Legal Status of Non-GAMSTOP Gambling in the UK

The single most misunderstood aspect of non-GAMSTOP gambling in Britain is the distribution of legal responsibility. Popular commentary tends to collapse two very different questions — "is this legal for the operator?" and "is this legal for the customer?" — into one, and the answers to those questions are meaningfully different. This page walks through the current legal position as it stood at the end of 2025, with reference to the Gambling Act 2005 as amended, the Gambling Commission's licence conditions, and the consumer-facing provisions of UK contract and financial-services law.

The Gambling Act 2005 and the point-of-consumption model

The foundational piece of legislation is the Gambling Act 2005, subsequently amended by the Gambling (Licensing and Advertising) Act 2014. The 2014 Act made a change that matters more than its title suggests. Before it came into force in November 2014, remote gambling operators serving British customers could do so on the basis of a licence held anywhere within the European Economic Area — the so-called "point of supply" model. From November 2014 the model became "point of consumption": any operator providing remote gambling facilities to a person located in Britain requires a Gambling Commission licence, regardless of where the operator is headquartered.

Section 33 of the 2005 Act, as amended, creates the criminal offence at the heart of this framework. It is an offence for a person to provide facilities for gambling to individuals in Great Britain without holding an operating licence. The maximum penalty is 51 weeks' imprisonment, an unlimited fine, or both. It is worth reading that provision carefully. The offence is committed by the provider of the facilities. There is no parallel offence committed by the customer who uses them.

Where the customer sits under UK law

Because the criminal responsibility falls on the operator, the individual UK adult who chooses to use an offshore-licensed gambling site is not committing a criminal offence merely by doing so. That is the direct answer to the most frequently asked question about this topic. It should not, however, be read as an endorsement or a green light. Two categories of secondary legal exposure remain.

The first is payment-services law. The 14 April 2020 credit-card gambling ban applies to UK-licensed operators as a condition of licence, but the mechanism by which card issuers implement the ban — merchant-category code blocking at the network level — catches many transactions to offshore sites as a side-effect. A customer who repeatedly attempts to fund an offshore account with a UK-issued card may find those transactions declined, and in some cases their card provider will flag the pattern internally with consequences for future credit decisions. This is not a criminal matter; it is a private-law consequence within the relationship between customer and card issuer.

The second is the consumer-protection framework. The Consumer Rights Act 2015 applies in principle to any B2C contract enforceable in the UK, including one entered into with an offshore operator. But the practical route to enforcement — small-claims court, mediation, the Financial Ombudsman for payment issues — is significantly harder to travel against an operator headquartered outside the jurisdiction. This is often the layer at which the "the law says one thing but reality says another" gap opens up.

What the Gambling Commission can and cannot do

The Gambling Commission's enforcement powers over unlicensed operators are limited by the reach of British criminal jurisdiction. Where an offshore operator's servers, executives and payment infrastructure all sit outside the UK, the Commission's practical options are constrained to what it can achieve through blocking, disruption and international cooperation. In recent years, the Commission has used its powers to work with the payment-networks industry to make funding routes more difficult, and to encourage internet service providers and app stores to remove listings for unlicensed operators. The results have been partial: the market for offshore-facing operators aimed at British customers has become somewhat more difficult to reach, but it has not disappeared, and it responds to enforcement pressure by evolving faster than a licensing regime typically can.

Where the Commission has been consistently effective is with intermediaries. Affiliate marketers, payment processors and advertising placements that assist offshore operators in reaching British consumers can be — and have been — enforced against. Several high-profile enforcement actions in the past three years have targeted UK-based individuals and companies whose activities assisted unlicensed offshore operators, not the operators themselves.

The 2023 White Paper and the widening gap

The White Paper published by the Department for Culture, Media and Sport in April 2023 tightened the UK-licensed environment across several axes: statutory stake limits on online slots, a phased financial risk assessment framework, a statutory levy replacing the previous voluntary contribution to research education and treatment, and enhanced Gambling Commission enforcement powers against unlicensed operators. From the perspective of an offshore operator, essentially none of these changes are directly applicable. From the perspective of a British customer, the reforms have widened the gap between what the UK-licensed environment feels like — more identity checks, tighter stake caps, more affordability-linked friction — and what the offshore environment continues to look like.

This asymmetry has produced a policy debate that is not yet settled. Some voices in the consumer-protection field argue that the widening gap should be addressed by pushing further on offshore-facing enforcement. Others argue that it should be addressed by ensuring the UK-licensed environment remains competitive enough to keep customers within it. Both positions carry weight, and both are being tested in practice by the Commission's evolving enforcement posture.

Practical takeaways for a UK adult

Three summary points, then. First, the criminal law does not create an offence for the individual customer, but that fact should not be taken as reassurance about the practical protections available. Second, the payment-services, consumer-protection and data-protection frameworks provide meaningfully weaker cover against offshore operators than against UK-licensed ones. Third, the direction of policy travel is toward more regulation of the UK-licensed market and more enforcement pressure on the offshore-facing market, both of which mean that today's picture will not be the same in five years' time. Our page on player protection risks discusses the practical consequences of these legal differences for a customer navigating the offshore market.

Frequently asked questions