New Gambling Sites UK 2026 Licence Protections

Updated November 2026
Licensed
usAvailable in US
Fast payouts
18+ Only

A new gambling site UK players can use is one with a licence from the Gambling Commission, and it is checked against GamStop every 24 hours, offers withdrawals without a reverse option, and can have £900,000 wrung out of it for slow payouts. An offshore newcomer holds none of those obligations.

I have spent years reading the Commission's enforcement notices and the terms and conditions nobody reads, and the ritual in this corner of the market is always the same. A site launches, buys a licence from a small island, advertises a welcome bonus with an eye-catching number, and waits. The launch weeks are the interesting part, because that is when the paperwork is thin, the payout desk is understaffed and the bonus terms have not yet been tested by anyone with a grievance.

The phrase itself is worth slowing down over. "New" describes the site; "gambling" describes what it does; "UK" is the word doing all the work. It can mean licensed in Great Britain, which is a real, enforceable status with a public register behind it. Or it can mean a site with a dot-com address, British pounds, British sports on the front page and a licence from somewhere else entirely — a place where the regulator has never heard of the player and never will. Two letters, and the difference between them decides who you complain to when the withdrawal stalls.

This page takes the second reading seriously. Below, I look at what a Gambling Commission licence compels a new operator to do, where offshore licences sit against that standard, what the numbers say about how often things go wrong, and how a careful player sorts one from the other in about ten minutes.

Table of Contents9

New Gambling Sites UK 2026 Benchmark

The checkable number for this topic comes from the regulator's own complaint data. The Commission's Contact Centre logged 1,791 complaints coded "Withdrawals and/or financial transactions" in the year to December 2025, down from 2,416 in the year to December 2022. Its 2024–25 annual report is blunter: issues relating to withdrawals continue to be the cause of most of the complaints it receives.

That is the benchmark. Not the size of a bonus, not the number of games, not the colour of the logo — the payout queue. And it is a benchmark set by British-licensed operators, who are the only ones the Commission can count, fine or name.

The good news inside the same data is real. Commission figures covering June to September 2024 record 44.2 million withdrawals by customers of large online operators in that period: 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours. Earlier data from some of the largest operators showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours.

So the British standard is roughly: thousands of payouts a day, almost all of them without a human touching them. Hold that figure next to a new site's terms and conditions before you hold it next to its bonus.

New UK Gambling Sites and What the Licence Requires

A new UK gambling site earns that description by holding an operating licence from the Gambling Commission. Everything else on this page flows from that single fact. Since 31 March 2020 every online operator must be part of GamStop as a condition of its licence, under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice. (The scheme is often typed "gamestop" — a natural slip, since the word "game" suggests itself.)

Since April 2020 operators must also check their entire customer base against the register at least every 24 hours, which has the useful side effect of stopping registered people receiving direct marketing. Two operators found that out the hard way: on 3 April 2020 the Commission suspended the licences of Dynamic, an operator, and Sportito for failing to integrate the scheme by the deadline, using powers under section 118(2) of the Gambling Act 2005.

The rest of the standard is a list of things a new Gambling Commission licensee simply cannot do:

  • No credit cards. The ban took effect on 14 April 2020 as licence condition 6.1.2, and extends to e-wallets whose balance was loaded from a credit card.
  • No reverse withdrawals. Requirement 14B has been in force since 31 October 2021: consumers must not be given the option to cancel a withdrawal request.
  • No maximum withdrawal limit on the deposit balance. The Commission's example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week".
  • No confiscating money on the grounds that identity was never verified.
  • Stake limits on slots. The £5 maximum per game cycle for adults went live on 9 April 2025, and the £2 limit for 18-to-24s on 21 May 2025.
  • Wagering caps. Since 19 January 2026 wagering requirements on bonus funds are capped at ten times, and mixed-product promotions are banned outright.
  • Financial limit prompts. Since 31 October 2025 every operator must prompt a customer to set a financial limit before a first deposit.

That is a lot of restraint imposed from outside. An offshore newcomer has none of it.

Offshore Gambling Sites Compared

New online gambling sites UK players find through search are frequently not licensed here at all. The Commission's position is unambiguous: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction.

The scale is not trivial. The Commission's analysis, published 5 November 2026, estimates that 0.6 per cent of all respondents, non-gamblers included, engaged with an illegal gambling website in the previous four weeks and a further 0.4 per cent within 12 months. Narrow that to people who had gambled online in the past four weeks and the figure is 2.5 per cent, with another 1.5 per cent having done so in the past year. Its dashboard identified 586 illegal websites accessible to GB consumers in September 2026.

The regulators behind the sites are a mixed bag, and the difference matters.

Curaçao

Curaçao is mid-reform. The National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence model with direct licensing by the Curaçao Gaming Authority, and the legacy "orange" sub-licence certificates ended on 15 October 2025. A historic /JAZ number is no longer proof of anything current. Today a B2C licence costs a one-time non-refundable EUR 4,592 to apply for and EUR 47,450 a year in total fees. The CGA's own certification policy warns that if clicking a Certificate of Operation seal does not redirect to cert.cga.cw, the site is not authorised — and that a certificate showing someone else's domain means the site is displaying another operator's paperwork.

Anjouan

Anjouan, part of the Comoros, licenses through Anjouan Licensing Services Inc. The published fee is EUR 17,828 for B2C issuance and the same again annually. The regulator states that no licensing authority can exempt an operator from local law where local authorisation is required — a statement it issued on 10 June 2026 that reads, in context, like a disclaimer. An ABC News investigation published on 31 December 2025 reported that a former attorney-general of the Comoros called the licensing entity "an illegal entity". The regulator's own verification framework says a certificate that cannot be checked against its public register should not be relied on.

Kahnawà:ke

The Kahnawà:ke Gaming Commission has regulated interactive gaming since 1999 and licenses client providers through a single Interactive Gaming Licence held by one entity at a time. Notably, its rules require self-exclusion to be presented as permanent and irrevocable, and a player who breaches a self-exclusion prohibition forfeits deposited and won funds to a charity chosen by the Commission.

Malta and Costa Rica

Malta's Gaming Authority is a genuinely serious regulator with a EUR 25,000 annual licence fee, a 5 per cent gaming tax and a published list of unauthorised URLs. It is not the Gambling Commission, and an MGA licence is not a British one. Costa Rica is the bottom of the pile: it operates no comprehensive gambling licensing regime at all, the "data processing license" sold by intermediaries is not a licence in the legal sense, and its Legislative Assembly rejected the bill that would have created one in early 2026.

Regulators, Compared

Licence / regulatorAnnual cost to the operatorSelf-exclusion link to GamStopWhere the player complainsPractical value to a GB player
Gambling Commission (UK)Levy at 1.1% of previous-year GGY, plus licence feesMandatory — checked at least every 24 hoursOperator, then an approved ADR body free of chargeHighest: full British protections apply
Malta Gaming AuthorityEUR 25,000 fixed annual licence fee plus 5% gaming taxNoneMGA complaint form, in English or MalteseModerate: real supervision, no GB protection
Curaçao Gaming AuthorityEUR 47,450 total annual B2C feeNoneThe operator's designated dispute routeLimited: a regulator mid-transition
AnjouanEUR 17,828 annual renewalNoneAnjouan-approved ADR provider, after 30 daysLow
Kahnawà:keUSD 20,000 annual CPA feeIts own permanent scheme, not GamStopA full-time Dispute Resolution OfficerLow for GB players
Costa RicaNo licensing regimeNoneNowhere statutoryNone

One row above is the whole argument. Only the first line joins that player to a scheme that half a million people use.

Identity Verification Standards

If there is a single mechanism that decides whether a new site is worth your time, it is identity verification — and, specifically, when it happens.

A Gambling Commission licensee must verify name, address and date of birth before a customer is allowed to gamble. Many do it at registration by matching the account against credit reference agencies and the electoral roll, and that is usually instant. The Commission allows a variant it calls the "hybrid approach": a remote casino may identify the customer and verify age at registration and defer full verification until a threshold is triggered. Under the money-laundering rules the threshold for a remote casino is €2,000, whether in a single transaction or in transactions that appear to be linked.

Then there is condition 17.1.1, which is the bit that annoys operators. A customer's request to withdraw must not result in a demand for extra information if the licensee could reasonably have asked for it earlier. It does not override a genuine anti-money-laundering obligation, but it kills the old trick of waving a withdrawal through a document check that could have happened at sign-up. The Commission has been explicit that delaying a payout because of insufficient ID may be a breach of the condition, and that over a quarter of the complaints reaching its Contact Centre concern identity verification — most often raised by customers asked for documents only at the point of withdrawal. Its licence condition 7.1.1 requires terms to be fair under the Consumer Rights Act 2015, and the CMA's undertakings from its 2016–2019 investigation say the same thing in plainer English: no maximum withdrawal limits, no confiscation for missing identity documents, no confiscation after inactivity.

The warning signs, in either direction:

  • Documents demanded only when you try to withdraw. British licensees have been told in terms that this is not acceptable. Offshore, there is no rule against it.
  • A verification partner you have never heard of, asking for a selfie. The Commission has flagged concern about "fuzzy matching" and onboarding customers on partial verification.
  • An account opened in a nickname or with initials. The Commission has said onboarding on inaccurate details is not sufficient, and has specifically warned that a middle name used instead of a forename can produce a mismatch against GamStop records — quietly defeating a self-exclusion the person asked for.
  • A fee to process a withdrawal. Cost-reflective processing fees are permitted in Britain; they must be clearly disclosed before you deposit. Offshore, an unmetered "administration" charge is a warning, not a policy.
  • A payout held for "review" with no explanation. If there are no regulatory concerns, the Commission's view is that there is no valid reason to delay a payout, and operators should say why.

Verification is not the villain here. The villain is verification deployed as a brake rather than a gate.

Five Signs a New Operator Can Be Trusted

These are the five I would check, in this order, on any site launched in the last year or two.

The licence is on the regulator's public register, and the domains match

Every British-licensed operator appears on the Gambling Commission's register, and the Commission itself advises consumers to click through and check that the site's activities and domain names match what is listed. A licence certificate displayed in a footer proves nothing; the register does. Offshore, look for a Certificate of Operation that resolves to the regulator's own verification domain — for Curaçao, cert.cga.cw — and check the certificate shows this domain, not another operator's.

The terms state the customer-funds rating, and the first-deposit disclosure was acknowledged

British licensees must choose one of three ratings — "not protected", "medium protection" or "high protection" — state which applies in their terms, and give the disclosure in writing before the customer can gamble, with a reminder every six months if funds are not protected. Keeping customer money in a separate client account does not mean you get it back if the operator fails, and operators are permitted to hold it in overseas bank accounts. Check: search the terms for the word "insolvency". If it is absent, stop.

There is a named ADR provider, and it takes gambling disputes

British licensees must let customers refer an unresolved dispute to an approved ADR entity free of charge if it is not settled within eight weeks. The approved list includes IBAS and eCOGRA, and only Commission-approved providers may be used. IBAS handled 3,721 domestic disputes in 2024–25, of which 217 were banking or financial disputes, with an average completion time of 20 days and 100 per cent operator compliance with decisions in the customer's favour in both 2023–24 and 2024–25. Check: the provider should be named in the terms with contact details. If the site names none, there is no route.

GamStop registration closes the account properly

Under the LCCP a licensee must close the account of anyone who has entered a self-exclusion agreement and return any funds held — and it is expressly not enough merely to stop the person withdrawing while still accepting wagers. Check: register a self-exclusion and see whether the account is closed and the balance returned, or merely blocked at the deposit screen. And know the term: a GamStop exclusion runs for its full chosen period and then stays in place until the person contacts GamStop to remove it.

Bonus terms are readable, capped and not the point of the offer

Since 19 January 2026 British licensees cannot apply wagering requirements above ten times, and cannot mix gambling products within one incentive. Significant conditions must be clear and, for online offers, displayed in full no more than one click away. Check: find the maximum cashout clause and the maximum bet while wagering. A cap on what you may withdraw from bonus winnings is standard offshore and restricted in Britain. If the headline number is the only number on the page, the offer is the product.

How to Judge a New Site Before Depositing

Six steps, in order. None of them require an account.

  1. Find the operator on the Gambling Commission's public register and confirm the trading name and the exact domain. Reason: a licence is granted to a company for named domains, and a logo in a footer is copy-paste, not evidence. This one step eliminates most of the field.
  2. Read the withdrawal section of the terms before the bonus section. Reason: the bonus is designed to be read and the payout terms are designed to be skimmed. Look for maximum withdrawal limits, processing fees, "sole discretion" wording and any clause letting the operator void winnings.
  3. Check whether a withdrawal can be cancelled once requested. Reason: reverse withdrawals have been banned in Britain since 31 October 2021 precisely because the temptation to reverse a payout is a real harm. Its presence offshore tells you which rules apply.
  4. Look for the dispute route and the ADR provider by name. Reason: the moment a dispute exists is not the moment to discover there is nobody to escalate to. In Britain the route runs through the operator's own complaints procedure first, which it must complete within eight weeks, then to an approved ADR entity free of charge.
  5. Search the terms for "insolvency" and for the customer-funds rating. Reason: it tells you whether your balance is protected, and British operators rated "not protected" must remind you of it every six months. An offshore site with no rating at all is telling you the same thing less politely.
  6. Settle the self-exclusion question in advance. Reason: a GamStop registration blocks gambling with British-licensed operators for six months, one year, five years or five years with auto-renewal, and cannot be cancelled during the term. It holds for its full period and then remains in place until the person contacts GamStop to remove it. It is not a lever to be pulled and released.

If the checks fail at step one, nothing after it is worth doing.

Where the British Rules Beat the Offshore Ones, and Where They Do Not

Offshore sites are not licensed in Great Britain, and it needs saying plainly: the Gambling Commission cannot regulate a website it has not licensed, UK protections do not apply to it, and the scheme that protects players here does not reach it. An offshore casino is not a shortcut or a loophole, and it is never a way round a self-exclusion. A GamStop registration blocks gambling with British-licensed operators for its full term, and then stays in place until the person contacts GamStop to remove it. Anyone who suggests otherwise is selling something.

The asymmetry is not only about rules. It is about appetite. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease-and-desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites with traffic data it measured an average 32 per cent fall in engagement after disruption, with registrar blocks and website suspensions each producing roughly a 91 per cent drop and GEO IP blocking 60 per cent — search-engine removal, by contrast, only 30 per cent on Google. It also made its first referral to Visa in January 2025 after a test purchase.

Where the British system is weaker is on outcomes, not rules. A Dispute Resolution Officer at Kahnawà:ke can order that a self-exclusion breacher's funds go to charity; the Commission is a regulator and not an ombudsman, so it cannot get an individual's money back. It records complaints and refers disputes elsewhere. The remedy is the ADR route, and ADR providers will not hear complaints about customer service or the refusal of a bet. On the numbers they publish, consumers do not win most disputes: eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which 150 valid disputes concerned deposits and withdrawals, an average of 31 days to resolve domestic disputes, and 17.8 per cent ruled in the consumer's favour. IBAS upheld 65 consumer complaints by written decision over the same period.

What the British licence does give you that no offshore one does is the front end: the ban on reverse withdrawals, the ban on credit cards, the ten-times wagering cap, the 24-hour GamStop check, mandatory financial limit prompts, stake limits, and access to free dispute resolution. Those are the reasons the two-letter word matters.

Treatment and advice in Great Britain are free and do not care which licence you played under. The National Gambling Helpline, run by GamCare, is on 0808 8020 133, 24 hours a day, every day of the year; in Wales the number given is 0808 2819 265. GamCare also runs live chat, WhatsApp and a peer-support chatroom. BeGambleAware, the public brand of the charity GambleAware, directs people to the same helpline and its online chat. Gamblers Anonymous England, Wales & Ulster can be reached on 0330 094 0322 and runs around 250 meeting locations with no appointment needed. NHS England had opened 15 specialist gambling clinics across England by December 2024, and integrated care boards commission eight regional NHS gambling services. Citizens Advice Scotland runs a gambling support line on 0800 328 1131, Monday to Friday, 10am to 3pm.

Frequently Asked Questions

Are new gambling sites UK players can use always British-licensed?

No. The phrase describes a marketing category, not a legal status. A site can take pound sterling, list British football and still hold a licence from Curaçao, Anjouan or Kahnawà:ke. The Commission's remit covers only sites that trade or advertise to customers in Great Britain and hold a Commission licence, so checking the public register — and confirming the domain matches — is the only reliable test.

How quickly should a new site pay out?

There is no fixed deadline in the rules, which surprises people. The LCCP sets no maximum number of days, relying instead on fair-and-open terms, the identity-verification condition and the prohibition on unfair terms. In practice the British record is strong: of 44.2 million withdrawals recorded between June and September 2024, 96.3 per cent cleared automatically and 0.1 per cent took up to 48 hours. Two days is a reasonable expectation to hold a site to.

What documents can a new site ask me for?

British operators typically verify electronically against credit reference agencies and the electoral roll, in which case none. If those fail, expect a passport or driving licence and a household bill. The Commission has not specified which documents businesses should request, and has no stated policy on redacted documents. The important protection is timing: a request for information at withdrawal that could have been made at sign-up sits awkwardly with condition 17.1.1.

What is the wagering cap on bonuses, and does it apply offshore?

Since 19 January 2026 British licensees must not apply wagering requirements above ten times the bonus, and may not mix products within one incentive. The Commission chose a cap over a ban precisely because some licensees had been applying up to 60 times. Offshore operators are not bound by it — trade coverage puts their welcome offers typically at 25x to 40x — so the British cap is a genuine advantage of the licensed market rather than a formality.

Why is the year 2026 a strange one for judging new sites?

Because a great many rules all landed at once and some are still bedding in. Credit card bans, reverse-withdrawal bans and the 24-hour GamStop check are settled. But the bonus cap arrived on 19 January 2026, financial vulnerability checks only reached their £150 threshold on 28 February 2025, and Financial Risk Assessments announced on 7 July 2026 are being introduced in stages, starting at £5,000 net deposits in a rolling 24-hour period. Terms written before those dates may not have caught up.

What happens if I self-exclude and then want to play again?

The exclusion holds for the full period chosen — six months, one year, five years, or five years with auto-renewal — and cannot be cancelled while it runs. When the term ends it does not lapse automatically: it remains in place until the person contacts GamStop to remove it. If they do not, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded.

The Licence Is the Product

The lesson of this market is not that new is bad or offshore is wicked; it is that the only word in new gambling sites uk with legal force is the two-letter one, and it is the one most often doing nothing at all.

That is the case for reading a launch like a contract rather than an advert. Every protection the British system offers a player — the automatic payout, the capped wagering requirement, the closed account after a self-exclusion, the free route to arbitration — is a licence condition, and a licence condition is only as wide as the licence. On 21 October 2026 the Commission announced that an operator, which runs seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals, among them a term limiting customers to one withdrawal request at a time. A nine-hundred-thousand-pound payout for a clause about queuing. That is what a licence with teeth costs, and no offshore newcomer has bought one.

Help is free and one call away on 0808 8020 133, any hour of the day or night.

Material created by the team fastpayoutcasinoexpert.com