Slots Not on GamStop Safe and Unsafe Markets

Slots not on GamStop are games on websites with no Gambling Commission licence, usually holding a Curaçao, Anjouan, Malta or Kahnawake permit instead. A GamStop self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it, and such a site is never a way round it.

There is one sentence in the small print that decides whether a slots balance is safe, and it has nothing to do with the games. On a British-licensed site, money held for future gambling sits in a client account, separate from the operator's own, and the terms must say whether it is protected if the business folds. On most offshore sites, the equivalent promise is a line in a licence condition that no regulator in the UK will enforce, no British court will necessarily hear, and no dispute body operating here will arbitrate. Everything else on the page follows from that.

I have spent years reading these licences and the Commission's enforcement papers, and the pattern is consistent. Offshore regulators do exist and some of them do work. Curaçao rebuilt its regime under the National Ordinance on Games of Chance, which took effect on 24 December 2024, sweeping away the old master-licence system. Anjouan publishes fee schedules and certificate verification. Kahnawà:ke has regulated interactive gaming longer than almost anyone. None of that reaches a player in Sheffield whose withdrawal has been parked for a fortnight.

Set against it: gross gambling yield for the whole British industry was £17.5 billion in the year to March 2026, and the Commission's own disruption figures show how much.of the offshore market is genuinely dodgy. The point of this article is not to talk anyone into or out of anything. It is to say which promises in this market are backed by something and which are simply typed onto a page.

If gambling is causing harm, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, run by GamCare. Callers in Wales can use 0808 2819 265.

It is typed "gamestop" about as often as it is spelled correctly; the scheme is GamStop.

What the Licence Actually Decides

The word "licence" is doing enormous work in this niche, so let us be precise about what each one covers. The scheme's obligations sit on British licence holders: since 31 March 2020, participation in the national multi-operator self-exclusion scheme has been a condition of a Gambling Commission operating licence, under social responsibility code provision 3.5.5, and since April 2020 operators must check their entire customer base for registrations at least every 24 hours. A regulator that has no jurisdiction over a company cannot impose any of that on it. Offshore sites holding no Commission licence are not connected to the scheme [unconfirmed — stated by trade and press sources rather than a primary regulator page, though consistent with the scheme's own terms of use].

The scheme itself is not a wall around a block of sites. GamStop Online, as it has been called since a website update in November 2025, blocks accounts with companies licensed in Great Britain. Registering takes a few minutes; the block can take up to 24 hours to become effective. Once registered, the exclusion cannot be cancelled during the chosen period and does not lapse at the end of it — it stays until the person contacts GamStop to remove it. Terms updated on 20 May 2026 add that a registration left alone after the chosen term runs into a further automatic seven-year period during which operators are told the person was previously excluded. There is no early removal; the Group's 2025 annual report devotes a section to refusing them.

The scale is not marginal. GamStop recorded 117,756 new registrations during 2025 and held 561,983 active exclusions at the end of that year. By July 2026 the register carried 614,738 people, more than one in two of whom had chosen the maximum five-year term, and registrations in the first half of 2026 were 16 per cent up year on year. Any sector that advertises at the edge of that population knows exactly who it is talking to. The Commission made the point itself in a warning notice on 20 January 2025, when it told licensees that their casino games were turning up on unlicensed websites that often target people who have self-excluded and may have weak social responsibility and anti-money-laundering controls.

Then there is the awkward half of the story. The Commission's analysis published on 5 November 2026 estimates that among people who had gambled online in the previous four weeks, 2.5 per cent had engaged with an illegal gambling website, with a further 1.5 per cent having done so in the past 12 months. On the whole-population measure, 94.4 per cent showed no indication of using one at all. Commercial estimates of the sums involved vary wildly — one market-intelligence house put stakes with illegal operators at £16.6 billion in 2025, while an industry-commissioned study settled on £2.7 billion a year online. What nobody disputes is the Commission's direction of travel: it referred 1,835 websites to search engines in July to September 2026 and issued 546 cease and desist notices, and says plainly that registrar blocks and GEO IP blocking work better than search-engine removals, because removing a site from Google makes it harder to find without blocking access.

Under section 33 of the Gambling Act 2005 it is an offence to provide facilities for gambling without an operating licence, and the Commission states that this includes an operator holding a licence in another jurisdiction. The offence attaches to the provider. A player in Great Britain commits no offence by playing.

Slot Sites Not on GamStop Checkable Yardstick

The Commission's Contact Centre receives over 6,000 calls a year from consumers and prospective licensees, and withdrawal problems have been the single biggest subject raised. Its annual report for 2024-25 says that, despite work with operators, withdrawals remain the cause of most complaints; by July 2024 it was still fielding around 2,000 complaints a year about delays. Over a quarter of complaints now concern identity verification, a grievance that almost always crystallises when documents are demanded at the withdrawal screen rather than at sign-up.

Data covering June to September 2024 gives the benchmark: of 44.2 million withdrawals by customers of large online operators in that four-month period, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. That is what a supervised market looks like when it is working. Hold that figure — better than 96 in 100 withdrawals completing without human intervention — against whatever a given site promises, and against what its terms quietly permit.

Set beside it the trust survey published on 23 July 2026: 49 per cent of people who had gambled in the past 12 months agreed that it is quick and easy to withdraw and collect winnings, 33 per cent were neutral and 18 per cent disagreed. Half a market satisfied with something that is supposed to be automatic is a fair description of how much friction has crept in legitimately, and how much of the rest is passing itself off as process.

The Commission has been blunt about where that friction belongs. It is not acceptable, it says, for operators to introduce friction when a customer tries to withdraw rather than when they deposit, or to put commercial interests above the customer's. Where there are no regulatory concerns about a customer, there is no valid reason to delay a payout — only a duty to explain a delay or refusal, subject to the statutory prohibition on tipping off in money-laundering cases.

Offshore Licences Compared by What They Guarantee the Player

The table below sorts the main licences by method rather than by brand, because brands change hands and licences do not. Every figure is a published fee, threshold or deadline.

The fees explain the shape of the market better than any marketing page. Curaçao's application fee for a B2C licence is a one-time non-refundable EUR 4,592, with EUR 150 per ultimate beneficial owner; Anjouan's whole issuance fee is EUR 17,828, identical for renewal, with EUR 500 per additional domain. These are not sums that demand a compliance department. When the Gambling Commission spoke of wagering requirements "up to 60 times" in the terms it was about to cap, it was describing what operators do when nobody is holding the pencil.

Malta sits in an odd place in that table. The Malta Gaming Authority is a real regulator with real standards, a EUR 100,000 minimum paid-up share capital for Type 1 and Type 2 B2C licences, and a published list of Unauthorised URLs on which it declares any reference to a Maltese licence to be false and misleading. A Maltese licence also means nothing at all in British law. Recognising a regulator is not the same as having a remedy.

Curaçao deserves its own paragraph, because the paperwork is newer than most players think and much of it has expired. The CGA has issued two kinds of seal: a Certificate of Operation Seal, issued only to B2C operators and tied to an approved, registered player-facing domain, and a License Certificate Seal, available to B2B and B2C entities and not domain-specific. Clicking a Certificate of Operation Seal must redirect to the authority's certificate portal. If the design, colour or format differs, the site is not authorised. If the certificate behind the seal names a different domain from the one being visited, the site is displaying another operator's certificate and should be treated as fraudulent. The legacy "orange" sub-licence certificates ended on 15 October 2025, and the CGA states plainly that a historic /JAZ number or legacy seal must not be treated as independent proof of a current licence. On 7 October 2026 the authority announced that its previous portal would not return to service and that it is working on an alternative way to verify licensed domains.

Anjouan's arrangements are of a different character, and the honest answer is that they are contested. Anjouan Gaming publishes a certificate verification framework under which licences carry a unique number and a QR code linking to a public register, and states that certificates which cannot be verified there should not be relied upon. It also requires licensees to segregate player funds, use independently certified random number generators and run anti-money-laundering and age-verification controls. Against that, an ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 licences at around EUR 17,000 each per year, and quoted a former attorney-general of the Comoros describing the entity that sells those licences as illegal. Anjouan Gaming's own statement of 10 June 2026 concedes the essential point: an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". The regulator has said, in effect, that the licence does not cover what a British player needs it to cover.

Kahnawà:ke is the oldest and, on paper, the most detailed of the four. Its Client Provider Authorization holders must be hosted at a data centre in the Mohawk Territory, and the Logo Certificate Program lets anyone click the Commission's logo on a site to generate a Certificate of Good Standing. Its player rules are unusually specific: a relationship with players must be contractual and free of unfair terms, sites must allow limits — including a limit of zero — and its voluntary self-exclusion is permanent and irrevocable, with a player who breaches it forfeiting deposited and won funds to a charity chosen by the Commission. It also suspended the CPA held by Polar Ventures SDRL with effect from 29 September 2026, which is what a functioning regulator looks like. It is still not a British licence.

Worth noting in passing: one reading of the CGA's public register recorded 704 licences held by 698 operators, of which 552 were active, as of 03:30 UTC on 6 November 2026 [unconfirmed — a third-party register tracker, not a CGA publication]. That is roughly two-thirds of a market where a licence is real, unexpired and correctly displayed.

What the Numbers Do Not Promise Back to the Player

Here is the part I find genuinely strange about the licence question. A licence is a claim about supervision, and supervision is not custody. Some offshore regimes do require segregated player funds, and segregation is better than nothing, but it is not a guarantee. British guidance is explicit that keeping customer funds in a separate client account does not mean customers will get their money back if the operator becomes insolvent, and that a business may legally hold customer money in overseas bank accounts. Even on a UK-licensed site, money staked within an open bet is not classed as customer funds and falls outside whatever protection exists. Operators must pick one of three insolvency ratings — "not protected", "medium protection" or "high protection" — state which applies in the terms, and, if they are rated "not protected", remind the customer every six months that the funds are not protected and give the value held.

Now picture a player weighing an offshore slot site against a licensed one, believing the difference is the size of the jackpot. It is not. On the British side there is a cap of ten times on wagering requirements for bonus funds, in force since 19 January 2026 under social responsibility code 5.1.1, and no maximum limit may be imposed on what a customer can withdraw from their deposit balance. Offshore, the published multipliers run higher: a well-known offshore casino asks 25 times playthrough, and comparison tables circulating in 2026 put welcome-bonus multipliers at 35 to 50 times, with no-deposit bonuses at 40 to 60 times plus a cashout cap — figures in that range are reported rather than drawn from a regulator's table [unconfirmed]. Same game, same graphics, materially different arithmetic.

The Identity Check and When It Lands

Of all the things this topic turns on, this is the one to understand properly, because it explains most of what players experience as betrayal. A British licence condition, 17.1.1, requires licensees to obtain and verify information establishing identity — name, address, date of birth — before permitting a customer to gamble. Before a customer deposits, the licensee should tell them what documents might be needed, in what circumstances and in what form. In practice many licensed operators use the "hybrid approach": they identify the customer and verify age at registration, then defer full verification until the money-laundering threshold is triggered — the Money Laundering Regulations 2017 require identification and verification for a remote casino when deposits, or withdrawals of deposits and winnings, reach €2,000 or more, whether in a single transaction or in linked ones, with deposits during a single logged-on period counting together.

The first time, that can feel seamless. Electronic checks against credit reference agencies and the electoral roll often resolve a name and address instantly, and the Commission says the process may be instant if it can be done electronically. Later — on the second or third withdrawal, or when the total crosses the threshold — a document request arrives and the payout stops. This is the single most common complaint reaching the regulator. Over a quarter of complaints to the Contact Centre concern identity verification, usually raised by people asked for documents only when they tried to withdraw, and the Commission notes that onboarding someone under a middle name rather than a forename creates record mismatches elsewhere — including with the self-exclusion scheme, which quietly blunts the very protection the person thought they had.

The warning signs are readable in advance. Terms that reserve the right to void winnings at the operator's "sole discretion" are unfair within the meaning of the Consumer Rights Act 2015, which is why condition 7.1.1 requires terms to be fair, transparent and not misleading; a British operator was fined £170,000 in July 2025 for a bonus term giving it discretion to close accounts or forfeit winnings, and one licensee agreed a £900,000 settlement in October 2026 that included a fair-terms breach over terms used between October 2024 and October 2025. A clause limiting a withdrawal to a daily or weekly maximum is a prohibited term in the UK — the Commission's own example of an unacceptable one is a cap of £50 a day and £500 a week. Offshore, the equivalent exists openly: a 300 per cent maximum cashout on bonus-generated winnings at one operator, or a rule under which making a deposit while a no-deposit bonus is active leaves the bonus's wagering terms in force.

The Commission's position is that a withdrawal request must not produce a demand for information the licensee could reasonably have requested earlier, and that operators cannot confiscate funds because identity documents have not been supplied. Neither rule follows an offshore operator anywhere. That is the whole of the difference, stated plainly.

Five Signs an Operator Is Worth the Risk of a Deposit

None of these is proof of virtue. Each is a thing you can check in a few minutes, and each one that fails is a reason to close the tab.

The Licence Names a Regulator You Can Verify Independently

The fastest test is a redirect. Click the seal or certificate on the site and see where it goes: a genuine Curaçao Certificate of Operation Seal must take you to the authority's certificate portal, and its underlying certificate must name the same domain you are on. Anjouan certificates should resolve to a public register through the number and QR code printed on them. The British equivalent is the Commission's public register, where a business's licence and the domain names covered by it should both appear. A seal that does not move, or that leads to a certificate for a different site, is a decorative image.

The Terms Say Who Holds Your Money and What Happens if the Company Fails

On a licensed site, look for the insolvency rating: "not protected", "medium protection" or "high protection". A business rated "not protected" must remind customers every six months that their funds are unprotected and state the value held. If a site's terms describe no such rating, or describe one in language so vague that you cannot tell which of the three applies, you have your answer about which one applies.

The Bonus Multiplier Is Stated as a Single Number, Without a Cashout Ceiling

British rules cap wagering at ten times bonus funds and forbid a maximum limit on withdrawing from your deposit balance. An offshore site naming 25 or 35 times is at least telling you; the danger sign is a bonus whose terms set both a multiplier and a cap on what may be withdrawn from bonus winnings, as a 300 per cent maximum cashout does. Also read the maximum-bet-while-wagering clause. One operator caps it at 20 per cent of the deposited amount and warns that breaching it can cost the account, the bonus and the winnings generated during wagering.

There Is a Named ADR Provider, and a Deadline You Can Enforce

Every Commission-approved ADR provider is free to the consumer, and a licensed operator must offer one if a complaint is not resolved within eight weeks. Anjouan requires licensees to name an approved provider in the player terms — EGIS ADR, Axion ADR, iGaming ADR and one licensee provider are the current list — and expects complaints to be resolved within 30 days before escalation. If no dispute route and no time limit appears in the terms, the site has told you what its complaints process is worth. Note, too, what ADR cannot do: providers will not take complaints about customer service or about a refusal to accept a bet.

Payments Are Made by a Regulated Provider, and Not by Credit Card

British licence condition 5.1.2, effective 31 January 2024, requires payments from customers in Great Britain to be taken only through a provider within the Payment Services Regulations 2017. The credit card ban has applied to remote gambling since 14 April 2020. A site asking for a card loaded into an e-wallet, or accepting a credit card without blinking, is not being clever — it is showing that the payment chain is the weakest link in its compliance. Regulated rails are traceable, and traceability is what makes a complaint arguable rather than merely sincere.

How to Judge One of These Sites Before Depositing a Penny

Six steps, in order, each with the reason it earns its place.

1. Check the licence on the regulator's own register, not on the site. Start from the authority's website and search the domain. The reason is that a seal is an image file and a register entry is a record; Curaçao states a historic /JAZ number must not be treated as proof of a current licence, and Malta publishes a list of Unauthorised URLs precisely because sites borrow the name.
2. Read the withdrawal section of the terms before the bonus section. Look for a maximum withdrawal limit, a fee, a stated processing time and any clause giving the operator discretion over winnings. British rules forbid a cap on withdrawing your deposit balance and treat the word "sole discretion" as a hallmark of an unfair term; the same phrasing offshore is merely a warning of how the site behaves.
3. Test the payment route by reading the cashier, not the marketing page. A regulated provider, a named card processor or a bank transfer leaves a trail. The reason is that a payment made through a regulated rail can be complained about, disputed with a provider and traced, while a crypto transfer to an unhosted wallet leaves nothing to argue about and nobody to argue with.
4. Identify the ADR provider and write down its deadline before you need it. Find the named body in the terms and note the internal-complaints window — eight weeks on a British licence, 30 days under Anjouan's standard. The reason is arithmetic: dispute bodies routinely reject complaints that have not been through the operator's own process first, and eCOGRA's 2024-25 figures show 361 of 499 invalid disputes failed on exactly that ground.
5. Set a deposit limit the day you open the account. Since 31 October 2025, licensed operators must prompt a customer to set a financial limit before the first deposit and must present it as the default. On an offshore site you will not be prompted. A limit set before the first deposit is a decision; one set after a loss is a negotiation with yourself.
6. If a self-exclusion is in force, treat it as in force and stay off the site. The exclusion holds for its term and then remains until the person contacts GamStop to remove it, and no offshore sign-up alters that. The reputation of unlicensed sites for attracting people who have self-excluded is documented in the Commission's warning notice of 20 January 2025, and one jurisdiction's own rules make the consequence explicit: at Kahnawà:ke, a player who breaches a self-exclusion forfeits deposited and won funds to a charity chosen by the Commission.

FAQ

What Slot Sites Are Not on GamStop?

Hundreds are, and the count changes weekly. The Commission's dashboard recorded 586 illegal gambling websites accessible to consumers in Great Britain in September 2026, and in July to September 2026 it referred 1,835 sites to search engines and issued 546 cease and desist notices. Rather than trusting any list, including a compiled one, check the operator's licence against the relevant regulator's register and read the terms for jurisdiction. A site with a verifiable Curaçao or Anjouan certificate and honest terms is a different proposition from one with a copied seal, and the register is the only party that can tell you which you have.

Is There a List of Slots Not on GamStop?

Not an authoritative one, and it is worth understanding why. Compiling such a list would mean tracking domains that appear and disappear faster than any publisher can verify them, and pointing British readers at unlicensed sites. The Gambling Commission's own aggregation shows the futility of a fixed directory: it counted 364 illegal gambling websites through its affiliate-page method in May 2024 and 535 by July 2025. Use the register, not a directory.

Are Online Slots Not on GamStop Legal to Play?

Playing is not the offence. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the sanctions fall on the provider. The Commission states that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and its remit covers only websites that trade or advertise here. The practical risk for a player is not prosecution; it is a balance with no British remedy behind it.

Can You Pay by PayPal, Phone Bill or Mobile?

Sometimes, and the detail matters more than the answer. PayPal is not among the methods the Commission lists for gambling blocking services, and a personal UK PayPal account charges nothing to withdraw a balance to a bank account when no currency conversion is involved. Phone-bill and mobile payments are the hardest to reverse and leave the thinnest trail, and licence condition 5.1.2 requires a licensed operator to take payment only through a provider within the Payment Services Regulations 2017. A regulated rail is the point. A convenient one with no dispute mechanism is not convenience; it is exposure.

Do They Really Pay Out Faster Than Licensed Sites?

Rarely, and the claim usually collapses into the same queue. The benchmark to beat is 96.3 per cent of 44.2 million withdrawals clearing automatically over four months in 2024, with 3.5 per cent inside 24 hours and 0.1 per cent taking up to 48 hours. Crypto payouts can settle in minutes when the network is quiet, and that is a genuine advantage — but a blockchain is only the last mile. The identity check, the manual review and the bonus audit still sit in front of it, and on an unlicensed site none of them answers to a regulator that will take the operator to task.

Is There Any Protection Left for a Player?

Some, and mostly self-imposed. Separately segregated client funds are required in some licensing regimes, but British guidance is clear that a client account is not an insurance policy and that funds may sit in overseas accounts. Blocking software helps: BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, needs no registration and is free worldwide, and Gamban blocks licensed and unlicensed sites, though its free UK licence scheme ended on 31 March 2026 and it now costs £4.99 a month or £29.99 a year in England and Scotland. Bank gambling blocks are the most reliable layer — the Commission's list, last updated on 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, applied at card level, with a 48- or 72-hour cooling-off before gambling spending is allowed again.

Where the Argument Leaves a Player's Balance

I have sat through enough of these arguments to know the appeal of the offshore shortcut: the bonus looks bigger, the spin button responds faster, and nothing asks for a document until it suddenly does. The licences exist, several regulators do their jobs, and one of them has suspended a permit as recently as September 2026 — but not one of them stands between a British player and a company that decides not to pay, and the Commission cannot either, having said plainly that it is a regulator rather than an ombudsman and cannot resolve individual complaints or retrieve a consumer's money. What protects a balance is the licence behind the account, and the terms attached to it, and nothing else does.

The National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, run by GamCare; callers in Wales can ring 0808 2819 265. Help also comes from GamFam, from Gamblers Anonymous on 0330 094 0322, from NHS treatment services and from Citizens Advice, and in Scotland from the Gambling Support Service advice line on 0800 328 1131. Behind it all sits the statutory levy, which raised just under £120 million in its first year, ringfenced solely for research, prevention and treatment of gambling-related harm.

The figure I keep coming back to is the one at the top of the market rather than the bottom: £4.2 billion of the £5.0 billion gross gambling yield from remote casinos in the year to March 2025 came from slot games alone. That is not a niche being served by a few maverick websites. It is the main event, and it is worth remembering that the operator holding the licence has already shown you, in its own terms and conditions, exactly how much it intends to protect.