Slots Not on GamStop: How UK Casinos Get Licensed and Stay Licensed
GamStop is the single largest self-exclusion register in Britain, and by the end of 2025 it held well over 100,000 active exclusions at any given moment. Sign up once and you are blocked from every UK-licensed operator that participates, which is essentially all of them. So the phrase "slots not on GamStop" gets typed into search bars thousands of times a month by players who want the exclusion lifted, sidestepped, or simply worked around.
Here is the part most guides skip. The interesting question is not whether a site sits outside GamStop. Plenty do. The interesting question is what that site had to prove to a regulator to operate legally, and what it has to keep proving every single year to stay in business. That is where the real difference between operators shows up.
This page looks at the licensing machinery behind non-GamStop casinos: the audits, the anti-money-laundering checks, the know-your-customer rules, and the annual paperwork that separates a properly regulated offshore brand from a website that just happens to accept UK debit cards.
What "Not on GamStop" Actually Means in Licence Terms
GamStop membership is a condition of holding a UK Gambling Commission licence, not a separate product. Any operator licensed by the Gambling Commission must connect to GamStop, must honour the exclusion, and must not market to excluded players. There is no opt-out, no premium tier, and no appeal that gets you back in early.
Casinos outside that system hold licences from other regulators. The three you will see most often on sites accepting UK players are the Malta Gaming Authority, the Curaçao Gaming Control Board, and the Kahnawake Gaming Commission in Canada. Each issues its own licence number, its own rulebook, and its own audit cycle.
Which regulators license casinos that skip GamStop?
The Malta Gaming Authority is the most common. It supervises roughly 300 licensed operators and requires annual compliance reporting, player fund segregation, and independent game testing. Curaçao licences, issued under the reformed 2023 framework, are cheaper and lighter on player protection. Kahnawake sits somewhere between the two and is mostly used by heritage online brands.
Is a non-GamStop casino automatically unregulated?
No, and this is the myth worth killing first. A casino can hold a valid MGA or Curaçao licence, pay tax in its home jurisdiction, submit to audits, and still sit outside GamStop because it has no UK licence. The absence of GamStop tells you one thing only: no Gambling Commission authorisation. It says nothing about whether the site is run properly.
Why would an operator choose not to hold a UK licence?
Cost and speed, mostly. A UK licence application runs to a fee based on gross gambling yield, with annual charges that scale with revenue, plus the Gambling Commission's requirement to fund research, education and treatment contributions. Add UK-point-of-consumption tax at 21% of gross gambling yield from April 2025 and the maths gets uncomfortable for smaller brands.
The Licence Application: What Regulators Actually Check
Every regulator runs some version of the same five-part test. Who owns the company. Where the money comes from. How the games are tested. How player funds are protected. And whether the people running it have a clean record. Fail any one of those and the application stops there.
Malta's process is the most documented. An application requires a detailed business plan, a source-of-funds declaration for every beneficial owner above a 10% stake, a technical dossier on the platform, and named key personnel for compliance and AML roles. Turnaround typically runs 3 to 6 months for a full licence.
| Regulator | Typical licence fee | Application window | GamStop required |
|---|
| UK Gambling Commission | From £4,000 plus annual GGY-based charge | 8 to 16 weeks | Yes |
| Malta Gaming Authority | Around €25,000 plus annual fees | 3 to 6 months | No |
| Curaçao GCB | From €4,000 annually under 2023 rules | 4 to 8 weeks | No |
| Kahnawake Gaming Commission | Around $15,000 plus annual renewal | 6 to 12 weeks | No |
What documents does a regulator demand from owners?
Passport copies, proof of address dated within 90 days, a personal declaration of any criminal convictions, a full corporate structure chart down to the individual humans at the top, and bank statements showing where the startup capital originated. Regulators are hunting for unexplained wealth and political exposure, not paperwork for its own sake.
How long does a licence last before renewal?
Malta issues licences for 5 years with annual compliance submissions in between. Curaçao's reformed system runs on a 5-year term with yearly reporting. Kahnawake renews annually. The UK Commission has no fixed end date but runs a continuing licence review that can be triggered at any point.
Can a licence be revoked after it is granted?
Regularly. The Gambling Commission has revoked or suspended dozens of licences since 2014, often over AML failures or misleading advertising. Malta has pulled licences too. Losing a licence means the site must stop taking bets from that jurisdiction immediately, and player balances get handled under the regulator's wind-down rules.
AML and KYC: The Rules That Decide Whether You Get Paid
Anti-money-laundering rules are the reason a withdrawal request can sit pending for three days while a casino asks for a bank statement. It is not personal. Under the EU's anti-money-laundering directives and equivalent UK rules, operators must verify identity, source of funds and source of wealth before releasing large sums.
Thresholds vary by jurisdiction but cluster around the same numbers. Identity verification is required before any withdrawal at most licensed sites, and enhanced checks kick in at defined transaction levels. The UK's own rules require verification before a player can gamble at all, which is why UK-licensed sites ask for documents before your first deposit.
At what amount do casinos ask for source of funds?
Common triggers sit at £2,000 in deposits within 24 hours, £10,000 across a rolling 12-month period, or any single win above £50,000. Malta-licensed operators typically apply similar bands. Offshore sites with lighter rules may only ask when a withdrawal crosses a few thousand pounds.
What counts as acceptable source-of-funds evidence?
Three to six months of bank statements, payslips, a tax return, a property sale contract, or a solicitor's letter confirming an inheritance. Screenshots of a crypto wallet balance are usually rejected. So are edited PDFs, and operators now run document-forensics software that flags them.
- Bank statements covering 90 days, unredacted except for unrelated transactions
- Payslips or an employer letter stating gross annual salary
- HMRC tax calculation or self-assessment summary
- Sale contract or completion statement for a property disposal
- Crypto exchange statements showing the original purchase, not just the current balance
How do audits catch operators that skip AML checks?
Regulators sample customer files. Malta's compliance audits pull a random selection of accounts and check whether identity, source of funds and ongoing monitoring were documented at the right time. If the file shows a £40,000 withdrawal with no source-of-funds record, that is a finding, and findings stack up into fines.
What happens if a casino fails an AML audit?
Penalties scale with severity. The Gambling Commission has issued fines in the tens of millions of pounds to major operators over AML and social responsibility failures. Malta issues administrative penalties and can suspend the licence. Curaçao's new framework introduced fines and revocation powers that the old regime largely lacked.
Player Fund Protection and Game Testing: The Quiet Guarantees
Two things separate a licensed casino from a website with a payment processor. The first is segregation of player funds. The second is independent testing of every game's random number generator. Both get audited, and both matter more than any welcome bonus when something goes wrong.
Fund segregation means player money sits in a separate bank account from operating capital, so if the company folds, players rank as creditors. Malta rates this as low, medium or high protection depending on how the funds are held. High means fully segregated and insured. Low means you are effectively an unsecured creditor.
Which testing labs certify casino games?
eCOGRA, GLI, BMM Testlabs and iTech Labs do most of the work. They test RNG output over millions of spins, verify published return-to-player figures, and check that game rules match the paytable. Pragmatic Play, NetEnt, Microgaming, Evolution and Hacksaw Gaming all publish RTP data certified by one of these labs.
What RTP should a slot actually pay?
Online slots typically sit between 94% and 97% at licensed operators. Some high-volatility titles run lower, occasionally 92%. If a site advertises a slot at 99% RTP, check the version. Some operators run reduced-RTP variants of the same game, and the difference over 10,000 spins is substantial.
| Protection feature | UK-licensed casino | MGA-licensed casino | Curaçao-licensed casino |
|---|
| Player fund segregation | Required | Required, rated by tier | Not always required |
| Independent RNG testing | Required | Required | Required in principle |
| Published RTP per game | Required | Required | Inconsistent |
| Dispute resolution body | Commission + ADR | MGA player support | Licence holder only |
| GamStop connection | Mandatory | None | None |
Where do players go when a licensed casino refuses to pay?
UK-licensed sites must belong to an approved alternative dispute resolution scheme, and the Commission can be asked to review. Malta runs its own player support process and publishes decisions. Curaçao's framework introduced a dispute mechanism in 2024, though its track record is short.
Top Non-GamStop Casinos and Their Licensing Backgrounds
The brands below all operate outside GamStop, and all hold licences from named regulators. Some also hold UK licences for separate products, which is a useful detail: it tells you the parent company has passed a stricter test somewhere in the group, even if the casino arm sits under a different permit.
Licence numbers are published on each site's footer. If you cannot find one, that is your answer about how seriously to take the operator.
Which non-GamStop operators hold the strongest licences?
Bet365 casino holds a UK licence and an MGA licence, so its casino arm is technically on GamStop for UK customers but operates under MGA rules elsewhere. William Hill casino and Sky Bet casino follow the same dual-licence pattern, both under UK and Gibraltar or Malta permits.
Which offshore operators accept UK players without a UK licence?
Roobet operates under a Curaçao licence and does not accept UK-licensed play, though UK players access it through VPNs. Gamdom and Rainbet run on Curaçao permits with crypto-first banking. NineWin casino, Donbet casino and Mystake casino sit in the same bracket.
Which MGA-licensed casinos sit outside the UK system?
Casumo casino, LeoVegas casino, Mr Vegas casino and Videoslots all hold Malta licences. Several also hold UK licences for the same brand, which means UK customers get GamStop coverage while players in other markets do not. Unibet casino and 32Red casino follow similar structures.
Are white-label casinos licensed differently?
Yes, and it matters. White-label operators like Foxy Bingo, Gala Bingo and JackpotJoy casino often run on the licence of a parent platform company rather than holding their own. That is legal under MGA and UK rules, but it means the compliance function sits upstream, not in the brand's own office.
Which brands combine a UK licence with an offshore casino arm?
Paddy Power casino, Ladbrokes casino, Coral casino, Betfred casino and Betfair casino all operate under UK licences for their main products. Their casino verticals are UK-regulated, which means GamStop applies. The offshore angle only appears when the same group runs a separate international brand.
What about crypto-native casinos?
Roobet, Gamdom, Rainbet and Duelz casino lean on crypto deposits and lighter KYC. Curaçao's 2023 reforms tightened requirements, including mandatory identity checks at defined thresholds, but enforcement is uneven. Treat the licence as a floor, not a guarantee.
Do any non-GamStop casinos hold UK licences for other products?
Plenty. 888 Casino holds UK and Gibraltar licences. Betway casino holds a UK licence for sports and casino. Betvictor casino, bwin casino and BetMGM casino all operate under UK permits for their main UK-facing products, with international arms under separate regulators.
Which operators run on Gibraltar licences?
Gibraltar's regulator licenses a smaller group, historically including William Hill casino, 888 Casino and several PartyCasino entities. Gibraltar rules are close to UK standards on AML and player protection, but Gibraltar has no GamStop connection, so the exclusion does not travel with the licence.
Are there non-GamStop bingo and Slingo operators?
Yes. Gala Bingo, Sun Bingo, Heart Bingo, Double Bubble Bingo, Fabulous Bingo and Slingo casino all run bingo and Slingo products. Most hold UK licences for the UK market, which means GamStop applies to those specific brands. Offshore bingo rooms are rarer because the format is heavily UK-centric.
Which operators are outright offshore with no UK presence?
Roobet, Gamdom, Rainbet, NineWin casino, Donbet casino, Mystake casino, Goldenbet casino, Lucky Pants casino and Fat Pirate operate entirely outside the UK licensing system. They hold Curaçao or similar permits and rely on offshore payment routes rather than UK debit card processing.
What about the mid-tier UK brands?
MrQ casino, Midnite casino, Kwiff casino, Pub Casino, Casino Kings and Bet UK casino hold UK licences and therefore sit inside GamStop. Their appeal is different: faster payouts, lower wagering, and a UK-facing support team rather than an offshore one.
Which non-GamStop sites have the longest operating history?
888 Casino launched in 1997, PartyCasino in 2005, 32Red casino in 2002 and Casumo casino in 2012. Longevity is not proof of quality, but a brand that has held a licence for 20+ years without revocation has usually learned how to pass an audit.
Myth vs Reality: What Non-GamStop Status Tells You
The myths around non-GamStop casinos are persistent and mostly wrong. They get repeated because they serve a purpose: they make offshore sites sound like a loophole rather than a licensing choice. Here is what the paperwork actually shows.
Myth: non-GamStop casinos are illegal in the UK
Reality: it is not illegal for a UK player to gamble at an offshore site, though the site cannot legally advertise to UK customers without a UK licence. The 2005 Gambling Act regulates operators, not players. No UK player has been prosecuted for using an offshore casino.
Myth: non-GamStop means no KYC
Reality: Curaçao's 2023 reforms made identity verification a licence condition. Malta has required it for years. The difference is timing and threshold, not existence. Offshore sites may let you deposit £50 without documents, but a £5,000 withdrawal will trigger checks anywhere.
Myth: offshore casinos never pay out
Reality: most pay, and some pay faster than UK-licensed sites because they skip the UK's verification-before-deposit rule. The risk is not routine non-payment. It is what happens when a dispute arises and there is no UK Commission or ADR scheme to escalate to.
Myth: MGA and UK licences are basically the same
Reality: they overlap on AML and game testing but diverge sharply on player protection. The UK requires affordability checks, GamStop integration, and a statutory levy. Malta requires fund segregation and annual audits but no equivalent exclusion register.
Myth: a licence number on the footer proves everything
Reality: licence numbers can be checked. The MGA publishes a register of licensed operators. Curaçao's GCB publishes licence holders under the new framework. If the number on the footer does not appear in the regulator's own list, the licence is either expired or fabricated.
Myth: white-label brands hold their own licences
Reality: many do not. A white-label casino operates under the platform provider's licence, which means the compliance team, the AML officer and the audit trail all sit with the parent. If the parent loses its licence, every white-label brand on it goes down together.
How to Check an Operator's Licence Before You Deposit
Five minutes of checking beats a three-week withdrawal dispute. The information is public, the registers are searchable, and the process does not require any technical knowledge beyond reading a footer and typing a number into a search box.
- Scroll to the site footer and find the licence number and regulator name
- Search the regulator's public register for that exact number
- Check the licence status, issue date and any conditions attached
- Confirm the trading company name matches the one on your bank statement
- Look for a published complaints or dispute resolution route
- Check whether player funds are segregated and at what protection tier
What details should appear in the footer?
Company registration number, registered address, licence number, licensing authority, and a named complaints procedure. If any of those are missing, the site is either unlicensed or hiding something. Both answers should end your session.
How do you verify an MGA licence?
Malta publishes a searchable list of licence holders on its website. Enter the licence number, confirm the trading name matches the brand you are using, and check whether the licence covers casino games or only sports betting. Some operators hold one and not the other.
What if the licence is held by a different company name?
Normal, and worth understanding. The brand name on the homepage is often a trading name, while the licence sits with the parent company. The footer should list both. If the parent company is registered in a jurisdiction you cannot identify, that is a signal to slow down.
Does a UK licence number mean GamStop applies?
Yes, without exception. Any operator holding a Gambling Commission licence must connect to GamStop and must honour exclusions. If a site claims a UK licence but says it is not on GamStop, one of those two statements is false, and the licence claim is the easier one to check.
How often do licence details change?
More often than players assume. Operators add and drop jurisdictions, restructure corporate entities, and move licences between group companies. A licence you verified 12 months ago may now be held by a different entity, so re-check before a large deposit.
Responsible Gambling: Age, Helplines and Self-Exclusion
Gambling in the UK is restricted to adults aged 18 or over, and operators must verify age before allowing play. Offshore sites apply their own age rules, usually 18, though some jurisdictions set the bar at 21. Underage play is a licence breach everywhere that matters.
If gambling stops being entertainment, help exists and it is free. The National Gambling Helpline runs 24 hours a day on 0808 8020 133, staffed by trained advisers. GamCare provides counselling and live chat. GamStop is the multi-operator self-exclusion scheme covering UK-licensed sites, with exclusions lasting a minimum of 6 months and extendable to 5 years.
For players using offshore sites, GamStop will not apply. Self-exclusion then has to be arranged directly with each operator, and blocking software such as Gamban or Net Nanny covers the device rather than the account. Bank-level blocks are also available from most UK high street banks.
Deposit limits, loss limits and session timers are available at every licensed operator and should be set before play, not after. If you are chasing losses, stop. The house edge does not care how much you have already spent.
Does GamStop cover non-UK-licensed casinos?
No. GamStop only works with operators holding a Gambling Commission licence. Offshore sites are outside the scheme by definition, which is the entire point of the search term. That does not make them illegal, but it does mean self-exclusion must be handled operator by operator.
What is the minimum self-exclusion period?
GamStop exclusions run for a minimum of 6 months and can be set for 1, 2 or 5 years. Once active, the exclusion cannot be lifted early. Operators must remove the player from all marketing lists and block account access for the full term.
Can a casino refuse to close my account?
A licensed operator cannot refuse a self-exclusion request. Refusing or delaying is a licence breach and reportable to the regulator. Offshore sites are less bound, which is why device-level blocking software is the more reliable tool when you are playing outside the UK system.
FAQ: Slots Not on GamStop
Can I play slots not on GamStop legally from the UK?
Yes. UK law regulates operators, not players. You can legally play at an offshore casino, but that site cannot legally advertise to you without a UK licence. The trade-off is losing UK-specific protections like GamStop coverage and access to the Commission's dispute process.
Do non-GamStop casinos pay out winnings?
Most do, and payout speed varies. MGA-licensed sites typically process withdrawals in 1 to 3 working days, while some Curaçao-licensed crypto casinos settle in under an hour. The risk is not routine refusal but the absence of a regulator to escalate to when a dispute turns serious.
What licence should I look for at a non-GamStop casino?
Malta is the strongest common option, followed by Gibraltar and Kahnawake. Curaçao's 2023 framework improved standards but enforcement is still developing. Check the licence number against the regulator's public register before depositing anything.
Why do some UK brands appear on non-GamStop lists?
Usually because the group runs separate international entities. The UK-facing brand holds a Commission licence and connects to GamStop; the international arm holds an MGA or Curaçao permit and does not. Same logo, different legal entity, different rules.
Is it safe to use a VPN to access a non-GamStop casino?
A VPN hides your location but does not change the licence terms. If a casino's terms prohibit players from restricted jurisdictions, using a VPN breaches those terms and can void winnings. Check the terms before assuming a VPN solves the problem.
How do I check if a casino has failed an AML audit?
Regulators publish enforcement notices. The Gambling Commission lists every regulatory settlement and licence review on its website. Malta publishes administrative penalties. Searching the operator's name plus "regulatory settlement" usually surfaces any history within seconds.
What is the difference between source of funds and source of wealth?
Source of funds explains where a specific deposit came from, such as a salary payment. Source of wealth explains how you accumulated your overall assets over time. Regulators require both at higher thresholds, and operators must document the answers before releasing large withdrawals.
Can a casino lose its licence while I have a balance?
Yes, and it has happened. When a licence is suspended or revoked, the regulator typically oversees a wind-down that includes returning player balances. Fund segregation rules exist precisely for this scenario, which is why the protection tier matters more than the welcome offer.
Licensing is not a marketing line. It is the audit trail that decides whether your withdrawal arrives, whether your data stays private, and whether anyone answers when something goes wrong. Check the number in the footer, match it against the regulator's register, and treat the licence status as the first filter rather than the last. A casino that cannot show you a valid licence today is not worth the deposit tomorrow.