Slots without GamStop means slot play at an operator that holds no Gambling Commission licence, so the national self-exclusion scheme does not reach it. Section 33 of the Gambling Act 2005 makes providing gambling facilities without a licence an offence. None of the protections British players take for granted applies there — and the money coming back out is usually where it shows.
The phrase sells itself as freedom, which is a strange thing for a licensing gap to sell. GamStop Online is the national online self-exclusion scheme: a single request blocks a person from every gambling company licensed in Great Britain for six months, one year, five years or five years with auto-renewal, and once it is set it cannot be cancelled mid-term. It is often typed "gamestop", which is why the word "game" keeps creeping into a scheme that has nothing to do with games. The scheme's reach stops exactly where the British licence stops. An operator with a Curaçao or Anjouan certificate is not connected to it, and that is the whole of the offer — not a feature, an omission.
playoutpostuk.com looks at this market from one angle: how fast and how reliably money comes back out. That turns out to be the most useful angle available, because it separates two very different things the phrase lumps together. A licensed operator that has fallen out with its paperwork is still a licensed operator; its accounts sit in a British client account and its disputes can be referred to an approved ADR provider. An offshore operator has no such machinery at all, and the big, boring question — will the withdrawal arrive, and when — has no institutional answer behind it.
Every number below comes from a named source with a date. 13.11.2026 is the reference point for the page.
Table of Contents9
- The Online Slots Market Outside the Block
- Why a British Licence Matters
- Withdrawals Are Where the Comparison Gets Decisive
- How Identity Checks Work, First Time and Every Time After
- Five Signs an Offshore Operator Can Be Trusted With Money
- A Practical Way to Judge a Slot Site Outside the Block
- The Money Path Is the Only Honest Test
- Questions About Slots Without GamStop
- Who Actually Bears the Risk
The Online Slots Market Outside the Block
Slot sites without GamStop run on foreign licences
A slot site outside the block is simply one licensed elsewhere — Curaçao, Anjouan, Kahnawà:ke, Malta, or nowhere in particular. Costa Rica has no comprehensive gambling licensing regime at all; the "data processing licence" the industry sometimes cites is not a licence in the legal sense, and a bill that would have created a proper regime, No. 25,057, was rejected by its Legislative Assembly in early 2026.
The Gambling Commission's position is blunt: it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence somewhere else. It states that plainly, and the offence under section 33 carries, on summary conviction, up to 51 weeks in prison, a fine at level 5, or both.
The Scale of Offshore Slot Traffic
The offshore market is not a rounding error, but the estimates disagree wildly, and the disagreement is itself the story.
| Estimate | Period | GB market staked or staked abroad | Share unlicensed |
|---|---|---|---|
| Gambling Commission survey (players engaged with illegal sites) | April 2025 to April 2026 | — | 0.6% of all adults in 4 weeks; 2.5% of online gamblers |
| H2 Gambling Capital | 2025 | £16.6bn staked illegally | 8% of gambling happening illegally |
| Frontier Economics for the Betting and Gaming Council | published September 2024 | £2.7bn staked online, up to £4.3bn including illegal venues | 2.1% of £128bn staked |
| Yield Sec for the Campaign for Fairer Gambling | 2025 | £0.8bn GGR unregulated | 9% of £8.8bn GB online GGR |
Read that table again and notice what is doing the work. H2 puts £16.6bn of stakes with illegal operators, up from about £5bn in 2019; the Commission's own survey finds 2.5 per cent of online gamblers touching an illegal site, with 94.4 per cent of the whole population showing no indication of it at all. Stakes and players are different animals: a small number of people, some of them staking enormous sums with a VPN and a borrowed card, produces a very large headline. The Commission's own methodology assumes £0.32 of gross gaming yield per minute of licensed online slots play and openly says it cannot capture activity hidden by VPNs. Any figure for this market, in either direction, is an estimate wearing a suit.
The enforcement behind the numbers
The Commission's Illegal Markets team has been busy. Since April 2024 it has issued 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs, and secured 287,961 URL removals. Across 160 illegal sites with traffic data, engagement fell an average of 32 per cent after disruption.
It is worth knowing which lever works. Registrar blocks and website suspensions produced the largest average fall in engagement, 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. Removing a site from search makes it harder to find; blocking its domain makes it harder to reach. In April to June 2026 the team referred 366 websites to search engines; in July to September 2026 that jumped to 1,835 websites and 7,677,211 URLs, with 546 cease and desist notices issued. Prosecutions, meanwhile, ran at zero or one a quarter across April 2025 to March 2026 — one in total. Disruption, not the dock, is the strategy.
None of this is an argument for patience with offshore sites. The Commission issued an industry warning notice on 20 January 2025 about casino games from licensed suppliers appearing on unlicensed websites, noting those sites often target people who have self-excluded through GamStop — precisely the traffic the phrase "slots without GamStop" is engineered to catch. That is the sting in the marketing: the gap is the product.
What GamStop does and does not cover
GamStop Online blocks a person from signing up for or using online accounts with gambling companies licensed in Great Britain, and only those. It cannot prevent access to services run by organisations that do not participate in it. Land-based gambling has its own schemes instead: SENSE for licensed casinos, with a minimum six-month term extendable to twelve, Gamstop Betting Shops (formerly MOSES) covering roughly 6,000 shops through more than 60 operators on a fixed twelve-month term, plus arcade and bingo schemes.
And the exclusion itself does not lapse politely. It holds for its chosen term, and then it stays in place until the person contacts GamStop to remove it. In the last six months of a five-year exclusion a registrant may switch off auto-renewal, which otherwise continues for up to four further five-year periods; if nothing is done, the data is held through a further automatic seven-year period during which operators are told the person was previously excluded. Registrations are not removed early — the Group's 2025 annual report devotes a section to refusing exactly that.
Note also who is doing the registering. Of the periods chosen by registrants in 2025, 29 per cent picked six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. As of July 2026, more than one in two on the register had chosen the maximum five years, and under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26 per cent year-on-year rise. People are not drifting into this; they are choosing the long lock deliberately.
Why a British Licence Matters
Great Britain's licensing regime is not decoration. Its conditions are where player protections physically live, and each one has a counterpart that is simply absent offshore.
The credit card ban, effective 14 April 2020 under licence condition 6.1.2, covers all Commission-licensed remote gambling and requires operators to ensure that money arriving from an e-wallet was not loaded from a credit card. Offshore, no such condition exists and no one checks the funding chain.
Online slots stake limits came in on 9 April 2025 at £5 per game cycle for adults, and on 21 May 2025 at £2 for 18- to 24-year-olds, attached to every remote casino operating licence by the Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025. They apply to slots only, not roulette or blackjack. A minimum of 2.5 seconds must also elapse between game cycles under RTS 14D. Offshore, a slot can be spun as fast as the software allows.
From 19 January 2026, Social Responsibility Code 5.1.1 caps wagering requirements on bonus funds at ten times and bans mixed-product promotions requiring two or more types of gambling. The Commission's own words when it chose a cap over a ban were that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore multipliers of 25× to 40×, and 35× to 50× on welcome bonuses, are the norm rather than the exception. A British player who has internalised a 10× cap is walking into an arithmetic problem.
Financial vulnerability checks and the newer Financial Risk Assessments sit here too. Vulnerability checks became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days, lowered to £150 from 28 February 2025; in the first three months operators ran checks on 7 per cent of active accounts on average, with 78 per cent returning inside ten minutes. The Commission announced on 7 July 2026 that Financial Risk Assessments will be phased in from £5,000 net deposits in a rolling 24 hours for the largest operators, falling at the final stage to £1,000 in 24 hours or £3,000 over 90 days for over-25s, and £750 or £2,000 for under-25s. None of this follows a player offshore.
One more: customer funds. A remote operator must keep customer funds in a separate client bank account, must state its insolvency rating — "not protected", "medium protection" or "high protection" — in its terms, and if rated not protected must remind the customer every six months that the money is unprotected. Keeping funds in a separate account still does not mean customers get paid if the business fails, and operators are legally allowed to hold customer money in overseas bank accounts. Offshore, an insolvency rating is unlikely to exist to be disclosed.
Withdrawals Are Where the Comparison Gets Decisive
What the Commission's own withdrawal data shows
Here is the checkable benchmark. Gambling Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators in that period. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Earlier data from some of the largest firms showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours.
So the British baseline is: overwhelmingly instant, with a tail that is hours rather than days. Against that baseline, consumer confidence is softer than the plumbing. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed that it is quick and easy to withdraw winnings, 33 per cent were neutral and 18 per cent disagreed.
Where delays come from on licensed sites
Withdrawals are nonetheless the single biggest source of complaint the Commission receives. Its Contact Centre takes over 6,000 calls a year, and problems with withdrawals from accounts were the number one topic raised by consumers, at around 2,000 complaints a year by July 2024. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Its Annual Report and Accounts 2024-25 says that, despite work with some operators, withdrawal issues continue to cause most of the complaints it receives.
The Commission has been explicit about the mechanism it dislikes: friction at the withdrawal stage rather than at the deposit stage, and operators placing their own commercial interests above customers'. Where there are no regulatory concerns about a customer, it says there is no valid reason to delay a payout. Reverse withdrawals were permanently banned for all remote operators under RTS 14B from 31 October 2021, which states that consumers must not be given the option to cancel a withdrawal request.
Over a quarter of the complaints reaching the Contact Centre concern identity verification, raised when documents are demanded only at withdrawal — and the Commission's 12 August 2026 blog notes that onboarding someone under a middle name instead of a forename can create mismatches with records held elsewhere, including GamStop, undermining self-exclusion itself.
Offshore, none of this applies. There is no RTS 14B, no fair-and-open condition, no ADR referral at eight weeks, no £900,000 settlement waiting at the end of it. On 21 October 2026 the Commission announced that a large licensed operator, which runs seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals: a term allowing only one withdrawal request at a time until the previous one was authorised was found unfair under the Consumer Rights Act 2015. That operator was licensed and therefore answerable. The offshore version of that term is not answerable to anyone in Britain.
How the payment rails differ by method
Timing is not only the operator's fault, and this is where a careful player can do the arithmetic in advance.
| Method | Typical settlement time | Cost notes |
|---|---|---|
| Card payout via Visa Direct Fast Funds | funds available within 30 minutes of approval | push-payment model, operates 24/7 |
| Standard bank transfer | 1 to 3 business days | comparison figure is not from Visa's own page |
| Faster Payments | over 90% complete in under 2 seconds | £1m scheme maximum per transaction, bank limits lower |
| CHAPS | same working day, daily cut-off | no scheme upper limit |
| Jeton local bank transfer (UK) | 0 to 30 minutes | no sender or receiver fee, £10 to £10,000 |
| Skrill to bank account | not fixed by the scheme | 2.80% of the amount, minimum EUR 3.50 |
| Neteller to bank account | not fixed by the scheme | 2.80%, minimum USD 3.50 |
| USDT on TRON (TRC-20) | next block, chain dependent | about 13 TRX burned without staked Energy |
| Bitcoin | ~10 minutes per block on average | 6 confirmations for most merchants bearing risk |
The Bitcoin line deserves a sentence, because the number thrown around is always ten minutes and it is an average, not a promise. Within any ten-minute window the probability of a block being found is about 63 per cent, rising to 95 per cent within 30 minutes and 99.7 per cent within 60. Most exchanges and merchants bearing double-spend risk want six confirmations. A payout described as "ten minutes" is describing a target, not a transaction.
Crypto adds a second quiet cost that licensed cash rails do not: the chain fee is paid whether the transaction succeeds or fails. On Ethereum, the base fee can move up to 12.5 per cent per block, gas consumed by a transaction that then reverts is still charged, and a standard ETH transfer uses 21,000 gas. A USDT TRC-20 transfer to a wallet that already holds USDT consumes about 65,000 Energy, and about 130,000 to a brand-new wallet, because a smart-contract call always consumes Energy — receiving tokens costs nothing and the sender pays. A "free withdrawal" that costs 13 TRX was never free; it was just priced somewhere else.
How Identity Checks Work, First Time and Every Time After
How identity checks work the first time
Under Licence Condition 17, on the books since 7 May 2019, a licensee must obtain and verify information establishing a customer's identity before permitting that customer to gamble, including name, address and date of birth. Before a customer deposits, the operator should tell them what documents it may ask for and in what circumstances. In practice most checks run electronically: matching an account against credit reference agencies and the electoral roll means no documents are needed at all, and the Commission says it cannot give a timescale for ID checks because it varies so much.
Anti-money-laundering duties sit alongside that. Under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, a remote casino must identify and verify a customer when deposits or withdrawals reach €2,000 or more, and the threshold applies to linked transactions as well as single ones. The Commission's "hybrid approach" lets a remote casino identify a customer and verify age at registration but defer full verification until that threshold is reached — and requires it to be able to end the transaction at the threshold if the customer will not comply.
How it works on every withdrawal after that
Then it keeps happening, more quietly. Licence Condition 17.1.1 says a withdrawal request must not create a requirement for extra information the licensee could reasonably have asked for earlier — unless another legal obligation, typically anti-money-laundering, requires it at that moment. That single condition is the whole of the British answer to the "documents at withdrawal" problem, and it is why over a quarter of the Commission's complaints still concern identity verification.
Offshore, there is no condition 17.1.1, no eight-week ADR deadline and no CMA undertaking not to confiscate funds for failure to supply documents. Anjouan requires licensees to name an Authority-approved ADR provider in their terms and to resolve complaints within 30 days before a player may escalate; Kahnawà:ke has a full-time Dispute Resolution Officer but also provides that a player who breaches a self-exclusion prohibition forfeits deposits and winnings to a third-party charity. Those are real mechanisms, thinner than the British ones and dependent on the regulator enforcing them.
Warning signs in the verification process itself
Watch for friction that arrives only at the cash-out. A demand for documents at withdrawal that was never mentioned at deposit is the single most reported grievance in this market. A term reserving the operator's sole discretion to void winnings is unfair under the Consumer Rights Act 2015 on a British licence; offshore it is routine, and one UK-licensed firm was fined £170,000 in July 2025 over a bonus term granting exactly that discretion. "Fuzzy matching" verification that onboards a customer on partial or equivocal details is a Commission concern, not a player protection.
Five Signs an Offshore Operator Can Be Trusted With Money
None of these makes an unlicensed operator lawful for a British player, and none of them brings it under UK protections. They are the checks that separate a site that pays slowly from one that does not intend to pay.
The licence is verifiable at source, not shown as a picture
A Curaçao Certificate of Operation Seal must redirect to cert.cga.cw when clicked; if the seal differs in design, colour or format, the website is not authorised. If the certificate behind it shows a different domain name from the site being accessed, the certificate belongs to another operator. Legacy /JAZ numbers and orange sub-licence certificates are not proof of anything — the old orange certificates ended on 15 October 2025. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and Anjouan says unverifiable certificates should not be relied on. Quick check: click the seal, and compare the domain on the certificate with the domain in the address bar.
The regulator publishes its own rules and fees
Serious regulators publish the boring things: fee schedules, licence categories, deadlines. Curaçao's B2C application fee is a one-time EUR 4,592 with an annual total of EUR 47,450, payable in full by 15 January. Anjouan's is EUR 17,828 for issuance and the same for annual renewal. Kahnawà:ke's CPA application fee rises from USD 35,000 to USD 40,000 on 1 January 2027. Quick check: look for the regulator's own fee schedule and licensing policy, and see whether the site's story matches it.
The regulator polices its own licensees
A regulator that has never suspended anyone is a rubber stamp. Kahnawà:ke announced on 6 October 2026 that a Client Provider Authorization held by Polar Ventures SDRL was suspended from 29 September 2026 following a show cause notice. The MGA publishes a list of Unauthorised URLs, declaring any reference to a Maltese licence on those domains false and misleading. Quick check: look for enforcement notices, suspensions and unauthorised-site lists, and check the site is not on one.
Player funds are segregated and tested by an approved lab
Anjouan's published standards require operators to segregate player funds from operational funds, to use random number generators certified by an approved independent testing facility, and to run AML and age verification. That is the minimum to look for. Quick check: find the RNG certification and the wording on fund segregation and insolvency treatment in the terms, not the marketing page.
Disputes have a named route that does not run through the operator
Anjouan's approved ADR providers are EGIS ADR, Axion ADR, iGaming ADR and an approved dispute service, and the provider's name and contact details must appear in player-facing terms. eCOGRA will not accept a dispute about a site that is not on its approved list, before two weeks have passed, or more than a year after the event. Quick check: find the named provider in the terms and confirm it is a real adjudication service rather than a support inbox.
A Practical Way to Judge a Slot Site Outside the Block
- Check the licence at source, not on the badge. Click through the seal, confirm it lands on the regulator's own verification page, and confirm the domain matches. A generic licensing logo with no click-through is a picture, not a licence.
- Read the withdrawal clause before the bonus clause. Find the maximum withdrawal per transaction, any limit on the number of requests, the processing window, and any fee. Cross-check the claim against the payment-rail timings above, because a promised two-hour card payout on a rail that settles in a business day does not exist.
- Establish whether the person is in the UK and answerable here. If the operator holds a Commission licence, GamStop applies to it, ADR is free at eight weeks, and unfair terms are the Commission's problem. If it does not, none of that is true, and a self-exclusion registration does not travel.
- Price the rails. A 2.80 per cent e-wallet withdrawal fee with a EUR 3.50 minimum, or a 13 TRX burn on a TRC-20 transfer, is a real deduction. Work out what a £500 cash-out actually returns before depositing anything.
- Take a small withdrawal early, before the deposit grows. A successful small payout tests the identity process, the KYC path and the rail in one move, at a cost the player controls.
- Write the complaint route down now. The operator's address, the ADR provider named in the terms, the week the eight-week clock would run out. If none of those exists, the site has already told the truth about itself.
None of this is illegal to do, and none of it is a way round a self-exclusion. A GamStop exclusion applies to licensed operators, and offshore sites are not a hole in it — they are simply outside it, which is a different thing and a worse one. Anyone affected by gambling can reach the National Gambling Helpline free on 0808 8020 133, run by GamCare, 24 hours a day every day of the year, on the phone, by live chat or on WhatsApp.
The Money Path Is the Only Honest Test
The UK's own experience is instructive. L & L Europe's £900,000 settlement of October 2026 concerned withdrawal frictions — a one-withdrawal-at-a-time term and manual reviews triggering fresh document demands. Fafabet was fined £170,000 in July 2025 over, among other things, a term reserving discretion to close accounts or forfeit winnings. Both were licensed, both were caught, and both are now priced into someone's compliance budget. That is what a regulator looks like when it works. Remove the licence and the entire apparatus — the fair-and-open condition, the reverse-withdrawal ban, the free ADR route, the customer-funds rating, the 10× wagering cap — goes with it, leaving the site's own terms as the only law. When the phrase "slots without GamStop" is doing its marketing work, that is what it is quietly selling.
Questions About Slots Without GamStop
Can slot sites without GamStop legally take British players?
No. The Gambling Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction. The offence sits in section 33 of the Gambling Act 2005 and applies where at least one piece of remote gambling equipment is in Great Britain, or where the operator knows or should know the facilities are likely to be used here.
Are online slots without GamStop actually different games?
The games are often the same titles. What differs is everything wrapped around them. On a licensed site, slot stakes are capped at £5 per cycle, £2 for 18- to 24-year-olds, and a minimum 2.5 seconds must elapse between game cycles. Offshore there is no stake cap and no time floor, so spin speed and stake size are limited by the software and the player's own judgement alone.
Do UK slot sites without GamStop exist at all?
Genuinely, no. A licence condition has required every GB-licensed operator to participate in GamStop since 31 March 2020 — the requirement sits in social responsibility code provision 3.5.5 — and a breach is a breach of licence. Operators were notified in January 2020, and the Commission suspended the licences of two operators in April 2020 for missing the deadline. A British-licensed site outside GamStop does not exist.
What happens to a GamStop registration if someone plays offshore anyway?
Nothing. The registration stays exactly as it was: it holds for its chosen term and then remains in place until the person contacts GamStop to remove it. The offshore operator is not connected to the scheme and has no duty to check the register, so the block is untouched and unenforced at the same time. Playing there neither cancels nor weakens the exclusion.
How long do withdrawals take at a Curaçao-licensed slot site?
There is no published standard. Curaçao's regulator sets licensing and supervisory rules, not payout deadlines, and the Commission's 44.2-million-withdrawal dataset covers licensed operators only — 96.3 per cent cleared automatically there. At an offshore site the payout window is whatever its terms say, and the chain or payment rail then adds its own time on top.
Where can someone get help with gambling?
The National Gambling Helpline is free on 0808 8020 133, run by GamCare, 24 hours a day every day of the year, by phone, live chat or WhatsApp. Callers in Wales can use 0808 2819 265. GamCare, GamFam, Gamblers Anonymous and NHS specialist gambling clinics all provide treatment and support, and Citizens Advice helps with the debt that often follows.
Who Actually Bears the Risk
The British model puts the risk of a gambling business on the business: it must hold a licence, cap its slots, cap its wagering requirements at ten times, keep customer funds in separate accounts at a disclosed insolvency rating, and release withdrawals without friction — and when it fails at any of those, the Commission extracts a settlement and the terms are rewritten. The offshore model puts that same risk on the player, and the only thing standing between the two is the site's own words.
The measure I keep coming back to is that 44.2-million-withdrawal dataset: 96.3 per cent cleared automatically, 3.5 per cent inside a day, 0.1 per cent within 48 hours. That is not generosity, it is architecture — and it is the first thing a slot site outside the block quietly leaves behind.