Games Not on GamStop and Self-Exclusion

GamStop blocks online gambling accounts with companies licensed in Great Britain. Games not on GamStop belong to operators the scheme cannot reach, because Gambling Commission licence rules require scheme membership only from firms the Commission licenses. Those sites sit outside British protection, and the exclusion still runs its full term regardless.

The name is often typed "gamestop", which the scheme itself answers to readily enough. What matters more is the arithmetic underneath the phrase in this head keyword. When I last looked at the register figures, Gamstop Online reported 614,738 consumers on its books, and more than one in two of them had picked the longest exclusion on offer. That is a large number of people whose exclusions are, by design, still running. Registration grew 16 per cent year on year in the first half of 2026, with May 2026 setting a monthly record of 12,236 sign-ups. Whatever the searcher has in mind when hunting for games outside the scheme, the register has been filling up at pace throughout.

The sites that fall outside it are fewer and shabbier than the marketing around them suggests. The Commission's analysis published on 5 November 2026 puts engagement with illegal gambling websites at 0.6 per cent of the whole adult population in the past four weeks, and 2.5 per cent among people who gambled online in that period. Narrow, in other words, and mostly cheap-looking. This column explains what the boundary actually is, how long self-exclusion lasts beyond the term you chose, and how anyone sensible judges an operator sitting on the wrong side of it.

Where the Boundary Runs

Gamstop Online is the national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited and free to users. It has been available since April 2018 and was renamed Gamstop Online in November 2025, when the betting-shop scheme formerly known as MOSES became Gamstop Betting Shops. Since 31 March 2020, every online operator must take part as a condition of its Gambling Commission licence — the requirement sits in social responsibility code provision 3.5.5, which states plainly that licensees must participate in the national multi-operator self-exclusion scheme. The Commission backs that with a customer-base check at least every 24 hours and a marketing ban on registered people.

The scheme binds operators holding a British licence. It has no jurisdiction over a firm holding a Curaçao certificate or an Anjouan licence, and those firms are not connected to it. The Gambling Commission is blunt about the underlying position: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence somewhere else. Section 33 of the Gambling Act 2005 carries 51 weeks' imprisonment, a fine, or both. That offence attaches to the provider, not the player, and I would not pretend otherwise — but nor would I dress an unlicensed site up as a clever route.

In short: a site outside GamStop is a site outside the British licence, and everything that comes with it.

What Happens After the Term Ends

Here is the part of the exclusion mechanism that catches people out, and it is the answer to the question implied by the whole cluster. Registration blocks online gambling with British-licensed companies for 6 months, 1 year, 5 years, or 5 years with auto-renewal. Signing up takes minutes; the block may take up to 24 hours to bite. Registration cannot be cancelled or deactivated during the period.

The term does not simply lapse. The exclusion stays in place after the end of the chosen period unless the person contacts Gamstop to remove it. If they do not, Gamstop holds the data through a further automatic seven-year self-exclusion period, during which operators are told the person was previously excluded. Auto-renewal may only be switched off during the last six months of a five-year Minimum Exclusion Period, and it continues for up to four further five-year periods. Gamstop's refusal to remove registrations early is set out in its 2025 annual report. Read the register figures again with that in mind: those 614,738 exclusions are not a snapshot that empties itself on a rolling schedule. They are live, and the exit is manual.

The 2026 Numbers Behind the Register

Gamstop recorded 117,756 new registrations during 2025 and 561,983 active exclusions at 31 December 2025, with 58,675 registrations in the second half of the year — an average of 319 a day. The first half of 2026 was up 16 per cent on the year before. Under-25s were nearly one in three of all self-exclusions in that half, a 26 per cent year-on-year increase.

Of the periods selected by registrants in 2025, 29 per cent chose six months, 24 per cent one year, 25 per cent five years and 22 per cent auto-renewal. Gender split for 2025 stood at 94.3 per cent male and 5.7 per cent female. The Group says it can no longer report a total lifetime figure because the seven-year retention period running from the 2018 launch has begun to expire — a small accounting detail with a real consequence: the scheme cannot tell you how many people it has ever carried, only how many it carries now.

What the Commission Is Actually Chasing

The illegal market is loud, but it is not large. Across the Commission's monitoring period from May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain. In April to June 2026 the Commission referred 366 websites to search engines, covering 147,721 URLs; in July to September 2026 it referred 1,835 websites and 7,677,211 URLs, and issued 546 cease and desist notices.

The method matters more than the volume. Registrar blocks and website suspensions produced the largest average fall in engagement, 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. Search-engine removal, in the Commission's own view, makes a site harder to find without fully blocking it. Across 160 illegal websites with traffic data, disruption produced an average 32 per cent fall in engagement.

On the money side, the Commission made its first referral to Visa in January 2025 after a test purchase on an unlicensed site, and has since made three more. It calls payment-transaction reporting to the Visa Operator Scheme critical and still early-stage. Prosecutions, by contrast, remain rare: April 2025 to March 2026 recorded zero or one commenced per quarter, one in total. Take from that what you like; I take the view that disruption is a game of attrition against infrastructure, not a campaign of courtroom theatre.

Comparison Table of Self-Exclusion Schemes

One scheme covers online play, others cover premises. The comparison below sets out how each one works, because a person who has excluded online has not excluded themselves from a betting shop or a casino floor, and vice versa. The figures are the regulators' and the schemes' own.

Two details deserve a sentence each. SENSE removal can only be requested in person, by speaking to a manager, followed by a 24-hour cooling-off period. The land-based minimum under ordinary code 3.5.2 sits between 6 and 12 months, remains in place a further 6 months unless the customer takes positive action to gamble again, and carries a one-day cooling-off. The betting-shop scheme, on 0800 294 2060, works with over 60 operators across roughly 6,000 shops. None of these is a way round an online exclusion, and none of them touches an offshore site.

Gambling Sites Not on GamStop and Their Terms

For offshore operators, the licence is the product. A British licence comes with the 24-hour customer-base check, the credit card ban in force since 14 April 2020, the £5 maximum online slots stake for adults and £2 for 18 to 24-year-olds, financial vulnerability checks from £150 of net deposits over 30 days, and the wagering cap below. An offshore licence arrives with none of it.

Curaçao is the clearest case of a regime mid-reform. The National Ordinance on Games of Chance took effect on 24 December 2024, ending the old master-licence and sub-licence model; the legacy orange certificate of operation ended on 15 October 2025 and should no longer be treated as proof of a current licence. Provisional licences granted by operation of law were extended twice, to 24 December 2025. The CGA announced on 7 October 2026 that its previous online gaming portal would not return to service and that the old digital licence seal may be affected, which leaves verification awkward exactly when it most needs to be easy.

Anjouan is the licence of choice for a certain sort of crypto site. It publishes a fee schedule of EUR 17,828 for B2C issuance and the same for annual renewal, with EUR 500 per additional domain — and an ABC News investigation on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences. The same investigation quoted Comorian officials describing the entity as illegal and said the AOFA was stripped of recognised-regulator status by banking laws passed in 2013 and 2015. Treat that as a contested claim rather than settled fact; Anjouan states that a licence is not a universal authorisation to operate anywhere. Either way, it is not a British licence.

Online Gambling Not on GamStop and Bonus Terms

Bonus terms are where offshore sites recover what the headline offer gave away, and the structure is not hidden — it is published and largely unread. Wagering requirements are the engine. Ignition Casino applies 25× across its casino bonuses, expressed as a multiple either of the bonus or of bonus plus deposit, and its contribution chart gives slots 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer and Hot Drop Jackpots 0 per cent. The same firm caps the casino maximum bet at 20 per cent of the amount deposited, and warns that breaching it may mean account closure and forfeiture of the bonus and winnings generated while wagering. BlueChip Casino caps bets while wagering at €5 for regular players and €10 for VIPs, and reserves the right to limit withdrawal from bonus-generated winnings to 300 per cent of the credited bonus amount, voiding the excess.

Compare that with the post-19 January 2026 position in Britain. Social responsibility code 5.1.1 caps wagering at ten times, and bans mixed-product promotions requiring two or more types of gambling. The Commission chose a cap over an outright ban, noting that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". A maximum bet limit on a bonus is a friction; a 300 per cent cashout cap is a wall. That distinction is the whole topic in miniature.

Slot Games and Rules Outside GamStop

The games are, in most cases, the same. Providers supply the same slots to licensed and unlicensed operators, and the Commission issued an industry warning notice on 20 January 2025 about exactly that — casino games from licensed suppliers appearing on unlicensed websites available to British consumers. The notice observed that such sites often target customers who have self-excluded through GamStop.

The rules around the games are not the same. In Britain, a minimum of 2.5 seconds must elapse between game cycles, online slots are capped at £5 per cycle for adults and £2 for those aged 18 to 24, and the £4.2 billion of remote casino slot yield in the year to March 2025 is generated under those conditions. Reverse withdrawals have been banned since 31 October 2021 under RTS 14B, which says consumers must not be given the option to cancel a withdrawal request. Offshore, none of that applies. Nobody enforces a spin interval, and whether a withdrawal can be held becomes a matter of internal policy.

Casino Games and Identity Verification

Identity verification is the single mechanism this topic turns on, because it is the point at which the licence becomes visible to the player. The first time, for a British-licensed operator, licence condition 17 has required since 7 May 2019 that identity be obtained and verified before the customer is permitted to gamble — name, address and date of birth at minimum, and customers told before depositing what documents they may need and in what circumstances. Many are verified electronically against credit reference agencies and the electoral roll, with no documents requested at all. Checked properly, the process is invisible.

Later is where it goes wrong. The Commission reports that over a quarter of complaints reaching its Contact Centre concern identity verification, raised when documents are demanded only at the point of withdrawal. Licence condition 17.1.1 says a withdrawal request must not trigger a requirement for additional information if the licensee could reasonably have requested it earlier; the carve-out is where anti-money-laundering rules oblige the operator to seek information at that moment. Delaying a withdrawal for insufficient ID may breach condition 17 and attract regulatory action — and operators cannot confiscate funds for want of documents.

A casino using the threshold approach may defer full verification until €2,000 of deposits or withdrawals is reached, identifying and verifying age at registration and relying on the hybrid route. That is lawful, and it is also why the €2,000 mark is worth watching on any account.

The warning signs are consistent. A site that accepts a deposit in seconds and then wants utility bills before it will pay out. A first withdrawal that is instant followed by silence on the second. A live chat that answers in single words. Fuzzy matching against a third-party provider, onboarding on a partial match, or an account opened under a middle name rather than a forename — the Commission flagged that last one specifically, because it creates mismatches against records held elsewhere, including GamStop, which undermines the effectiveness of an exclusion without anyone noticing. Offshore the asymmetry lands harder still: a Curaçao or Anjouan licence carries no equivalent of condition 17, no Commission behind it, and no British regulator to take the complaint.

Five Signs an Operator Can Be Trusted

Each sign below is checkable in a few minutes and none requires an account.

The Licence Names a Regulator With Teeth

Find the licence reference in the footer and check it against the regulator's own public register, not the operator's own page. The Commission advises checking that the business holds a British licence and clicking through to the register to see whether the site's activities and domain names match. The Commission's remit covers only sites that trade or advertise to customers in Great Britain, and those must hold its licence.

The Register Entry Matches the Domain

Cross-check the exact domain, not the brand. The Malta Gaming Authority publishes a list of Unauthorised URLs, declaring the sites on it have no connection with the MGA and that any reference to a Maltese licence on them is false and misleading. A Curaçao Certificate of Operation Seal must redirect to the official verification portal, and if the certificate behind the seal shows a different domain from the one being used, it belongs to another operator.

The Withdrawal Terms Have No Ceiling

Look for a maximum withdrawal clause and for a one-withdrawal-at-a-time rule. In Britain, operators may not impose, use or rely on any term capping the amount a consumer may withdraw from their deposit balance — the Commission's example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". On 21 October 2026 the Commission announced that an operator would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying withdrawals, with a term allowing only one withdrawal at a time held unfair under the Consumer Rights Act 2015.

The Terms Are Fair and Not Discretionary

Search the terms for "sole discretion" and "reserve the right" applied to voiding or withholding winnings. The Commission states such terms are unfair within the meaning of the Consumer Rights Act 2015, and an operator was fined £170,000 in July 2025 for failures including a bonus term asserting the right at their own discretion to close accounts or forfeit winnings. Licence condition 7.1.1 requires terms to be fair, transparent and not misleading.

There Is a Named Complaints Route With a Clock On It

Check whether the site names an approved alternative dispute resolution provider and what its internal complaints window is. Social responsibility code 6.1.1 requires arrangements for a customer to refer a dispute to an ADR entity free of charge if it is not resolved within eight weeks. The Commission's approved providers are ADR Group, Pegasus ADR Service, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. A site with no named provider and no clock is telling you something.

How a Careful Player Weighs One of These Sites

1. Check the licence on the regulator's register first. Pull the reference and confirm the domain appears. This is the only step that tells you which country's rules you are dealing with, and everything else follows from it.
2. Establish what the exclusion does and does not cover before depositing. An online self-exclusion does not reach betting shops, casinos or arcades, and it never reaches a site outside the British licence. Knowing the boundary in advance prevents the assumption that being registered settles the matter.
3. Read the bonus terms to the bottom, and calculate the wagering in cash. Multiply the bonus by the multiplier, apply the game-weighting chart, and note the maximum bet while wagering. A 25× bonus on a low-weighted game is a longer road than the headline figure suggests.
4. Check the withdrawal terms for caps and sequencing. Look for a maximum cashout, a per-day or per-week limit, and any rule permitting only one withdrawal at a time. Those clauses decide how much of a win is real.
5. Confirm the customer-funds rating and where the money sits. British licensees must state in writing whether funds are protected on insolvency, at which of the three ratings, and by what method, with acknowledgement required before the first deposit. Separate client accounts do not guarantee return of money, and funds may lawfully sit in overseas banks.
6. Note the named ADR provider and the complaint clock before anything goes wrong. The window is eight weeks, the operator's own process comes first, and a deadlock letter moves things along. Offshore, check whether the operator's regulator even names a dispute body — Anjouan requires licensees to nominate one, and the approved names are EGIS ADR, Axion ADR, iGaming ADR and an approved body.

Who to Call, and What the Register Cannot Do

None of this is abstract. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, by phone, live chat and WhatsApp. Callers in Wales have a separate number, 0808 2819 265. Gamblers Anonymous England, Wales and Ulster runs around 250 meeting locations and can be reached on 0330 094 0322; Gam-Anon supports family and friends regardless of whether the gambler attends; Citizens Advice Scotland runs a gambling support line on 0800 328 1131 on weekdays between 10am and 3pm.

Blocking software helps, and both routes are signposted by GamStop itself. Gamban blocks licensed and unlicensed sites, and after the end of TalkBanStop funding on 31 March 2026 it is free for residents of Wales while costing £4.99 a month or £29.99 a year in England and Scotland following a 7-day trial. BetBlocker needs no registration and is free worldwide, stating it blocks over 1,368,000 gambling websites and 3,100 apps. Bank blocks are the other layer: the Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. They work at card level, must be activated on each card, and most banks apply a 48- or 72-hour cooling-off before gambling transactions resume.

The statutory levy funds the treatment system these services feed into, raised by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, at 1.1 per cent of previous-year Gross Gambling Yield for online operators. In its first year it raised just under £120 million, ringfenced for research, prevention and treatment, and split 50 per cent treatment, 20 per cent research and 30 per cent prevention.

What the Regulator's Own Numbers Say

The third annual Gambling Survey for Great Britain, published 16 July 2026 from 20,775 adults, found 2.4 per cent with a PGSI score of 8 or more, stable across all three survey years. The Commission's own figures are the best answer to anyone who claims the offshore market is where British players have fled: among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal gambling websites, and a further 1.5 per cent in the past 12 months.

The commercial estimate is a different discipline, and the honest thing is to say so. H2 Gambling Capital put the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from around £5 billion in 2019; Frontier Economics, commissioned by the Betting and Gaming Council, conservatively estimated £2.7 billion annually online, equal to 2.1 per cent of the sum staked with British regulated remote operators, involving 1.5 million Brits. The Commission's own methodology notes it does not capture activity hidden by VPNs.

I would not build a judgement on the widest of those numbers. I would build it on the shape of the thing: disruption works best by registrar block and suspension, prosecutions are vanishingly rare, and the sites that survive longest are the ones paying attention to the infrastructure. The exclusion, meanwhile, keeps running until someone picks up the phone to GamStop.

Questions About Self-Exclusion

Are there really any games not on GamStop?

Yes, but not in the sense the phrase usually implies. The games themselves — slots, table games, live dealer tables — are supplied to both licensed and unlicensed operators, and the Commission issued a warning notice on 20 January 2025 about licensed suppliers' games appearing on unlicensed sites. What sits outside GamStop is the operator, not the game: a firm without a British licence has no obligation to check the register.

What gambling sites are not on GamStop?

Any site without a British Gambling Commission licence, which in practice means operators holding Curaçao, Anjouan, Kahnawake or other offshore licences. The Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without its licence, including where the operator holds a licence elsewhere, and section 33 of the Gambling Act 2005 makes that an offence by the provider with 51 weeks' imprisonment, a fine, or both.

Can an offshore site get round a GamStop exclusion?

It is not getting round it, because the exclusion never applied to it. The scheme's obligations fall on operators licensed in Great Britain, and its blocks are checked by those operators only. Treating an unlicensed site as a workaround is a category error with consequences. The playwright's line about the door being the wrong door applies: the wall was never built there in the first place.

Do the new bonus rules apply offshore?

No. The ten-times wagering cap and the ban on mixed-product promotions took effect on 19 January 2026 through social responsibility code 5.1.1, which binds Commission licensees. Offshore, published terms run to 25× and beyond, and cashout caps remain common — BlueChip Casino limits withdrawal from bonus-generated winnings to 300 per cent of the bonus credited. British rules also require deposit and bonus balances to be displayed separately.

How long does a GamStop exclusion last if nothing is done?

Longer than most people assume. The chosen period runs its course, and then the exclusion stays in place until the person contacts GamStop to remove it. Where that does not happen, the scheme holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Auto-renewal continues for up to four further five-year periods.

Why do withdrawals get held for verification?

By and large because the check should have happened earlier. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for extra information the licensee could reasonably have requested before, and the Commission reports that over a quarter of its Contact Centre complaints concern identity verification raised at withdrawal. Anti-money-laundering duties can justify a delay; they do not license confiscation of a deposit balance.

The Numbers Are Clearer Than the Marketing

The phrase hides how small this market is and how much protection sits on the other side of the line. Anything worth calling a game is available under a British licence, the exclusion behind it does not expire when the calendar says so, and the British market's Gross Gambling Yield reached £17.5 billion in the year to March 2026 with remote casino, betting and bingo alone contributing £8.3 billion — a figure generated under rules that a site outside GamStop simply has no reason to keep.