Online Gambling UK and Licence Rules

Online gambling in the UK is legal only through operators holding a Gambling Commission licence. That licence brings identity checks before you play, a ban on reverse withdrawals, wagering requirements capped at ten times, free access to an independent adjudicator and, crucially, a route to your own money.

There is a number that tells you more about British online gambling than any bonus banner, and it comes from the regulator itself. Between June and September 2024, customers of the largest online operators made 44.2 million withdrawals. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Read that again: on a properly run British site, getting paid is not an event. It is the default.

Then read the other set of Commission figures. Withdrawals have been the single biggest source of complaints reaching its Contact Centre for years — around 2,000 complaints a year by July 2024 — and its 2024-25 annual report still names withdrawal issues as the cause of most complaints it receives. Over a quarter of complaints now concern identity verification, the thing that tends to be asked for at the moment a player tries to take money out rather than the moment they put it in.

Those two facts sit side by side, and the gap between them is this page. The site angle here is narrow and deliberate: not which casino has the prettiest lobby, but how fast and how reliably money comes back out. Licence, payment method, cash-out terms, identity checks, the complaints route. Everything else is decoration. This is written as at 13.11.2026.

It is often typed "gamestop"; the scheme's name is GamStop.

Where the Rules Come From, and Where They Stop

The Gambling Commission licences operators, and section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without a licence. The Commission's own wording is blunt: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that includes an operator holding a licence somewhere else. The offence carries, on summary conviction, up to 51 weeks' imprisonment, a fine at level 5, or both — six months in Scotland.

That is the operator's problem, not the player's. Adult customers commit no offence by gambling. Section 42, cheating, is the exception, and it is the only non-summary offence in the Act.

Now the part that matters for the site angle. Self-exclusion through GamStop binds every operator licensed in Great Britain. Since 31 March 2020 participation has been a licence condition, sitting in the Commission's Licence Conditions and Codes of Practice as social responsibility code provision 3.5.5. From April 2020 operators must also check their whole customer base against the register at least every 24 hours. Two operators lost their licences in April 2020 for failing to integrate on time. The scheme had 561,983 active exclusions at the end of 2025, and 614,738 consumers on the register as of July 2026.

Offshore sites holding no Commission licence are outside all of it. They are not connected to GamStop and are not covered by it, because the scheme's obligations bind licensed operators only. The protections listed below — the withdrawal rules, the fair-terms condition, the free adjudicator — go with them. Offshore casinos are not a way round self-exclusion: a GamStop exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it, so it never lapses on its own.

How Fast Money Comes Back, by Method

The table below compares withdrawal methods on one criterion: how long the money takes to reach the player, once the operator has approved it. The point is to separate two different delays that routinely get blamed on each other. The operator controls the first — approval and its own processing. The payment rail controls the second. A slow rail makes a fast operator look slow, and a slow operator makes the fastest rail in the world look broken.

Two of those rows deserve a journalist's scepticism. The Faster Payments ceiling of £1 million is a scheme limit, not an entitlement — banks set their own lower per-payment caps. And the polite fiction that crypto is uniformly instant ignores the arithmetic: Bitcoin targets 10 minutes a block, and a block is not an appointment. Over the 24 hours to 29 October 2026 Litecoin blocks arrived every 2 minutes 30 seconds on average, which is a cadence, not a promise.

Jeton's UK schedule shows a local bank transfer taking 0 to 30 minutes with no sender or receiver fee and limits of £10 to £10,000, against 2.5% on its separate instant bank transfer. MuchBetter says withdrawals take anywhere from a few hours to up to 5 business days, depending on the method chosen. Read the schedule before choosing the rail.

Is Online Gambling Legal in the UK, and Who It Protects

Yes, through licensed operators — and the licence is not a logo, it is a set of duties that shape a payout. The Commission is a regulator and not an ombudsman: it cannot resolve an individual complaint or get anyone's money back, though it records complaints and refers disputes onward.

The standard of comparison is a British-licensed site. Set against it, offshore operators divide into the ones that behave and the ones that do not, and the tell is rarely the game library. It is the terms.

Curaçao rewrote its regime: the National Ordinance on Games of Chance took effect on 24 December 2024, the Curaçao Gaming Authority now licenses directly, the legacy "orange" sub-licences ended on 15 October 2025, and a historic /JAZ number must not be treated as proof of a current licence. The CGA's own portal will not return to service, and it is building another way to verify licensed domains. Anjouan publishes EUR 17,828 for B2C issuance and the same again on annual renewal, with EUR 500 per extra domain. Kahnawake's Client Provider Authorization application fee rises from USD 35,000 to USD 40,000 on 1 January 2027, with the annual fee unchanged at USD 20,000. Costa Rica operates no comprehensive gambling licensing regime at all, and its Legislative Assembly rejected Bill No. 25,057 in early 2026.

A licence from any of them is not a British licence, and the enforcement record says so. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal sites with traffic data, engagement fell an average of 32 per cent.

The Delay Built Into the Terms

The thing this topic turns on is the moment a withdrawal stops being a withdrawal and becomes a request. On a British site the first cash-out is usually the slow one, because that is when identity verification lands. Licence condition 17.1.1 requires information establishing name, address and date of birth before the customer is permitted to gamble, and the Commission expects those checks before a deposit or stake, not after. In practice, operators that can match an account against credit reference and electoral roll data verify in seconds and ask for nothing. Operators that cannot will want a passport or driving licence, and the Commission publishes no timescale because the process varies.

The trap is a condition that looks administrative and behaves commercially. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for additional information the licensee could reasonably have requested earlier — with a carve-out where anti-money-laundering rules oblige it to ask at that point. The Commission has said it is not acceptable to place friction on the way out rather than the way in.

Later withdrawals should be smoother, and the rules say why. Reverse withdrawals were permanently banned on 31 October 2021 under RTS 14B: once a request is made, the funds cannot be turned back into a deposit. No term may cap how much of a deposit balance can be withdrawn — the Commission's example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". Un-staked deposits remain the customer's, and account inactivity cannot be used to confiscate a balance. The Commission states plainly that where it has no regulatory concerns about a customer there is no valid reason to delay a payout, and that an operator should explain any delay — except where money-laundering rules prevent it. On 21 October 2026 the Commission announced that an operator would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying withdrawals, among them a term allowing only one withdrawal request at a time.

Five Signs a Site Can Be Trusted

It Appears on the Public Register

The Commission advises clicking through to its public register and checking that the site's activities and domain names match the entry. A licence number on a footer proves nothing on its own; the register does. If an offshore seal is offered instead, click it — a Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind it names a different domain, it belongs to someone else.

It Built Its Checks Before the First Deposit

Licence condition 17.1.1 requires licensees to tell customers, before they deposit, what documents might be needed, in what circumstances and in what form. A site that does this has nothing to spring on anyone later. The Commission has criticised onboarding on incomplete information — initials instead of full names, commercial addresses instead of residential — and notes that a middle name in the wrong field can create mismatches with GamStop records, undermining an exclusion.

Its Bonus Terms Are Short and Its Cash-Out Cap Is Absent

Since 19 January 2026 wagering requirements cannot exceed ten times, and mixed-product promotions — offers requiring two or more types of gambling — are banned. The Commission's reasoning is worth quoting: the cap "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". It chose a cap over a ban because it judged a ban would push operators into terms preventing customers cashing out bonuses at all. Offshore terms are another matter. One operator states casino bonuses carry a 25× playthrough, with slots counting 100% and live dealer 0%; another caps winnings from bonus funds at 300% of the bonus and voids the excess. Kahnawake-registered terms aside, no British rule forbids the second clause — British rules simply stop it applying to a deposited balance.

Its Complaints Route Ends at an Adjudicator

Social responsibility code provision 6.1.1 requires an operator to offer referral to an approved alternative dispute resolution provider, free of charge, if a dispute is unresolved after eight weeks. The Commission's list includes IBAS and eCOGRA. A site with no named ADR provider has no end to the argument. Check the name before you need it: 72.3 per cent of eCOGRA's invalid disputes in 2024-25 had never been through the operator's own complaints procedure first.

It Says Out Loud Whether Your Money Is Protected

Customer funds must be held in a separate client account, and every operator must select one of three protection ratings — "not protected", "medium protection" or "high protection" — state it in its terms, and, if not protected, remind the customer every six months, with the value of funds held. A separate account is not a guarantee: gambling businesses may hold customer money in overseas bank accounts, and money staked in an open bet is not customer funds at all.

How to Judge a Site Before You Deposit

1. Check the licence on the register, not the footer. Follow the Commission's public register link and confirm the domain is listed. Reason: an operator may hold a licence for other activities, and the register shows whether this activity and this domain are covered.
2. Read the withdrawal section of the terms before the bonus section. Look for processing times, a named ADR provider, and any limit on how much of a balance can be withdrawn. Reason: a maximum withdrawal clause is the single most expensive line in a casino's terms, and British rules forbid it on a deposit balance.
3. Set the account's own limit at the point of first deposit. Since 31 October 2025 every operator must prompt for a financial limit before the first deposit and present it as the default; declining takes a deliberate action. Reason: a limit that is set at the start is not a limit negotiated with yourself at two in the morning.
4. Verify identity before winning anything. Send the documents when the account is opened, not when the balance is large. Reason: with verification already done there is no information to demand at cash-out, and complaints about identity checks are now over a quarter of those reaching the Commission.
5. Withdraw a small amount first and time it. Note the hour of the request and the hour the money lands, then compare with the method table above. Reason: the first withdrawal is the only real test of a site's payment process, and the Commission's Contact Centre data shows most complaints start here.
6. Keep the complaint inside its time limits. Raise it with the operator, allow eight weeks, then take it to the named ADR provider. Reason: ADR is free and binding in practice — IBAS reported 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25.

How Many People Gamble Online in the UK, and Where the Money Goes

The Commission's own survey work gives the scale: 47 per cent of adults gambled in some form in the past four weeks, falling to 27 per cent once lottery-only players are excluded, from a third annual Gambling Survey for Great Britain based on 20,775 adults. Among all participants, 2.4 per cent scored 8 or more on the problem gambling severity index — stable at 2.5 per cent, 2.7 per cent and 2.4 per cent across the survey's three years. Remote casino, betting and bingo gross gambling yield was £8.3 billion in the year to March 2026, up 6.9 per cent on a total British market of £17.5 billion.

Estimates of the unlicensed share disagree, which is itself informative. The Commission's November 2026 analysis puts engagement with illegal gambling websites at 2.5 per cent of those who had gambled online in the past four weeks, with a further 1.5 per cent in the past 12 months. H2 Gambling Capital puts stakes with illegal operators at £16.6 billion in 2025, against roughly £5 billion in 2019. Analysis for the Campaign for Fairer Gambling puts unregulated gross gaming revenue at 9 per cent of the 2025 market, up from 7 per cent in 2024.

Much of the concern is money rather than games. The Commission's 2026 risk assessment rates remote casino as high risk for money laundering, unchanged, and describes growing use of false documents, deepfake videos and AI face swaps to get past customer due diligence. Financial vulnerability checks became a licensing requirement in August 2024, with the threshold lowered to £150 net deposits over a rolling 30 days from 28 February 2025. Financial risk assessments arrive in stages from the highest thresholds, £5,000 net deposits in a rolling 24 hours for customers aged 25 and over, a spend pattern fewer than 0.5 per cent of customers exceed.

One regulation deserves a scrap. The credit card ban has applied since 14 April 2020 — sensible, since it removes borrowed money from the equation — but it never reached non-remote lottery licences, so credit cards still buy scratchcards in a shop. That gap is not a principle, it is a carve-out.

If Gambling Stops Being a Choice

The National Gambling Helpline is run by GamCare on 0808 8020 133, free, 24 hours a day, every day of the year, and reaches the same service by live chat and WhatsApp on mobile. Callers in Wales have a separate number, 0808 2819 265. It is not a crisis line and staff cannot transfer a person at immediate risk, so they follow safeguarding procedures instead.

Beyond the phone: GamStop Online for self-exclusion from licensed online operators; SENSE for land-based casinos; Gamstop Betting Shops, formerly MOSES, on 0800 294 2060 for betting shops; Gamblers Anonymous on 0330 094 0322 with around 250 meeting locations and no appointment needed; GamFam for families; Gam-Anon for the friends and relatives of compulsive gamblers. NHS England's specialist gambling clinics and the regional services commissioned by integrated care boards now see almost 5,000 referrals a year, funded by a statutory levy that raised just under £120 million in its first year, ringfenced for research, prevention and treatment. Citizens Advice gives free debt and benefits advice, and Citizens Advice Scotland's gambling support line on 0800 328 1131 runs weekdays from 10am to 3pm.

Two words of practical detail. Blocking software is a separate layer: BetBlocker blocks over 1,368,000 gambling websites and 3,100 apps, needs no registration and is free worldwide, while Gamban blocks licensed and unlicensed sites and, after TalkBanStop funding ended on 31 March 2026, is free for residents of Wales but costs £4.99 a month or £29.99 a year in England and Scotland. And bank blocks work at card level, must be switched on for each card, and carry a cooling-off period of 48 or 72 hours before gambling transactions are allowed again — the Commission's list of participating banks runs to eleven names, from Bank of Scotland and Barclays to Santander and Starling.

Frequently Asked Questions About Online Gambling UK

What is the best online gambling site in the UK?

There is no single answer, and any list claiming one is selling something. The honest method is to rank sites by how money comes out: check the public register entry, read the withdrawal terms before the welcome offer, and time a small cash-out. The Commission's data shows 96.3 per cent of withdrawals at large operators between June and September 2024 cleared automatically, which is the standard a site should meet.

How many online gambling sites are there in the UK?

Nobody publishes a reliable total, and the honest numbers point at the unlicensed end. The Commission's dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, 4 per cent more than a year earlier, and 311 faced disruption action in the second quarter of 2026-27. Licensed operator numbers shift too, since one licence can cover several domains listed on the public register.

Are winnings from online gambling taxed in the UK?

No. There is no tax on a player's gambling winnings in Great Britain, and none on a withdrawal balance. The levy sits on the operator, not the customer: the statutory gambling levy commenced on 6 April 2025 at 1.1 per cent of previous-year gross gambling yield for all online operators, and raised just under £120 million in its first year, ringfenced for research, prevention and treatment rather than general spending.

Can I withdraw money if I still have a bonus running?

Yes, and the Commission is explicit that players must be told so. Guidance says a player may withdraw their deposit balance at any time, including while a bonus is pending or active, without restriction beyond general regulatory obligations; deposit and bonus balances must be displayed separately. Since 19 January 2026 wagering requirements are capped at ten times, so a bonus cannot be used to lock a balance behind an impossible turnover target.

What can I do if a casino refuses to pay out?

Complain to the operator first and keep proof. If eight weeks pass without resolution, social responsibility code provision 6.1.1 entitles the customer to refer the dispute to an approved ADR provider free of charge — IBAS and eCOGRA are on the Commission's list, and IBAS resolved domestic disputes in an average of 20 days in 2024-25. The Commission itself cannot recover money for an individual.

What is the safest online gambling site in the UK?

Safety is a licence plus conduct, not a badge. The licence guarantees identity checks, the reverse-withdrawal ban, the ten-times wagering cap, separate client funds and access to an adjudicator. Conduct is visible in the terms: a named ADR provider, no maximum withdrawal clause, a clear customer-funds rating, and identity verification invited at sign-up rather than at the point of cash-out.

Withdrawal Terms and Payout Rules

British online gambling works well when the licence does the work and the player reads the paperwork, and the whole difference between a good operator and a bad one shows up in the space between a deposit and a withdrawal — which is why the 44.2 million withdrawals recorded between June and September 2024, 96.3 per cent of them clearing automatically, remain a better description of this market than any advert, and why the offshore alternative, where none of those rules apply and no British regulator has any jurisdiction, is a wager on the terms rather than a wager on the games. If it stops being a game, the National Gambling Helpline is on 0808 8020 133, free, at any hour, every day of the year.