An online casino not on GamStop is one that holds no Gambling Commission licence, so it is not covered by the national self-exclusion scheme and not bound by UK rules on bonuses, payouts or identity checks. Its licence sits in Curaçao, Anjouan or Malta, and it is not licensed in Great Britain.
GamStop dominates this corner of the market'sulary, so it is worth being precise about what the scheme is. Gamstop Online is the UK's national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited, free to use, and it is often typed "gamestop". Since 31 March 2020 every operator holding a Gambling Commission licence has had to be part of it; the duty sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which says licensees "must participate in the national multi-operator self-exclusion scheme". That is the wall. Everything described as an online casino not on GamStop is a site standing on the other side of it, and the phrase describes an absence of regulation rather than a feature.
That absence is why the sector gets looked at twice: once by the commission, which reports 586 illegal gambling websites accessible to GB consumers in September 2026, and once by market analysts, whose estimates of the money staked offshore range from £2.7 billion a year to £16.6 billion. It is also, overwhelmingly, a phone market. From 13.11.2026, what follows is how these sites work, where the good ones behave acceptably and the bad ones do not, and how to tell them apart without taking anyone's word for it.
Table of Contents8
What "Not on GamStop" Actually Means
Offshore sites are not licensed in Great Britain, UK protections do not apply, and nobody will chase the money if it goes missing. The Gambling Commission cannot resolve individual complaints or help a consumer get money back; it refers disputes elsewhere and records them. It is an offence under section 33 of the Gambling Act 2005 to provide gambling facilities in Great Britain without an operating licence, and that applies whether the facilities are provided wholly or partly by remote communication, inside or outside the UK. The commission states plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without its licence, including where the operator holds a licence in another jurisdiction, and that an operator guilty of the section 33 offence faces up to 51 weeks in prison on summary conviction.
What the licence buys a player is not glamour; it is friction in the right places. A UK-licensed operator must check its entire customer base against GamStop at least every 24 hours, which is why a self-exclusion holds across every licensed site at once. Since 19 January 2026 wagering requirements on bonus funds are capped at ten times and mixed-product bonuses are banned. Online slots stakes are capped at £5 a spin for adults and £2 for 18- to 24-year-olds. Credit cards have been barred for gambling since 14 April 2020, a financial limit must be offered before the first deposit, and a financial vulnerability check is triggered at £150 in net deposits over 30 days. An offshore site has signed up to none of that.
Self-exclusion itself is a fact rather than an intention: it holds for its full term and then stays in place until the person contacts GamStop to remove it. There is no acute removal, no early exit, and no expiry by neglect. A site outside the scheme is not a way round that; it is simply a site that cannot see the list.
Five Benchmarks That Sort the Good From the Bad
Judging these operators is easier than it sounds, because the ones worth anything leave traces. It is the mobile experience that makes the difference visible, since almost all of this traffic arrives on a phone and a lot of it through an app or an installed shortcut. Here are the five yardsticks I would use, in order.
Payout Speed, Stated Plainly
The UK's own numbers set the bar. Gambling Commission data for June to September 2024 records 44.2 million withdrawals from customers of large online operators, of which 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. Against that, offshore sites are frequently described as taking 24 to 72 hours to approve, with some advertising a "priority" queue that is really a paid fast lane. A site that publishes a concrete processing window, in plain figures, on the withdrawal page rather than buried in the terms, is passing sign one. One that answers the question with "as soon as possible" is telling the truth.
Where the Licence Actually Sits
Check the regulator, not the seal graphic. Curaçao's National Ordinance on Games of Chance took effect on 24 December 2024, replaced the old master-licence model with direct licensing by the Curaçao Gaming Authority, and killed off the legacy orange sub-licence certificates on 15 October 2025 — so a site still displaying a /JAZ number or an orange seal is showing you a museum piece. The CGA's Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind it names a different domain from the one being used, that is someone else's paperwork. The agency announced on 7 October 2026 that its previous online portal will not return, with an alternative verification mechanism still in build. On the Anjouan side, certificates carry a licence number and a QR code; anything not verifiable in the public register should not be relied on as evidence of status.
Bonus Terms Without a Tripwire
An offshore welcome offer of 35× to 50× wagering on a bonus is normal, and no-deposit offers at 40× to 60× with a €50–€100 cashout cap are equally normal — trade comparisons put offshore welcome multipliers at 25× to 40×. The warning signs are the clauses attached: a maximum cashout expressed as a percentage of the bonus, a maximum bet of a few pounds while wagering, and a reweighting chart where slots count 100 per cent but table games count 20 per cent and roulette 5 per cent. None of that would survive UK guidance, which requires separate display of deposit and bonus balances and forbids wagering requirements from attaching to deposit money.
A Named Dispute Route
A serious operator names an alternative dispute resolution provider and keeps to it. Anjouan requires licensees to appoint an Authority-approved provider and to publish its details, with complaints expected to be resolved within 30 days before escalation; the approved names currently are EGIS ADR, Axion ADR, iGaming ADR and other approved providers. Kahnawà:ke runs a full-time Dispute Resolution Officer. If a site's terms offer an in-house "complaints team" and nothing beyond it, the last resort is the customer support queue, which is not a dispute route.
Age and Identity Checks Before the First Bet
The Gambling Commission expects age and identity verification before a customer deposits or stakes, and treats onboarding on partial or inaccurate information as insufficient — a point made sharply in an August 2026 blog noting that a middle name entered in place of a forename can create a mismatch against the GamStop record and quietly defeat the whole point of self-exclusion. A site that lets a new account deposit and play for days on an unverified name has not "streamlined" anything; it has skipped the check it needed most.
The Licence Is the Whole Argument
Of all the things this topic turns on, the licence is the one that decides everything else, so it deserves the closest reading. A licence is not a badge; it is a bundle of obligations, and the obligations are the product.
First time round, the difference is invisible. A new account at a well-run offshore site opens in two minutes, takes a deposit, and spins a slot with exactly the same feel as a reputable UK site — the same supplier games, the same responsive layout on a phone, often the same live dealer studio feeding another operator. The graphics do not know which regulator is watching. What is missing is the layer underneath: no financial limit prompt before the first deposit, no £5 stake cap on a slot, no wagering cap of ten times, no daily sweep of customer records against GamStop.
The divergence shows up later, and it shows up at the point of money moving the other way. There is no fixed maximum number of days within which a UK operator must complete a withdrawal either — the regime relies on fair and open terms, the rule that a withdrawal request must not trigger fresh demands for information the operator could reasonably have sought earlier, and the prohibition on unfair terms. In practice, though, UK sites mostly pay fast because the commission's data says 96.3 per cent of those 44.2 million withdrawals cleared automatically. Offshore, the leverage runs the other way, and the timing of an identity or source-of-funds request is the tell. Asking on the way in is admin. Asking on the way out, once winnings have accumulated, is a business model.
The warning signs follow from that. A document request that appears only at withdrawal. A term letting the operator void winnings at its "sole discretion" — the kind of clause that drew a £170,000 penalty for a UK operator in July 2025 and, a year later, contributed to a £900,000 settlement for an operator whose term permitted only one withdrawal at a time. A cap on the amount that can be cashed out from bonus winnings. A live chat that answers a payment question with a link to the terms. A deposit that clears instantly while a withdrawal is "under review". Individually each is survivable; three together is a pattern, and patterns are what the licence is supposed to prevent.
Comparing Licences and What They Buy on a Phone
The table below compares by rule, not by brand, because brands change hands and rules do not. Every figure here is drawn from the same sources as the text.
| Rule or practice | UK-licensed operator | Offshore operator |
|---|---|---|
| Self-exclusion coverage | Must join the national scheme (SR code 3.5.5, since 31 March 2020); customer base checked at least every 24 hours | Outside the scheme; cannot see a GamStop registration |
| Payout timing | 96.3% of 44.2m withdrawals (June–September 2024) cleared automatically | Commonly 24 to 72 hours to approve; often faster with a paid priority option |
| Bonus wagering cap | Capped at 10× since 19 January 2026 | 35×–50× for welcome offers is typical; 40×–60× on no-deposit offers |
| Mixed-product bonuses | Banned since 19 January 2026 | Permitted and common |
| Slot stake limit | £5 per spin for adults, £2 for 18–24s | No cap |
| Credit card deposits | Barred since 14 April 2020 | Accepted by many |
| Financial risk prompts | Limit offered before first deposit; vulnerability check at £150 net in 30 days | None required |
| Dispute escalation | Commission-approved ADR, free to the consumer, after an eight-week internal window | Provider named by the offshore regulator, if appointed at all |
| Insolvency cover | Customer-funds protection rating must be disclosed | No equivalent duty |
The Checks Before a Single Apple Pay Tap
There is no clever shortcut here, only an order of work. Six steps, each one there for a reason.
- Find the licence, then find the register. Click through to the regulator's public register and confirm the domain name matches the site being used. Reason: a valid licence displayed against a domain it does not cover is the oldest trick in the sector.
- Read the withdrawal page before the bonus page. Look for a stated processing time and the payment methods actually supported for withdrawals. Reason: the bonus page is written for the deposit and the withdrawal page for the escape.
- Check whether the named ADR provider is real and reachable. Anjouan's approved list is published; so are the Commission's. Reason: a dispute route you can name is a dispute route you can use.
- Read the bonus terms for the four tripwires. Maximum cashout, max bet while wagering, game weighting, and how long the offer stays open. Reason: a 40× requirement on a capped cashout is a smaller prize than it looks.
- Test the mobile path with a small amount, not a large one. Make the smallest permitted withdrawal early. Reason: identity and payment behaviour is easiest to observe before the balance is worth arguing about.
- Set the phone-side protections that do not depend on the operator's goodwill. Bank gambling blocks are free and apply at card level, so they must be switched on for each card; most banks use a 48- or 72-hour cooling-off before gambling payments resume, and switching one on does not touch a credit score. Blocking software is the other layer: BetBlocker, a non-profit registered in Delaware, says it blocks over 1,368,000 gambling websites and 3,100 apps and requires no registration. If the operator will not do the protecting, the phone can.
Where Help Actually Lives
Help in Great Britain does not depend on which site caused the problem, and it does not cost anything. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133 all day, every day; in Wales the number given is 0808 2819 265. BeGambleAware, the public face of the charity GambleAware, points to the same helpline and runs live chat. GamFam (charity number 1191139) supports families and friends affected by someone else's gambling, through its five-stage GRA5P peer programme, currently meeting online. Gamblers Anonymous England, Wales & Ulster can be reached on 0330 094 0322 and runs around 250 meeting locations with no appointment needed. Gam-Anon UK & Ireland covers the same ground for relatives. The NHS National Gambling Clinic takes self-referrals and professional referrals, and Citizens Advice offers free confidential help with debt — Citizens Advice Scotland runs a gambling support line on 0800 328 1131 on weekdays from 10am to 3pm. The National Gambling Helpline is not a crisis line, so anyone at immediate risk of harm needs emergency services rather than a support queue.
Money for all of this now comes from a different place. The statutory gambling levy commenced on 6 April 2025 and replaced voluntary industry contributions; online operators pay 1.1 per cent of the previous year's gross gambling yield, and in its first year the levy raised just under £120 million, ringfenced solely for research, prevention and treatment. Since 1 April 2026 NHS England has commissioned gambling-harms treatment in England from a pot of roughly £100 million a year, split half to treatment, 30 per cent to prevention and 20 per cent to research.
Are Offshore Sites Legal for a Player in Britain?
No. It is the operator who breaks the law under section 33 of the Gambling Act 2005 by offering facilities to customers in Great Britain without a Commission licence, and the commission's own summary of offences lists unlicensed provision of gambling facilities as an offence by the operator. Whether an individual then faces any consequence turns on that individual's conduct rather than on where the site is registered.
Do these sites accept UK players?
Many do, and some market directly to people who have self-excluded. The commission issued an industry warning notice on 20 January 2025 about casino games from licensed suppliers turning up on unlicensed sites available to GB consumers, noting that such sites often target customers who have self-excluded through GamStop. That targeting is the sector's least attractive habit.
Can I get my money back if an offshore casino refuses to pay?
Usually not through any regulator. The Gambling Commission cannot resolve individual complaints or recover money; it records them and refers disputes to a third party, and it has no jurisdiction over an operator it does not license. A named ADR provider is the only realistic route, and its decisions bind the operator only as far as that operator's own regulator enforces them. Compliance has been strong where it has been measured — IBAS reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25 — but that is a statistic about IBAS cases, not about offshore sites.
What are the signs of a new online casino not on GamStop worth using?
A verifiable licence for the exact domain in use, a withdrawal page that states a processing time, a named ADR provider, bonus terms with no cashout cap on winnings, and age and identity checks requested before the first bet rather than after the first big win. Sites that fail the third and fourth tests are the ones whose terms get read most closely a month later.
How fast do withdrawals actually clear?
On UK-licensed sites, mostly at once: 96.3 per cent of 44.2 million withdrawals in June to September 2024 cleared automatically and a further 3.5 per cent within 24 hours. Offshore, 24 to 72 hours is the common description, and payment method matters as much as the operator — card and Faster Payments rails are quick, while crypto depends on block times, so a Bitcoin payout waits on an average 10-minute block and often six confirmations.
Do free spins bonuses with no deposit change the maths?
They change it downwards. A no-deposit offer carrying 40× to 60× wagering and a €50–€100 cashout ceiling converts a headline gift into a small, conditional one, and the most common trap is depositing while that no-deposit offer is still running, which keeps the wagering requirement and the cashout cap in force against the deposit as well.
Does self-exclusion end when the term runs out?
No. GamStop registration runs for 6 months, 1 year, 5 years or 5 years with auto-renewal, cannot be cancelled during the term, and the exclusion stays in place afterwards until the person contacts GamStop to remove it. Behind that, terms updated on 20 May 2026 provide for a further automatic seven-year period of data retention during which operators are told the person was previously excluded.
The Short Version
The market these sites occupy is real and measurable — 586 illegal gambling websites accessible to GB consumers in September 2026 — but the pitch that they are simply casinos without the paperwork is only half of it, because the paperwork is the part that returns money. ##SITE_NAME$$'s position is that the licence is the feature, not the admin: on a phone the games look identical on either side of the line, and it is the rules underneath that show up on the day the withdrawal is requested. If this market is going to be looked at at all, it should be looked at with the register open in one tab and the terms open in the other, and with 0808 8020 133 kept in mind for the day it matters.