Online Gambling UK The 2026 Rulebook the Offshore Shortcut and Who Actually Enforces It

Online gambling in the UK is legal when the operator holds a Gambling Commission licence; it is a criminal offence under section 33 of the Gambling Act 2005 to offer gambling facilities here without one, whatever licence the firm holds abroad. Roughly one online gambler in forty has used an unlicensed site in the past year.

The £17.5 Billion Question

The Gambling Commission put total Great Britain gross gambling yield at £17.5 billion for the year to March 2026, up 4.4 per cent on the year before, of which the remote casino, betting and bingo sectors took £8.3 billion. That is the pot everyone is arguing about, and the argument matters because the same regulator cannot see all of it.

Its own analysis, published on 5 November 2026, estimates that 2.5 per cent of people who had gambled online in the previous four weeks had engaged with an illegal gambling website, with another 1.5 per cent in the past year. H2 Gambling Capital, a market-intelligence firm, reckons £16.6 billion was staked with illegal operators in the UK during 2025, up from about £5 billion in 2019. Treat both sets of numbers carefully. The Commission's figure comes from survey responses about activity people are not always keen to admit to, and the commercial estimate is produced by a firm that sells the data. What they agree on is the direction.

The statistics that get quoted most, though, are the ones that say least. Gambling Survey for Great Britain, published 16 July 2026 and built on 20,775 adults interviewed between January 2025 and January 2026, found 2.4 per cent scoring 8 or more on the Problem Gambling Severity Index — 2.5, 2.7 and 2.4 per cent across the survey's three years. A flat line. Anyone selling you a licence model on the strength of that line rising or falling is selling you something else.

My view, after years of reading licence conditions and enforcement notices side by side: the British rulebook is not a marketing claim. It is a set of constraints that cost operators money, and the only reason to compare jurisdictions is to see which constraints an operator has chosen to escape.

Before anything else, and plainly: offshore sites are not licensed in Great Britain, UK protections do not apply to them, and self-exclusion does not follow a player to a site that never signed up to the scheme. For those where gambling is a problem, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, run by GamCare.

What Counts as Legal Here, and What Does Not

Is online gambling legal in the UK? For a player, yes, in substance: the criminal offences in the Gambling Act 2005 attach to people who provide facilities, invite children to gamble or cheat, not to an adult placing a bet on a licensed site. The section 330 and 331 offences cover advertising unlawful gambling and foreign gambling facilities. The burden sits with the operator, as it should.

For the operator the rule is stark. Section 33 makes it an offence to provide gambling facilities without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, or whether they are provided inside or outside the United Kingdom. The Commission's published position, from 21 October 2024, is that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction. On summary conviction the offence carries up to 51 weeks' imprisonment, a fine at level 5, or both — six months in Scotland.

Enforcement, though, is where the rhetoric meets the paperwork. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist, 774 registrar referrals, 402 host referrals and three payment provider referrals — referred 447,778 Google and Bing URLs, and secured 287,961 removals. Across 160 illegal sites with usable traffic data, engagement fell by an average of 32 per cent after disruption. By method, registrar blocks and suspensions produced an average 91 per cent fall, GEO IP blocking 60 per cent, Bing removal 52 per cent, Google removal 30 per cent and Facebook removal 8 per cent. Search removal, in other words, makes a site hard to find. A registrar block makes it hard to reach. The Commission says as much itself, which is unusually candid for a regulator defending its own numbers.

The prosecution figures are the tell. Across April 2025 to March 2026, every quarter recorded zero or one prosecution commenced — a single prosecution in the whole year. Consequence falls on access and money, not on people. And the volume is relentless: 226 websites referred to search engines in January to March 2026, then 366 in April to June, then 1,835 in July to September, when 546 cease and desist notices went out.

One more plain fact, because it is stated as a fact everywhere on this page. A registration with Gamstop Online — the scheme's name is often typed "gamestop", which is not its name — runs for 6 months, 1 year, 5 years or 5 years with auto-renewal. It cannot be cancelled during the term, and it stays in place after the term ends until the person contacts Gamstop to remove it. Auto-renewal may only be switched off during the last six months of a five-year period. No offshore site is a way round that, and any site suggesting otherwise is describing a gap in its own compliance, not a service.

The Licence Is the Whole Argument

British-licensed operators are the yardstick here, not because they are generous but because they are constrained. The licence conditions and codes of practice, in the version effective 29 July 2026, do a series of specific things.

Credit cards cannot be used for gambling — licence condition 6.1.2, effective 14 April 2020 — and where an operator accepts an e-wallet, the money must not have been loaded from a credit card. Operators must accept payment from Great Britain customers only through a provider within the Payment Services Regulations 2017, under condition 5.1.2, effective 31 January 2024. Reverse withdrawals are banned outright: RTS 14B, in force since 31 October 2021, states that "consumers must not be given the option to cancel their withdrawal request". Withdrawal requests must not generate a demand for extra documents that could reasonably have been requested earlier — condition 17.1.1 — unless a separate legal duty, such as an anti-money-laundering obligation, requires it at that moment. Terms must be fair under the Consumer Rights Act 2015, condition 7.1.1. No term may cap what a consumer can withdraw from their deposit balance; the Commission's own example of a prohibited clause is "You may withdraw up to £50 per day and up to £500 per week".

The 2023 white paper measures have landed on top. Online slots stakes are capped at £5 per game cycle for adults and £2 for 18- to 24-year-olds, live since 9 April and 21 May 2025 respectively, with a minimum 2.5 seconds between game cycles under RTS 14D. From 19 January 2026, wagering requirements on bonus funds are capped at ten times, and promotions may not mix product types — "bet £5 to get 20 free spins" is non-compliant. Financial vulnerability checks became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days, lowered to £150 on 28 February 2025. From 31 October 2025 customers must be prompted to set a financial limit before their first deposit, with declining it presented as the active choice under RTS 12E. Financial Risk Assessments, announced on 7 July 2026, arrive in stages: the largest operators start at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over and £2,500 for under-25s, a spend pattern fewer than 0.5 per cent of customers exceed, ending at £1,000 in 24 hours or £3,000 over 90 days. The Commission has said no enforcement action follows a failure to act on an FRA during the early stages; every other licence requirement still applies.

None of this is free. The statutory levy, commenced 6 April 2025, takes 1.1 per cent of previous-year gross gambling yield from online operators and from software licences, and raised just under £120 million in the year reported, ringfenced for research, prevention and treatment.

The offshore picture is a series of different bargains. Curaçao replaced its master-licence model with direct licensing by the Curaçao Gaming Authority under the LOK, in force from 24 December 2024; the legacy "orange" certificates of operation ended on 15 October 2025 and a historic /JAZ number is no longer proof of anything. Anjouan issues a B2C internet gaming licence for EUR 17,828 one-time and the same on annual renewal, and states that its licences carry no territorial restrictions under Anjouan law — while adding that holders must comply with the laws of the places they operate in, which is the sentence that does the actual work. Kahnawake has regulated interactive gaming since its 1999 regulations and requires licensees to be hosted in a single Mohawk Territory data centre; its client provider authorisation fees rise on 1 January 2027, with the application fee going from USD 35,000 to USD 40,000. Malta's Gaming Authority charges a one-time EUR 5,000 application fee, a EUR 25,000 annual licence fee and 5 per cent gaming tax on revenue, and publishes a list of Unauthorised URLs where any reference to a Maltese licence is described as false and misleading.

And then there is the bottom of the market, which is not a jurisdiction at all. Costa Rica operates no comprehensive gambling licensing regime; the "data processing license" the industry mentions is not a licence in the strict legal sense, and a bill that would have introduced mandatory licensing, No. 25,057, was rejected in early 2026. Where there is no licence to lose, there is no licence condition to breach — which is precisely the attraction for a certain kind of operator.

Delays Built In by Design

This is the section the topic turns on, because the term that costs a player most is not the wagering multiple. It is time.

Compare the two regimes on the one thing players actually measure — how long their money takes to come back.

The first row deserves its own paragraph, because the number is the whole case. The Commission's data for June to September 2024 records 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours. Read that again slowly. The delay that fills complaint inboxes is not the normal case — it is the exception being felt hard by the people it hits.

How the mechanism works the first time, then later. On a first withdrawal at a UK-licensed site, the operator runs identity verification. Under licence condition 17, introduced 7 May 2019, the information obtained and verified must cover name, address and date of birth before the customer is permitted to gamble, though a remote casino may take the "hybrid approach" — identifying the customer and verifying age at registration, then deferring full verification until the €2,000 threshold under the Money Laundering Regulations 2017 is triggered by deposits or withdrawals. Electronically, that can be instant. With documents, it takes as long as it takes; the Commission declines to give a timescale because the process varies.

Later, the friction changes character. Withdrawal number fifty gets a manual review because the pattern looks unusual; a withdrawal gets held because a source-of-funds question has opened. On a compliant site those requests must come with a reason, and the operator must explain a delay or refusal, subject to the tipping-off prohibition in money-laundering cases. The Commission has been explicit that it is not acceptable to introduce friction at withdrawal rather than at deposit, or to put commercial interests above the customer's, and that where there are no regulatory concerns there is no valid reason to delay. The complaint numbers say the instruction is not always obeyed: complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025, while the Commission's Annual Report for 2024-25 still records withdrawals as the cause of most complaints it receives, and a 2026 blog notes over a quarter of Contact Centre complaints concern identity verification raised only at withdrawal. On 21 October 2026 the Commission announced that one operator would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals, among them a term allowing only one withdrawal request at a time.

The warning signs of a delay built in by design are consistent. Documents demanded for the first time at withdrawal. A term limiting how many withdrawal requests may be open. A bonus whose cashout is capped at some multiple of the bonus. A maximum bet while wagering that is low enough to trip almost any player. A pending period described as "processing" with no stated length. None of these is fatal alone. Together they are a business model.

Five Signs an Operator Can Be Trusted

Trust is checkable. These are the five checks I would run, in this order, and each takes minutes.

The licence, checked on the register, not on the badge

A Gambling Commission licence is a searchable entry, and the Commission's own advice is to click through to the public register and confirm that the site's activities and domain names match what is listed. A licence stated in a footer with no register entry behind it is decoration. So is a foreign licence number presented on a British-facing site — Anjouan, Curaçao and Kahnawake licences are real in their own jurisdictions and irrelevant to whether an operator may lawfully serve customers in Great Britain.

Terms that can be read before depositing, not after

The licence requires significant conditions applying to a marketing incentive to be given transparently and prominently, and where displayed online, in full no further than one click away — Social Responsibility Code 5.1.9. The test is mechanical: can you find the wagering multiple, the maximum bet while wagering, the cashout cap and the withdrawal timescale before your first deposit, in plain words, without hunting through a terms document? Under RTS 12E, being prompted to set a financial limit must be the default, and declining must be an active confirmation. An operator that hides the design questions has answers you will not like.

A withdrawal route with no reverse gear and no ceiling

Two checks. Is there any option to cancel a pending withdrawal? On a UK-licensed site there cannot be — RTS 14B banned it on 31 October 2021. And is there any term limiting how much of the deposit balance may be withdrawn? There may not be: the Commission's own prohibited example is a daily and weekly cap. Cashout caps attached to bonus winnings are a different animal and perfectly legal, which is exactly why they need reading.

Dispute rights that survive the first refusal

A licensed operator must let a customer refer an unresolved dispute to a Commission-approved ADR provider free of charge once eight weeks have passed without resolution, and must not use terms restricting the right to bring court proceedings. Approved providers include IBAS, eCOGRA, CEDR, ADR Group, Pegasus ADR Service, ProMediate, an ADR provider and the Tattersalls Committee. A term requiring arbitration in a distant jurisdiction, or an ADR provider that does not appear on the Commission's list, tells you what happens when something goes wrong.

Funds held as customer funds, with the rating stated

Licence conditions 4.1.1 and 4.2.1 require customer funds to be held in a separate client account, an insolvency protection rating of "not protected", "medium protection" or "high protection" to be stated in the terms, and the disclosure to be given in writing and acknowledged before the customer is permitted to use funds for gambling. An operator rated "not protected" must remind the customer every six months that their funds are unprotected and state the value held. Note the caveat: money staked within an open bet is not customer funds and is not covered if the business fails.

How to Judge a Site Before You Deposit

1. Check the licence on the Commission's public register, not the footer badge. The register lists licensed activities and domain names; a mismatch means the site is displaying someone else's licence or none at all. This is the check that makes every other check meaningful.
2. Read the bonus terms before the first deposit, then decide whether the offer is worth having. From 19 January 2026 the wagering multiple on UK-licensed bonus funds cannot exceed ten times, and mixed-product offers are banned. If you cannot find the multiple in a click, assume the worst one.
3. Set a financial limit when prompted, because the prompt is designed to be the default. Under RTS 12E the operator must present limit-setting as default and require an active decision to decline. A limit set at deposit is a limit a player cannot talk themselves out of at 2am.
4. Check the banking method against the licence conditions. Credit cards are banned from 14 April 2020, and e-wallet money must not originate from a credit card. A site that still takes card deposits is either not licensed here or not compliant, and neither is good news.
5. Estimate the worst-case wait before you are in a position to care about it. Read the stated withdrawal timescale and the pending period, then apply the design test: documents requested only at withdrawal, a single-withdrawal rule, or an unstated processing time are the terms that turn a fast payout into a fortnight.
6. Install blocking software and know the exclusion route in advance, not in a bad week. Gamban and BetBlocker are both signposted by Gamstop; BetBlocker says it blocks over 1,368,000 gambling websites and 3,100 apps, is free worldwide and needs no registration, while Gamban's TalkBanStop funding ended on 31 March 2026, leaving it free in Wales and £4.99 a month or £29.99 a year in England and Scotland. A bank gambling block is a useful second layer — the Commission's October 2026 list names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, applied at card level, so each card must be activated separately, and most banks use a 48- or 72-hour cooling-off before gambling transactions resume.

The Schemes That Cover the Country

The licence condition requiring operators to join the national scheme has teeth. Since 31 March 2020 all online gambling operators must be part of Gamstop as a condition of their Commission licence — Social Responsibility Code Provision 3.5.5 states that licensees must participate in the national multi-operator self-exclusion scheme — and in April 2020 the Commission added a requirement to check the entire customer base for registrations at least every 24 hours, which also stopped registered people receiving direct marketing. It enforced that deadline immediately: on 3 April 2020 it suspended the licences of two online operators for failing to integrate by 31 March, under section 118(2) of the Act.

The numbers make the scheme look less like a niche tool and more like standard practice. Gamstop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of the year — over 562,000, with 58,675 registrations in the final six months, an average of 319 a day. Registrations rose 16 per cent year on year in the first half of 2026, with May 2026 setting a record of 12,236 sign-ups, and by July 2026 there were 614,738 consumers on the register, more than one in two of whom had chosen the maximum five-year term. Of the periods selected in 2025: 29 per cent chose 6 months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. Under-25s made up nearly one in three of all registrations in the first half of 2026, a 26 per cent year-on-year increase. The 2025 annual report recorded the gender split as 94.3 per cent male and 5.7 per cent female.

One sentence of the terms deserves more attention than it gets. If a person does not deactivate after their chosen period, Gamstop holds their data through a further automatic seven-year self-exclusion period during which operators are told they were previously excluded. The housekeeping has become substantial enough that the Group no longer reports a lifetime registration total, because the seven-year retention period from the 2018 launch has begun to expire.

Land-based self-exclusion runs on separate schemes. SENSE covers licensed land-based casinos, with a six-month minimum extendable to twelve, removal only in person at a casino during the six-month "Thinking" period that follows the minimum term, and a 24-hour cooling-off. The Commission's May 2026 FOI response put SENSE at 12,445 active self-excluded customers between 1 April 2025 and 1 April 2026, with a further 8,695 enrolled under previous terms subject to auto-removal. Gamstop Betting Shops, formerly MOSES, is telephone-based on 0800 294 2060, covers roughly 6,000 shops with over 60 operators, and applies a fixed 12-month term that cannot be ended early; it recorded 9,075 active customers over the same period. Arcades use schemes run by BACTA and Boomerang Digital, and bingo clubs a scheme run by the Bingo Association.

What the Complaints Actually Say

Complaints data is the least glamorous evidence available and the most useful, because it records what went wrong rather than what was promised. eCOGRA's report for 1 October 2024 to 30 September 2025 covers 911 disputes, 150 of them valid "Deposits & Withdrawals" cases, with an average 31 days to resolve domestic disputes and 17.8 per cent of completed disputes decided in the consumer's favour. Of 499 invalid disputes, 361 — 72.3 per cent — had not been through the operator's internal complaint procedure first, which is a reminder that the route has an order to it. IBAS's report for the same period records 3,721 domestic disputes, 217 of them Banking/Financial, an average completion time of 20 days, 65 consumer complaints upheld by written decision, and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. A near-empty losing column for operators is worth noticing: when the adjudicator rules, the operator generally pays.

The Commission's own numbers on where money goes to die in a dispute are these: complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025, yet the Commission still receives around 2,000 complaints a year about withdrawal delays. A note on its legal shape — the Commission is a regulator, not an ombudsman, and cannot resolve individual complaints or get anyone's money back. It records them and refers disputes to an independent third party. That is a limitation worth knowing before spending an afternoon drafting a complaint to the wrong body, and the government's own 2023 review of gambling legislation recommended creating a Gambling Ombudsman with an expanded ADR remit. It has not happened yet.

Is It Just the UK, or Is This a Global Problem?

No, and that is the strongest argument against treating offshore sites as a British curiosity. Curaçao's own regulator states that the legacy "orange" sub-licence certificates ended on 15 October 2025 and that a historic /JAZ number must not be treated as proof of a current licence, and announced on 7 October 2026 that its previous online gaming portal would not return to service while it works on another way to verify licensed domains. Anjouan's published certificate framework states that certificates which cannot be verified through the public register should not be relied on as evidence of licensing status. Both regulators are telling players that the paperwork they will be shown proves less than it appears to.

The enforcement that reaches across borders is thin. The Commission's first referral to the Visa Operator Scheme came in January 2025 after a test purchase on an unlicensed website, with three more since, and it describes payment data reporting as critical and still early-stage. Estimated time spent by GB consumers on illegal gambling websites ran at 306 million minutes in January 2025, falling to 116 million in June and back to 152 million in July. In the quarter April to June 2025, 108 illegal websites were geo-blocked by their own operators, 22 were removed or suspended by a registrar or host, and 214 came off search engines.

The scale measure is where the argument gets slippery. The Commission's dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, with 311 disrupted in Quarter 2 of 2026-27 and 77 per cent of them showing reduced estimated traffic. Frontier Economics, for the Betting and Gaming Council, conservatively estimated £2.7 billion staked annually online on the black market and suggested up to £4.3 billion a year including illegal in-person venues involving 1.5 million Brits. Yield Sec, for the Campaign for Fairer Gambling, put the GB online market at £8.8 billion gross gaming revenue in 2025 split 91 per cent regulated and 9 per cent unregulated. Three estimates, three methodologies, three sets of clients — and the Commission's own methodology notes it cannot capture activity hidden behind a VPN. Pick any of them and the same conclusion holds: a market big enough that the illegal tail is worth chasing, and not so big that it is the main event.

The Bonus Rules That Actually Bite

Bonus terms are where the difference between two regimes is most visible, because a wagering multiple is a number you can compare and a discretionary clause is not.

The UK cap has a history that explains why it exists. The Commission consulted on an outright ban or a cap at 1, 5 or 10 times, and chose ten, noting that the limit would take out extreme levels where some licensees applied wagering requirements of up to 60 times. From 19 January 2026, Social Responsibility Code 5.1.1 forbids applying wagering requirements over a maximum of ten times, where a wagering requirement means being required to make wagers totalling a particular value for funds to become withdrawable. Under the same code, an incentive cannot include more than one type of gambling product, including where terms are linked and shared. "Bet £5 and get £10 free bet" is compliant; "bet £5 to get 20 free spins" is not; a prize that is itself mixed is not; and an offer where the customer freely chooses which product category to use the bonus on is compliant. Terms must be clear, transparent, fair and readily accessible, and an incentive labelled "high value" or "VIP" must be offered consistently with the licensing objectives.

Offshore, the numbers run in a different direction. Ignition Casino applies a 25× playthrough requirement to casino bonus amounts, expressed as a multiple either of the bonus or of bonus plus deposit, with a contribution chart that gives slots and specialty games 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, Hot Drop Jackpots and live dealer games 0 per cent. BlueChip Casino states that for deposit bonuses the required bet amount is the bonus multiplied by the wager and that the deposit itself is not included in the calculation, reserves the right to limit bonus-derived withdrawals to 300 per cent of the credited bonus amount with the excess voided, and caps bets while wagering at €5 for regular players and €10 for VIPs, rejecting anything above. Ignition's max bet is 20 per cent of the deposit, and failing to observe it, in its words, may result in account closure, forfeit of the bonus and any winnings generated during wagering. Trade comparisons put typical offshore welcome offers at 35×–50× and no-deposit offers at 40×–60× with a €50–€100 cashout cap, though those figures are compiled by the sites selling the offers.

Two structural points do more harm than any multiple. A sticky bonus — non-cashable, removed at cashout — is entirely legal offshore and effectively a one-way revolving door: you can wager with it, you can never withdraw it. And bonus abuse clauses that let the operator decide, after the fact, that your play was low-margin or pattern-seeking transfer a judgement call from the player to the house. UK guidance requires restrictions on promotional play to specify all prohibited types or patterns of play and forbids reserving sole discretion to the operator to decide when play breaches them, keeping fraud and collusion terms separate from promotional ones. That is a structural protection, not a generous one, and it is the sort of thing a comparison table of welcome offers will never show you.

Frequently Asked Questions

How many online gambling sites are there in the UK?

No single figure exists in public data, and anyone offering a precise number is guessing. The Gambling Commission registers licence holders, not website domains, and one licence can cover many domains. What is measured is the illegal side: 586 illegal gambling websites accessible to GB consumers were identified in September 2026, with 311 disrupted in Quarter 2 of 2026-27. The legal side is large enough that the Commission's operator dataset alone, covering roughly the largest operators and about 70 per cent of the online market, reported average monthly active accounts of 13.4 million in January to March 2026.

How many people gamble online in the UK?

Gambling Survey for Great Britain, on 20,775 adults surveyed between January 2025 and January 2026, found 47 per cent had gambled in any form in the past four weeks — 27 per cent once lottery-only participants are excluded. The Commission's operator dataset recorded 13.4 million average monthly active online accounts in January to March 2026, down 1 per cent year on year. On problem gambling, 2.4 per cent scored 8 or more on the PGSI, the third consecutive year in the 2.4–2.7 per cent band.

Can I self-exclude from an offshore casino?

No, and this is the fact that matters most. A Gamstop registration is enforced by operators licensed in Great Britain, and it binds them: the term runs for its full length, cannot be cancelled during it, and remains in place afterwards until the person contacts Gamstop to remove it. An offshore site that takes no UK licence is not part of that scheme, so nothing carries across. Any suggestion that a non-UK site offers access around an exclusion is describing its own absence from the enforcement system.

What are the online gambling rules in the UK on withdrawing winnings?

There is no fixed maximum number of days, and the regime does not pretend otherwise. It relies on the fair-and-open condition 7.1.1, condition 17.1.1 preventing fresh document demands that could have been made earlier, and the prohibition on unfair terms. Reverse withdrawals were banned on 31 October 2021, and no term may cap what a consumer withdraws from the deposit balance. In practice the Commission's data for June to September 2024 found 96.3 per cent of 44.2 million withdrawals cleared automatically.

Do I have to pay tax on online gambling winnings in the UK?

No. Winnings from gambling are not taxed as income for the player in the UK, and the duty falls on the operator instead: the statutory levy, commenced on 6 April 2025, charges 1.1 per cent of previous-year gross gambling yield for all online operators and for software licences, and raised just under £120 million in the year reported. That money is ringfenced for research, prevention and treatment, split 20 per cent to research, 30 per cent to prevention and 50 per cent to treatment.

What does an online gambling site in the UK have to do when I complain?

Two things that are checkable. It must have arrangements for you to refer an unresolved dispute to a Commission-approved ADR provider free of charge once eight weeks have passed from receipt of the complaint, and it must not use terms restricting your right to bring court proceedings. Approved providers include IBAS, eCOGRA, CEDR, ADR Group and ProMediate. Worth knowing: of eCOGRA's 499 invalid disputes in 2024-25, 72.3 per cent had not been through the operator's internal procedure first.

The Short Version

British licensing buys a specific, unglamorous set of constraints — the ten-times wagering cap, the ban on reverse withdrawals, the duty to disclose an insolvency protection rating — while an offshore licence buys the freedom to write its own terms, including terms that build in delay; and since April 2024 the Commission has referred 447,778 Google and Bing URLs and secured 287,961 removals against the sites that operate outside all of it.

If any of this has stopped being theoretical, help is free and immediate: the National Gambling Helpline on 0808 8020 133, run by GamCare, 24 hours a day, every day of the year and not a crisis line, alongside BeGambleAware, Gamblers Anonymous on 0330 094 0322 with around 250 meeting locations, Gam-Anon for families, the NHS National Gambling Clinic on 020 7381 7722, Citizens Advice, and Citizens Advice Scotland's gambling support line on 0800 328 1131 between 10am and 3pm on weekdays. And the final number, which is the one I would put on a wall: of the withdrawals the Commission measured, 96.3 per cent cleared automatically.

Figures and rules stated as of 13.11.2026.