More than 2,700 gambling websites are licensed by the Gambling Commission, and the dividing line that matters is not brand, game count or bonus size but whether your balance sits behind a British licence. That licence brings identity rules, withdrawal rights and a self-exclusion scheme. Offshore sites bring terms of their own choosing.
The phrase online gambling sites uk covers a market worth £17.5 billion in gross gambling yield in the year to March 2026, of which £8.3 billion came from remote casino, betting and bingo. That is a lot of money resting on a single question: if the operator decides not to pay, who can make it? For a British-licensed site, somebody can. For a site on a Curaçao or Anjouan certificate, mostly nobody — and the difference is not marketing talk but law, paperwork and the price of a licence.
What protects a player's balance is a licence with teeth. What does not protect it is a seal, a five-star badge or the fact that the site has been around for years. That is the side from which every question below gets answered.
Offshore sites hold no Great Britain licence, which means the Gambling Commission's protections, the national self-exclusion scheme and the route to a free adjudicator do not reach them. Anyone who wants help with their own gambling can call the National Gambling Helpline on 0808 8020 133, free, 24 hours a day, or reach it by live chat and WhatsApp.
Table of Contents10
- One Number That Tells You Where the Standard Sits
- British-Licensed Sites Set the Bar
- Offshore Terms and What They Build In
- Where Five Common Claims Fall Down
- What Each Type of Site Actually Offers
- How to Judge a Site in Six Steps
- The Register and the Arithmetic
- Five Signs a Site or Service Can Be Trusted
- FAQ
- The Balance Only a Licence Protects
One Number That Tells You Where the Standard Sits
For a checkable benchmark, take the Commission's own withdrawal data for June to September 2024, covering large online operators: 44.2 million withdrawals in that period, of which 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. Just 0.1 per cent took up to 48 hours.
That is the standard British-licensed sites are held to, and the Commission has said it in plain language: where an operator has no regulatory concerns about a customer, there is no valid reason to delay a payout. It has also said it is not acceptable to introduce friction when a customer tries to withdraw rather than when they deposit.
The benchmark is not perfection. The Commission's contact centre still receives around 2,000 complaints a year about withdrawal delays, and its annual report for 2024-25 says withdrawal issues remain the cause of most of the complaints it gets. But complaints have a destination here. That is the whole point.
British-Licensed Sites Set the Bar
The standard of comparison for everything on this page is the British licence. It is not a badge of virtue; it is a set of obligations with a regulator behind them.
The first is who may operate. Since 31 March 2020, every online operator must be part of the national self-exclusion scheme as a condition of its licence, under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice. In April 2020 the Commission added the requirement to check the entire customer base against the register at least every 24 hours. Two operators had their licences suspended on 3 April 2020 for missing the deadline.
The second is who pays for the safety net. Since 6 April 2025 the statutory levy on operators has replaced voluntary contributions, charged at 1.1 per cent of previous-year gross gambling yield for all online operators and software licences. It raised just under £120 million in the year reported, ringfenced for research, prevention and treatment. Offshore sites do not pay it and are not bound by it.
The third is what happens to your money. Licensed operators must tell you, in writing and before you gamble, whether your funds are protected if the business becomes insolvent — "not protected", "medium protection" or "high protection". An operator rated "not protected" must remind you of that once every six months, with the value of the funds held. Keeping customer funds in a separate client account does not mean you get them back.
The Regulator's Enforcement Record
A regulator that never acts is a letterhead. This one does act, and the numbers are worth knowing when a site claims to be "fully regulated".
Since April 2024 the Commission's illegal markets team has issued 3,140 cease and desist and disruption notices, comprising 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. It referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites, engagement fell by 32 per cent on average after disruption — and by 91 per cent where a registrar block was used, against 30 per cent for a Google removal.
The Commission's most recent published constraint is that it commenced one prosecution across the whole of April 2025 to March 2026. Enforcement here is mostly disruption, not courtrooms. That matters when a site tells you it is "licensed and therefore safe".
Offshore Terms and What They Build In
Offshore sites are compared with the British standard above, and the honest ones are not monsters. Some publish fair terms. What they cannot do is offer the British licence's protections, because they do not hold one. It is illegal under section 33 of the Gambling Act 2005 to provide gambling facilities in Great Britain without a Commission licence — an offence carrying up to 51 weeks' imprisonment, a fine not exceeding level 5 on the standard scale, or both; in Scotland, six months. It is immaterial whether the facilities are provided wholly or partly by remote communication, or inside or outside the UK.
So how do they get licence numbers? Curaçao is the common answer. The National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence and sub-licence system; the legacy "orange" certificates of operation ended on 15 October 2025. A historic /JAZ number or legacy seal must not be treated as proof of a current licence. Anjouan is the cheaper route — EUR 17,828 for B2C licence issuance and the same for annual renewal. Malta sits in between, with an annual licence fee of EUR 25,000.
Then there is the category where nothing is really held. Costa Rica operates no comprehensive gambling licensing regime, and its Legislative Assembly rejected the bill that would have created one in early 2026. The "data processing licence" sometimes quoted is not a licence in the strict legal sense.
Delay as a Business Model
The clearest offshore warning sign is not a short licence. It is a term that builds in time.
In the UK that is closed off. Reverse withdrawals were permanently banned for all remote operators under RTS requirement 14B, in force from 31 October 2021: consumers must not be given the option to cancel a withdrawal request. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for information the operator could reasonably have requested earlier. Guidance prohibits any term imposing a maximum limit on what a consumer may withdraw from their deposit balance — the Commission's own example of a banned term is "You may withdraw up to £50 per day and up to £500 per week". And a licence condition requires operators to close the account of anyone who has self-excluded and return the funds held, adding that it is not sufficient merely to block withdrawals while still taking bets.
Offshore, none of that applies. Terms can require additional documents on withdrawal, cap a cashout, or authorise the operator to void winnings at its sole discretion. The Commission's approach to its own licensees is instructive about how these clauses work in practice: on 21 October 2026 it announced that one licensed operator would pay £900,000 in a regulatory settlement, including for unnecessarily delaying consumer withdrawals — a term restricting customers to one withdrawal request at a time, found unfair under the Consumer Rights Act 2015, and manual review of every fifth or tenth withdrawal for some customers.
That company was licensed. It was made to pay. An offshore operator with the same clause is not.
Where Five Common Claims Fall Down
Not every claim on a homepage is a lie. Plenty are just unfalsifiable. Here are the ones this topic turns on, and the quick checks that separate a claim from a fact.
The Licence Itself
The Commission keeps a public register. Search the brand, then click through and check that the site's activities and domain names match what the register shows — not just that a licence exists somewhere in the corporate family.
The tell-tale failures are a seal that does not redirect properly and a certificate displaying someone else's domain. Under Curaçao's certification policy, clicking a Certificate of Operation Seal must redirect to cert.cga.cw; if the seal differs in design, colour or format the website is not authorised by the CGA, and if the certificate behind it names a different domain, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent.
Quick check: does the register name the domain you are looking at?
The Self-Exclusion Scheme
GamStop, always written that way, is the national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited and free to users. It is commonly typed "gamestop" — a slip worth knowing, because the wrong spelling is how people find the wrong thing. It has been available since April 2018 and now runs as Gamstop Online.
One thing worth stating because it is widely misunderstood: an exclusion holds for its full term and then stays in place until the person contacts Gamstop to remove it. Anyone who does not deactivate after their chosen period has their data held through a further automatic seven-year self-exclusion period during which operators are told they were previously excluded. Registrations cannot be removed early — the Group devoted a section of its 2025 annual report to its refusal to do so.
Quick check: an operator that advertises itself as a way round a self-exclusion is telling you what it thinks of the rules. The Commission issued an industry warning notice on 20 January 2025 specifically about unlicensed sites targeting customers who had self-excluded.
The Bonus Terms
Since 19 January 2026, British-licensed operators cannot apply wagering requirements above ten times, and cannot mix two or more types of gambling product in one incentive. The Commission said the cap "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements".
Offshore, no cap exists. Typical welcome-bonus multipliers run at 25x to 40x in trade coverage, and a 2026 guide comparison puts welcome offers at 35x to 50x and no-deposit bonuses at 40x to 60x with a €50–€100 cashout cap. Maximum-cashout clauses do the rest of the work: one offshore operator limits winnings generated with bonus funds to 300 per cent of the credited bonus amount and voids the excess.
Quick check: find the wagering multiple, the maximum cashout and the maximum bet allowed while wagering, in that order.
The Verification Process
A customer's identity must be verified before they may gamble, under licence condition 17, introduced on 7 May 2019. The information required must include name, address and date of birth. Companies can often verify by matching against credit reference agencies and the electoral roll, in which case no documents are needed at all.
The naive version of this is asking for a passport six weeks after a deposit. The Commission has said this is backwards, and that onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential — is not sufficient. More than a quarter of complaints reaching its contact centre concern identity verification, a concern customers raise when documents are demanded only on withdrawal.
Quick check: whether a site asked for verification before the first deposit or after the first withdrawal attempt tells you most of what you need.
The Complaints Route
British licensees must have arrangements for a customer to refer an unresolved dispute to an approved alternative dispute resolution provider, free of charge, if it is not sorted within eight weeks. The Commission's approved list includes IBAS, eCOGRA, CEDR, ProMediate and others; operators may use only approved providers. IBAS reported 3,721 domestic disputes in 2024-25, with an average completion time of 20 days and 100 per cent operator compliance with decisions in the consumer's favour.
The limits are real. ADR providers will not accept complaints about customer service or the refusal to accept a bet. eCOGRA's report for the year to 30 September 2025 records 911 disputes, of which 72.3 per cent of invalid ones had not been through the operator's internal procedure first — and 82.2 per cent of completed disputes went the operator's way.
Quick check: if the terms name no ADR provider, there is no free route to adjudication. Anjouan, for what it is worth, does require licensees to designate an approved provider — currently EGIS ADR, Axion ADR, iGaming ADR and an independent provider — and expects complaints resolved within 30 days before escalation.
What Each Type of Site Actually Offers
The comparison below is by licence and by what a player can enforce, not by brand. Every figure is a published one.
| Licence or route | Licence cost to the operator | Self-exclusion coverage | Wagering cap on bonuses | Enforcement route for a player |
|---|---|---|---|---|
| Great Britain (Gambling Commission) | Annual statutory levy of 1.1% of previous-year gross gambling yield for online operators | GamStop Online, mandatory since 31 March 2020 | Ten times maximum, since 19 January 2026 | Approved ADR provider free of charge after eight weeks |
| Malta (MGA) | EUR 25,000 annual licence fee plus 5% gaming tax on revenue | Not part of GamStop Online | No UK cap | MGA complaint form in English or Maltese |
| Curaçao (CGA) | EUR 47,450 total annual B2C fee; EUR 4,592 non-refundable application fee | Not covered | No UK cap | No UK route |
| Anjouan | EUR 17,828 issuance and EUR 17,828 annual renewal | Not covered | No UK cap | Designated approved ADR provider |
| Kahnawake | USD 20,000 annual CPA fee, rising for new applications from 1 January 2027 | The Commission's own voluntary scheme only | No UK cap | Full-time Dispute Resolution Officer |
| Costa Rica | No licensing regime | Not covered | No UK cap | None specified |
Two rows deserve a note. Kahnawake's self-exclusion is permanent and irrevocable, and a player who breaches it forfeits any funds deposited or won to a third-party charity selected by the Commission — a harder rule than the British one, but administered by a body with no power over a Great Britain-facing operator. Malta's MGA keeps a published list of unauthorised URLs and declares any reference to a Maltese licence on them false and misleading.
And none of these, Malta included, is a Great Britain licence. Holding a licence in another jurisdiction does not make offering commercial gambling services to consumers in Great Britain lawful — the Commission says so plainly, and it has said so since 21 October 2024.
How to Judge a Site in Six Steps
Nothing here requires an account, a deposit or a download. It is paperwork, in order.
- Find the licence on the public register — and match the domain. Search the operating company, then click through and confirm the register names the site you are on, not a sister brand or a white-label partner. A licence that exists somewhere in a corporate group protects the group, not necessarily the balance in front of you.
- Read the customer-funds disclosure before depositing. Licensed operators must state in writing whether funds are protected on insolvency and at what rating, and you must acknowledge it. "Not protected" is a lawful answer, and it is the answer you need to know.
- Check the bonus terms as three numbers. The wagering multiple, the maximum cashout and the maximum bet while wagering. Any one of them missing from the headline terms is a reason to close the tab — significant conditions must be given transparently and prominently, and online, in full, no further than one click away.
- Establish the withdrawal method and the verification timing. Before the first deposit, work out how money leaves and when identity will be checked. If the answer to the second is "on withdrawal", that is the friction point by design, and the Commission has spent years saying it should not be.
- Identify the adjudicator in the terms. Find the named ADR provider and note that the clock runs eight weeks from the complaint. A dispute cannot be escalated until the operator's own procedure has been used, which is why 72.3 per cent of eCOGRA's invalid disputes in one year failed at that first hurdle.
- Set your limits and the account protections at sign-up, not after. Since 31 October 2025 operators must prompt customers to set a financial limit before their first deposit, with the limit presented as the default option and declining it requiring a positive action and confirmation. Bank-level gambling blocks, offered by the banks on the Commission's list, are applied at card level and must be activated on each card.
The Register and the Arithmetic
How many online gambling sites are there in the UK? The Commission licenses the market rather than publishing a single headline count, and a good thing too — the number changes weekly and includes ancillary licences that do not face consumers. What can be counted is what happens when a market floods.
Just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain between May 2024 and July 2025, under the Commission's monitoring. Its September 2026 dashboard recorded 586 illegal gambling websites accessible to GB consumers, 4 per cent more than a year earlier, and 311 had disruption action taken against them in the second quarter of 2026-27, with 77 per cent showing a reduction in estimated traffic.
The scale claims about the black market vary wildly with who is paying for the research, and it is worth saying so. H2 Gambling Capital puts stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019. A Frontier Economics study for the Betting and Gaming Council estimated £2.7 billion staked annually online, and Yield Sec, working for the Campaign for Fairer Gambling, put the unregulated share of a £8.8 billion gross gaming revenue market at 9 per cent. The Commission's own population estimate is smaller: 0.6 per cent of respondents had engaged with an illegal gambling website in the past four weeks, and among those who had gambled online in the past four weeks, 2.5 per cent.
On the demand side, the third Gambling Survey for Great Britain, published 16 July 2026 and based on 20,775 adults, found 47 per cent had gambled in any form in the past four weeks, falling to 27 per cent when lottery-only players are excluded. 2.4 per cent scored 8 or more on the Problem Gambling Severity Index — stable across three years, at 2.5 per cent, 2.7 per cent and 2.4 per cent. And 3.4 per cent of those who had gambled in the past 12 months had sought support because of their own gambling.
That last figure is the one that should be read twice. Not because it is large, but because support exists to be sought, and the route into it runs through the same organisations regardless of which licence a site holds.
Five Signs a Site or Service Can Be Trusted
1. The Register Names the Domain You Are On
Check the Commission's public register for the operating company, then click through and confirm the site's activities and domain names match. A seal that does not redirect to the regulator's own verification page, or a certificate that shows a different domain from the one in the address bar, is not evidence of anything. Under Curaçao's own policy, a seal that differs in design, colour or format means the site is not authorised.
2. The Terms Name a Free Adjudicator
British licensees must offer referral to an approved ADR provider free of charge if a complaint is not resolved within eight weeks, and may use only providers the Commission approves. Find the name. If the terms contain no named provider, there is no free route to a decision, and the only remaining option is a court.
3. Withdrawals Are Not a Separate Regime
A site that treats withdrawal as a favour has a design problem. Reverse withdrawals have been banned for remote operators since 31 October 2021, a withdrawal request cannot lawfully trigger a demand for documents the operator could have asked for earlier, and a term capping what you may withdraw from your deposit balance is prohibited outright. Delay clauses are the single most reliable tell.
4. The Verification Happens Up Front
Identity verification is required before a customer may gamble, and the Commission expects checks brought forward rather than saved for the payout. This is not just a fairness point. Onboarding on partial or equivocal verification — via "fuzzy matching" against third-party data, or a middle name used where a forename belongs — can create mismatches that defeat an existing self-exclusion, which is worse than inconvenient.
5. The Bonus Numbers Are All in the Headline
Significant conditions must be given transparently and prominently, and online, in full, no further than one click away. Since 19 January 2026 the wagering requirement cannot exceed ten times, and an incentive cannot mix two or more gambling products. If the multiple, the maximum cashout and the maximum bet are all visible without hunting, the operator is at least not relying on you to give up.
FAQ
What are the best online gambling sites UK players can use?
"Best" depends on what you are measuring, and on a British licence the measurable things are withdrawal handling, verification timing, bonus terms and the named adjudicator. The Commission's own benchmark for large operators is a withdrawal system where 96.3 per cent of 44.2 million requests cleared automatically across June to September 2024. Judge a site against that, not against a banner.
How do I check whether an online gambling site is licensed in the UK?
Search the Gambling Commission's public register for the operating company, then click through and check that the site's activities and domain names match what the register shows. It is not enough that a licence exists somewhere in the corporate group. Gambling Commission page last updated 6 December 2023 states the Commission regulates sites which trade or advertise to British customers, and those must hold a Commission licence.
Do UK self-exclusion rules apply to offshore sites?
No. GamStop Online blocks people from gambling with companies licensed in Great Britain, and can only exclude from participating operators. Sites holding no Commission licence are not connected to the scheme. A self-exclusion holds for its full term and then stays in place until the person contacts Gamstop to remove it, so there is nothing to work around in the first place — a site advertising itself as the way round one is telling you plainly where it stands.
How many online gambling sites are there in the UK?
There is no single published count of consumer-facing sites, because licences attach to operators and brands rather than to domains, and the total moves constantly. What the Commission does publish is the scale of the illegal side: just over 1,000 unique illegal gambling websites were accessed by British consumers between May 2024 and July 2025, and 586 were recorded as accessible in September 2026.
Are new online gambling sites UK players see less safe than established ones?
Age is not much of a proxy. What matters is whether the licence is British, whether identity was verified before the first bet, and whether the terms carry a wagering cap of ten times, a named free adjudicator and no maximum-cashout clause. A new site operating on a Commission licence carries the whole framework from its first day, and an old site on a Curaçao certificate carries none of it.
What is the safest kind of online gambling site UK players can choose?
The safest arrangement is a Commission-licensed operator that verified you before your first deposit, states its insolvency rating in writing, sets a financial limit with you at sign-up, and names its ADR provider in the terms. Layer on the account protections: a bank gambling block, applied at card level and worth switching on for each card, and blocking software such as Gamban or BetBlocker.
The Balance Only a Licence Protects
The whole of it comes down to whether there is a body with the power to make an operator pay, and on a British licence there is: 44.2 million withdrawals in one four-month window with 96.3 per cent clearing automatically is not an accident but the product of rules that ban reverse withdrawals, forbid a demand for documents the operator could have asked for months earlier, and bar any cap on what a customer may withdraw from their own deposit balance. Offshore, the same clause can sit in the terms and nothing happens. On 21 October 2026 a licensed operator agreed to pay £900,000 over, among other things, unnecessarily delaying withdrawals. That is the difference in one sentence: the same conduct, and a fine at the end of it — or a seal at the top of the page. Anyone who needs support with their own gambling, or with someone else's, can call the National Gambling Helpline on 0808 8020 133, free and around the clock.