry is a design choice by somebody, and it is rarely the player's.

How Many People Gamble Online in the UK?

Enough that the market's shape is stable and measurable. Total Great Britain gambling gross gambling yield was £17.5 billion in the year to March 2026, up 4.4%, with remote casino, betting and bingo at £8.3 billion, up 6.9%. Online yield for January to March 2026 was £1.55 billion, up 7% year on year, across 26.8 billion bets and spins and 13.4 million average monthly active accounts. Online slots alone took £773 million in that quarter, up 12%, on 25.1 billion spins — and remember that the remote casino sector's £5.0 billion in the year to March 2025 was £4.2 billion slots.

The self-exclusion figures are the other half of the picture. Gamstop Online recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at 31 December 2025; by July 2026 it reported 614,738 consumers on the register, with more than one in two having chosen the maximum five-year exclusion and only one in four of all age groups choosing six months. Under-25s were nearly one in three of all registrations in the first half of 2026, a 26% year-on-year rise, and May 2026 set a monthly record of 12,236 sign-ups. The gender split in the 2025 annual report was 94.3% male and 5.7% female. Registration takes minutes and can take up to 24 hours to bite.

What GamStop Does and Does Not Cover

Self-exclusion under GamStop holds for its full term and then stays in place until the person contacts GamStop to remove it. That is the fact, and it is the one most often blurred. Registration cannot be cancelled during the exclusion period, the terms of use allow auto-renewal to be switched off only in the last six months of a five-year minimum exclusion period, and if nothing is done after the chosen term GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. There is no early removal; the Group's 2025 annual report devotes a section to refusing it.

GamStop covers online operators licensed in Great Britain, because the obligation to join applies only to them. It says plainly that it cannot prevent access to services run by organisations that do not participate. Offshore sites that hold no Commission licence are not connected to the scheme, and none of them is a way round an exclusion — that is not a loophole, it is a different jurisdiction with no duty to check. Blocking software adds a layer: Gamban and BetBlocker are both signposted, BetBlocker blocks over 1,368,000 gambling websites and 3,100 apps, and Gamban — free in Wales, £4.99 a month or £29.99 a year in England and Scotland after the TalkBanStop funding ended on 31 March 2026 — states it blocks licensed and unlicensed sites alike.

Where a Complaint Actually Goes

The order of operations is short and unforgiving. Complain to the operator first, in writing, and note the date: the firm should allow complaints for at least six months from the incident, must complete its own process within eight weeks of first receipt, and may issue a deadlock letter earlier. Then, if unresolved, refer to an ADR provider free of charge. IBAS covers remote gambling across all sectors; eCOGRA is approved for all sectors, takes complaints in English, and will refuse a dispute that has not been through internal complaints, has not had two weeks to develop, or arose more than a year ago. If the dispute concerns account management or access to funds, ADR can consider it — but not customer service or a refusal to accept a bet.

If ADR fails, court proceedings remain available and no term may take that right away. Where the firm is British-licensed, there is also a regulator behind the process: the Commission records every complaint, even though it cannot resolve one or recover money. Where the firm is not, none of this exists, and the honest description of the position is that the site's own terms are the whole of the law.

Regulatory Rules for Online Gambling UK

The rules now in force are more specific than they were. Since 31 October 2025 a financial limit must be prompted before the first deposit, be the default option, and be offered at account level; customers must be reminded every six months to review their account and transaction information. Financial vulnerability checks have been a requirement since August 2024, at £150 net deposits over a rolling 30-day period since 28 February 2025, using only publicly available risk flags such as a bankruptcy order, County Court Judgment, IVA, High Court Judgment, Administrative Order or Debt Relief Order. Financial Risk Assessments were announced on 7 July 2026, staged from the largest operators at £5,000 net deposits in a rolling 24 hours for adults aged 25 and over and £2,500 for under-25s, with the final stage set at £1,000 in 24 hours or £3,000 over 90 days. The level-headed reading: at the first stage, fewer than 0.5% of customers exceed the threshold at all, and the pilot found 97% of those above it could be assessed without friction.

Recovering Money After Online Gambling UK Issues

A refund is a dispute with a remedy attached, and the remedy depends on the licence. On the British side the position is unusually clear. Un-staked deposits remain the customer's; funds cannot be confiscated or reduced because identity or age verification failed; account inactivity cannot be used to confiscate a deposit balance; and where a credit balance account has been inactive at least 12 months the operator must try to repay it to the last payment method used, with a maintenance charge permitted only after 12 months of the player being unable to verify identity and with at least 30 days' notice. Operators should not rely on "may" or "reserve the right" clauses to void winnings, because the Commission treats such terms as unfair under the Consumer Rights Act 2015, and the CMA's position is that consumers are legally entitled to deposited money, winnings from money deposited and gambled, and bonus winnings where the conditions were met.

There is one genuine exception to the speed of everything: where an operator suspects money laundering or terrorist financing it must file a Suspicious Activity Report and obtain a defence from the National Crime Agency before moving funds. That can delay a payout. It does not entitle anyone to confiscate a deposit. Against an unlicensed site the arithmetic is different. There is no register entry to cite, no licence condition to breach, no ADR provider approved by the Commission, and no compliance statistics published afterwards. The money is where it is because the terms say so.

How Many Online Gambling Sites Are There in the UK?

Nobody can give a number for the market, only for the register. The Commission does not publish a running count of licensed sites, and third-party counts of other jurisdictions are not that figure — one aggregator reading Curaçao's public register reported 704 licences held by 698 operators, 552 of them active, at a single reading on 6 November 2026. What the Commission does count is unauthorised sites: its dashboard recorded 586 illegal gambling websites accessible to consumers in Great Britain in September 2026, and 311 sites faced disruption action in the second quarter of 2026-27, with 77% of disrupted sites seeing reduced estimated traffic. Between May 2024 and July 2025 just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain.

The enforcement machinery is real but slow, and the Commission is candid about which parts work. Since April 2024 its Illegal Markets team issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals, and across 160 illegal websites it measured an average 32% fall in engagement — but by method, registrar blocks and suspensions produced the largest average fall at 91% each, ahead of GEO IP blocking at 60%, Bing removal at 52%, Google removal at 30% and Facebook removal at 8%. Search-engine removal makes a site harder to find; it does not block it. Prosecutions, meanwhile, are vanishingly rare: across April 2025 to March 2026 every quarter recorded zero or one commenced, a single prosecution in October to December 2025.

The Question of a Gambling Ombudsman

The gap between a regulator and an ombudsman is the reform most discussed and least delivered. The Commission is explicit that it cannot resolve individual complaints or recover money, and ADR providers are private bodies paid by the industry they adjudicate, however competent. The 2023 review of gambling legislation recommended creating a Gambling Ombudsman with an expanded ADR remit, as IBAS itself notes; as of the Commission's May 2026 documents, that body does not exist. So the answer to "who decides?" remains: the operator, then an approved provider, then a court. Anyone who has waited eight weeks to be told that a term was fair will understand why the recommendation keeps being repeated.

Your Tax, Your Winnings, and the Levy

Two straightforward facts sit either side of the same coin. Winnings from gambling are not taxable in the UK — the tax falls on the operator, not the player, so there is no line for a casino win on a self-assessment return. And the operator's own contribution is now compulsory rather than voluntary: the statutory gambling levy, introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, charges online operators 1.1% of previous-year gross gambling yield, paid by 1 October each year, and raised just under £120 million in its first year. That money is ringfenced for research, prevention and treatment of gambling-related harm, split 50% to treatment, 20% to research through UK Research and Innovation and 30% to prevention, and from 1 April 2026 NHS England commissions gambling-harms treatment in England from it. A market of £17.5 billion paying a bit over one per cent into its own repair bill is either a sensible settlement or an admission, depending on your mood.

The Help That Exists

None of the above is a substitute for a phone call. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day; callers in Wales are given 0808 2819 265. It is not a crisis line, and staff cannot transfer someone at immediate risk to emergency services, so they follow their own safeguarding procedures instead. BeGambleAware, the public brand of the charity GambleAware, directs people to the same helpline and its online chat.

Beyond the helpline: Gamblers Anonymous England, Wales and Ulster on 0330 094 0322, with around 250 meeting locations and no appointment needed; GamFam, a charity (No. 1191139) for families and friends affected by someone else's gambling, running the five-stage GRA5P peer-support programme; Gam-Anon UK & Ireland for families regardless of whether the gambler attends GA; the NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB on 020 7381 7722, taking self-referrals and professional referrals for 13 to 18-year-olds anywhere in England and adults 18 and over in Greater London and the South East; and Citizens Advice for debt, with Citizens Advice Scotland's gambling support line on 0800 328 1131, weekdays 10am to 3pm. NHS England has opened 15 specialist gambling clinics since 2019, and the 8 regional NHS services now take almost 5,000 referrals a year against a target of 3,000.

Questions About Online Gambling

Which online gambling sites are legal in the UK?

Only those holding a Gambling Commission licence, and the licence must list the domain you are using. The Commission's public register shows licensees and their approved domains; if the site you are looking at is not there, it is outside the regulator's remit even if it carries a licence from Curaçao, Anjouan or Kahnawà:ke. Check the register, not the footer.

How long can a UK site hold up a withdrawal?

There is no fixed deadline in the licence conditions, which is the honest answer. The Commission's data for June to September 2024 shows 96.3% of 44.2 million withdrawals cleared automatically and 0.1% took up to 48 hours, but licence condition 17.1.1 bars demanding information at withdrawal that could reasonably have been sought earlier, and the Commission says there is no valid reason to delay a payout where it has no regulatory concerns.

Can I be paid winnings in a currency other than pounds?

Yes, and the cost is in the conversion rather than the winnings. A British-licensed operator must accept payment by a method whose provider is a payment service provider under the Payment Services Regulations 2017, but the account currency is a commercial choice. E-wallet schedules carry foreign-exchange fees — 4.49% at one, up to 2.99% markup at another — so a multi-currency wallet can quietly cost more than the withdrawal fee it replaced.

Do I pay tax on online casino winnings in the UK?

No. Gambling winnings are not taxable income in the UK, and there is nothing to declare on a self-assessment return for a casino or sportsbook win. The tax is levied on the operator's gross gambling yield instead — a 1.1% statutory levy for online operators since 6 April 2025, plus the applicable gambling duties. A win of any size arrives whole.

What happens if the operator goes bust while holding my money?

It depends on a rating you should have seen. Operators holding customer funds must state in writing, and get acknowledgement, whether funds are "not protected", have "medium protection" or "high protection", and must include their insolvency category. Funds must be held in a separate client account, but a separate account does not guarantee repayment, and operators may legally hold customer money in overseas bank accounts. Money staked in an open bet is not customer funds at all.

Is a refund possible if I gambled on an unlicensed site?

Recovery is realistically very unlikely, and no British route exists. Un-staked deposits being the customer's, the ban on confiscating funds for failed verification and the CMA's principles all attach to Gambling Commission licence conditions and British consumer law that an unlicensed operator does not carry. A designated ADR provider in its home jurisdiction may look at the dispute, but there is no Commission approval behind it and no published compliance rate.

Summary of Gambling Rules

Online gambling in the UK is a licensed market worth £17.5 billion a year, and the value of that licence to a player is not the games but the remedy: identity checked before play, a deposit balance that cannot be capped or confiscated, self-exclusion that holds for its full term and then stays until the person contacts GamStop to remove it, and a free referral to an independent adjudicator if a complaint is not resolved in eight weeks.

Everything else you can look up. The one number I keep coming back to is 72.3% — the share of eCOGRA's invalid disputes that had never been through the operator's own complaints process first, which is to say that most people who lost a dispute on procedure had already won the argument. It costs nothing to write the date down. If any of it stops being theoretical, the National Gambling Helpline is free on 0808 8020 133, day or night.