Casino UK Real Money And The British Licence

A casino UK real money player is using a site licensed by the Gambling Commission, which is required to verify identity before play, cap bonus wagering at ten times, keep customer funds separately, and pay withdrawals without invented friction. Offshore sites hold licences from other regulators, are not licensed in Great Britain, and are not covered by any of those rules.

The Two Markets, And Why Only One Of Them Answers To Anyone Here

Every few months I get asked the same question in a different costume: what makes a real-money casino British rather than merely available in Britain? The answer is duller and more useful than the marketing. A site is British, in any sense worth caring about, if it holds an operating licence from the Gambling Commission. Everything else — the Union flag in the corner, the pound signs, the nice English on the live chat — is decoration.

The regulated market is large and getting larger. Total Great Britain Gross Gambling Yield was £17.5 billion in the year to March 2026, up 4.4 per cent on the previous year. Remote casino, betting and bingo accounted for £8.3 billion of that, up 6.9 per cent. In the first quarter of 2026 alone, online GGY was £1.55 billion, with 26.8 billion bets and spins and 13.4 million average monthly active accounts. Online slots took £773 million of that quarter's money across 25.1 billion spins. Those aren't figures about glamour. They are figures about how much is at stake in getting the rules right.

Then there is the other market, the one that writes "gamestop" in its own promotional copy and pings into British search results. Gambling Commission analysis published on 5 November 2026 estimates that among adults who had gambled online in the previous four weeks, 2.5 per cent had engaged with illegal gambling websites, and a further 1.5 per cent within the past year. Among the whole adult population the figure is 0.6 per cent. The Commission's dashboard counted 586 illegal gambling websites accessible to British consumers in September 2026 — four per cent more than a year earlier.

So the honest framing is this. Britain runs a strict, well-funded, occasionally clumsy licensing regime that covers almost all of the market, and a stubborn minority of players drift to sites outside it. The rest of this page is about what each side actually promises, and what happens when it has to deliver.

One fact about the name itself, since it causes endless confusion: the national self-exclusion scheme is GamStop, and it is very often typed "gamestop".

Early and plain: gambling websites that hold no Gambling Commission licence are not licensed in Great Britain, and British protections do not apply to them. If gambling is causing harm, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, operated by GamCare. In Wales the number given is 0808 2819 265. Help is also available from GamFam, Gamblers Anonymous, Gam-Anon, Citizens Advice and NHS gambling services.

What The Commission's Own Data Says About Getting Paid

The single most checkable number in this whole business comes from the regulator itself. Gambling Commission data covering June to September 2024, cited in a speech delivered on 6 November 2025, recorded 44.2 million withdrawals by customers of large online operators. Of those, 96.3 per cent cleared automatically. A further 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours.

Read that again with the arithmetic done. The overwhelming majority of withdrawals at licensed operators are not a process at all. They are an event. The friction people complain about exists, but it lives at the edges — in the small percentage of cases where something has triggered a check, and in the whole separate universe of sites that answer to nobody the British player can call.

The complaints tell the truth about those edges. Withdrawal problems have long been the number one subject raised with the Commission's Contact Centre, which handles over 6,000 calls a year, and the Commission said in July 2024 that it continued to receive around 2,000 complaints annually about withdrawal delays. Its Annual Report for 2024–25 repeated that withdrawal issues were still the cause of most complaints received. Complaints coded "Withdrawals and/or financial transactions" did fall, from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Progress, of a sort, measured in grievances.

Here is what is really going on. The licensed sector has, over roughly a decade, been dragged by the regulator and the Competition and Markets Authority towards treating a withdrawal as the customer's money returning to the customer, rather than as a last chance to change their mind. That transition is not finished, but the direction is unmistakable, and the evidence for it sits in the rules rather than in the advertising.

How Licensed And Offshore Casino Terms Differ

The table below compares the two regimes by term, not by brand. Every figure in it comes from the rulebooks themselves. If a site's terms don't match the left column, it isn't playing by British rules, whatever it says about itself.

Two things in that table deserve a sentence each.

The first is the bonus cap. From 19 January 2026, LCCP Social Responsibility Code 5.1.1 states that licensees must not apply wagering requirements over a maximum of ten times. The Commission chose a cap rather than an outright ban because it judged that licensees would otherwise introduce terms preventing customers cashing out bonuses at all, and it said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements." Offshore operators are not bound by it. The published terms of one offshore casino put its playthrough requirement at 25×. Another caps withdrawable winnings generated with bonus funds at 300 per cent of the bonus, voiding the excess. Neither of those clauses would survive five minutes in front of the British regulator.

The second is the maximum withdrawal limit. Under British fair-terms guidance, an operator may not impose any maximum limit on the amount a consumer may withdraw from their deposit balance. The Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". That is a rule you will only ever notice on the day it saves you.

Casino Online UK Real Money And Common Misconceptions

Ask what actually goes wrong at a real-money online casino and most people will say "the games are rigged" or "they won't pay". The second is closer, but the mechanism is almost always the same, and it is not stinginess. It is identity.

British rules require the operator to obtain and verify information establishing a customer's identity — name, address and date of birth among it — before that customer is permitted to gamble. That is Licence Condition 17, introduced on 7 May 2019. It is a hard front door, not a checkpoint somewhere down the corridor.

The first time, done properly, the process is invisible. Companies can often verify identity by matching the account against databases such as credit reference agencies and the electoral roll, in which case no documents are needed at all, and the Commission notes that if a business can verify electronically the process may be instant. That is why the ordinary experience of joining a licensed site is a few fields and then play. The Commission itself declines to give a timescale for ID checks because the length varies, which is an honest answer and also an annoying one.

Later, the same process can reappear as an obstacle. Under the money laundering regulations, a remote casino must identify and verify a customer when they deposit funds, or withdraw funds or winnings, amounting to €2,000 or more — and the threshold applies to transactions that "appear to be linked", including activity within a single logged-on period. Anti-money-laundering obligations can lawfully require documents at the point of withdrawal even where general fair-terms rules frown on it. Licence Condition 17.1.1 says a withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier, but that does not override a separate legal duty.

The warning signs are specific and worth memorising:

• Documents demanded only at the withdrawal stage at an operator that could plainly have asked earlier. That is the behaviour the regulator has been complaining about for years.
• A fuzzy match. The Commission has expressed concern about operators onboarding customers on partial or equivocal verification, using middle names or initials instead of full names. A mismatch with records held elsewhere can undermine a self-exclusion.
• No selfie policy published. A business may ask for a selfie where it suspects identity theft; being unable to say when it would ask is a bad sign.
• A refusal to say what it needs before you deposit. Licensees are supposed to tell customers, before permitting a deposit, what types of identity documents or information may be needed and in what circumstances.
• Confiscation talk. Operators cannot confiscate funds on the basis that ID has not been provided. The CMA's view is that consumers are legally entitled to deposited money, winnings from money deposited and gambled, and bonus winnings where conditions are met.

Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and it is one of the most common dispute types going to ADR providers. That is a lot of enmity generated by paperwork.

And one thing worth stating flatly, because it is where the offshore pitch gets darkest: self-exclusion through GamStop holds for its full term, and it then stays in place until the person contacts GamStop to remove it. Registration cannot be cancelled or deactivated during the exclusion period. It is not a pause button, and an offshore site is not a way round it. The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators cropping up on unlicensed websites, noting that such sites often target customers who have self-excluded via GamStop.

Fast Withdrawal Casino UK Real Money And Signs Of Reliability

Withdrawal speed is where marketing and reality diverge widest, so it makes the best test case. The Commission's own figures put 96.3 per cent of withdrawals at large licensed operators through automatically. That is the benchmark. A site that cannot approach it is either badly run, deliberately obstructive, or outside the rules. Here are five signs to look for, each with a check anyone can perform in a couple of minutes.

The Terms State A Withdrawal Deadline Or None Is Needed

A serious operator can tell you how withdrawals work in plain words, because under the licence it has to.

Check: open the terms and search for withdrawal limits, processing times and fees. Reject any term setting a maximum you may withdraw from your deposit balance — the Commission's example of a prohibited clause is "You may withdraw up to £50 per day and up to £500 per week". A cost-reflective processing fee and reasonable limits on the size or number of separate withdrawals are permitted, provided they are clear before you deposit.

Identity Checks Are Done Before You Gamble, Not When You Win

This is the single clearest dividing line between a licensed site and an offshore one, and it costs the operator real money to get right.

Check: register, and see whether you are asked to verify identity before you can stake. If a site lets you deposit freely and only asks for a passport on the day you request a withdrawal, it has told you what it thinks a customer is for.

There Is A Named, Free Dispute Route You Did Not Have To Negotiate

Redress is the part nobody checks until they need it, which is exactly why operators with no real answer rely on you not checking.

Check: find the complaint procedure and confirm the ADR provider. Licensees must let customers refer an unresolved dispute to an approved ADR entity free of charge, and a consumer must have gone through the operator's own process first. Approved providers include IBAS, eCOGRA, CEDR, ADR Group, ProMediate, Pegasus ADR Service, Blexr and Tattersalls Committee. IBAS and eCOGRA have historically handled the majority of gambling disputes.

Money Is Segregated And The Protection Rating Is Disclosed

A licence condition requires customer funds to be kept in a separate client bank account, separate from the operator's business accounts, and requires the operator to declare a protection rating — "not protected", "medium protection" or "high protection" — in its terms. An operator rated "not protected" must remind the customer every six months that the funds are not protected in the event of insolvency, stating the value held. Note the honest limit: keeping funds in a separate account does not guarantee you get them back if the business fails, and operators are legally allowed to hold customer money in overseas accounts.

Check: read the customer-funds section of the terms and find a rating. If there is no rating, the site is not complying with a condition that has applied for years.

The Bonus Terms Are Short Enough To Read, And Stack Up Against The Cap

Bonus conditions are where a real-money casino most often shows its hand, because they are quoted at you constantly and rarely read.

Check: find the wagering requirement and see whether it exceeds ten times. From 19 January 2026 it cannot, at a licensed operator. Confirm the offer uses one product type — mixing betting, casino, bingo and lottery within a single incentive has been banned since the same date, including where terms are linked and shared. Confirm you can withdraw your deposit balance at any time, including while a bonus is pending or active. And check the significant conditions are no more than one click away, which SR Code 5.1.9 requires for online marketing.

What To Do Before You Put Money Into Any Casino

None of this requires expertise. It requires about twenty minutes and a willingness to be dull.

1. Look the operator up on the Commission's public register, and match the domain. The Commission advises consumers to check that the business holds a British licence and to click through to the register to see whether the site's activities and domain names match. A brand name on the homepage is not a licence; a matching domain on the register is. Why: section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and holding a licence in another jurisdiction does not change that.
2. Confirm you will be identity-checked before you stake. Read the verification section and, if it is vague, ask support directly and keep the answer. Why: a site that verifies before play has nothing to gain from stalling afterwards; a site that verifies only at withdrawal has everything to gain.
3. Find the maximum withdrawal term, or confirm there isn't one. Search the terms for daily, weekly or monthly caps on withdrawals from your deposit balance and for caps on bonus-derived winnings. Why: a maximum withdrawal clause is the most common way a real-money win becomes a smaller one, and it is prohibited in the licensed market.
4. Read the bonus as a contract, not an offer. Write down the wagering multiple, the maximum bet while wagering, the game-weighting table and the expiry window. Why: at offshore operators a bet above the maximum can void the bonus and the winnings generated during wagering, and game weighting means slots and roulette do not count equally towards clearing it.
5. Set a financial limit at, or before, your first deposit. From 31 October 2025, all licensed gambling businesses must prompt customers to set a financial limit before the first deposit and make it easy to review and alter, with a reminder every six months. Setting a limit must be presented as the default option. Why: a limit set in advance is a decision made by someone with a clear head, which is not always the person at the screen an hour later.
6. Know your dispute route and the clock on it. Licence holders should allow customers to raise complaints for at least six months from the date of the incident, acknowledge within 24 hours where they offer 24-hour gambling, and complete the whole process within eight weeks of first receipt. Why: ADR providers generally may require submission within a period of not less than 12 months from the operator's notice that it could not resolve the complaint, and eCOGRA can refuse a dispute where fewer than two weeks have passed.

Why Offshore Licences Do Not Protect Players

There is a version of this page that would tell you offshore means dodgy and licensed means safe, full stop. That is not quite true, and it is worth being precise, because precision is the only thing that helps when a real dispute arrives.

Take Curaçao, the most cited offshore licence on sites that accept British players. It has genuinely reformed. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority, replacing the old master-licence and sub-licence model. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and the CGA says operators should no longer rely on the former orange certificate as proof of a current licence. Provisional licences issued by operation of law were extended to 24 December 2025. The annual B2C fee is EUR 47,450 — a EUR 24,490 licence fee plus a EUR 22,960 supervisory fee — against a UK remote casino licence that is charged differently again, and the comparison of fees tells you only about the fee.

The reform also produced confusion that a careful player can exploit. The CGA announced on 7 October 2026 that its previous online gaming portal would not return to service and that it was working on an alternative mechanism for verifying CGA-licensed domains, because the previous digital licence seal may be affected by the transition. It issues two different seals: a Certificate of Operation Seal, only for an approved B2C player-facing domain, and a License Certificate Seal, available to B2B and B2C entities and not domain-specific. Clicking a Certificate of Operation Seal must redirect to cert.cga.cw; if the seal differs in design, colour or format the website is not authorised. If the certificate behind the seal names a different domain from the one you are on, you are looking at another operator's paperwork.

Anjouan is a blunter case. A published fee schedule of EUR 17,828 for B2C issuance and the same for annual renewal, plus EUR 500 per additional domain, tells you the cost of entry. An ABC News investigation on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; a former attorney-general of the Comoros called Anjouan Licensing Services "an illegal entity". The regulator's own statement on 10 June 2026 was, to its credit, clear: "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world", and no licensing authority can exempt an operator from local law where local authorisation is required. Its verification framework says certificates carry a unique licence number and a QR code linking to the public register, and that unverifiable certificates should not be relied upon.

Kahnawà:ke has regulated interactive gaming since 1999 and runs a Logo Certificate Program, effective 15 January 2010, that lets a player click the Commission's logo to generate a Certificate of Good Standing. Its rules are not soft: a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a third-party charity selected by the Commission. But its licence structure is a single Interactive Gaming Licence held by one entity, with Client Provider Authorizations beneath it, and a CPA can be suspended — Polar Ventures SDRL's was suspended effective 29 September 2026.

Malta, which is the most substantial of the offshore-style regimes in European terms, charges a one-time non-refundable application fee of EUR 5,000 and a fixed annual licence fee of EUR 25,000, with 5 per cent gaming tax on revenue and minimum share capital of EUR 100,000 for Type 1 and Type 2 B2C licences. It publishes a list of Unauthorised URLs and declares it has no connection with those domains — a useful reminder that a claim of Maltese licensing is not itself evidence of it.

My conclusion, for what it is worth, is that the offshore question is not "is this licence real?" Many are. It is "what does this licence oblige the operator to do for me, and who enforces it?" None of them is connected to GamStop. None of them gives you a free, named ADR route enforceable in Britain. None of them caps bonus wagering at ten times. And the Gambling Commission is not an ombudsman: it cannot resolve individual complaints or get your money back, and it refers disputes to a third party.

How To Read Casino Bonuses Properly

The phrase "no deposit bonus" carries an enormous amount of search volume and almost no useful information, so here is the part that matters. A no-deposit offer is a bonus with a wagering requirement attached to money you did not stake, which makes the arithmetic less generous than it looks, not more.

At a licensed operator the ceiling is now explicit. From 19 January 2026, wagering requirements on bonus funds cannot exceed ten times. At offshore sites the published figures run higher. One operator describes casino bonuses subject to a 25× playthrough requirement, expressed either as a multiple of the bonus or of bonus plus deposit. Another states plainly that "the deposit amount itself is not included in the wagering calculation", which is at least honest about being worse than it sounds. Offshore welcome-bonus multipliers are commonly reported at 35× to 50×, and no-deposit bonuses at 40× to 60× with a cashout cap somewhere between €50 and €100.

Then come the clauses that quietly decide the outcome. Maximum cashout limits: one offshore casino reserves the right to limit withdrawable winnings generated with bonus funds to 300 per cent of the credited bonus, voiding the excess. Maximum bet while wagering: another caps the maximum bet during wagering at €5 for regular players and €10 for VIPs and rejects anything above. Game weighting: the same operator's chart gives slots and specialty games 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, jackpots and live dealer games 0 per cent unless stated otherwise. A player clearing a bonus on roulette is running a twenty-times-longer race than they think.

And the abuse clauses, which are where a no-deposit bonus can turn from a small gift into a closed account. One operator's terms count low-margin, equal or zero-risk bets, switching from a low-weighted game to a high-weighted one after a large win, and delaying free spins until after wagering is met as bonus abuse, and state that breaching the maximum bet rule "may result in account closure, forfeit of the Bonus, and any winnings generated during the wagering of the Bonus". In the licensed market, terms setting out promotional play restrictions must specify all prohibited types or patterns of play and must not reserve sole discretion for the operator to decide when play breaches them — and terms on fraud, collusion, multiple accounts and software manipulation must sit in separate terms from the promotional ones.

The Commission has fined operators over exactly this. A £170,000 penalty in July 2025 concerned, among other failures, a term stating the operator had the right at its own discretion to close accounts or forfeit winnings. Terms giving an operator sole discretion to void or withhold winnings are on the regulator's list of unfair terms. That is the practical difference between a bad bonus term in Britain and the identical term offshore: here, someone has written it down as a problem and sent a bill.

I wrote near the top that the help line runs 24 hours a day. It is free on 0808 8020 133, and it is worth repeating at the end of a page about real money, because the point of all this regulation is not the paperwork.

What Determines Casino Withdrawal Speed

Payment speed is where the two regimes diverge in a way a player can feel within an hour.

At a licensed operator, the regulatory scaffolding is broadly: no reverse withdrawals, since RTS 14B came into force on 31 October 2021 and states that consumers must not be given the option to cancel a withdrawal request; no maximum withdrawal limit on the deposit balance; no delay purely for customer-interaction purposes; and a licence condition requiring an explanation if a withdrawal is delayed or refused, subject to the statutory prohibition on tipping off in money-laundering cases. The Commission has been explicit that it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, and that where it has no regulatory concerns about a customer there is no valid reason to delay a payout.

The last piece of enforcement on this is instructive. On 21 October 2026 the Commission announced that an operator running seven websites would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals. The withdrawal-specific failures included a term stating customers could request only one withdrawal at a time and could not request another until the original was authorised — found unfair under the Consumer Rights Act 2015 — and manual review of every fifth or tenth withdrawal for some customers, requiring extra information before processing. Note the shape of it: not a refusal, just a queue. That is what a delay looks like when it is designed rather than accidental.

Beyond the operator, the payment rail does the rest. Visa Direct's Fast Funds service processes transactions in real time with funds potentially available within 30 minutes of approval. Faster Payments has a scheme ceiling of £1 million per transaction, raised from £250,000 on 10 February 2022, though individual banks set lower limits — over 90 per cent of transactions complete in under two seconds, and the limit applies per payment rather than per day. CHAPS settles high-value payments same-day against a cut-off. E-wallets charge their own way: one charges 2.80 per cent of the amount withdrawn with a minimum of EUR 3.50 for transfers to a bank account from 12 January 2026, and applies a 4.49 per cent foreign-exchange fee where conversion is needed.

Crypto is a different animal entirely, and mostly a worse one for anyone in a hurry. A Bitcoin block takes about ten minutes on average, but that is an average: within any ten-minute window the probability of a block being found is about 63 per cent, rising to 95 per cent within 30 minutes. Six confirmations — the classic default — is not a special number; it assumes an attacker with under 10 per cent of network hashrate and accepts a residual double-spend risk below 0.1 per cent. Litecoin targets 2.5-minute blocks, but only about 55.43 per cent of modelled six-confirmation spans complete within 15 minutes. A USDT transfer on TRON consumes about 65,000 Energy to an existing wallet and about 130,000 to a new one, burning roughly 13 or 26 TRX without staked Energy, and on TRON a heavily-used contract can have its effective Energy cost multiplied by up to 4.4 times the base cost.

There is also a rule that catches out more players than any other. UK licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider within the Payment Services Regulations 2017. The credit card ban, effective 14 April 2020 under licence condition 6.1.2, covers all remote gambling licensed by the Commission, and operators must also ensure that money paid in from an e-wallet was not loaded from a credit card. It does not extend to non-remote lottery operating licences, so a scratchcard from a shop remains a card purchase.

Questions I Get Asked About Real-Money Casinos

Is a casino that accepts British players automatically licensed here?

No, and that gap is the whole story. A site can take pounds, write in English and sponsor a football club without holding a Gambling Commission licence. The Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere. Check the public register and match the domain before anything else, because a brand name proves nothing.

Why do I get asked for documents when I try to withdraw?

Usually because anti-money-laundering rules require verification when a customer deposits or withdraws €2,000 or more, including transactions that appear to be linked within a single logged-on period. That duty can lawfully bite at withdrawal. But a site that could reasonably have asked earlier may be breaching licence condition 17.1.1, which prohibits making a withdrawal request trigger extra information the operator could have sought sooner.

Are offshore casinos a way to get round GamStop?

No, and stating it as a loophole is itself a warning sign. A GamStop exclusion applies for its full term and then remains in place until the person contacts GamStop to remove it; registration cannot be cancelled or deactivated during the period. GamStop membership is a licence condition for British operators, so offshore sites are simply not connected to the scheme. The Commission warned in January 2025 that such sites often target people who have self-excluded.

Are real-money casino apps under the same rules as websites?

The obligations follow the licence, not the delivery method. A remote casino licence condition applies whether play happens in a browser or an app, so identity verification before play, the ten-times wagering cap, the reverse-withdrawal ban and GamStop participation all travel with it. Gambling equipment used to provide the facilities matters too: section 33 of the Gambling Act 2005 applies to remote gambling if at least one piece of remote gambling equipment used is situated in Great Britain.

What is the realistic minimum you can deposit?

The rules do not set a floor, and a low headline figure is mostly marketing arithmetic rather than generosity. What matters far more is the financial limit prompt. From 31 October 2025 all licensed gambling businesses must prompt customers to set a financial limit before their first deposit, present it as the default option, and remind customers every six months to review their account and transaction information. Set that limit rather than hunting for the smallest accepted amount.

How long does a payout really take at a licensed operator?

Commission data for June to September 2024 recorded 44.2 million withdrawals at large online operators, of which 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. The tail is where complaints live. Over a quarter of complaints to the Contact Centre concern identity verification, and withdrawal problems have long been the number one subject raised by consumers. No fixed statutory deadline exists; the regime rests on fair-terms and identity-verification conditions instead.

The Reality Of Choosing A Casino

A British licence is not a guarantee of good manners, and the regulator's complaint figures prove it. But it is a set of enforceable obligations with a named enforcer, a documented list of unfair terms, and a fine of £900,000 waiting for the operator that decides a queue is a strategy. Offshore, the licence may be perfectly real and the obligations towards a British player considerably thinner — no GamStop connection, no ten-times wagering cap, no ban on maximum withdrawal clauses, no approved ADR entity you can reach for free. On 5 November 2026 the Commission estimated that 2.5 per cent of people who had gambled online in the previous four weeks had engaged with illegal gambling websites. That is a small share of a very large market, and it is more than enough to generate a steady supply of complaints with nowhere to go.