Non GamStop casinos are offshore sites holding a licence from another jurisdiction — Curaçao, Anjouan, Malta, Kahnawake — rather than from the Gambling Commission. They are not connected to the scheme, UK protections do not apply, and the regulator treats them as illegal when they take bets from Great Britain.
GamStop is routinely typed as "gamestop", and the slip is worth recording here as a fact about the name rather than the scheme. Gamstop Online, as it has been styled since a November 2025 website update, is the national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited, company number 10504973. It has been available to consumers since April 2018, it is free, and signing up blocks a person from every online operator licensed in Great Britain for six months, one year, five years or five years with auto-renewal. That last detail matters more than the others: the exclusion stays in place after the chosen period ends unless the person contacts Gamstop to remove it. It is not a timer that runs out on its own.
So a "non GamStop casino" is a site outside that arrangement. Sometimes that is simply a jurisdiction story — a licence bought in Willemstad rather than Birmingham. Sometimes it is a deliberate pitch to people the scheme has excluded, which is the part the Commission's Illegal Markets team spends its budget on. Since April 2024 that team has issued 3,140 cease and desist notices and disruption notices, referred 447,778 Bing and Google URLs, and secured 287,961 removals. Across 160 illegal gambling websites with traffic data, engagement fell by an average of 32 per cent after disruption. That is the standard the phrase "best non GamStop casino" has to be read against.
Table of Contents10
- What "Licensed" Means When It Isn't a British Licence
- The Benchmark the Regulator Publishes
- A Comparison by Licence, Not by Brand
- How an Identity Check Actually Works
- Five Signs a Non GamStop Operator Can Be Trusted
- How to Check an Operator Before Signing Up
- Where the Money Comes From Matters
- What the Regulator Does About Unlicensed Sites
- Questions About Non GamStop Casinos
- Best Non GamStop Casinos Overview
What "Licensed" Means When It Isn't a British Licence
The Gambling Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that this includes an operator holding a licence in another jurisdiction. Section 33 of the Gambling Act 2005 makes providing facilities for gambling without an operating licence an offence, punishable on summary conviction by up to 51 weeks' imprisonment, a fine of up to level 5 on the standard scale, or both. It is immaterial whether the facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK.
That is the law as it stands, and it is aimed at the operator, not the customer. But it explains why the offshore market is unstable: a site can be genuine about its Curaçao paperwork and still be operating unlawfully the moment it accepts a bet from Manchester.
Which is why the licence itself is the first thing to check, and why the check is now harder than it was. Curaçao's National Ordinance on Games of Chance took effect on 24 December 2024 and replaced the old master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025. Licensing activities ceased for the four former master licensors on separate dates: Gaming Curaçao (365/JAZ) on 18 August 2024, Curaçao eGaming (1668/JAZ) on 1 October 2024, a former master licensor (8048/JAZ) on 1 November 2024 and Curaçao Interactive Licensing (5536/JAZ) on 31 January 2025. A historic /JAZ number is not proof of a current licence, and the CGA says so itself.
Worse, the CGA announced on 7 October 2026 that its previous online gaming portal would not return to service, and that it is building an alternative mechanism for verifying licensed domains because the old digital licence seal may be affected by the transition. A site can therefore display something that was a genuine seal eighteen months ago and be unable to prove anything today.
The Benchmark the Regulator Publishes
The strongest checkable benchmark in this market is not a payout claim. It is the Commission's own disruption data, published 21 October 2025 and updated through 2026, covering the period from April 2024 onwards: 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — alongside 447,778 search-engine URL referrals and 287,961 removals. Over 160 sites with traffic data, average engagement fell 32 per cent. Broken down by method, the figures are more interesting still: registrar blocks and website suspensions each produced an average 91 per cent fall in engagement, GEO IP blocking 60 per cent, Bing removal 52 per cent, Google removal 30 per cent and Facebook removal 8 per cent.
The Commission's own conclusion is that search-engine removal makes a site harder to find but does not block access. Which means a site's position in a list like this one tells you very little about whether it will still be there next quarter.
A Comparison by Licence, Not by Brand
Judging these operators means judging the regimes they sit under. Fees and frameworks are published, so the comparison can be made on facts.
| Licensing regime | Application or issuance fee | Annual cost | Verification route | Self-exclusion terms |
|---|---|---|---|---|
| Curaçao (CGA, under the LOK) | EUR 4,592 one-time, non-refundable, plus EUR 150 per ultimate beneficial owner | EUR 47,450 total — EUR 24,490 licence fee plus EUR 22,960 supervisory fee, payable by 15 January | Certificate of Operation Seal must redirect to cert.cga.cw; a domain mismatch means the certificate belongs to another operator | Operator scheme only; Kahnawake-style permanent exclusion does not apply |
| Anjouan | EUR 17,828 one-time for B2C, plus EUR 500 per additional domain | EUR 17,828 renewal | Unique licence number and QR code linking to the public register | Must designate an approved ADR provider and resolve complaints within 30 days |
| Kahnawake | USD 35,000 CPA application, rising to USD 40,000 on 1 January 2027 | USD 20,000 annual CPA fee, unchanged by the 2027 rise | Logo Certificate Program generates a Certificate of Good Standing | Voluntary self-exclusion is permanent and irrevocable; breach forfeits funds to charity |
| Malta (MGA) | EUR 5,000 one-time, non-refundable | EUR 25,000 fixed licence fee, plus 5% gaming tax on revenue | MGA publishes a list of Unauthorised URLs | MGA complaint form, reviewed in English or Maltese |
| Costa Rica | No licensing regime | None applicable | None | None |
Read the table by column, not by row. The Curaçao annual figure of EUR 47,450 sounds substantial until it is set against a British remote casino's obligations: no GamStop participation, no 10× wagering cap, no statutory levy at 1.1 per cent of gross gambling yield, which alone raised just under £120 million across the industry in the levy's first year. An offshore licence is not a cheaper version of a British one. It is a different product.
How an Identity Check Actually Works
This is the thing the whole topic turns on, because it is where offshore sites differ most sharply from British ones and where complaints cluster hardest. Over a quarter of the complaints reaching the Commission's Contact Centre concern identity verification, and a 12 August 2026 blog noted that customers typically raise the issue when documents are demanded on withdrawal.
In the UK, the framework is Licence Condition 17. It was introduced on 7 May 2019 and requires licensees to obtain and verify information establishing identity before the customer is permitted to gamble. The information must include name, address and date of birth. The Money Laundering Regulations 2017 set a separate trigger: for remote casinos, identification and verification when a customer deposits to take part in remote gambling, or withdraws funds or winnings, amounting to €2,000 or more — applying both to a single transaction and to transactions that appear to be linked, such as those forming part of the customer's overall activity during a single logged-on period.
The first time is therefore supposed to be before the first bet, or by a hybrid approach — identify and verify age at registration, defer full verification to the €2,000 threshold. Later, checks are ongoing rather than one-off: the Commission expects operators to take reasonable steps to keep identity information accurate, and to check again when circumstances change.
The warning signs are specific. Under Licence Condition 17.1.1, a withdrawal request must not trigger a demand for additional information if the licensee could reasonably have requested it earlier. So documents requested for the first time at the point of withdrawal are not thoroughness; they are a breach. Two other markers: fuzzy matching, where a customer is onboarded on partial or equivocal verification, and middle names used in place of forenames, which creates mismatches against records held elsewhere — including the GamStop register, which undermines the exclusion entirely. Offshore, none of this applies. There is no Licence Condition 17.1.1, no fair-and-open condition 7.1.1, and no ADR route the Commission has approved.
Five Signs a Non GamStop Operator Can Be Trusted
None of these make an offshore site lawful to use, and I am not going to pretend otherwise. They separate the ones that run a real business from the ones that will keep the deposit.
The licence verifies at source, today
Curaçao issues a Certificate of Operation Seal only to B2C operators and only for an approved, registered player-facing domain. Clicking it must redirect to cert.cga.cw, and if the certificate behind the seal shows a different domain name from the site being accessed, the site is displaying someone else's certificate. Anjouan certificates carry a unique licence number and a QR code linking to the public register, and Anjouan's own guidance says a certificate that cannot be verified there should not be relied on.
The complaints route leads somewhere outside the operator
Anjouan requires licensees to designate an Authority-approved ADR provider and publish its name and contact details in player-facing terms. Its current approved providers are EGIS ADR, Axion ADR, iGaming ADR and one approved body If the terms list a named provider, that is checkable. If the only route is an internal email address, it is not.
Withdrawals are not gated behind a review queue
Look for terms that make the withdrawal process slower than the deposit process. The Commission's position is that it is not acceptable to introduce friction when a customer tries to withdraw rather than when they deposit, and it settled with one operator for £900,000 on 21 October 2026 over failures that included unnecessarily delaying withdrawals — a term allowing only one withdrawal request at a time, and manual review of every fifth or tenth withdrawal for some customers.
Customer funds are held somewhere they can be described
In the UK, licence condition 4.1.1 requires customer funds to be kept in a separate client bank account, and condition 4.2.1 requires the operator to state an insolvency protection rating — "not protected", "medium protection" or "high protection" — in writing, acknowledged by the customer before gambling. Anjouan's standards require segregation of player funds from operational funds. An operator that cannot say where the money sits has answered the question.
The bonus terms have a number in them
Not "generous" — a number. Under Social Responsibility Code 5.1.1, in force since 19 January 2026, UK licensees cannot apply wagering requirements above 10 times, and cannot mix more than one gambling product within a single incentive. Offshore multipliers run far higher: 35× to 50× on welcome bonuses is ordinary, and no-deposit offers of 40× to 60× with a €50–€100 cashout cap are standard. BlueChip Casino caps winnings from bonus funds at 300 per cent of the credited bonus amount, with the excess voided. A site that publishes those figures is at least being honest about them.
How to Check an Operator Before Signing Up
Six steps. All of them are ordinary, lawful checks and most take under two minutes.
- Verify the licence at the register, not the footer. For Curaçao, click the Certificate of Operation Seal and confirm it redirects to cert.cga.cw and that the domain on the certificate matches the site. For Anjouan, scan the QR code against the public register. Reason: seals are copied, and a copied seal is the single most common false comfort in this market.
- Check the Gambling Commission's public register to see what it does not cover. Search the register for the brand's domain name. If it is absent, the site holds no British licence, no UK protections apply, and the Commission's Illegal Markets team would classify it as illegal. Reason: this is the fact that determines everything else on this list.
- Read the withdrawal clause before the bonus clause. Find the section on payment terms and look for anything that limits the number of withdrawal requests, imposes a minimum play-through, or routes payment through a manual review. Reason: withdrawal friction is the most complained-about feature of the sector — the Commission's Contact Centre has received around 2,000 complaints a year about withdrawal delays.
- Open the complaints page and find the ADR provider's name. Look for a named, external adjudicator with published contact details, and note the deadline for escalation. Reason: LCCP social responsibility code 6.1.1 gives UK customers a referral to an approved ADR entity free of charge if a dispute is unresolved after eight weeks, and a consumer must usually have gone through the operator's own procedure first. Offshore, the equivalent must come from the licence.
- Check the payment method against the terms. In the UK, licence condition 5.1.2 requires payment to be accepted only by a method whose provider is a payment service provider under the Payment Services Regulations 2017, and credit cards have been banned for gambling since 14 April 2020 under licence condition 6.1.2. Reason: an offshore site may accept instruments a British licensee cannot, and the fee schedules published by e-wallets bite — Neteller and Skrill each charge 2.80 per cent of the amount withdrawn, with minimums of USD 3.50 and EUR 3.50, for bank transfers effective 12 January 2026.
- Install a blocker and know the help route before you need it. Gamstop signposts Gamban and BetBlocker. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, needs no registration and is free worldwide; Gamban blocks licensed and unlicensed sites. The National Gambling Helpline, operated by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year. Reason: these are the only two mechanisms that work identically whether a site is licensed in Britain or not.
Where the Money Comes From Matters
It is worth asking why this market exists at all, because the Commission's own figures do not support the story that offshore sites are where British players have gone. Its analysis published 5 November 2026 estimates that across the whole population, including non-gamblers, 0.6 per cent of respondents engaged with illegal gambling websites in the past four weeks, with a further 0.4 per cent in the past twelve months and 94.4 per cent showing no indication of using one. Among respondents who had gambled online in the past four weeks, the estimate is 2.5 per cent.
The higher figures come from firms with an interest in the answer. H2 Gambling Capital puts stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, with legal gambling falling from 97 per cent of the total to 92 per cent. A Frontier Economics study for the Betting and Gaming Council estimated £2.7 billion staked annually online on the black market, 2.1 per cent of the £128 billion staked with regulated operators. Yield Sec, working for the Campaign for Fairer Gambling, put the unregulated share at 9 per cent of an £8.8 billion market in 2025. Three methodologies, three answers, and the Commission's own traffic-based estimate sits lowest of all — partly because, as its October 2024 methodology notes, it does not capture activity hidden behind a VPN.
So the honest position on the size of this market is that it is uncertain, that the uncertainty runs in a predictable direction depending on who paid for the research, and that the regulator's enforcement numbers are the only figures here produced under a duty to publish.
What the Regulator Does About Unlicensed Sites
The answer, for anyone who wants the short version: notices, removals and referrals, with prosecutions almost absent. Across April 2025 to March 2026, every quarter recorded zero or one prosecutions commenced — one prosecution in total, in October to December 2025. In April to June 2026 the Commission referred 366 websites to search engines and began 0 criminal investigations. In July to September 2026 it referred 1,835 websites — 7,677,211 URLs — and issued 546 cease and desist notices.
That is not inertia; it is method. GEO IP blocking and registrar blocks work, search-engine removal works less well, and the Commission says as much. In April to June 2025, 108 illegal websites were geo-blocked by their operators, 22 were removed or suspended by a registrar or host, and 214 were removed from search engines. The financial route is newer: the Commission made its first referral to the Visa Operator Scheme in January 2025 following a test purchase, and has since made three more covering three separate unlicensed websites, describing payment-transaction reporting as critical and still early-stage.
And there is a specific warning worth repeating. On 20 January 2025 the Commission issued an industry notice about casino games from licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls. In May 2025 it reported that TGP Europe was leaving the GB market after an investigation, that sites it operated were now unlicensed, and that it had contacted five football clubs about sponsorship arrangements with unlicensed gambling businesses. The pipeline from a licensed operation to an unlicensed one is short.
One thing to be clear about, since the phrase is used as a selling point: an offshore site is not a way round a self-exclusion. A GamStop exclusion holds for its full term, and then stays in place until the person contacts GamStop to remove it. Gambling on a site outside the scheme does not end the exclusion, it just moves the activity somewhere with no identity framework, no ADR route and no fund protection.
Questions About Non GamStop Casinos
Are non GamStop casinos legal in the UK?
The operator commits the offence, not the player. Section 33 of the Gambling Act 2005 makes it illegal to provide gambling facilities without an operating licence, and the Commission states that offering commercial gambling services to GB consumers without a Commission licence is illegal even where the operator holds a licence elsewhere. Since April 2024 the Illegal Markets team has issued 3,140 cease and desist and disruption notices. Customers are not prosecuted under section 33.
Which licences do non GamStop casinos usually hold?
Curaçao dominates by register count, following the LOK reform of 24 December 2024 that replaced the master-licence model. Anjouan is the other common one at EUR 17,828 for a B2C licence plus EUR 500 per extra domain. Malta and Kahnawake operate tighter regimes, and Costa Rica has no licensing framework at all — the "data processing license" sometimes cited there is not a licence in the legal sense.
How do I check whether an offshore casino's licence is real?
Two routes. For Curaçao, click the Certificate of Operation Seal: it must redirect to cert.cga.cw, and the certificate must show the same domain as the site. Beware the CGA's 7 October 2026 notice that its portal will not return and the old digital seal may be affected — a seal may now be unverifiable rather than forged. For Anjouan, scan the certificate's QR code against its public register.
Why do offshore casinos ask for documents when I withdraw?
Because there is no rule stopping them. In the UK, Licence Condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier, while the Money Laundering Regulations 2017 set a €2,000 threshold for remote casinos. Offshore, no equivalent prohibition exists, and the Commission reports that over a quarter of complaints to its Contact Centre concern identity verification — usually raised at withdrawal.
What are typical offshore bonus wagering requirements?
Well above the British cap. Social Responsibility Code 5.1.1, in force since 19 January 2026, limits UK wagering requirements to 10 times and bans mixed-product incentives. Offshore, welcome bonuses typically run at 35× to 50× and no-deposit offers at 40× to 60× with a €50–€100 cashout cap. BlueChip Casino caps winnings from bonus funds at 300 per cent of the credited bonus amount and voids the excess.
Do offshore casinos have to participate in GamStop?
No. GamStop obligations come from LCCP social responsibility code 3.5.5, which applies to operators licensed by the Gambling Commission, and participation has been a condition of the licence since 31 March 2020. Gambstop Online itself restricts who it can exclude from participating operators only, and cannot prevent access to gambling services run by organisations that do not take part.
Best Non GamStop Casinos Overview
The best non GamStop casinos in the UK in 2026 are, on the evidence, the ones whose licensee actually supervises them — and that is a narrower set than the marketing suggests, because the regulator's own numbers describe a market it is steadily dismantling rather than one it has given up on. Since April 2024: 3,140 cease and desist and disruption notices, 447,778 search-engine URL referrals, 287,961 removals, and an average 32 per cent fall in engagement across 160 illegal sites. A British licence remains the only framework that gives a player a named regulator, a free ADR route, an identity-verification rule that runs against the operator's convenience, and a self-exclusion that holds for its full term and then stays in place until the person contacts GamStop to remove it. Three thousand one hundred and forty notices, and one prosecution — that tells you what the Commission thinks the fight is worth winning, and where judgement has to sit.