UK Online Gambling Regulation (2026 Guide)
Every online casino that accepts British players must hold a UK Gambling Commission (UKGC) licence. That licence sets rules on stakes, bonuses, identity checks and how your money is protected, and the regulator updates them regularly. This guide covers the rules currently in force, when each took effect and what it means for you. We update it whenever a rule changes.
Who Regulates Online Gambling in the UK?
The UK Gambling Commission licenses and polices gambling operators, but five other bodies shape the rules that you’ll meet as a player. The Gambling Act of 2005 and the UKGC cover Great Britain (England, Scotland and Wales). Whilst Northern Ireland has its own, older gambling law.
| Body | What it controls | Why it matters to you |
|---|---|---|
| Gambling Commission (UKGC) | Licences, Licence Conditions and Codes of Practice (LCCP), technical standards, fines and licence suspensions. | Only UKGC-licensed sites can legally offer gambling to adults in Great Britain. |
| Department for Digital, Culture, Media and Sport | Gambling policy and legislation through the white paper: ‘High Stakes: Gambling Reform for The Digital Age’ April 2023. The Gambling Minister (currently Vicky Foxcroft MP) sits here. | Stake limits and the statutory levy came from DCMS decisions |
| Advertising Standards Authority (ASA) / CAP | Enforces the advertising codes, including rules against ads appealing to under-18s. | Gambling ads must not suggest that gambling solves financial problems or is a route to success. |
| Information Commissioner’s Office (ICO) | UK GDPR and direct-marketing rules. | Controls how casinos use your data and whether they can market to you. |
| Competition and Markets Authority (CMA) | Consumer protection law, including unfair contract terms. | Bonus and withdrawal terms can be challenged as unfair under the consumer law. |
| HM Revenue & Customs (HMRC) | Remote Gaming Duty and other gambling taxes | Operators pay the tax (no matter where they are based), not players, and UK gambling winnings are not currently taxed. |
The Legal Framework: Gambling Act 2005 and the 2023 White Paper
UK online gambling still runs on the laws determined by the Gambling Act of 2005, but most of the rules that players notice today come from the April 2023 White Paper, High Stakes: gambling reform for the digital age. The White Paper didn’t change the law itself. Instead, it set out commitments that the DCMS and the Gambling Commission have delivered since, mostly through new licence conditions.
The Gambling (Licensing and Advertising) Act of 2014 amended the Act so that from 1 November 2014, all operators providing gambling products to adults in the UK must hold a UKGC licence, no matter where they are based. For example, if an operator is based in Malta and wishes to offer UK players its online casino, that operator must have a UKGC licence. That is why offshore sites without a UKGC licence are illegal to operate here, even if they hold a licence elsewhere.
| Date in force | Change | Source |
|---|---|---|
| 1 November 2014 | All operators serving Great Britain need a UKGC licence | UKGC Section 1.17 |
| 7 May 2019 | Players’ age and identity must be verified before they can make a deposit or play | UKGC |
| 14 April 2020 | Ban on gambling with credit cards | UKGC |
| 31st October 2021 | Online slot design rules changed: no autoplay, no turbo spins and a minimum of 2.5 seconds per spin | UKGC |
| 27 April 2023 | Gambling Act Review White Paper published: ‘High stakes: gambling reform for the digital age’ | Gov.UK |
| April 2025 | The statutory gambling levy on operators commenced in April 2025 (Represents a change to funding and a significant transformation in the UK government’s commitment to fortifying efforts to understand, tackle and treat harm caused by gambling). | Gov.uk UKGC |
| 9 April 2025 | £5 online slot stake limit for all adults. This limit also includes the use of an ante bet. Whilst bonus buy features in slots are no longer legal. | UKGC Remote gambling and software technical standards (RTS -clause 14A) UKGC |
| 21 May 2025 | £2 online slot stake limit for 18 to 24 year olds. This limit also includes the use of an ante bet. Whilst bonus buy features in slots are no longer legal. | UKGC Remote gambling and software technical standards (RTS -clause 14A) UKGC |
| 31 October 2025 | New players must be prompted to set a financial limit before making a first deposit. | UKGC |
| 19 January 2026 | Bonus wagering capped at 10x; mixed-product promotions banned | UKGC |
| 1 April 2026 | Remote Gaming Duty rises from 21% to 40%. | HMRC Notice 455a, section 1 |
| 30 June 2026 | From 30 June 2026, all online gambling operators must provide players with the ability to set a safer gambling ‘deposit limit’. This should be based only on the amount that a player deposits in their account over a fixed period. | UKGC |
| 7 July 2026 (announced) | Financial Risk Assessments confirmed, to be introduced in stages | UKGC |
Online Slot Stake Limits
The most you can stake on a single online slot spin at a UKGC-licensed casino is £5 if you are 25 or over, and £2 if you are aged 18 to 24. The £5 limit went live for all adults on 9 April 2025 and the £2 limit for younger adults on 21 May 2025 (UKGC guidance).
| Your age | Maximum stake per spin | In force since |
|---|---|---|
| 25 and over | £5 | 9 April 2025 |
| 18 to 24 | £2 | 21 May 2025 |
The limit applies per “game cycle”, and not just the button you press. Ante bets and any extra stake placed during a spin all count towards it, so a casino cannot let you top up a £5 spin with a side stake. Separately, UK technical standards require at least 2.5 seconds between the start of one slot spin and the next.
What this means in practice: high-stakes slot play has moved to RNG table games and live casino, which have no equivalent cap. The limit is a ceiling, not a default, so casinos must still offer lower stakes. It also only binds UKGC licensees. A site letting you stake £50 a spin on a slot is almost certainly not licensed in Great Britain.
Affordability Checks (Financial Risk Assessments)
“Affordability checks” are officially called Financial Risk Assessments. On 7 July 2026, the Gambling Commission said it will introduce these in stages, with the start date for stage one still to be set (UKGC).
A check is triggered by how much you pay in, not by winning. The system will use credit reference data, requires no documents from you and will not affect your credit score.
Here’s how the UKGC plans to stage the implementation:
| Stage | Aged 25 and over | Under 25 and other high-risk groups |
|---|---|---|
| Stage 1 | Net deposits over £5,000 in a rolling 24 hours | Net deposits over £2,500 in a rolling 24 hours |
| Interim stages | Still to be set | Still to be set |
| Final stage | Over £1,000 in 24 hours, or over £3,000 in 90 days | Over £750 in 24 hours, or over £2,000 in 90 days |
It’s assumed that the majority of players will not need an assessment at all. For players who do, it’s anticipated that 97% of these will be done without friction. Those few who do need an assessment may be asked for documents or open banking data. The UKGC also says it will not take enforcement action for failing to act on an assessment in the early stages.
What this means for you: most players will never be checked. If a casino asks for payslips or bank statements today, then this comes from existing anti-money-laundering and safer-gambling duties, not from new assessments.
Age and Identity Verification (KYC)
A UKGC-licensed casino must confirm that you are 18 or over before you can deposit, play demo games or use a bonus. It must also verify at least your name, address and date of birth before you can gamble. These rules took effect on 7 May 2019 and ended the old 72-hour window, when casinos could let you play first and check later (UKGC).
Casinos must also tell you, before your first deposit, which documents they might require and when and how to send them. Most checks run automatically against electronic records, so many players never upload anything.
You may still be asked for documents later. The usual triggers are a first large withdrawal, deposits that do not fit your regular profile, or a mismatch between your details and your payment method. These requests come from anti-money-laundering law, which applies alongside UKGC rules.
What this means for you: complete verification when you sign up rather than when you first withdraw. A casino cannot keep the money that you deposited just because verification was slow, though it can hold funds while legitimate checks are completed.
Deposit Limits and Safer Gambling Tools
Since 31 October 2025, UKGC-licensed casinos must prompt you to set a financial limit before your first deposit (UKGC). Since 30 June 2026, the term “deposit limit” can only be used for a cap on the money you pay in over a set period.
What the rules require from casinos:
- A prompt to set a limit at sign-up, before your first deposit, with easy-to-find limit tools afterwards.
- Free-text limits at account level, so you choose the amount rather than picking from preset options.
- A reminder at least every six months to review your account activity if you have limits set. And at least every 12 months to consider using a limit, if you don’t already (UKGC blog).
- A reminder every six months that your funds are not protected should the operator go bust.
Why the June 2026 change matters: before this, one casino’s “deposit limit” might count withdrawals back in (a net limit) while others did not. A deposit limit now means the gross money paid in, so £100 a week means £100 a week, whatever you win or withdraw.
Lowering a limit is instant. Increasing one usually comes with a cooling-off period of at least 24 hours before it takes effect (UKGC). Beyond limits, every licensed site must offer time-outs and self-exclusion, and must be part of GAMSTOP, the free national self-exclusion scheme.
Bonus Rules, the 10x Wagering Cap and Fair Terms
Since 19 January 2026, no UKGC-licensed casino can require you to wager a bonus more than 10 times before you withdraw any winnings from it. A single offer can no longer mix product types, such as “bet on football, get casino spins” (UKGC).
The difference is significant. Under the old rules, a £10 bonus with 50x wagering meant £500 of play before you could withdraw. Under the cap, the most a £10 bonus can require is £100. The four product types that can no longer be combined in one incentive are betting, casino, bingo and lottery.
Consumer law adds a second layer. In 2018 and 2019, the Competition and Markets Authority secured commitments from major operators to drop unfair bonus terms. The core principle is that the money you deposit, and winnings from it, are yours to withdraw, and bonus terms cannot be used to take them away. Unclear or hidden significant terms can be challenged as unfair (UKGC and CMA).
The cap applies to wagering on bonus funds. Offers with no wagering at all remain allowed and sit outside the cap. Some other terms still vary between casinos and are worth reading before you opt in:
- Maximum bet while a bonus is active, often £5 or lower.
- Game contribution, where slots count 100%, and table games may count far less or nothing.
- Expiry, often 7 to 30 days to complete wagering.
- Maximum conversion, a cap on how much bonus winnings you can withdraw.
Take a look at our wagering calculator, which allows you to input bonus details to give an estimate based on game RTP of what you may earn whilst using a bonus.
Payments: The Credit Card Ban
You cannot gamble with a credit card at any UKGC-licensed casino. The ban took effect on 14 April 2020 and also covers credit cards loaded through e-wallets such as PayPal or Skrill (UKGC).
Casinos may only accept an e-wallet if the wallet provider can stop credit card funds from being used for gambling (UKGC). The UKGC’s reason was the scale of the risk: it cited research that 22% of online gamblers using credit cards were problem gamblers.
What this means for you: debit cards, bank transfer, Open Banking and compliant e-wallets are the usual options. If a site accepts your credit card for casino play, treat that as a suspicious sign that it is not licensed in Great Britain. The ban does not cover National Lottery tickets bought in person.
Advertising Rules and Unlicensed Operators
Only UKGC-licensed operators may advertise gambling to people in Great Britain, and their ads must follow the CAP and BCAP codes enforced by the ASA. Among other things, ads must not appeal strongly to under-18s, suggest gambling can solve money problems, or present gambling as a path to success. Licensed operators are also responsible for ads that their affiliates run on their behalf.
Unlicensed sites are a different category altogether. They are illegal for anyone in Great Britain, whatever licence they may hold elsewhere. They sit outside every protection on this page: no stake limits, no wagering cap, no GAMSTOP, no route to the UKGC if they refuse to pay you. The Commission treats the illegal market as a priority and published a four-part research series on it (UKGC).
The warning signs of an unlicensed site: it accepts credit cards, offers slot stakes above £5, advertises “not on GAMSTOP”, or shows no UKGC licence number. Our blacklisted casinos page lists operators that we have flagged, for your safety.
Enforcements and Penalties
The Gambling Commission can fine operators without limit, attach extra licence conditions, suspend a licence or revoke it. Most cases end in a regulatory settlement, where the operator pays money to socially responsible causes instead of a fine, and often agrees to an independent audit. The UKGC also escalates penalties for repeat offenders.
The same two failures appear in almost every case: weak anti-money-laundering controls, and not stepping in when a customer shows signs of harm. Here are some recent examples from the UKGC’s own announcements:
| Operator | Amount | Main failings | Source |
|---|---|---|---|
| QuinnBet (Gibraltar) Limited (August 2026) | £609,104 | Anti-money laundering and social responsibility | UKGC |
| Paddy Power Betfair | £2m | Social responsibility failures relating to customer interaction. | UKGC |
| NetBet Enterprises | £650,000 plus independent audit | Anti-money laundering and social responsibility | UKGC |
| In Touch Games | £6.1m | Anti-money laundering and social responsibility | UKGC |
| Gamesys | £6m | Anti-money laundering and social responsibility | UKGC |
What this means for you: a fine on its own does not make a casino unsafe to use today, but repeated actions against the same operator are worth weighing up. Regulatory actions from the UKGC are always something that we note in our casino reviews.
Data Protection and GDPR
UK casinos handle ID documents, payment details and a record of every bet that you place. This means that they fall under UK GDPR and the Data Protection Act of 2018, overseen by the ICO. Marketing by email or text also needs your consent under the Privacy and Electronic Communications Regulations (PECR).
Your main rights as a player include:
- Being able to request a copy of the personal data a casino holds on you, free of charge in most cases.
- Withdrawing your marketing consent at any time, separately from closing your account.
- Have any inaccurate data corrected.
- The ability to complain to the ICO if a casino
- mishandles your data.
One thing to know: a casino can keep some records after you close your account, because anti-money-laundering law and UKGC rules require it. Self-exclusion data is also shared with GAMSTOP by design.
Gambling Tax and What It Means for Casino Game RTP’s
Players in the UK do not pay tax on gambling winnings. Operators do: since 1 April 2026, Remote Gaming Duty on online casino profits from UK players is 40%, up from 21% (HMRC Excise Notice 455a). A new 25% rate for remote sports betting will follow from April 2027, an increase from the previous 15% rate (gov.uk).
The duty is charged on gross gaming yield, meaning stakes minus winnings paid out, and it applies wherever the operator is based.
Why players should care: a higher tax bill gives operators a reason to cut costs, and one lever is the return to player (RTP). Many slots come in several RTP versions set by the game provider, and a casino can choose which version to run. The same slot can return a high RTP of 96% on one site and 94% at another.
What this means for you: check the RTP in the game’s information panel before you play, not the figure quoted in a review or on the provider’s website. Over many spins, a two-point difference in RTP means you may lose money noticeably faster.
How To Check if a Casino Is UKGC Licensed
Checking takes under two minutes, and it is the single most useful thing you can do before depositing.
- Scroll to the casino’s footer and find its UKGC account number and the name of the licensed company.
- Search that number or company name on the Gambling Commission public register.
- Confirm the licence status is active and that the website address you are on is listed under that licence.
- Check whether the operator has any enforcement history on the register.
If the number is missing, the licence is suspended, or the web address is not listed, do not deposit. Every casino we review at CasinoHawks is checked against the register as part of how we rate casinos.
FAQ
Is online gambling legal in the UK?
Yes, for adults 18 and over, at sites licensed by the Gambling Commission. Offering gambling to people in Great Britain without a UKGC licence is illegal.
What is the maximum stake on UK online slots?
£5 per spin if you are aged 25 or over, and £2 if you are 18 to 24. The limits apply to online slots only, not RNG table games or live casino.
Are affordability checks in force?
Not yet. The UKGC confirmed in July 2026 that Financial Risk Assessments will start in stages, beginning with very high spenders at the largest operators. No start date has been set.
What is the maximum wagering requirement on a UK casino bonus?
10 times the bonus amount, since 19 January 2026.
Can I use a credit card at a UK online casino?
No. Credit card gambling has been banned since 14 April 2020, including credit cards used through e-wallets.
Do I pay tax on casino winnings in the UK?
No. Operators pay Remote Gaming Duty on their profits, though, which is currently 40%.
Why does a casino want my ID before I can play?
UKGC rules require your age and identity to be verified before you deposit or gamble. It protects under-18s and helps stop fraud and money laundering.
Where can I get help if gambling stops being fun?
Call the National Gambling Helpline free on 0808 8020 133, 24 hours a day, or visit GamCare. You can block yourself from every UKGC-licensed site at once with GAMSTOP. Our safer gambling guide covers the tools in more detail.
Author
