Games Not on GamStop in 2026

Games not on GamStop are the games offered by operators that hold no Gambling Commission licence, so they sit outside the national self-exclusion scheme entirely. Curaçao, Anjouan and Kahnawake licences are the usual basis. Nothing about them is illegal for the player; what they lack is every UK protection, and that is the whole trade.

The promise is simple: a site that will take a bet from someone the British system has just told to stop. It is a promise built on a licence bought from a small island jurisdiction, delivered through a mobile browser or a downloaded app, and paid for by card, e-wallet or crypto. The gap between the promise and what arrives is where this page lives. On a phone the difference is easy to miss — the reels spin the same, the balance ticks the same, and the tap-to-deposit flow is, if anything, slicker than the one at home. Everything that distinguishes the two kinds of operator happens behind that screen: which regulator can see the books, whether the funds sit in a separate account, whether a complaint goes to an adjudicator or into a queue, and whether the withdrawal button works on the first ask or the fifth.

The scale is not trivial. Illegal gambling websites accessible to British consumers numbered 586 in September 2026, according to the Commission's own dashboard, and 311 of them had disruption action taken against them in the second quarter of 2026–27. But the same data shows the habit is confined: among adults who had gambled online in the past four weeks, the Commission estimates 2.5 per cent had engaged with an illegal site. That is a small, persistent minority, and the interesting question is not how many people do it but what the sites are actually made of.

Before any of the rest, plainly. Operators without a Gambling Commission licence are not licensed in Great Britain. UK protections do not apply to them: no self-exclusion enforcement, no access to the Commission's complaints route, no Alternative Dispute Resolution provider, no protection for customer funds under the licence conditions. If gambling stops being a game, the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day; callers in Wales are given 0808 2819 265. Where a British licence is held, that number and that safety net come as part of the package. Where it is not, they do not.

What the Block Actually Covers

The scheme is often typed "gamestop", which is a reasonable slip given the word "game" sitting right there, and it is worth pinning the name down before the mechanics, because the mechanics are stricter than most people assume.

GamStop Online is the national online self-exclusion scheme for Great Britain, run by The National Online Self Exclusion Scheme Limited, and it is free to use. It went live on 27 April 2018. Registration takes a few minutes, the block can take up to 24 hours to bite, and once it is in place the person cannot cancel it. Terms run for six months, one year, five years, or five years with auto-renewal. At the end of the chosen term the exclusion does not lapse — it stays in place until the person contacts GamStop to remove it. And even after that, if nothing is done, the scheme holds the data through a further seven-year period during which operators are told the person was previously excluded.

That last detail is the one the offshore market is really selling against. It is not a technicality that can be waited out.

Operators must take part in the scheme as a condition of their licence, under the Gambling Commission's Licence Conditions and Codes of Practice social responsibility code provision 3.5.5, and they must check their whole customer base against the register at least every 24 hours, introduced in April 2020. When two operators missed the original integration deadline, the Commission suspended their licences. There is no equivalent enforcement power over a company it has never licensed.

The figures show how many people are inside that wall. GamStop had 561,983 active exclusions at the end of 2025 and 117,756 new registrations during the year. By July 2026 it reported 614,738 consumers on the register, with more than one in two having chosen the maximum five-year term and under-25s accounting for nearly one in three of the half-year's sign-ups, a 26 per cent year-on-year rise. Among the periods selected across 2025, 29 per cent took six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. The six-month option — the one outsiders imagine being chosen most often — is a minority taste.

And the register is not the only barrier a person has already chosen. Bank gambling blocks, listed by the Commission as offered by Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, work at card level against gambling merchant codes, and most banks impose a 48- or 72-hour cooling-off before a block can be switched off. Gamban and BetBlocker, both signposted by GamStop, block at device level. A person who has already put three locks on the door does not usually take the fence route because the graphics on the other side look better.

The Licences Behind the Games

Curaçao

Curaçao used to be the byword for the loose arrangement: a master licence held by a private company, sub-licences sold off in bulk, an orange certificate anyone could print. That model is gone, at least on paper. The National Ordinance on Games of Chance took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory body. The old master licensors stopped issuing on a rolling schedule — Gaming Curaçao on 18 August 2024, Curaçao eGaming on 1 October 2024, Antillephone on 1 November 2024, Curaçao Interactive Licensing on 31 January 2025 — and the legacy orange sub-licence certificates ended on 15 October 2025. A historic /JAZ number is not proof of anything current.

The reform comes with numbers attached. A B2C application costs a one-time non-refundable €4,592, plus €150 per ultimate beneficial owner. The annual B2C cost is €47,450, split between a €24,490 licence fee to the National Treasury and a €22,960 supervisory fee to the CGA, payable by 15 January. Supplier registration becomes fully mandatory from 24 December 2026.

Verification is the part worth knowing. The CGA issues a domain-specific Certificate of Operation Seal and a separate, non-domain-specific Licence Certificate Seal, and the certificate is not interchangeable with a licence. Clicking a Certificate of Operation Seal must redirect to cert.cga.cw. If the certificate behind the seal names a different domain from the one in the address bar, the site is showing another operator's paperwork. There is a further wrinkle: in October 2026 the CGA said its online portal would not return to service and it is working on an alternative way to verify licensed domains, because the old digital seal may be affected by the transition. So even a genuine seal is, for now, a weaker signal than it used to be — which is worth holding on to the next time a site flashes a badge like a passport.

Anjouan

Anjouan is a constituent island of the Union of the Comoros, and its gaming framework descends from legislation adopted in 2005, including the Anjouan Computer Gaming Licensing Act. The regulator is named as the Anjouan Offshore Financial Authority, with Anjouan Licensing Services Inc. as sole authorised licence administrator. Fees are €17,828 for B2C issuance and €17,828 a year to renew, identical for B2B, plus €500 per extra domain. Anjouan says its licences carry no territorial restrictions under Anjouan law — and that holders must still comply with the law wherever they operate, a caveat that does most of the work in that sentence.

The jurisdiction's own certificate framework is the useful bit: certificates carry a unique licence number and a QR code linking to a public register, and certificates that cannot be verified through that register should not be relied upon as evidence of licensing status. Anjouan's published standards do require segregated player funds, certified random number generators, AML controls and age verification.

Then there is the reporting, which is where the badge starts to sweat. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 each per year, and that Comorian financial intelligence officials described Anjouan Corporate Services as operating illegally; a former attorney-general of the Comoros is reported to have called Anjouan Licensing Services "an illegal entity". That finding is reported, not adjudicated here, and Anjouan Gaming's response has been to say plainly that a licence was never a universal authorisation to operate everywhere. Read both, and the conclusion is modest: this is a small jurisdiction with a cheap licence, a public register worth checking, and a shadow of contested legality that a British player has no practical way to resolve.

Kahnawake

Kahnawà:ke has regulated interactive gaming since its Regulations were enacted on 8 July 1999, longer than most. Operators licensed there must be hosted at Mohawk Internet Technologies, a data centre in the Mohawk Territory managed by Continent 8 Technologies. The Commission issues one Interactive Gaming Licence, held by that data centre since 1999, and issues Client Provider Authorizations underneath it with no cap on the number — which is why a site "licensed in Kahnawà:ke" usually means a CPA holder, not the licence holder.

Two things stand out. First, the permit list moves: in October 2026 the KGC suspended a CPA held by Polar Ventures SDRL after a show-cause notice. Second, the regime is not soft on self-exclusion — Kahnawà:ke states its own voluntary self-exclusion is permanent and irrevocable, and a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a charity chosen by the Commission. That is a harsher rule than the British one in the specific sense that there is no route back. It is also, oddly, the clearest illustration that "not GamStop" describes a gap, not a philosophy.

Where the Games Come From

Here is the part the search term obscures. Very little casino content in the world is built by the operator. Slots and table games come from studios and platforms, and those suppliers are themselves licensed and audited. The Commission has noticed where the output lands: in January 2025 it issued an industry warning notice about casino games supplied by licensed operators appearing on unlicensed websites available to British consumers, noting that such sites often target people who have self-excluded through GamStop. That is a supply-chain warning, and it explains why an offshore site's reels can look identical to a licensed one's. They often are.

The practical consequence for anyone judging a site: the look of the games tells you nothing. What tells you something is who is behind the counter.

The rows that matter most are the ones about delay and about money. UK rules require that wagering requirements must not apply to play with the customer's own deposit balance, that deposit and bonus balances are displayed separately, and that the deposit balance can be withdrawn at any time even while a bonus is pending or active. Offshore that separation frequently collapses into a single figure on screen. It is a small design choice with large consequences: it is the mechanism by which "not on GamStop" quietly becomes "not like the others" in a much less flattering sense.

The Check That Decides Everything

If one mechanism decides how a session at an offshore site ends, it is identity verification, and specifically when it happens.

Under UK rules, licence condition 17 applies: identity must be established before a customer is permitted to gamble, and the information must include name, address and date of birth. But there is a permitted hybrid route — a remote casino may identify the customer and verify their age at registration and defer full verification until the anti-money-laundering threshold is crossed, which for remote casinos sits at €2,000 deposited or withdrawn. The threshold applies to a single transaction and to transactions that appear linked, which in a remote casino includes activity within a single logged-on period. In practice, the first time is usually quiet: an account is opened, a card is added, a modest deposit clears, and nothing is asked for. Betting companies typically verify the name, address and date of birth against credit reference agency and electoral roll data without a document ever changing hands.

Later is where it turns. Once a withdrawal of any size is requested, the account comes under scrutiny, and a request for a passport, a driving licence or a household bill arrives — often at the exact moment the person wants the money. The Commission's own numbers on this are bleak and instructive: a 2026 blog reported that over a quarter of complaints reaching its contact centre concern identity verification, and that such concerns are raised when customers are asked for documents only on attempting to withdraw. The Commission's Annual Report and Accounts 2024-25 records that withdrawal issues remain the cause of most complaints it receives, and that around 2,000 complaints a year about withdrawal delays were still arriving as of July 2024, the leading subject of complaints.

The British system's answer is licence condition 17.1.1: a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier, unless another legal obligation such as money-laundering rules requires it at that point. There is no equivalent condition on a Curaçao or Anjouan licence. So the same sequence — deposit in seconds, verify at cash-out — is a compliance failure in one regime and simply the house rules in the other.

Two more British terms are worth knowing because their absence is the real cost. Licence condition 7.1.1 requires terms to be fair within the meaning of the Consumer Rights Act 2015, and the Commission has said operators should not use clauses giving themselves sole discretion to void or withhold winnings. And the Competition and Markets Authority's undertakings, taken from six operators between 2016 and 2019, include a commitment not to impose any maximum limit on the amount a consumer may withdraw. Offshore maximum-cashout clauses are common, and one published example limits winnings generated with bonus funds to 300 per cent of the bonus amount, with the excess voided. That is the sentence that decides how a good night ends. The warning signs of a verification regime built for delay, rather than for checking: documents requested for the first time at withdrawal; a request for a selfie absent any suspicion of identity theft; a term permitting only one withdrawal at a time; and a review applied to every fifth or tenth withdrawal. The Commission's October 2026 settlement with one licensee, at £900,000, concerned exactly those patterns, including a term allowing only one withdrawal at a time, found unfair under the Consumer Rights Act 2015.

Five Signs an Operator Can Be Checked

The Licence Is Verifiable in One Click

An offshore licence is only worth what its register is worth. For Curaçao, click the Certificate of Operation Seal and confirm it redirects to cert.cga.cw and that the certificate names the domain in the address bar; the CGA has said a licence certificate is not interchangeable with a Certificate of Operation, and misuse of either is a compliance breach. For Anjouan, scan the QR code and confirm the licence number resolves on the public register — Anjouan's own framework says certificates that cannot be verified there should not be relied upon. For Kahnawà:ke, use the Logo Certificate Program, effective since 15 January 2010, which generates a Certificate of Good Standing. Anyone can check a licence; almost nobody does, which is why the badges are still worth printing.

The Complaints Route Ends Somewhere Independent

Ask what happens at an impasse, and where the answer goes. Under UK rules, licence condition 6.1.1 requires arrangements to refer a dispute to an approved ADR entity free of charge if the operator has not resolved it within eight weeks, and a consumer must usually have been through the operator's own process first. Anjouan requires licensees to name an authority-approved ADR provider in player-facing terms and expects complaints resolved within 30 days before escalation; the approved providers are EGIS ADR, Axion ADR, iGaming ADR and an approved entity. Kahnawà:ke employs a full-time Dispute Resolution Officer. What should raise an eyebrow is a site whose terms mention "an independent third party" without ever naming one. A queue with no door is not a complaints route.

The Terms Say When Money Leaves

Find the withdrawal clause and read only that. Look for lines that limit how many withdrawals can be pending at once, that state a maximum cashout on bonus-derived winnings, or that reserve the operator's discretion to void winnings. British guidance permits a cost-reflective processing fee and reasonable limits on the size or number of withdrawals, but it must be fair, transparent, disclosed before deposit, and no higher than the direct cost of processing; a clause such as a £50-a-day withdrawal cap is a named example of a prohibited term. Offshore, maximum-cashout language is ordinary. The check for the reader is mechanical: whichever of those sentences appears, it will have been in the terms before the first deposit.

The Funds Are Held Somewhere the Business Cannot Spend Them

UK rules require remote operators to hold customer funds in a separate client bank account, and to select and disclose one of three insolvency protection ratings, with an operator rated "not protected" obliged to remind the customer every six months that their funds are not protected and to state the value held. That disclosure must be acknowledged before funds can be used for gambling. Anjouan's standards require segregated player funds and so do Curaçao's, but neither requires the UK-style rating and disclosure. Usefully, the Commission itself is blunt: keeping customer funds in a separate account does not guarantee their return if the operator becomes insolvent, and gambling businesses may hold customers' money in overseas accounts. So the honest reading is that segregation is a floor, not a promise.

The Mobile App Behaves Like a Bank, Not a Trap

Most people arrive on a phone, so the phone is where the checks are easiest. Deposit speed should not exceed withdrawal speed by an order of magnitude; the app should display deposit and bonus balances as separate figures; and a limit should be offered before the first deposit, presented as the default option rather than buried behind a decline-and-confirm step, as UK rules have required since 31 October 2025. Note too what a downloaded app does to the alternative: a gambling block applied at the phone or the bank card is what catches an app, whereas a browser-based block is a weaker guard. The test is not whether the app is well built. It is whether the operator built it to make leaving as easy as arriving.

How to Judge an Offshore Site in Six Steps

1. Decide first what the excursion is for, and write down the limit before opening a site. Gambling blocks from banks, Gamban and BetBlocker sit at card and device level because those are the levers that operate before a decision is made rather than during it. The reason is that every check available to a person operates on the account, the card or the phone — never on the operator.
2. Check the licence on the regulator's own register, not on the site's footer. For Curaçao, follow the seal to cert.cga.cw and match the certificate to the domain. For Anjouan, scan the QR and resolve the licence number. For Kahnawà:ke, generate the Certificate of Good Standing. A badge that leads nowhere is a design choice.
3. Read the withdrawal clause before the welcome offer. Look for maximum cashout language, a one-withdrawal-at-a-time rule, discretion to void winnings, and any processing fee. If the offer is described in 200 words and the delay mechanism in four, the four are the ones that will be applied.
4. Check whether the operator names an ADR provider, and whether the provider's own site accepts that operator. ADR providers on the Commission's list may refuse a dispute where the website is not on their approved list, and eCOGRA may refuse where two weeks have not passed since the problem began or where the dispute arose more than a year ago. Naming a provider proves nothing; the provider naming the operator does.
5. Compare the wagering terms against the British cap, because that comparison is the market. From 19 January 2026, British-licensed operators cannot apply wagering requirements above 10× on bonus funds, and cannot build a single offer out of more than one gambling product type. The Commission chose a cap over a ban precisely because some licensees had been applying up to 60×. Offshore multipliers are not capped in those terms. That gap is not a perk; it is the price.
6. Keep the help line where it can be found without a search. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, and also via live chat and WhatsApp; callers in Wales are given 0808 2819 265. It is not a crisis line and staff cannot transfer someone at immediate risk, so it sits alongside, not instead of, emergency services. Citizens Advice Scotland runs a gambling support line on 0800 328 1131 on weekdays between 10am and 3pm. The point of writing it down in advance is that it is not a number anyone wants to look up for the first time at 3am.

Why the Numbers Say the Fence Route Is Smaller Than It Feels

The unlicensed market has a loud lobby and a modest footprint, and both deserve stating. Industry-commissioned and independent estimates diverge sharply. H2 Gambling Capital puts stakes with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council, conservatively, put £2.7 billion staked annually online on the black market — 2.1 per cent of the £128 billion staked with regulated remote operators — plus up to £1.6 billion in person at illegal venues. Yield Sec, working for the Campaign for Fairer Gambling, put the GB online market at £8.8 billion gross gaming revenue in 2025, split 91 per cent regulated and 9 per cent unregulated, against 93 per cent and 7 per cent in 2024. The Commission's own survey, published on 5 November 2026, found that among adults who had gambled online in the past four weeks, an estimated 2.5 per cent had engaged with an illegal site.

The spread between those sets of numbers is itself the story: nobody has a clean measurement, and each figure flatters whoever paid for it. What is not in dispute is the direction of travel on the enforcement side. Since April 2024 the Commission has issued 3,140 cease and desist and disruption notices, referred 447,778 search-engine URLs, secured 287,961 URL removals, and reported an average 32 per cent fall in engagement across 160 illegal sites. In the quarter July to September 2026 alone it referred 1,835 websites covering 7,677,211 URLs and issued 546 cease and desist notices. Its own assessment is that domain-level and IP-level blocking work far better than search-engine removals, because delisting makes a site harder to find without blocking it. That distinction should interest anyone who has noticed how easily a "not on GamStop" site disappears from Google and reappears under a new domain a fortnight later.

The counterweight is the betting-and-gaming industry's own interest in the figures. Every estimate of black-market growth is also an argument about tax, levy and stake limits, and there is no version of the number that does not serve someone's case. The Commission's methodology is the most transparent and the most explicitly limited: it combines web-traffic data with a licensed-play assumption of £0.32 of GGY per minute of online slots play, and says outright that it does not capture activity hidden by VPNs. That caveat explains why a survey can find 2.5 per cent while a commercial estimate can imply something closer to 9 per cent of revenue. They are not measuring the same thing, and one of them is measuring what it can see.

Questions About Games Not on GamStop

Which gambling sites are not on GamStop?

Any site that holds a licence from another jurisdiction instead of one from the Gambling Commission — most commonly Curaçao, Anjouan or Kahnawà:ke. The scheme's obligations bind only operators licensed in Great Britain, because participation is a licence condition, so a site with no Commission licence is not connected to it at all. There is no published master list, and there could not be: sites change domains, and 1,835 websites were referred to search engines in a single quarter of 2026.

Do gaming sites not on GamStop block self-excluded players anyway?

Rarely, and it differs by regime. Kahnawà:ke has its own voluntary self-exclusion scheme, which it describes as permanent and irrevocable. Anjouan requires age verification and AML controls but is not connected to the British register. The Commission warned in January 2025 that unlicensed sites often target people who have self-excluded through GamStop, which tells you the answer in the aggregate. A self-exclusion is not lifted by signing up elsewhere; it remains on the register for its full term and beyond.

Is it illegal to play at gambling websites not on GamStop?

No. The offences in the Gambling Act 2005 fall on the provider, not on the adult consumer. Section 33 makes it an offence to provide gambling facilities without a licence, and the Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without one, including where the operator holds a licence elsewhere, with imprisonment of up to 51 weeks on summary conviction. Sections 330 and 331 cover advertising unlawful gambling. The exposure sits with whoever is running the site.

Do bingo games not on GamStop work the same way as slots?

Broadly, with one difference that matters for bonus terms. British rules from 19 January 2026 ban mixing more than one gambling product type within a single incentive, including where terms are linked and shared. Ping-ponging between bingo and casino rooms at a licensed site is now a defined compliance problem for the operator. Offshore, the product categories are frequently pooled — bingo winnings credited as casino bonus, wagering contribution rates applied per game type — which is precisely the construction British regulation set out to remove.

What gambling companies not on GamStop do about payment methods?

They lean on e-wallets and crypto, and the licence terms are why. UK licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment from British customers only through a provider that is a payment service provider under the Payment Services Regulations 2017, and credit cards have been banned for UK-licensed gambling since 14 April 2020. Offshore operators face neither restriction. Crypto payouts bring their own arithmetic: a Bitcoin block arrives on average every ten minutes but is not guaranteed within that window, and a standard USDT transfer on TRON burns roughly 13 TRX in energy.

Do Welsh gambling sites not on GamStop differ from the rest?

No, and that is the point of asking. Great Britain's licensing regime and self-exclusion scheme are single, so a site without a Commission licence is equally unlicensed for a player in Cardiff and a player in Manchester. What does differ in Wales is support: the National Gambling Helpline number given for callers in Wales is 0808 2819 265, alongside 0808 8020 133 for England and Scotland, and Gamban has been free for residents of Wales since TalkBanStop funding ended on 31 March 2026.

The Long and Short of It

Games not on GamStop are a market segment defined entirely by an absence — of a licence, of the register, of the withdrawal protections and the free adjudication that come with it — and the practical difference between one offshore operator and another comes down to whether it has built delay into its withdrawal terms, which the terms themselves will admit in a sentence or two. The comparison that settles most of it is not between brands but between two numbers: a British licence caps wagering at 10 times and forbids asking at withdrawal for what could have been asked at deposit, while an offshore one caps nothing and promises nothing. At the last count, 614,738 people were on the GamStop register, more than half of them for the full five years, and that figure only stays in place because they have not asked for it to be removed.