Games Not on GamStop and What Protects a Balance

Games not on GamStop are games on websites outside the national self-exclusion scheme — legally, sites with no Gambling Commission licence can join nothing, since participation is a licence condition. Self-exclusion still bars you from every British-licensed site, holds for its full term and only ends when you contact GamStop.

Most people who type "gamestop" mean the scheme; it is often typed that way, and the spelling slip matters less than the fact behind it. GamStop Online exists because the Gambling Commission made it a condition of a British licence: since 31 March 2020, every online operator licensed in Great Britain must be part of the national multi-operator self-exclusion scheme. That single rule divides the market in two, and it divides it cleanly. On one side sit the several hundred operators whose licences depend on the scheme. On the other sit sites that never applied for a British licence and can therefore ignore it.

The distinction is not really about exclusion at all. It is about which rulebook a website is answerable to, and whether anyone can fine it, suspend it or force it to hand over money it is holding. A player's balance sits inside that question, and the answer is unglamorous: on a British-licensed site, the balance is surrounded by rules about client accounts, withdrawal delays, unfair terms and a free dispute route. On an unlicensed site, it is surrounded by the operator's own terms and very little else. Nine of the ten facts that decide whether money comes back live on the licensed side of that line.

What "Not on GamStop" Actually Means in 2026

Casino games not on GamStop are games on sites that can be reached from Britain but sit outside the scheme, and the phrase describes the licence rather than the games. The software on an offshore site is often the same software — the same slots, the same random number generators, sometimes the same suppliers — because game studios license their catalogue widely. What changes is who supervises the operator, whether it must protect customer money in a separate account, whether it must offer a free dispute route, and whether it can be penalised for stalling a withdrawal.

A useful way to think about it: the games are portable, the protections are not. Take the same game from a British-licensed operator to a Curaçao or Anjouan one and nothing about the reels changes while almost everything about the recourse does. The Gambling Commission's own warning notice of 20 January 2025 made this concrete, telling the industry that casino games from licensed suppliers were turning up on unlicensed websites available to British consumers, and noting that those sites often target people who have self-excluded and may have thin social responsibility and anti-money-laundering controls.

The law here is blunt, and it is aimed at the operator rather than the player. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it does not matter whether the facilities are provided wholly or partly by remote communication, or whether they are provided inside or outside the UK. For remote gambling, section 33 bites if at least one piece of remote gambling equipment is situated in Great Britain, or if the person providing the facilities knows or should know they are being used, or likely to be used, in Great Britain. On summary conviction the offence carries up to 51 weeks' imprisonment, a fine up to level 5 on the standard scale, or both. The Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal even where the operator holds a licence in another jurisdiction.

Two figures keep the scale honest. The Commission's analysis published on 5 November 2026 estimates that among adults who had gambled online in the previous four weeks, 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent having done so in the past year. Its dashboard recorded 586 illegal gambling websites accessible to British consumers in September 2026. Meanwhile H2 Gambling Capital, a market-intelligence firm, put the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019. Those two sets of numbers do not measure the same thing, and the gap between them is a fair warning about how much of the black-market debate is estimation dressed as measurement.

The One Benchmark That Predicts Whether Money Comes Back

If I had to pick a single published number to judge an operator by, it would be the one the Gambling Commission produced in a speech on 6 November 2025. Its data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours.

Read that slowly, because it is the closest thing this industry has to a natural speed limit. On a large licensed operator, almost every withdrawal clears without a human being touching it. The old excuse — "all withdrawals are manually reviewed" — was already thin; it is now demonstrably thin. And the Commission is not neutral on the subject. It has said it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, or to place the operator's commercial interests above its customers', and that where an operator has no regulatory concerns about a customer there is no valid reason to delay a payout.

The complaints record shows what happens when operators ignore that. Complaints coded "Withdrawals and/or financial transactions" to the Commission's Contact Centre fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — a real improvement, and still the single biggest subject of complaint. The Commission's Annual Report and Accounts for 2024-25 says issues relating to withdrawals continued to cause most of the complaints it receives.

Compare that record with offshore. There is no equivalent dataset, no equivalent complaint line, and no equivalent power to fine. That absence is the benchmark, and it is worth more than any welcome offer.

British-Licensed Sites Set the Standard

Gambling sites not on GamStop are judged, whether they like it or not, against what a British licence guarantees. It is worth listing that guarantee plainly, because it is the yardstick. Self-exclusion recognised at every licensed operator; a ban on reverse withdrawals — RTS requirement 14B, in force since 31 October 2021 — so a requested withdrawal cannot be cancelled back into the account; a rule that a withdrawal request must not trigger a demand for documents the operator could reasonably have asked for earlier (licence condition 17.1.1); and no maximum cash-out limit on a deposit balance. The Commission's example of a prohibited term is a line promising "You may withdraw up to £50 per day and up to £500 per week".

Then there is what protects the balance itself. Customer funds must sit in a separate client account, apart from the operator's business accounts, under licence condition 4.1.1. That is weaker than it sounds: the Commission's own guidance notes that keeping money in a separate account does not mean customers will get it back if the operator becomes insolvent, and businesses are lawfully allowed to hold customer money in overseas bank accounts. Operators must pick one of three published protection ratings — not protected, medium or high — and state it in their terms. An operator rated "not protected" must remind a customer every six months that their funds are not protected, and state the value. A generous reading of that rule is transparency. A colder reading is a legal admission on a timetable.

Offshore, the same questions produce different answers. Curaçao's National Ordinance on Games of Chance took effect on 24 December 2024, replacing the master-licence model with direct licensing by the Curaçao Gaming Authority, and the CGA's published standards do require licence holders to segregate player funds from operational funds. That is a genuine improvement on the old paper licences. It comes with a fee structure that tells its own story: a one-time non-refundable EUR 4,592 application fee, and a total annual B2C cost of EUR 47,450 — a EUR 24,490 licence fee to the National Treasury plus a EUR 22,960 supervisory fee to the CGA.

Anjouan is where the arithmetic gets interesting. Its published schedule is EUR 17,828 for a B2C licence issued, and EUR 17,828 for annual renewal. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; a former attorney-general of the Comoros reportedly called Anjouan Licensing Services, which sells the licences, "an illegal entity". Anjouan Gaming has stated publicly that "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world" — a sentence every offshore player should read twice. Trade and press sources put offshore sites outside GamStop's reach [unconfirmed], which is consistent with GamStop's own terms: the scheme can only exclude people from participating operators.

And then there is Costa Rica, which is not a licensing jurisdiction at all. It has no comprehensive gambling licensing regime; the "data processing license" that circulates in the industry is not a licence in the strict legal sense, its Legislative Assembly rejected Bill No. 25,057 in early 2026, and games of chance depending primarily on luck are generally prohibited. A site citing Costa Rica is citing nothing.

Malta as a Middle Case

Malta matters because it is the cue for a British player's eye. The Malta Gaming Authority requires a B2C licence to offer a gaming service from Malta, to a Maltese person or through a Maltese entity, charges a non-refundable EUR 5,000 application fee, a fixed annual licence fee of EUR 25,000 and 5 per cent gaming tax, and requires minimum paid-up share capital of EUR 100,000 for Type 1 and Type 2 licences. That is a regulator with capital requirements and a published list of Unauthorised URLs, the most recent entries carrying notice dates of 30 October 2026. It is not the British licence, and a Maltese licence confers no GamStop participation and no access to the British ADR system. But it is not Anjouan either.

How Withdrawal Promises Get Delayed

If there is one mechanism this topic turns on, it is the gap between requesting a withdrawal and receiving it — and how terms are drafted to stretch that gap. On a licensed site the first withdrawal usually clears as soon as identity is confirmed by database match; the Commission notes that companies often verify by matching an account against credit reference agencies and the electoral roll, in which case no documents are needed, and that if documents are requested it takes longer. There is no fixed statutory timescale, and the Commission says it cannot provide one. What exists instead is a set of prohibitions.

The prohibitions are precise. Delaying a payout because the operator has no regulatory concern is wrong. Asking for identity documents only at withdrawal, when the operator could reasonably have asked earlier, breaches licence condition 17.1.1. Terms conferring sole discretion on the operator to void or withhold winnings are unfair within the meaning of the Consumer Rights Act 2015. And a term imposing a maximum withdrawal is prohibited outright, as the Commission made clear with that £50-a-day example.

Offshore, the same function is performed by different clauses. BlueChip Casino reserves the right to limit the amount withdrawable from winnings generated with bonus funds, including free spins and cashback, to 300 per cent of the credited bonus amount, with any excess voided; it also caps the maximum bet while wagering a bonus at ₹400 / €5 / $5 / C$5 for regular players and double that for VIP players, rejecting any bet above the limit. Ignition states that all bonuses carry a max bet restriction relative to the deposit amount, with a casino max bet per wager of 20 per cent of the deposited amount, and that failing to adhere to the rule may result in account closure, forfeit of the bonus and forfeit of winnings generated while wagering it. Those clauses are not hidden, and that is the point: they are perfectly legal on that side of the line, and they do the work that a fair-terms condition would otherwise forbid.

The pattern is a delay that is written into the terms from the start. A documented verification step that arrives after a large win; a bonus that must be played through before the balance is real; a contribution table under which the game actually being played counts for almost nothing. On the reverse withdrawal ban — the rule that stops a cancelled withdrawal becoming a deposit again — there is no offshore equivalent, and the temptation it removes is real: the Commission's reason for banning the function was evidence that it presented a risk to engaged and vulnerable gamblers.

Five Signs a Site Can Be Trusted

A licence you can check in the right place

The Commission advises consumers to check a business holds a British licence and to click through to the public register to see whether the site's activities and domain names match — a domain that does not appear is a domain the licence does not cover. Offshore, the check is the same in principle and less reliable in practice. A Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and if the seal differs in design, colour or format the site is not authorised by the CGA. If the certificate behind a seal names a different domain from the one being visited, that certificate belongs to another operator. The CGA's own policy adds that a historic /JAZ number or legacy seal must not be treated as independent proof of a current licence — a warning worth heeding, since the legacy orange certificates ended on 15 October 2025.

Withdrawal terms you can read before depositing

The test is whether the significant conditions of any offer appear prominently and, online, in full no more than one click away — that is the standard under LCCP social responsibility code 5.1.9. Read the withdrawal section for four things: a maximum cash-out, a minimum withdrawal, a processing fee, and a manual review clause. Britain's fair-terms guidance forbids the first outright on a deposit balance, and permits a cost-reflective processing fee and reasonable limits on the size or number of withdrawals only if they are made clear before the first deposit. Offshore, the same four clauses are how the money is retained.

A named dispute route

A licensed operator must let a customer refer an unresolved dispute to an approved alternative dispute resolution provider free of charge if it is not settled within eight weeks — social responsibility code provision 6.1.1 — after the operator's own complaints process has run. The Commission's approved list includes IBAS, eCOGRA, CEDR, ProMediate, ADR Group and Pegasus. IBAS's 2024-25 report records 3,721 domestic disputes, an average completion time of 20 days, and 100 per cent operator compliance with decisions in the consumer's favour in both that year and the previous one. That last figure is the one to remember: a decision against a licensed operator gets paid. Anjouan says it requires licensees to designate an Authority-approved ADR provider — such as EGIS ADR, Axion ADR or iGaming ADR — but there is no compliance statistic of the same kind, and Kahnawà:ke, which does employ a full-time Dispute Resolution Officer, is the exception that proves the rule.

Published numbers and a published register

Look for an operator that is on a register you can search without its help, and a regulator that publishes anything at all. The Curaçao play is to click the seal, not to trust it. The Gambling Commission route is the public register and the licence conditions themselves. A site that shows no checkable licence number, or whose certificate cannot be verified, has told you what you need to know.

A regulator with a track record of acting

This is where the asymmetry is starkest. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desists, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs and secured 287,961 URL removals. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent after disruption. By method, registrar blocks and website suspensions produced the largest average fall, at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent.

Checking a Site Yourself, Step by Step

1. Check the licence on the regulator's own register, not on the site's badge. Open the Gambling Commission's public register and confirm the operator's name and the specific domain you intend to use both appear. A licence that covers a company but not the domain in front of you is a smaller protection than it looks.
2. Read the withdrawal section before you read the bonus section. Look for a maximum cash-out, a minimum withdrawal, a processing fee and any manual review language. On a British-licensed site the first of those cannot lawfully attach to a deposit balance; offshore it can attach to almost anything.
3. Ask whether the offer mixes products. Since 19 January 2026 a British licensee cannot include more than one type of gambling product — betting, casino, bingo, lottery — within an incentive, and cannot set a wagering requirement above ten times. An offer that needs a sports bet to release free spins is a shape that no longer exists on a licensed site.
4. Confirm what happens if the operator fails. Read the customer-funds protection rating in the terms: not protected, medium or high. If it says not protected, the terms will state, every six months, that your money is at risk in an insolvency — believe them the first time.
5. Check the dispute route and the clock on it. Identify the ADR provider by name, and note that you must exhaust the operator's own complaints process first, that you have at least six months from the incident to complain, and that the whole internal process must finish within eight weeks. A site that names no provider has answered the question.
6. Set an external limit you cannot argue with. A bank gambling block declines payments to merchants categorised under gambling Merchant Category Codes; the Commission's list of banks offering one, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Most banks apply a 48- or 72-hour cooling-off period before gambling transactions are allowed again, the block is applied at card level so each card needs it separately, and it does not affect your credit score.

A Balance Is Only as Safe as the Rules Around It

The row that matters most is the last one, because everything above it depends on it. In October 2026 the Commission announced that a large licensed operator, which runs seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals — among them a term allowing customers to request only one withdrawal at a time, found unfair under the Consumer Rights Act 2015, and manual review of every fifth or tenth withdrawal that led to extra information being demanded. That is what enforcement looks like when it exists. A regulator that can extract £900,000 for slow payouts changes behaviour across a whole market. A regulator that cannot is a logo on a footer.

Getting Help, and the Limit of Any Site

None of this is a reason to treat an offshore site as a workaround, and the important part is stated plainly: self-exclusion on GamStop Online bars a person from every operator licensed in Great Britain. It cannot be cancelled during the exclusion period, and the exclusion stays in place after the chosen term ends unless the person contacts GamStop to remove it. Terms last updated 20 May 2026 add that if no deactivation happens, data is held through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Those figures come with a human scale attached: 117,756 new registrations during 2025, 561,983 active exclusions at the end of that year, and 614,738 people on the register as of July 2026, of whom more than one in two had chosen the maximum five-year exclusion.

If gambling is causing harm, the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, and the same number reaches live chat and WhatsApp. Callers in Wales are given 0808 2819 265. GamCare provides information, advice and support across England and Scotland. Note the honest limitation: the Helpline is not a crisis line, and its staff cannot transfer someone at immediate risk of harm — they follow their own safeguarding procedures. Beyond the Helpline there are around 250 Gamblers Anonymous meeting locations across England, Wales and Northern Ireland on 0330 094 0322, NHS England's 15 specialist gambling clinics opened since 2019, and the NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB on 020 7381 7722.

Frequently Asked Questions

What gambling sites are not on GamStop?

Any site without a Gambling Commission licence. Participation in GamStop Online is a condition of a British licence — social responsibility code provision 3.5.5 — so an operator that never applied for one cannot join and is not covered. That includes Curaçao-licensed sites under the post-2024 LOK regime, Anjouan-licensed sites, Malta-licensed operators without a British licence, and domains claiming a Costa Rican "licence" where no such regime exists.

Are UK gambling sites not on GamStop legal to use?

The offence in section 33 of the Gambling Act 2005 attaches to the person providing facilities for gambling without a licence, not to the adult customer. The Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that this includes an operator licensed elsewhere. The practical consequence for a player is not prosecution; it is that no British protection, dispute route or regulator stands behind the account.

Can a person get round a GamStop exclusion with an offshore site?

No, and it should not be attempted. A GamStop exclusion blocks a person from every operator licensed in Great Britain, cannot be cancelled during its term, and remains in place afterwards until the person contacts GamStop to remove it. An unlicensed site does not override that — it simply sits outside the scheme that enforces it, along with every other protection that comes with a British licence.

Why do slot games not on GamStop sometimes pay faster?

Because the operator has no licence condition requiring a considered withdrawal process or a client account, and no regulator watching the queue. Speed is usually real at the point of deposit acceptance and at small cash-outs. It is at the point of a large win that the terms do the work: maximum cash-out clauses, bonus contribution tables and manual verification steps all appear then, and none of them is unlawful offshore.

What about bingo games not on GamStop and other products?

Multi-product offshore sites commonly mix casino, bingo, sports and lottery offers in one wallet, and their terms may apply a single wagering requirement across all of them. On a British-licensed site that shape has been banned since 19 January 2026: an incentive cannot include more than one type of gambling product, so "bet £5 and get 20 free spins" is non-compliant while "bet £5 and get a £10 free bet" is fine.

Do Welsh gambling sites not on GamStop differ from the rest of Britain?

No. Licensing is a Great Britain matter, so the Gambling Commission covers Wales, Scotland and England alike, and GamStop Online applies at every British-licensed operator in all three. The one difference worth knowing is on the help side: callers in Wales are given the National Gambling Helpline number 0808 2819 265, alongside 0808 8020 133 for England and Scotland.

What Actually Protects the Balance

The gap between a licensed and an unlicensed site is not the quality of the games — it is whether anyone can make the operator answer for the money. On the British side of the line stand a licence condition that forces participation in GamStop, a ban on reverse withdrawals since 31 October 2021, a prohibition on maximum cash-out limits on a deposit balance, a separate client account with a published insolvency rating, and a free ADR route where IBAS alone reports 100 per cent operator compliance with decisions in the consumer's favour in two consecutive years. Offshore, none of that travels with the game. The 96.3 per cent of 44.2 million withdrawals that cleared automatically between June and September 2024 did so under a regime that can fine an operator £900,000 for stalling — and that is the part of a payout no site can copy.