Gambling Not on GamStop and the Limits That Decide Everything

Gambling not on GamStop means sites outside the UK's self-exclusion scheme, almost always licensed offshore and not by the Gambling Commission. They are legal to run in their own jurisdiction and illegal to offer to British customers without a Commission licence. The brief answer: they exist, they take UK players, and the limits they set on stakes, deposits and withdrawals are the clearest sign of what a player is dealing with.

I have been reading offshore casino terms and conditions for a living for longer than I would like to admit, and I can tell you the marketing tells you nothing. Every one of these sites promises a bigger bonus and a looser leash than the last. The terms and conditions tell you the truth, and they tell it in the dullest possible language, which is exactly why so few people read them.

The limits are where that truth lives. A bonus capped at 10× wagering is a different animal from one capped at 40×. A casino that lets a player withdraw £10,000 in one go is a different business from one that quietly caps outflows at £2,000 a week and calls it a processing rule. Stake ceilings, deposit ceilings, withdrawal ceilings — these three numbers describe an operator's character better than any about-us page.

That is the lens for this page. Not which site has the shiniest lobby, but what it permits. Offshore sites are discussed here as what they are: unlicensed in Great Britain, outside UK protections, and answerable only to the regulator that issued their paperwork — sometimes a substantial one, sometimes a certificate mill. Anyone weighing up the difference should read the limits first, because they are the one part of the deal that cannot be undone by an apology email.

GamStop itself is the national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited and free to use. It is often typed "gamestop", a slip the word "game" invites. Registration blocks a person from every online operator licensed in Great Britain for six months, one year, five years, or five years with auto-renewal, and it does not lapse quietly at the end: the exclusion stays in place after the chosen term until the person contacts GamStop to remove it. There is no early exit. Reports in 2025 and 2026 suggest the scheme was renamed Gamstop Online in November 2025 following a website update, and its own annual report devotes a section to refusing early removals — that part is reported rather than something I can point at a regulator page for.

Offshore Sites and UK Licence Limits

The first thing to get straight is the legal position, because it is frequently muddled in the comments under any article like this one.

Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether those facilities are provided wholly or partly by remote communication, or whether they are provided inside or outside the UK. The Gambling Commission has stated plainly, most recently in October 2024, that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission — including where the operator holds a licence in another jurisdiction. On summary conviction that carries up to 51 weeks' imprisonment, a fine up to level 5 on the standard scale, or both, with a six-month term in Scotland.

Note where the offence sits. It attaches to the operator. The Commission's own summary of offences lists providing gambling facilities in Great Britain without a relevant licence as an offence by the operator under section 33, and the offences concerning children under sections 47 and 49 are framed around inviting, causing or permitting. Adult consumers are not the target of the provision. That distinction is not a green light; it is simply how the Act is drawn, and the enforcement consequence falls elsewhere.

It falls on the sites. Since April 2024 the Commission's Illegal Markets team had issued 3,140 cease-and-desist and disruption notices by October 2025 — 2,032 cease-and-desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — and referred 447,778 search-engine URLs, securing 287,961 removals. Across 160 sites with traffic data, engagement fell by an average of 32 per cent afterwards. Registrar blocks and website suspensions did the heavy lifting: 91 per cent average falls in engagement each, against 60 per cent for GEO IP blocking and 30 per cent for Google removal. The Commission's own conclusion is that search-engine removal makes a site harder to find without blocking access, which is why a determined visitor still finds one.

The Commission's estimate of what unlicensed sites mean for limits is the useful part here. British-licensed operators now work inside a set of caps: slots stakes capped at £5 per game cycle since 9 April 2025 and £2 for adults aged 18 to 24 since 21 May 2025; credit cards banned for gambling since 14 April 2020; a mandatory financial-limit prompt before a first deposit since 31 October 2025; a bonus wagering cap of 10× and a ban on mixed-product promotions from 19 January 2026. Offshore, none of that applies. That is the entire commercial proposition, and it cuts both ways: no stake ceiling for someone who wants to bet £20 a spin, and no withdrawal ceiling either, so no protection when the operator decides the outflow has been generous enough lately.

Where the money goes is not trivial. Commission analysis published 5 November 2026 estimated that among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent in the past twelve months. Set against 586 illegal sites identified as accessible to GB consumers in September 2026, that is a small share of a very large market. Elsewhere the numbers are contested: H2 Gambling Capital put UK stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, while Frontier Economics for the Betting and Gaming Council estimated £2.7 billion staked annually online on the black market, and Yield Sec put the unregulated share of the GB online market at 9 per cent in 2025. When three reputable outfits disagree by a factor of six, publish the range and drop the confident headline.

What a Self-Exclusion Does and Does Not Reach

GamStop blocks accounts with operators licensed in Great Britain and nobody else. Its own terms say it can only exclude from participating operators and cannot prevent access to gambling run by organisations that do not participate. Since 31 March 2020 participation has been compulsory for online operators as a licence condition, sitting in the Commission's Licence Conditions and Codes of Practice at social responsibility code provision 3.5.5 — "Licensees must participate in the national multi-operator self-exclusion scheme." From April 2020 operators also had to check their entire customer base against the register at least every 24 hours, which incidentally stopped registered people receiving direct marketing.

The Commission suspended the licences of two online operators, Dynamic and Sportito, on 3 April 2020 for failing to integrate by the deadline. That is what a licence condition with teeth looks like.

Offshore sites are a separate matter. An operator holding no Commission licence has no corresponding obligation, and no way to check a name against a register it is not connected to. It is worth being precise about what that means in practice: a person on the register who opens an offshore account is not evading a technicality, they are gambling somewhere the safeguard was never designed to reach. The Commission's January 2025 industry warning notice was blunt about the pattern — licensed operators' casino games turning up on unlicensed sites that often target customers who have self-excluded, with weak social responsibility and anti-money-laundering controls. Reports in the trade press put the point more simply, and it is consistent with GamStop's own terms, though I have not seen a regulator page say it in as many words: offshore sites are not connected to the scheme and are not covered by it. Treat that as well-sourced rather than official.

The land-based side has its own architecture, and the contrast is instructive. SENSE covers licensed land-based casinos, with a minimum six-month exclusion extendable to twelve, removal requestable only in person at a casino during the six-month "Thinking" period that follows, and a 24-hour cooling-off period. The Commission's May 2026 FOI response put active SENSE customers at 12,445 between 1 April 2025 and 1 April 2026. Gamstop Betting Shops, formerly MOSES, is telephone-based on 0800 294 2060 with a fixed twelve-month term that cannot be ended early, covering over 60 operators and approximately 6,000 shops, with 9,075 active customers in the same period. Kahnawake, by contrast, makes its voluntary self-exclusion permanent and irrevocable and forfeits funds to charity if a player breaches it — a rule with an appealingly Old Testament quality, and one that shows how much variety sits behind the single word "offshore".

If any of this is landing close to home, help is free and does not depend on which site a person uses. The National Gambling Helpline is run by GamCare on 0808 8020 133, 24 hours a day, every day of the year, and the same number reaches live chat and WhatsApp. In Wales the number given is 0808 2819 265. Citizens Advice Scotland runs a gambling support advice line on 0800 328 1131, Monday to Friday 10am to 3pm. None of them will ask which licence the site held.

Limits on Stakes, Deposits and Withdrawals in the Table

Here is the comparison that matters, and note the framing: by limit type, not by brand. A single number tells a player almost nothing, because the same figure means different things depending on where it appears.

Three of those rows deserve a second look because they are where the real money changes hands.

The stake ceiling is the one the offshore pitch is built on. A £5 maximum per game cycle applies to online slots only and not to roulette or blackjack, which surprises people. Ten pounds a spin is unremarkable in a regulated market's private high-limit room, and it is the sort of figure that gets quoted in offshore advertising as though it were freedom. It is freedom of a particular kind, and it comes with a minimum 2.5 seconds between game cycles in the British market that no offshore site has to observe.

The wagering cap is the one most misrepresented. Ten times is a hard ceiling for a British licence since 19 January 2026, delivered by amending social responsibility code 5.1.1. The Commission chose a cap over an outright ban after consulting on thresholds of 1, 5 or 10 times, and its stated reason was that licensees would otherwise probably introduce terms preventing customers cashing out bonuses. It also said the limit would "take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore, 25× is unremarkable: one operator's published terms state a 25× playthrough, with slots counting 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer and jackpot games counting nothing at all. A player who spends an evening on live blackjack has contributed a tenth of their stakes towards clearing the bonus. That is not a hidden clause; it is a published one, in a table, on a page nobody opens.

The maximum withdrawal from bonus winnings is the sharpest of the three and gets its own treatment below.

Deposit and Financial Checks Requirements in the UK

Since 31 October 2025 every gambling business must prompt a customer to set a financial limit before their first deposit, make that limit easy to review and change, and remind customers every six months to look at their account and transaction information. Under RTS 12E the prompt is the default and the customer has to take an action to decline and confirm it.

Financial vulnerability checks became a licensing requirement in August 2024 at a threshold of £500 net deposits over a rolling 30 days, lowered to £150 effective 28 February 2025. In the three months after introduction, operators ran them on 7 per cent of active customer accounts on average, and 78 per cent of checks returned within 10 minutes with a further 10 per cent within two hours. The checks may only use publicly available information about risk flags such as a bankruptcy order, County Court Judgment, Individual Voluntary Arrangement, High Court Judgment, Administrative Order or Debt Relief Order. That is a narrow list, and I would rather it were narrower still — but it is not a bank statement, whatever the rumour mill says.

Financial Risk Assessments are a separate measure, announced on 7 July 2026 and being introduced in stages, starting with the largest operators at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over, and £2,500 for under-25s. At the final stage the thresholds become £1,000 in 24 hours or £3,000 over 90 days for adults, and £750 or £2,000 for under-25s. The £5,000 first-stage figure is a spend pattern fewer than 0.5 per cent of customers exceed, and the pilot found 97 per cent of customers spending above the thresholds could be assessed without friction, against the 80 per cent estimated in the 2023 white paper. The Commission has also confirmed that during the early stages no enforcement action will be taken for failing to act on an FRA, which is a sensible bit of forbearance and an admission that the thresholds need calibrating in the field.

None of this reaches an offshore site. A player there sets their own deposit limits if the site offers the tool, and the record is not encouraging: this is the market where the Commission's 2026 risk assessment rates remote casino as high risk for money laundering, unchanged from the year before, with gross gambling yield of £5.0 billion in the year to March 2025 including £4.2 billion from slots. It reports growing use of false documents, deepfake videos and AI face swaps to bypass customer due diligence, "smurfing" through many small transactions to stay under the €2,000 threshold, and a case study of a customer depositing approximately £40,000 over six months using accounts opened with five different people's details. Limits are not a courtesy in that environment. They are the only thing standing between an account and someone else's money.

Withdrawal Limits and the Terms That Build in Delay

The withdrawal cap is the quiet one, because it does not appear on the offer page. It appears in the bonus terms, phrased as a maximum cashout, and it is where offshore sites claw back what the headline gave away.

One operator's terms in 2026 reserve the right to limit the amount withdrawable from winnings generated with bonus funds — including free spins and cashback — to 300 per cent of the credited bonus amount, with any excess voided. Another states that if a deposit is made while a no-deposit bonus is active, the no-deposit bonus's wagering requirements and maximum cashout still apply. Both are ordinary versions of a clause found almost everywhere offshore, and both are the opposite of the British position: the Commission's fair-terms guidance is that operators must not impose any maximum limit on the amount a consumer may withdraw from their deposit balance. Note the precision. The British rule protects the deposit balance. It does not promise that bonus winnings are uncapped, and any page that tells you otherwise is overselling the UK regime.

Delay built into the terms is the other thing to hunt for. One operator's rules say that for some customers every fifth or tenth withdrawal goes to manual review, requiring extra information before it will be processed, and that customers could request only one withdrawal at a time and could not request another until the first was authorised. The Commission found that term unfair under the Consumer Rights Act 2015 and, in October 2026, announced a £900,000 regulatory settlement with the company concerned covering failures including unnecessarily delayed consumer withdrawals. That was a British licensee. An offshore operator running the same term answers to nobody likely to fine it.

The British standard is not perfect, and I will not pretend otherwise. There is no fixed maximum number of days in which a licensee must complete a withdrawal; the regime relies on licence condition 7.1.1 (fair and open terms), condition 17.1.1 (a withdrawal request must not trigger a demand for information the licensee could reasonably have sought earlier) and the prohibition on unfair terms. What the data shows is that this mostly works anyway. Commission figures for June to September 2024 covering 44.2 million withdrawals by customers of large online operators record 96.3 per cent clearing automatically, 3.5 per cent within 24 hours and 0.1 per cent taking up to 48 hours. Earlier data from some of the largest companies showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours.

Complaints persist regardless. Withdrawals have been the number one topic raised with the Commission's Contact Centre, which receives over 6,000 calls a year, and by July 2024 it was still hearing around 2,000 complaints a year about withdrawal delays. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Consumer research published in July 2026 found 49 per cent of people who had gambled in the past 12 months agreed it was quick and easy to withdraw and collect winnings, with 33 per cent neutral and 18 per cent disagreeing. A regime where half the players are content and a fifth are not is a regime with a long tail.

Reverse withdrawals were banned permanently for all remote operators on 31 October 2021 under RTS 14B — "Consumers must not be given the option to cancel their withdrawal request" — because the Commission found evidence the function tempted engaged and vulnerable gamblers to carry on. That is the single most useful consumer protection in British online gambling, and its absence offshore is felt most sharply precisely when a player has asked for their money.

Set out the payment routes plainly, because the limits differ by rail. Faster Payments has a scheme ceiling of £1 million per transaction, raised from £250,000 on 10 February 2022, and over 90 per cent of transactions complete in under two seconds — though that ceiling is a scheme maximum, not an entitlement, and individual banks set lower per-payment limits. CHAPS settles same-day on a working day with no scheme upper limit and a daily cut-off. Visa Direct's Fast Funds service processes in real time with funds potentially available within 30 minutes of approval. Card withdrawals to Visa or Mastercard through e-wallets run 0 to 7.5 per cent depending on the provider, and Skrill and Neteller both charge 2.80 per cent with a minimum of around €3.50 or USD 3.50 for a transfer to a bank account effective 12 January 2026. Which rail a site uses is a limit in itself, and it is often the reason a promised two-hour payout arrives in three days.

Why the Withdrawal Terms Matter Most

If the whole subject turned on one thing, it would be this: the moment money tries to leave, the terms change character. Everywhere else the operator is selling; at the withdrawal stage it is paying, and that is when the small print does its work.

The mechanics worth understanding are the ones that decide whether a balance is real money. A sticky or non-cashable bonus can be used to wager but can never itself be withdrawn and is removed on cashout; the British rules effectively ended the practice by requiring that wagering requirements must not apply to play with a deposit balance, that deposit and bonus balances be shown separately, and that a player may withdraw their deposit balance at any time even with a bonus pending or active. Offshore, the sticky bonus is alive and well, and the maximum cashout clause is its natural companion.

Aggressive maximum-bet rules do the rest. One operator caps bets while wagering at €5 for regular players and €10 for VIPs and rejects anything above it. Another makes the casino maximum bet 20 per cent of the deposited amount and states that failing to observe it "may result in account closure, forfeit of the Bonus, and any winnings generated during the wagering of the Bonus". Read that sentence twice. A single oversized spin, on a game the player may not have realised was weighted differently, can void the lot.

Then there is the withdrawal ceiling dressed as process: one withdrawal at a time, a manual review every fifth or tenth request, a required document that could have been asked for a month earlier. Each is small. Together they turn a two-hour payout into a fortnight, and a fortnight is long enough for a great many people to reverse the decision to take the money out — which is exactly why reverse withdrawals were banned here in 2021.

The First Time and Every Time After

The identity-check story splits cleanly into two halves, and knowing the difference saves a lot of frustration.

In the British market the requirement is now front-loaded. Licence condition 17 has required, since 7 May 2019, that a licensee obtain and verify information establishing a customer's identity before permitting them to gamble, covering at least name, address and date of birth. Before allowing a deposit, licensees should explain what documents or information might be needed, in what circumstances and in what form. A customer cannot place a bet until verified. Companies can often verify against databases such as credit reference agencies and the electoral roll, needing no documents at all; otherwise a passport, driving licence or household bill does the job, and a selfie may be asked for where fraud such as identity theft is suspected.

The first time, then, is quick if the electronic match works and slow if it does not, and the Commission itself declines to give a timescale because the length varies. Later it should be nothing at all, unless the player's details change, a threshold is crossed — for a remote casino, identification and verification are required when deposits or withdrawals reach €2,000, applying both to a single transaction and to linked ones such as those within a single logged-on session — or an anti-money-laundering duty bites. Where the operator needs information at that point under another legal obligation, condition 17.1.1's prohibition on late document demands does not apply. That is the honest version of a rule that sounds absolute and is not.

Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and it is one of the most common dispute types referred to alternative dispute resolution providers. The Commission has voiced concern about operators using "fuzzy matching" through third-party verification services and onboarding customers on partial or equivocal verification, and has noted that onboarding someone by a middle name rather than a forename creates mismatches with records held elsewhere — including GamStop, which undermines the self-exclusion it was meant to deliver. A sloppy check is not a victimless shortcut.

Offshore, the sequence inverts. Verification is often light at signup because the sale depends on it, and heavy at withdrawal because that is where the operator has the money and the incentive. The pattern is familiar enough to have a name in complaint forums, and the Commission has said it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, and does not consider it fair or necessary to delay withdrawals purely for safer-gambling reasons. Where an operator has no regulatory concerns about a customer, the Commission says there is no valid reason to delay the payout. That is a standard an offshore site has no obligation to meet.

One point deserves stating flatly. The Commission is a regulator, not an ombudsman: it cannot resolve an individual complaint or help anyone get their money back, and it can only regulate sites trading or advertising to customers in Great Britain that hold its licence. A dispute with an unlicensed site falls outside that entirely. Anjouan requires its licensees to designate an approved alternative dispute resolution provider and expects complaints resolved within 30 days before a player may escalate, and its approved providers are EGIS ADR, Axion ADR, iGaming ADR and one licensee. Whether the provider has teeth is another question, and the answer is usually not much.

Warning Signs in the Small Print

A handful of clauses do most of the damage, and all of them are published if a reader knows where to look.

A maximum cashout on bonus winnings, expressed as a percentage of the bonus rather than a sum of money, because a percentage sounds generous and shrinks as the winnings grow. A maximum bet while wagering, especially one pegged to a fraction of the deposit, which converts a single misplaced spin into a forfeiture. A wagering contribution table where live dealer, table and jackpot games count for nothing or next to nothing, so the headline multiplier is really two or three times the number advertised for anyone who plays anything but slots. A sticky bonus, where the bonus is removed at cashout and only winnings from the deposit balance were ever withdrawable. Consecutive no-deposit bonuses, which one operator's terms say can lead to removal of subsequent winnings.

And the general-purpose clause at the end: a stated right to exclude a player from any promotion, confiscate funds or cancel free bets in the event of abuse, with penalties potentially including permanent account closure. Abuse is usually defined only by examples — low-margin, equal or zero-risk bets, moving from a low-weighted game to a high-weighted one after a large win, delaying free spins until after wagering is met. British guidance requires that terms setting out promotional play restrictions specify all prohibited types or patterns of play and refrain from reserving sole discretion to the operator, and that fraud and abuse terms sit in separate clauses from promotional ones. Those requirements do not travel.

The sting is that none of this is cheating. It is contract, drafted by better lawyers than the player has, and enforced by a regulator that is not British and is not looking.

Five Signs an Offshore Operator Is Worth the Risk

Judged as a business, not as a brand. Each of these can be checked in ten minutes, and a site that fails two of them is telling the truth about itself.

The Licence Is Verifiable at the Source

Check the licence number and the regulator's own register, not the badge on the page. Curaçao reformed properly on 24 December 2024, when the National Ordinance on Games of Chance made the Curaçao Gaming Authority the direct licensing and supervisory authority and ended the old master-licence and sub-licence model; the legacy "orange" certificates of operation ended on 15 October 2025 and a historic /JAZ number or legacy seal must not be treated as proof of a current licence. A CGA Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind it shows a different domain, the site is showing another operator's paperwork. The authority also warned on 7 October 2026 that its previous portal would not return and that it is building an alternative way to verify licensed domains, so a missing seal is not automatically damning. Anjouan certificates carry a licence number and a QR code linking to the public register, and its own verification framework says certificates that cannot be checked there should not be relied upon. Malta publishes a list of unauthorised URLs, with entries carrying notice dates of 30 October 2026 — worth a look before anything else.

The Terms Do Not Cap What You Can Take Out

Search the terms for "maximum" and "cashout" and read what comes back. There should be no cap on the withdrawal of a deposit balance and no percentage limit on money won with a bonus. Where a cap exists, it should be a stated sum, in the currency of the account, in a clause that is easy to find. The British standard is that any cost-reflective processing fee must be disclosed before a deposit and must not exceed the direct cost of processing; offshore that is a benchmark rather than a rule, but it is the right benchmark. Note also whether the site has a term restricting the number of withdrawals, since that is a delay mechanism wearing a housekeeping hat.

Withdrawals Are Not Held Behind a Queue

Look for the sequence: is a withdrawal a request that sits pending, or a payment that leaves? A site that processes every fifth or tenth withdrawal manually, or that permits only one withdrawal at a time, has built a delay into its product. British operators cannot offer a reverse withdrawal at all under RTS 14B, so any site offering to let a player cancel a pending withdrawal is advertising the removal of a protection, not a feature. Where the payout rail is named — Faster Payments, a card push, a crypto transfer — the timing is at least checkable, and a site that names it is usually more honest than one that promises "instant" and says no more.

The Regulator Answers to Someone and Enforces Something

A regulator worth the name publishes actions. The Kahnawà:ke Gaming Commission suspended a client provider authorisation effective 29 September 2026 following a show cause notice, and prices its permits in numbers that imply real supervision. Curaçao made supplier licensing fully mandatory from 24 December 2026, with non-Curaçao suppliers of critical services required to register. Anjouan requires segregation of player funds, random number generators certified by an approved independent testing facility, and anti-money-laundering and age-verification controls. Against that, an ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 each per year, and quoted a former attorney-general of the Comoros describing the licensing body as "an illegal entity" and saying the offshore financial authority lost its recognised status under Comorian banking laws passed in 2013 and 2015. Anjouan Gaming responded on 10 June 2026 that its licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world" — a fair point, and not a defence of the market it serves. A licence from a jurisdiction with no published enforcement record is a receipt, not a safeguard.

Funds Are Segregated and Rated

Ask where the money sits if the operator fails. In the British market, customer funds must be held in a separate client bank account, operators must pick one of three protection ratings — not protected, medium protection or high protection — state which applies in their terms, and an operator rated "not protected" must remind customers every six months that their funds are not protected on insolvency, stating the value of the funds held. Even then, a separate client account does not guarantee a return of money, and gambling businesses may legitimately hold customer funds in overseas bank accounts, which rather takes the shine off the phrase. Money staked within an open bet is not customer funds at all and is covered by nothing. Offshore, segregation is a claim in a policy document, audited by whoever the regulator chooses to accept. Look for the statement and for the auditor's name, and treat silence as an answer.

What Actually Happens When You Withdraw Offshore

The pattern is consistent enough to be a procedure, and anyone who has read this far already knows the shape.

An account is opened in minutes, with a name, an email and a deposit method, and very little verification. The game selection in the lobby is doing the work of keeping attention, not the compliance department. A bonus may or may not be attached to the first deposit, and whether it is, is the fork in the road.

When the withdrawal button is pressed, the account enters a different state. Documents are requested that were not requested on deposit: a passport, a utility bill, sometimes a selfie, occasionally a bank statement to check the source of funds. The request is legitimate in itself — the €2,000 threshold is standard across regulated markets and the EU's Anti-Money Laundering Regulation retains a €2,000 trigger for gambling services — but the timing is deliberate. The Commission has said that asking for documents only at withdrawal is precisely the complaint it hears most, accounting for over a quarter of the calls reaching its Contact Centre, and that condition 17.1.1 exists to stop it happening in the British market.

If the balance was built with a bonus, the maximum cashout clause applies, and any excess is voided. If a bet while wagering exceeded the maximum, the clause may take the whole balance. If the site reviews every fifth or tenth withdrawal, the player waits again. And if it is a site with no licence and no relevant regulator, there is no route that ends with a payment: the Commission cannot help with an individual complaint, and an alternative dispute resolution provider's decision binds only an operator willing to be bound.

The practical steps that reduce the risk are unglamorous, and they apply equally to a site inside the British market and one outside it.

1. Check the licence on the regulator's own register, using the number, not the badge. A badge is an image file. A register entry is a fact, and Curaçao's reformed authority, Anjouan's QR-linked certificates and Malta's unauthorised-URL list all give a checkable answer within minutes. This is the step that eliminates most of the worst operators before any money moves.
2. Read the bonus terms and write down three numbers: wagering multiple, maximum bet while wagering, maximum cashout. These three decide whether the bonus is worth anything. A 40× multiple with a €5 betting cap is a smaller prize than a 25× multiple with no cap, whatever the headline says, and the game-weighting table can multiply the effective requirement several times over.
3. Verify identity before depositing, not when withdrawing. Send the documents early, in the form asked for, using the exact name that appears on the ID. This removes the withdrawal-stage demand entirely, and it avoids the mismatch problem the Commission has warned about with fuzzy matching and middle names. It also means any refusal happens before money is at risk rather than after.
4. Test the withdrawal rail with a small sum before trusting it with a large one. Take out a modest amount early, in the same way it would be taken out later, and time it. The first withdrawal is where the document requests appear; discovering that at £50 rather than at £5,000 is the cheapest lesson in the whole exercise.
5. Set deposit and stake limits with the payment provider as well as the site. Bank gambling blocks are applied at card level and must be activated on each card, and most banks use a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again once the block is switched off. The Commission's list of banks offering the service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. A block set with a bank is harder to talk yourself out of than a limit set inside an account.
6. Keep the record: deposit confirmations, the terms in force on the day, and every email. If the terms change after a player joins, the version in force when they deposited is the version that matters, and a dated screenshot settles arguments that memory loses. It also gives a complaint some substance if one is ever made to a regulator or an ADR provider.

None of that makes an offshore site safe. It makes the risk visible, which is a different and more useful thing.

Help, Whoever the Site Is Licensed By

The distinction between licensed and unlicensed matters legally, and not at all personally. Anyone struggling with their gambling gets the same support whichever company holds the paperwork.

The National Gambling Helpline, run by GamCare, is 0808 8020 133, free, 24 hours a day, every day of the year, and reachable by phone, live chat and WhatsApp. In Wales the number given is 0808 2819 265. It is not a crisis line — staff cannot transfer someone at immediate risk of harm and follow their own safeguarding procedures instead — so anyone in immediate danger should use emergency services. BeGambleAware, the public-facing brand of the charity GambleAware, points to the same helpline and online chat. Gamblers Anonymous England, Wales and Ulster is on 0330 094 0322, with around 250 meeting locations and no appointment needed, and its line runs 7:30am to 10:30pm daily. Gam-Anon UK & Ireland supports the family and friends of compulsive gamblers by email at [email protected], whether or not the gambler attends GA. GamFam, a registered charity, runs GRA5P, a five-stage peer-support programme for affected families and people in recovery, with meetings by Zoom usually of six to ten members. Citizens Advice gives free, confidential advice including on debt, and Citizens Advice Scotland's gambling support line is 0800 328 1131, Monday to Friday 10am to 3pm. The NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB takes self-referrals and professional referrals for young people aged 13 to 18 across England and for adults in Greater London and the South East, on 020 7381 7722.

The treatment system behind those services is now funded by the statutory levy introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, at 1.1 per cent of previous-year gross gambling yield for all online operators, raising just under £120 million in its first year and ringfenced for research, prevention and treatment. From 1 April 2026 NHS England took commissioning responsibility for gambling-harms treatment in England. It is a small comfort that the money comes from the industry it is spent on, and I would rather have it than not.

Frequently Asked Questions

What gambling sites are not on GamStop?

Any site without a Gambling Commission licence, since the obligation to join the scheme applies only to operators the Commission licenses. That means casinos and sportsbooks licensed in Curaçao, Anjouan, Kahnawà:ke, Malta for non-UK business, or nowhere at all. Costa Rica has no comprehensive gambling licensing regime, and the "data processing licence" sometimes quoted is not a licence in the legal sense. Regulators and courts may name individual operators, but the category is defined by the licence, not by a list.

Are gambling sites not on GamStop legal in the UK?

For the player, the Act's offences attach to those providing facilities, not to adult consumers. For the operator, section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without one — including where the operator holds a licence elsewhere. Penalties on summary conviction reach 51 weeks' imprisonment, a level 5 fine, or both.

Do gambling sites not on GamStop UK accept card payments?

Usually, and that is the point of comparison. Credit cards have been banned for gambling in the British market since 14 April 2020, and operators must also check that e-wallet funds were not loaded from a credit card. Offshore, no such condition applies. A card accepted at an unlicensed site may also be declined by the bank if a gambling block is active — those work by declining merchants categorised under gambling Merchant Category Codes, and apply at card level.

Can offshore casinos see a GamStop registration?

No. The scheme's register is consulted by British-licensed operators, who must check their customer base at least every 24 hours. A site with no Commission licence has no equivalent obligation and no access. It is worth being clear about what follows: a self-exclusion ran for its full term and then stayed in place until GamStop was contacted to remove it, so an account opened offshore does not end it — it simply sits outside the only system that could enforce it.

What are typical limits on gambling sites not on GamStop?

Varies enormously, which is why the terms matter more than the marketing. Stake ceilings are absent where the British market caps slots at £5 per game cycle, and £2 for ages 18 to 24. Bonus wagering commonly runs 25× to 50×, against a British cap of 10× since 19 January 2026, and maximum-cashout clauses on bonus winnings are routine — one operator caps at 300 per cent of the bonus credited. Deposit and withdrawal limits are set by the site.

How long does an offshore casino take to pay out?

Sometimes hours and sometimes weeks, and the terms usually say which. The delays are rarely about the payment rail: Faster Payments completes over 90 per cent of transactions in under two seconds, and Visa Direct's Fast Funds can have funds available within 30 minutes of approval. The wait is the operator's review process — document requests at the withdrawal stage, one withdrawal at a time, manual review of every fifth request. A player can time a small withdrawal first to find out which they are dealing with.

What is the best gambling site not on GamStop?

I will not answer that, because the honest answer is that the category has no best. The sites differ in licence quality, in the caps buried in their bonus terms, and in how promptly they pay, and the third of those is usually learned rather than published. The useful question is narrower: does the licence verify at the regulator's own register, do the terms avoid capping a withdrawal, and does a small test payout arrive on time? A site that passes all three is doing more than many.

Limits Are the Whole Story

Offshore casinos are not offering a better version of the same product; they are offering a product with the ceilings taken off, and the ceilings were doing most of the protecting. Britain's market now works inside a £5 slots stake cap, a 10× bonus wagering ceiling, a credit card ban, a mandatory limit prompt before a first deposit and a permanent ban on reverse withdrawals. A site outside the Commission's reach is outside all of it — and the evidence of what that means, from 2.5 per cent of recent online gamblers engaging with illegal sites to a regulator's own note that unlicensed sites often target people who have self-excluded, is not encouraging.

GamStop holds the line it holds: 614,738 consumers on the register as of July 2026, with over half of them having chosen the maximum five-year exclusion. Nothing on an offshore site changes that number or bypasses it — the exclusion stands for its full term and then stays until GamStop is contacted. The helpline, 0808 8020 133, free and open at any hour, does not ask where anyone has been playing.