Gambling Websites UK Licensing and the Reality of Self-Exclusion

Gambling websites in the UK are legal only if they hold a Gambling Commission licence, and the scheme's own first person was registered in April 2018. Offshore sites are licensed elsewhere, are not part of GamStop, and UK protections do not apply to them. Help is free on 0808 8020 133, day or night.

The search phrase "gambling websites uk" sounds like a shopping list. It is really a question about paperwork. There are two very different populations of site serving British customers — those holding a Gambling Commission licence, and those holding a licence from somewhere else and hoping nobody reads the small print — and almost every difference that matters to a player flows from which pile a site sits in.

I have spent years reading licence registers and terms and conditions, and the thing that strikes me is how little of the marketing survives contact with either. A welcome offer shouts about free spins; the terms behind it say the operator may void winnings at its discretion. A site boasts of "full licensing"; the register shows a company that surrendered its British licence two years ago. The registers are public, the terms are one click away, and almost nobody looks. This page is about what to look at. The scheme's name is often mistyped as "gamestop", but its published spelling is GamStop, and the habit of writing it wrongly matters more than it sounds — because the first thing an identity check compares is a name.

Who can legally take a British bet

The legal baseline is a single section of a single Act. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK. On summary conviction, the penalty runs to a term not exceeding 51 weeks, a fine not exceeding level 5 on the standard scale, or both — six months in Scotland. Section 33 applies to remote gambling if at least one piece of remote gambling equipment is situated in Great Britain, or, under the post-2014 wording, if the person providing the facilities knows or should know that they are being used, or are likely to be used, in Great Britain.

The Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, including where the operator holds a licence in another jurisdiction. That sentence covers most of the confusion in this market. An offshore operator is not committing some exotic foreign offence; it is doing something British law calls an offence, from a distance.

The regulator's own enforcement figures are the checkable benchmark here. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist notices and disruption notices, comprising 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals, and over the same period it referred 447,778 Bing and Google URLs and secured 287,961 URL removals. Across 160 illegal gambling websites for which traffic data existed, there was an average 32 per cent decrease in engagement following disruption activity. Note what the Commission says about its own toolkit: registrar blocks and website suspensions produced the largest average fall in engagement, 91 per cent each, ahead of GEO IP blocking at 60 per cent and Google removal at 30 per cent. Search-engine removal makes a site harder to find. It does not block it. That distinction is the whole reason a determined player shrugs off a delisting.

By disruption method, the ranking is worth remembering:

What a Gambling Commission licence actually buys

A British licence is not a badge; it is a bundle of enforceable conditions, and the market data show how big the licensed business is. Total Great Britain gambling industry Gross Gambling Yield was £17.5 billion in the year April 2025 to March 2026, a 4.4 per cent increase on the previous financial year, with the Remote Casino, Betting and Bingo sector at £8.3 billion, up 6.9 per cent. Online slots alone brought in £773 million in January to March 2026, up 12 per cent year on year, across 25.1 billion spins.

The licence conditions that shape a player's experience are unglamorous and specific. Since 31 March 2020 all online gambling operators must be part of GamStop as a condition of their licence; the requirement sits in the Commission's Licence Conditions and Codes of Practice, social responsibility code provision 3.5.5, which states that licensees must participate in the national multi-operator self-exclusion scheme. In April 2020 the Commission added a requirement to check the entire customer base for GamStop registration at least every 24 hours, which also stopped registered people receiving direct marketing. When two operators failed to integrate by the deadline in 2020, the Commission suspended their licences under section 118(2) of the Gambling Act 2005. That is what a condition with teeth looks like.

Three further conditions bear directly on the search phrases people type about "best" sites. Since 14 April 2020, credit cards cannot be used for gambling. Since 9 April 2025, online slots carry a £5 maximum stake per game cycle, and since 21 May 2025 a £2 limit applies to adults aged 18 to 24. From 19 January 2026, licensees are banned from offering mixed-product promotions that require two or more types of gambling, and wagering requirements on bonus funds are capped at a maximum of ten times. The Commission's own words on that cap: it "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements".

The trade has spent years implying that offshore sites are simply the same product with a bigger bonus. They are not. The differences are structural. Under British rules, a licence condition 17.1.1 says a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier. There is no equivalent term on a site licensed in Curaçao or Anjouan. Whether that matters depends entirely on whether anything goes wrong — and the entire point of a rule is that you find out only when it does.

How long self-exclusion lasts, and why that surprises people

Registering with GamStop blocks a person from gambling with all online gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal, and signing up takes only a few minutes — though it can take up to 24 hours for the block to become effective. Once registered, the registration cannot be cancelled or deactivated during the exclusion period.

So far, so expected. The part that catches people out is what happens after the clock runs down. The exclusion stays in place after the end of the chosen period unless the person contacts GamStop to remove it. There is no automatic release at the end of a term. A six-month exclusion is, in practice, an exclusion of indefinite length until the individual takes a positive step to end it — which is precisely the design intention, and one I happen to think is right. The scheme's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends.

The terms of use, last updated 20 May 2026, go further. The auto-renewal option may only be turned off during the last six months of a five-year minimum exclusion period, and auto-renewal continues for up to four new five-year periods. If nobody deactivates after the chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. One registration can sit over an account for decades in aggregate.

The register itself is now large enough to read as a social document. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of 2025; the final six months of the year produced 58,675 registrations, an average of 319 per day. In the first half of 2026 registrations rose 16 per cent year on year, and May 2026 set a new monthly record of 12,236 sign-ups. As of July 2026 the scheme reported 614,738 consumers currently on the register, of whom more than one in two had opted for the maximum five-year exclusion, while across all age groups only one in four had self-excluded for six months. Of the periods chosen in 2025, 29 per cent took six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. Under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26 per cent year-on-year increase.

The honest reading of those numbers is uncomfortable for the industry's marketing: the people who sign up are not dabbling. They are choosing the longest available terms in large numbers.

GamStop Online covers online gambling only, and only participating operators. The Gambling Commission notes that GAMSTOP ONLINE allows self-exclusion from online operators with one request, while separate multi-operator schemes cover land-based gambling. It cannot prevent access to gambling services run by organisations that do not participate in the scheme.

The Critical Role of Identity Checks

If there is a single mechanism that decides whether a British gambling website treats a customer fairly, it is identity verification — when it happens, what it asks for, and what the operator does with the answer.

The rule is Licence Condition 17, introduced on 7 May 2019, which requires licensees to obtain and verify information establishing a customer's identity before that customer is permitted to gamble. The information must include, but is not restricted to, name, address and date of birth. Before permitting a deposit, licensees should tell customers what types of identity documents or information they may need to provide, in what circumstances, and in what form. Licensees must also take reasonable steps to keep that information accurate. The Commission's own expectation, set out in an August 2026 blog, is that identity and age checks are brought forward to before a customer deposits or stakes, and that onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential — is not sufficient.

The first time, this can be frictionless. Companies can often verify identity by matching the account against databases such as credit reference agencies and the electoral roll, in which case no documents are needed. If electronic verification works, the process may be instant. If documents are requested, it takes longer, and the Commission says it cannot give a timescale because the length varies. Under the anti-money-laundering rules that sit alongside the licence, a remote casino may identify customers and verify their age at registration but defer full identity verification until the €2,000 threshold is triggered — the approach the Commission calls the "hybrid approach". In remote casinos, identification and verification are required when a customer deposits funds or withdraws amounts of €2,000 or more, and the threshold applies both to a single transaction and to transactions that appear to be linked.

Later, the same rules are supposed to behave differently. Licence Condition 17.1.1 says a withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier — the prohibition does not block information the operator must seek at that moment under another legal obligation, such as an anti-money-laundering requirement. Over a quarter of complaints to the Commission's contact centre concern identity verification, a concern customers raise when they are asked for documents only on attempting to withdraw. That is not a coincidence; it is a business model. A document request at the withdrawal desk is the cheapest possible retention tool.

The warning signs are consistent. A site that asks for nothing at sign-up and everything at cash-out. A site whose terms reserve the right to void winnings. A site that requires a "one withdrawal at a time" queue. Look out, too, for what the Commission calls fuzzy matching — onboarding customers on partial or equivocal verification through a third-party provider. And note the quieter consequence the Commission flagged in the same blog: onboarding a customer under a middle name instead of a forename can create mismatches with records held elsewhere, such as GamStop, undermining the effectiveness of a self-exclusion the person believes is running.

The register check that takes ninety seconds

Every operator's licence is on the Commission's public register, and the Commission advises consumers to click through and see whether the site's activities and domain names match. Domain name is the detail most people skip. A licence held by a familiar-sounding company does not cover whatever new domain that company's marketing arm launched last month unless it is listed. If the domain is not on the register, the licence does not cover it — whatever the footer says.

The seal check for a foreign licence

Non-UK sites often display a certificate. In Curaçao, the CGA issues a Certificate of Operation Seal only to business-to-consumer operators and only for an approved and registered player-facing domain, and clicking that seal must redirect to the official verification portal; if the seal differs in design, colour or format, the website is not authorised by the CGA. If the certificate behind the seal shows a different domain name from the site being accessed, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent. Anjouan takes a comparable line: certificates carry a unique licence number and a QR verification code linking to the public register, and certificates that cannot be verified through that register should not be relied upon. A historic /JAZ number or legacy seal is not independent proof of a current Curaçao licence either — the legacy "orange" sub-licence certificates of operation ended on 15 October 2025.

Judging an operator, a regulator or a payment method

The comparison that matters is not brand against brand. It is the quality of the regime behind each site, judged on the same four or five criteria: how disputes are handled, how player funds are held, what a licence costs and demands, and what happens when something goes wrong.

The Gambling Commission's fee structure is the statutory levy, not a licence application. Rates range from 0.1 per cent to 1.1 per cent depending on licensed activity, with 1.1 per cent of previous-year Gross Gambling Yield for all online operators and for all software licences. The levy raised just under £120 million in the year reported, ringfenced solely for research, prevention and treatment of gambling-related harm, split 20 per cent to research, 30 per cent to prevention and 50 per cent to treatment. Compare that with what an offshore licence costs the operator — a Curaçao B2C licence costs a one-time non-refundable application fee of €4,592 with a total annual fee of €47,450; an Anjouan B2C licence costs €17,828 for issuance and €17,828 per year. The difference in price is not the point. The difference in what the money buys is.

Malta is not Curacao. An MGA licence carries real substance. An MGA B2C Gaming Service Licence is required whenever a Maltese or EU/EEA entity wishes to offer a gaming service from Malta, to a Maltese person or through a Maltese legal entity; it costs a one-time non-refundable application fee of €5,000, a non-refundable fixed annual licence fee of €25,000 and gaming tax of 5 per cent of revenue. Minimum issued and paid-up share capital is €100,000 for Type 1 and Type 2 B2C licences and €40,000 for Type 3 and Type 4. It is a serious regime that is simply not the British one, and an MGA licence confers no access to GamStop and no protection under the Commission's licence conditions.

Anjouan is the difficult case, and it deserves honesty rather than sneering. Anjouan Gaming publishes regulatory standards requiring operators to segregate player funds, to use random number generators certified by an approved independent testing facility, and to implement AML/CTF controls and age verification. It requires licensees to nominate an approved ADR provider and expects complaints to be resolved within 30 days before escalation. It also states, in a statement dated 10 June 2026, that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world", and that no licensing authority can exempt an operator from local law where local authorisation is required. That is a fair and accurate statement of the limits of any offshore licence.

The trouble is what surrounds it. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 per licence per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; a former attorney-general of the Comoros described the licensing seller as "an illegal entity". The same investigation reported that the Anjouan Offshore Financial Authority was stripped of its status as a recognised regulator by Comorian banking laws passed in 2013 and 2015. Anjouan Gaming's own position, in a statement of 19 September 2024 reconfirmed in February 2026, is that an independent legal opinion from a firm regulated in England and Wales and Quebec confirms the authority is lawful and the licences valid — that claim comes from a licensee's own statement rather than an independent source, so treat it as asserted rather than established.

Read the withdrawal rule first

Before anything else on a new site, find the withdrawal clause. Then find the bonus clause. Two further statements carry real weight. LCCP licence condition 7.1.1 requires licensees to ensure terms and conditions, and any consumer notices relating to gambling activity, are not unfair within the meaning of the Consumer Rights Act 2015. And a licence condition effective 31 January 2024 requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider within the Payment Services Regulations 2017. Offshore sites answer to neither.

Five signs a gambling website can be trusted

Trust is not a feeling about a homepage. It is a set of verifiable facts, and each of the five below can be checked in minutes.

Licensable jurisdiction with a searchable register

A trustworthy site holds a licence from a regulator that publishes the names, domain names and status of its licensees — and the site appears there under the domain actually being used. The Commission's register does exactly this, and the Commission advises checking whether the site's activities and domain names match what is recorded. Anjouan and Curaçao publish register or verification mechanisms too, though Curaçao's own portal notice of 7 October 2026 says the previous online gaming portal will not return to service and an alternative verification mechanism is being built. A regulator that cannot currently be checked is a regulator whose seal means less today than it did last year.

A named dispute route that costs the player nothing

In Great Britain, LCCP social responsibility code provision 6.1.1 requires licensees to have arrangements for customers to refer any dispute to an ADR entity free of charge if it is not resolved to the customer's satisfaction within eight weeks of receipt of the complaint, and the customer must have gone through the operator's own procedure first. The Commission's approved list includes ADR Group, Pegasus ADR Service, the Centre for Effective Dispute Resolution, eCOGRA, IBAS, ProMediate and the Tattersalls Committee. IBAS took 3,721 domestic disputes in 2024-25, of which 217 were Banking or Financial Disputes, completing domestic disputes in an average of 20 days. eCOGRA's Great Britain report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which 150 valid disputes were Deposits and Withdrawals, with an average domestic resolution time of 31 days and 17.8 per cent of completed disputes ruled for the consumer. A site with no named ADR provider is a site with no route past its own complaints desk.

Customer funds held under a stated protection rating

British operators must select one of three customer-funds protection ratings — "not protected", "medium protection" or "high protection" — must make clear in their terms which applies, and an operator rated "not protected" must remind the customer once every six months that their funds are not protected in the event of insolvency, stating the value held. Customer funds must be kept in a separate client bank account, separate from the operator's business accounts. Note the caveat the Commission itself publishes: keeping funds in a separate client account does not mean customers will get their money back if the operator becomes insolvent, and gambling businesses are legally allowed to hold customers' money in overseas bank accounts. Also note that money staked within an open bet is not customer funds and is not covered by any insolvency arrangements. A term that states none of this is not a term that has nothing to disclose.

Withdrawals without a queue or a clause

The Commission's position is that it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, and that where it has no regulatory concerns about a customer there is no valid reason to delay the payout of a withdrawal. In the Commission's data covering June to September 2024, 44.2 million withdrawals by customers of large online operators were recorded in that period, of which 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent up to 48 hours. Reverse withdrawals — the option to cancel a pending withdrawal — were permanently banned for all remote operators by requirement 14B, in force from 31 October 2021, which states that consumers must not be given the option to cancel their withdrawal request. A site that still offers to let a pending withdrawal be reversed is advertising an unlawful feature.

Told what is needed before depositing, not at the cash desk

A trustworthy operator explains, before money is deposited, what identity documents or information may be needed, in what circumstances and in what form — the LCCP's own expectation. It also keeps its terms and the bonuses out of each other's way: from 19 January 2026, incentives cannot mix more than one gambled product, wagering requirements cannot exceed ten times, and terms must be clear, transparent, fair and readily accessible. Separately, all significant conditions applying to marketing incentives must be provided transparently and prominently, and where displayed online, in full no further than one click away.

How to check a site before depositing — six steps

The sequence below is ordinary and lawful. None of it requires an account, and none of it needs a deposit.

1. Search the Gambling Commission register for the exact domain. The Commission advises checking the site's activities and domain names against the register. A licence held by a known company does not automatically cover a domain the register does not list — and a foreign licence is not a British one.
2. Read the licence condition that governs exclusions if you are on GamStop. Since 31 March 2020, all online operators must participate in GamStop under social responsibility code provision 3.5.5, and since April 2020 they must check their entire customer base for registration at least every 24 hours. A British-licensed site that showed an account to a registered person has failed a licence requirement, not merely annoyed somebody.
3. Find the withdrawal clause and the maximum the terms permit. LCCP guidance prohibits terms that impose a maximum limit on the amount a consumer may withdraw from their deposit balance — the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". It also prohibits terms allowing confiscation of money deposited but not yet staked, and terms letting the operator deduct a balance because identity or age verification failed.
4. Price the bonus properly, by multiplying out the wagering. A ten-times cap on a £100 bonus is £1,000 of play before anything is withdrawable; a thirty-five-times requirement is £3,500. And check which game contributes what. An operating model where slots count at 100 per cent and roulette at 5 per cent means the headline multiplier is not the real one.
5. Check the payment method's own terms, not just the site's. Bank gambling blocks work by declining payments to merchants categorised under gambling Merchant Category Codes, cover online casinos, betting websites, gaming apps and physical venues, and are applied at card level, so each card must be activated separately. Most banks use a cooling-off period of 48 or 72 hours before gambling transactions are allowed again after a block is switched off, and blocks do not affect your credit score. The Commission's list of banks offering a gambling blocking service names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling.
6. Decide before the first deposit what happens if the checks go wrong. Set a financial limit when prompted, check what the site says about customer-funds protection, and save the complaint route. If a dispute arises, the operator has eight weeks before an ADR referral becomes available, and the ADR provider needs to see that internal procedure completed — 361 of 499 invalid eCOGRA disputes in 2024-25, 72.3 per cent, had not been through it first.

What no gambling website in the UK can do for you

Here is the part the advertising never says. GamStop Online blocks access to gambling websites and apps licensed in Great Britain only, and it can only exclude a person from participating operators; it is unable to prevent access to gambling services run by organisations that do not participate in the scheme. Offshore sites that hold no Gambling Commission licence are not connected to GamStop, since the scheme's obligations apply only to licensed operators — that last point is stated by trade and press sources rather than on a regulator's own page, but it follows directly from GamStop's own terms of use. Nothing here is a loophole. An offshore site is simply outside the system, which means the block a person relied on is not doing what they think it is doing.

The Commission takes this seriously enough to have issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators appearing on unlicensed websites available to British consumers, noting that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and AML controls. It is worth reading that sentence twice. The population the black market is most interested in is the population least able to absorb another loss.

The scale is contested but not trivial. Commission analysis published 5 November 2026 estimates that, across the whole population including non-gamblers, 0.6 per cent of respondents engaged with illegal gambling websites in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one; among respondents who had gambled online in the past four weeks, the estimate rises to 2.5 per cent. Market-intelligence firm H2 Gambling Capital puts the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent in 2019 to 92 per cent in 2025. Those two sets of numbers do not sit comfortably together, and I would treat the higher estimate with caution — it comes from an industry-funded market model, and the Commission's own methodology explicitly notes it does not capture activity hidden by VPNs. What is not in doubt is the direction. Volume, spend and marketing effort all point the same way.

Blocking software helps, and it is one of the few things that works whether or not a licence is in play. GamStop signposts Gamban and BetBlocker. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban states it blocks licensed and unlicensed sites and that its protection is designed to be as difficult to remove as possible. Its free UK licence scheme, TalkBanStop, ended on 31 March 2026; Gamban is now free for residents of Wales, while in England and Scotland it costs £4.99 per month or £29.99 per year after a seven-day free trial.

Where the money goes when it goes right, and where to get help

There is one section of British gambling regulation that deserves defending rather than criticising, and it is the payout rules. LCCP guidance states that players must be informed they are allowed to withdraw their deposit balance at any time, including when a bonus is pending or active, and must be allowed to withdraw without restriction except as necessary to comply with general regulatory obligations. Operators are not prevented from charging a cost-reflective processing fee for withdrawals, or reasonably limiting the size or number of separate withdrawals, provided this is done under a fair and transparent term, is made clear before a deposit, and any charge does not exceed the direct cost of processing the withdrawal. Account inactivity cannot be used to confiscate or deduct any part of a deposit balance; where a credit balance account has been inactive at least 12 months, operators must try to repay it to the last payment method used, and a maintenance charge is only permitted after 12 months of the player being unable to verify identity, with at least 30 days' notice.

That is a genuinely decent rulebook. It is also why one settlement is instructive. On 21 October 2026 the Commission announced that one operator, which runs seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals. The specific failures included a term stating customers could request only one withdrawal at a time and could not request another until the original was authorised — found unfair under the Consumer Rights Act 2015 — and manual review of every fifth or tenth withdrawal for some customers, which led to extra information being required before withdrawals were processed. The regulator's data going the other way is the counterweight: complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Progress, of a kind, achieved by enforcement rather than goodwill.

Two more protection layers are worth knowing about, because they work on sites the regulator cannot reach. Bank gambling blocks are applied at card level and cover online casinos, betting websites, gaming apps and physical gambling venues, with most banks using a 48 or 72-hour cooling-off period before gambling transactions resume after a block is switched off. Blocking software sits above that, on the device.

If gambling stops being a pastime, the help is free and it does not depend on which regulator signed the licence. The National Gambling Helpline is operated by GamCare on 0808 8020 133, available 24 hours a day, every day of the year, reached by phone, live chat or WhatsApp; callers in Wales are given 0808 2819 265. It is not a crisis line, and staff follow their own safeguarding procedures rather than transferring people at immediate risk. Beyond that: GamCare's support services, BeGambleAware as the public-facing brand of GambleAware, GamFam as a registered charity (No. 1191139) for families and friends delivering support through its GRA5P peer-support programme, Gamblers Anonymous England, Wales and Ulster on 0330 094 0322 with around 250 meeting locations, and Gam-Anon UK and Ireland for the family and friends of compulsive gamblers. The NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB takes self-referrals, and NHS England had opened 15 specialist gambling clinics across England since 2019, with integrated care boards commissioning eight regional services that currently receive almost 5,000 referrals a year against a targeted 3,000. Citizens Advice offers free, confidential advice including help with debt, and Citizens Advice Scotland runs a gambling support advice line on 0800 328 1131 on weekdays from 10am to 3pm. The statutory levy, at 1.1 per cent of online operators' previous-year Gross Gambling Yield, funds that treatment system rather than charity: it raised just under £120 million in its first reported year.

Questions About Gambling Websites UK

Which gambling websites are legal in the UK?

Only those holding a Gambling Commission licence. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere. The Commission's public register lists licence holders, activities and domain names, so the check is available to anyone.

Do offshore gambling websites accept British players?

Many do, and that is the problem rather than the attraction. The Commission states plainly that operating here without a Commission licence is illegal, including for operators licensed in another jurisdiction. Its Illegal Markets team has issued 3,140 cease and desist and disruption notices since April 2024 and referred 447,778 URLs to search engines. Being reachable is not the same as being permitted, and no offshore term can change what British law says.

What is the best gambling website in the UK?

There is no honest answer by brand, and any list ranked by payout percentage or bonus size is selling something. The better question is what a site can be held to. British-licensed operators must participate in GamStop, cannot accept credit cards, and face a ten-times cap on bonus wagering from 19 January 2026. A site that meets those conditions and publishes its customer-funds rating is a stronger proposition than a flashier one that does not.

Are UK online gambling websites with sustainability certifications worth trusting?

Treat the phrase with suspicion. No British regulator issues a sustainability certificate, and the certifications that exist are commercial audit marks rather than licences. Two things are checkable and matter more: whether the domain appears on the Commission's public register under the correct activity, and whether the operator names an approved ADR provider. A certificate from an auditor says nothing about whether a withdrawal will be paid.

Can a British player use an offshore site to get around self-exclusion?

No legitimate one, and the framing is the mistake. GamStop blocks access to sites licensed in Great Britain only and cannot prevent access to operators that do not participate. An exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. The Commission's January 2025 warning notice noted that unlicensed sites often target people who have self-excluded and may have inadequate player-protection controls.

Do top UK gambling websites pay withdrawals in 24 hours?

Many do. Commission data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. But no licence condition states a maximum number of days; the regime relies on the fair-and-open condition, the identity-verification condition and the ban on unfair terms. That is precisely why the return of friction at the cash desk remains the single most reported complaint.

The register is the only ranking that matters

The British gambling market is enormous, the rules around it are unusually specific, and the gap between a licensed site and an offshore one is not a matter of taste but of paperwork that a careful person can read in an evening. A licence condition requiring participation in the national self-exclusion scheme, a ten-times ceiling on bonus wagering, a prohibition on maximum withdrawal limits, a named ADR provider, a published customer-funds rating — none of it is glamorous, and all of it is the difference between a product and a promise.

The bit I keep coming back to is simpler than any of that. Registering with GamStop takes a few minutes and blocks a person from gambling with every online company licensed in Great Britain — and it stays in place after the chosen period ends unless the person contacts GamStop to remove it. If you do not deactivate, the scheme then holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Anyone who wants help fast can call the National Gambling Helpline on 0808 8020 133, free, 24 hours a day. As of July 2026, 614,738 people were on that register — and more than one in two of them had chosen the longest term available.