New Gambling Sites UK: Reading the Licence Before the Bonus
New gambling sites in the UK are either held to a Gambling Commission licence, which fixes the terms they can impose, or they are offshore operations outside British jurisdiction. The difference shows up in payout times, withdrawal limits and self-exclusion. A British licence is the standard worth comparing against.

There is a moment in every launch where the marketing gets ahead of the paperwork. A new site arrives with a bonus that sounds generous, a licence badge in the footer, and a withdrawal page that mentions “processing times”. The bonus is the part everyone reads. The licence is the part that decides whether the money ever leaves.
I have spent years reading the Gambling Commission’s rulebook and the terms pages that try to live just outside it, and the pattern is remarkably stable. Sites licensed in Great Britain operate under a condition that obliges them to join the national self-exclusion scheme, a cap on wagering requirements, and a ban on terms that put a ceiling on withdrawals. Offshore operators that accept British players are not covered by any of it — they are simply not licensed here, and the protections do not travel with the player.
So the useful question about any new name is not how big the welcome offer is. It is which regulator stands behind it, what that regulator actually requires, and what happens on the day a withdrawal is requested. This page sets out how the 2026 market is built, how the British standard compares with the offshore alternatives, and how to tell a careful operation from one that is merely well dressed. As of 12 November 2026, that remains the only reliable sorting test.
Mandatory Licence Conditions
When a site holds a Gambling Commission licence, a set of conditions comes with it whether or not the operator mentions them. All online operators have had to be part of GamStop since 31 March 2020, a requirement sitting in social responsibility code provision 3.5.5. In April 2020 the Commission added a duty to check the entire customer base against the register at least every 24 hours. The scheme itself is often mistyped “gamestop”; it is run by The National Online Self Exclusion Scheme Limited and is free to use.
The financial rules matter just as much. The Commission banned credit cards for gambling from 14 April 2020. Slots stakes are capped at £5 per game cycle for adults and £2 for those aged 18 to 24, live since April and May 2025 respectively. Since 19 January 2026 wagering requirements on bonus funds are capped at ten times, and a single promotion may not mix betting, casino, bingo and lottery products. Since 31 October 2025 every operator must prompt a customer to set a financial limit before a first deposit. Customers’ funds must sit in a separate client account, and the operator must state plainly which of three insolvency protection ratings applies. None of this is optional, and none of it applies to a site licensed only in Curaçao or Anjouan.
What Offshore Sites Are and Where Their Terms Bite
An offshore site that accepts British players is, in the Commission’s own words, operating illegally: it is unlawful to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence somewhere else. Under section 33 of the Gambling Act 2005 that is an offence by the operator, punishable on summary conviction by up to 51 weeks’ imprisonment, a level 5 fine, or both.
The consequences for the player are practical rather than legal. Self-exclusion is the clearest example. Registering with GamStop blocks access to operators licensed in Great Britain only; the scheme cannot stop access to services run by organisations that do not participate. Offshore sites are not connected to GamStop, and an offshore site is not a route around an exclusion — the exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. That is the one point on this page I would call non-negotiable.
Disputes are the second bite. The Commission is a regulator, not an ombudsman, so it cannot resolve an individual complaint or recover money. British-licensed operators must give customers access to an approved alternative dispute resolution provider, free of charge, if a complaint is not settled within eight weeks. Offshore sites sit outside that arrangement, and the honest ones at least publish their own. The Commission issued an industry warning notice on 20 January 2025 about licensed casino games appearing on unlicensed sites, noting that such sites often target customers who have self-excluded.
Comparing Regulatory Regimes
The table below compares where a site’s licence sits rather than who holds it. Figures are the published fee, capital or threshold levels for each regime where available, with the British column left as conditions because the Commission charges operators by activity and Gross Gambling Yield rather than by a flat licence price. Two figures quoted here also appear in the text: the £2,000 trigger for identity checks and the €4,592 Curaçao application fee.
| Criterion | Great Britain (Gambling Commission) | Curaçao (CGA, post-LOK) | Anjouan | Malta (MGA) |
|---|---|---|---|---|
| Licence exists for GB play | Yes, required | Not a GB licence | Not a GB licence | Not a GB licence |
| Named fee structure | Levy at 1.1% of online GGY from 6 April 2025 | €4,592 B2C application; €47,450 total annual B2C | €17,828 issuance and €17,828 annual renewal; €500 per extra domain | €5,000 application; €25,000 annual; 5% gaming tax |
| Identity check trigger | Before gambling under Licence Condition 17 | Not set by GB rules | Operator’s own AML standards | Not set by GB rules |
| Deposit-linked check | Financial vulnerability checks at £150 net over 30 days from 28 February 2025 | None specified | None specified | None specified |
| Wagering cap | Ten times, from 19 January 2026 | None | None | None |
| Self-exclusion link | Mandatory participation in GamStop | Not connected | Not connected | Not connected |
| Player dispute route | Commission-approved ADR, free to consumer | Operator’s designated ADR | Authority-approved ADR, 30 days before escalation | MGA complaints form |
| Withdrawal ceiling on deposits | Prohibited | Allowed by default | Allowed by default | Not required to be prohibited |
The Malta column is the instructive one. Malta is a serious regulator with real capital requirements — EUR 100,000 paid-up share capital for Type 1 and Type 2 B2C licences — and it publishes a list of Unauthorised URLs declaring that any reference to a Maltese licence on those domains is false. It is still not Great Britain. An MGA licence buys Maltese supervision, not the right to be protected by British rules, and the Commission treats trading here without its own licence as illegal regardless.
Identity Checks and Withdrawal Rules
If one mechanism decides how a new site feels in practice, it is identity verification. A British-licensed operator must obtain and verify a customer’s identity before that customer is permitted to gamble, under Licence Condition 17, introduced on 7 May 2019. In practice most sites verify electronically at registration by matching against credit reference and electoral roll data, and the customer notices nothing. The older habit — letting someone deposit freely and then demanding a passport the moment they try to withdraw — is exactly what licence condition 17.1.1 now forbids where the operator could reasonably have asked earlier.

The money-laundering threshold sits behind this. Under the 2017 Regulations, a remote casino must identify and verify a customer once deposits or withdrawals reach €2,000, or when linked transactions reach that figure — and linked means transactions in one logged-on period or the same game, not just a single payment. For the first deposit that is usually invisible; problems appear later, when a player has run a balance up and the request for documents arrives at the worst possible moment.
The warning signs are recognisable. A site that asks for documents only at withdrawal, that requests a selfie without explaining why, or that uses a middle name or a nickname on the account is storing up a mismatch. The Commission has said that onboarding with initials instead of a full name, or a commercial address instead of a residential one, is not sufficient, and that mismatches can defeat self-exclusion checks against the register. The same 2026 blog noted that over a quarter of complaints reaching the Commission’s contact centre concern identity verification. Offshore, none of these expectations binds anyone: an Anjouan licensee must apply age verification and AML controls under its own published standards, but there is no British rule stopping it from asking for documents at the exit rather than the entrance.
Gambling Market Statistics for 2026
The market is not getting smaller. Total Great Britain gambling Gross Gambling Yield was £17.5 billion in the year to March 2026, up 4.4%, with the remote casino, betting and bingo sector contributing £8.3 billion of that, a rise of 6.9%. Online GGY for January to March 2026 alone was £1.55 billion, up 7% year on year, across 13.4 million average monthly active accounts. Remote casino carried £5.0 billion of GGY in the previous financial year, £4.2 billion of it from slots.
Against that, the illegal market is a small share with a loud reputation. Commission analysis published on 5 November 2026 estimated that 0.6% of the whole population engaged with an illegal gambling website in the previous four weeks, rising to 2.5% among those who had gambled online in that period. Commission estimates elsewhere run far higher: H2 Gambling Capital puts stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share falling from 97% to 92%.
Both things can be true. The population-level engagement figure is close to noise; the staked total is not, because a small number of people staking heavily offshore can move a lot of money. What the enforcement numbers show is a regulator playing a game of Whack-a-Mole and saying so. Since April 2024 the Illegal Markets team issued 3,140 cease and desist and disruption notices, referred 447,778 URLs to Bing and Google and secured 287,961 removals. Across 160 illegal sites with traffic data, engagement fell an average of 32% — but registrar blocks and site suspensions produced falls of 91%, while Facebook removals managed 8%. The Commission itself notes that taking a site out of search results makes it harder to find without fully blocking access.
Payout Speed and the Terms That Build In Delay
The promise word attached to new sites is usually “fast”, and the Commission’s evidence on how fast British-licensed operators actually are is unusually good. Across 44.2 million withdrawals by customers of large online operators between June and September 2024, 96.3% cleared automatically, 3.5% cleared within 24 hours and 0.1% took up to 48 hours. That is the benchmark, and it is a high one.
What sits on top is a complaints picture that has barely improved. The Commission’s contact centre receives over 6,000 calls a year, and withdrawals were the number one subject; by July 2024 it was still receiving around 2,000 complaints a year about withdrawal delays. The Annual Report and Accounts for 2024-25 confirms that withdrawal issues continue to cause most of the complaints received. Complaints coded “Withdrawals and/or financial transactions” did fall from 2,416 in the year to December 2022 to 1,791 in the year to December 2025, which is progress of a sort.
The rules here are consumer-protective rather than prescriptive. Reverse withdrawals were banned outright from 31 October 2021: once a withdrawal is requested, the customer must not be given the option to cancel it and spend the money. The Commission may not impose a term capping how much can be withdrawn from a deposit balance — its own example of a prohibited term is “You may withdraw up to £50 per day and up to £500 per week”. Operators may not confiscate un-staked deposits, including where identity verification has failed. A fee is allowed only if it is cost-reflective, disclosed before the first deposit, and never exceeds the direct processing cost.
Offshore terms frequently work the other way. Maximum cashout clauses are standard in bonus-heavy offers: one operator caps withdrawable winnings from bonus play at 300% of the credited bonus amount and voids the excess, another ties the maximum bet during wagering to 20% of the deposit. Ignition’s published contribution chart gives slots 100% toward wagering but roulette and baccarat 5%, craps and live dealer 0%. No British-licensed site could impose any of those shapes of term on a deposit balance.
Bitcoin and crypto withdrawals
Crypto payouts are the fastest-sounding and least predictable. Bitcoin targets a ten-minute block interval, but a block inside any given ten minutes arrives with about 63% probability, rising to 95% within thirty minutes. Exchanges and merchants carrying double-spend risk typically want six confirmations. Litecoin averages 2.5-minute blocks, and only about 55.43% of modelled six-confirmation spans actually complete inside fifteen minutes.
E-wallets
E-wallets are where fees hide. Skrill charges 2.80% to move money to a bank account, with a EUR 3.50 minimum, from 12 January 2026; Neteller charges the same 2.80% with a USD 3.50 minimum, plus a 1.50% crypto fee on its standard tier. Both levy a monthly service fee if the account is untouched for six months. MiFinity’s FX markup runs up to 2.99% on the wholesale rate, rising to 3.99% for exotic pairs.
Cards and bank transfers
Card and bank rails are the cheapest and least glamorous. Visa Direct’s Fast Funds service moves money in real time with funds available within 30 minutes of approval. Faster Payments has a £1 million ceiling per transaction, raised from £250,000 on 10 February 2022, though individual banks set lower limits — NatWest’s online personal limit, for instance, is £100,000. CHAPS settles high-value payments same-day with no scheme upper limit. PayPal charges a personal UK account nothing to withdraw to a bank when no currency conversion is involved.
Five Signs a New Gambling Site Can Be Trusted
The licence matches the domain
Check the Commission’s public register and click through from the licence entry to the domain names listed. The Commission advises exactly this, and the point is that a licence held by a group is not the same as a licence covering the site in front of you. A badge in a footer proves nothing on its own; a register entry that names the domain does.
Self-exclusion works from the first day
A British-licensed operator must be part of GamStop, and must check its whole customer base against the register at least every 24 hours. The practical test is what happens if a GamStop registration exists: the account should be closed and any balance returned, not merely frozen. The licence requires the operator to close the account and return funds, and states that blocking withdrawals while still accepting wagers is not enough.
Withdrawals are not a negotiation
The fairness test is the order of operations. Identity information should be requested before gambling, not at the point of exit, because licence condition 17.1.1 forbids demanding extra information at withdrawal that could reasonably have been requested earlier. A site that verifies up front and then pays without a “pending” stage running into days is behaving as the rules intend.
The bonus terms fit on one screen
From 19 January 2026 wagering requirements on bonus funds are capped at ten times, and mixed-product promotions are banned. Significant conditions must be given transparently and prominently, and where displayed online, in full no more than one click away. If the terms of a welcome offer cannot be found in one click, that alone tells you something about how the rest of the relationship will be conducted.
Complaints go somewhere real
Operators must offer customers free access to a Commission-approved ADR provider where a complaint is not resolved within eight weeks of receipt, but the customer must go through the operator’s own procedure first. The approved list includes IBAS and eCOGRA, and IBAS has reported 100% operator compliance with decisions in the consumer’s favour in both 2023-24 and 2024-25. Ask which provider a site uses before you need it.
How to Judge a New Site Before Depositing

- Confirm the licence names the domain. Use the Commission’s public register and follow the link to the listed domain names. An operator group’s licence does not automatically cover every brand it operates, and offshore regulators publish their own verification tools — Curaçao’s Certificate of Operation seal must redirect to its certification page, and a certificate showing a different domain means the site is not authorised.
- Read the withdrawal section before the bonus section. Look for stated processing times, any maximum cashout clause, any fee, and whether a bonus balance separates cleanly from your own money. British rules forbid a maximum limit on withdrawing a deposit balance and require deposit and bonus balances to be displayed separately; if a site cannot say where its money stops and yours starts, that is the answer.
- Check the identity check timing. A site that verifies before the first deposit is following the Commission’s expectation. A site that only asks once there is a balance to lose is creating the mismatch problem that the Commission has flagged, where a nickname or a middle name on the account can defeat checks against the register.
- Set a financial limit when prompted. Since 31 October 2025 operators must prompt for a financial limit before the first deposit and present it as the default option, with the customer obliged to take an action to decline. It is one of the few genuinely useful pieces of friction in the process, and it is free.
- Turn on a blocking tool and a bank block. GamStop signposts Gamban and BetBlocker; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps at no cost anywhere. Separately, the Commission lists gambling block services at Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, and most apply a 48- or 72-hour cooling-off before gambling payments resume.
- Check the customer funds rating. Licence conditions 4.1.1 and 4.2.1 require operators that hold customer funds to say in writing whether those funds are protected on insolvency, at which of three ratings, and by what method — and the customer must acknowledge it. A separate client account is not a guarantee of getting money back; the Commission says so explicitly, and businesses may lawfully hold customer funds in overseas bank accounts.
Support Resources for Gamblers
If gambling stops being a hobby, the route out is well signposted and free. The National Gambling Helpline is operated by GamCare on 0808 8020 133, available 24 hours a day, every day of the year, with live chat and WhatsApp on the same number; callers in Wales are given 0808 2819 265. It is not a crisis line. GamFam, a registered charity, runs the GRA5P peer-support programme for families and people in recovery, usually six to ten members per group and currently all online. Citizens Advice offers confidential help with debt, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, Monday to Friday, 10am to 3pm.
The treatment system behind all of this is now funded by the statutory levy, which commenced on 6 April 2025 and replaced voluntary contributions. It raised just under £120 million in its first year, ringfenced for research, prevention and treatment, and is split 20% research, 30% prevention and 50% treatment. From 1 April 2026 NHS England took commissioning responsibility for gambling-harms treatment in England, with the levy worth approximately £100 million a year.
Questions About Licence Terms
Is a new gambling site more likely to be a scam than an older one?
Not automatically, but newness removes the track record. The checkable answer is the licence, not the age. A domain named on the Commission’s public register carries the full set of 2026 conditions — the ten-times wagering cap, the prohibition on withdrawal ceilings for deposit balances, and mandatory GamStop participation. A new offshore site has none of those obligations, and the Commission’s warning notice of 20 January 2025 flagged unlicensed sites offering licensed casino games as a specific risk.
Do offshore casinos appear in search results for new UK sites?
Frequently, which is why the Commission spends so much of its time on removals. Since April 2024 it referred 447,778 URLs to Google and Bing and secured 287,961 removals, and it reports that registrar blocks and site suspensions cut engagement by 91% while search-engine removal manages 30%. Being findable, in other words, says nothing about being licensed. The register is the only list that matters.
Can a British-licensed site refuse to pay out because of a bonus term?
It can withhold bonus-derived winnings only where the terms are fair and clearly disclosed. From 19 January 2026 wagering requirements are capped at ten times, mixed-product promotions are banned, and significant conditions must be given prominently with full terms one click away. Maximum cashout clauses of the kind common offshore — one operator caps bonus winnings at 300% of the bonus credited — have no equivalent on a deposit balance under British rules.
How fast should a withdrawal actually take?
The Commission’s own dataset for June to September 2024 recorded 44.2 million withdrawals by customers of large operators, of which 96.3% cleared automatically, 3.5% within 24 hours and 0.1% in up to 48 hours. That is the standard to hold a site to. The Commission has said plainly that there is no valid reason to delay a payout where it has no regulatory concerns, and that operators may not introduce friction only when a customer tries to withdraw.
Does registering with GamStop cover offshore sites?
No. GamStop blocks access to operators licensed in Great Britain and can only exclude from participating operators, so offshore sites are not connected to it. Nor is an offshore site a way round an exclusion: a GamStop registration holds for its full term and then stays in place until the person contacts GamStop to remove it. It cannot be cancelled or deactivated during the exclusion period.
What identity documents can a site ask for?
The Commission says a gambling business may ask for passports, driving licences and household bills, and may seek a selfie where it suspects identity theft. Many operators verify electronically against credit reference and electoral roll data, in which case nothing is requested. Under the 2017 Regulations, identification and verification are required at the €2,000 threshold, counting linked transactions, not just single payments. The Commission does not provide a timescale, because it varies.
The Only Badge That Travels With the Money
A new gambling site is a set of terms wrapped around a licence, and the licence is the part that decides how the relationship ends rather than how it begins. In Great Britain that means the ten-times wagering cap, the ban on withdrawal ceilings for deposit balances, the 24-hour self-exclusion check and a free route to an approved dispute body. Offshore, it means whatever the operator wrote down — enforceable, if at all, somewhere the British player cannot easily reach.
So judge the badge, not the bonus. If gambling is becoming a problem, the National Gambling Helpline is on 0808 8020 133, free, 24 hours a day. And if you are checking whether a site is genuinely new to the British market or merely new to you, the answer is on the Commission’s public register: two minutes there beats any review, including this one.
UK Gambling Sites
Content created by the «GamStop Fast Payout» team
