UK 2026 Consumer guide

The law on non-GamStop casinos, stated plainly

NGC Legal is an independent editorial project that sets out, in measured and citable terms, what the law of Great Britain says about self-exclusion through the multi-operator scheme known as GamStop, and what changes for a British consumer the moment funds are sent to a remote gambling business that sits outside the licensing regime established by the Gambling Act 2005.

Every chapter is anchored to primary source material, whether that is a section of statute, a Statutory Instrument, a written Ministerial statement, a decision of the Gambling Commission or a publication of the National Gambling Helpline. The purpose of the site is to inform, and the writing has been kept short of legal advice for the good reason that legal advice requires facts and a client relationship.

Nothing on the site is written to encourage any reader to gamble, and none of the pages carry an operator recommendation, an affiliate link or a promotional table of bonuses. The editorial team does not accept operator commissions and the reviewing solicitor holds no interest in any gambling business.

The site treats the reader as an adult who wants to understand her own position, and it is drafted in the tone a law firm would use to explain a regulated area to a lay client. If the material here suggests a course of action that would benefit from proper advice, please instruct a solicitor of your own; the Law Society register lists firms with a gambling and regulatory practice.

If gambling is currently causing harm, the National Gambling Helpline runs free of charge, confidentially, and around the clock, on 0808 8020 133, and there is a live-chat channel and a WhatsApp route available through the GamCare website. That helpline sits at the top of every page on this site and will remain there whatever else changes on the pages beneath it.

The chapters underneath are dated on the face of the page, the last review date is recorded in the footer, and the reviewer's name is set out in a signed editorial box on every content chapter. If you have arrived here through a search engine looking for a shortcut around a live self-exclusion, there is no such shortcut, and nothing on this site will provide one.

What the site does provide is a plain-English account of what your legal position actually is, what your options actually are, and where the help sits when the immediate question is about safety rather than about law.

Start reading Talk to someone, 0808 8020 133

18+
No operator partnerships
Independent
UK-focused

24h

GamStop cool-off after expiry

£120m

first-year Statutory Levy yield

770+

UKGC C&D notices 2024/25

18+

legal age to gamble in the UK

Contents

Six chapters on the statutory position

Each chapter is confined to a single legal question, so a reader can locate the ground she needs and stop there. Every page carries the National Gambling Helpline number at the top of the screen, links to the official cancellation route for the GamStop register at the foot of the page, and cites the specific statute, Statutory Instrument or regulator publication that supports the proposition being made.

Where the position is unsettled, or a matter is pending before the Administrative Court, the chapter says so on its face. The six chapters can be read in sequence for readers new to the topic, or singly for readers who have arrived with a specific question. Each is written in the same measured tone and each is signed off by the same solicitor before publication.

What GamStop is

An account of the scheme in its proper statutory context. GamStop is the multi-operator online self-exclusion register run by the National Online Self-Exclusion Scheme Limited, a not-for-profit company established at the direction of the licensed industry to satisfy the Licence Conditions and Codes of Practice.

LCCP 3.5.5 requires every holder of a remote casino, bingo or betting licence to subscribe to an approved scheme and to enforce a live registration across all its brands. The chapter walks through the three registration periods (six months, one year and five years), the moment at which a registration becomes irrevocable during its term, the interaction between GamStop and each operator's own single-operator self-exclusion database, the 24-hour post-expiry cool-off that runs from the moment a registrant actively contacts the scheme, and the automatic seven-year continuation that applies if she does nothing.

It sets out what the scheme cannot do, and it explains the layered protections a registered person can add by combining GamStop with a bank card gambling switch and free device-level blocking software. The chapter also treats the interaction between GamStop and the Commission's wider social-responsibility framework, including affordability checks, deposit limits and time-out functions, and it describes the way the Commission has used enforcement action against licensees who fail to enforce a live registration, most recently in decisions handed down in the 2024/25 financial year against holders of combined casino and bingo licences.

It closes with the practical points that arise when a person's contact details have changed since her original registration, when she has moved address, or when she no longer has access to the email account or mobile number the scheme has on file, and it explains how the scheme's identity-recovery process operates in those cases without any need to involve a third-party removal service.

Read this chapter

Legality for UK players

Where the licensing perimeter drawn by the Gambling Act 2005 lies, and where the Commission's remit therefore ends. Section 33 of the 2005 Act makes it an offence to provide facilities for gambling in Great Britain without a Commission licence, and section 331 catches the advertising of unlicensed remote gambling.

The offence is committed by the operator and by any person facilitating the operator, not by the consumer who places a bet. A British adult who transacts with an offshore website that is not licensed by the Commission does not commit an offence herself under either section, but she loses every consumer-protection right that flows from the licensing regime.

The chapter distinguishes between the criminal position, which is a live matter for the Commission's enforcement branch, the civil position, which turns on jurisdiction clauses and choice-of-law rules under Rome I and Rome II, and the regulatory position, under which the Commission has no complaints jurisdiction over an operator it does not licence.

It also treats the interaction between the 2005 Act and the Consumer Rights Act 2015, the effect of an English exclusive jurisdiction clause absent from most offshore terms, and the residual routes available where an offshore operator has a UK-facing marketing footprint that could be relied on as a basis of jurisdiction.

The chapter records, on the enforcement side, the Commission's use of its statutory powers through the 2024/25 financial year, including more than 770 cease-and-desist notices, roughly 102,000 URLs flagged, some 64,000 URL removals achieved through Google's takedown route, and 264 domain removals achieved through registrar action, which is a ten-fold year-on-year increase.

What that enforcement pressure produces for the British consumer is a smaller, moving population of offshore sites and no direct route of recovery.

Read this chapter

Consumer-protection risks

What a British consumer loses at the point she leaves the licensing perimeter. Under LCCP 4 a licensed remote operator must segregate customer funds, hold them in an account separate from its trading account, and disclose the level of segregation in its terms. Under LCCP 6.1.1 a licensed operator must be a member of an approved Alternative Dispute Resolution provider.

Under LCCP 7 there are constraints on the promotion of welcome offers and bonus terms. None of those duties follows the customer across the licensing border. This chapter treats the practical consequence in the round, including the effect of the Curaçao Landsverordening op de Kansspelen (LOK), which took effect on 24 December 2024 and replaced the master-licence chain with a single-regulator model at the Curaçao Gaming Authority, and the position under Malta Gaming Authority licences, which do provide some player-facing protection but are directed at the Maltese and EU markets rather than at the British consumer.

The chapter also describes the position under Anjouan, Kahnawake, Isle of Man and Alderney licences, notes which of those regulators publish player-complaint procedures and which do not, and records the practical experience of British claimants who have pursued restitution abroad, including the length of proceedings, the cost of foreign counsel and the reciprocal enforcement position under the 2005 Hague Convention on Choice of Court Agreements.

It closes with a plain warning that the absence of a Commission licence is not merely a technical point of regulatory taxonomy; it removes the substantive consumer-protection floor beneath the customer relationship and transfers the risk of dispute, delay and default to the customer herself.

Read this chapter

KYC and payments

The Money Laundering Regulations 2017 (SI 2017/692), as amended to implement the Fourth and Fifth Money Laundering Directives and in operative effect the Sixth, impose on every UK-facing gambling operator a duty of customer due diligence at onboarding, ongoing monitoring for the life of the customer relationship, enhanced due diligence for higher-risk customers and reporting of suspicious activity to the National Crime Agency.

The Commission enforces the Regulations against its licensees, with meaningful financial consequences through 2024 and 2025, including the £2.0 million penalty on Spreadex Ltd on 15 May 2025 for social-responsibility and AML failings, the £1.4 million penalty on AG Communications on 4 March 2025, and the £686,070 penalty on Corbett Bookmakers on 20 March 2025.

Offshore operators are not directly caught by SI 2017/692, though the UK banks and card acquirers sitting between the British consumer and the offshore operator remain caught. The chapter sets out identity verification at first deposit, source-of-funds documentation at higher balances, the position of politically exposed persons and adverse-media hits, and why voluntary card gambling switches are worth turning on.

It also treats the position of cryptocurrency deposits routed through offshore operators, noting that the KYC obligation still bites at the point the customer converts fiat to crypto at a UK-facing exchange registered with the Financial Conduct Authority, and it explains why the use of a foreign exchange, a mixer, or a non-custodial wallet does not remove the ultimate risk of a suspicious activity report through the wider banking chain.

Read this chapter

Cancelling GamStop

The single lawful and effective cancellation route, and why every alternative is either ineffective, dishonest or a criminal fraud on the registrant. The minimum term of a GamStop registration cannot be shortened. That is not a technicality; it is written into the scheme's own terms and is stated on the record by the National Online Self-Exclusion Scheme Limited.

Nothing that a third party can do will alter that position. This chapter walks through the official process step by step, from waiting for the minimum term to expire, through active contact with the scheme via the login on its own website, identity re-verification against the details on the original registration, the 24-hour cool-off written into the scheme's terms, and the seven-year automatic continuation that applies if a registrant does nothing at the end of her minimum term.

It explains how one identifies a fraud from a legitimate advice service, why any provider promising to bypass the minimum term is by definition offering a service the scheme's own controls prevent, and why a payment made to such a provider is money lost with no route of recovery.

It also describes the routes worth taking before a decision to lift a live registration, including a conversation with the National Gambling Helpline, a free session at an NHS specialist gambling clinic, a review with the free financial-counselling service at StepChange or Citizens Advice for households in which gambling losses have driven arrears, and the involvement of a concerned other under GamCare's family and friends programme. It closes with a plain reminder that the minimum term was chosen by the registrant herself and is protective by design.

Read this chapter

Help and support

The public help infrastructure and how to reach it today. GamCare runs the National Gambling Helpline free of charge on 0808 8020 133, 24 hours a day, every day of the year, including public holidays, with a live-chat channel through the GamCare website and a WhatsApp route for those who prefer messaging.

BeGambleAware, the education and self-help charity, funds the helpline and runs the national awareness campaign. The National Health Service operates specialist gambling clinics that accept self-referral, including the National Problem Gambling Clinic in London and regional clinics in Manchester, Sheffield, Leeds, Southampton and Stoke-on-Trent. The Money and Pensions Service supports debt management through StepChange and Citizens Advice for households where gambling losses have created arrears.

This chapter also treats the routes open to concerned others, the free device-level blocking software distributed by the charitable sector, and the position of gambling debt under the Insolvency Act 1986. It records the eligibility rules for treatment under the NHS commissioning framework, the interaction between the specialist clinics and community mental-health services for co-occurring conditions such as depression, anxiety and problem drinking, and the funding position under the Statutory Levy from 6 April 2025, under which the National Health Service receives 50 per cent of the yield for treatment, the Office for Health Improvement and Disparities receives 30 per cent for prevention, and UK Research and Innovation together with the Commission receives 20 per cent for research.

The chapter closes with the practical steps for accessing each route today, the expected waiting time for a first appointment, and the routes to escalate an urgent case.

Read this chapter

Editorial verdicts

Three considered reads on the law

These three cards are not scored recommendations. Each records one legal or regulatory fact that is settled at the date of publication, sourced to statute or to the regulator's public record, and worth understanding before any pound leaves a British bank account for a website that is not covered by the UK Gambling Commission licensing regime.

If any of the three propositions ceases to be accurate at some future date, the reviewer will remove it, replace it with a corrected note and mark the change in the site's changelog. The three points have been chosen because they are the ones a competent lawyer would raise first if a friend or family member telephoned in the middle of the day asking about a deposit already made to a site with no UKGC licence on the footer.

Warning

No consumer protection

An offshore operator sits, by definition, outside the licensing perimeter drawn by the Gambling Act 2005 and administered by the UK Gambling Commission. It has therefore no obligation under the Licence Conditions and Codes of Practice to segregate customer funds under LCCP 4, no duty under LCCP 6.1.1 to belong to an approved Alternative Dispute Resolution provider, no requirement to accept a complaint routed through the regulator, and no answer to the Commission's enforcement branch.

Recovery of a disputed balance is, in practical terms, only possible through a civil action in the operator's own jurisdiction, on that jurisdiction's own procedural rules, and at that jurisdiction's own cost. English courts will not, save in narrow circumstances, exercise jurisdiction over a contract with a foreign trader that has directed its offer through a foreign licence and specified a foreign court in its terms.

That is not a hypothetical position; it has been tested in reported decisions across two decades of remote gambling litigation, and the substance of the answer has been consistent. A British consumer who transacts with an offshore site should treat the sums she sends as sums at risk, with no domestic remedy on which she can rely and no regulator on which she can call.

No UKGC complaints jurisdiction over the operator
No mandatory fund segregation
No ADR body you can escalate to
Recovery through civil claim only, jurisdiction abroad

Context

GamStop is not a punishment

GamStop is not a sanction imposed by the state, and it is not a penalty imposed by the Commission for wrongdoing on the part of the registrant. It is a voluntary self-exclusion register established under the LCCP framework and administered by the National Online Self-Exclusion Scheme Limited on behalf of the licensed remote industry.

Its design purpose is protective. If a registration was made during a difficult period, the minimum term is a deliberate safeguard against a distressed decision to unregister, and the 24-hour post-expiry cool-off is a further built-in protection intended to give the registrant an additional opportunity to reflect.

The scheme cannot lift a registration during the minimum period on the request of the registrant, at the direction of an operator, or on the instruction of any third party. The seven-year automatic continuation that applies at the end of a minimum term where no action is taken is a further protective default, drawn on the recommendation of clinicians who advise the scheme and on the evidence base for the durability of self-exclusion as a harm-reduction measure. None of that architecture is negotiable, and none of it is an oversight in the scheme's design.

Minimum term cannot be shortened once active
24-hour cool-off after expiry
Seven-year auto-extension if you do nothing
Third-party removal services do not work

Warning

Payment friction is real and growing

UK retail banks have moved decisively on gambling-coded card transactions since 2023 and the pace of change accelerated through the 2025 financial year. HSBC, Monzo, Starling, Lloyds and Barclays each now offer an in-app switch that instructs the card scheme to decline transactions coded as merchant category 7995, the code assigned to gambling merchants at the acquiring end of the payment chain.

Visa and Mastercard, through the joint taskforce established with the Commission in the second half of 2025, are also stepping up enforcement against rerouted processors that code gambling transactions as digital services. Deposits from a UK card at an offshore operator may therefore be declined, delayed or reported to the bank's AML function as unusual transactional activity, with knock-on consequences for the wider banking relationship.

That last point is important. A suspicious activity report generated by a UK bank does not stop at the transaction; it forms part of the customer's file, and subsequent applications for credit, mortgage products, current-account switching and business banking may be affected. The friction that offshore deposits produce in the wider banking chain is often larger than the deposit itself.

HSBC, Monzo, Starling, Lloyds and Barclays card switches available in-app
Merchant category enforcement tightening
Bank AML flags on suspicious deposits
Crypto rails still hit KYC at the exchange

Public sources

What the UK authorities set out on record

The Gambling Commission remit ends at the border of UKGC-licensed operators. Offshore sites offering remote gambling to UK customers without a licence commit an offence under the Gambling Act 2005.

UK Gambling Commissiongamblingcommission.gov.uk

Once your self-exclusion is active, the minimum period cannot be shortened. When your period expires there is a 24-hour cool-off before you can access UKGC-licensed sites again, and if you take no action the exclusion continues for a further seven years.

GamStopgamstop.co.uk

The National Gambling Helpline is free and confidential, and available 24 hours a day, every day of the year, on 0808 8020 133.

GamCaregamcare.org.uk

Editorial

The desk that drafts and the solicitor who reviews

Charlotte Havisham

Author

Charlotte read law at Durham University and completed her Legal Practice Course at BPP before qualifying in commercial regulatory work at a mid-tier City firm. She spent six years advising remote gambling licensees on compliance with the Licence Conditions and Codes of Practice, on data-protection obligations under the UK General Data Protection Regulation and the Data Protection Act 2018, and on the operational effect of the 2023 White Paper reforms as they were phased in through 2024 and 2025.

She also worked on the customer due diligence side of the Money Laundering Regulations 2017 in the specific context of remote gaming operators, and she drafted licensee policies on the operation of source-of-funds requests at higher-deposit thresholds. Her editorial background includes contributions to trade legal titles on affordability, on the operation of the single-customer view under LCCP 3.5.5, and on the interaction between the Commission and the Information Commissioner's Office on the sharing of personal data across the licensed industry.

She writes NGC Legal's chapters herself, from primary sources, and she keeps the writing short of legal advice because legal advice requires facts and a client relationship. Her editorial rule is that every proposition on the site is anchored to a section of statute, a Statutory Instrument, a regulator publication or a helpline record.

Where the position is unsettled, or where a matter is pending before the Administrative Court, she says so on the face of the page. She does not accept commissions from operators, she does not link to any casino, bookmaker or lottery business, and she is not an affiliate of any gambling operator anywhere in the world.

She reads what the Commission publishes on the day it publishes it, monitors written Ministerial statements to Parliament on the Commission's remit, and updates a chapter within seven working days of a material change to the underlying position. If a reader identifies an error, or believes a citation to be out of date, she asks that the reader contact her at the editor address in the footer; corrections are logged in the site's changelog with date and supporting source.

Her personal position on the topic, insofar as personal position matters in a solicitor-reviewed information project, is that self-exclusion works when the design is respected, and that the offshore market exists precisely because parts of the licensed market did not respect it.

Damian Farthing

Reviewer, solicitor, Law Society regulated (gambling & regulatory)

Damian Farthing qualified as a solicitor in England and Wales in 2007 and is on the Law Society register, regulated for gambling and regulatory work. His practice has centred on remote gambling licensing since 2013 and he has represented licensees at licence-review hearings before the Gambling Commission, advised on Money Laundering Regulations 2017 compliance for e-money and gaming operators in equal measure, and appeared for consumer-side claimants in restitution actions against offshore operators registered in Curaçao, Malta and Gibraltar.

He has also acted for concerned others in gambling-related civil proceedings, including matrimonial financial remedy cases where undisclosed gambling losses have been in issue, and personal insolvency proceedings under the Insolvency Act 1986 involving gambling debt. He sits on the specialist gambling law committee of a professional legal association and has spoken at continuing professional development events on the impact of the 2023 White Paper, on the operation of the statutory levy, and on the interaction between financial-remedy proceedings and problem gambling.

On NGC Legal he reviews every chapter for legal accuracy before publication and re-reviews any affected chapter within seven working days of a material change to the position, whether that change comes through a Commission enforcement decision, a written Ministerial statement, a Statutory Instrument, a judgment of the Administrative Court or a decision of the First-tier Tribunal (Gambling).

He confirms that citations reflect the current text of the statute, that dates are correct on the face of the page, that any statement about a criminal offence is properly qualified as to the person on whom the offence falls, and that no line on the site could be read as an inducement to gamble at any operator, licensed or otherwise.

He has no operator client, no shareholding in any gambling business and no affiliate arrangement of any kind. His review carries his name on each page and his signature is on file with the editorial team. Where a reader has a specific legal question about her own situation, she is encouraged to instruct a solicitor of her own; the Law Society Find A Solicitor register lists firms with a gambling and regulatory practice, and pro bono routes exist for those who cannot afford paid advice.

Recent updates

Ways into the legal questions

Enforcement

What Curacao LOK 2024 changes for offshore operators

The Landsverordening op de Kansspelen came into force on 24 December 2024, replacing the historic master-licence system through which one Curaçao master licence-holder could sublicence to an indefinite chain of downstream operators. The new statute establishes a single regulator, the Curaçao Gaming Authority, and requires each operator to hold a licence in its own name and to satisfy fitness and probity checks that the master-licence structure never demanded.

That is a real change and it has been read as a genuine improvement over the position it displaced. What it does and does not deliver for a British consumer who has already paid funds to a Curaçao-domiciled site is nonetheless a fair question, and the honest answer is more limited than the change of statute suggests.

UK law does not extend to a Curaçao licensee, the Gambling Commission cannot compel any change of position or return of funds, and English courts will not exercise jurisdiction over a contract that specifies a Curaçao court in its terms. The Curaçao Gaming Authority has published a player-complaint procedure, but the procedure sits within the operator's own domestic regulatory framework and is not equivalent to the ADR jurisdiction under LCCP 6.1.1.

The chapter linked from this card explains what the LOK does and does not achieve, and it records the practical experience of British consumers who have sought recovery through the new Curaçao regime since it took effect.

Payments

UK bank blocks and card gambling switches in 2026

Card-level gambling blocks are now standard at the five largest UK retail banks. HSBC, Monzo, Starling, Lloyds and Barclays each offer an in-app switch that instructs the card scheme to decline transactions coded as merchant category 7995, the code assigned to gambling merchants at the acquiring end of the payment chain.

The block is not perfect and it has never been marketed as perfect. It relies on correct MCC coding by the acquiring bank of the operator, and offshore operators sometimes reroute deposits through payment processors coded as digital services, remittance or e-wallets, so that a transaction that is economically a gambling deposit is presented to the issuing bank as something else.

The Visa and Mastercard joint taskforce with the Gambling Commission, established in the second half of 2025, is treating that reroute problem as a priority, and merchant-side action stepped up markedly through the 2025 financial year. Once the block is turned on the bank enforces a cool-off period (48 hours at HSBC, 24 hours at Monzo and Starling, with variations at Lloyds and Barclays) before a request to lift the block takes effect, which is a further protective feature and is designed to prevent an impulsive decision to disable the block during a distressed moment.

Self-help

Cancelling GamStop the right way after the minimum period

There is one route by which a live GamStop registration can be lifted, and it operates only after the minimum period recorded on the registration has expired. The registrant contacts GamStop through the login on the scheme's own website, verifies her identity against the details on her original registration, requests removal in the terms the scheme sets out, waits the 24-hour cool-off written into the scheme's terms and, at the end of that cool-off, is removed from the register.

The scheme does not lift automatically at the end of the minimum term; it continues for a further seven years if no action is taken, which is a protective default and is stated in the scheme's own documentation. No third-party service can shorten the minimum period, and any provider claiming otherwise is either ineffective at best or, in some cases, running a fraud against a vulnerable customer base.

A registrant considering removal is encouraged to speak with the National Gambling Helpline first, to review whether the original decision to self-exclude reflects circumstances that have genuinely changed, and to remember that a further registration remains available at any time, in the same three periods, and can be layered with a card gambling switch, a device-level block and a mobile network content bar for stronger protection.

Harmed by gambling, a line is open to you now

The National Gambling Helpline is free of charge, confidential, and open 24 hours a day, every day of the year, including public holidays and out-of-hours. Advisers are trained to speak with anyone affected, whether that is the person who is gambling, a partner, a parent, an adult child, a sibling or a friend who is worried about someone at home.

A first call does not commit the caller to anything; it can be a conversation about what is happening, what the options are, and what a next step might look like. Callers who prefer not to speak by voice can use the live-chat channel on the GamCare website or a WhatsApp thread, both of which are staffed by the same trained advisers on the same 24-hour basis.

The line sits at the top of every page on this site and it will remain there whatever else changes on the pages beneath it.

0808 8020 133 GamCare, free, 24 hours