Games not on GamStop are casino games at sites holding no Gambling Commission licence, so the self-exclusion scheme never sees them: registering with GamStop blocks accounts with British-licensed operators only. Offshore sites are lawful for the player but not for the operator offering to Great Britain, and none of the UK's protections — fair terms, payout rules, ADR — travel with them.
Table of Contents8
What "Not on GamStop" Actually Means
The phrase is a description of a licensing gap, not a product feature, and it is worth being blunt about what sits in that gap. GamStop — the scheme was renamed Gamstop Online in November 2025 after a website update — is the national online self-exclusion scheme, free to use, set up in June 2017 at the request of the DCMS and the Gambling Commission and live since 27 April 2018. It is run by The National Online Self Exclusion Scheme Limited. The name is frequently typed "gamestop", a slip the word "game" invites; the scheme is GamStop.
Because it is a licence condition, participation is compulsory. Since 31 March 2020 every online operator has had to be part of the scheme under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which reads simply that licensees must participate in the national multi-operator self-exclusion scheme. From April 2020 operators also had to check their entire customer base against the register at least every 24 hours. The Commission did not bluff: on 3 April 2020 it suspended the licences of two operators, one licensee and Sportito, under section 118(2) of the Gambling Act 2005 for missing the integration deadline.
So the exclusion holds. It holds for its full term — six months, one year, five years, or five years with auto-renewal — and once that term ends it stays in place until the person contacts GamStop to have it removed. Operators cannot help, and an offshore site is not a way around it; it is simply a site the scheme has no jurisdiction over. Offshore operators that hold no Commission licence are not connected to GamStop, and are not covered by it [unconfirmed — stated by trade and press sources rather than a primary regulator page, though consistent with GamStop's own terms of use].
The numbers behind the register are now large enough to be a market in themselves. GamStop recorded 117,756 new registrations in 2025 and had 561,983 active exclusions at 31 December 2025. In the first half of 2026 registrations rose 16 per cent year on year, with May 2026 setting a record of 12,236 sign-ups, and as of July 2026 the register held 614,738 people — more than one in two of them on the maximum five-year term. Under-25s accounted for nearly one in three of those first-half 2026 exclusions, up 26 per cent year on year.
That is the pool every unlicensed site is fishing in, and the regulator has said so in as many words. An industry warning notice issued on 20 January 2025 noted that licensed operators' casino games were appearing on unlicensed websites available to British consumers, and that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls.
Offshore Is Not Licensed Here, Whatever the Certificate Says
A handful of licensing regimes turn up repeatedly behind the sites that take British players without a Commission licence. Curaçao is the most common, and it is mid-reform. The National Ordinance on Games of Chance took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory authority, replacing the old master-licence and sub-licence model; the legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and licensing ceased for the four former master licensors on dates running from 18 August 2024 to 31 January 2025. A historic /JAZ number is not proof of a current licence. The CGA said on 7 October 2026 that its previous online portal would not return to service and that it is building another way to verify licensed domains.
Anjouan is the cheaper end of the market: EUR 17,828 one-time for a B2C licence and the same for annual renewal. Anjouan Gaming states that its licences carry no territorial restrictions under Anjouan law, but that holders must comply with the laws of the places they operate in — and it said on 10 June 2026 that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that a former attorney-general of the Comoros called the entity selling them illegal [unconfirmed — press reporting].
Kahnawà:ke has regulated interactive gaming since its Regulations were enacted on 8 July 1999, requires licensees to be hosted at a data centre in the Mohawk Territory, and runs a logo programme that generates a Certificate of Good Standing. Malta's authority publishes a list of Unauthorised URLs — the most recent entries carry notice dates of 30 October 2026 — because sites borrow the Maltese licence's reputation without holding one. Costa Rica has no comprehensive gambling licensing regime at all, and the "data processing license" the industry sometimes cites is not a licence in the strict legal sense.
None of this makes the player a criminal. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without a licence — the offence attaches to the operator, and the Commission states plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere. The Act's other offences run the same way: sections 47 and 49 cover inviting or permitting a child to gamble. The person who opens an offshore casino app on a phone has broken no gambling law. They have simply opted out of every protection built around that law.
The Gambling Commission's Only Benchmark on Payouts
British-licensed sites set the standard, and the fairest benchmark on this topic comes from the regulator's own data on how fast withdrawals actually clear. Gambling Commission data covering June to September 2024, cited in a speech delivered on 6 November 2025, records 44.2 million withdrawals by customers of large online operators in that period: 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours. Earlier data from some of the largest companies showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours of the request.
Against expectation, the complaints are stubborn. The Commission's Annual Report and Accounts 2024-25 states that, despite work with some operators, withdrawal issues continue to cause most of the complaints it receives, and in 2026 it reported that over a quarter of complaints reaching its Contact Centre concern identity verification — raised, typically, by customers asked for documents only when they try to withdraw. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed it is quick and easy to withdraw winnings, with 33 per cent neutral and 18 per cent disagreeing. The good news is thin but real: complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025.
The rules behind that performance are the part offshore play never inherits. Reverse withdrawals were banned permanently for all remote operators under RTS requirement 14B from 31 October 2021. Licence condition 17.1.1 bars a licensee from demanding extra information at withdrawal that it could reasonably have requested earlier. No fixed payout deadline exists anywhere in the LCCP — the regime leans on condition 7.1.1 on fair and open terms instead. And the Commission is not shy about collecting: on 21 October 2026 it announced that an operator will pay £900,000 in a regulatory settlement, with withdrawal-specific failures including a term allowing only one withdrawal request at a time and manual review of every fifth or tenth withdrawal.
A Delay Built into the Terms
Offshore terms can build in delay without ever mentioning a number of days. The patterns that matter are structural, not stylistic. No-deposit bonuses that cannot be redeemed consecutively, and whose wagering requirements and cash-out cap survive a deposit made while the bonus is active, are one version. A maximum allowed cash-out on bonus winnings — 300 per cent of the credited bonus amount, with the excess voided — is another. A maximum bet while wagering, set at 20 per cent of the deposited amount and enforced with account closure and forfeiture of winnings, is a third. And a contract that lets the operator decide, at its own discretion, what counts as abuse of the offer is the broadest of all.
British rules exist precisely because these terms went wrong here. Players must be told they can withdraw their deposit balance at any time, including while a bonus is pending; deposit and bonus balances must be displayed separately; and no operator may impose a maximum limit on what can be withdrawn from the deposit balance — the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". None of it applies to a site with no Commission licence.
Withdrawal Methods for Phone Apps
Payment method matters more offshore than onshore, because nothing but the method itself enforces the timetable. The table below sets out what each channel actually does, using the published figures — a number here and a number in the text above are the same number.
| Method | Stated speed or delay | Cost | The catch for a phone player |
|---|---|---|---|
| Card payout (Visa Direct Fast Funds) | Funds available within 30 minutes of approval | Set by the operator; cost-reflective fees only | Fast, but declines the payment if the card has a gambling block switched on |
| Faster Payments | Over 90% of transactions complete in under 2 seconds [unconfirmed — secondary source, not Pay.UK's own page] | Usually free to the player | Scheme ceiling is £1 million; the individual bank's limit is lower, and applies per transaction |
| CHAPS | Same working day, daily cut-off | Bank charge | No scheme upper limit, but wrong for a £60 withdrawal |
| Bitcoin | ~10-minute average block; 6 confirmations assumed for settlement | Network fee, paid by the sender | One confirmation in 10 minutes is about a 63% chance (1 − e⁻¹), not a promise |
| ETH transfer | Standard transfer uses exactly 21,000 gas units | Units of gas × (base fee + priority fee), charged even if the transaction fails | A live calculator put a 21,000-gas transfer at roughly $0.005–$0.009 on 3 November 2026 |
| USDT on TRON (TRC-20) | Seconds, once the account has Energy | ~65,000 Energy to an existing USDT wallet, ~130,000 to a new one; roughly 13 TRX and 26 TRX burned without staked Energy | Account needs TRX or staked Energy or the transfer can fail outright |
| Litecoin | First confirmation ~2.5 minutes on average; 6 about 15 minutes | Network fee | Only about 55.43% of modelled six-confirmation spans finish inside 15 minutes |
| E-wallets (Skrill, Neteller) | Operator-side processing, then the wallet's own timetable | Skrill 2.80% (min EUR 3.50) and Neteller 2.80% (min USD 3.50) on bank transfer from 12 January 2026; 4.49% FX fee each | Two fee schedules stacked, and a 2.80% cut on the way out can quietly exceed the whole win |
The single most useful column is the last one. A bank gambling block is applied at card level and must be activated on each card separately, which means a deposit route and a withdrawal route can behave differently on the same phone. When a block is switched off, most banks run a cooling-off period of either 48 hours or 72 hours before gambling transactions are allowed again — and the Commission's list of banks offering the service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Those blocks do not affect a credit score.
How Identity Checks Work, First Time and Later
If one thing decides whether an offshore account on a phone is usable, it is identity verification — which is exactly where the topic turns. In the British-licensed market the check now happens before the gambling does: Licence Condition 17, introduced on 7 May 2019 and since brought forward by the Commission, requires licensees to obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the information must include name, address and date of birth.
The first time, then, is unglamorous but short. Companies often verify by matching the account against databases such as credit reference agencies and the electoral roll, in which case no documents are needed at all, and the Commission says the process varies too much for it to give a timescale — instant if electronic, longer if documents are requested. Passports, driving licences and household bills are the documents a business can ask for; a selfie may be sought where fraud, such as identity theft, is suspected; bank statements may be sought to check that source of funds is legitimate, and for higher-risk accounts the operator must also establish source of wealth. Non-face-to-face relationships must, absent safeguards, be treated as high risk, and the Commission has flagged "fuzzy matching" by third-party verification providers and the use of a middle name rather than a forename — the sort of mismatch that undermines a self-exclusion check elsewhere.
Later, three things change. The check becomes ongoing: customer due diligence must be updated when circumstances or personal details change. It becomes threshold-driven for remote casinos under the Money Laundering Regulations 2017, where identification and verification are required when a customer deposits or withdraws €2,000 or more, including transactions that appear to be linked, such as activity within a single logged-on period. And it becomes the point at which money stops moving. A customer who reaches that threshold and cannot satisfy the check can have the transaction ended, and remote casinos running the Commission's "hybrid approach" — verify age and identity at registration, defer full verification to the threshold — must be able to end it.
The warning signs are specific. A site that accepts deposits for months without a whisper about documents, then demands a passport, a utility bill and a bank statement on the day of the first withdrawal, is running verification as a retention mechanism, not a legal duty. A contract that reserves the right to confiscate a deposit balance when identity or age verification fails is a warning sign in itself; in the British market, un-staked deposits remain the customer's and operators must not have such terms, and account inactivity cannot be used to confiscate or deduct any part of a deposit balance. Costa Rica, meanwhile, has no licensing framework to enforce any of this. And the regulator's 2026 risk assessment rates the remote casino sector as high risk for money laundering, unchanged from the previous year, noting an increase in attempts to bypass checks with false documents, deepfake videos and face-swapped video generated by AI.
Five Signs a Site Can Be Trusted
Trust is checkable, and none of these checks requires an account.
The licence names a regulator you can look up
A licence is only as good as its register. Find the regulator's public register and confirm the operator and the exact domain appear on it. The CGA is explicit that clicking a Certificate of Operation seal must redirect to cert.cga.cw, and that if the certificate behind a seal displays a different domain from the one being accessed, the site is showing another operator's certificate and should be treated as unauthorised or fraudulent. Anjouan says certificates carry a unique licence number and a QR code linking to a public register, and that certificates which cannot be verified there should not be relied on as evidence of licensing at all.
The terms state what you can withdraw, and when
Read the withdrawal clause before anything else. Look for a maximum cash-out on bonus winnings, a cap on the number or size of withdrawal requests, a processing fee, and any phrase giving the operator sole discretion over whether play counted.
Balances are shown separately
Deposit money and bonus money should be visible as two numbers, not one. If they are merged, wagering requirements are being applied to money the player deposited, which is the practice UK rules ended.
Disputes go somewhere independent
Every operator ought to name an ADR provider and its contact details. Anjouan requires licensees to designate an approved ADR provider and to resolve complaints within 30 days before escalation; its list currently runs to EGIS ADR, Axion ADR, iGaming ADR and an ADR provider. Kahnawà:ke employs a full-time Dispute Resolution Officer. If a site names no ADR provider or names one that will not confirm it, there is no one to appeal to.
The payout method is capped and honest
Ask the payments question first: which methods, what fees, what timetable, and what the maximum is. A site whose own published speeds depend on a scheme ceiling raised to £1 million on 10 February 2022, while its bank's per-payment limit is far lower, is telling the truth about the network and nothing about itself.
How to Check an Offshore App Before Playing
- Verify the licence on the regulator's own register. The Commission advises clicking through to the public register to see whether the site's activities and domain names match. A licence number quoted only on the site's own page proves nothing.
- Read the withdrawal clause and the bonus clause together. Read them as one document, because that is how they work in practice. A 40× wagering requirement is a different animal when a maximum cash-out sits on top of it.
- Check the exclusion position honestly. Self-exclusion holds for its full term and then remains in place until the person contacts GamStop to remove it. An offshore site does not lift it and is never a way round it.
- Set a limit before the first deposit and switch on a bank block. From 31 October 2025 all gambling businesses must prompt customers to set a financial limit before a first deposit and remind them every six months to review it, and under RTS 12E declining must be an active choice. Offshore apps may not prompt at all.
- Stop if the terminology goes vague. A clause with wide discretion, an absence of named ADR, an operator that cannot state its fee in a number — these are the marks of a site whose terms are written to be used, not read.
- Ask for help from the people who provide it. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, and reaches the same service on live chat and on WhatsApp (mobile only). Support for families runs separately through GamFam, a registered charity (No. 1191139) delivering its GRA5P peer-support programme remotely, and through Gam-Anon UK & Ireland.
Bonus Terms Are Where the Real Decision Sits
A bonus is a contract, and the worthwhile question is what the contract asks in return. The British cap arrived on 19 January 2026: Social Responsibility Code 5.1.1 now bans wagering requirements over ten times, and bans mixing more than one type of gambling product — betting, casino, bingo, lottery — within an incentive. The Commission chose a cap over an outright ban and said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". It also deleted the old requirement that a benefit not depend on gambling for a set period or frequency.
Games not on GamStop sit outside that ceiling, and the older numbers are still around at scale. Ignition Casino lists a 25× playthrough on casino bonus amounts, with a published contribution chart that pays 100 per cent on slots and specialty games but 20 per cent on table games, 10 per cent on video poker and blackjack, 5 per cent on roulette and baccarat, and 0 per cent on craps, Hot Drop Jackpots and live dealer games unless stated otherwise. BlueChip Casino states that the required bet amount equals the bonus multiplied by the wager, with the deposit amount itself excluded from the calculation. Trade and guide comparisons put offshore welcome-bonus multipliers typically at 35× to 50× and no-deposit bonuses at 40× to 60× with a €50–€100 cash-out cap [unconfirmed].
The contribution chart is the part most players miss. A 25× requirement at 100 per cent on slots becomes a 250× requirement at 10 per cent on blackjack, and a live dealer table sits at zero. The casino game not on GamStop is often the one that contributes nothing towards unlocking the money attached to it.
One more asymmetry worth naming. Everything above describes a market in which the honest operator is the exception that proves the rule. Market estimates of the unlicensed share diverge wildly — H2 Gambling Capital put stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent to 92 per cent, while Commission analysis published on 5 November 2026 estimates that among people who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal gambling websites. Whatever the true figure, the regulator's enforcement record is not idle: in July to September 2026 it referred 1,835 websites to search engines, covering 7,677,211 URLs, and issued 546 cease and desist notices. A domain that disappears on a Tuesday is a domain whose terms were never going to be tested in an ADR hearing.
Questions About Games Not on GamStop
What gambling sites are not on GamStop?
Any site holding no Gambling Commission licence. GamStop's obligations apply only to operators licensed in Great Britain, so a casino working under a Curaçao, Anjouan or Kahnawà:ke licence is not connected to the scheme. The scheme itself confirms it can exclude a person only from participating operators, and cannot prevent access to gambling services run by organisations that do not participate. Checking which regulator a site names is the practical first step.
Which casino games not on GamStop are actually available?
Broadly the same categories as anywhere else — slots, table games, live dealer, bingo, and sports betting alongside them. What differs is the weighting. Offshore terms commonly count slots at 100 per cent towards wagering and live dealer or craps at 0 per cent, so a game offered in the lobby may contribute nothing towards unlocking a bonus. Anjouan's standards require certified random number generators; enforcement is another matter.
Are the slot games not on GamStop legal for a British player to play?
Yes, for the player. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Gambling Commission directs that offence at the operator — it states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where a licence is held elsewhere. The Act's other gambling offences attach to providers too. The player commits no offence.
What happens to a self-exclusion if a site is not covered?
Nothing changes. A GamStop exclusion runs for its full registered term — six months, one year, five years, or five years with auto-renewal — and after that term ends it stays in place until the person contacts GamStop to have it removed. It cannot be cancelled during the term, and the scheme's 2025 annual report devotes a section to refusing early removals. An offshore site neither knows nor cares; it is a gap, not a release.
Do Welsh gambling sites not on GamStop differ from English ones?
No. Licensing is reserved and the Gambling Commission's remit covers Great Britain, so the same rules apply in Wales, Scotland and England, and the scheme is the same scheme. The one difference worth knowing is practical: a dedicated National Gambling Helpline number is published for callers in Wales, 0808 2819 265. Support is otherwise identical, and free.
Why do withdrawals from these sites take so long?
Because nothing forces otherwise. UK-licensed operators benefit from an infrastructure that is genuinely fast — Commission data for June to September 2024 recorded 44.2 million withdrawals, of which 96.3 per cent cleared automatically — but that speed rests on licence conditions and a fair-terms regime, plus the fact that withdrawal complaints are the Commission's single largest category. Offshore, a maximum cash-out clause or a "review" of every tenth request is a term, not a fault.
The Honest Sum of It
Games not on GamStop exist because licensing is territorial and enforcement is patient: a site can take a British player's deposit while sitting outside the one regime that would police it, and the player carries none of the offence but all of the exposure. The register keeps growing — 614,738 people on it as of July 2026 — and the sites that court them do so knowingly; the Commission's January 2025 warning notice said as much. The National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, and the 1,835 websites referred to search engines between July and September 2026 is a reminder of what eventually happens to most of these domains.
