Online Gambling UK and the Licence Register

Online gambling in the UK is a licensed market, not a promise that every site is safe. The Gambling Commission recorded £8.3 billion in Remote Casino, Betting and Bingo gross gambling yield in the year to March 2026. A register entry can establish who is licensed and for what; it cannot guarantee a fair result, quick payout or solvency.

As of 12.11.2026, the distinction I keep returning to is between a claim on a homepage and evidence in a regulator’s register. The register is the useful, unglamorous bit. A British-licensed operator must meet rules on identity, complaints, self-exclusion, customer funds and fair terms. Those obligations do not make every commercial decision admirable, nor do they remove the possibility of disputes. They do give a player and an enforcement body somewhere to start.

The comparison matters because offshore sites can look polished, accept familiar payment methods and display a foreign licence. That is not a British licence. Sites without a UK Gambling Commission licence are not licensed in Great Britain; UK protections do not apply to them, and a foreign licence does not make offering commercial gambling to people in Great Britain lawful. GamStop covers participating Great Britain-licensed online operators, not offshore sites. Self-exclusion lasts for its full term and remains in place afterwards until the person contacts GamStop to remove it; an offshore site is no way around it. For support, the National Gambling Helpline, operated by GamCare, is free on 0808 8020 133, 24 hours a day, every day.

The Register Is a Boundary, Not a Medal

The Gambling Commission’s 21 October 2024 statement is plain: commercial gambling services cannot be offered to consumers in Great Britain without a Commission licence, even where an operator holds a licence elsewhere. Section 33 of the Gambling Act 2005 makes providing facilities for gambling without the required operating licence an offence. That is the legal benchmark; it is not a badge saying “risk-free”.

A register entry tells the public that a named licensee holds authorisation for specified gambling activities. The Commission advises checking the public register and making sure the activities and domain names match the site in question. A logo copied onto a footer is not a substitute. Nor is a certificate that belongs to a different domain. The check is dull by design: identity, status, activity, domain.

The scale of the market is worth keeping in proportion. In its report published 17 September 2026, the Commission put Great Britain gambling industry GGY at £17.5 billion for April 2025 to March 2026, up 4.4% on the previous financial year. Remote Casino, Betting and Bingo accounted for £8.3 billion, up 6.9%. These are gross gambling yield figures, not the amount players staked and not a measure of operator virtue. Numbers have a habit of being dressed for dinner.

The Commission’s separate online operator dataset for January to March 2026 reported £1.55 billion total online GGY and 13.4 million average monthly active accounts. It covers about 70% of the market and should not be casually compared with the Commission’s other industry statistics. An impressive market size says nothing on its own about which company should be trusted.

What the Licence Changes

A British licence brings obligations that do not follow an offshore operator across borders. UK-licensed remote operators must participate in the national multi-operator self-exclusion scheme under Licence Conditions and Codes of Practice social responsibility code 3.5.5. Since April 2020, they must check their customer base against GamStop at least every 24 hours. Operators must verify identity before permitting gambling, explain what documents may be needed before a deposit, and cannot wait until a withdrawal to request information they could reasonably have requested earlier.

There are also rules for withdrawals and disputes. The Commission does not set a fixed maximum number of days for every payout, but licence conditions require fair and transparent terms. A customer must be allowed to withdraw deposit balance, subject to necessary legal obligations; an operator cannot invent a maximum withdrawal limit for that balance. If a complaint is unresolved to the customer’s satisfaction within eight weeks, the licensed business must provide access to an approved alternative dispute resolution entity free of charge.

The register does not prove customer funds will be returned if a business becomes insolvent. Operators must state a customer-funds protection rating, which may be “not protected”, “medium protection” or “high protection”. A separate client account is not a guarantee of repayment. That distinction is sensible, if less soothing than a green tick.

A Comparison by Licence and Protection

The offshore columns are not a claim that every operator under those regimes behaves alike. A current, verifiable foreign licence may be more informative than no credible oversight at all. But it does not supply British jurisdiction, Commission supervision or UK complaint routes. In Curaçao the former orange sub-licence certificates ended on 15 October 2025; the old seal is not proof of a current licence. The CGA said in October 2026 that its former online portal would not return and it was working on an alternative way to verify licensed domains. That makes domain-level checking more important, not less.

The Licence Check, First and Every Time

A licence check is a matching exercise. First, identify the legal operator named in the site’s terms, not merely its trading name. Then find that entity in the Commission’s public register and check that the status and licensed activities fit the service offered. Finally match the domain. A licence held by a software supplier, affiliate, sister company or a different domain does not automatically authorise the site being used.

Later, repeat the check if the operator changes, the domain redirects, or a payment or account page names a different company. These are not exotic edge cases; corporate names and web addresses are easy to blur together in marketing. The Commission’s advice is to check both activities and domains. If a site claims a Curaçao Certificate of Operation, its seal should lead to the CGA verification page and display that exact domain. A generic licence certificate is not the same thing as a domain-specific operating certificate.

Warning signs include an expired or historic certificate, a regulator logo that does not open a verifiable record, a domain mismatch, and terms that conceal which company holds the account. A licence is not portable because a site says so. Nor does a Malta, Curaçao or Anjouan authorisation replace the UK licence needed to offer commercial gambling in Great Britain.

Five Signs Worth Checking

The Register Names the Same Operator

Compare the legal company in the site’s terms with the Commission’s public register. Check status and activity, not just a logo. A group may own several brands; the name at the foot of a page is not necessarily the licensed entity. If the identities do not match, the claim has failed its first exam.

The Domain Is Actually Listed

Read the domain carefully, including spelling and any redirect. Commission guidance specifically tells consumers to check that the domain matches the register. For a Curaçao Certificate of Operation, click through and check the approved domain shown on the CGA record. Screenshots are cheap; live verification is better.

Terms Explain Withdrawals Before Deposits

Find the withdrawal and verification clauses before account funding. UK licence rules require fair, transparent terms and prohibit a request for extra information at withdrawal if it could reasonably have been requested earlier, although legal AML duties can require further information. A vague promise of “fast payouts” is advertising; the written terms are the evidence.

The Complaints Route Is Named

A licensed operator should explain its internal complaint process and the approved ADR route if the dispute remains unresolved after eight weeks. Check the ADR provider against the Commission’s approved list. A foreign dispute service may be real, but it is not the same as a British-licensed operator’s required route.

Funds and Exclusion Are Disclosed

Check the customer-funds rating and the self-exclusion information. UK-licensed online operators must join GamStop; the scheme blocks participating British-licensed operators, not offshore services. A disclosure that explains whether funds are protected is useful precisely because protection is not automatic. “Your money is safe” is not a rating.

How to Check a Site in Six Steps

1. Start with the legal operator. Find the company name in the terms and privacy information. This identifies the party responsible, rather than the brand’s advertising identity.
2. Search the Commission’s public register. Confirm the licence is current and the activities cover the service offered. A gambling licence for another activity is not a universal permission slip.
3. Match the domain. Check the exact web address, including any redirect or app-related domain. The Commission’s register check is about both the operator and its domains.
4. Read the rules that affect money. Inspect withdrawal, verification, bonus and customer-funds terms. UK rules require clear, fair terms; there is no general fixed payout deadline, so look for conditions that build in delay.
5. Confirm complaints and exclusion routes. A British licensee must offer access to approved ADR after its own complaint process and must participate in GamStop. Those are concrete obligations, not a site’s general claim to care.
6. Treat a mismatch as a stop sign, not a puzzle. If the licence, entity or domain cannot be verified, do not assume another regulator’s logo fills the gap. The register proves what it lists—and nothing more.

Offshore Claims and the Enforcement Numbers

The Commission’s work gives a measure of the enforcement gap. Since April 2024, it reported issuing 3,140 cease-and-desist and disruption notices, referring 447,778 URLs to Google and Bing, and securing 287,961 removals; the figures were published on 21 October 2025. Across 160 illegal gambling websites with traffic data, engagement fell by an average 32% after disruption. That shows action can reduce visibility and use. It does not show that every site disappeared or that a consumer can recover money from one.

The Commission’s analysis published 5 November 2026 estimated that 0.6% of respondents had used illegal gambling websites in the previous four weeks, with a further 0.4% reporting use in the previous 12 months; 94.4% showed no indication of using one. Among people who had gambled online in the previous four weeks, the estimate was 2.5%, plus another 1.5% in the previous year. Those estimates measure reported engagement, not every hidden activity. The Commission notes its older web-traffic methodology could not capture VPN use.

Market estimates vary sharply. H2 Gambling Capital estimated illegal UK stakes at £16.6 billion in 2025, while an industry-commissioned Frontier Economics study estimated £2.7 billion staked annually online. These are not interchangeable measures: different methods, definitions and interests sit behind them. The honest conclusion is that the precise size is disputed; the existence of an active unlicensed market is not.

What the Register Cannot Tell You

A register cannot tell whether a particular withdrawal will be smooth. The Commission’s data for June to September 2024 covered 44.2 million withdrawals at large online operators: 96.3% cleared automatically, 3.5% within 24 hours and 0.1% took up to 48 hours. That is a useful benchmark for licensed operators, not a guarantee for each request or a forecast for offshore sites. Checks required by law can take time; avoidable friction is another matter.

The register also cannot certify a game’s outcome, a company’s future solvency or the quality of every support interaction. The Commission reported that withdrawal problems remained its most common complaint category in the 2024–25 annual report. Licensing creates enforceable standards and routes for escalation; it does not turn a commercial business into a public utility. Nor does an offshore operator’s faster-sounding promise compensate for the absence of those UK routes.

Frequently Asked Questions

Is online gambling legal in the UK?

For consumers, the key legal distinction is the operator’s permission. The Gambling Commission says commercial gambling services cannot be offered to people in Great Britain without its licence, even if the operator has a licence elsewhere. Section 33 of the Gambling Act 2005 criminalises providing facilities without the required licence. Check the operator and domain on the Commission’s register.

Are offshore online gambling sites licensed in Great Britain?

No. A foreign licence is issued by a different jurisdiction and is not a British Gambling Commission licence. GamStop does not cover such sites, and UK protections and complaint routes do not apply there. The Commission has warned that unlicensed sites can have inadequate social responsibility and anti-money-laundering controls. A regulator seal abroad is not a UK authorisation.

How many online gambling sites are there in the UK?

There is no single stable count of all licensed websites in the facts available here; operators can run multiple domains and the register changes. The Commission identified 586 illegal gambling websites accessible to Great Britain consumers in September 2026. That is a count of identified illegal sites in that month, not a count of every online gambling site or licensed domain.

How many people gamble online in the UK?

The Commission’s January to March 2026 operator dataset recorded 13.4 million average monthly active accounts, covering approximately 70% of the online market. Accounts are not necessarily unique people, and this dataset is not a census of everyone who gambled online. The distinction matters: an account total should not be dressed up as a headcount.

Are gambling winnings taxed in the UK?

The fact sheet does not provide a tax rule for players’ winnings, so a confident tax answer would be guesswork. Tax treatment can depend on circumstances and the nature of income. The reliable approach is to check current HMRC guidance or obtain qualified tax advice rather than rely on a casino’s marketing copy or an old forum post.

What happens if an online gambling site refuses a withdrawal?

A British-licensed operator must handle a complaint through its internal process and provide access to an approved ADR entity if it is not resolved satisfactorily within eight weeks. The Commission records complaints but does not act as an ombudsman or recover individual funds. For an offshore site, those UK routes do not apply, which is one reason the licence check matters before money is involved.

The Register Is the Useful Starting Point

The register can establish who is authorised, for which activity and on which domain; it cannot promise a painless account or a safe balance. For gambling-related support, GamCare’s National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day. The sharpest fact is also the simplest: £8.3 billion in remote GGY does not make a licence a guarantee.