Gambling Websites UK and the British Rulebook Measured Against the Offshore One

Gambling websites in the UK trade under a Gambling Commission licence, which carries identity checks before you gamble, a 10× cap on bonus wagering, no reverse withdrawals, free access to an independent adjudicator and obligatory membership of the GamStop self-exclusion scheme. Sites licensed only offshore carry none of that, and the consistency of the gap is the whole story.

I have spent years reading the paperwork that sits behind gambling websites in the UK — licence conditions, terms and conditions, adjudication rulings, the Commission's quarterly disruption notes — and the most useful thing I can hand anyone is not a list of names but a way of telling the two markets apart. That distinction is legal before it is moral. Since 31 March 2020, every online operator serving Britain has had to be part of GamStop as a condition of its licence, and the requirement sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which states plainly that "Licensees must participate in the national multi-operator self-exclusion scheme". A site that is not in the scheme cannot hold the licence. Which means its absence is not a small omission to be weighed against a generous welcome offer. It is the clearest available signal about what kind of business you are looking at.

The market is large and legal money dominates it. The Commission put total Great Britain gross gambling yield at £17.5 billion in the year from April 2025 to March 2026, up 4.4%, with remote casino, betting and bingo generating £8.3 billion of that. The unlicensed share is genuinely contested: H2 Gambling Capital estimates £16.6 billion staked illegally in 2025, which would put the legitimate share at 92%, while a rival analysis for the Campaign for Fairer Gambling, published in June 2026, argues the figure is nearer 9% of gross gaming revenue. I find the exact number less interesting than the direction of travel both sides agree on.

Where the market really divides is in the small print. This page looks at the split from one side throughout: how the British rulebook compares with the offshore one, provision by provision.

One matter ofulary first. The scheme is often typed "gamestop", because the word "game" suggests itself, but its name is GamStop.

If gambling stops being a choice, help is free and immediate: the National Gambling Helpline, run by GamCare, is on 0808 8020 133, 24 hours a day, every day of the year — 0808 2819 265 for callers in Wales. Callers reach the same service by live chat and, on mobile, WhatsApp.

Best Gambling Websites UK and What the Standard Actually Contains

The phrase "best gambling websites UK" is usually answered with a chart of welcome bonuses. I would rather answer it with the obligations a site must meet to hold a British licence at all, because those obligations set the floor beneath every comparison.

Take withdrawal speed, the claim most likely to be dressed up. The Gambling Commission's own figures, covering June to September 2024, record 44.2 million withdrawals by customers of large online operators in that period. Of those, 96.3% cleared automatically, 3.5% cleared within 24 hours and 0.1% took up to 48 hours. Earlier Commission data from some of the largest firms showed around 99% of withdrawal requests approved, processed and fulfilled within 24 to 48 hours.

That looks like a settled matter, and it is not. The Commission's Annual Report and Accounts for 2024-25 states that, despite work with operators, issues relating to withdrawals continue to cause most of the complaints it receives. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — a real improvement, and still the biggest single category. Consumer research on trust published in July 2026 found 49% of people who had gambled in the past 12 months agreed that "it is quick and easy to withdraw and collect my winnings", with 18% disagreeing outright.

UK Gambling Websites and the Licence You Can Actually Check

A UK licence is not a badge on a homepage; it is a set of conditions with a public register behind it. The Commission advises consumers, plainly, to check before gambling that the business holds a British licence and to click through to the public register to see whether the site's activities and domain names match. That is a thirty-second check and it is not decorative — the Commission's regulatory remit only reaches websites that trade or advertise to customers in Great Britain.

Underneath sit the conditions. Licence condition 17.1.1 requires the customer's name, address and date of birth to be obtained and verified before that customer is permitted to gamble. Licence condition 7.1.1 requires terms not to be unfair within the meaning of the Consumer Rights Act 2015. Licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment only from a method whose provider is a payment service provider within the Payment Services Regulations 2017. Credit cards were banned for gambling on 14 April 2020. From 31 October 2025 every gambling business must prompt customers to set a financial limit before their first deposit, must present that as the default option under RTS 12E, and must make declining it an affirmative act.

And a licence can be withdrawn. On 3 April 2020 the Commission suspended the licences of two online operators, Dynamic, an operator, and Sportito, for failing to integrate GamStop by the 31 March deadline, under section 118(2) of the Gambling Act 2005. That is what enforcement looks like when the condition is crisp: not a fine negotiated at leisure, but the switch thrown.

Gambling Website UK versus Offshore and Where the Rules Stop

The honest answer to what an offshore site owes a British player is: nothing enforceable here, and often less than it promises. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence — including where the operator holds a licence in another jurisdiction. On summary conviction the offence carries imprisonment for a term not exceeding 51 weeks, a fine not exceeding level 5 on the standard scale, or both.

The risk sits with the operator, not the customer, and that is precisely the difficulty. Section 33 reaches the person providing facilities; adult consumers commit no equivalent offence under the Act, whose general gambling offences attach to those who provide facilities. So there is no moment where a player is arrested, and no moment where anyone is repaid.

This is where UK protections stop applying. GamStop Online blocks access to sites licensed in Great Britain only and can only exclude from participating operators; it cannot reach services run by organisations that do not participate. The Commission issued an industry warning notice on 20 January 2025 about casino games from licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. An offshore site is never a way round a self-exclusion.

UK Licence

A licence from the Gambling Commission is publicly checkable, and it obliges the holder to join GamStop, to verify identity before gambling (condition 17.1.1), to keep terms fair under the Consumer Rights Act 2015 (condition 7.1.1), to take no payment except through a payment service provider (condition 5.1.2) and to offer a financial limit at first deposit. It also opens the door to free alternative dispute resolution. The check: find the licence number in the footer, then confirm the domain appears on the public register.

Offshore Registers Curaçao

Curaçao replaced its master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority under the National Ordinance on Games of Chance, which took effect on 24 December 2024. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and a historic /JAZ number or legacy seal must not be treated as proof of a current licence. The application fee for a B2C licence is a one-time non-refundable EUR 4,592, with a total annual B2C fee of EUR 47,450, payable in full by 15 January. A CGA Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind it names a different domain, the site is displaying another operator's certificate.

Offshore Registers Anjouan

Anjouan, a constituent territory of the Union of the Comoros, licenses internet gaming under legislation adopted in 2005. Its published fee schedule is EUR 17,828 for B2C licence issuance, one-time, and EUR 17,828 for annual renewal, with EUR 500 per additional domain. Against that, an ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, and that a former attorney-general of the Comoros described the entity selling them as "an illegal entity". Anjouan Gaming itself stated on 10 June 2026 that a licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". Which is true, and is the whole point.

Offshore Registers Kahnawà:ke

The Kahnawà:ke Gaming Commission has regulated interactive gaming since 1999 and issues an Interactive Gaming Licence held by one entity at a time, alongside Client Provider Authorizations. CPA and key person fees rise on 1 January 2027: the CPA application fee from USD 35,000 to USD 40,000, five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it, and key person permits from USD 5,000 to USD 6,000. The commission's Logo Certificate Program, effective 15 January 2010, lets a player click a logo to generate a Certificate of Good Standing — a genuinely useful mechanism, and one that has just been tested against a suspension. On 6 October 2026 the commission announced that the Client Provider Authorization held by Polar Ventures SDRL had been suspended effective 29 September 2026 following a Show Cause Notice.

No Licence at All in Costa Rica

Costa Rica does not operate a comprehensive gambling licensing regime and has no formal framework for issuing gambling licences; the "data processing license" sometimes cited in the trade is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced a mandatory regime. Under Costa Rican law games whose outcome depends primarily on luck rather than skill are generally prohibited, which is why only land-based casinos inside qualifying hotels are authorised. A site claiming a Costa Rican licence is claiming something that does not exist.

Terms and Conditions and the Delay in the Small Print

The single thing this whole subject turns on is the terms, because that is where a British rule dies quietly. A licence is checked at the moment you sign up. A withdrawal term bites months later, when there is money on the table.

Here is the pattern the Commission has spent years attacking. A site lets a customer deposit without friction and applies friction only on the way out — the exact practice the Commission says is not acceptable, and which it told operators places their commercial interests above their customers'. Licence condition 17.1.1 requires that a withdrawal request must not result in a demand for additional information if the licensee could reasonably have requested it earlier; that prohibition does not block a genuine anti-money-laundering obligation, and the Commission has confirmed that such obligations may necessitate delay without giving any right to confiscate deposits. The operator may not impose a maximum limit on what a customer may withdraw from their deposit balance — "You may withdraw up to £50 per day and up to £500 per week" is the Commission's own example of a prohibited term. Un-staked deposits remain the customer's, and no term may confiscate them on the basis that identity or age verification failed.

Now the offshore version of the same paragraph. A BlueChip Casino term reserves the right to limit withdrawal from winnings generated with bonus funds, including free spins and cashback, to 300% of the credited bonus amount, with any excess voided — a maximum cashout clause of exactly the kind British guidance forbids. Ignition's published terms cap the casino max bet per wager at 20% of the deposited amount while a bonus is running, and state that failure to adhere "may result in account closure, forfeit of the Bonus, and any winnings generated during the wagering of the Bonus". Those are not signs of villainy; they are the ordinary commercial logic of a jurisdiction with no fair-terms condition, and they are why the offshore bonus is a different product wearing similar clothes.

The first time is what people notice. The second time is what teaches them.

Five Signs an Operator Can Be Trusted

Not a list of names — a list of tests. Each takes minutes.

A Licence You Can Verify on a Register

Check the footer for the regulator, then go to that regulator's own register and search the domain. The Commission's public register lets you see whether the site's activities and domain names match, which rules out the common case of one group's licence being draped over several unconnected brands. In Curaçao, follow the Certificate of Operation Seal to cert.cga.cw and confirm the certificate names the same domain you are on. A licence number that appears nowhere except the footer is a decoration.

Identity Checks Required Before Gambling

British licensees must verify name, address and date of birth before a customer is permitted to gamble, and must tell customers before their first deposit what documents may be needed and in what form. A site that will take money instantly and asks for a passport only when you try to leave has the sequence backwards. The Commission's blog of 12 August 2026 says onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses — is not sufficient, and notes that a middle name in place of a forename can create mismatches with records held elsewhere, including GamStop.

A Real Complaints Route, Ending in Free Adjudication

Licensed operators must let customers refer an unresolved dispute, free of charge, to an approved alternative dispute resolution provider once eight weeks have passed since the complaint — social responsibility code provision 6.1.1 — and a provider is on the case within weeks. IBAS's report for 2024-25 records 3,721 domestic disputes and an average completion time of 20 days, and reports 100% operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. The check: ask which approved ADR provider handles disputes and whether the site names it. Anjouan requires licensees to designate an approved ADR provider and list it in player-facing terms; where no provider is named at all, the route ends at the operator's own inbox.

Withdrawals Without a Reverse Button

Reverse withdrawals — the option to cancel a pending withdrawal and put the money back into play — were permanently banned for all remote operators by RTS requirement 14B, in force from 31 October 2021, which states that "Consumers must not be given the option to cancel their withdrawal request". The check is simple: request a withdrawal and see whether the site offers to let you spend it again. Any offer to reverse is a compliance failure, not a favour.

Funds Separated and a Rating Disclosed

Remote operators must hold customer funds in a separate client bank account, must state in writing which of the three protection ratings applies — "not protected", "medium protection" or "high protection" — and must require the customer to acknowledge that disclosure before funds may be used for gambling. An operator rated "not protected" must remind the customer every six months, stating the value of funds held. Keep in mind what separation does not mean: an account being separate is no guarantee of repayment if the business becomes insolvent, and gambling businesses are legally allowed to hold customers' money in overseas accounts.

How to Judge a Gambling Website in Six Steps

1. Verify the licence at the source. Find the regulator in the footer, then look up the domain on that regulator's own register. Reason: a licence that is real is checkable, and the check takes less time than reading a bonus table.
2. Read the withdrawal section before the bonus section. Look for any maximum cashout clause, any limit on how often a withdrawal may be requested, and any fee. Reason: British guidance prohibits maximum withdrawal limits on a deposit balance, and treats sole-discretion terms to withhold winnings as unfair under the Consumer Rights Act 2015; a site's own terms are where the difference shows.
3. Do the bonus arithmetic. Note the wagering multiple, what it attaches to — bonus alone or deposit plus bonus — the game contribution rates and the time limit. Reason: British licensees are capped at 10× wagering since 19 January 2026 and banned from mixing product types in one incentive, so a multiple in the forties tells you which rulebook you are in.
4. Set the financial limit at first deposit. The prompt is mandatory for operators from 31 October 2025 and the default option under RTS 12E. Reason: it costs nothing, and it is the only control on the list that works on the customer's side of the screen.
5. Confirm the operator's GamStop participation. A British licence cannot be held without it. Reason: self-exclusion under GamStop holds for its full term — six months, one year, five years or five years with auto-renewal — cannot be cancelled during that period, and stays in place after the chosen period ends until the person contacts GamStop to remove it.
6. Install blocking software on the devices you bet from. GamStop signposts Gamban and BetBlocker for exactly this layer; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide, while Gamban is free for residents of Wales but costs £4.99 a month or £29.99 a year in England and Scotland after a 7-day trial, following the end of TalkBanStop funding on 31 March 2026. Reason: it covers the sites GamStop cannot reach.

Sustainability Certifications and Other Paper Claims

Reader interest in UK online gambling websites with sustainability certifications is real, and I think it is largely misdirected. There is no gambling-specific sustainability certification with regulatory force in Great Britain. What exists is a licence, a set of codes, and environmental, social and governance reporting produced for investors and rating agencies rather than for players. A carbon-disclosure score tells you nothing about whether a site will pay out on a Sunday.

The closest thing to a genuine credential is an operator's stated customer-funds protection rating, because that one is a licence condition, must be disclosed in writing and acknowledged by the customer before play, and must be repeated every six months if the answer is "not protected". A handful of other documents are worth more than any badge. Remote gambling is rated high risk for money laundering by the Commission's 2026 risk assessment — published 30 July 2026 and unchanged from the previous rating — and that assessment reports a rise in the scale and sophistication of attempts to bypass customer due diligence using false documents, deepfake videos and AI-generated face swaps. Against that backdrop, an operator that can tell you its ADR provider, its licence number and its insolvency rating without being chased is more informative than one with a sustainability page.

For anyone left short by an offshore site, the practical truth is that the Commission is a regulator, not an ombudsman: it cannot resolve individual complaints or get money back, though it records complaints and typically refers disputes to an independent third party. Reporting an unlicensed site to the Commission still has value — its Illegal Markets team issued 3,140 cease and desist and disruption notices from April 2024 onward and secured 287,961 URL removals — but it is disruption, not restitution.

A Market the Regulator Shrinks Rather Than Closes

Disruption is measurable, and the Commission measures it. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32% after action. By method the spread is wide: registrar blocks and website suspensions produced an average fall of 91% each, ahead of GEO IP blocking at 60%, Bing removal at 52%, Google removal at 30% and Facebook removal at 8%. The Commission's own conclusion — that GEO IP blocking and registrar blocks outperform search-engine removals, because removal makes a site harder to find without blocking access — is one of the more candid things a regulator has published.

The pace has not slackened. In the quarter January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices to illegal operators. Between April and June 2026 it referred 366 websites, covering 147,721 URLs, and began zero criminal investigations. Between July and September 2026 it referred 1,835 websites covering 7,677,211 URLs and issued 546 cease and desist notices. Across the whole of April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced — one, in October to December 2025.

I read those two columns together as a statement of strategy rather than a failure. The Commission has chosen friction over prosecution: starve the payment rails, block the registrars, delist the search results, count the effect on traffic. It is cheaper and faster than court.

Top Gambling Websites UK and the Numbers About Demand

The "top 10 gambling websites uk" framing assumes a settled league. The Commission's own reading of consumer behaviour suggests anything but. Analysis published on 5 November 2026, covering April 2025 to April 2026, estimates that across the whole population including non-gamblers 0.6% of respondents engaged with illegal gambling websites in the past four weeks and a further 0.4% in the past 12 months, while 94.4% showed no indication of using one. Among respondents who had gambled online in the past four weeks, the estimate rises to 2.5% engaging with illegal sites, plus 1.5% in the past 12 months. Its illegal gambling dashboard recorded 586 illegal websites accessible to GB consumers in September 2026, 4% more than September 2025, and 311 sites had disruption action taken against them in the second quarter of 2026-27, 38% more than the previous quarter.

Then there is the money. H2 Gambling Capital puts stakes with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97% to 92%. A study by Frontier Economics for the Betting and Gaming Council estimated £2.7 billion staked annually online on the black market, equal to 2.1% of the £128 billion staked with British regulated remote casino, betting and bingo operators, involving 1.5 million Brits. Yield Sec, working for the Campaign for Fairer Gambling, put the GB online market at £8.3 billion gross gaming revenue in 2025, split 91% regulated and 9% unregulated.

Three bodies, three methodologies, three answers — and a fourth that matters more. The Commission's own October 2024 methodology for estimating the unlicensed market explicitly notes that it does not capture activity hidden by VPNs. Every figure above is, in that sense, a floor.

What Self-Exclusion Actually Does

One point deserves its own heading, because it is the thing most often mis-sold. Registering with GamStop Online blocks a person from gambling with all online gambling companies licensed in Great Britain for a chosen period of six months, one year, five years, or five years with auto-renewal. Signing up takes a few minutes; the block can take up to 24 hours to become effective. Once registered, the registration cannot be cancelled or deactivated during the exclusion period, and the exclusion stays in place after the chosen period ends unless the person contacts GamStop to remove it. GamStop registrations cannot be removed early. Under the terms of use, auto-renewal may only be switched off during the last six months of a five-year minimum exclusion period. If the person does not deactivate after their chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded.

The numbers behind that register are large and moving. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of that year, with 58,675 registrations in the final six months — an average of 319 a day. The first half of 2026 saw a 16% year-on-year increase in registrations, and May 2026 set a monthly record with 12,236 sign-ups. As of July 2026 the scheme reported 614,738 consumers currently on the register, of whom more than one in two had opted for the maximum five-year exclusion; across all age groups only one in four had self-excluded for six months. Under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26% year-on-year increase.

Of the periods selected by registrants in 2025, 29% chose six months, 24% chose one year, 25% chose five years and 22% chose auto-renewal. The 2025 annual report recorded the gender split as 94.3% male and 5.7% female. It also states that the group can no longer report a total lifetime registration figure, because the seven-year data retention period running from the scheme's 2018 launch has begun to expire — an administrative fact that quietly says more about the scheme's age than any total would.

Land-based gambling runs on separate schemes, and the difference catches people out. All non-remote operators who hold premises licences in the arcade, betting, bingo and casino sectors must participate in a multi-operator self-exclusion scheme under social responsibility code 3.5.6, and the minimum period offered must be not less than six nor more than twelve months under ordinary code 3.5.2. SENSE covers licensed land-based casinos, with a six-month minimum extendable to twelve, and removal can only be requested in person at a casino by speaking to a manager during the six-month "Thinking" period that follows, after which a 24-hour cooling-off period applies; if neither renewed nor removed, the exclusion is automatically removed at the end of that period. The Commission's May 2026 freedom-of-information response put active self-excluded customers for SENSE at 12,445 between 1 April 2025 and 1 April 2026, with a further 8,695 enrolled under previous terms subject to auto-removal. Gamstop Betting Shops, formerly MOSES, is telephone-based on 0800 294 2060, excludes a customer from named areas' bookmakers for a fixed 12-month term that cannot be ended early, covers approximately 6,000 shops with over 60 operators, and had 9,075 active self-excluded customers over the same period.

Blocking software covers what the scheme cannot. GamStop signposts Gamban and BetBlocker, and the Commission's October 2026 list of banks offering a gambling blocking service names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Those blocks work by declining payments to merchants categorised under gambling merchant category codes, cover online casinos, betting websites, gaming apps and physical venues, apply at card level so must be activated on each card, and mostly impose a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again. They do not affect a credit score.

What British Sites Show You About Money Before You Deposit

The gap between the two rulebooks is easiest to see in how each treats a withdrawal. Start with the disclosed terms, because they are comparable in a way that marketing copy is not.

One number above is worth singling out. The Commission chose a cap of ten times wagering rather than an outright ban, and said in March 2025 that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Sixty. That is the number to keep in mind when an offshore offer's forty times starts to look reasonable.

Offshore Licences, Measured Against the British One

The comparison people actually want is the table read downwards, and it is not flattering to the offshore registers. A Curaçao B2C operator pays EUR 4,592 to apply and EUR 47,450 a year, of which EUR 24,490 goes to the National Treasury and EUR 22,960 to the authority as a supervisory fee. An Anjouan B2C licence costs EUR 17,828 to issue and the same to renew annually. A Kahnawà:ke Client Provider Authorization application rises to USD 40,000 on 1 January 2027, with an unchanged annual fee of USD 20,000.

Fees alone prove nothing — a big fee is not a safeguard — but they do establish what the regulator is funded to do, and the Curaçao reform is instructive on that point alone. Licensing activities ceased for the four former master licensors between 18 August 2024 and 31 January 2025. Operators holding a valid licence when the LOK took effect received a six-month provisional licence by operation of law, due to expire on 24 June 2025; the authority extended them a further six months to 24 December 2025, requiring full compliance by the end of that second period to be eligible for a full licence. Supplier licensing and registration become fully mandatory and enforceable from 24 December 2026. On 7 October 2026 the authority announced that its previous online gaming portal would not return to service and that it is working on an alternative way to verify CGA-licensed domains, because the previous digital licence seal may be affected by the transition.

Read that sequence again: a regulator telling the public that its own verification tool is unavailable, while an aggregator reading its public register reported 704 Curaçao licences held by 698 operators, of which 552 were active, as of 03:30 UTC on 6 November 2026. That read is a third-party tracker, not a publication of the authority, so treat it as an indication rather than a fact. Either way, "licensed in Curaçao" in late 2026 is a claim that requires more checking than it did two years ago, not less.

Anjouan manages the same trick differently, by pointing at independent legal opinions. The authority states that an opinion issued on 19 September 2024 and reconfirmed in February 2026 by a law firm regulated in England and Wales and Quebec, Canada, confirms the Anjouan Offshore Financial Authority is the lawful regulatory authority for gaming in Anjouan and that licences under the 2005 Act are legally valid. That is a licensee's own statement rather than a court ruling, so I hedge it, and note the counterweight: the same ABC News investigation reported that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, and that the AOFA was stripped of its status as a recognised regulator by Comorian banking laws passed in 2013 and 2015. Anjouan's own published certificate framework is the most useful part of it — certificates carry a unique licence number and a QR code linking to a public register, and certificates that cannot be verified through that register should not be relied upon.

A Word About the Table's Authority

Every British column in that table traces to an instrument, and the offshore column to a contract. That is the difference between a rule and a promise, and it is why I keep returning to the licence rather than the offer.

Take the bonus rules specifically. Social responsibility code 5.1.1 came into force on 19 January 2026 — moved from 19 December 2025 — and requires that licensees must not "apply wagering requirements, which requires a customer to play through bonus funds, over a maximum of 10 times", and must not "include more than one type of gambling product (betting, casino, bingo, and lottery) within an incentive". The Commission's own worked examples show how precisely that bites: "Bet £5 and get £10 free bet" is compliant because it does not mix product types between the initial activity and the prize, while "Bet £5 to get 20 free spins" is not; an offer whose prize is itself mixed, such as "Bet £5 and get a £5 free bet and 20 free spins", is also non-compliant. Where the customer freely chooses which product category to use bonus money on, the offer is fine.

Enforcement follows the same logic. One licensee was fined £170,000 in July 2025 for failures including a term stating that "the operator has the right at their own discretion to close accounts or forfeit winnings". In October 2026 the Commission announced that L & L Europe Limited, which runs seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals — specifically a term stating customers could request only one withdrawal at a time and could not request another until the original was authorised, found unfair under the Consumer Rights Act 2015, plus manual review of every fifth or tenth withdrawal that led to extra information being required before processing. The Commission's earlier stance on the same theme was blunt: where an operator has no regulatory concerns about a customer, there is no valid reason to delay the payout of a withdrawal.

Complaints, Adjudication and What They Cost

When a British site fails, there is a route, and it has a shape. Social responsibility code 6.1.1 requires licensees to have arrangements for customers to refer an unresolved dispute to an ADR entity free of charge once eight weeks have passed since the complaint was received, and the customer must have gone through the operator's own complaints procedure first. Licence holders should allow complaints to be raised for at least six months from the incident, acknowledge a complaint within 24 hours where they offer 24-hour gambling facilities, and complete the entire process including internal escalation within eight weeks.

The outcomes are worth knowing in advance, because optimism here is expensive. eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which "Deposits & Withdrawals" accounted for 150 valid disputes; the average time to resolve domestic disputes was 31 days, 17.8% of completed disputes were ruled in favour of the consumer against 82.2% for the operator, and 361 of 499 invalid disputes — 72.3% — had not been through the operator's internal complaints procedure first. Its biennial report covering 1 October 2023 to 30 September 2025 puts average domestic resolution at 27 days, with 12.4% of completed disputes ruled for the consumer. IBAS, which handles the bulk of gambling disputes alongside eCOGRA, upheld 65 consumer complaints by written decision in 2024-25 against 693 not upheld and 737 resolved by a consumer-satisfactory pre-ruling outcome.

Two details in that data deserve a flag. The first is the 72.3% figure: nearly three-quarters of disputes thrown out by eCOGRA failed on a procedural step the complainant could have completed. The second is the asymmetry — roughly four in five completed disputes go the operator's way. A free adjudication route is a real protection and not a lottery ticket, and a player who assumes otherwise will mistake a fair hearing for a favourable one. The Commission notes that IBAS and eCOGRA have historically handled the majority of gambling disputes. Offshore, the same machinery is thinner: Anjouan requires licensees to designate an approved ADR provider — EGIS ADR, Axion ADR, iGaming ADR and one approved firm are currently approved — and expects complaints resolved within 30 days before escalation, while Kahnawà:ke employs a full-time Dispute Resolution Officer and, notably, states that its own voluntary self-exclusion is permanent and irrevocable and that a player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity selected by the Commission.

Where the Money Sits While You Wait

A payout delay and an insolvency are different problems, and only one of them is survivable. Remote operators must keep customer funds in a separate client bank account, separate from business accounts, and must disclose which of the three protection ratings applies — "not protected", "medium protection" or "high protection" — in writing, with the customer acknowledging receipt before funds are used for gambling and on the first deposit and after any change to the terms. An operator rated "not protected" must remind the customer once every six months, stating the value of funds held.

The rating is the part to read. Separation is not insurance. Keeping customer funds in a separate client account does not mean customers will get their money back if the operator becomes insolvent, and gambling businesses are legally allowed to hold customers' money in overseas bank accounts. Money staked within an open bet is not customer funds at all, so it is not covered by any protection arrangement. And where an operator suspects or has knowledge of money laundering, it must submit a Suspicious Activity Report and obtain a Defence Against Money Laundering from the National Crime Agency before moving or returning customer funds — an obligation the Commission accepts may necessitate delay, while stating that it gives no right to confiscate deposits. That is the legitimate version of a held withdrawal, and it is distinguishable from the illegitimate version by whether the requirement could reasonably have been raised earlier.

Faster Withdrawals and Where They Stop Being Faster

Payment method is where the clock is actually visible, and where a few seconds of arithmetic saves a lot of irritation. The relevant facts are per-rail, not per-brand.

Bitcoin's protocol targets an average 10-minute interval between blocks, and within any 10-minute window the probability of a block being found is about 63%; 95% within 30 minutes and 99.7% within 60. Six confirmations is the informal default, though it is not special: it assumes an attacker with less than 10% of network hashrate and accepts residual double-spend risk below 0.1%. Litecoin targets 2.5-minute blocks, giving roughly 2.5 minutes to a first confirmation and about 15 minutes to six — but only about 55.43% of modelled six-confirmation spans actually complete within 15 minutes, which is a useful corrective to any site quoting "Litecoin: instant". On Ethereum, a standard transfer costs exactly 21,000 gas, gas prices are quoted in gwei, and the fee is paid whether the transaction succeeds or fails; unused gas is refunded, but gas consumed by a transaction that reverts is still charged.

E-wallet fees are larger than most players expect and are disclosed on the provider's own page rather than the casino's. Skrill charges 2.80% of the amount withdrawn, minimum EUR 3.50, for a transfer to a bank account, effective 12 January 2026, with a 4.49% foreign-exchange fee where conversion is needed and a EUR 5.00 monthly service fee if the account is unused for six months. Neteller charges 2.80% or a minimum USD 3.50 for a bank transfer on the same date, plus 3.49% for withdrawal to Skrill and 0–7.5% to Visa or Mastercard. MiFinity withdrawal fees run at 1.8% for cryptocurrency and €1 for VISA EEA. Jeton's UK schedule shows a local bank transfer withdrawal taking 0 to 30 minutes with no sender or receiver fee, and limits of £10 to £10,000.

And the rails themselves set hard ceilings that no casino can lift. Visa Direct's Fast Funds service is real-time, with funds potentially available within 30 minutes of approval. The Faster Payments scheme maximum is £1 million per transaction, raised from £250,000 on 10 February 2022 — although that is a scheme ceiling, not an entitlement, and individual banks set lower per-payment limits, so the payment scheme operator publishes bank-by-bank figures. Faster Payments limits apply per transaction rather than per day, so a larger sum can be split. CHAPS settles same-day with no scheme upper limit, subject to a daily cut-off. PayPal charges no fee to withdraw a personal UK balance to a bank account when no currency conversion is involved.

Frequently Asked Questions

Are gambling websites in the UK safer than offshore ones?

Yes, and the reason is procedural rather than moral. A British licence brings verified identity before gambling, a 10× wagering cap, no reverse withdrawals, free access to an approved adjudicator after eight weeks and compulsory GamStop membership. Offshore, none of those applies. The gap is not that British operators are nicer; it is that a rule exists, is checkable, and can cost the operator its licence.

What does an offshore licence actually guarantee?

Mostly that a fee was paid to a regulator with no jurisdiction over British players. A Curaçao B2C licence costs EUR 4,592 to apply and EUR 47,450 a year. Anjouan charges EUR 17,828 to issue and the same to renew. What that buys is often nothing enforceable in Britain: section 33 of the Gambling Act 2005 makes unlicensed provision an offence here, and no offshore regulator can compel a payout to a GB customer.

Why is the bonus wagering so much lower at British sites?

Because it is capped. Since 19 January 2026, social responsibility code 5.1.1 forbids wagering requirements above ten times, and bars mixing product types in one incentive. The Commission chose a cap over a ban and said it "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore sites are not bound by it, and published terms commonly run at 25× to 50×.

Can an offshore site get round a GamStop self-exclusion?

No, and this is worth stating plainly: an offshore site is never a way round a self-exclusion. GamStop holds for its full term — six months, one year, five years or five years with auto-renewal — cannot be cancelled during it, and remains in place after the term ends until the person contacts GamStop to remove it. The Commission's warning notice of 20 January 2025 noted unlicensed sites often target people who have self-excluded.

Do UK withdrawals actually arrive quickly?

Usually, with a stubborn tail. Commission data for June to September 2024 covering 44.2 million withdrawals records 96.3% cleared automatically, 3.5% within 24 hours and 0.1% taking up to 48 hours. Yet its 2024-25 annual report says withdrawal issues still cause most of the complaints it receives, and consumer research published in July 2026 found only 49% agreed withdrawals were quick and easy.

Where can someone get help with gambling?

The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day — 0808 2819 265 for callers in Wales — and is also reachable by live chat and, on mobile, WhatsApp. NHS England has opened 15 specialist gambling clinics since 2019, and its eight regional services receive almost 5,000 referrals a year. GamFam supports families; Citizens Advice Scotland runs a gambling support line on 0800 328 1131.

The British Licence Is the Whole Argument

The case for judging gambling websites in the UK by their licence rather than their offers is that only one of those two things creates an obligation someone can enforce, and it is not the offer. A licence number opens a register, a public register opens a history, and a history is what tells you whether a term is a promise or a clause. Offshore licensing itself is not a scandal — Curaçao is mid-reform, Kahnawà:ke has regulated since 1999. What does not survive scrutiny is the suggestion that they substitute for the British licence in the eyes of a British player.

The closing figure I keep coming back to is the cruellest and the most useful: the Commission found that across 160 illegal gambling websites, average engagement fell by 32% after disruption — while registrar blocks and suspensions produced a 91% fall, and Google removals only 30%. Making a site hard to find is not the same as making it hard to use, which is a fair summary of the whole comparison: a listing is not a safeguard. And if any of this has stopped being a matter of curiosity, the National Gambling Helpline is free on 0808 8020 133, day and night — 0808 2819 265 in Wales.

As of 12.11.2026.