The legal position for UK players outside GamStop

The player position, short and long

The short answer to the question that arrives most often at the editor's inbox is that a UK adult who bets at an offshore casino does not, in doing so, commit a criminal offence. That is not a technicality and it is not a loophole. It is the position that the Gambling Act 2005 was drafted to hold. The Act creates offences aimed at operators supplying remote gambling to Great Britain without a licence, and it does not create a corresponding offence targeting the individual customer. The customer is the person the statute is intended to protect, and the statute is written on the presumption that the enforcement effort will fall on the supply side rather than on the demand side. That is the structural position, and every credible reading of the Act reaches it.

The longer answer is that the absence of a criminal offence is not the same thing as a positive set of consumer rights, and it is at exactly this point that the offshore marketing copy tends to blur the distinction. To say that a UK adult is not committing an offence is to describe a piece of criminal law. To say that a UK adult is playing safely, or in a regulated environment, or with any of the protections that attach to a UKGC-licensed account, is to describe a piece of consumer regulation. The two are different bodies of law, and the second does not follow from the first. What falls away, once a UK adult steps outside the licensed sector, is the framework of consumer protection that the licensed sector carries. That framework is the subject of every remaining section on this page, and it is worth reading each of them before drawing a conclusion about the shape of the position.

Section 33 of the Gambling Act 2005

Section 33 of the Gambling Act 2005 as amended is the primary statutory anchor for the offence of providing facilities for gambling in the United Kingdom without a licence. The section applies to remote gambling as it applies to premises-based gambling, and the 2014 amendment brought overseas-based remote operators serving the UK market squarely inside its scope. What Section 33 does, in the plain terms of the Act, is criminalise the supplier. A person who provides facilities for gambling to a UK customer without a licence commits an offence, and the offence carries a summary or indictable route with penalties calibrated to the scale of the activity. That is the section that gives the Gambling Commission its enforcement footing, and it is the section under which the cease-and-desist correspondence that the Commission sends to offshore operators is written.

What Section 33 does not do is criminalise the person who gambles. There is no companion provision aimed at the customer, and no successful prosecution of a UK adult for placing a bet at an offshore site exists in the reported case law. That absence is neither an oversight nor an ambiguity. It is the settled position of the Act, and it has been the position since the Act came into force in 2007. The offshore sector reads Section 33 accurately when it observes that the section aims at the operator. What the sector then adds to that observation, in its marketing copy, is a set of implications that Section 33 does not, on any reading, support. That is where the reading has to be careful, and that is what the page as a whole is written to help with.

A closer look

The 2014 amendment to the Gambling Act, brought in by the Gambling (Licensing and Advertising) Act, closed the point-of-supply gap under which overseas operators had previously been able to serve UK customers without a UKGC licence. The amendment moved the licensing test to the point of consumption, so that any operator directing remote gambling facilities at Great Britain now falls within Section 33 whether or not it is incorporated in the United Kingdom. The amendment is why the offshore sector cannot lawfully advertise to UK consumers without a UKGC licence, and it is the amendment that gives the Advertising Standards Authority its jurisdictional footing over the marketing copy that offshore operators direct at a UK audience.

Where UKGC jurisdiction stops

The Gambling Commission's remit is defined by the licence framework that Section 33 anchors. The Commission regulates operators to whom it has granted a licence, and it enforces the licence conditions and codes of practice against those operators. It does not regulate operators to whom it has not granted a licence. That is a plain statement of the shape of the remit, and it is worth carrying when reading any marketing copy that speaks of regulated non-GamStop casinos. There is no such thing as a UKGC-regulated non-GamStop casino. If the operator held a UKGC licence, the licence condition would require GamStop integration. If it does not hold a UKGC licence, the operator is not regulated by the Commission at all, and the phrase regulated in that context refers to a licence issued by another jurisdiction, such as the Curaçao Gaming Authority under the Landsverordening op de Kansspelen that came into force on 24 December 2024.

The distinction matters in the language of dispute. Where the operator holds a UKGC licence, the Commission's complaints process, the alternative dispute resolution bodies the Commission approves, and the licence conditions relating to fund segregation, marketing, responsible gambling and settlement of bets all apply. Where the operator does not hold a UKGC licence, none of those apply. That is the practical shape of the jurisdictional edge. It is a hard edge, not a soft one, and it does not shift with the operator's own description of itself. An operator that describes itself as compliant, or as regulated, or as licensed and audited, and that does not hold a UKGC licence, is sitting outside the Commission's remit whatever its footer says. The absence of the remit is a fact about the operator's licensing status, not a fact about the operator's marketing copy.

What UKGC can and cannot do about offshore sites

The Commission has real enforcement tools directed at offshore supply and it uses them at scale. In the enforcement year 2024/25 it issued more than 770 cease-and-desist notices to offshore operators serving UK customers, worked with Google to secure around 64,000 URL removals, and coordinated the removal of 264 domains through registrar action. Those figures are the published figures and they represent an enforcement footprint materially larger than the one the Commission carried three years earlier. Alongside the intermediary work, the Commission has continued to fine UKGC-licensed operators for social responsibility and anti-money-laundering failings, with recent fines including £2.0 million against Spreadex, £1.4 million against AG Communications and £686,000 against Corbett Bookmakers, all published in 2025. The direction of enforcement is toward tighter control at the supply and marketing layers.

What the Commission cannot do about an offshore site is enforce a licence condition that the operator does not hold, and it cannot compel an offshore operator to settle a dispute with a UK customer according to the Commission's own dispute-resolution framework. Those are the two limits that the offshore sector's marketing tends to skate over. The Commission's tools reach the supply chain, the intermediaries that connect that chain to the UK consumer, and the payment rails that route money to it. They do not reach the operator's own conduct toward the individual UK customer once the customer has opened an account with the operator. That conduct sits under the operator's own terms of service and the licence framework of its home jurisdiction, and it is the point at which the customer's protection is at its thinnest.

The complaints path, or the absence of one

A UK adult who plays at a UKGC-licensed operator has a defined route of complaint. The first step is the operator's own complaints process, which the licence condition requires the operator to run and to publish, and the second step is escalation to an alternative dispute resolution body that the Commission has approved for the operator. The two steps together form a mandated pathway. There is no equivalent pathway for a UK adult who plays at an offshore operator. The operator's own complaints process, if it exists, sits under the operator's home-jurisdiction law rather than under UK consumer protection. Escalation to a UK ADR body is not available because the ADR bodies the Commission approves are approved for operators to whom the Commission has issued a licence. The customer of an offshore operator is therefore left with civil litigation, in the operator's jurisdiction, as the residual route.

Civil litigation is worth naming honestly because the offshore marketing copy rarely names it at all. A UK adult with an unrecovered balance at an operator incorporated in Curaçao, Anjouan or Kahnawake would be starting a claim in the courts of that jurisdiction, against a defendant that in most cases has no meaningful assets in England or Wales, under terms of service that the customer accepted at registration. The cost of a claim in those circumstances is out of proportion to any recovery that would follow a favourable judgment, and the enforcement of the judgment against the operator's home-jurisdiction assets is a separate exercise again. That is why, in practical terms, most disputes at offshore operators are resolved through the operator's own goodwill or not at all. The absence of a UK complaints path is therefore not a small consumer inconvenience. It is the substantive absence of the consumer's route to redress.

A closer look

The ASA does hold jurisdiction over the marketing copy that offshore operators direct at UK consumers, under the Committee of Advertising Practice non-broadcast code, and its rulings against offshore operators are published on its website. Rulings against offshore gambling advertising in recent years have addressed misleading responsible-gambling messaging, inadequate significant conditions in promotional offers, and the appeal of imagery to under-18s. The ASA sanction is not a licence sanction. It is a public ruling that the advertising is not permitted, and the mechanism of compliance sits under CAP administration rather than under UKGC licensing. It is a real layer of protection over the marketing that surrounds the offshore sector, and it is not a substitute for the complaints route that a UKGC licence would carry.

Alternative Dispute Resolution and its limits

Alternative dispute resolution, in the sense the Gambling Commission uses the term, refers to the independent bodies that UKGC-licensed operators are required to nominate as the second step in the complaints process. The bodies are approved by the Commission under Regulation 5 of the Alternative Dispute Resolution for Consumer Disputes Regulations 2015, and the operator's ADR body is disclosed on the operator's site as a matter of licence condition. The Independent Betting Adjudication Service and eCOGRA are the two bodies most frequently seen in the sector. The service is free to the customer. The decision is binding on the operator by contract, in the sense that the operator is contractually required by its licence to participate and to give effect to the outcome of the adjudication if the adjudication is against it.

None of that infrastructure is available to a customer of an offshore operator. The ADR bodies approved for the UK market are approved for operators the Commission licenses, and the licence is the mechanism that binds the operator to the outcome of the adjudication. An offshore operator that displays a logo that resembles an ADR body's mark, or that names in its footer a private arbitration service the operator itself has appointed, is not offering the same thing. It is offering a form of internal complaint handling under a marketing label that borrows the language of independent adjudication. The distinction is not visible from the operator's home page, and reading the operator's terms of service is the only reliable way to confirm what the customer has and has not signed up to on this specific point.

White Paper 2023 reforms in force by 2026

The White Paper published in April 2023 under the title High Stakes, Gambling Reform for the Digital Age (CP 835) set out the most significant reshaping of the licensed gambling framework since the Gambling Act itself. Between 2024 and 2026 its most substantive proposals have moved into force. The online slot stake cap now runs at £2 per spin for players aged 18 to 24 and at £5 per spin for players aged 25 and over, implemented through Licence Conditions and Codes of Practice amendments during 2024. The Statutory Levy came into force on 6 April 2025 under the Gambling Levy Regulations 2025, with rates from 0.1 per cent to 1.1 per cent of gross gambling yield, the highest rate applying to online operators, and a first-year yield in the region of £120 million distributed across NHS treatment, prevention and research streams. Affordability check frameworks have been rolled out on a lighter and enhanced basis, with the enhanced tier calibrated to the customer's cumulative losses over a defined period.

Every one of those reforms operates through the licence framework. The stake cap is a condition of the licence, the levy is payable by licensees, and the affordability checks are required of licensees under the Commission's LCCP. That means that every one of the reforms reaches only the operators that hold a UKGC licence. An operator that does not hold a UKGC licence is not subject to the stake cap, not liable for the levy, and not required to conduct affordability checks in the form the Commission has defined them. The reforms have therefore, without intending to, widened the practical gap between the licensed sector and the offshore sector that markets around it, and that widening is worth carrying in mind when the offshore sector's marketing describes itself in terms that borrow the language of the licensed reforms.

What the law does and does not protect

The law protects, first and foremost, the person who plays at a UKGC-licensed operator. That protection is delivered through licence conditions on fund segregation, on identification and verification at account opening, on marketing, on responsible gambling messaging, on cooling-off, on self-exclusion, on complaints, on alternative dispute resolution, and on the settlement of bets. It is enforced by a regulator with real tools and a real enforcement footprint, and by an advertising body with a code that has withstood two decades of judicial review. It is imperfect at the edges, as every consumer regime is, and the White Paper reforms were prompted in part by the recognition of those imperfections. But it is a framework, and it is the framework that gives the licensed sector its name.

The law does not extend that framework to the offshore sector. It does not do so because the framework is delivered through a licence, and the offshore sector does not hold the licence. A UK adult who plays at an offshore operator is playing without the licence conditions that the framework carries, and the customer's protection is, at that point, the protection that the operator's home-jurisdiction framework carries. That framework may be adequate, in the sense that the Curaçao Gaming Authority now runs a direct-licence system under the Landsverordening op de Kansspelen that came into force on 24 December 2024, and it may not, in the sense that the enforcement culture and the customer-redress infrastructure of a smaller jurisdiction are not a straightforward like-for-like substitute for the UK framework. That is the position the law creates, and it is the position the reader ought to be aware of when they weigh the choice ahead of them.

Read next

• GamStop explained, the scheme, the periods, the checks
• The risks, explained without the marketing
• Payments and checks, banks, cards, crypto, KYC
• Coming off GamStop, the official route
• Getting support, helplines, clinics, family, money

Frequently asked questions