Online Casinos Not on GamStop and what players are signing up for

Sites marketed as online casinos not on GamStop sit outside the British licensing system, so a GamStop self-exclusion has no effect on them and UK consumer protections do not apply. Anyone considering one should check the licence, read the terms, and know that Gambling Commission enforcement is disruption rather than rescue.

GamStop is often typed "gamestop", which is the same scheme and the same block.

The promise hanging off this keyword is speed: money out in minutes, no identity documents at the withdrawal page, no questions. It is a promise about paperwork, mostly, and paperwork is exactly where a British-licensed operator is slowest. Since 31 October 2021 remote operators have been banned from offering reverse withdrawals — the old trick where a pending payout sat on screen as a button inviting you to cancel it. The Gambling Commission's figures covering June to September 2024 record 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent within 24 hours, 0.1 per cent up to 48 hours. That is a decent record, and the complaints still pour in, because the withdrawals that stall are the ones people shout about.

So the appeal is real, and it is also narrow. The part of the trade that advertises under this keyword is not selling faster banking. It is selling absence — absence of the 24-hour customer-base checks, absence of the £5 slot stake limit that came in on 9 April 2025, absence of the £150 financial vulnerability threshold that took effect on 28 February 2025. My view: the industry has learned to dress up deregulation as convenience, and the two are not the same thing. This page looks at the illegal market the way the regulator does, through enforcement notices and traffic numbers, because that is the only angle with hard data behind it.

What the regulator actually does about the sites this keyword sells

The Gambling Commission is a regulator, not a rescue service. It cannot get anyone's money back, and it says so itself: it can record a complaint and point the complainant at an independent third party, and that is the end of it. What its Illegal Markets team does instead is make the sites harder to reach.

Since April 2024 the Commission has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist letters, 774 registrar referrals, 402 host referrals and three payment provider referrals. Over the same period it referred 447,778 Google and Bing URLs and secured 287,961 removals. The interesting number is what happens next. Across 160 illegal gambling websites where traffic data existed, engagement fell by an average of 32 per cent after disruption. Broken down by method, registrar blocks and website suspensions produced the largest average falls, 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission's own reading is that search-engine removal makes a site harder to find without fully blocking access — a fair summary of a fight it is winning slowly.

The tempo has picked up. In the quarter January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. Between April and June 2026 it referred 366 websites, covering 147,721 URLs. Between July and September 2026 it referred 1,835 websites covering 7,677,211 URLs and issued 546 cease and desist notices. Prosecutions, meanwhile, are almost a rounding error: across April 2025 to March 2026 every quarter recorded zero or one prosecution commenced, a total of one. The enforcement model is disruption and, increasingly, payments. Its first referral to Visa came in January 2025 after a test purchase, with three more since.

Say plainly what this means. A site with no Gambling Commission licence is not licensed in Great Britain, whatever certificate it displays in its footer. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, with a maximum of 51 weeks' imprisonment on summary conviction, a fine at level 5, or both; the offence attaches to the provider, not the customer, and it bites whether the equipment sits inside or outside the UK. The Commission's position is blunt: it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence somewhere else. Where to get help if gambling is causing harm: the National Gambling Helpline, run by GamCare, on 0808 8020 133, free and open 24 hours a day, every day of the year; in Wales the number given is 0808 2819 265. GamCare also runs live chat and WhatsApp.

What actually changes for the customer at an online casino not on GamStop

Strip away the marketing and the difference is a list of rules that stop applying. A British licence brings the 24-hour customer-base check against the GamStop register, introduced in April 2020. It brings the credit card ban, effective 14 April 2020, which also obliges operators to ensure e-wallet deposits were not loaded from a credit card. It brings the £2 and £5 online slots stake limits, live since 21 May 2025 and 9 April 2025 respectively, and the 2.5-second minimum game cycle under RTS 14D. It brings the reward rules in force from 19 January 2026, which cap wagering on bonus funds at ten times and forbid mixed-product promotions. None of that reaches a site outside the regime.

What the offshore site brings instead is friction at the exit. The classic pattern is a welcome offer with a wagering multiple that a player only discovers after a win, a maximum cashout clause that voids everything above a multiple of the bonus, a maximum bet while wagering that rejects the very bet that triggered the win, and a verification request that arrives precisely when funds are requested. Note what is absent from that sentence: a stated payout deadline. The Licence Conditions and Codes of Practice set no fixed maximum number of days for a withdrawal. The British regime relies on condition 7.1.1, requiring fair and open terms, condition 17.1.1, which says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier, and the prohibition on terms giving operators sole discretion to void winnings.

Layered on top are terms that build in delay by design. These are not accidents. A term saying a customer may request only one withdrawal at a time and cannot request another until the first is authorised has already been found unfair under the Consumer Rights Act 2015 — it was among the failures behind the £900,000 regulatory settlement announced on 21 October 2026 for one operator. That operator held a British licence. On an unlicensed site, the same term is simply a term.

Where the licences sit for UK online casinos not on GamStop

The licences offshore operators display do exist. They are also cheaper, thinner and further away than a Gambling Commission licence, and examining them one by one is instructive.

Malta

The Malta Gaming Authority requires a B2C licence for any Maltese or EU/EEA entity offering a gaming service from Malta, to a Maltese person, or through a Maltese legal entity. Fees are a one-time non-refundable EUR 5,000 application fee, a non-refundable fixed annual licence fee of EUR 25,000, and gaming tax of 5 per cent of gaming revenue. Minimum paid-up share capital is EUR 100,000 for Type 1 and Type 2 B2C licences and EUR 40,000 for Type 3 and Type 4. A Maltese licence is a serious document; it is simply not a British one, and the MGA publishes a list of Unauthorised URLs precisely because sites claim it falsely — the most recent entries carry notice dates of 30 October 2026.

Curaçao

Curaçao rebuilt its regime under the National Ordinance on Games of Chance, the LOK, which took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory authority. The old master-licence and sub-licence model is gone, and the legacy orange sub-licence certificates of operation ended on 15 October 2025. Licensing activity ceased for the four former master licensors between August 2024 and January 2025. A historic /JAZ number or legacy seal is not proof of a current licence. Fees are a one-time non-refundable EUR 4,592 application fee per B2C licence plus EUR 150 per ultimate beneficial owner, and a total annual B2C fee of EUR 47,450 — a EUR 24,490 licence fee to the National Treasury and a EUR 22,960 supervisory fee to the CGA. Suppliers face full registration from 24 December 2026.

Anjouan

The framework rests on legislation adopted in 2005, including the Anjouan Computer Gaming Licensing Act, and the published schedule is EUR 17,828 for B2C licence issuance and EUR 17,828 for annual renewal, with EUR 500 per additional domain. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; a former attorney-general of the Comoros called the licensing entity "an illegal entity". Anjouan Gaming said in a statement on 10 June 2026 that a licence is not, and has never been presented as, a universal authorisation to operate in every country. Read that twice. It is the regulator conceding the point the marketing obscures.

Kahnawà:ke

The Kahnawà:ke Gaming Commission was established in 1996 and enacted its Regulations concerning Interactive Gaming on 8 July 1999. Licensed operators must be hosted at Mohawk Internet Technologies in the Mohawk Territory. One entity at a time holds the Interactive Gaming Licence, and site operators hold Client Provider Authorizations — 704 Curaçao licences across 698 operators were counted by a third-party register tracker at 03:30 UTC on 6 November 2026, by way of scale comparison, though that figure is not a CGA publication. Kahnawà:ke's rules make self-exclusion permanent and irrevocable and strip a breaching player of deposited and won funds to a charity of the Commission's choosing, which is a striking contrast with the British scheme's fixed terms.

No licence at all

Costa Rica does not operate a comprehensive gambling licensing regime and has no formal framework for issuing licences. The "data processing license" sometimes cited in the trade is not a licence in the strict legal sense. Costa Rica's Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have created a mandatory licensing regime. Under Costa Rican law games where the outcome depends primarily on luck rather than skill are generally prohibited.

The GamStop exclusion rule, and why the keyword keeps circling it

This is the thing the whole topic turns on, so it is worth being exact. Registering with GamStop Online blocks a person from gambling with all online gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. Signing up takes a few minutes; the block may take up to 24 hours to become effective. Once registered, the exclusion cannot be cancelled or deactivated during the period, and it does not lapse at the end of it — it stays in place until the person contacts GamStop to have it removed. Under the terms of use, auto-renewal can only be switched off during the final six months of a five-year minimum exclusion period, and it continues for up to four further five-year periods. If the registration is never deactivated, GamStop holds the data through a further automatic seven-year self-exclusion period, during which operators are told the person was previously excluded.

Since 31 March 2020, participation in GamStop has been a condition of every online operating licence, sitting in the Commission's social responsibility code provision 3.5.5. The Commission suspended the licences of two operators, Dynamic and Sportito, on 3 April 2020 for failing to integrate by the deadline. The scale is not trivial: GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of the year; by July 2026, 614,738 consumers were on the register, with the first half of 2026 showing a 16 per cent year-on-year rise in registrations and May 2026 setting a monthly record of 12,236.

Now the first-time and later distinction. On a British-licensed site, the check is automatic: an operator must check its entire customer base against the register at least every 24 hours, a requirement introduced in April 2020, and a registered person must not receive direct marketing. On a later visit, the person is refused at the door or closed down. On an offshore site, nothing happens at any point, first time or tenth. And note what the Commission said in its industry warning notice of 20 January 2025: unlicensed sites available to GB consumers frequently target customers who have self-excluded via GamStop, and may have inadequate social responsibility and anti-money-laundering controls. It named the targeting. That is the regulator describing the business model in a sentence.

Self-exclusion is not something an offshore site lifts. It stands for its full term and afterwards until the person contacts GamStop. Gamban and BetBlocker are both signposted by GamStop for an extra layer, on phones, tablets and computers. Bank gambling blocks, listed by the Commission as available from Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, work at card level against gambling merchant category codes, must be activated on each card, and usually carry a 48- or 72-hour cooling-off period before gambling transactions are permitted again.

Five signs that an operator or service can be trusted

None of these is a test involving money. Every one of them is a reading exercise, which is the point: a careful player judges the paperwork before the lobby.

The licence number returns a live entry on the regulator's own register

A genuine certificate resolves. A Curaçao Certificate of Operation Seal must redirect to the official registry, and if the certificate behind it displays a different domain from the site being accessed, the site is showing another operator's paperwork or none at all. Anjouan certificates carry a unique licence number and a QR code linking to a public register; anything that cannot be verified there should not be relied upon. The Gambling Commission tells consumers to click through to its own public register and check whether the site's activities and domain names match. Quick check: open the register in a second tab, search the exact domain, and see whether the entry exists.

The terms state when a withdrawal is actually paid

Read the withdrawal clause specifically, not the banking page. A site that never commits to a timescale, or that reserves the right to review "any withdrawal" before payment, has said what it intends. The Commission says there is no valid reason to delay a payout where it holds no regulatory concerns about a customer. Quick check: search the terms for the withdrawal section and count how many sentences contain a time period.

Bonus conditions are complete before the deposit, not after

Significant conditions — deposit, wagering and withdrawal requirements — must be made clear, and for online ads the full terms should be no more than one click away. If the wagering multiple, the maximum cashout and the maximum bet while wagering are not visible before a deposit is made, the omission is the product. Quick check: find the maximum cashout clause; if it is missing from the promotional page and present in the general terms, treat the offer as a trap.

Complaints go to a named dispute body, not to a support inbox

British licensees must let customers refer a dispute to an approved alternative dispute resolution provider free of charge if it is unresolved after eight weeks; the approved list includes ADR Group, Pegasus ADR Service, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, with 150 valid disputes categorised as "Deposits & Withdrawals", an average of 31 days to resolve domestic disputes, and 17.8 per cent of completed disputes ruled in the consumer's favour. IBAS's report for 2024-25 records 3,721 domestic disputes, an average completion time of 20 days, and 100 per cent operator compliance with decisions in the consumer's favour. Quick check: look for a named ADR provider in the terms, and note that ADR providers will not accept complaints about customer service or about a refusal to accept a bet.

Fund protection is disclosed in writing, and the rating is specific

Under licence condition 4.2.1 an operator holding customer funds must say clearly whether those funds are protected on insolvency, at what level and by what method, in writing, on the first deposit and after any change to the terms. The three ratings are "not protected", "medium protection" and "high protection", and an operator rated not protected must remind the customer every six months, stating the value of funds held. Even a separate client account does not guarantee repayment, and operators may lawfully hold customer money in overseas accounts. Quick check: read the insolvency paragraph and look for which of the three words appears.

Six steps for judging a site before trusting it

1. Find the licence, then verify it at source. Open the regulator's register and confirm the exact domain appears. A certificate image proves nothing on its own — Curaçao certificates are domain-specific, and mismatch means the paperwork belongs to someone else.
2. Read the withdrawal clause and the maximum cashout clause together. The first tells you when you may be paid, the second tells you how much. A cashout cap expressed as a percentage of the bonus, with any excess voided, is a signal about how the operator treats winners.
3. Check the wagering multiple, the game-weighting table and the maximum bet while wagering. A contribution chart that assigns slots 100 per cent but roulette 5 per cent or live dealer zero is not a detail; it decides whether the requirement can be met at all.
4. Look for the dispute route and the self-exclusion route. A named ADR provider and a working self-exclusion mechanism are marks of a serious operation. A site with neither, or with self-exclusion that only lasts as long as the account is idle, has no exit.
5. Set the account limits before the first deposit, not after. British businesses must prompt for a financial limit before a first deposit under RTS 12E — presented as the default, with an active action required to decline — and must remind customers every six months to review their account and transaction information. Do the same on any site that does not prompt.
6. Read the clause on account closure and forfeiture. Terms giving the operator sole discretion — "may" or "reserve the right" — to void winnings have been found unfair under the Consumer Rights Act 2015, and a bonus term of exactly that shape contributed to a £170,000 fine in July 2025. If the terms say the operator may close an account and keep the balance, that is the answer.

Frequently Asked Questions about casinos off the GamStop register

Are online casinos not on GamStop legal in the UK?

Using them is not the offence; providing them is. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, with up to 51 weeks' imprisonment on summary conviction, a fine at level 5, or both. The Gambling Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator is licensed elsewhere. The customer commits no offence by playing.

Reasons for searching for a uk online casino not on GamStop?

Because the scheme's block is absolute on British-licensed sites and lasts longer than people expect. A GamStop registration stands for six months to five years and then remains in place until the person contacts GamStop to remove it. The Commission said in a warning notice on 20 January 2025 that unlicensed sites often target customers who have self-excluded, and that their social responsibility and anti-money-laundering controls may be inadequate. That is a description of the market, not an endorsement of it.

Do offshore sites pay out faster than British ones?

Not systematically. British operators' own data covering June to September 2024 shows 96.3 per cent of 44.2 million withdrawals cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent up to 48 hours. There is no equivalent published dataset for unlicensed sites, because nobody collects it. What offshore terms frequently add is friction at the exit — a maximum cashout clause, a single-withdrawal-at-a-time rule, or a document request triggered by the withdrawal itself.

Can a self-exclusion be moved across to an offshore site?

No. GamStop Online blocks access to gambling websites and apps licensed in Great Britain only, and can only exclude a person from participating operators. It cannot prevent access to services run by organisations that do not participate in the scheme. Land-based self-exclusion is separate again: the Gambling Commission states that GAMSTOP Online covers online operators, while schemes such as SENSE cover casinos, Gamstop Betting Shops covers bookmakers, and separate arrangements cover arcades and bingo.

What happens if an unlicensed site keeps a winning balance?

Very little in the way of recourse, and the honest answer is that the money is usually gone. The Commission is a regulator rather than an ombudsman and cannot resolve individual complaints or help consumers recover funds, though it records every complaint. British players have a route to an approved dispute resolution provider free of charge after eight weeks; players on an unlicensed site have a support inbox. That asymmetry is the whole argument.

Is a crypto casino outside the UK a better option than an unlicensed card site?

It is a different set of risks, not fewer. Payment friction falls: TRON's TRC-20 USDT transfers cost about 65,000 Energy to an existing wallet and about 130,000 to a new one, roughly 13 and 26 TRX burned without staked Energy, and Bitcoin averages one block every ten minutes — with only about a 63 per cent chance of a block inside any given ten-minute window. What does not change is jurisdiction. A licence in Curaçao, Anjouan or Kahnawà:ke is not a British licence.

Casinos outside the GamStop scheme

Search for these sites and the market hands over a choice dressed as a shortcut: a block that cannot be lifted, against a site that will not lift it and will not be held to anything either. The regulator's answer is disruption rather than rescue — engagement down an average of 32 per cent across 160 disrupted sites, registrar blocks cutting it by 91 per cent, and one prosecution commenced in the whole of April 2025 to March 2026. Help, if it is needed, is on 0808 8020 133, free and open 24 hours a day.