Gambling Sites UK How British Rules Compare With Offshore Ones

Gambling sites in the UK must hold a Gambling Commission licence to take bets from British customers. Those on the public register follow British rules on identity checks, bonus terms and complaints; sites licensed elsewhere do not, and a British customer has no regulator behind them if the money goes astray.

The British gambling site is, whatever the marketing says, a regulated animal. It cannot take a penny from anyone in Great Britain without a licence from the Gambling Commission, it must join the national self-exclusion scheme, and it must keep customer money in a client account and tell you honestly whether that money is protected if it goes bust. It must verify who you are before you stake, not when you try to leave with the winnings. None of this makes it a charity. It makes it accountable to somebody with a statutory power to fine it, which is not the same as a site that answers to a licensing clerk on a Caribbean island and to nobody at all in Britain.

The offshore side of the market is where the interesting documents live. A Curaçao licence, an Anjouan licence, a Kahnawake permit — each carries its own fees, its own arbitration arrangements and its own views on what a player is owed. Some of that paperwork is a genuine attempt to impose order. Some of it is a certificate sold by the year. Telling them apart is a reading exercise, not a matter of taste.

This page looks at gambling sites in the UK from one angle throughout: how the British rulebook compares with the offshore one, and what the differences cost a player in practice. As of 12.11.2026, the honest summary is that British sites are more constrained and more expensive to run, offshore sites are freer and mostly cheaper to use, and almost every bad story in this market starts with a customer who thought the licence did not matter.

UK Gambling Sites and the Licence That Counts

It is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence — including an operator that holds a licence in another jurisdiction. Section 33 of the Gambling Act 2005 is the offence: providing facilities for gambling without an operating licence carries, on summary conviction, up to 51 weeks' imprisonment, a fine up to level 5 on the standard scale, or both. The offence sits with the operator, not the punter. An adult betting on an unlicensed site commits no offence under the Act.

The law's reach is wider than people assume. Section 33 applies to remote gambling if at least one piece of remote gambling equipment is situated in Great Britain, and under the post-2014 wording it also bites where the provider knows or should know the facilities are likely to be used in Great Britain. That is why the Commission's language is blunt: it does not matter that the operator is licensed somewhere else.

The Commission's public register is the check that settles everything. It lists the domains a licensee may use, so a site that displays a Commission licence number while operating a domain absent from the register is not licensed for that domain, whatever the footer claims. Search the name, click through, compare the domain.

For the record on the name: the scheme is GamStop — run by Gamstop Online — and it is often typed "gamestop".

What a UK Licence Actually Buys

A licence is a bundle of obligations. Since 31 March 2020 every online operator must participate in GamStop as a condition of its licence — the requirement sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice. Since April 2020 operators have had to check their entire customer base against the register at least every 24 hours, which also stops registered people receiving direct marketing. Fail to integrate and the Commission can suspend a licence: it did exactly that on 3 April 2020 to two operators under section 118(2) of the 2005 Act.

Then there is the money. Customer funds must be held in a client bank account separate from the operator's business accounts, and every licensee must pick one of three protection ratings — "not protected", "medium protection", "high protection" — state it in the terms, and, if rated "not protected", remind the customer every six months that the funds are unprotected, with the value stated. A separate client account is not insurance; gambling firms may legally hold customer money overseas.

Since 31 October 2025 all gambling businesses must prompt a customer to set a financial limit before their first deposit, must make it easy to review and change, must remind customers every six months, and under RTS 12E must present limit-setting as the default so declining it takes a deliberate act. That is about as far from the offshore welcome page as the industry gets.

The Ten-Times Cap and the Bonus Rulebook

The most useful single comparison between a British and an offshore site is the bonus terms, because that is where the arithmetic turns hostile. Since 19 January 2026, licence condition social responsibility code 5.1.1 caps wagering requirements at ten times: a licensee must not require a customer to play through bonus funds more than ten times. The Commission's own explanation for the cap is worth keeping: it said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements".

The same code bans mixed-product promotions — no incentive may include more than one type of gambling product among betting, casino, bingo and lottery. "Bet £5 and get a £5 free bet and 20 free spins" fails. A "bet £5, get £10 free bet" passes. Where the customer freely chooses which product category to use bonus money on, the ban does not apply.

British guidance also requires that deposit and bonus balances are displayed separately, that wagering requirements must not apply to play with the deposit balance, and that a player may withdraw their deposit balance at any time, including while a bonus is pending. That last point is what killed the sticky bonus, the arrangement where the bonus itself could never be cashed out. Offshore, sticky bonuses survive.

Where the Offshore Offer Is Genuinely Different

Offshore sites are not bound by the ten-times cap. Trade comparisons put typical welcome offers at 25x to 40x wagering, and a 2026 casino-guide table puts welcome bonuses at 35x to 50x and no-deposit bonuses at 40x to 60x with a €50–€100 cashout cap — those ranges are reported rather than regulator-confirmed, but they are consistent with the published terms of the operators in question.

The terms that build in delay are the ones to study. A maximum cashout clause is the classic: one operator's published terms reserve the right to limit withdrawals from bonus-generated winnings to 300% of the credited bonus amount, with any excess voided. A maximum bet while wagering is the second: one site caps bets at €5 for regular players and €10 for VIPs during wagering and rejects anything above, while another caps every wager at 20% of the deposited amount and warns that breach "may result in account closure, forfeit of the Bonus, and any winnings generated". Contribution weightings are the third, and the quietest: at one offshore room, slots and specialty games count 100% towards wagering, table games 20%, video poker and blackjack 10%, roulette and baccarat 5%, and craps, jackpot games and live dealer 0%. A 40x requirement cleared entirely on roulette is a 800x requirement.

In Britain, a maximum limit on what a customer may withdraw from their deposit balance is a prohibited term — the Commission's own example of the forbidden drafting is "You may withdraw up to £50 per day and up to £500 per week".

Analysing Quality in UK Gambling Sites

Anyone compiling a list of the best gambling sites in the UK by brand is writing advertising. Compiling one by criterion is journalism, and the criteria do not flatter everyone equally. The table below compares licence regimes rather than brands, because that is the variable that actually changes a player's rights.

Read the table properly and it says something less flattering to the British case than the marketing suggests. The British regime does not buy faster withdrawals — the Commission sets no fixed maximum number of days for completing one — and it does not buy cheaper bonuses. It buys constraints on the operator: a ten-times ceiling, a ban on withdrawal caps, a statutory self-exclusion scheme, and somebody to complain to who is not the operator's own support desk.

There is a counter-argument worth conceding. Kahnawake has regulated interactive gaming since 1999, longer than almost anyone, and its rules include a genuine sting: a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a third-party charity chosen by the Commission. That is a real deterrent, not a plaque on a wall. Curaçao's regulator, after the LOK took effect on 24 December 2024, ended the old master-licence model in which private licensors sold sub-licences: licensing activity ceased for the four former master licensors between 18 August 2024 and 31 January 2025, and the legacy "orange" certificates of operation expired on 15 October 2025. A Curaçao /JAZ number on a footer today proves nothing, and the authority says so in terms.

Five Checks for Sorting Quality Sites

Whether a site can be trusted is not a matter of reputation. It is five documents and a few minutes. Each of these signs has a quick test attached; any one of them failing is enough to walk away.

The Licence Names the Domain

A licence that does not name the domain you are on is not a licence for that domain. The Commission publishes a register listing licensees and the domain names each may use, and advises consumers to click through and check whether the site's activities and domains match. The quick test: search the brand on the register, then confirm the exact domain appears. If it does not, the Commission licence badge in the footer is decoration.

Customer Funds Have a Stated Rating

Under LCCP licence conditions 4.1.1 and 4.2.1 a licensee must choose one of three ratings — "not protected", "medium protection" or "high protection" — state which applies in its terms, describe the method used to achieve it, and give the disclosure in writing with the customer acknowledging receipt. The quick test: find the phrase in the terms. If the terms are silent on insolvency, treat the money as unprotected, because in effect it is.

Complaints Go Somewhere Independent

A licence holder must have arrangements for a customer to refer an unresolved dispute to an ADR entity free of charge if it is not settled within eight weeks, and the provider list is public: ADR Group, Pegasus ADR Service, Blexr, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. Licence holders should respond to ADR information requests within ten working days. The quick test: locate the ADR provider's name in the terms, then confirm it appears on the Commission's approved list. A dispute route that ends in the operator's own inbox is not a dispute route.

Bonus Conditions Fit on a Screen

Significant conditions of a marketing offer must be provided transparently and prominently, and where displayed online, in full no further than one click away. The quick test: find the wagering figure, the contribution weightings, any maximum bet while wagering and any maximum cashout, without opening a PDF. Offshore, the same information is usually spread across three documents and contradicted by a fourth.

Payment Methods Match the Rules

Since 31 January 2024 a licensee may accept payment from a Great Britain customer only by a method whose provider is a payment service provider under the Payment Services Regulations 2017. Credit cards have been banned for gambling since 14 April 2020, and operators must also ensure that money arriving from an e-wallet was not loaded from a credit card. The quick test: if a British-licensed site offers a deposit method that is not a regulated PSP, or hints that a credit card will work, the licence claim is doubtful before you look at anything else.

Five Steps to Judge a Site Before You Stake

1. Check the licence against the domain. Search the Gambling Commission's public register and confirm the exact domain you are on is listed. Reason: the register is the only document that settles which domains a licence covers, and a licence naming a different domain is a licence for a different business.
2. Find the customer-funds rating in the terms. Look for "not protected", "medium protection" or "high protection". Reason: a separate client account does not mean customers are repaid on insolvency, and operators may hold the money overseas, so the rating is the only honest signal available.
3. Read the bonus terms as arithmetic, not as prose. Multiply the bonus by the wagering figure, apply the contribution weightings, and check the maximum bet and maximum cashout clauses. Reason: a 40x requirement on a game that contributes 5% is a far larger undertaking than the same 40x on slots, and the figure in the banner rarely survives that calculation.
4. Confirm the dispute route before you need it. Check that the operator names an ADR provider on the Commission's approved list. Reason: the Commission is a regulator and not an ombudsman — it cannot resolve an individual complaint or retrieve money — so the ADR entity is the only free remedy available to a British customer.
5. Believe the withdrawal paperwork, not the withdrawal page. Check whether verification is asked for at sign-up or at cash-out, and whether the site imposes any per-day or per-week withdrawal limit. Reason: over a quarter of complaints reaching the Commission's contact centre concern identity verification, and the disputes that reach ADR providers most often concern deposits and withdrawals.
6. Set the financial limit at the first prompt. British licensees must offer one before the first deposit and remind you every six months. Reason: it is the cheapest form of control available, it costs nothing, and it is exactly the feature offshore sites are least likely to offer.

Market Trends for New Sites

New gambling sites in the UK arrive inside a market that is growing and consolidating at the same time. Total Great Britain gross gambling yield was £17.5 billion in the year to March 2026, up 4.4%, with the remote casino, betting and bingo sector at £8.3 billion, up 6.9%. Online slots alone generated £773 million in the January to March 2026 quarter, up 12% year on year, from 25.1 billion spins.

The illegal side of the same market is where the numbers get slippery, and the estimates disagree by a factor of six. H2 Gambling Capital puts stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019. A Frontier Economics study for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, with up to £4.3 billion including illegal venues. Yield Sec, analysing for the Campaign for Fairer Gambling, puts the GB online market at £8.8 billion GGR in 2025, split 91% regulated and 9% unregulated. When three credible methodologies differ that widely, the sensible position is that nobody knows precisely — including the people quoting with most confidence.

What is not in dispute is the enforcement trend. The Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices since April 2024, referred 447,778 Bing and Google URLs, and secured 287,961 removals. Across 160 illegal gambling websites with traffic data, engagement fell by an average of 32% after disruption; by method, registrar blocks and suspensions produced the largest average fall, at 91%. In July to September 2026 alone the Commission referred 1,835 websites to search engines and issued 546 cease and desist notices. Meanwhile, across April 2025 to March 2026 every quarter recorded zero or one prosecution commenced. Disruption, in other words, is not prosecution, and the Commission says as much: GEO IP blocking and registrar blocks work better than search-engine removal, because making a site hard to find is not the same as blocking it.

For players, the practical upshot is dull and worth repeating. An offshore site is not licensed in Great Britain, British protections do not apply to it, and neither does GamStop. The Commission warned in January 2025 that unlicensed sites often target people who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. Self-exclusion through GamStop holds for its full term — 6 months, 1 year, 5 years or 5 years auto-renewing — and stays in place after that term ends until the person contacts GamStop to remove it. It is not cancelled by choosing a site outside the scheme.

If gambling causes harm, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day, run by GamCare. Callers in Wales can use 0808 2819 265. BeGambleAware, the public brand of the charity GambleAware, points to the same number and an online chat. Citizens Advice offers free, confidential help with debt, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, Monday to Friday, 10am to 3pm.

Why ID Checks Are the Whole Game

If one mechanism decides how a British gambling account behaves, it is identity verification — because it is the point at which the entire rulebook either works or is quietly bypassed.

The first time is meant to be front-loaded. Licence condition 17 requires a licensee to obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the information must include name, address and date of birth. Before permitting a deposit, licensees should tell customers what documents or information they may need, in what circumstances and in what form. In practice many checks are invisible: companies can often verify identity against credit reference agency and electoral roll data, in which case no documents are asked for at all. Where documents are needed, passports, driving licences and household bills are the standard set. The Commission states it cannot give a timescale, because the process varies; electronic verification may be instant, document review may not.

Underneath that sits the anti-money-laundering threshold. In remote casinos, identification and verification are required when a customer deposits funds to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more — and the threshold applies to a single transaction or to transactions that appear linked, including activity within a single logged-on period. A remote casino may identify customers and verify their age at registration but defer full verification until the €2,000 threshold triggers, which the Commission calls the hybrid approach. Higher-risk accounts additionally require source of wealth.

Later, the rules tighten rather than loosen. Licence condition 17.1.1 states that a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier — with the exception of information it must obtain at that moment under another legal obligation, such as an AML requirement. Where a business delays a withdrawal over insufficient ID, it may be in breach of condition 17. Operators cannot confiscate funds for failure to provide ID; the CMA's position is that consumers are legally entitled to the money they deposited, winnings from money deposited and gambled, and bonus winnings where the conditions are met. A withdrawal cannot be capped on the deposit balance, and un-staked deposits remain the customer's.

The warning signs are specific. A site that asks for nothing at sign-up and everything at cash-out is running verification backwards, and the Commission has said it is not acceptable to introduce friction on withdrawal rather than on deposit. Fuzzy matching is the second: the Commission has expressed concern about operators using third-party providers to onboard customers on partial or equivocal verification, and notes that onboarding a customer with a middle name instead of a forename creates mismatches with records held elsewhere — including GamStop, which undermines the self-exclusion it is supposed to enforce. The third sign is inconsistency between documents: a name, address or date of birth that shifts between registration and verification pages is a mismatch waiting to happen at the worst moment.

And the friction is not theoretical. Since 31 October 2021, RTS 14B has banned reverse withdrawals outright — "Consumers must not be given the option to cancel their withdrawal request" — because the Commission found the reverse button presented a risk to engaged and vulnerable gamblers. Yet more than a quarter of complaints reaching the Commission's contact centre still concern identity verification, which is what people raise when documents are demanded only on the way out. The Commission's annual report for 2024-25 says issues relating to withdrawals continue to cause most of the complaints it receives, and its contact centre has handled around 2,000 withdrawal-delay complaints a year. The cleanest statement of the principle remains the Commission's own: where it has no regulatory concerns about a customer, there is no valid reason to delay a payout.

How Many Online Gambling Sites Are There in the UK?

There is no published figure, and anyone who offers one should be asked for the register read behind it. What can be counted is domains attached to licence holders, and the Commission's register lists them per licensee. What cannot be counted is the number of gambling websites a British consumer can reach: the Commission's dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, and it has previously identified just over 1,000 unique illegal gambling websites over a monitored period, with its affiliate-page method finding 364 such sites in May 2024 rising to 535 in July 2025.

The useful distinction is not how many sites exist but how many are accountable. A site on the register answers to the Commission, must join GamStop, must publish a customer-funds rating and must route disputes to a free ADR provider. A site absent from it answers to whatever authority issued its paper and, in Britain, to nothing.

The UK Gambling Sites FAQ

Do UK gambling sites accept credit cards?

No. The Commission banned credit cards for gambling with effect from 14 April 2020, adding licence condition 6.1.2 to the LCCP. The ban covers remote gambling and non-remote betting. Operators must also check that money arriving from an e-wallet was not loaded from a credit card. The exemption is narrow and specific: non-remote lottery operating licences, so a scratchcard bought in a shop can still go on a credit card.

Are UK gambling sites not on GamStop legal?

Only if they are not taking British customers. GamStop participation is a licence condition for every British-licensed online operator, required since 31 March 2020 under social responsibility code 3.5.5, so a British-licensed site outside the scheme is in breach. A site genuinely based abroad and unlicensed in Britain is offering services illegally under section 33 and is not covered by GamStop.

Is there a list of UK gambling sites?

The Gambling Commission's public register is the authoritative list, and it names the domains each licensee may use, which matters more than the brand. A licence naming one domain does not cover another. Checking the register is also the step the Commission itself recommends, precisely because licence badges in footers are easy to copy and rarely verified by anyone.

What are the safest online gambling sites UK players can use?

The safest are on the register, with a stated customer-funds rating, a named ADR provider from the approved list and verification at sign-up rather than at cash-out. Those three markers matter more than age or size. Nineteen per cent of adults who gambled in the past twelve months disagreed that withdrawing winnings is quick and easy, which tells you roughly how common friction remains even inside the licensed market.

Do UK gambling sites accept PayPal?

British licensees may accept payment only from methods whose provider is a payment service provider under the Payment Services Regulations 2017, and PayPal qualifies. The platform is not the issue; the operator's own terms are. Where an e-wallet is used, the operator must still satisfy itself that the funds were not loaded from a credit card, so a wallet balance can itself trigger questions at some sites.

What happens to a bonus payout offshore?

Usually less than the banner suggests. Offshore terms commonly include a maximum cashout clause — one published example limits withdrawals from bonus-generated winnings to 300% of the credited bonus amount and voids the excess — plus a maximum bet while wagering and contribution weightings that can make a 40x requirement far larger in practice than it reads.

What the Licence Is Really Worth

Gambling sites in the UK are not better behaved because their operators are nicer people; they are better behaved because a regulator with statutory powers, a register of domains and a public ADR route stands behind them, and because the terms they may impose are capped at ten times wagering with no ceiling on what a customer may withdraw from their deposit balance. Offshore is not automatically worse — Kahnawake has policed its market since 1999 — but where a regulator issues nearly 1,400 licences in a year, the paperwork on any single site is worth less than the fee paid for it. An offshore site is not licensed in Great Britain, its rules are not British rules, and GamStop does not reach it. The National Gambling Helpline is free, 24 hours a day, on 0808 8020 133. Then check the register, and read the bonus terms to the end — because on 19 January 2026 the Commission capped wagering at ten times precisely because some licensees were writing sixty.