Gambling Not on GamStop and Sites Outside the UK

An offshore site that is not on GamStop holds no Gambling Commission licence, sits outside the national self-exclusion scheme and is not bound by UK stake, deposit or withdrawal rules. Under section 33 of the Gambling Act 2005 it is illegal to offer commercial gambling to consumers in Great Britain without a Commission licence. UK protections do not apply.

The phrase "gambling not on GamStop" is really a phrase about limits — which ones disappear when a site leaves the British net, and which ones the operator simply invents for itself instead. A licence from the Gambling Commission drags a fixed set of numbers behind it: £5 a spin on online slots for adults, £2 for anyone aged 18 to 24, a prompt to set a financial limit before a first deposit, no wagering requirement above ten times on bonus funds from 19 January 2026, and no reverse withdrawals since 2021. Those are not company policies. They are licence conditions, and they vanish the moment the site is licensed in Curaçao, Anjouan or nowhere much at all. What replaces them is whatever the operator's own terms say, and I have read enough of those terms to know the answer is usually "less, and later". The Gambling Commission estimates that among respondents who had gambled online in the past 4 weeks, 2.5% had engaged with an illegal gambling website, with a further 1.5% doing so in the past 12 months. That is a small share of a very large market, and the market intelligence firm H2 Gambling Capital puts the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019. So the subject is not exotic. It is a parallel market with its own arithmetic.

One fact about the name before anything else. The scheme is GamStop, run by The National Online Self Exclusion Scheme Limited, and it is very often typed "gamestop". The misspelling changes nothing about how it works.

What a Site Outside the Scheme Actually Is

Gambling sites not on GamStop are, almost without exception, sites that hold no Gambling Commission licence. Since 31 March 2020, every online operator licensed in Great Britain must be part of GAMSTOP as a condition of its licence, under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which says plainly that licensees must participate in the national multi-operator self-exclusion scheme. That is why the phrase exists at all: for a British-licensed operator, being off the scheme is not a marketing position, it is a licence breach, and in April 2020 the Commission suspended the licences of two operators for failing to integrate it by the deadline.

Offshore sites that hold no Commission licence are not connected to GamStop and are not covered by it, since the scheme's obligations apply only to UK-licensed operators — a point stated by trade and press sources rather than a primary regulator page, though it is entirely consistent with GamStop's own terms of use, and I would treat it as settled.

British-licensed sites set the standard of comparison here, and it is worth being precise about what that standard includes, because the difference is not one of tone. A UK licence brings the £5 and £2 slots stake caps introduced in 2025, the 2.5-second minimum between game cycles, a mandatory prompt to set a financial limit before a first deposit from 31 October 2025, a ban on credit cards for gambling since 14 April 2020, and the £150 net-deposit financial vulnerability check threshold in force since 28 February 2025. Offshore, none of that applies, and the good offshore operators and the bad ones are alike in that respect — the difference between them is what they choose to do anyway.

The Commission has been blunt about where unlicensed sites get their customers. Its industry warning notice of 20 January 2025 said casino games from licensed operators were turning up on unlicensed websites available to GB consumers, and noted that such sites often target people who have self-excluded via GAMSTOP, and may have inadequate social responsibility and anti-money-laundering controls. I do not think that is a slur on every offshore operator. I do think it is a description of the business model at the bottom of the market.

Three Kinds of Offshore Licence, and What Each One Is Worth

The licence on the wall is the first thing to inspect, and the three common ones are not interchangeable.

Curaçao

Curaçao rebuilt its regime with the National Ordinance on Games of Chance, which took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory authority. The old master-licence model is gone: the four former master licensors stopped issuing on 18 August 2024, 1 October 2024, 1 November 2024 and 31 January 2025 respectively, and the legacy "orange" sub-licence certificates of operation ended on 15 October 2025. The CGA's own framework page says a historic /JAZ number or legacy seal must not be treated as proof of a current licence. A full B2C licence costs a one-off EUR 4,592 to apply for and EUR 47,450 a year in total, split between a EUR 24,490 treasury fee and a EUR 22,960 supervisory fee. That is real money, so a Curaçao licence is not nothing — but the authority's own portal was taken out of service, announced on 7 October 2026, and it says the previous digital licence seal may be affected while it builds an alternative verification mechanism.

Anjouan

Anjouan licenses under legislation adopted in 2005, and its published fee is EUR 17,828 for B2C issuance and the same again annually, with EUR 500 per extra domain. Anjouan states that an independent legal opinion from a firm regulated in England and Wales and Quebec confirms the framework is lawful — that is the licensee's own statement, unconfirmed, and I would weigh it accordingly. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 licences at around EUR 17,000 each per year, and that a former attorney-general of the Comoros called the entity selling those licences "an illegal entity". Anjouan itself said in June 2026 that its licence is "not, and has never been presented as, a universal authorisation to operate in every country in the world". Whatever one thinks of the jurisdiction, that sentence is honest, and it is the sentence British players should keep in mind.

Malta and Kahnawà:ke

The Malta Gaming Authority is a genuine supervisor: a B2C licence carries a one-off EUR 5,000 application fee, a EUR 25,000 annual licence fee, 5% gaming tax on revenue, and minimum paid-up capital of EUR 100,000 for Type 1 and Type 2 licences. The MGA also publishes a list of Unauthorised URLs and says any reference to a Maltese licence on those domains is false and misleading — worth checking before believing a footer badge. Kahnawà:ke has regulated interactive gaming since 1999 and requires operators to be hosted at a data centre in the Mohawk Territory; its Client Provider Authorization application fee rises from USD 35,000 to USD 40,000 on 1 January 2027, and its rules require a site to let a player set limits including zero.

Then there is Costa Rica, which has no comprehensive gambling licensing regime at all. The "data processing license" sometimes cited in the industry is not a licence in the strict legal sense, and Costa Rica's Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced one.

What Disappears When the Site Leaves the UK Net

Here is where the site angle bites. The limits a British licence imposes are the limits an offshore site can choose to ignore, and the comparison is not abstract.

The wagering row deserves a comment, because it is where the real money sits. The Commission capped wagering requirements at ten times from 19 January 2026 precisely because, in its own words, some licensees had been applying up to 60 times. Offshore, that cap does not exist. One operator's published terms state casino bonuses carry a 25× playthrough requirement, with slots and specialty games contributing 100%, table games 20%, video poker and blackjack 10%, roulette and baccarat 5%, and craps and live dealer games 0%. Read that again: a player who spends the whole bonus on roulette is wagering at a twentieth of the rate they assumed, and the clock is running.

The Exclusion Term Is Not a Loophole

This is the part I would put in bold if the format allowed it. Self-exclusion holds for its full term, and then it stays in place until the person contacts GamStop to remove it. Those are the facts, in that order, and they are not softened by anything.

Registering blocks access to online gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. Signing up takes a few minutes; the block can take up to 24 hours to bite. Once registered, a person cannot cancel or deactivate during the exclusion period, and the exclusion remains after the chosen period ends unless they contact GamStop to remove it. Under the terms of use, auto-renewal can only be turned off during the last six months of a five-year Minimum Exclusion Period, and it otherwise continues for up to four further five-year periods. If someone does not deactivate, GamStop holds the data through a further automatic seven-year self-exclusion period, during which operators are told they were previously excluded.

The scheme's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends. That refusal is the point.

So an offshore site is never a way round a GamStop exclusion, and anyone who says otherwise is selling something. What an offshore site does is exist outside the scheme entirely — which is not the same as unblocking a registration, and leaves the person with none of the downstream protections either. The Commission's January 2025 warning notice said the quiet part aloud when it noted that unlicensed sites often target self-excluded customers.

Three things worth knowing about the register's shape, from the operator side. GamStop had 561,983 active exclusions at the end of 2025. By July 2026 it reported 614,738 consumers currently on the register, of whom more than one in two had opted for the maximum five-year exclusion, while across all age groups only one in four had self-excluded for six months. Of those who chose in 2025, 22% picked auto-renewal. The scheme is not a six-month pause for most people who use it.

Five Signs a Site Can Be Trusted, and How to Check Each

A licence you can verify on the regulator's own register

Not a badge image — the register. The Commission advises consumers to check that a business holds a British licence and to click through to its public register to see whether the site's activities and domain names match. Where a Curaçao Certificate of Operation seal is used, clicking it must redirect to cert.cga.cw; if the certificate behind the seal shows a different domain from the one being visited, it belongs to somebody else. Anjouan issues certificates with a licence number and a QR code linking to a public register. If the badge cannot be resolved to a register entry, treat it as decoration.

Terms that state the limits before a deposit, not after a win

Read the bonus page and the withdrawal section before depositing anything. Two specific clauses matter most: any maximum cashout attached to bonus winnings, and any maximum bet permitted while wagering. One operator caps bonus bets at €5 for regular players and €10 for VIPs and rejects anything above; another limits the maximum bet to 20% of the deposited amount and warns that breaching it may mean account closure, forfeiture of the bonus and loss of winnings generated during wagering. Those clauses are lawful offshore. They are also the clauses most people discover at the worst possible moment.

A stated customer-funds rating

British-licensed operators must declare one of three insolvency ratings — "not protected", "medium protection" or "high protection" — and an operator rated "not protected" must remind customers every six months that their funds would be at risk if it failed. Keeping money in a separate client account does not guarantee its return, and operators may hold client funds in overseas bank accounts. The quick check: search the terms for the words "insolvency" and "protection". Silence is an answer.

An ADR provider named in the terms

Anjouan requires licensees to designate an authority-approved alternative dispute resolution provider and to publish its name and contact details in player-facing terms, with complaints expected to be resolved within 30 days before escalation. That is a low bar, and yet plenty of sites fail to clear it. A named, reachable ADR provider is the difference between a dispute and a dead end. The British list, for comparison, runs to ADR group, Pegasus ADR Service, Blexr, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee.

Identity checks asked at sign-up rather than at withdrawal

The Commission reported in August 2026 that over a quarter of the complaints reaching its Contact Centre concern identity verification, raised by customers asked for documents only when they try to withdraw. Its expectation is that checks come forward to before a deposit or stake, and it has criticised "fuzzy matching" and onboarding on partial verification. An operator that verifies early is not being difficult; it is showing that its compliance is built rather than improvised.

How Offshore Sites Compare on the Numbers

The UK Benchmark for Withdrawals

The comparison needs a benchmark, and the Commission supplies one. Its data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators, of which 96.3% cleared automatically, 3.5% cleared within 24 hours and 0.1% took up to 48 hours. That is the standard a British-licensed site is measured against — and the Commission still says withdrawal issues generate most of the complaints it receives, as its Annual Report and Accounts 2024-25 states, and that it received around 2,000 complaints a year about withdrawal delays as of July 2024. Slowness is not an offshore speciality. It is simply that offshore, nobody is watching.

Where delay is built into the terms

Two structural delays are worth naming because they are legal on one side of the line and not the other.

Under UK rules, a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier, and a "one withdrawal at a time" clause has been found unfair under the Consumer Rights Act 2015 — the Commission's £900,000 settlement with one licensed operator in October 2026 turned partly on exactly that. The Commission has also said it is not acceptable for operators to introduce friction when a customer withdraws rather than when they deposit.

Offshore, the delay is often arithmetic rather than malice. Bonus funds that cannot be withdrawn until a 40× playthrough is met are a delay written into the product. A maximum cashout clause that voids everything above 300% of the bonus is a delay that never ends. And where an operator restricts withdrawals to one at a time, the queue is as long as the operator says it is.

Payment methods, and why the choice is a limit choice

Payment methods are not neutral here. UK licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment only from providers that are payment service providers under the Payment Services Regulations 2017 — the reason card and bank rails behave predictably. Offshore, crypto is common, and its timing is a matter of chain mechanics rather than policy. Bitcoin targets a ten-minute block interval, but within any ten-minute window the chance of a block is about 63%, rising to 95% within 30 minutes; a six-confirmation wait is the classic default, and fresh coins cannot be spent for 100 blocks. USDT on TRON consumes about 65,000 Energy to an existing wallet and about 130,000 to a new one — roughly 13 TRX or 26 TRX burned with no staked Energy. Those are limits too, just not ones a regulator wrote.

What to Check Before You Use One, Step by Step

1. Find the licence, then verify it on the regulator's register. Note the jurisdiction and the licence number, and click the seal to see where it goes. Reason: a footer badge costs nothing, and both the CGA and Anjouan now say unresolvable certificates should not be relied on.
2. Read the bonus terms in full, including any maximum cashout. Write down the wagering multiple, the game contribution weights and the cashout cap. Reason: these three numbers decide whether a bonus is worth taking, and offshore there is no ten-times ceiling to protect you.
3. Find the maximum bet while wagering. Then decide whether normal play would breach it. Reason: breaching it is often grounds for losing the bonus and the winnings generated during wagering.
4. Look for the customer-funds disclosure and the ADR provider. Search the terms for "insolvency", "protection" and "dispute". Reason: those two paragraphs tell you what happens if the operator fails and where a complaint can go.
5. Check the withdrawal mechanics before depositing: method, minimum, fees and any limit on how often you may request one. Reason: reverse withdrawals are banned in Britain and not offshore, and a one-at-a-time rule turns a single payout into a queue.
6. Set the limits the site does not have to set for you. Use the account's own tools, and the block on your card. Reason: bank gambling blocks decline payments by merchant category and apply at card level, so each card must be switched on separately, and most banks apply a 48-hour or 72-hour cooling-off before gambling transactions clear again.

Two things about the self-exclusion route, since it comes up constantly. It holds for its full term and then stays in place until the person contacts GamStop to remove it. And if help is what is needed, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, operated by GamCare.

FAQ

What gambling sites are not on GamStop?

Those holding no Gambling Commission licence. Since 31 March 2020 every GB-licensed online operator must participate in GAMSTOP under social responsibility code provision 3.5.5, so a site outside the scheme is, by definition, outside the British licensing system — typically licensed in Curaçao, Anjouan, Malta or Kahnawà:ke, or in no jurisdiction with a real gambling regime at all.

Are gambling sites not on GamStop UK legal?

Operating one for British consumers is not. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and the Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere. The offence attaches to the operator, not to the adult player.

Are the best gambling sites not on GamStop better than UK-licensed ones?

Better at what? They can offer larger stake limits and uncapped bonuses, because the £5 slots cap and the ten-times wagering ceiling do not reach them. They also sit outside GamStop, the credit card ban, the financial vulnerability thresholds and the free ADR route. Which column is heavier depends entirely on what a player is trying to buy, and the second column is the one that bites in a dispute.

Do gambling apps not on GamStop let you avoid self-exclusion?

No. A GamStop registration blocks a person from signing up for or using online accounts with gambling companies licensed in Great Britain, it cannot be cancelled during the exclusion period, and it stays in place after the chosen term ends until the person contacts GamStop to remove it. An offshore site is not a route round that; it is simply a place the scheme does not reach.

Which offshore licences are worth anything?

Malta is a genuine supervisor, with a EUR 25,000 annual licence fee, 5% gaming tax and EUR 100,000 minimum capital for Type 1 and Type 2 licences. Curaçao now licenses directly through its Gaming Authority, though its verification portal is being rebuilt. Anjouan is the cheapest and most questioned, and its own regulator has said a licence is not a universal authorisation.

Where does a Welsh player stand?

The same place as anywhere else in Great Britain — the exclusion scheme, the stake caps and the licence conditions are national, not regional. Wales has its own Helpline number, 0808 2819 265, alongside 0808 8020 133 for England and Scotland. Gamban is free for residents of Wales; in England and Scotland it costs £4.99 a month or £29.99 a year after a seven-day trial, following the end of TalkBanStop funding on 31 March 2026.

The Reality of Limiting Yourself

Offshore gambling is not a loophole, it is a different set of limits written by someone with an interest in the answer — and for all the noise about freedom, the numbers that matter most in a dispute are the ones the operator wrote for itself, not the ones a regulator removed.

That is the trade, stated plainly. The Commission's Illegal Markets team issued 3,140 cease and desist and disruption notices and referred 447,778 search URLs between April 2024 and October 2025, securing 287,961 removals; measured across 160 illegal gambling websites, engagement fell by an average of 32% after disruption, with REGISTRAR blocks producing a 91% average fall. Enforcement is real, but its own figures show it works hardest on access, not on the terms. Anyone who needs support can call the National Gambling Helpline free on 0808 8020 133, any hour of any day. As of 12.11.2026, the register itself is the number I would watch: one in two people on it chose the longest term available, which tells you rather more about the product than any bonus headline ever will.