Casinos Without GamStop in 2026 Limits and Licences

Casinos without GamStop accept players who cannot use the British self-exclusion register. That is the whole point of them, and it is also the problem: they hold no Gambling Commission licence, British protections do not apply, and one study suggested £16.6 billion was staked with illegal operators in 2025.

The £8.3 billion question nobody answers straight

Every so often a press release lands in my inbox announcing that a casino "welcomes all players, no exclusions". It is usually about a casino site without Gamstop arrangement in which nobody involved has read the licence conditions, and it is always dressed up as choice.

Here is the awkward arithmetic. Remote casino, betting and bingo operators licensed in Great Britain generated £8.3 billion of gross gambling yield in the year to March 2026, up 6.9 per cent. Those operators must join the national online self-exclusion scheme; the requirement sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, in force since 31 March 2020. A casino without GamStop therefore sits outside that market by definition, because a Commission licence would not allow it.

The word itself is often typed "gamestop" — one letter out, and a search engine will still find what you meant.

What does sit inside that market is unlicensed supply, and its size depends on who is doing the counting. Gambling Commission analysis published on 5 November 2026 put engagement with illegal gambling websites at 0.6 per cent of the whole adult population in the previous four weeks, rising to 2.5 per cent among people who had gambled online in that period. H2 Gambling Capital, a market-intelligence firm, reckons the amount staked with illegal operators reached £16.6 billion in 2025, against roughly £5 billion in 2019. The Betting and Gaming Council's own commissioned study from September 2024 preferred £2.7 billion. I do not pretend these numbers reconcile; they measure different things with different methods, and each has an interest. But the direction of travel is not seriously disputed, and the Commission's enforcement figures explain why: in April to June 2026 it referred 366 websites to search engines, then 1,835 in the following quarter.

An online casino without GamStop is not a clever shortcut around a register. It is a different jurisdiction with a different rulebook. 12.11.2026 is a good moment to say so plainly, because the rulebooks themselves have just changed.

What the licence actually buys you — and what it does not

The single checkable number worth carrying around is this: the Commission's public register lists every licensed operator, and it tells you whether a site's activities and domain names match the licence it claims.

The regulator says flatly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including an operator that holds a licence somewhere else. The offence sits in section 33 of the Gambling Act 2005: on summary conviction, up to 51 weeks inside, a level 5 fine, or both.

That is the operator's problem, not the player's — no adult has ever been prosecuted for placing a bet on an unlicensed site, and I have no patience with pages that imply otherwise. But the consequences flow downhill anyway. Offshore sites are not licensed in Great Britain, so GamStop does not reach them, British rules on fair terms do not bind them, no approved alternative dispute resolution provider is obliged to hear the complaint, and no compensation scheme stands behind the balance in the account. A self-exclusion registered with GamStop holds for its full term and then stays in place until the person contacts GamStop to remove it. Nothing about it is negotiable, and no offshore casino is a way round it.

Where the law does bite is the market around the site: section 330 makes it an offence to advertise unlawful gambling, and section 331 covers advertising foreign gambling facilities.

If gambling is causing harm to you or someone you know, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, run by GamCare. In Wales the number given is 0808 2819 265. Citizens Advice offers free confidential help with the debt that so often follows, and NHS England now runs specialist gambling clinics.

Licensing and offshore regulator supervision

A Curaçao licence and the October 2025 clean-up

Curaçao's National Ordinance on Games of Chance took effect on 24 December 2024 and replaced the old master-licence and sub-licence structure with direct licensing by the Curaçao Gaming Authority. The legacy "orange" sub-licence certificates ended on 15 October 2025. The four former master licensors stopped issuing on different dates through 2024 and January 2025. A certificate showing a historic "/JAZ" number proves nothing about whether the operator holds a current licence — the CGA says so itself.

The money is worth knowing, because it frames the business model. A B2C application fee is a one-time €4,592; the annual charge is €47,450, split into a €24,490 licence fee and a €22,960 supervisory fee, payable in full by 15 January. Suppliers must be registered and licensed by 24 December 2026.

There is one genuinely useful check here. The CGA issues a Certificate of Operation Seal only for an approved player-facing domain, and clicking it must redirect to cert.cga.cw. If the certificate behind the seal shows a different domain from the site in the address bar, the seal belongs to somebody else and the site is unauthorised. As of 6 November 2026 the CGA's old portal was offline and it was building a replacement verification route, so a dead link is not proof of anything — a mismatched domain is.

Anjouan, where the paperwork is cheap and the claims are large

Anjouan is a constituent territory of the Union of the Comoros, and its framework rests on legislation adopted in 2005. Its published fees are €17,828 for a B2C licence and the same again annually, with €500 per extra domain. Licences carry no territorial restriction under Anjouan law, though the authority now says — correctly, and it took a while — that no licensing authority can exempt an operator from local law where local authorisation is required.

The scrutiny has been uncomfortable. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 each per year, that Comoros financial intelligence officials described one Anjouan corporate entity as operating illegally, and that a former attorney-general of the Comoros called the licensing body "an illegal entity". Anjouan's answer is a verification framework: certificates carry a licence number and a QR code linking to a public register, and certificates that cannot be verified there should not be relied on. I would treat that as the minimum standard rather than a badge of quality.

Kahnawà:ke, the oldest of the three

The Kahnawà:ke Gaming Commission has regulated interactive gaming since its regulations were enacted in July 1999 and describes itself as having done so longer than almost any other jurisdiction. Its structure is unusual: a single Interactive Gaming Licence, held by a data centre in the Mohawk Territory, with operators holding Client Provider Authorisations underneath. Its Logo Certificate Program, running since 15 January 2010, generates a Certificate of Good Standing when a visitor clicks the Commission's logo. Fees are rising on 1 January 2027 — a CPA application from USD 35,000 to USD 40,000 — and it suspends authorisations when it needs to, most recently one in September 2026.

Malta and Costa Rica as the two honest extremes

The Malta Gaming Authority is a real regulator with real fees: €5,000 application, €25,000 annual, 5 per cent gaming tax, and minimum share capital of €100,000 for the main B2C licence types. It also publishes a list of Unauthorised URLs with notice dates as recent as 30 October 2026, which is more than most do. It is not the Gambling Commission, and an MGA licence does not carry GamStop participation or British fair-terms duties, but the supervision is genuine.

Costa Rica is the other end. It has no comprehensive gambling licensing regime at all; the "data processing licence" the industry cites is not a licence in the legal sense. A bill that would have created a mandatory regime, No. 25,057, was rejected in early 2026. A site describing itself as Costa Rica-licensed is describing nothing.

Licence types and what they protect

The table below compares licence regimes by what they do for the player, not by brand. Numbers come from the authorities' own published fee schedules.

One line in that table deserves more attention than it usually gets. The Kahnawà:ke Commission requires its licensees to let a player set limits including zero, and states that its own voluntary self-exclusion is permanent and irrevocable — and that a player who breaches a self-exclusion forfeits deposited or won funds to a charity of the Commission's choosing. That is a stronger exclusion rule than Britain's in one respect and a far weaker one in another: it is a household scheme, with none of GamStop's cross-operator machinery.

Identity checks as the central topic

Casino without GamStop turns on identity verification more than on anything else, because the timing of a check decides whether a withdrawal arrives or the money sits there while somebody's compliance department thinks about it.

The first time is straightforward in Britain. Licence Condition 17 requires a licensee to obtain and verify a customer's identity before that customer is permitted to gamble, and the information must include name, address and date of birth. Most operators do this electronically by matching the account against credit reference and electoral roll data, in which case no documents change hands at all. The Gambling Commission will not put a timescale on it, because the process varies; electronic verification can be instant, and a document request will not be.

After the first time, checks become continuous and sudden. Under the money laundering regulations, a remote casino must identify and verify a customer when deposits or withdrawals reach €2,000, and the threshold applies to transactions that "appear to be linked" as well as single ones. The Commission's expectation, stated in August 2026, is that identity and age checks move forward to before a deposit, and it has criticised operators who onboard people on partial verification — one route to a mismatch with GamStop records.

The warning signs are specific and recognisable. A site that lets an account be opened in minutes, takes deposits for weeks without a word and then produces a document demand at the moment of withdrawal is either badly organised or hoping for a cancelled withdrawal. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and Licence Condition 17.1.1 says in terms that a withdrawal request must not generate a demand for information the licensee could reasonably have requested earlier. Note also what the rules forbid: an operator may not confiscate a deposit balance because identity verification failed.

Offshore, all of this is optional. Anjouan's published standards require age verification and AML controls, and its licensees must name an approved ADR provider — EGIS ADR, Axion ADR, iGaming ADR and one other approved provider are the current four. Whether the checks get done is a matter of the operator's appetite rather than a regulator's inspection.

Five signs an offshore operator is worth the risk

1. The licence resolves on the regulator's own domain

Click the seal, don't read it. A Curaçao Certificate of Operation must redirect to cert.cga.cw and must display the same domain you are visiting; a mismatched domain means the certificate belongs to another operator. For Anjouan, the certificate's QR code must resolve on the public register. A badge image that simply sits on the page, linking nowhere, is decoration.

2. The terms name the regulator, the ADR provider and the exclusion rule in the first screenful

The licence number, the authority, the approved dispute-resolution body and the site's own self-exclusion policy should be findable without a search. Anjouan licensees are required to list their ADR provider's name and contact details in player-facing terms. If the terms say "we may, at our sole discretion" about anything involving money, that is a clause British operators are told not to use because it is unfair.

3. Wagering requirements are small numbers, printed where the bonus is

Anything above ten times is worth walking away from. The Gambling Commission capped wagering requirements on bonus funds at a maximum of ten times, effective 19 January 2026, and said the cap "will take out extreme levels as some licensees currently apply up to 60 times". Offshore, 25 times is common and 35 to 50 times is not unusual. A maximum cashout clause — one published set of terms limits winnings from bonus funds to 300 per cent of the bonus, voiding the excess — is the term that quietly eats the win.

4. Deposits and withdrawals are separate methods that actually work

Check the withdrawal page before depositing, not after. British operators have been permanently barred from offering reverse withdrawals since 31 October 2021, and may not impose a maximum limit on withdrawing a deposit balance; the Commission's own example of a prohibited term is "you may withdraw up to £50 per day". Offshore terms of that shape are entirely legal where they are written. A €1 minimum withdrawal and a €10,000 ceiling with a processing fee is a business model, not a service.

5. Someone independent answers the phone

Genuine regulators publish a way to complain about their own licensees. The MGA reviews complaints in English or Maltese; Kahnawà:ke employs a full-time Dispute Resolution Officer; Anjouan requires operators to resolve complaints within 30 days before escalation. If a site's terms offer no route beyond its own support queue, the licence is a logo, not a supervisor.

How to judge one without depositing

1. Look the operator up on the regulator's public register and match the domain. Not the brand name — the domain in the address bar. Licences attach to domains, and a certificate showing a different one belongs to somebody else.
2. Read the withdrawal terms before the bonus terms. Find the minimum withdrawal, the maximum, the processing fee and any clause letting the operator review a withdrawal manually. Withdrawal friction is where the money is won and lost, and British rules treat introducing it as unacceptable.
3. Count the number before the word "wagering". Ten times is the British ceiling since 19 January 2026. Twenty-five times on a £100 bonus means £2,500 of play before a penny is withdrawable, and the games you choose may contribute a fraction of each wager — some bonus charts give roulette five per cent.
4. Search the operator's name alongside "withdrawal" and see what recurs. Delays, document demands at the point of cashout and closed accounts recur in patterns. A single complaint proves nothing; the same complaint twenty times is data.
5. Check what happens to the balance if the company folds. British operators must publish an insolvency rating — "not protected", "medium" or "high" — and remind unprotected customers every six months. Offshore there is usually no rating and no client account, and the money is simply an unsecured claim.
6. Set your own limit before the first deposit, and check the site lets you set it to zero. British operators have had to prompt customers to set a financial limit before the first deposit since 31 October 2025. On an offshore site, a limit tool that exists but cannot be set to zero is a limit tool that does not work.

Questions I get asked about casinos without GamStop

Do casino sites without GamStop have a British licence?

No, and they cannot. A Gambling Commission licence obliges the holder to participate in the national online self-exclusion scheme under social responsibility code provision 3.5.5, so a site genuinely outside GamStop is genuinely outside British licensing. The Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, whichever other jurisdiction has issued a licence.

Can an operator take a GamStop registration off at the player's request?

No. A GamStop exclusion cannot be cancelled during the exclusion period, and it stays in place after the chosen term ends until the person contacts GamStop to remove it. The scheme's own 2025 annual report devotes a section to its refusal to remove registrations early. Any site suggesting it can lift or ignore an exclusion is misrepresenting how the register works.

What does casino sites without GamStop exclusion actually mean in practice?

It describes a site that is not wired into the British scheme, so an existing registration does not stop the account being opened. It does not mean the player is welcome — it means the operator carries no British obligations. There is no GamStop check at sign-up because there is no GamStop participation, and equally no British fair-terms duty, no approved dispute route and no fund-protection rating.

Do pay by phone bill casinos without GamStop ever hold a British licence?

Very rarely, and never while operating outside the scheme — mobile payments are a payment route, not a licensing category. The relevant British rule is licence condition 5.1.2, effective 31 January 2024, which requires licensees accepting payment from Great Britain customers to use a provider that is a payment service provider under the Payment Services Regulations 2017. Phone-bill billing through a carrier is a grey area even for licensed operators, and offshore it comes with a deposit ceiling that rarely tops a few tens of pounds per transaction.

Are live dealer casinos without GamStop any better than the slot-only ones?

Not on the evidence that matters. Live dealer games are streamed from studios, and the studio's own licensing is separate from the operator's — Kahnawà:ke, for instance, issues Live Dealer Studio Authorisations as a distinct permit. The relevant questions stay the same: does the licence certificate resolve on the regulator's register, do the withdrawal terms cap or delay payouts, and does anyone independent hear a dispute. A polished live table is production value, not protection.

What does an offshore licence cost the operator, and does that matter?

It matters as a signal. Curaçao charges a €4,592 application fee and €47,450 a year; Anjouan €17,828 to issue and the same to renew; a Kahnawà:ke CPA application is USD 35,000, rising to USD 40,000 from 1 January 2027. A licence costing less than a decent used car, issued by an authority whose own banking recognition was withdrawn in 2013 and 2015, tells you what the supervision is likely to be worth.

The honest position

A casino without GamStop is a site outside British licensing, and its appeal lies entirely in the absence of British rules — which is the same thing that removes the dispute route, the fair-terms duty and the fund protection, so the sensible approach is to assume nothing is checked unless you have verified it yourself on the regulator's register. The Gambling Commission secured 287,961 URL removals from search results and issued 3,140 cease and desist and disruption notices after April 2024, and still the black market grew; that is the honest measure of how much protection a British licence offers and how little of it travels with an offshore one. If any of this has stopped being a debate about licence regimes and started being about your own money, the National Gambling Helpline is free on 0808 8020 133, day or night.