A licence is the single most useful thing to check about an online casino, and the easiest to check. It takes about ninety seconds. Yet it’s also the thing most commonly misrepresented — by sites displaying logos they aren’t entitled to, by “licensed and regulated” claims that point at a jurisdiction with almost no consumer protection, and by affiliate pages that treat every licence as equivalent.
This page explains what a UK licence actually obliges an operator to do, how to verify one yourself, and what changes when you play somewhere that doesn’t hold one.
18+. Support: BeGambleAware.org | National Gambling Helpline 0808 8020 133.
The legal basics
Gambling in Great Britain is governed by the Gambling Act 2005, which created the Gambling Commission as the regulator. The Commission licenses operators, sets the rules they must follow, investigates failures and issues penalties.
The Act sets three licensing objectives that everything else flows from:
- Keeping gambling free of crime and disorder
- Ensuring gambling is conducted fairly and openly
- Protecting children and vulnerable people from harm
Since 2014, the position is straightforward: any operator advertising to or accepting customers in Great Britain must hold a Gambling Commission licence, regardless of where the company is based. A Malta-registered casino serving British players needs a UK licence too. There is no “we’re licensed elsewhere so UK rules don’t apply” exemption for operators actively targeting the British market.
Northern Ireland has its own separate legal framework; the Gambling Commission’s remit covers England, Scotland and Wales.
What an operator has to do to get and keep a licence
Getting a licence is not a formality. Applicants are assessed on identity and ownership, financial position and the source of their funding, the integrity and history of the people running the business, and their technical and compliance capability.
Once licensed, operators are bound by the Licence Conditions and Codes of Practice (LCCP) — the rulebook that governs day-to-day conduct. The obligations that matter most to you as a player:
Verify age before play. Customers must be confirmed as 18 or over before depositing or playing, including in free-play modes.
Protect customer funds and disclose the level of protection. Operators must categorise player funds as not protected, medium protection or high protection, and tell customers which applies.
Advertise honestly. Promotions must be fair and not misleading, with significant terms presented up front rather than buried.
Offer safer gambling tools. Deposit limits, time-outs, reality checks and self-exclusion, all easy to find and use.
Participate in GAMSTOP. Every UKGC-licensed remote operator must be enrolled in the national self-exclusion scheme. This isn’t optional — operators have been suspended for failing to participate.
Identify and act on signs of harm. Monitoring customer behaviour and intervening, not simply processing whatever comes in.
Meet anti-money-laundering obligations, including source-of-funds enquiries where activity warrants it.
Use tested games and certified RNGs meeting the Remote Gambling and Software Technical Standards.
Offer free dispute resolution. Every licensee must be signed up to an approved ADR (alternative dispute resolution) provider that you can escalate to at no cost if a complaint isn’t resolved.
Handle complaints properly, with a published procedure and defined timescales.
Operators also pay a statutory levy that funds gambling research, prevention and treatment, and they file regular regulatory returns.
How to verify a licence in ninety seconds
Don’t trust the badge in the footer. Logos are trivially copied, and cloned sites impersonating legitimate brands are a recurring problem.
Step 1. Scroll to the bottom of the casino’s homepage. Licensed operators must display their licence number and the name of the licensed company — often different from the brand name.
Step 2. Go to the Gambling Commission’s public register at gamblingcommission.gov.uk and search the account number or company name.
Step 3. Check three things on the register entry:
- The licence is active, not surrendered, lapsed or suspended
- The domain you’re on is listed among the operator’s approved URLs
- The activities cover what you’re playing (casino, bingo, betting)
That third check is the one people skip and the one that catches clones. If the exact domain isn’t on the Commission’s list of that operator’s websites, you are not on the site you think you’re on.
The register also shows regulatory action history, which is worth a glance. Fines and settlements are public.
The main licensing jurisdictions compared
| Jurisdiction | Consumer protection | Dispute resolution | Relevance to UK players |
|---|---|---|---|
| UK Gambling Commission | Extensive and prescriptive | Mandatory free ADR, Commission oversight | Required to serve GB customers |
| Malta Gaming Authority | Solid; EU framework | Complaints handled by the MGA | Well-regarded, but no UK protections |
| Gibraltar | Strong; small, selective licensee base | Regulator involvement | Many operators dual-licensed with UKGC |
| Isle of Man | Strong, with fund segregation requirements | Regulator involvement | Reputable, less common for UK-facing brands |
| Curaçao | Historically minimal; reformed licensing framework introduced from 2023 | Limited and inconsistent in practice | The licence you’ll see on most offshore sites marketed at UK players |
The reformed Curaçao regime replaced the old master-licence/sub-licence structure with direct licensing and more supervision, which is a genuine improvement on what came before. It still doesn’t give a British player the enforcement route, the mandatory ADR, the GAMSTOP coverage or the harm-prevention duties that a UK licence does.
What you actually give up offshore
Sites that accept UK players without a UK licence are marketed hard, usually on the basis that they have no stake limits, no affordability checks, accept credit cards and crypto, and aren’t connected to GAMSTOP. Those are real differences. So is what you lose:
- No GAMSTOP. If you’ve self-excluded nationally, these sites are the gap in it — which is precisely why they advertise the fact.
- No mandatory free dispute resolution. If a payout is refused, there is often no independent body with power to compel anything.
- No UK harm-prevention duties. No obligation to notice or act on problematic patterns.
- No fund protection disclosure. You may have no idea whether your balance is segregated.
- Withdrawal terms weighted against you. Common complaints involve verification demanded only after a win, “irregular play” clauses used to void winnings, and payout caps set impractically high.
- Credit card deposits are possible, meaning gambling with borrowed money — the exact risk the British ban was designed to remove.
We don’t review or recommend operators without a UK licence. That’s an editorial position, and it’s the main reason some heavily advertised brands don’t appear on this site.
Enforcement: what happens when operators get it wrong
The Commission’s powers are real and used regularly. It can issue formal warnings, impose licence conditions, levy financial penalties, agree regulatory settlements, suspend a licence, or revoke it entirely. Penalties running into millions of pounds have been imposed on major operators for anti-money-laundering and social responsibility failures, and licences have been suspended for issues including failure to participate in self-exclusion arrangements.
For players, the enforcement record is useful context rather than a verdict. A fine three years ago followed by structural change is different from a pattern of repeat failures. We factor both into our assessments — see how we test online casinos.
If something goes wrong
1. Complain to the operator first. Use their published complaints procedure and keep everything in writing.
2. Escalate to their ADR provider. If the operator hasn’t resolved it within eight weeks, or issues a final response you disagree with, take it to their approved ADR body. This is free to you and the operator must comply with the process. The ADR provider is named in the casino’s terms and on the Commission’s register.
3. Report to the Gambling Commission. The Commission doesn’t arbitrate individual disputes or recover your money, but it uses reports as intelligence and acts on patterns. Reporting still matters.
4. Payment-related issues may also involve your bank or the Financial Ombudsman Service, depending on the circumstances.
Frequently asked questions
Is it illegal for me to play at a non-UK-licensed casino? The offence under UK law falls on operators advertising to or serving British customers without a licence, not on individual players. But legality isn’t the point — the protections simply don’t apply to you there.
Why do some casinos hold two or three licences? Operators serving multiple markets need a licence in each. A UK-facing brand commonly holds UKGC plus Malta or Gibraltar. For you, only the UK licence is the relevant one.
Does a UK licence guarantee I’ll be treated fairly? It guarantees enforceable standards and a free escalation route, not perfection. Licensed operators still make mistakes and some have been penalised for serious ones. What it changes is that you have somewhere to go.
How do I know I’m on the real site and not a clone? Check the exact domain against the operator’s listed URLs on the Commission’s register. Reach sites by typing the address or using a bookmark rather than following ads or messages.
What is the statutory levy? A mandatory charge on licensed operators funding gambling research, prevention and treatment. It replaced the old voluntary donation system. It’s paid by operators, not deducted from players.