Games Not on GamStop, and Whether the Money Comes Back Out

Games not on GamStop are offered by operators, mostly offshore, that hold no Gambling Commission licence, so the scheme cannot block them and British protections do not reach them. You can play there, and many people do. The question that matters is not whether the games load, but whether winnings leave.

There is a particular kind of optimism that attaches to the words "not on GamStop". It is sold as freedom, and it is really just a change of jurisdiction. The Gambling Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, including where the operator holds a licence somewhere else. The scheme's own coverage stops at licence-holders: GamStop Online can only exclude someone from participating operators, and it is often typed "gamestop", which is the same scheme under a common slip. That means an offshore site is not a loophole, it is simply outside the arrangement.

I write about this corner of the trade because the marketing in it is unusually confident and the numbers behind it unusually thin. As 13.11.2026, the Commission's own analysis estimates that 0.6% of the whole adult population, and 2.5% of those who had gambled online in the previous four weeks, had engaged with an illegal gambling website. That is a small share with a large complaint file behind it. British-licensed sites are the benchmark here, and they set it on one thing above all: they must process a withdrawal without inventing obstacles at the point of exit. Offshore operators are judged against that standard, and most of them, on paper, fail it.

If gambling is causing harm, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year. Self-exclusion through GamStop Online holds for its full term and then stays in place until the person contacts GamStop to remove it. Nothing about an unlicensed site changes that, and no offshore operator is a way round it.

Withdrawal Speed and Offshore Gambling Sites

The claim attached to casino games not on GamStop is speed, and speed is measurable. The Gambling Commission's own figures, covering June to September 2024, record 44.2 million withdrawals by customers of large online operators in that single period. Of those, 96.3% cleared automatically, 3.5% cleared within 24 hours and 0.1% took up to 48 hours.

That is the standard against which every offshore promise should be read. The British regime does not set a fixed number of days in which an operator must pay, and I think that is a defensible choice: a deadline invites compliance theatre, while the fair-and-open condition 7.1.1 and the identity-verification condition 17.1.1 attack the actual abuse — holding a customer's money hostage with paperwork requested only at the moment of exit.

The offshore model is different in kind, not merely in degree. There is no licence condition to breach, no ADR provider the operator must fund, and no Commission contact centre taking 2,000 complaints a year about withdrawal delays. The Gambling Commission has said it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit. On an unlicensed site nobody has to care whether that is acceptable, because the statement is not addressed to them.

Terms That Build in Delay

The warning signs are rarely in the headline offer. They sit in the clause about how the money is released, and they are worth reading before the first deposit rather than during the first withdrawal.

• A maximum cashout clause. BlueChip Casino reserves the right to limit what can be withdrawn from winnings generated with bonus funds to 300% of the credited bonus amount, with the excess voided. In the UK, operators are barred from imposing any maximum limit on what may be withdrawn from a deposit balance.
• A cap on withdrawal requests. In October 2026 the Commission reported a £900,000 regulatory settlement with an operator whose terms allowed only one withdrawal at a time, with no further request until the first was authorised, and which manually reviewed every fifth or tenth withdrawal. That is exactly the shape of friction offshore sites use, minus the penalty.
• Verification demanded only at exit. A 2026 Commission blog reported that over a quarter of complaints reaching its contact centre concern identity verification, raised when documents are first requested at the point of withdrawal. British rules prohibit asking for information at withdrawal that could reasonably have been requested earlier.
• A processing fee for the operator's own convenience. Under British guidance a cost-reflective processing charge is permitted only if it is transparent, known before deposit, and does not exceed the direct cost of processing.
• "Reviewed within 3–5 business days." A phrase that means nothing enforceable anywhere and everything about where the operator's incentives lie.

Comparing Offshore Licensing Regimes

Gambling sites not on GamStop cluster in a handful of licensing regimes, and the honest way to compare them is by what the licence actually requires, not by the flag on the certificate. The table below covers the regimes most often named by offshore operators serving British players. Nothing in it makes an unlicensed site lawful to use from Great Britain.

The Curaçao figure is the one worth pausing over: EUR 24,490 to the National Treasury plus EUR 22,960 in a supervisory fee to the regulator, payable in full by 15 January each year. That is a real cost of doing business, which tells you something in the other direction — a Curaçao licence is not free, and the reform that took effect on 24 December 2024 replaced a master-licence and sub-licence model that was, by any reasonable reading, far looser. The old "orange" sub-licence certificates of operation ended on 15 October 2025 and should no longer be presented as evidence of a current licence.

Anjouan is cheaper and thinner. Its published schedule is EUR 17,828 for issuance and the same for annual renewal, with EUR 500 per additional domain. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally. Anjouan Gaming said in a statement on 10 June 2026 that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". That sentence is the whole argument, and the regulator wrote it.

Kahnawà:ke has the longest pedigree, having regulated interactive gaming since 1999, and its fee rises on 1 January 2027 take the Client Provider Authorization application from USD 35,000 to USD 40,000. It also imposes the sternest self-exclusion rule I have seen from any regulator: a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a charity chosen by the Commission. That is a real deterrent, and it is also a warning about how quickly a mistaken deposit can evaporate somewhere with no British appeal.

The Ten-Times Wagering Cap Explained

Slot games not on GamStop are the heart of the offer, and they are also where the single most important British rule change of the decade bites. From 19 January 2026, licensees may not apply wagering requirements above ten times, and may not include more than one type of gambling product within a single incentive.

I think that cap is the most sensible piece of consumer regulation the Commission has produced in years, because the abuse it targets was never subtle. The Commission's own consultation noted that some licensees applied wagering requirements up to 60 times. At 60×, a bonus is not a gift; it is a turnover obligation with a bow on it. The Commission chose a cap over an outright ban precisely because it judged that an outright ban would push licensees towards terms preventing customers cashing out bonuses at all.

Offshore, none of this applies. A trade-comparison table for 2026 puts offshore welcome-bonus multipliers at 35× to 50×, and no-deposit bonuses at 40× to 60× with a €50 to €100 cashout ceiling. Those figures are consistent with what the operators publish about themselves. BlueChip Casino states that for deposit bonuses the required bet amount is the bonus multiplied by the wager, and that the deposit itself is not counted. Ignition states a 25× playthrough requirement and a max bet of 20% of the deposited amount, with failure to observe the max bet rule potentially resulting in account closure and forfeiture of the bonus and any winnings generated during wagering.

Note what the wagering requirement is calculated on. A 30× requirement on a €100 bonus and a €100 deposit is €3,000 of play if it attaches to the bonus, and €6,000 if it attaches to bonus plus deposit. That difference is rarely in the headline and always in the terms.

Why the Bonus Terms Decide the Payout

The reason wagering requirements matter to this page is simple: they are the mechanism by which a site that pays quickly in the good cases becomes a site that pays nothing in the ordinary cases. Slot games feed bonus balances. Bonus balances carry conditions. The conditions live offshore in a clause an operator may enforce at its sole discretion — a formulation British guidance explicitly identifies as unfair within the meaning of the Consumer Rights Act 2015, because "may" and "reserve the right" leave the player's money resting on the operator's mood.

Understanding Identity Checks at Withdrawal

The whole topic turns on when an operator checks who you are, because that is where the friction is applied.

British-licensed operators start with the advantage of a rule: since 7 May 2019, Licence Condition 17 has required them to obtain and verify information establishing a customer's identity — name, address and date of birth — before that customer is permitted to gamble. The Commission expects identity and age checks to be brought forward to before a deposit, and has said that onboarding on incomplete or inaccurate information, initials instead of full names or a commercial address instead of a residential one, is not sufficient. Where those checks are done, further requests at withdrawal are prohibited by condition 17.1.1 unless the operator must obtain the information at that time under another legal obligation, such as anti-money-laundering rules.

There is a second layer built for anti-money-laundering work rather than for consumer protection. Under the Money Laundering Regulations 2017, remote casinos must identify and verify a customer when deposits or withdrawals reach €2,000 or more, and the threshold applies to linked transactions, not just to single ones. A remote casino may verify age at registration and defer full verification to that threshold, which the Commission calls the hybrid approach. I have some sympathy with the operators here and I will say so: an AML obligation is a genuine reason to ask for a document. The problem is the third layer, which is nobody's obligation at all — an operator that lets someone deposit for months without a word and then discovers a documentary interest the moment a withdrawal is requested. That is not compliance. That is a cash-flow strategy.

The first time a check goes wrong is usually the worst. A player sets up an account in a minute, plays for a few weeks, wins something worth keeping, requests the money, and is then asked for a passport, a utility bill and a bank statement. In a British-licensed operation, requesting at that point what could reasonably have been requested earlier is itself a breach. Offshore, the same sequence is not a breach of anything, and there is no free ADR provider to hear the complaint. Anjouan requires its licensees to designate an approved ADR provider — EGIS ADR, Axion ADR, iGaming ADR and a fourth approved provider are the current four — but the operator's own terms, not a regulator's, decide how much you are asked for first.

The warning signs are consistent: documents requested for the first time on withdrawal; a request for a selfie framed as suspicion of identity theft; a demand for source-of-funds evidence far above the amount in play; and a mismatch the player did not cause, created by a middle name used instead of a forename at sign-up. The Commission has warned that such mismatches can defeat the purpose of a GamStop check entirely.

Five Signs an Offshore Operator Can Be Trusted With Money

The Licence Is Verifiable at the Regulator, Not Just on the Site

A seal is not a licence. Curaçao's Certification Policy says clicking a Certificate of Operation Seal must redirect to the regulator's certificate domain, and that if the certificate shown behind a seal displays a different domain name from the site being accessed, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent. Anjouan's framework says certificates carry a unique number and a QR verification code linking to the public register, and that certificates which cannot be verified there should not be relied on. The quick check: follow the seal to the regulator's own register and see whether the domain you are on is named.

The Withdrawal Terms Are Readable Before the First Deposit

Every clause about paying out should be findable in one click from the offer, not buried in general conditions. If the maximum cashout, the processing time and any fee are not stated plainly, assume the operator's interest lies in keeping them obscure. British rules make it a breach to simply include promotional conditions in website terms and conditions; the standard is a useful one to hold offshore operators to even where it does not bind them.

Player Funds Are Segregated and the Rating Is Disclosed

Keeping player money in a separate client account does not guarantee its return if the operator fails — British guidance says so explicitly, and adds that gambling businesses may legally hold customer money in overseas accounts. But an operator that states the position at all, in its terms, is behaving differently from one that says nothing. Anjouan's published standards require segregated player funds and independently certified random number generators.

Complaints Go Somewhere Independent

An approved ADR provider with a published name and address is a sign; silence is not. The British benchmark shows what a functioning route looks like: IBAS's 2024–25 report records 3,721 domestic disputes with an average completion time of 20 days, and 100% operator compliance with decisions in the consumer's favour across two years. The Commission itself is a regulator, not an ombudsman, and cannot get anyone's money back — which is precisely why an offshore site with no ADR route leaves a player with nothing at all.

The Regulator Has Actually Sanctioned Sites

Regulators that never act are decorative. Curaçao has published a framework for converting certain B2C licences to B2B ones, and Kahnawà:ke suspended a Client Provider Authorization effective 29 September 2026 following a Show Cause Notice. Enforcement is not a bad sign about a regulator; its absence is.

How to Check Before Money Goes In

1. Find the licence number on the site and verify it at the regulator's register. The certificate and the domain must match; a seal linking to the wrong domain means someone else's certificate is being borrowed.
2. Read the withdrawal clause in full, including the bonus section. Look for a maximum cashout, a cap on the number of withdrawals, a stated processing window and any fee. If any of the four is missing, that is the answer.
3. Check whether the licence is current rather than historic. Curaçao's legacy orange sub-licences ended on 15 October 2025, and the four former master licensors stopped issuing on dates between 18 August 2024 and 31 January 2025. An old /JAZ number proves nothing now.
4. Test the complaint route before there is a complaint. Ask the support desk which ADR provider handles disputes and how to reach it. An answer that arrives quickly and names a provider is worth more than a page of guarantees.
5. Set the payment method deliberately and keep it boring. Overseas operators may pay out in crypto or an e-wallet, and the costs and delays sit with the intermediary as much as the casino. A Faster Payments transfer has a scheme ceiling of £1 million and individual bank limits below it, and over 90% of Faster Payments transactions complete in under two seconds; most e-wallet withdrawals are charged as a percentage, such as 2.80% with a minimum of EUR 3.50 for a Skrill account to a bank account.
6. Set deposit limits at the account, in writing, before playing. From 31 October 2025 British licensees must prompt a customer to set a financial limit before the first deposit, present it as the default option, and offer financial limits at account level using a free-text box. It costs nothing to ask an offshore operator for the same, and the reply tells you a great deal about the operator.

Complaints Data and Offshore Market Risks

Complaints to the Commission's contact centre coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. That is a modest improvement in a licensed market with 44.2 million withdrawals in a single four-month window. The persistence of the category matters more than the movement: the Commission's Annual Report and Accounts for 2024–25 says that, despite work with some operators, withdrawal issues continue to cause most of the complaints it receives.

I take three things from that. First, the British market is not a paradise and it should not be described as one. Second, its failures are visible precisely because there is a regulator collecting them, an ADR system recording outcomes, and a contact centre that over a quarter of identity-verification complaints flow through. Third, the offshore market's equivalent failures are invisible by construction. There is no regulator to send them to, and the Commission's own enforcement figures show the scale of the task: since April 2024 its Illegal Markets team issued 3,140 cease and desist and disruption notices, referred 447,778 search URLs and secured 287,961 removals. The Commission's own assessment is that registrar blocks and website suspensions cut engagement by 91% each, while a Google removal cuts it by 30%. A site can be delisted from search and still be perfectly reachable, if someone already has the address.

The Commission's estimate of time spent on illegal gambling websites by British consumers was 306 million minutes in January 2025, falling to 116 million minutes in June 2025 — a fall that followed disruption work, and a reminder that this market responds to enforcement rather than to argument.

Wales deserves a specific mention, because the phrase Welsh gambling sites not on GamStop appears in searches and the answer is the same as everywhere else: the British licence is a Great Britain licence, GamStop's block applies to British-licensed operators wherever the player lives, and the National Gambling Helpline number for callers in Wales is 0808 2819 265, alongside 0808 8020 133 for England and Scotland.

Questions About Offshore Sites

What gambling sites are not on GamStop?

Those run by operators holding no Gambling Commission licence — typically licensed in Curaçao, Anjouan or Kahnawà:ke, or in some cases holding no meaningful licence at all. The Commission's licence condition 3.5.5 requires every British licensee to join the national scheme, so the absence of a site from GamStop is itself evidence that it sits outside British regulation.

Are online gambling sites not on GamStop legal to use?

The Gambling Commission's position is that the offence belongs to the operator: it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, even where the operator holds one elsewhere, under section 33 of the Gambling Act 2005. That is a prosecution aimed at the supplier, not at the customer. The practical consequence for a player is the loss of every British protection and complaint route.

Why do offshore slot games pay bonuses that British sites cannot?

Because the ten-times wagering cap imposed on 19 January 2026 binds only British licensees, and offshore multipliers commonly sit at 35× to 50×. A larger headline bonus funded by a heavier playthrough requirement is a marketing device, not generosity. A 40× requirement on a €100 bonus represents €4,000 of play before a withdrawal is permitted, and games contribute to it at different rates.

How long should a withdrawal take at a site not on GamStop?

There is no answer enforceable anywhere. British data for June to September 2024 shows 96.3% of withdrawals clear automatically, but that figure describes licensed operators bound by conditions on fair terms and identity checks. Offshore, the only time frame that exists is the one in the operator's own terms, and the only route to challenge it is an ADR provider the operator chose and pays.

Do these sites protect self-exclusion at all?

No comparable protection exists. British licensees must check their whole customer base for GamStop registration at least every 24 hours, a requirement introduced in April 2020, and must close a self-excluded customer's account and return the funds held rather than merely blocking the withdrawal. An exclusion via GamStop Online runs for its full term and remains in place afterwards until the person contacts GamStop to have it removed. Kahnawà:ke is the outlier with a genuinely severe self-exclusion rule, forfeiting funds to charity where a player breaches one.

What help is available if an offshore site withholds a payment?

Very little that bites, which is the honest answer. A British player's routes — the operator's complaints procedure, then a free ADR provider after eight weeks, then the Commission's contact centre — all depend on a licence that does not exist. If gambling is causing harm, the National Gambling Helpline on 0808 8020 133 is free and open 24 hours a day, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131 on weekdays from 10am to 3pm.

The Money Comes Back, or the Licence Was Never the Point

The one question worth asking about games not on GamStop is not whether the games exist — they do — but whether an operator with no British licence and no British regulator behind it has any reason to hand back a large win, and the evidence says the answer is entirely a matter of the operator's own commercial judgement. Two facts frame it. The Commission recorded 44.2 million withdrawals by customers of large operators in four months of 2024 and 96.3% cleared automatically, because a licence condition made obstruction expensive; and since April 2024 the same regulator has issued 3,140 disruption notices against sites that never accepted that condition in the first place.