Slots Without GamStop and Regulator Oversight

Updated November 2026
Licensed
usAvailable in US
Fast payouts
18+ Only

Slots without GamStop are slots on sites with no Gambling Commission licence. They sit outside the scheme entirely, because the self-exclusion duty binds only licensed operators. The Commission counted 586 such sites reachable by British consumers in September 2026, disrupted 311 of them in one quarter, and estimates 2.5 per cent of recent online gamblers used one.

The phrase "slots without GamStop" describes a gap, not a product. GamStop — the scheme's name, and yes, it is constantly typed "gamestop" — is a register administered by The National Online Self Exclusion Scheme Limited, established in 2017 and live since 27 April 2018. It works on a simple licence condition: since 31 March 2020 every operator holding a Commission licence must be part of it. Anyone outside that licence does not check the register, cannot check it, and has no business claiming otherwise.

What I find interesting about this corner of the market is that the regulator largely agrees with the customer's instinct about who is at fault. The Commission has never suggested that using an unlicensed site is a crime for the player. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, punishable on summary conviction by up to 51 weeks in prison, a level 5 fine, or both. The offence attaches to the operator. The Commission said as much in October 2024: offering commercial gambling services to consumers in Great Britain without a licence is illegal, and holding a licence in another jurisdiction changes nothing.

So the honest version of this subject is not "here is where to go". It is "here is what happens to the sites, here is what happens to the money, and here is the paperwork that tells you which is which", written as of 7 November 2026.

Table of Contents9

Slots Without GamStop Statistics

The Commission ran its own estimate in November 2026 and the results are less dramatic than either side of the argument pretends. Among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with an illegal gambling website, with 1.5 per cent more having done so in the previous year. Across the whole population, including people who never gamble, 0.6 per cent had touched one in four weeks — 94.4 per cent showed no sign of using one at all.

Those survey figures sit awkwardly beside the market-research numbers, which is worth saying plainly. H2 Gambling Capital put stakes with illegal operators at £16.6 billion in 2025, up from around £5 billion in 2019, and the share of gambling happening legally falling from 97 per cent to 92 per cent. A study by Frontier Economics for the Betting and Gaming Council came in far lower: £2.7 billion staked online annually, 2.1 per cent of the £128 billion staked with regulated remote operators. Yield Sec, working for the Campaign for Fairer Gambling, split the 2025 market at £8.0 billion regulated and £0.8 billion unregulated.

Three methodologies, three very different answers. My reading is that the Commission's own note about its methodology is the most useful sentence in the pile: its traffic-based estimate assumes £0.32 of gross gambling yield per minute on licensed online slots and explicitly does not capture activity hidden behind VPNs. Nobody has clean data. The trend is upward on every measure; the level is contested.

What is not contested is the volume of enforcement. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and three payment provider referrals — referred 447,778 Bing and Google URLs, and secured 287,961 removals. Across 160 illegal sites with usable traffic data, engagement fell by an average of 32 per cent after disruption.

Online Slots Without GamStop and Offshore Licences

Curaçao

Curaçao used to be the easy answer, and the old answer is now wrong. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory body. The master-licence model is gone. The four former master licensors stopped issuing on staggered dates: Gaming Curaçao on 18 August 2024, Curaçao eGaming on 1 October 2024, Antillephone on 1 November 2024 and Curaçao Interactive Licensing on 31 January 2025. The legacy "orange" sub-licence certificates ended on 15 October 2025 entirely.

The practical consequence, per the CGA's own framework page, is that a historic /JAZ number or a legacy seal proves nothing about a current licence. A B2C application costs a one-time non-refundable €4,592, and the total annual B2C fee is €47,450 — a €24,490 licence fee to the National Treasury plus a €22,960 supervisory fee, payable in full by 15 January. In October 2026 the CGA said its old portal would not return and it was building an alternative way to verify licensed domains, because the previous digital seal may be affected by the transition. Verification is, for now, a mess — and a site leaning on a seal nobody can check is telling you something.

Anjouan

Anjouan's fee schedule is €17,828 for B2C licence issuance and the same for annual renewal, with €500 per additional domain. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims over 1,300 gambling licences issued at roughly €17,000 a year each, and quoted a former attorney-general of the Comoros calling the licensing arm "an illegal entity"; the same report said the AOFA lost recognised-regulator status under Comorian banking laws passed in 2013 and 2015. Anjouan Gaming says an independent legal opinion of 19 September 2024, reconfirmed in February 2026, backs its authority — that claim comes from the industry side and is reported rather than established. Its own statement of 10 June 2026 is blunter and more honest than most offshore regulators manage: a licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". Read that twice.

Kahnawà:ke

Kahnawà:ke has the longest paper trail, established in 1996 with its interactive gaming regulations enacted in 1999. Licences must be hosted at Mohawk Internet Technologies in the territory, and the Interactive Gaming Licence has been held by one entity — Mohawk Internet Technologies — since 1999, with operators taking Client Provider Authorizations instead. The KGC's Logo Certificate Program generates a Certificate of Good Standing when a player clicks the mark. Fees rise on 1 January 2027: CPA application from USD 35,000 to USD 40,000, five-year renewal to USD 40,000 including the annual fee.

Malta and Costa Rica

Malta's B2C licence costs a one-time €5,000 application fee, a €25,000 annual licence fee, five per cent gaming tax and minimum share capital of €100,000 for Type 1 and 2. Note the thing that makes Malta interesting rather than reassuring: the MGA publishes a list of Unauthorised URLs, saying any reference to a Maltese licence on them is false and misleading, with entries dated 30 October 2026.

Costa Rica is not a licence regime at all. There is no comprehensive framework; the "data processing license" the industry mentions is not a licence in the legal sense, Bill No. 25,057, which would have created a mandatory regime, was rejected in early 2026, and games of chance are generally prohibited under Costa Rican law.

Licence / regimeWhat it coversPublished costCan it override UK law?
GB Gambling CommissionActivity offered to consumers in Great BritainNot applicableIt is the licence; GamStop applies
Curaçao (LOK, from 24 Dec 2024)Operator's own activity under CGA supervision€4,592 issue; €47,450 a yearNo
AnjouanB2C and B2B internet gaming, no territorial restriction under Anjouan law€17,828 issue; €17,828 renewalNo
Kahnawà:keCPA holders hosted in the territoryUSD 35,000 → 40,000 from 1 Jan 2027No
Malta (MGA)Maltese / EU-EEA entities and services from Malta€5,000 issue; €25,000 a year; 5% taxNo
Costa RicaNo comprehensive licensing regime—No

Regulatory Limits for the Gambling Commission

The enforcement pattern is the most revealing thing about this market, because it is asymmetrical. The Commission's own assessment, published in October 2025, ranks disruption tools by measured effect: registrar blocks and website suspensions produced the largest average drop in engagement at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. It states plainly that search-engine removal makes a site harder to find but does not fully block access.

The quarterly numbers show the shift. Websites referred to search engines went from 124 in July–September 2024 to 321 in April–June 2025. Cease and desist notices ran 113, 83, 129 and 145 across those four quarters. Then the pace broke upward: 226 websites referred in January–March 2026, 366 (147,721 URLs) in April–June 2026, and 1,835 websites with 7,677,211 URLs in July–September 2026, alongside 546 cease and desist notices.

Now the sting. Prosecutions do not follow. Across April 2025 to March 2026, every quarter recorded zero or one prosecution commenced — a single case, in October to December 2025, and April to June 2026 produced no criminal investigations at all. The Commission disrupts at industrial scale and prosecutes almost never. It also says its referrals to the Visa Operator Scheme are "critical and still early-stage", which is regulator for: we have barely started. The two operators whose licences were suspended in April 2020 for missing the GamStop deadline, Dynamic and Sportito, were dealt with under section 118(2) of the Gambling Act 2005 — a domestic lever, pointed at domestic licensees.

When a Site Has No GamStop Check to Fail

Self-exclusion is the hinge this whole subject turns on, so it is worth getting the mechanics exactly right.

The first time is quick. Registering with GamStop blocks you from gambling with all online operators licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. Signing up takes minutes; the block can take up to 24 hours to bite. The Commission added a second layer in April 2020, requiring operators to check their entire customer base for GamStop registration at least every 24 hours, which also stopped registered people receiving direct marketing.

It is the later part that matters, and it is consistently misreported. Once registered, a person cannot cancel during the exclusion period. The exclusion does not lapse at the end of the chosen term — it stays in place unless and until they contact GamStop to remove it. Under the terms last updated 20 May 2026, the auto-renewal option can only be switched off in the final six months of a five-year term, and auto-renewal can continue for up to four further five-year periods. If someone does nothing at the end of their term, GamStop holds their data through a further automatic seven-year self-exclusion period, during which operators are told they were previously excluded. GamStop Online registrations cannot be removed early, and the Group's 2025 annual report devotes a section to refusing exactly that request.

The warning signs around an unlicensed site's self-exclusion offer are easy to spot once you know the shape of it:

  • "We accept self-excluded players." There is nothing to accept. Only participating operators can check, and they are the only ones bound.
  • A self-exclusion that expires quietly. If a site advertises a self-exclusion with no removal step, the term is decorative.
  • A "cooling-off" that is really a re-opening. Some regimes build in a delay before gambling resumes; a clause that lets a site's own staff switch it back on is not a protection.
  • No ADR provider named. Anjouan requires licensees to designate an approved ADR provider — EGIS ADR, Axion ADR, iGaming ADR or another approved body — and to list the name and contact detail in player terms. Silence means there is nowhere to appeal to.
  • A licence seal nobody can verify. Check whether the certificate behind a CGA Certificate of Operation seal redirects to cert.cga.cw and shows the same domain you are on. If it shows another operator's domain, the page is displaying someone else's paperwork.

For contrast, Kahnawà:ke does it differently: its voluntary self-exclusion is permanent and irrevocable, and a player who breaches it forfeits funds deposited or won to a third-party charity chosen by the Commission. Harsh, clear, and at least not pretending.

Five Signs a Slot Site Is Playing Straight

These are the checks worth running before anything else, and each takes about a minute.

The licence matches the domain

Click through to the Gambling Commission's public register and see whether the site's activities and its domain names appear. The Commission says to check that both match, not just the company name. A licence covering a different URL is a licence for a different business.

The terms name the insolvency rating

An operator holding customer funds must state in writing whether those funds are protected if it fails, at what level and by what method, and must get the customer's acknowledgement on the first deposit. Where money sits is a real question: customer funds must be held in a separate client bank account under licence condition 4.1.1, but the Commission's own guidance warns that this does not mean customers get their money back on insolvency, and businesses may legally hold it in overseas accounts. Money staked within an open bet is not "customer funds" at all and is outside any protection arrangement.

Withdrawal terms have no ceiling and no waiting room

The Commission states operators may not impose, use or rely on any term capping what a consumer may withdraw from their deposit balance; its own example of a prohibited term reads "You may withdraw up to £50 per day and up to £500 per week". Reverse withdrawals have been banned outright since 31 October 2021 under RTS 14B: once a withdrawal is requested, a consumer must not be offered the chance to cancel it and spend the money instead.

The bonus terms are on the page, not four clicks deep

From 19 January 2026, wagering requirements on bonus funds are capped at ten times and mixed-product promotions requiring two or more types of gambling are banned. The Commission's own framing of why it capped rather than banned is the giveaway: it judged licensees would otherwise be "highly likely" to introduce terms preventing customers cashing out bonuses, and said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore, Ignition's published terms use a 25× requirement, BlueChip reserves the right to limit withdrawable bonus winnings to 300 per cent of the credited bonus amount, and 25×–40× is normal.

A named ADR provider with a real deadline

Licensees must let customers refer a dispute to an approved ADR entity free of charge if it is not resolved within eight weeks. The Commission's approved list is ADR Group, Pegasus ADR Service, Blexr, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. The providers publish how it goes: eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, 150 valid "Deposits & Withdrawals" cases, an average 31 days to resolve domestic disputes, and 17.8 per cent of completed disputes decided for the consumer. IBAS's 2024-25 report records 3,721 domestic disputes, 217 of them banking or financial, an average of 20 days, and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. A provider with published numbers is worth more than a promise.

Reporting an Unlicensed Site You Have Found

Five steps, all of them things an ordinary person can lawfully do, and each with a reason attached.

  1. Check the register before anything else. Look up the business on the Commission's public register and confirm the domain appears against the licence. Reason: the Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without its licence, including where the operator holds a licence elsewhere — so the register, not the footer badge, decides the question.
  2. Write down what you saw rather than remembering it. The domain, the date, the licence number shown, and any seal. Reason: the Commission refers illegal content to platforms and to registrars and hosts, and identity is the thing that referral needs. It referred 1,835 websites to search engines in July–September 2026 alone.
  3. Report it to the Commission. Its regulatory remit covers websites that trade or advertise to consumers in Great Britain, whether or not they hold a licence. Reason: the Commission is a regulator and not an ombudsman — it cannot resolve an individual complaint or get anyone's money back — but complaints and reports are how the Illegal Markets team picks targets.
  4. Check whether your bank blocks it. Eleven banks appear on the Commission's list of gambling-blocking providers, last updated 16 October 2026: Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Blocks work by declining payments under gambling Merchant Category Codes and are applied at card level, so each card needs activating. Reason: it is the one control that sits between a card and an unlicensed operator, and most blocks use a 48- or 72-hour cooling-off before gambling payments resume.
  5. Install blocking software if the site keeps reappearing. GamStop signposts Gamban and BetBlocker for phones, tablets and computers. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, needs no registration, and is free worldwide; Gamban says it blocks licensed and unlicensed sites and aims to be as hard to remove as possible. Reason: sites get re-domained faster than any list is updated, and a device-level block survives that. Gamban is free in Wales but costs £4.99 a month or £29.99 a year in England and Scotland after the end of TalkBanStop funding on 31 March 2026, following a seven-day trial.
  6. If the money has gone, use the two-year paper trail. Where the operator holds a licence anywhere, ask for its ADR provider and use it after eight weeks; where it does not, the practical route is the bank and, for debt and housing knock-on effects, Citizens Advice, whose Scottish service runs an advice line on 0800 328 1131 from Monday to Friday, 10am to 3pm. Reason: the Commission cannot adjudicate, so the dispute has to go somewhere that can.

None of that is a route to a payout. It is a route to a paper trail, which is the only thing that has ever moved these sites.

Where to Get Help

This part belongs near the top of any page on this subject, so it is also here.

An unlicensed site is not licensed in Great Britain, and the protections that come with a British licence — GamStop participation, the ten-times wagering cap, the reverse-withdrawal ban, the eight-week complaints clock, ADR at no cost, the customer-funds disclosure, the credit card ban since 14 April 2020 — simply do not apply to it. The regulator cannot help recover money from a business it does not license.

Where help does exist: the National Gambling Helpline, operated by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, also reachable by live chat and WhatsApp. Callers in Wales are given 0808 2819 265. BeGambleAware, the public-facing brand of GambleAware, directs people to the same helpline and its online chat. GamFam (charity No. 1191139) runs the five-stage GRA5P peer-support programme for families and people in recovery, currently by Zoom. Gamblers Anonymous England, Wales & Ulster is on 0330 094 0322 with around 250 meeting locations and no appointment needed, lines open 7.30am to 10.30pm. Gam-Anon UK & Ireland supports family and friends whether or not the gambler attends GA. The NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB takes self-referrals on 020 7381 7722. NHS England has opened 15 specialist clinics since 2019, and the eight regional services commissioned by integrated care boards now take almost 5,000 referrals a year against a target of 3,000.

One more fact worth holding on to: the statutory levy introduced on 6 April 2025 raised just under £120 million in its first year, ringfenced solely for research, prevention and treatment, split 50 per cent to treatment, 30 per cent to prevention and 20 per cent to research. That money comes from licensed operators. Unlicensed ones pay none of it.

Questions About Unlicensed Sites

Are slots without GamStop legal for a player to use?

Using an unlicensed site is not the offence; providing it is. Section 33 of the Gambling Act 2005 makes it a crime to provide facilities for gambling without an operating licence, punishable on summary conviction by up to 51 weeks' imprisonment, a level 5 fine, or both. The Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without its licence, including where the operator holds a licence in another jurisdiction.

Do offshore slot sites check the GamStop register?

They cannot meaningfully. The duty sits in the Commission's Licence Conditions and Codes of Practice, social responsibility code 3.5.5, which binds GB-licensed operators, and the 24-hour customer-base checks introduced in April 2020 came with the same licence condition. A site with no Commission licence has no access to the register and no obligation to consult it — which is also why the Commission's January 2025 warning notice flagged that unlicensed sites often target people who have self-excluded.

How many illegal slot sites are there in the UK?

The Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026 — four per cent below the previous three-month average but four per cent above September 2025. Its longer monitoring from May 2024 to July 2025 found just over 1,000 unique illegal gambling websites accessed by consumers in Great Britain, with the number identified through its affiliate-page method rising from 364 to 535.

What happens to my money if an unlicensed site refuses to pay?

Very little that is enforceable. There is no eight-week complaints clock and no approved ADR provider you can compel if the site names none. Where a licence exists abroad, the operator may have an ADR body — Anjouan requires its licensees to designate one of EGIS ADR, Axion ADR, iGaming ADR or another approved body and publish its details. That is a forum, not a guarantee, and its decisions are not binding on a business with no British presence.

Does a Curaçao licence mean an offshore slot site is regulated?

Far less than the badge suggests. Direct CGA licensing only began with the LOK on 24 December 2024; the old master-licence system ended, and legacy orange certificates stopped on 15 October 2025. The CGA says a historic /JAZ number must not be treated as proof of a current licence, that clicking a Certificate of Operation seal must redirect to cert.cga.cw, and that a certificate showing a different domain means the site is displaying another operator's paperwork.

Why does the regulator not just block these sites?

Because blocking is uneven and it measures the unevenness. Registrar blocks and suspensions cut average engagement by 91 per cent; GEO IP blocking by 60 per cent; Google removal by 30 per cent; Facebook removal by 8 per cent. The Commission says search-engine removal makes a site harder to find without fully blocking access, which is why it now chases registrars and hosts — and why 1,835 websites were referred in a single quarter.

A Gap, Not a Loophole

Slots without GamStop are not a shortcut around self-exclusion; they are simply slots on sites that never joined the scheme, and the only thing really being tested by them is whether the enforcement machinery is faster than the registrars. It is getting faster — 1,835 websites referred to search engines in July to September 2026, 546 cease and desist notices in the same quarter, and an average 32 per cent fall in engagement across 160 disrupted sites — and it still does not prosecute, with zero or one case commenced in each quarter from April 2025 to March 2026. The Gap stays open, but it is getting narrower on every measure except the one that matters most: nobody at any point gets their money back. If gambling is causing harm, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day.

Material created by the team ukfastpayoutguide.com