Gambling Sites Not on GamStop and How the Offshore Market Compares with UK Rules

Gambling sites not on GamStop are casinos holding no Great Britain licence, so the national self-exclusion scheme has no hold over them. That is not a loophole: it is the scheme's boundary. Self-exclusion agreed with GamStop holds for its full term and stays in place afterwards until the person contacts GamStop to remove it.

GamStop is often typed "gamestop", and the slip is worth noting because it is also how a lot of people reach this subject at all: they look for somewhere the scheme does not reach, and the search engine answers with a market rather than a rule. The rule itself is short. Since 31 March 2020 every online operator serving Britain must be a member of the scheme as a condition of its Gambling Commission licence, under social responsibility code provision 3.5.5. Operators were told in January 2020, and when two of them missed the deadline the Commission suspended their licences on 3 April 2020 under section 118(2) of the Gambling Act 2005. Membership, in other words, is not a courtesy that offshore sites declined. It is a duty that sits on licence holders only.

The Gambling Commission puts the size of the leakage at 2.5 per cent of people who gambled online in the last four weeks, plus another 1.5 per cent over the past year. H2 Gambling Capital, a market-intelligence firm, puts the amount staked with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019. Read the two together and a picture forms: a smallish proportion of players, a large amount of money, and a regulator whose main tools are cease and desist notices and search-engine removals rather than prosecutions. Across April 2025 to March 2026 it commenced a total of one prosecution.

This page is about how British rules compare with offshore ones — what an offshore licence actually costs and covers, what a bonus term does to a withdrawal, and which five things give an operator away.

What the Licence Is Worth

The single benchmark that explains most of the difference comes from the Gambling Commission's own illegal-markets reporting. Since April 2024 the Commission issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and three payment provider referrals — and it referred 447,778 Bing and Google URLs for removal, securing 287,961 removals. Across 160 illegal websites with traffic data, average engagement fell 32 per cent after disruption.

Now read the effectiveness breakdown, because it is the honest part. Registrar blocks and website suspensions produced the largest average fall in engagement at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission says so itself: removing a site from search makes it harder to find without blocking access. Every enforcement total you see quoted for this market should be read with that footnote attached.

A British licence, by contrast, is refused, reviewed and revoked in public. The Commission's own summary of the law is blunt: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that includes an operator licensed elsewhere. The offence is section 33 of the Gambling Act 2005, and on summary conviction it carries up to 51 weeks' imprisonment, a fine at level 5 or both — six months in Scotland. It is explicitly immaterial whether the facilities are provided wholly or partly by remote communication, or whether they are provided inside or outside the UK.

Licences Compared, by What They Cost and Cover

Below, offshore regimes are set beside the British standard by cost, scope and verifiability — not by brand. Fee figures are as published by each regulator; the Curaçao annual total is the sum of its licence fee to the National Treasury and its supervisory fee to the Gaming Authority.

The Maltese application fee of EUR 5,000 sits beside a Curaçao application fee of EUR 4,592, and both are one-time and non-refundable. The annual totals diverge sharply after that: EUR 25,000 plus 5 per cent of gaming revenue in Malta against EUR 47,450 in Curaçao, where no revenue tax is charged. Anjouan, at EUR 17,828 issuance and the same again on renewal, is the cheapest full-cycle regime in the table, and that is the point of it.

Cost alone proves nothing, though. What matters is whether the licence can be checked, and this is where offshore operators are most often caught out. Curaçao's own certification policy says clicking a Certificate of Operation Seal must redirect to cert.cga.cw, and that if the seal differs in design, colour or format the website is not authorised. If the certificate behind the seal shows a different domain from the one being visited, the site is displaying another operator's certificate. Curaçao also ended the legacy "orange" sub-licence certificates on 15 October 2025, so a historic /JAZ number must not be treated as proof of a current licence. Anjouan takes the same line: certificates carry a unique number and a QR code, and one that cannot be verified through the public register should not be relied upon.

Hedges belong here. The claim that offshore sites are unconnected to GamStop is stated by trade and press sources rather than by a primary regulator page, though it is consistent with the scheme's own terms of use; it is reported to be so. The same caution applies to a third-party read of the Curaçao register, which counted 704 licences held by 698 operators, 552 of them active, on 6 November 2026 — an aggregator's figure, not the Authority's.

Withdrawal Terms Are Where the Licence Shows

The second benchmark is a payout figure, and the Commission's own numbers are the place to start. Its data for June to September 2024 records 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed it was quick and easy to withdraw winnings, 33 per cent were neutral and 18 per cent disagreed.

That is the standard British operators are held to, and it is a standard written into the rulebook rather than into manners. Reverse withdrawals — the button that let a player cancel a payout and put the money back on the table — were banned by RTS requirement 14B, which states that consumers must not be given the option to cancel a withdrawal request, in force since 31 October 2021. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for extra information the licensee could reasonably have requested earlier. No maximum withdrawal limit may be imposed on a deposit balance; £50 a day, £500 a week is the Commission's own example of a prohibited term.

Compare that with what offshore terms build in. Ignition Casino states that bonus amounts carry a 25x playthrough requirement before derived winnings may be withdrawn, and its published contribution chart gives slots and specialty games 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, Hot Drop Jackpots and live dealer games 0 per cent. A player who takes a bonus and plays roulette at 5 per cent has to wager twenty times as much as the headline figure suggests. Ignition also caps the maximum bet at 20 per cent of the deposited amount, and says breaching it may mean account closure and forfeiture of the bonus and any winnings generated while wagering it.

Maximum cashout clauses are the quiet killer. BlueChip Casino reserves the right to limit withdrawals from winnings generated with bonus funds, including free spins and cashback, to 300 per cent of the credited bonus amount, with the excess voided. A £100 bonus therefore cannot produce more than £300 of withdrawable winnings, however the session went. Trade coverage describes offshore welcome offers as typically carrying 25x to 40x wagering, and a 2026 comparison table puts offshore welcome multipliers at 35x to 50x with no-deposit bonuses at 40x to 60x and a €50 to €100 cashout cap. Those last two figures come from a casino-guide table rather than a regulator, so treat them as indicative. Reportedly the pattern is real even where the exact range is not.

The British rule since 19 January 2026 is a cap of ten times, delivered through social responsibility code 5.1.1, which says licensees must not apply wagering requirements over a maximum of ten times. The Commission chose a cap over a ban precisely because it judged operators would otherwise build terms preventing cash-out; its stated aim was to take out extreme levels, since some licensees were applying up to 60 times. The same code bans mixed-product promotions, so "bet £5 to get 20 free spins" is non-compliant while "bet £5 and get £10 free bet" is fine. It also forbids altering the value of an incentive if the qualifying activity is reached faster than expected.

The gap between ten times and twenty-five times is not a difference of opinion about arithmetic. It is the difference between a licence that caps the term and a licence that leaves it to the operator's terms and conditions.

The Exclusion Term, Explained Plainly

Online gambling sites not on GamStop matter to one question above all, and it is usually the wrong question: whether an offshore account is a way round a self-exclusion. It is not. A GamStop exclusion holds for its full term, and it stays in place afterwards until the person contacts GamStop to remove it. Registrations cannot be removed early, and the Group's 2025 annual report devotes a section to refusing such requests. Nothing an offshore operator does changes either fact; the exclusion is a record held about a person, not a switch the person's chosen casino can bypass.

What actually happens at an operator is a check, and it runs in a fixed order. Since April 2020 the Commission has required all operators to check their entire customer base against the register at least every 24 hours, which also prevents registered people receiving direct marketing. A new registration blocks the person from gambling with every online company licensed in Great Britain for six months, one year, five years, or five years with auto-renewal, and it can take up to 24 hours for the block to take effect.

The numbers on that register are the reason the topic keeps returning. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of the year. Registrations rose 16 per cent year on year in the first half of 2026, with May 2026 setting a monthly record of 12,236 sign-ups, and by July 2026 the register held 614,738 people. More than one in two had taken the maximum five-year term; only one in four across all age groups had chosen six months. Under-25s accounted for nearly one in three exclusions in the first half of 2026, a 26 per cent rise.

The warning signs sit in the terms rather than in the marketing. Auto-renewal can only be switched off during the last six months of a five-year period, and it then continues for up to four further five-year terms. If a person does not deactivate after the chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. That seven-year tail is also why the Group says it can no longer report a total lifetime registration figure: the retention period from the 2018 launch has begun to expire.

For anyone who wants a barrier that does not depend on a licence, the scheme signposts Gamban and BetBlocker, blocking software for phones, tablets and computers. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, needs no registration and is free worldwide. Gamban blocks licensed and unlicensed sites and is designed to be as difficult to remove as possible; its free UK licence scheme, TalkBanStop, ended on 31 March 2026, after which it is free for residents of Wales but costs £4.99 a month or £29.99 a year in England and Scotland after a seven-day trial.

Five Signs of a Site Worth Trusting

The licence can be verified in one click, on this domain

Every credible offshore regime publishes a verification route, and each one fails in a specific way. Curaçao requires its Certificate of Operation Seal to redirect to cert.cga.cw; a seal that differs in design, colour or format means the site is not authorised, and a certificate naming a different domain means the site is showing someone else's paperwork. Anjouan publishes licence numbers and QR codes against a public register and states that an unverifiable certificate should not be relied upon. Kahnawà:ke's Logo Certificate Program lets a player click the Commission's logo for a Certificate of Good Standing confirming whether the site holds a valid permit. Quick check: click the seal and read the domain on the certificate behind it.

The terms state a wagering figure and a maximum cashout

A site that wants to be understood will say what its bonus actually costs. Ignition expresses the playthrough as a multiple of the bonus, or of the bonus plus deposit, and publishes a contribution chart that discounts roulette and baccarat to 5 per cent and live dealer games to 0 per cent. BlueChip publishes a 300 per cent cap on withdrawable winnings from bonus funds. Quick check: search the terms page for the words wagering, playthrough and maximum cashout, and if a figure is missing, assume the worst of the range.

Deposits are the customer's money until staked

This is the sharpest line between British and offshore practice. In Britain a customer's un-staked deposits remain their; licensees may not have terms allowing confiscation of money deposited but not staked, and may not confiscate or deduct any part of a deposit balance because the customer failed identity or age verification. Account inactivity cannot be used to seize a balance either. The Commission's fair-terms guidance is equally clear that clauses giving the operator sole discretion — "may" or "reserve the right" — to void or withhold winnings are unfair, and a £170,000 penalty in July 2025 turned in part on a term letting the operator forfeit winnings at its own discretion. Quick check: look for the phrases "at our discretion" and "reserve the right" in the withdrawal section and see what they are attached to.

There is a named dispute route, and it is free

Complaints are the tell. Under British rules, licence condition 6.1.1 requires arrangements for referring an unresolved dispute to an alternative dispute resolution entity free of charge if it is not settled within eight weeks, and consumers must go through the operator's own procedure first. The approved list includes ADR Group, Pegasus ADR Service, Blexr, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee, and IBAS covers the remote, adult gaming centre, betting, bingo, casino and lotteries sectors free of charge. Offshore, Anjouan requires licensees to designate an approved ADR provider and publish its details, with complaints expected to be resolved within 30 days before escalation; the approved names are EGIS ADR, Axion ADR, iGaming ADR and another approved provider. Quick check: search the site's terms for a named ADR provider with contact details, not a support email.

Customer funds are in a separate account, and the site says which rating applies

British rules require remote operators to keep customer funds in a separate client bank account, separate from business accounts, and to state in writing whether the funds are protected on insolvency, at which of the three ratings — not protected, medium protection, high protection — and by what method. An operator rated not protected must remind the customer every six months that the money is not protected, stating the value held. The catch is that a separate client account does not guarantee a return if the operator fails, and businesses are legally allowed to hold the money in overseas accounts. Offshore, Anjouan's published standards also require segregation of player funds from operational funds and certified random number generators. Quick check: look for a client-account or protection statement in the terms, and hunt for the insolvency rating in writing rather than on a help page.

How to Judge an Offshore Operator Before Signing Up

1. Read the licence off the site's own footer, then verify it at the source. Note the regulator and licence number, then go to the regulator's register or seal and confirm the domain matches the one you are on. Curaçao requires the seal to redirect to cert.cga.cw, and a certificate showing a different domain means the site is displaying another operator's licence.
2. Check whether the licence has actually survived its reform. Curaçao's legacy orange sub-licence certificates ended on 15 October 2025, and the four former master licensors stopped issuing on dates between 18 August 2024 and 31 January 2025. A historic /JAZ number is reported not to be independent proof of a current licence. The reason is simple: a licence that lapsed two years ago is worse than no licence, because it looks like cover.
3. Look up the regulator's unauthorised list before you look at the games. The Malta Gaming Authority publishes a list of Unauthorised URLs and declares that any reference to the MGA or a Maltese licence on those domains is false and misleading, with entries carrying notice dates as recent as 30 October 2026. Checking the negative list takes a minute and settles most arguments.
4. Get the wagering figure and the maximum cashout in writing, and multiply them out. A 25x playthrough on slots, on a bonus with a 300 per cent cashout cap, is a very different offer from a ten-times cap with no cashout ceiling. Do the arithmetic on a £100 bonus before depositing, not after a win.
5. Confirm the withdrawal route and the complaint route in one pass. Look for the named ADR provider and the statement of customer-funds protection; if the terms name neither, the operator has told you what an unresolved dispute would look like. The Commission received 1,791 complaints coded "Withdrawals and/or financial transactions" in the year to December 2025, down from 2,416 in the year to December 2022, and over a quarter of the complaints reaching its contact centre concern identity verification raised at the point of withdrawal.
6. Decide where the money is, and keep the record. British law treats un-staked deposits as the customer's and bars confiscation for failed verification or inactivity; offshore terms vary, and some reserve the right to void winnings at their discretion. Keep screenshots of the terms, the licence page and the confirmation emails. If a dispute ever arises, that folder is the case.

Where the Help Is, and What Is Not Covered

Offshore sites that hold no Gambling Commission licence are not licensed in Great Britain, and UK protections do not apply to them. That is not a moral judgement; it is a statement about which rulebook is in the room. The Commission cannot resolve individual complaints and cannot recover money, because it is a regulator rather than an ombudsman, and its remit covers only sites that trade or advertise to customers in Great Britain under a Commission licence. Section 33 makes it illegal to provide gambling facilities without one, and section 330 makes knowingly advertising unlawful gambling an offence.

The scale of what is happening around this market is worth keeping in view. The Commission identified 586 illegal gambling websites accessible to consumers in Great Britain in September 2026, 4 per cent more than a year earlier, and took disruption action against 311 in the second quarter of 2026 to 2027, 38 per cent more than the previous quarter, with 77 per cent of disrupted sites showing a reduced estimated traffic. Time spent by British consumers on illegal gambling sites was estimated at 306 million minutes in January 2025, falling to 116 million minutes in June 2025 and 152 million in July 2025. The Illegal Gambling Taskforce's terms of reference were published by DCMS on 13 May 2026, with three priorities: reducing payments to and from illegal operators, tackling online advertising of illegal gambling, and improving cross-agency enforcement.

Meanwhile the regulated market keeps growing. Total Great Britain gross gambling yield was £17.5 billion in the year to March 2026, up 4.4 per cent, and the Remote Casino, Betting and Bingo sector accounted for £8.3 billion of it, up 6.9 per cent. Remote casino gross gambling yield was £5.0 billion in the year to March 2025, of which £4.2 billion came from slot games. That is the market a British licence is priced against: a 1.1 per cent statutory levy on previous-year gross gambling yield for online operators, ringfenced solely for research, prevention and treatment of gambling-related harm, which raised just under £120 million in its first year.

If gambling is causing harm, the National Gambling Helpline is operated by GamCare and is free on 0808 8020 133, 24 hours a day, every day of the year, with the same number reaching live chat and WhatsApp; callers in Wales are given 0808 2819 265. The NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB takes self-referrals on 020 7381 7722, and NHS England had opened 15 specialist gambling clinics across England since 2019, with eight regional services receiving almost 5,000 referrals a year. Citizens Advice offers free, confidential advice including help with debt, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, weekdays from 10am to 3pm. Gamblers Anonymous England, Wales and Ulster can be reached on 0330 094 0322, and GamFam, a registered charity set up by people affected by the gambling of family and friends, runs peer support for families through its GRA5P programme.

Gambling Sites Not on GamStop and How They Compare

Gambling sites not on GamStop are simply sites the scheme has no authority over, and the comparison that matters is not licensed versus unlicensed but verifiable versus unverifiable: a licence you can click through to a public register, terms that state their wagering figure and their cashout cap, a named free dispute route, and a written statement about where the money sits. British rules cap wagering at ten times and treat un-staked deposits as the customer's; offshore terms do neither unless they choose to, and the good ones say so in plain words. Self-exclusion is the fixed point in all of this — it holds for its full term and stays in place until the person contacts GamStop to remove it.

The register that keeps those exclusions held 614,738 people as of July 2026, and only one in four of those who joined in 2025 chose six months.