Non GamStop Sites and British Rules

Non GamStop sites are gambling websites that hold no Gambling Commission licence. Because the British self-exclusion scheme binds only UK-licensed operators, such sites cannot check the register, so a GamStop exclusion does not block them. They are not licensed in Great Britain, UK consumer protections do not apply, and the market is small beside the regulated one.

The name of the scheme is often typed "gamestop", which is a fact about the spelling rather than the thing, but it is worth fixing early: the scheme is GamStop, launched in April 2018, and it binds every operator holding a licence from the Gambling Commission.

That is the whole of the legal position, and it is less interesting than what follows from it. The Commission's licence condition Social Responsibility Code 3.5.5 requires licensees to take part in the national multi-operator self-exclusion scheme, and every operator has been obliged to check its entire customer base against the register at least every 24 hours since April 2020. An operator outside that system is not a rule-breaker by definition — it is simply not in the room. In April 2020 the Commission suspended the licences of two operators, Dynamic and Sportito, under section 118(2) of the Gambling Act 2005 for failing to integrate in time, which tells you how seriously the regulator treats the obligation, and how meaningless it is to a site holding a Curaçao certificate instead.

This page looks at the offshore market the way the rest of this site looks at every topic: by setting what British rules require against what offshore rules actually provide. The comparison is rarely flattering, occasionally closer than the trade admits, and never a reason to treat an unlicensed site as a bolt-hole from a self-exclusion. Self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. Nothing offshore changes that.

The scale, first. The Commission's analysis published on 5 November 2026 found that among people who had gambled online in the previous four weeks, an estimated 2.5 per cent had engaged with an illegal gambling website, with a further 1.5 per cent doing so in the past 12 months. Across the whole adult population, including non-gamblers, 0.6 per cent in four weeks and 0.4 per cent in a year — against 94.4 per cent showing no indication at all. Its illegal gambling dashboard recorded 586 illegal gambling websites accessible to British consumers in September 2026, 4 per cent more than a year earlier, and 311 sites had disruption action taken against them in the second quarter of 2026. The market is real, it is contested, and it is a rounding error next to the £8.3 billion of gross gambling yield the remote casino, betting and bingo sector generated in the year to March 2026.

What the Commission Counts as Illegal

Start with the statute, because the offshore trade prefers the word "grey" and the Act does not.

Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether those facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the United Kingdom. For remote gambling the section bites if at least one piece of remote gambling equipment used is situated in Great Britain, or — under the wording introduced in 2014 — if the operator knows or should know that the facilities are being used, or are likely to be used, in Great Britain. The penalty on summary conviction is up to 51 weeks' imprisonment, a fine at level 5, or both; in Scotland the term is six months.

The Commission's own position, published on 21 October 2024, is blunter than most summaries of it: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction. Its remit extends only to sites that trade or advertise to British customers, and those must hold a Commission licence.

Note where the offence sits. Section 33 is an operator offence. Sections 47 and 49 make it an offence to invite, cause or permit a child or young person to gamble, and — with narrow exceptions for lotteries, football pools, category D machines and certain prize gaming — for the young person too. Cheating is an offence under section 42. What the Act does not do is criminalise the adult who places a bet on an unlicensed site, and that asymmetry is why the offshore market exists in the shape it does: the risk is concentrated on the operator, while the loss, when it comes, lands on the player.

Identifying the Best Non GamStop Sites

"Best" in this niche usually means "pays out and does not vanish", which is a low bar that a good deal of the market fails. The useful discriminator is not the welcome offer but the licence, because the licence determines who an operator answers to when something goes wrong.

Offshore Licences and What Each One Buys You

Curaçao has spent two years rebuilding its regime. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority, and the old master-licence model ended: licensing activities ceased for Gaming Curaçao (365/JAZ) on 18 August 2024, Curaçao eGaming (1668/JAZ) on 1 October 2024, a licensee (8048/JAZ) on 1 November 2024, and Curaçao Interactive Licensing (5536/JAZ) on 31 January 2025. The legacy orange sub-licence certificates ended on 15 October 2025. A historic /JAZ number is not evidence of a current licence, and the old digital seal may be affected by the CGA's transition, so the regulator had to build an alternative means of verifying licensed domains.

Anjouan is the other common port of call, and it is cheaper. A B2C licence costs EUR 17,828 to issue and the same to renew annually, with EUR 500 per additional domain. Anjouan states that its licences carry no territorial restriction under Anjouan law but that holders must comply with the law everywhere they operate, and in June 2026 it said publicly that a licence is "not, and has never been presented as, a universal authorisation to operate in every country in the world". That is a regulator telling you the certificate does not travel. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 a year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally — [unconfirmed] reporting, and the kind that a player cannot verify from a website footer.

Kahnawà:ke is the oldest of the three, regulating interactive gaming since 1999, with operators hosted at a single data centre in the Mohawk Territory. Its regime has teeth in one respect the others do not: Kahnawake rules make a licence holder's self-exclusion permanent and irrevocable, and a player who breaches it forfeits deposits and winnings to a charity chosen by the Commission. Malta sits in a different category again — a B2C licence costs a EUR 5,000 application fee and a EUR 25,000 annual fee plus 5 per cent gaming tax, with minimum share capital of EUR 100,000 for Type 1 and Type 2 licences — but an MGA licence is not a British licence and does not bring British protections with it.

Costa Rica is the one to watch for. There is no comprehensive licensing regime, no formal framework for issuing gambling licences, and the "data processing licence" often cited is not a licence in the legal sense; a bill that would have created a mandatory regime was rejected in early 2026.

Are There Any Safe Non GamStop Sites?

A cautious answer: the ones with a verifiable licence, segregated player funds, certified random number generators and a named ADR provider are less bad than the ones without. That is the honest ceiling. The Commission's warning notice of 20 January 2025 stated that casino games supplied by licensed operators were appearing on unlicensed sites available to British consumers, and that such sites often target customers who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. Targeting is the operative word. A site that cannot check the register is a site that cannot refuse an excluded player, and some of them have noticed.

Comparing the Licence Requirements

Here is the comparison that actually matters. Same six categories, applied to a site with a Gambling Commission licence and to one without.

Read the wagering row twice. A welcome bonus at 40× on a £100 bonus requires £4,000 in wagers before a penny of bonus-derived winnings is withdrawable, and offshore terms commonly weight the games differently — one published chart gives slots 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and live dealer games nothing at all. Spinning roulette towards that target takes far longer.

Non GamStop Gambling Sites and the Bonus Arithmetic

The Commission capped wagering requirements at ten times from 19 January 2026, in Social Responsibility Code 5.1.1, and said plainly why: without a limit, licensees would be highly likely to introduce terms preventing customers cashing out bonuses, and the cap "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". From the same date, mixed-product promotions requiring two or more types of gambling are banned entirely. The implementation date slipped from 19 December 2025 to 19 January 2026, which is the sort of detail that tells you how hard the industry pushed.

None of this reaches a Curaçao or Anjouan site. Offshore terms typically run at 35× to 50× on a deposit bonus and 40× to 60× on a no-deposit offer, the latter usually with a cashout cap somewhere around €50 to €100, and those figures come from trade comparisons rather than from the regulators themselves — treat them as indicative [unconfirmed] rather than as a schedule. What is not indicative is the structure, which is published. One operator's terms state that a deposit made while a no-deposit bonus is active does not reset the no-deposit terms: the wagering requirement and the maximum cash-out continue to apply to the combined balance. Another reserves the right to limit withdrawal of bonus-derived winnings to 300 per cent of the bonus credited. A third caps the maximum bet while wagering — at ₹400 or €5 or $5 or C$5 for regular players, double that for VIPs — and states that any bet above the limit is rejected, with account closure and forfeiture of the bonus and its winnings as the sanction for breaching the rule.

The player's own money is the part that deserves attention. British guidance is that wagering requirements must not apply to play with the deposit balance, that the two balances must always be displayed separately, and that a player must be allowed to withdraw the deposit balance at any time, including while a bonus is pending. The CMA's undertakings from six operators in 2019 pushed the same way, and the Commission's fair-terms guidance prohibits any term imposing a maximum limit on withdrawing from a deposit balance — the example it gives being "You may withdraw up to £50 per day and up to £500 per week". Offshore, that example is a Tuesday. A sticky bonus, which cannot be withdrawn at all and is removed on cashout, is an arrangement British rules effectively ended and offshore terms happily retain.

The Identity Check Problem for Non GamStop Sites

If there is a single mechanism this topic turns on, it is identity verification, because it decides whether money moves at all.

The first time is meant to be dull. Under Licence Condition 17, in place since 7 May 2019, a licensed operator must obtain and verify information establishing a customer's identity before that customer is permitted to gamble, covering at least name, address and date of birth, and must tell customers before the first deposit what documents might be needed and in what form. Most operators do it electronically through credit reference agencies and the electoral roll, in which case nobody is asked for anything. Where a document is wanted, a passport, driving licence or household bill is the usual currency, and a selfie may be asked for where fraud is suspected. The Commission has never published a timetable, because there is not one: electronic checks are instant, documents take longer.

The €2,000 threshold is the other half of the design. Under the Money Laundering Regulations 2017, remote casinos must identify and verify a customer when deposits or withdrawals reach €2,000 or more, and the threshold applies to a single transaction or to linked ones — linked meaning, among other things, transactions forming part of a customer's overall activity in a single logged-on session. A remote casino may identify and verify age at registration and defer full verification to that threshold, which the Commission calls the hybrid approach. Then the checks become ongoing: a financial vulnerability check at £150 net deposits over 30 days since 28 February 2025, a reminder to review a financial limit every six months since 31 October 2025, and financial risk assessments arriving in stages from 7 July 2026, beginning with the largest operators.

The warning signs are all about timing. Licence Condition 17.1.1 says a withdrawal request must not result in a demand for extra information if the operator could reasonably have asked for it earlier — the anti-money-laundering obligations are the recognised exception, not a general licence to spring a document request at the cashier's window. A delay purely for "safer gambling" interaction is not acceptable to the Commission, which has said it does not consider it fair, transparent or necessary, and that where it has no regulatory concerns about a customer there is no valid reason to delay a payout. The offence caused by the alternative is measurable: over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, a figure it links directly to being asked for documents only on attempting to withdraw. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — a slow improvement, and still the number one subject.

Two more things worth carrying offshore with you. An operator may not confiscate a deposit balance because a customer failed identity or age verification, and it may not do so after inactivity either. And money staked in an open bet is not "customer funds", so if the business becomes insolvent mid-bet, the customer-funds arrangements do not reach it — a point British operators must disclose in writing, and offshore ones generally do not mention.

Five Signs an Offshore Operator Can Be Trusted With Money

None of these makes an unlicensed site a licensed one. They do sort the careless from the dangerous.

The Licence Is Verifiable in One Click

Check the seal, not the footer text. Curaçao's Certificate of Operation Seal must redirect to the official verification portal, and if the seal behind it shows a different domain from the one being visited, the site is displaying somebody else's certificate and should be treated as unauthorised or fraudulent. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and its own framework says certificates that cannot be verified through that register should not be relied upon. Kahnawake runs a logo programme that generates a Certificate of Good Standing for the site in question. If a site claims a licence and the click leads nowhere, that is the whole answer.

Player Funds Are Separated and Declared

Anjouan's published standards require operators to segregate player funds from operational funds, and British rules require a licensed operator to keep customer funds in a separate client account and to state an insolvency-protection rating — not protected, medium or high — in writing before the customer can gamble. Offshore, look for an explicit segregation statement in the terms. Its absence is not a red flag so much as a red billboard.

The Dispute Route Has a Name and an Address

Anjouan requires licensees to designate an approved ADR provider and publish its details, and the current list is EGIS ADR, Axion ADR, iGaming ADR and another approved provider. For comparison, the Commission's approved list includes IBAS and eCOGRA, both free to consumers. A named provider with a working intake form is a genuine improvement on an email address. Kahnawake goes further and employs a full-time dispute resolution officer.

The Bonus Terms Fit on One Screen

Fifty bonus lines in two-point type, a maximum cashout clause, a maximum bet while wagering and a clause reserving the operator's right to void winnings are the standard offshore package. The specific tell is discretion: terms drafted so the operator "may" or "reserves the right" to void winnings are regarded in Britain as unfair within the meaning of the Consumer Rights Act 2015, and the Commission warns against them for precisely that reason. Read the cashout clause first. It is the one that decides how the story ends.

Payment Methods and Withdrawal Behaviour Stack Up

Check whether the site will pay out to the method money came in from, whether it charges a processing fee, and whether it imposes a maximum limit on how much can be withdrawn from a deposit balance — a prohibited term in Britain, routine offshore. Then look at the payment rails themselves, because they carry their own costs: Skrill charges 2.80 per cent of a bank withdrawal with a minimum of EUR 3.50, Neteller the same at a USD 3.50 floor, MiFinity 1.8 per cent for crypto and €1 or €2 for cards, and a Jeton UK local bank transfer quotes 0 to 30 minutes with no fee at either end. Bitcoin blocks arrive every ten minutes on average but the probability of one inside any given ten-minute window is about 63 per cent, so "instant" is a claim about the casino, not the chain. A site that answers a payment question with a number is a site that has read its own terms.

How to Investigate One of These Sites Before Any Money Moves

Five steps, in this order. Each one exists to answer a question the player cannot answer later.

1. Read the licence page and click the seal. Reason: the licence determines who, if anyone, an operator answers to. A Curaçao seal that fails to redirect, or resolves to a certificate bearing another domain, ends the exercise.
2. Find the terms and conditions and search the page for "maximum" and "discretion". Reason: those two words locate the cashout cap and the void-winnings clause, which between them decide how much of any bonus-derived balance survives.
3. Check the withdrawal section for method restrictions, fees and limits. Reason: a term capping withdrawals from the deposit balance is unlawful in Britain and perfectly ordinary offshore; if the site is permitted by its own terms not to pay, the rest of the assessment is academic.
4. Look up the named ADR provider and confirm it accepts gambling disputes. Reason: an operator with a real dispute route can be held to something. One without cannot, and the Commission — which is a regulator, not an ombudsman — cannot recover money from a site it does not licence.
5. Decide the limits before registering, and set them the moment the account exists. Reason: British sites prompt for a financial limit before the first deposit and every six months thereafter. Offshore sites rarely do it unasked, and no external body will notice if the limits are never set.
6. Check the payment method's own fee schedule and the bank block. Reason: bank gambling blocks work at Merchant Category Code level and must be activated on each card, most banks use a 48-hour or 72-hour cooling-off before gambling transactions resume after the block is switched off, and the block does not affect a credit score. Several banks offer one: Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling are on the Commission's list.

Self-Exclusion Is Not a Door to Be Walked Around

The figures say the register is doing heavy work. GamStop recorded 117,756 new registrations during 2025 and reported 561,983 active exclusions at the end of that year; 58,675 registrations came in the final six months alone, an average of 319 a day. By July 2026 the figure stood at 614,738, of whom more than one in two had opted for the maximum five-year exclusion, while across all age groups only one in four had chosen six months. Under-25s accounted for nearly one in three of all registrations in the first half of 2026, a 26 per cent year-on-year increase. The scheme's 2025 annual report recorded the split as 94.3 per cent male and 5.7 per cent female.

The mechanism is deliberately unhelpful to anyone trying to reverse it. A registration blocks play with every operator licensed in Great Britain for six months, a year, five years, or five years with auto-renewal, and takes up to 24 hours to take effect. It cannot be cancelled or deactivated during the term, and the exclusion stays in place at the end of the chosen period unless the person contacts GamStop to remove it. Auto-renewal can only be switched off during the last six months of a five-year minimum period, and it continues for up to four further five-year periods. If nothing is deactivated, GamStop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded. The Group's 2025 annual report devotes a section to its refusal to remove registrations early.

That is a system built to be finished, not paused. An offshore site does not interrupt it — it simply cannot see it, which is a different thing and a worse one. The Gambling Commission's warning notice of 20 January 2025 said as much about unlicensed sites targeting excluded customers, and the help landscape assumes the opposite: the National Gambling Helpline on 0808 8020 133, run by GamCare, free and open 24 hours a day, every day of the year, with the same number reaching live chat and WhatsApp and 0808 2819 265 for callers in Wales. Gamblers Anonymous England, Wales & Ulster is on 0330 094 0322 with around 250 meeting locations, Citizens Advice Scotland's gambling support line is on 0800 328 1131, and NHS England has opened 15 specialist gambling clinics since 2019, with integrated care boards commissioning eight regional services that receive almost 5,000 referrals a year against a target of 3,000.

Where the Offshore Comparison Actually Lands

Strip the marketing away and the pattern is consistent. A British site must check the register every 24 hours, cap wagering at ten times, refuse credit cards, prompt for a financial limit, apply stake limits of £5 a spin and £2 for under-25s, run vulnerability checks from £150 in net deposits over 30 days, and hand unresolved disputes to a free ADR provider. An offshore site must do whatever its licensing jurisdiction requires and nothing more — and the cheaper the certificate, the less that is. Anjouan issues a B2C licence for EUR 17,828 a year and says the certificate is no universal authorisation; Curaçao has spent two years replacing a system in which a /JAZ number meant almost anything; Costa Rica has no licensing regime at all.

None of that makes every offshore operator a predator, and some of them run segregated funds, certified generators and a named ADR provider better than a handful of licensed ones. But the direction of travel is set by statute, not by good intentions, and statute stops at the British licence. Britain's licensed market paid a 1.1 per cent levy on previous-year gross gambling yield from online operators from 6 April 2025, raising just under £120 million in the first year, ringfenced for research, prevention and treatment of gambling-related harm. Offshore operators pay nothing towards it. That is the comparison in one line, and it is not a close one.

Frequently Asked Questions

What are non GamStop sites?

They are gambling websites holding no Gambling Commission licence. Because the self-exclusion scheme binds only operators licensed in Great Britain, such a site cannot check the GamStop register and a registration has no effect on it. That does not make them legal here: under section 33 of the Gambling Act 2005 it is an offence to provide gambling facilities without a licence, including where the operator holds a foreign one.

Are non GamStop sites UK legal?

Offering the service to British customers is illegal for the operator, and the Commission states that plainly, including where the operator holds a licence in another jurisdiction. The adult who places a bet is not the target of section 33. What follows is the practical problem: if the site refuses to pay, there is no British regulator with jurisdiction over it and no free ADR route to appeal to.

Do non GamStop casino sites with PayPal exist?

Almost certainly not in any reliable form. PayPal is a regulated payment service, and pairing it with an unlicensed gambling merchant exposes the processor, so the payment methods that show up on these sites are cards through offshore acquirers, crypto, and e-wallets such as Skrill, Neteller, MiFinity, Jeton and MuchBetter. PayPal UK charges no fee for a bank withdrawal with no currency conversion, but the merchant still has to be permitted to take the money in the first place.

Can an offshore site be trusted with a large withdrawal?

Size is the wrong test; the terms are. Look for a maximum cashout clause — one operator reserves the right to limit bonus-derived winnings to 300 per cent of the bonus credited — and for any cap on withdrawing the deposit balance, which British rules prohibit and offshore terms frequently impose. Kahnawake and Anjouan both require a named ADR provider, which gives a complaint somewhere to go. Nothing gives it a route back into the British system.

Do non GamStop bingo and poker sites differ from casino sites?

In licence terms, no: the same Curaçao, Anjouan or Kahnawake certificate covers casino, betting, poker and bingo, and Anjouan's licence categories are B2C for operators facing consumers and B2B for suppliers. The practical difference is liquidity. Casino games are played against the house and need no other players, while poker and bingo need a crowd — which is why the smaller offshore poker rooms are the ones likeliest to have thin tables and quiet rooms.

What if the site simply does not pay?

Then the complaint has no British destination. The Commission is a regulator, not an ombudsman, and cannot resolve individual disputes or recover money, though it records complaints and refers them on. British ADR providers such as IBAS and eCOGRA take disputes only about licensed operators. The realistic route is the operator's named ADR provider abroad, and failing that, whatever remedy the terms and the licensing jurisdiction allow — with the time already spent recorded as the cost of the exercise.

The Regulated Market Is a Better Deal, Which Is the Point

Non GamStop sites exist in a gap that British law created on purpose, and the gap is worth about 2.5 per cent of online gamblers, according to the Commission's own November 2026 estimate. The trade calls that a market and the regulator calls it 586 websites; both are describing the same thing, and neither is describing a place where a self-exclusion goes to rest.

If there is one number to keep, it is this one: the offshore operator a player chooses tonight will pay its regulator somewhere between EUR 17,828 and EUR 47,450 a year for the privilege, and will pay nothing at all towards the treatment system that British operators fund with a 1.1 per cent levy on gross gambling yield — just under £120 million in its first year, ringfenced for research, prevention and treatment. Help is free and always was: the National Gambling Helpline, 0808 8020 133, run by GamCare, 24 hours a day, every day of the year.