Casino Sites Not on GamStop and the Reality of Unadjudicated Complaints

Casino sites not on GamStop are venues whose operators hold no Gambling Commission licence, so the British self-exclusion scheme does not reach them. There is no UK regulator to fine them, no alternative dispute resolution body obliged to hear a player's case, and no compensation route. Self-exclusion still runs its full term.

There is a particular kind of quiet in a dispute with an offshore casino. You have sent the email. You have been answered by someone first-named only, in a time zone eight hours away, and the answer says the terms were clear at sign-up. There is no next step, because there is no referee. That is the thing I keep coming back to when people ask me about casino sites not on GamStop: not the welcome offer, not the withdrawal speed, but the emptiness at the end of the corridor.

It is worth being plain about the words. The scheme's name is GamStop, written as one word with the scheme's own capitalisation, though it is often typed "gamestop" — a slip the word "game" invites, and one that search engines forgive. Registered with GamStop Online, a person is blocked from every online operator licensed in Great Britain, for six months, a year, five years or five years with auto-renewal. A site with no British licence is not in that network. Not by oversight, not by technical failure — simply because nothing in British law or in the scheme's terms requires it to be.

Where a person is struggling, the National Gambling Helpline is free on 0808 8020 133, day or night, every day of the year. That number matters more than anything else on this page.

The Gambling Commission is a regulator, not an ombudsman; it cannot get anyone's money back. So the question a careful player asks about an unlicensed site is not "what is the bonus", but "who decides if this goes wrong". As of 13.11.2026, the honest answer for an offshore operator is usually that nobody does.

What "Not on GamStop" Actually Means

It means one thing and one thing only: the operator has no Gambling Commission licence, so the licence condition that binds British-licensed firms to the national self-exclusion scheme does not touch it. Everything else tends to be inference, and much of the inference is wrong.

GamStop Online blocks access to gambling websites and apps licensed in Great Britain, and can only exclude people from participating operators. It cannot prevent access to services run by organisations that do not participate — a limitation the scheme states itself.

The other half of the picture is the law on the operator, not the player. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it does not matter whether the facilities are provided wholly or partly by remote communication, nor whether they are provided inside or outside the UK. The Commission's wording is blunter still: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction. On summary conviction the offence carries up to 51 weeks in prison, a fine, or both.

I want to be careful here, because this is where trade copy gets loose. The offence attaches to the provider. The adult customer commits no equivalent offence by opening an account. But the practical consequence of an unlicensed site running the other way is that the entire protective apparatus built around British players — the licence conditions, the fair-terms rules, the adjudication route — is simply absent. It is not that it is weaker offshore. It is that it was never installed.

One nuance the trade presses: offshore regulators do exist, and some of them are real. A Curaçao licence under the reformed LOK is a licence issued directly by the Curaçao Gaming Authority; the Kahnawà:ke Gaming Commission has regulated interactive gaming since 1999 and runs a dispute resolution officer; Anjouan Gaming has published standards requiring segregated player funds and certified random number generators. A serious offshore licence is not nothing. It is not, however, a substitute for the thing that decides complaints in Britain, and the difference shows up precisely when you need it most.

The Reference Benchmark for British Sites

The fairest yardstick for any comparison is what the licensed market actually delivers, measured rather than asserted. The Gambling Commission's cleanest figure comes from its own data covering June to September 2024, cited in a speech delivered on 6 November 2025: across 44.2 million withdrawals by customers of large online operators in that period, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours.

Read that carefully. It is not a marketing claim; it is a section of the market measured over four months, and it says that almost everything clears instantly and practically nothing takes longer than a day. It also tells you what a genuine delay is worth getting upset about. The Commission itself has said that where an operator has no regulatory concerns about a customer there is no valid reason to delay a payout, and it does not consider it fair, transparent or necessary to delay or prevent withdrawals purely for customer-interaction purposes.

That standard is enforceable. The Commission banned reverse withdrawals outright through RTS requirement 14B, in force since 31 October 2021: consumers must not be given the option to cancel their withdrawal request. The old trick — request the money back, then play it again — was legislated out of the British market five years ago. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier. And the Commission's fair-terms guidance forbids any maximum limit on what a customer may withdraw from their deposit balance; the example it cites as prohibited is a term reading "You may withdraw up to £50 per day and up to £500 per week".

Now the offshore comparison. None of that applies to a firm with no British licence. Reverse withdrawals, five-figure weekly caps, mandatory extra document rounds at the moment of cash-out — all lawful there, and all still visible on unlicensed sites. And it does not stop at the small print. On 21 October 2026 the Commission announced that one licensee would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals — among them a term allowing only one withdrawal request at a time until the previous one was authorised, found unfair under the Consumer Rights Act 2015. That was a licensed operator, answerable for its terms. The offshore version of that term is answerable to nobody.

Comparing the Offshore Licences British Players Actually Meet

The right comparison is by licence, not by brand — who supervises, what they publish, what it costs to be supervised, and what happens when the player and the operator disagree. Fees matter more than they look: they tell you how easily a licence is obtained, and therefore what it is worth as a filter.

The numbers are the argument. A British licence to operate online carries a levy of 1.1 per cent of Gross Gambling Yield — cost that scales with success. A Curaçao B2C licence costs EUR 47,450 a year, fixed, and the fee schedule is published in full by the authority. Anjouan comes in at EUR 17,828 for renewal, with EUR 500 for each extra domain, and an ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year. More than 1,300. Whatever else that figure is, it is not evidence of individual scrutiny.

Two things are genuinely worth noticing about Curaçao in particular, because they show reform actually happening. The National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence system with direct licensing by the CGA, and the legacy "orange" sub-licence certificates of operation ended on 15 October 2025 — a document that looks official and has not been valid for over a year. The CGA also states that clicking a Certificate of Operation seal must redirect to cert.cga.cw, and that if the certificate shown differs in domain name from the site being visited, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent. That is a checkable fact, and it takes ten seconds.

Anjouan deserves a mention for candour. On 10 June 2026 the authority said in a statement that an Anjouan internet gaming licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". That is a regulator telling the truth about the limits of its own paper. Pity the affiliates who wrote otherwise.

Identity Verification and When It Arrives

If there is one mechanism that decides whether an offshore account is workable, it is identity verification — and specifically when it arrives.

Under the British regime, licence condition 17 has required since 7 May 2019 that a licensee obtains and verifies information establishing a customer's identity before that customer is permitted to gamble. The information must include name, address and date of birth. Crucially, before permitting a customer to deposit, licensees should tell customers what documents or information they may need to provide, in what circumstances and in what form. Many British firms verify invisibly by matching a name and address against credit reference agency and electoral roll data, which is why the first deposit is often frictionless. Where documents are required, the Commission says an electronic check may be instant but a document-based one takes longer — and it declines to publish a timescale, because the length varies.

There is a documented second layer. In remote casinos, the anti-money-laundering rules under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 require identification and verification when a customer deposits funds or withdraws funds or winnings amounting to €2,000 or more, and the threshold applies to linked transactions too — deposits that form part of the customer's overall activity during a single logged-on period. A British operator may therefore operate what the Commission calls the hybrid approach: identify at registration, defer full verification until the threshold bites. Because licence condition 17.1.1 forbids demanding at withdrawal what could reasonably have been demanded earlier, the honest British operator asks early and asks once.

Now the offshore pattern. I have lost count of the accounts I have read in which a player deposits freely for weeks with no questions, wins, requests a withdrawal, and is then met with a document request for the first time — a passport, a utility bill under three months old, a selfie holding the ID, often a bank statement, occasionally source-of-wealth paperwork. Sometimes it resolves in a day. Sometimes the documents "fail to meet standards" three times, and each round resets the clock. The Commission sees the same shape from the other end: a 2026 blog reported that over a quarter of complaints reaching its Contact Centre concern identity verification, a concern customers raise when they are asked for documents only on attempting to withdraw. Its Annual Report and Accounts 2024-25 says issues relating to withdrawals continue to be the cause of most complaints it receives.

The warning signs are consistent enough to list. Verification requested for the first time at the point of withdrawal, having been unnecessary at deposit. A term permitting only one withdrawal request at a time. A cap on the maximum amount withdrawable from bonus winnings — BlueChip Casino, for instance, publishes a limit of 300 per cent of the credited bonus amount, with any excess voided. A requirement that a deposit made while a no-deposit bonus is active should have its wagering requirements and maximum cash-out applied to the whole balance. A verified account that is suddenly "under routine review" after a win. Each of these is lawful offshore and none of them would survive the Commission's fair-terms guidance.

The mechanics of that guidance are worth stating in full, because they are the model of what good looks like. Licensees must ensure terms are not unfair within the meaning of the Consumer Rights Act 2015. They may not impose any maximum limit on what a consumer may withdraw from their deposit balance. Un-staked deposits remain the customer's, and no term may allow confiscation of money deposited but not yet staked. Inactivity cannot be used to confiscate a balance. Terms giving the operator sole discretion — "may" or "reserve the right" — to void or withhold winnings are unfair, and the Commission said so after an operator was fined £170,000 in July 2025 for regulatory failures including a bonus term claiming the right at the operator's own discretion to close accounts or forfeit winnings.

That is a regulated market correcting itself. Offshore, the same term simply stands.

Five Signs a Site Is Genuinely Accountable

"Accountable" is a narrower word than "good". A site can be pleasant, pay quickly for a while and still be accountable to nobody, which is the state of affairs that matters on the day something goes wrong. These are the checks I would run, in order, before anything else.

It Names a Regulator You Can Verify Independently

Anyone can print a logo. A licence number you can look up on the issuing authority's own register is a different thing. The CGA's own certification policy is unusually specific on this point: clicking a Certificate of Operation seal must redirect to cert.cga.cw, if the seal differs in design, colour or format the website is not authorised by the CGA, and a certificate showing a different domain from the one you are browsing belongs to someone else and signals an unauthorised or fraudulent site. Anjouan publishes QR codes linking to its register and says a certificate that cannot be verified through the public register should not be relied on as evidence of licensing status. Check: open the register in a second tab and search the exact domain. If the licence belongs to an unconnected company, stop.

Old Licences Have Been Replaced, and the Site Has Caught Up

Legacy paper is the most common forgery-by-negligence offshore. Curaçao's orange sub-licence certificates of operation ended on 15 October 2025, and the CGA states that a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. Licensing also ceased for the four former master licensors between 18 August 2024 and 31 January 2025. Check: a /JAZ suffix, or a seal labelled as an orange certificate, means the document predates the current regime. Effort might still have gone into the site; it did not go into the licence.

The Terms Name a Dispute Route, With a Body and a Deadline

The single most useful sentence in any set of terms is the one naming who adjudicates. Anjouan requires licensees to designate an authority-approved ADR provider and to list its name and contact details in player-facing terms, with complaints expected to be resolved within 30 days before escalation; the approved providers are EGIS ADR, Axion ADR, iGaming ADR and others. Kahnawà:ke employs a full-time Dispute Resolution Officer. Check: search the terms for the words "dispute" and "ADR". If the only route offered is an email address belonging to the operator, the operator is the judge.

The Licence Actually Requires Something of the Operator

A licence that imposes no standards is a receipt. Kahnawà:ke requires a licensee's relationship with players to be contractual and free of terms that are unfair or unreasonable, and requires sites to let a player set limits including zero. Anjouan's published standards require operators to segregate player funds from operational funds, use random number generators certified by an approved independent testing facility, and implement AML/CTF controls and age verification. Curaçao has been tightening supplier licensing, mandatory and enforceable from 24 December 2026 after a two-year transition. Check: read the authority's published standards, not the operator's summary of them. If the authority publishes nothing about player funds or dispute handling, the licence is decorative.

Someone Has Been Suspended Lately — Which Means Someone Is Watching

Enforcement is evidence of supervision. The Kahnawà:ke Gaming Commission announced on 6 October 2026 that the Client Provider Authorization held by Polar Ventures SDRL had been suspended effective 29 September 2026 following a show cause notice. The Malta Gaming Authority publishes a list of unauthorised URLs with notice dates running to 30 October 2026, declaring it has no connection with those domains. Check: look for a list of suspended or unauthorised operators on the authority's site. A regulator that never suspends anyone is a filing cabinet.

How to Judge an Offshore Site Before Depositing

Six steps. All of them are lawful, ordinary research, and all of them are cheaper than the alternative.

1. Verify the licence at source, and match the domain exactly. Start from the authority's own register rather than a link on the casino's page, because the link is the thing you are testing. Kahnawà:ke's Logo Certificate Program, effective 15 January 2010, lets a player click the Commission's logo on a site to generate a Certificate of Good Standing confirming whether that site holds a valid KGC permit — the model of a check that cannot be faked easily. Reason: an operating licence held by a related company, or for a different domain, is not a licence for the site you are looking at.
2. Read the withdrawal section of the terms before the bonus section. Look for a maximum cash-out clause, a limit on the number of concurrent withdrawal requests, a processing fee, and any term allowing the operator discretion to void winnings. Reason: these are the clauses that decide what actually leaves the account, and they are drafted to be skimmed past.
3. Establish the identity-verification timing in writing. Ask support, before depositing, when documents will be required and what constitutes acceptable proof. The Gambling Commission's own guidance to British licensees is that customers should be told what documents they may need, in what circumstances and in what form, before being permitted to deposit — a standard worth demanding of anyone. Reason: catching a late-arriving request in a support transcript turns an argument later into a fact.
4. Test the complaint machinery with a trivial query and time the answer. Send one specific question and note how long a substantive reply takes. British licensees are expected to acknowledge a complaint within 24 hours where they offer 24-hour facilities and to complete the whole process within eight weeks; IBAS reports an average domestic dispute completion time of 20 days for 2024-25. Reason: response speed and specificity are the best available proxy for what happens when the dispute is real.
5. Decide the money in advance, and keep it small. Treat any balance on an unlicensed site as money already spent. Set a personal limit before the first deposit and check the six-monthly review prompt that British-licensed operators are now required to send. Reason: an offshore deposit balance is an unsecured claim on a company outside British jurisdiction, and customer funds are not protected in insolvency unless the terms say so and the operator's rating says so.
6. Put the block in place before you need it, not after. A bank gambling block declines payments to merchants categorised under gambling Merchant Category Codes and is applied at card level, so it must be activated on each card; the Commission's list of banks offering one, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Reason: it is the only control that operates without the operator's cooperation, and it costs nothing.

Where a Complaint Actually Goes

The British route is short and worth knowing precisely, if only to see what is missing offshore. A licensee's own complaints procedure comes first; if the matter is not resolved to the customer's satisfaction within eight weeks, the licensee must let the customer refer the dispute to an ADR entity free of charge, and British licensed operators may use only providers approved by the Commission — a list that includes IBAS, eCOGRA, CEDR, ProMediate, ADR Group, Pegasus ADR Service and Tattersalls Committee. IBAS is the gambling specialist, covering the remote, adult gaming centre, betting, bingo, casino and lottery sectors at no cost to consumers.

The recorded outcomes are not flattering to players, and that is the point of citing them. eCOGRA's Great Britain report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which 150 valid disputes concerned deposits and withdrawals; 17.8 per cent of completed disputes were ruled in favour of the consumer and 82.2 per cent for the operator, with an average of 31 days to resolution. IBAS's report for the same period records 3,721 domestic disputes, 217 of them banking or financial, an average completion time of 20 days, 65 complaints upheld by written decision against 693 not upheld and 737 resolved by a consumer-satisfactory pre-ruling outcome. IBAS also reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25.

I take two things from those numbers. First, players lose most adjudicated disputes, because most disputes are about terms the player did not read. Second, and more important, the decisions are obeyed — every one of them, for two years running. That is what a complaints system is for. It is not there to make players win; it is there to make the outcome final and enforceable.

One procedural trap catches a great many people: 361 of 499 invalid eCOGRA disputes, or 72.3 per cent, had not been through the operator's internal complaint procedure first. ADR providers will not accept complaints about customer service issues, or about a refusal to accept a bet or a customer's custom, and eCOGRA may refuse a dispute where at least two weeks have not passed since the problem began or where the dispute arose more than a year ago.

Offshore, none of this exists. There is no statutory eight-week deadline, no list of approved adjudicators, no obligation to comply with an award. The Commission's remit covers only websites that trade or advertise to customers in Great Britain and hold a Commission licence, and it is a regulator rather than an ombudsman — it cannot resolve an individual complaint or recover anyone's money, though it records every complaint it receives.

And the direction of travel runs against the offshore market. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites, engagement fell by an average of 32 per cent after disruption. Quarterly referral volumes have climbed hard: 226 websites referred to search engines in January to March 2026, then 366 websites and 147,721 URLs in April to June 2026, then 1,835 websites and 7,677,211 URLs in July to September 2026, alongside 546 cease and desist notices. The Commission is candid that search-engine removal only makes a site harder to find, while registrar blocks and GEO IP blocking reduce engagement by 91 per cent and 60 per cent respectively. That is an operation being run at scale against sites that look, to a casual visitor, entirely normal.

FAQ

Are casino sites not on GamStop legal in the UK?

For the operator, no. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, whether the facilities are provided inside or outside the UK, and the Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal — including where the operator holds a licence elsewhere. For the adult customer, opening the account is not the offence. The real cost is that no British protection applies.

What is the best casino site not on GamStop?

I will not name one, because "best" on an unlicensed site is a question with no referee attached, and the honest ranking criterion is accountability rather than offer. On that criterion, an operator supervised by an authority that publishes player-fund, RNG and dispute standards, verifies your licence at source and names an ADR body in its terms is better than one that publishes none of those things. Beyond that, the differences between offshore brands are smaller than their marketing suggests.

Are new casino sites not on GamStop safer than older ones?

Not inherently, and newness carries its own risk: a recently launched brand has no payment history, no public record of how it handles a large win and often an inherited licence rather than an examined one. What does help is checking whether the licence is current — Curaçao's orange sub-licence certificates of operation ended on 15 October 2025, and legacy /JAZ numbers must not be treated as proof of a current licence. Age tells you little; a verifiable licence and a named dispute route tell you a great deal.

Can I use a casino site not on GamStop to get around self-exclusion?

No — that is a factual matter, not a matter of judgement. Self-exclusion holds for its full term, and then stays in place until the person contacts GamStop to remove it; registrations cannot be removed early. Signing up with an unlicensed operator does not lift it, and the Commission has warned that unlicensed sites often target people who have self-excluded and may have inadequate social responsibility controls. The block remains on the record either way.

What about pay by phone or PayPal casino sites not on GamStop?

These are described as payment features, not protections, and mixing them up costs money. A British-licensed operator may take payment only by a method whose provider is a payment service provider within the Payment Services Regulations 2017, and bank gambling blocks work by declining payments categorised under gambling Merchant Category Codes — the Commission's list of banks offering one runs to eleven names. A bank block is also the most reliable tool at a person's disposal, because it does not depend on the operator's goodwill.

Where does a complaint about an offshore casino actually go?

In practice: to the operator's own support desk, and then once more, more firmly, and then nowhere. A British case would go to the licensee's internal procedure, and after eight weeks to a Commission-approved ADR body free of charge, whose decisions are complied with — IBAS reports 100 per cent operator compliance in its 2023-24 and 2024-25 years. No such route attaches to an unlicensed operator. The Commission can record a complaint but cannot recover funds.

The Corridor With No Door at the End

The British-licensed market is not perfect — it takes identity checks it once postponed, it holds withdrawals it once released, and most adjudicated disputes still go to the operator. But its numbers are public, its terms are policed, and when an adjudicator rules, the ruling is obeyed 100 per cent of the time. That is what casino sites not on GamStop sit outside: not the thrill, which is identical, but the accounting. Before anything else, remember that help is free on the National Gambling Helpline, 0808 8020 133, at any hour. Then remember the enforcement quarter in which the Commission referred 1,835 unlicensed websites and 7,677,211 URLs — and ask how long a site you cannot complain about will be there.