Gambling Sites Not on GamStop: How Offshore Rules Compare With British Ones

Updated November 2026

Licensed

Available in GB

Fast payouts

18+ Only

Gambling sites not on GamStop are casinos and bookmakers licensed outside Great Britain, usually in Curaçao, Anjouan, Kahnawake or Malta. They are not licensed by the Gambling Commission, so British protections do not apply: no statutory self-exclusion link, no UK complaints route, no guarantee of the licence conditions that govern a British operator.

I have read more licence certificates than I care to remember, and the thing that strikes me about this corner of the market is how little the marketing tells you. A site described as “not on GamStop” is telling you one fact, and it is not really a feature. It means the operator is outside the scheme that runs on a single licence condition: since 31 March 2020, every online operator must be part of GAMSTOP as a condition of its Gambling Commission licence, under social responsibility code provision 3.5.5. An operator that is not on GamStop is, almost by definition, an operator without that licence. Sometimes that reflects a deliberate choice to serve markets the British regime will not serve. Sometimes it reflects a licence application that would not survive contact with the Commission.

The scheme’s name is often typed “gamestop” — the word “game” suggests itself — but GamStop, now branded Gamstop Online, is the national online self-exclusion register, and it blocks access to British-licensed sites only. It cannot reach an operator that never signed up, and no offshore casino can be presented as a way around it. The exclusion holds for its full term, and then stays in place until the person contacts GamStop to remove it.

That is the frame. What follows is what the numbers and the rulebooks actually say about the offshore option, from the regulator that does not police it.

Who Is Actually Licensed, and by Whom

The first question to settle is not which site looks best. It is which authority is behind the certificate in the footer, and whether that authority exists in any meaningful sense.

The Curaçao reform is the most instructive case, because it turned a well-known weakness into an administrative mess. The National Ordinance on Games of Chance, or LOK, took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory body. The old master-licence and sub-licence model was abolished, and the legacy “orange” sub-licence certificates of operation ended on 15 October 2025. A historic /JAZ number is no longer proof that an operator holds a valid Curaçao licence. Operators validly licensed when the LOK came into force received a six-month provisional licence by operation of law, due to expire on 24 June 2025; the regulator extended it a further six months, to 24 December 2025.

Look at what that licence costs, and the business model becomes plain. A Curaçao B2C application fee is a one-time non-refundable EUR 4,592, with EUR 150 per ultimate beneficial owner and EUR 150 per qualified interest holder. The total annual B2C fee is EUR 47,450 — EUR 24,490 to the National Treasury and EUR 22,960 to the regulator. Compare that with a British licence, where an operator pays a statutory levy of 1.1 per cent of the previous year’s gross gambling yield, a sum that ran to just under £120 million across the industry in the levy’s first year.

There is a genuine verification test, and it is worth knowing. The Curaçao Gaming Authority issues two separate seals. Clicking a Certificate of Operation Seal must redirect to cert.cga.cw; if the seal differs in design, colour or format, the site is not authorised. If the certificate behind the seal shows a different domain name from the one being visited, the site is displaying another operator’s certificate and should be treated as fraudulent. The regulator announced on 7 October 2026 that its previous online gaming portal would not return to service and that it is building an alternative way to verify licensed domains.

Anjouan is the other licence that turns up constantly behind offshore brands. Internet gaming is regulated under the laws of the Autonomous Island of Anjouan, part of the Union of the Comoros, on legislation adopted in 2005. The published fee schedule is EUR 17,828 for B2C licence issuance, one-time, and EUR 17,828 annually for renewal, with EUR 500 per additional domain. The Anjouan Gaming Authority says its licence certificates carry a unique number and a QR code linking to a public register, and that a certificate which cannot be verified there should not be relied on as evidence of licensing. That is a fair standard. Whether the authority meets it is another matter: an ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, that a former attorney-general of the Comoros described the licensing entity as “an illegal entity”, and that Comoros financial intelligence officials said it operates illegally. Anjouan Gaming responded on 10 June 2026 that its licence “is not, and has never been presented as, a universal authorisation to operate in every country in the world”, and that no licensing authority can exempt an operator from local law. Quite. That statement is the whole offshore argument collapsing on itself.

Kahnawà:ke is the oldest of them, regulated by the Kahnawà:ke Gaming Commission since its interactive gaming regulations were enacted on 8 July 1999. Its structure is unusual and worth understanding: the Commission issues a single Interactive Gaming Licence, held by one entity at a time and held by Mohawk Internet Technologies since 1999, plus Client Provider Authorizations. A CPA holder must be hosted in the same data centre. Applications are not cheap — the CPA application fee rises from USD 35,000 to USD 40,000 on 1 January 2027 — but the Commission also runs a Logo Certificate Program, effective since 15 January 2010, that lets anyone click the logo on a site to generate a Certificate of Good Standing. It also suspended one CPA, held by Polar Ventures SDRL, effective 29 September 2026. A regulator that suspends things is a regulator doing something.

Malta is the closest thing offshore has to a serious regime, and it is the clearest comparison point with Britain. The Malta Gaming Authority requires a B2C Gaming Service Licence for a Maltese or EU/EEA entity offering gaming from Malta, to a Maltese person or through a Maltese legal entity. The application fee is EUR 5,000, non-refundable; the fixed annual licence fee is EUR 25,000; and gaming tax is 5 per cent of gaming revenue. Minimum issued and paid-up share capital is EUR 100,000 for Type 1 and Type 2 licences and EUR 40,000 for Type 3 and Type 4. The MGA publishes a list of Unauthorised URLs precisely because so many sites claim a Maltese licence they do not have.

And then there is the bottom of the pile: Costa Rica. It does not operate a comprehensive gambling licensing regime at all. The “data processing licence” that circulates in the industry is not a licence in the strict legal sense, and the Legislative Assembly rejected Bill No. 25,057 in early 2026 — the bill that would have introduced mandatory licensing. Under Costa Rican law, games of chance where the outcome depends primarily on luck are generally prohibited. A site claiming a Costa Rican licence is claiming a licence that does not exist.

Comparing Offshore Sites and Licensing Regimes

The table below compares the licensing regimes behind the sites most often marketed to British players. It is a comparison by regulator, not by brand, because the brand is the least informative thing about the site.

The wagering numbers fit the same pattern, and this is where the comparison bites hardest. Since 19 January 2026, British licensees cannot apply wagering requirements above ten times, under LCCP social responsibility code 5.1.1. The Commission chose a cap rather than an outright ban, noting in its consultation response that the limit “will take out extreme levels as some licensees currently apply up to 60 times wagering requirements”. Offshore, one operator’s published terms state a 25× playthrough requirement on casino bonuses; another states that a deposit bonus requires the bonus amount multiplied by the wager, with the deposit itself excluded from the calculation, and reserves the right to limit withdrawals from bonus winnings to 300 per cent of the credited bonus amount, voiding the excess. A third caps the maximum bet while wagering at €5 for regular players, and gives every bonus a maximum bet of 20 per cent of the deposited amount, with breach potentially meaning account closure and forfeiture of winnings. Trade coverage suggests offshore welcome bonuses typically run at 25× to 40×, with no-deposit offers at 40× to 60× and cashout caps of €50 to €100 — figures the trade press reports rather than the regulators publish.

That last point matters. The British cap exists because someone wrote down what the industry was doing. Offshore, the equivalent number is whatever the terms page happens to say this month.

The Rule That Turns This Market Around

If one provision explains why “not on GamStop” means what it does, it is licence condition 17.1.1, effective in its current form from 29 July 2026: a customer’s withdrawal request must not result in a requirement for additional information if the licensee could reasonably have asked for it earlier. It does not stop an operator seeking information it must obtain at that point under another legal obligation, such as anti-money-laundering rules. But it removes the incentive to invite a deposit without asking questions and then ask them at the cashier’s window.

How Identity Checks Work

Under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, a remote casino must identify and verify a customer when they deposit funds to take part in remote gambling, or withdraw funds or winnings, amounting to €2,000 or more. That threshold applies to a single transaction and to transactions that appear to be linked, and remote transactions count as linked if they form part of the customer’s overall activity during a single logged-on session.

In Britain, licence condition 17 has required operators to obtain and verify identity information — name, address, date of birth at minimum — before a customer is permitted to gamble since it was introduced on 7 May 2019. The Commission now expects identity and age checks brought forward to before a deposit or a stake, and has criticised onboarding on incomplete or inaccurate information: initials instead of full names, nicknames, commercial addresses instead of residential ones.

The first time through, a British operator will usually verify electronically against credit reference and electoral roll data, and no documents are needed. The check is instant. Later, a larger deposit or an unusual pattern can trigger a fresh request — a passport, a driving licence, a household bill, or, where source of funds is in question, a bank statement. The Commission does not specify which documents a business should ask for, and says it cannot give a timescale because the length varies.

Then the warning signs. The Commission’s 2026 blog reports that over a quarter of complaints reaching its Contact Centre concern identity verification, raised by customers asked for documents only when they tried to withdraw. The regulator has expressed concern about operators using “fuzzy matching” through third-party verification providers and onboarding customers on partial or equivocal verification. Worse, it notes that onboarding someone under a middle name rather than a forename can create mismatches with records held elsewhere, including GamStop — undermining the self-exclusion the person thought was running.

And the hard edge. An operator may not confiscate a deposit balance on the basis that the customer failed identity or age verification. Un-staked deposits remain the customer’s property. That is a British rule, and it is one of the protections that stops at the coastline.

Five Signs an Offshore Operator Can Be Trusted

None of these signs makes an offshore site equivalent to a British one. They are the difference between a regulated foreign business and a shell with a PDF in the footer.

The Licence Is Live, Not Historic

Find the certificate and check it against the authority’s own register, not the site’s own copy of a badge. Curaçao’s Certificate of Operation Seal must click through to cert.cga.cw and must show the domain you are on; Anjouan says its certificates carry a QR code linking to a public register. A /JAZ number or an “orange” certificate is spent: those ended on 15 October 2025.

The Authority Actually Enforces Something

Look for evidence of suspensions, fines or published enforcement. Kahnawà:ke suspended a Client Provider Authorization held by Polar Ventures SDRL with effect from 29 September 2026. The Malta Gaming Authority maintains a list of Unauthorised URLs. A regulator that only ever issues licences is a registry, not a regulator.

The Terms Name an ADR Provider

A complaint route with a name, a jurisdiction and a published process is a sign someone intends to answer for something. Anjouan requires licensees to designate an authority-approved ADR provider and to list its details in player-facing terms. Costa Rica requires nothing, because it has no regime.

Withdrawals Are Not Gated by a New Condition

Read the withdrawal section before depositing. A term limiting how many withdrawals a customer may request, or permitting manual review of the fifth or tenth withdrawal, is the exact pattern that drew a £900,000 regulatory settlement from one operator on 21 October 2026, including a term restricting customers to one withdrawal at a time.

Player Funds Are Segregated and the Claim Is Specific

Segregation means the operator keeps customer money in a separate client account, not that the money is safe if the business fails. Curaçao and Anjouan both require it. Anyone who tells you it guarantees a refund is selling something.

How to Judge an Offshore Site Before You Commit Anything

These are ordinary, lawful checks. None of them requires an account.

1. Check the licence on the regulator’s register, not on the site. Take the licence number to the authority’s own search page. Curaçao’s register, Anjouan’s QR-linked register and the MGA’s lists are all publicly reachable, and the whole point is that a badge on a page proves nothing.
2. Confirm the certificate names the domain you are visiting. A certificate for a different domain is either a template error or a stolen badge. The Curaçao Gaming Authority treats it as evidence the site is unauthorised or fraudulent.
3. Read the bonus terms to the end, and calculate the playthrough. Multiply the wagering multiple by the base the terms specify — bonus only, or bonus plus deposit. A 35× multiple on a £100 bonus is £3,500 of staking, and the game contribution table decides how long that takes.
4. Find the withdrawal clause and the maximum cashout clause. Look for a cap on how much bonus-derived winnings may be withdrawn, a maximum bet while wagering, and any limit on the number or size of withdrawals. Write down what the worst case costs.
5. Establish the complaints route before there is a complaint. The operator’s own procedure first, then the named ADR provider. If no provider is named, nothing after step one can be enforced by anyone.
6. Assume self-exclusion does not travel. A GamStop block registered against a British licence has no effect offshore. It holds for its full term and remains until the person contacts GamStop to remove it, whatever is deposited elsewhere in the meantime.

What the British Regime Does That Offshore Does Not

The comparison is not about virtue. It is about machinery, and machinery is dull until it is the only thing between a player and a month of argument.

Take withdrawals, the subject on which the Commission has been most consistently impatient. Data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. Earlier data from some of the largest firms showed around 99 per cent of requests approved, processed and fulfilled within 24 to 48 hours. Yet withdrawal problems remain the number one subject of consumer complaints to the Commission, running at around 2,000 a year by July 2024, and its Annual Report for 2024-25 records that withdrawal issues continue to cause most of the complaints it receives.

British operators also cannot offer a reverse withdrawal: RTS requirement 14B, in force since 31 October 2021, states that consumers must not be given the option to cancel a withdrawal request. There are rules against maximum withdrawal limits — the Commission’s own example of a prohibited term being “You may withdraw up to £50 per day and up to £500 per week”. There are rules against sole-discretion terms allowing an operator to void winnings. Credit cards have been banned for gambling since 14 April 2020, and the ban extends to e-wallet funds loaded from a credit card.

Offshore, the guarantee is different in kind. Anjouan’s published standards require segregated player funds, RNGs certified by an approved independent testing facility, AML and CTF controls and age verification. Those are real commitments on paper. What is absent is the thing that makes a commitment bite: a single regulator with the power to fine, suspend and publish, and a statutory complaints ladder ending in a decision the operator has agreed in advance to honour.

Meanwhile the British regime keeps tightening, which is precisely why the offshore market exists. Online slots stakes for all adults are capped at £5 per game cycle since 9 April 2025, and at £2 for adults aged 18 to 24 since 21 May 2025. A minimum of 2.5 seconds must elapse between game cycles under RTS 14D. From 31 October 2025, operators must prompt a customer to set a financial limit before their first deposit. Financial vulnerability checks came in at a £500 net-deposit threshold in August 2024 and dropped to £150 over a rolling 30 days from 28 February 2025. Financial Risk Assessments will be introduced in stages from the largest operators, starting at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over and £2,500 for under-25s.

Read those numbers as a list of frictions, and the appeal of an unlicensed site becomes obvious. Read them as a list of reasons a complaint rate fell — “Withdrawals and/or financial transactions” complaints coded by the Commission’s Contact Centre fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — and the same list reads differently.

The scale is not what the marketing implies. The Commission’s analysis published on 5 November 2026 estimates that 0.6 per cent of respondents across the whole population, including non-gamblers, engaged with illegal gambling websites in the past four weeks, with a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with an illegal site. Market-intelligence estimates of money staked illegally vary enormously — one firm puts it at £16.6 billion in 2025, another analysis at £2.7 billion a year — which tells you how soft the ground is under any confident figure.

What is not soft is the enforcement direction of travel. The Commission’s Illegal Markets team issued 3,140 cease and desist and disruption notices and referral notices between April 2024 and October 2025, referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites with traffic data, engagement fell by an average of 32 per cent after disruption. Registrar blocks and suspensions produced the largest drop, at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent and Google removal at 30 per cent. In the quarter July to September 2026 the team referred 1,835 websites, covering 7,677,211 URLs. The Commission’s view is that search-engine removal makes a site harder to find without fully blocking it — the reason it keeps pressing registrars and hosts instead.

There is an uncomfortable fact buried in all of this. The Commission issued an industry warning notice on 20 January 2025 about casino games from licensed operators appearing on unlicensed websites available to British consumers, noting that such sites often target customers who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. That is the trade in plain terms: the offshore market is partly built on the people the British market has turned away.

Welsh and UK Sites, and What “Not on GamStop” Really Asks

Search for Welsh gambling sites not on GamStop, or UK gambling sites not on GamStop, and you will find lists. The phrasing carries an assumption the law does not support: that a site can be British in some meaningful sense and outside the scheme. It cannot. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, or inside or outside the UK. For remote gambling, the offence applies if at least one piece of remote gambling equipment used is situated in Great Britain, or if the provider knows or should know that the facilities are being used, or are likely to be used, in Great Britain. The Commission states plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, including where the operator holds a licence in another jurisdiction.

So a “Welsh” or “UK” offshore casino is an operator outside the British system that markets to British postcodes. The Welsh dimension changes one thing only: the National Gambling Helpline gives callers in Wales a separate number, 0808 2819 265, alongside 0808 8020 133 for England and Scotland. Otherwise the position is identical, and the domain name is doing marketing work, not legal work.

Worth knowing too that the Commission cannot help with an individual dispute at all. It is a regulator, not an ombudsman, so it cannot resolve complaints or help anyone get money back, though it records complaints and typically refers disputes to an independent third party. That route — the approved ADR provider — is only open for British-licensed operators. Offshore, the biggest complaints are simply not the regulator’s business.

That same complaint route, where it does exist, is worth understanding. LCCP social responsibility code provision 6.1.1 requires licensees to have arrangements for a customer to refer a dispute to an ADR entity free of charge if it is not resolved within eight weeks, and the customer must have gone through the operator’s own procedure first. ADR providers generally may require submission within a period of not less than 12 months. eCOGRA’s report for 1 October 2024 to 30 September 2025 recorded 911 disputes, of which 150 valid disputes concerned deposits and withdrawals, with an average domestic resolution time of 31 days and 17.8 per cent of completed disputes ruled in the consumer’s favour. IBAS’s report for 2024-25 recorded 3,721 domestic disputes, 217 of them banking and financial, with average completion in 20 days and 100 per cent operator compliance with decisions in the consumer’s favour in both 2023-24 and 2024-25. One in six valid claims winning is not a slogan, but a decision that is published and honoured is worth more than a promise.

And in the background, the treatment system that British licence fees and the statutory levy pay for: the levy commenced on 6 April 2025 and raised just under £120 million in its first year, ringfenced for research, prevention and treatment, split 50 per cent treatment, 30 per cent prevention and 20 per cent research. From 1 April 2026, NHS England took commissioning responsibility for gambling-harm treatment in England, funded by approximately £100 million a year from that levy. An offshore operator pays nothing into any of it. That is not an abstraction. It is the same £120 million that funds the clinics, and it is paid by the operators the offshore market is undercutting.

Where the Best Gambling Sites Not on GamStop Actually Stand

The phrase “best gambling sites not on GamStop” assumes a ranking is possible, and the honest ranking is by the regime behind the site rather than the site itself. Malta offers genuinely serious supervision. Kahnawà:ke has lasted since 1999, enforces suspensions, and gives a player a way to generate a certificate confirming a site’s standing. Curaçao is mid-reform, and any seal issued before 15 October 2025 is worth nothing. Anjouan is cheap, voluminous and contested. Costa Rica is not a licence at all.

Weighed against the British standard, none of them is equal, and the gap is not mainly about deposit speed. It is about what happens after something goes wrong: whether there is a regulator with a fine and a name, an ADR decision the operator has agreed to honour, and a self-exclusion register that a middle name cannot slip past. British rules are not generous so much as mechanical, and machinery is what a player needs on the day a withdrawal stalls.

Whatever the marketing says, a GamStop registration keeps running. It holds for its full term and then stays in place until the person contacts GamStop to remove it — if they do not, the scheme holds the data through a further automatic seven-year period during which operators are told the person was previously excluded. In 2025 the register recorded 117,756 new registrations, and 29 per cent of registrants chose six months while more than one in two of the 614,738 consumers on the register as of July 2026 had opted for the full five years. Those people chose the longest exclusion on offer. Offshore casinos did not appear in that decision, and no site outside the British licence can be part of the answer.

If gambling is causing harm, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, operated by GamCare, and reaches the same service by live chat and WhatsApp. Callers in Wales can use 0808 2819 265.

Questions About Offshore Sites

What gambling sites are not on GamStop?

Any site without a Gambling Commission licence is outside the scheme, because GAMSTOP participation is a licence condition under social responsibility code 3.5.5. In practice that means operators licensed in Curaçao, Anjouan, Kahnawà:ke or Costa Rica, and sometimes Malta. The scheme’s reach is defined by the licence, not by the domain name or the language the site is written in.

Is using an offshore gambling site legal in the UK?

The Gambling Act 2005 puts the offence on the provider, not the player. Section 33 makes it an offence to provide facilities for gambling without an operating licence, and it applies where at least one piece of remote gambling equipment is situated in Great Britain, or where the provider knows or should know the facilities are likely to be used there. The Commission states outright that offering commercial gambling to British consumers without its licence is illegal, including when the operator holds a foreign licence.

Why do offshore sites offer bigger bonuses than British ones?

Because British rules cap them. Since 19 January 2026, wagering requirements on bonus funds cannot exceed ten times, and mixed-product promotions requiring two or more types of gambling are banned. Offshore, 25× to 40× multiples are standard, sometimes higher, often with a maximum cashout of 300 per cent of the bonus or a hard cash cap. The bigger headline number is bought with staking volume, a bet cap while wagering, and a withdrawal ceiling.

Do offshore sites check identity, and when?

They must under their own regimes. Anjouan requires AML and CTF controls and age verification; Curaçao sets equivalent standards under the LOK. The difference is timing. British licence condition 17.1.1 stops an operator requiring extra information at withdrawal that it could reasonably have requested earlier. Offshore, the same document request can arrive only at the cashier’s window, with no rule against it and no regulator to complain to.

If I self-exclude through GamStop, does it cover offshore sites?

No. A GamStop Online registration blocks accounts with operators licensed in Great Britain, and the scheme can only exclude people from participating operators. It holds for its full term and then remains in place until the person contacts GamStop to remove it. An offshore casino is not a route around that, and the Commission has warned that some unlicensed sites specifically target customers who have self-excluded.

What can I do if an offshore site withholds a withdrawal?

Very little through official British channels. The Commission regulates British licensees and cannot resolve individual disputes or recover money. Offshore, the only route is the operator’s own complaints process and then the ADR provider its licence requires it to name — Anjouan requires one, for instance. If the licence is unverifiable, or the certificate names a different domain, there may be nothing enforceable behind the site at all. The National Gambling Helpline on 0808 8020 133 is free, 24 hours, if the problem is gambling harm rather than a disputed payment.

The Comparison Ends Where the Licence Ends

The whole subject reduces to a single question, and it is not about bonuses or block times: whose rulebook does the site answer to when the answer matters? A British licence buys GAMSTOP participation, an ADR decision that gets honoured, a ban on reverse withdrawals, a ten-times wagering cap and a levy contribution of 1.1 per cent of gross gambling yield — just under £120 million across the industry in the levy’s first year, ringfenced for research, prevention and treatment. An offshore licence buys whatever the issuing authority can be bothered to enforce, and the spread from Malta to Costa Rica is the whole story. Judge the licence, not the badge: one in two people on the GamStop register when the register was last counted had chosen five years, the longest term available, and not one of them was reaching for a sign-up offer.

Content created by the «GamStop Fast Payout» team