Games not on GamStop and British Rules

Games not on GamStop are simply games offered by operators with no Gambling Commission licence. The scheme's obligations fall on British licensees alone, so an offshore operator sits outside it. That does not make such sites legal to operate in Great Britain — it makes them unregulated here, and outside every protection the British licence carries.

Typing "gamestop" is a frequent occurrence — the word "game" suggests itself, and the scheme's own name gets misspelled about as often as it is spelled correctly. So: GamStop. The national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited, available to consumers since April 2018, and, as of 13.11.2026, holding 614,738 people on its register.

I have watched this market for years, and the interesting thing is no longer whether offshore sites exist. They plainly do. The interesting thing is that the British rulebook has quietly become the strictest in Europe, and every step it takes makes the comparison sharper. Wager ten times your bonus in Britain; wager forty times somewhere else. Wait twenty-four hours for an identity check here; wait however long a company registered in the Caribbean decides. That gap is the whole subject. It is also, for a certain sort of player, exactly the attraction — and the trap.

What follows is not a list of sites. It is what the numbers, the licence conditions and the enforcement record actually say about the games that sit outside the British scheme, and how anyone who looks at the market with a cold eye ought to judge them.

The Scheme Has Edges, and They Are Drawn Around British Licences

GamStop blocks a person from signing up for or using online gambling accounts held with companies licensed in Great Britain. That is the whole of its power. Since 31 March 2020, every online operator has had to be part of it as a condition of its Commission licence — the requirement sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice — and in April 2020 the Commission added a requirement to check the entire customer base at least every 24 hours, which also stopped registered people receiving direct marketing.

A Gambling Commission licence is not a small thing to hold, and the reason is not sentimentality. It is that a licence is the hook. Breach a condition and the regulator has something to take away. In April 2020 the Commission suspended the licences of two online operators for missing the GAMSTOP integration deadline under section 118(2) of the Gambling Act 2005. That is what leverage looks like.

Now the other side of the line. A gambling site not on GamStop is, by definition, run by someone the Commission does not license. Offshore operators holding no Commission licence are not connected to the scheme and are not covered by it — a point stated by trade and press sources rather than on a regulator's own page, though it follows directly from the scheme's terms of use, and I would treat it as settled. What is not in doubt is the legal baseline. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether those facilities are provided wholly or partly by remote communication, or inside or outside the United Kingdom. The Commission's own wording is blunter still: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction.

Read that carefully, because it disposes of a comfortable assumption. The offence attaches to the operator, not to the player. Gambling on an offshore site is not, in itself, an offence by the customer; providing it is. That distinction matters when the enforcement figures come out, and it is why the Commission's entire offshore strategy is aimed at pipes rather than people: registrars, hosts, search engines, payment providers and social platforms.

The headline numbers from that strategy, published 21 October 2025: since April 2024 the Illegal Markets team issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and three payment provider referrals — referred 447,778 Bing and Google URLs, and secured 287,961 removals. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent after disruption.

Which method works, though? Registrar blocks and website suspensions produced the largest average fall in engagement, 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. That ranking is worth sitting with. Removing a site from search results makes it harder to find; it does not stop anyone who already knows the address. The Commission says so itself.

How Many People Actually Go Looking

Every few months a new estimate of the illegal market appears, and they differ by an order of magnitude, which tells you more about the estimators than about the market.

The Commission's analysis published 5 November 2026, covering April 2025 to April 2026, found that among respondents who had gambled online in the past four weeks, an estimated 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent having done so in the past 12 months. Across the whole population, including non-gamblers, 0.6 per cent had engaged in the past four weeks and another 0.4 per cent in the past year; 94.4 per cent showed no indication at all. Its illegal gambling dashboard recorded 586 illegal websites accessible to GB consumers in September 2026.

Then the commercial estimates, which are louder. H2 Gambling Capital put the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council — industry-commissioned, so note the direction of travel — conservatively estimated £2.7 billion staked annually online on the black market, 2.1 per cent of the £128 billion staked with GB-regulated remote casino, betting and bingo operators, involving 1.5 million Brits. Yield Sec, working for the Campaign for Fairer Gambling, a group with the opposite instincts, put GB online gross gambling revenue at £8.8 billion in 2025, split 91 per cent regulated and 9 per cent unregulated.

My reading: claims of a mass exodus to unlicensed sites are hollow. The Commission's survey figure — around one online player in forty — is small and, being self-reported, probably an undercount. Also small. What has changed is not scale but accessibility. In 2019 a black-market site was something you had to already know about. Now it is one search away, and search is exactly where the Commission has the least leverage.

The First Question Is the Licence, Not the Games

When someone asks what gambling sites are not on GamStop, the honest answer is: any site without a Commission licence, which is a negative description rather than a useful one. The workable question is where the licence comes from, and how much of it is real.

Four regulators turn up again and again on sites accepting British players. Their paperwork is not equivalent, and the differences are worth knowing.

Curaçao Reform in Progress and Proofs in Transition

Curaçao has spent two years rebuilding its regime, and the rebuilding is not finished. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority. The old master-licence and sub-licence model is gone: the legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and a historic /JAZ number or legacy seal must not be treated as independent proof of a current licence. Licensing ceased for the four former master licensors on staggered dates — Gaming Curaçao (365/JAZ) on 18 August 2024, Curaçao eGaming (1668/JAZ) on 1 October 2024, Antillephone (8048/JAZ) on 1 November 2024 and Curaçao Interactive Licensing (5536/JAZ) on 31 January 2025.

Operators validly licensed when the law came into force received a six-month provisional licence by operation of law, due to expire 24 June 2025; the Authority extended those to 24 December 2025 on the same conditions. It announced on 7 October 2026 that its previous online gaming portal would not return to service and that it is working on an alternative way of verifying CGA-licensed domains, because the previous digital seal may be affected by the transition.

That last item is the practical one. The Authority issues two distinct seals: a Certificate of Operation Seal, issued only to B2C operators and only for an approved, registered player-facing domain, and a License Certificate Seal, available to B2B and B2C entities and not domain-specific. Clicking a Certificate of Operation Seal must redirect to cert.cga.cw. If the design, colour or format differs, the site is not authorised. If the certificate behind the seal names a different domain from the one you are on, you are looking at someone else's certificate.

The money, for what it is worth as a signal of seriousness: the B2C application fee is EUR 4,592 non-refundable, plus EUR 150 per ultimate beneficial owner, and the total annual B2C cost is EUR 47,450, made of a EUR 24,490 licence fee to the National Treasury and a EUR 22,960 supervisory fee. Supplier licensing and registration become fully mandatory on 24 December 2026.

Anjouan Standing and Public Contest

Anjouan is a constituent territory of the Union of the Comoros, and its framework rests on legislation adopted in 2005. It issues B2C and B2B internet gaming licences at EUR 17,828 for issuance and the same for annual renewal, with EUR 500 per additional domain or URL — roughly two-fifths of the Curaçao annual cost.

It is also the licence with the most contested standing. Anjouan Gaming's regulator says its licences carry no territorial restrictions under Anjouan law, but that holders must comply with the laws of the jurisdictions where they operate, and it published a statement on 10 June 2026 saying plainly that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". In other words, the licence does not answer the British question, and its holder knows it. An ABC News investigation published 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, and that a former attorney-general of the Comoros called the licensing body "an illegal entity". Anjouan Gaming's own defense — an independent legal opinion of 19 September 2024, reconfirmed in February 2026 — is a licensee's own statement rather than a regulator's, and I treat it as unconfirmed.

Kahnawà:ke Standing Numbers and Entry Costs

The Kahnawà:ke Gaming Commission has regulated interactive gaming since 1999 and, on its own account, longer than almost any other jurisdiction. Its structure is unusual: the Interactive Gaming Licence is held by only one entity at a time and has been held by Mohawk Internet Technologies since 1999, which operates a data centre in the Mohawk Territory of Kahnawà:ke. Operators work under Client Provider Authorizations, and every CPA holder must be hosted at that facility. There is no limit on how many CPAs the Commission issues.

Fees rise on 1 January 2027: the CPA application fee from USD 35,000 to USD 40,000, the five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it, and Key Person Permit application and renewal from USD 5,000 to USD 6,000. The annual CPA fee stays at USD 20,000. The Commission's Logo Certificate Program lets a player click its logo on a site to generate a Certificate of Good Standing — a genuine verification route, and rare.

Malta Regulatory Status and Recognition

The Malta Gaming Authority is the reference point offshore operators quote when they want to sound respectable, and it is not the same thing as a Commission licence. A B2C Gaming Service Licence is required where a Maltese or EU/EEA entity offers gaming from Malta, to a Maltese person, or through a Maltese legal entity: EUR 5,000 non-refundable application fee, EUR 25,000 fixed annual fee, 5 per cent gaming tax, and minimum paid-up share capital of EUR 100,000 for Type 1 and Type 2 licences. The MGA publishes a list of Unauthorised URLs declaring that any reference to the MGA or a Maltese licence on those domains is false and misleading, with the most recent entries carrying notice dates of 30 October 2026.

And Then Places With No Regime at All

Costa Rica does not operate a comprehensive gambling licensing regime. The "data processing license" sometimes cited is not a licence in any strict sense, and the Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced a mandatory regime. Under Costa Rican law, games of chance where the outcome depends primarily on luck are generally prohibited, so services should not be offered to or actively marketed towards Costa Rican residents; only land-based casinos integrated into qualifying hotels are authorised.

That is the floor. A site whose footer shows a Costa Rican "licence" is showing you a slogan.

Bonus Terms Are Where the Comparison Breaks Down

The single thing this topic turns on is not the licence — the licence only tells you who has jurisdiction. It is the terms, and specifically the wagering requirement attached to bonus money. That is where the British rulebook diverges most sharply from everything offshore, and where the practical consequences land hardest.

How It Works

A wagering requirement obliges a player to stake a particular total before bonus-derived funds become withdrawable. Since 19 January 2026, LCCP Social Responsibility Code 5.1.1 caps that at ten times in Britain: licensees must not apply wagering requirements requiring a customer to play through bonus funds more than ten times. The Commission consulted on an outright ban or thresholds of 1, 5 or 10 times, chose the cap, and said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". The same code bans mixing product types in one incentive — "bet £5 to get 20 free spins" is non-compliant, because it crosses from betting into casino.

Offshore, none of that applies. Trade coverage describes offshore welcome offers as typically 25x to 40x, with no-deposit bonuses at 40x to 60x and a €50 to €100 cashout cap; both figures are trade estimates rather than regulator disclosures, so treat them as indicative. A Euro 100 bonus at ten times requires EUR 1,000 of stakes. At forty times it requires EUR 4,000. Same bonus, four times the work.

There is a second layer, and it is the one people miss. Wagering is calculated either on the bonus alone or on bonus plus deposit, and the difference is large. One offshore operator states publicly that for deposit bonuses the required bet amount equals the bonus multiplied by the wager, and that the deposit itself is not included in the calculation — the more generous method. Others use bonus plus deposit. Then come game weightings: an offshore chart I checked gives slots and specialty games 100 per cent contribution, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer games and jackpot slots 0 per cent unless stated otherwise. A hundred pounds staked on roulette contributes a fiver. Players who grind through a wagering requirement on blackjack are, in effect, waging a war against a footnote.

What Happens the Second Time

The first time anyone reads bonus terms, the headline number is all they see. Later — after a withdrawal is refused, usually — they read the rest. Three clauses do the damage.

Maximum cashout. One offshore operator reserves the right to limit the amount withdrawable from winnings generated with bonus funds, including free spins and cashback, to 300 per cent of the credited bonus amount, with the excess voided. Britain prohibits any maximum limit on what a consumer may withdraw from their deposit balance, and the Commission's fair-terms guidance names "you may withdraw up to £50 per day and up to £500 per week" as a prohibited term. Withdraw EUR 3,000 from a EUR 100 bonus and the offshore clause costs you EUR 2,700 that the British term could not have touched.

Maximum bet while wagering. One operator caps stakes while wagering at €5 for regular players and €10 for VIPs and rejects anything above; another sets the casino maximum at 20 per cent of the deposited amount and warns that breaching it may result in account closure, forfeit of the bonus and forfeit of winnings generated during wagering. A player who does not know the cap exists can lose everything by staking too much at the wrong moment.

Bonus abuse. Prohibited play is defined generously offshore: low-margin, equal or zero-risk bets, moving from a low-weighted game to a high-weighted one after a large win, delaying free spins until after wagering is met. British guidance requires such terms to specify all prohibited types or patterns of play and forbids reserving sole discretion for the operator to decide when play breaches them.

The Warning Signs

The clearest warning is a single clause carrying the words "sole discretion" or "reserve the right" over winnings. The Commission's guidance tells operators not to use terms giving them sole discretion to void or withhold winnings, because such terms are unfair under the Consumer Rights Act 2015. In July 2025 an operator was fined £170,000 for regulatory failures including a bonus term stating it had the right at its own discretion to close accounts or forfeit winnings. Offshore, that clause is not a breach of anything.

The second sign is silence about game weightings. A bonus page that quotes a wagering multiplier and no contribution table is not being brief. It is being quiet.

Five Signs a Site Can Be Checked, and How to Check Each

These are tests, not impressions. All of them take minutes.

The Licence Points at a Register

A real licence is verifiable at source, not asserted in a footer. The Commission advises consumers to check that a business holds a Commission licence and to click through to the public register to see whether the site's activities and domain names match. For Curaçao, click the Certificate of Operation Seal and confirm it lands on cert.cga.cw and names the domain you are on. For Kahnawà:ke, click the Commission logo to generate a Certificate of Good Standing. For Anjouan, check the licence number and QR code against the public register; the Authority itself says a certificate that cannot be verified there should not be relied on. A seal that does not resolve, or resolves to a different domain, is a finding.

The Payout Terms Contain No Ceiling

Look for a maximum withdrawal limit attached to bonus winnings, and look for one withdrawal at a time. On 21 October 2026 the Commission announced that one licensee would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals; the withdrawal-specific failures were a term stating customers could request only one withdrawal at a time and could not request another until the original was authorised, found unfair under the Consumer Rights Act 2015, and manual review of every fifth or tenth withdrawal for some customers. The check is a search of the terms for the words "maximum", "limit", "per day", "per week" and "one withdrawal".

Customer Funds Are Rated

British licensees holding customer funds must state whether those funds are protected on insolvency, at which of three levels — "not protected", "medium protection" or "high protection" — and by what method, with an operator rated "not protected" reminding the customer every six months. The disclosure must be in writing and acknowledged before the customer can gamble. A site that says nothing at all is not being neutral; it is declining to answer. And the underlying truth is uncomfortable even here: keeping customer funds in a separate client account does not mean customers get their money back if the operator becomes insolvent, and businesses are legally allowed to hold customers' money in overseas bank accounts.

There Is an ADR Provider, Named, With Teeth

LCCP social responsibility code provision 6.1.1 requires licensees to allow a dispute to be referred to an alternative dispute resolution entity free of charge where the operator has not resolved it within eight weeks, after the operator's own complaints process. The Commission approves the providers — ADR Group, Pegasus ADR Service, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee — and licensees may use only those. The output is measurable. IBAS's report for 2024-25 records 3,721 domestic disputes, 217 categorised as banking or financial, an average domestic completion time of 20 days and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, 150 valid deposits-and-withdrawals disputes, an average 31 days for domestic disputes, and 17.8 per cent of completed disputes ruled for the consumer. Anjouan requires licensees to designate an approved ADR provider and list it in player-facing terms, and names EGIS ADR, Axion ADR, iGaming ADR and another approved entity. Offshore, ADR is often absent altogether; where it exists, it is contractual rather than mandatory.

The Complaints Route Reaches the Regulator

The Commission is a regulator, not an ombudsman: it cannot resolve individual complaints or get money back, but it records every complaint and typically refers disputes to an independent third party. Complaint volumes are themselves a signal — complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. There is no equivalent channel for a Curaçao, Anjouan or Kahnawà:ke site, and that asymmetry is the point of the whole comparison.

Judging Sites Without Being Fooled in Six Steps

None of this involves a deposit. It is paperwork, and paperwork is where offshore sites are weakest.

1. Read the licence paragraph, then verify it. Identify the regulator named and follow the verification route it publishes. Reason: a licence claims only what its issuer can prove, and the seals that fail to resolve are the ones that mattered.
2. Ask whether British licence conditions apply to this product. Check the bonus terms for a wagering cap, a ban on mixed-product offers, a maximum cashout clause and a maximum bet while wagering. Reason: the presence of the first two and absence of the last two is the fingerprint of a British licence; the reverse is the fingerprint of an offshore one.
3. Reconcile the depositing and withdrawal methods. Licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider under the Payment Services Regulations 2017. Check whether the methods a site offers are ones a British bank will actually process. Reason: an offshore site's payment rail is where regulatory pressure lands first — the Commission has referred four cases to Visa since January 2025 — and a rail that snaps mid-withdrawal leaves the player with a balance and no road out.
4. Compare the identity-check timing. In Britain, identification and verification are required under Licence Condition 17 before the customer is permitted to gamble, and mobile regulatory returns require a check within 72 hours; the Commission expects checks brought forward to before a deposit, and treats onboarding on initials, nicknames or commercial addresses as insufficient. Reason: a site that asks for documents only when a withdrawal is requested has been saving the inconvenience for the moment when the player has the least leverage.
5. Find the ADR provider and check the compliance record. Name it, then look for its published annual figures. Reason: a dispute route that exists on paper and is never used is decoration, and a provider that names its uphold rates is telling you something a marketing page will not.
6. Search the terms for the words that carry risk. "Sole discretion", "reserve the right", "abuse", "void", "forfeit". Reason: this is where the enforcement record points — the Fafabet penalty and the L & L Europe settlement both turned on terms of exactly this shape, and offshore they are unenforceable only in the sense that nobody will ever try.

The Money Has to Arrive, and Offshore That Is a Real Question

Payment speed is the one variable a player can measure without any expertise, and Britain's own record is better than its reputation. Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators; 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Earlier data from some of the largest companies showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed it is quick and easy to withdraw, 33 per cent neutral and 18 per cent disagreeing.

The complaints tell the other half. The Commission's contact centre received around 2,000 complaints a year about withdrawal delays by July 2024, still the number one subject of complaints. Over a quarter of complaints reaching it concern identity verification, raised when documents are demanded only on attempting to withdraw. Reverse withdrawals — the option to cancel a withdrawal request — have been banned outright since 31 October 2021 under RTS requirement 14B, on evidence that the function presents a risk to engaged and vulnerable gamblers.

Britain also has no fixed deadline. The LCCP sets no maximum number of days within which an operator must complete a withdrawal; the regime relies on the fair-and-open condition 7.1.1, the identity-verification condition 17.1.1 and the prohibition on unfair terms. What it does have is a rule that matters more than a deadline: under condition 17.1.1 a withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested it earlier, though that does not stop it seeking information it must obtain at that time under anti-money-laundering rules. Where delay is caused by insufficient identity documentation, a business may be in breach of Licence Condition 17.

Offshore, the equivalent safeguards are contract terms written by the counterparty. Below is the comparison that matters, by method, drawn from published scheme, provider and regulator figures.

Two notes on that table, because a number in a table without a caveat is a half-truth. The £1 million Faster Payments figure is a scheme ceiling, not an entitlement — individual banks set lower per-payment limits, and the payments industry publishes them bank by bank, so a NatWest online personal limit, for instance, is £100,000. And the e-wallet percentages are the providers' own published schedules: Skrill applies 2.80 per cent with a minimum of EUR 3.50 for a transfer from a Skrill account to a bank account, and adds a 4.49 per cent foreign-exchange fee when conversion is needed. On a £1,000 withdrawal that is £28 and potentially £44.90 more. It is a cost the player pays for moving money out of a wallet, and no operator can remove it.

Which is why the bank-level block may be the most useful tool on the list. The Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. These decline payments to merchants categorised under gambling Merchant Category Codes and cover online casinos, betting sites, gaming apps and physical venues; they are applied at card level, so each card must be activated. Most banks use a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again after a block is switched off, and blocks do not affect credit scores. A card-level block is, in effect, a private self-exclusion that no offshore operator can override — and unlike a scheme, it cannot be reasoned with.

Self-Exclusion Does Not Have a Route Around It

I have to be plain about this, because the phrasing of the search itself carries an assumption that needs dismantling. Registering with GamStop blocks a person from gambling with all online gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. Signing up takes minutes; the block can take up to 24 hours to become effective. Once registered, it cannot be cancelled during the exclusion period, and it stays in place after the chosen period ends unless the person contacts GamStop to remove it.

That is not a formality. Gamstop Online registrations cannot be removed early, and the Group's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends. Where someone does not deactivate after the chosen period, the scheme holds their data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Under the terms of use, the auto-renewal option may be turned off only during the last six months of a five-year Minimum Exclusion Period, and auto-renewal otherwise continues for up to four new five-year periods.

The figures say people increasingly understand the commitment. Of the exclusion periods chosen in 2025, 29 per cent picked six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. As of July 2026 the register held 614,738 people, of whom more than one in two had opted for the maximum five-year exclusion; across all age groups only one in four had self-excluded for six months. Registrations rose 16 per cent year-on-year in the first half of 2026, with May 2026 setting a monthly record of 12,236 sign-ups, and under-25s accounted for nearly one in three of all self-exclusions in that half, a 26 per cent year-on-year increase. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of that year.

An offshore gambling site not on GamStop does not sit outside those terms. It sits outside the register, which is a different thing and a worse one. The exclusion still holds for its full term and stays in place until the person contacts GamStop to remove it; what changes is that no operator is obligated to honour it. The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. That is the regulator describing a marketing strategy.

Two further honest points about how the scheme can be defeated by accident rather than design. Kahnawà:ke states that its own voluntary self-exclusion is permanent and irrevocable, and that a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a third-party charity chosen by the Commission. So the offshore approach can be harsher — but it depends on the site choosing to run such a scheme at all, and there is no register to make it. And the Commission has warned that onboarding customers using a middle name instead of a forename creates mismatches with records held elsewhere, including GamStop, undermining self-exclusion's effectiveness. The scheme is only as strong as the identity data feeding it.

Blocking software adds a layer that does not depend on any operator's goodwill. GamStop signposts Gamban and BetBlocker for phones, tablets and computers. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban blocks licensed and unlicensed sites and is designed to be as difficult to remove as possible; its free UK licence scheme, TalkBanStop, ended on 31 March 2026, and it now costs £4.99 a month or £29.99 a year in England and Scotland after a 7-day trial, while remaining free for residents of Wales.

For anyone who does want to stop, the routes are free and named. The National Gambling Helpline, run by GamCare, is 0808 8020 133, 24 hours a day, every day of the year, also reachable by live chat and WhatsApp; callers in Wales may be given 0808 2819 265. GamCare provides information, advice and support across England and Scotland through the Helpline, live chat, WhatsApp and Facebook, plus a peer-support chatroom. BeGambleAware is the public-facing brand of the charity GambleAware, which directs people to the same helpline. GamFam is a registered charity (No. 1191139) for people affected by the gambling of family and friends, delivering support through its five-stage peer programme. Gamblers Anonymous England, Wales & Ulster runs around 250 meeting locations with no appointment needed on 0330 094 0322. Gam-Anon UK & Ireland supports families regardless of whether the gambler attends GA. The NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB takes self-referrals. Citizens Advice gives free, confidential advice including on debt, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131.

What Each Licence Promises and Comparing Them

This table compares regulators, not brands, because the brand is not the variable that decides anything.

The British column is not a moral statement; it is a description of accountability. The statutory levy alone raised just under £120 million in its first year, ringfenced for research, prevention and treatment of gambling-related harm, and split 20 per cent to research, 30 per cent to prevention and 50 per cent to treatment. Offshore operators contribute none of it. That is not a small detail about the market. It is the market.

Where British Rules Apply and Where They Stop

Several rules apply to the operator wherever it is incorporated, provided it is licensed by the Commission — and none of them apply to an operator that is not. The credit card ban, effective 14 April 2020 under licence condition 6.1.2, covers all remote gambling licensed by the Commission and non-remote betting, and operators must also ensure that money paid in from an e-wallet was not loaded from a credit card. The ban does not extend to non-remote lottery operating licences, so credit cards can still buy lottery tickets and scratchcards in a shop or by post.

Slot stakes are capped in Britain: the £5 maximum per game cycle for online slots for all adults went live on 9 April 2025, and the £2 limit for 18- to 24-year-olds followed on 21 May 2025, under the Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025. The limits apply to online slots only and not to roulette or blackjack, and a minimum of 2.5 seconds must elapse between the start of one game and the next cycle under RTS 14D. A European casino running twelve-second spins with a £50 maximum is not just a different product. It is a different set of protections, and for anyone in the 18-to-24 band the stake ceiling is a factor of twenty-five.

Then the financial checks, which are the most intrusive and least understood part of the British rulebook. Financial vulnerability checks became a licensing requirement for remote gambling businesses in August 2024, initially at £500 net deposits over a rolling 30 days, with the threshold lowered to £150 from 28 February 2025. In the three months after the requirement, operators ran those checks on 7 per cent of active customer accounts on average; 78 per cent of checks returned within 10 minutes and a further 10 per cent within two hours. A check may only use publicly available information about risk flags such as a bankruptcy order, County Court Judgment, Individual Voluntary Arrangement, High Court Judgment, Administrative Order or Debt Relief Order.

Financial Risk Assessments are the next stage. The Commission announced on 7 July 2026 that they will arrive in stages, beginning with the largest operators at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over and £2,500 in 24 hours for under-25s — a spend pattern fewer than 0.5 per cent of customers exceed — and at the final stage they will catch customers with net deposits above £1,000 in 24 hours or £3,000 over 90 days, with lower thresholds for under-25s. The pilot found 97 per cent of customers spending above the thresholds could be assessed frictionlessly, higher than the 80 per cent estimated in the 2023 white paper, and fewer than 3 per cent of accounts would need an assessment. During the early stages no enforcement action will be taken for a failure to act following an FRA, though all other licence requirements still apply.

From 31 October 2025 every gambling business must also prompt customers to set a financial limit before their first deposit, make it easy to review and change, remind customers every six months to review account and transaction information, and offer limits through a free-text box at account level; under RTS 12E the limit must be presented as the default option, with the customer taking an action to decline and confirming that decision. None of this exists on an offshore site, and I would rather say so than pretend the difference is cosmetic.

The enforcement picture is the last piece, and it is the part that makes the statistical argument about offshore sites honestly. Since April 2024 the Commission has issued 3,140 cease and desist and disruption notices and secured 287,961 URL removals. It referred 366 websites to search engines in April to June 2026, then 1,835 websites representing 7,677,211 URLs in July to September 2026, with 546 cease and desist notices in that quarter. And across April 2025 to March 2026, every quarter recorded zero or one prosecutions commenced — one prosecution, total, in October to December 2025.

So the machinery is loud and the criminal sanction is almost unused. Disruption works, and the Commission's own data shows which disruption works best. But nobody should read a rising count of referrals as declining availability. In the quarter to September 2026 it referred more websites than in any previous quarter because more of them were there to refer. There are more offshore games than ever, and British rules are further away from them than ever.

Questions About Gambling Sites Not on GamStop

What is a game not on GamStop?

It means a game offered by an operator with no Gambling Commission licence, and therefore outside the national self-exclusion scheme. The scheme's obligations bind participating operators, who are British licensees. A site holding only a Curaçao, Anjouan, Kahnawà:ke or Maltese licence has no obligation to check the register, so a self-exclusion in force has no effect there.

Are these sites legal to use in Great Britain?

Providing gambling facilities in Great Britain without a Commission licence is an offence by the operator under section 33 of the Gambling Act 2005, with a maximum of 51 weeks' imprisonment, a fine at level 5, or both. The Commission states plainly that this applies even where the operator holds a licence in another jurisdiction. The offence attaches to the provider, not to the customer, so the risk for a player is financial and practical rather than criminal.

What gambling sites are not on GamStop?

Any site without a British licence, which is a negative definition rather than a list. The workable check is the regulator named in the footer, verified at source. Curaçao certificates must resolve to cert.cga.cw and name the domain you are on; Kahnawà:ke issues Certificates of Good Standing; Anjouan certificates carry a licence number and QR code checkable against its public register.

Do British payout and bonus rules apply there?

No. The ten-times wagering cap in force since 19 January 2026, the ban on mixed-product promotions, the prohibition on maximum withdrawal limits and the rule that a withdrawal request cannot trigger new information demands all rest on the Commission licence. Offshore terms commonly run 25x to 40x, add maximum cashout clauses and cap stakes while wagering. The licence, not the game, determines which rulebook applies.

How are winnings delayed offshore?

Two mechanisms do most of the work: identity documents demanded only when a withdrawal is requested, and terms limiting how many withdrawal requests a customer may make. The Commission's own complaint data shows the pattern — over a quarter of contact centre complaints concern identity verification, and withdrawal complaints remain the largest single category. Offshore, there is no regulator to complain to and no approved dispute body to escalate to.

Can a blocked player use an offshore site instead?

That is precisely what unlicensed sites are marketed for, and it is the worst reason to choose one. A GamStop exclusion holds for its full term and remains in place until the person contacts GamStop to remove it; registering costs nothing and cannot be cancelled early. The Commission issued a warning notice on 20 January 2025 that unlicensed sites often target self-excluded customers. Bank card blocks and blocking software are the firmer route.

The Best Protection Is the One the Regulator Cannot Reach

Games not on GamStop are not a hidden category; they are the ordinary internet, viewed from a British licence line, and the comparison between the two sides of that line is now sharp enough to be read off a page — ten times against forty, a seven-year data trail against nothing, an approved adjudicator against a clause reserving the right to void winnings at the operator's own discretion. My judgement, after years of watching both sides, is that British rules are stricter than most players realise and that the offshore alternative is priced accordingly: the looser terms are the product, and the missing protections are the price. Anyone who wants to go looking should at least do the paperwork first, and anyone who wants to stop should know that the help line is 0808 8020 133, day or night. The number of illegal sites accessible to British consumers in September 2026 was 586 — and the month before, the Commission began nine criminal investigations fewer than the number of quarters in which it began none.