UKGC Enforcement, Explained
The Gambling Commission does not run casinos. It watches them, and when an operator's controls fail, the regulator moves. A licence review can end with tighter conditions, a suspension, or a settlement that reaches eight figures. Headlines carry the number. The case papers carry the part that matters more: which control failed, how long it stayed broken, and how many customers lost money while it did. Read enough of those papers and you spot the same failures repeating across brands.
Under the Gambling Act 2005 the commission licenses betting shops, online sportsbooks, bingo halls and remote casinos. One regulator covers a Saturday punt at Aintree and a late session on a smartphone, so the rules for how Grand National betting works sit beside the rules for a live roulette table. A firm that runs both products answers to the same licence conditions, the same reporting duties and the same enforcement team.
Every operator needs a licence, and the commission sets out what the business must do. Verify who your customers are. Watch for signs of harm. Keep records. Report anything suspicious. What a UK casino licence covers reaches well past the games themselves, into advertising claims, complaints handling and the time a withdrawal takes to land in your bank. The conditions are public, and they explain why a cashout can drag on for a day while a deposit clears in seconds.
Where operators get caught
The commission opens a review when it suspects a breach of a licence condition. Few of the strongest cases involve a rigged game. Rigging a slot takes skill and equipment. Ignoring a customer who deposits a month's wages in one evening takes neither, and operators keep doing it. Compliance failures cost less to fix than they cost to ignore, but the fix competes with marketing spend for the same budget.
Two settlements set the scale. Entain paid £17m in 2022 after the commission found anti-money laundering and social responsibility failures across its brands. William Hill paid £19.2m in 2023 for similar gaps, including weak checks on customers who had just signed up. Both settlements obliged the firms to pay for an independent audit and rebuild the systems that failed. The commission publishes the reasoning behind each case, and the details read like a checklist of everything a compliance team should already be doing.
Most failures trace back to customer checks. A player deposits £40,000 across a few weeks and nobody calls. A man in his twenties loses his wages overnight and the operator keeps taking deposits. The rules on the reason a casino wants your payslip exist to break that pattern, and a firm that skips the check pays for it later with a penalty package and a public dressing-down. The commission treats a missed check as a missed chance to intervene.
Your account holds your name, address, payment history and game data, and the compliance team uses all of it to build a risk score. The data held on your casino account is the raw material for every check that follows. Miss a piece of it and the score fails, which is why operators ask for documents that feel unrelated to gambling: a bank statement, a utility bill, a payslip.
Affordability checks and the white paper
The Gambling Act review, published as a white paper in April 2023, pushed operators toward asking for proof of income once a customer's losses cross a threshold. Pilot schemes tested the idea before the commission wrote the rules. The commission has kept tightening the triggers since, and light-touch checks now run on accounts that once sailed through. Operators hate the cost. The commission points at the cases where nobody checked and a customer lost a house deposit.
Affordability checks draw complaints from punters who bet for fun and get asked for paperwork. The commission's answer is proportionate: a customer spending £50 a month on football accumulators stays untouched, while one losing £5,000 a month gets a request. The threshold moves, and operators build the systems that decide where it sits. When those systems fail, the penalty lands on the operator, not the customer.
The credit card ban
Since April 2020 you cannot deposit at a UK gambling site with a credit card. The commission banned it because borrowing to gamble turns a losing session into debt. Debit cards, PayPal, Apple Pay, Google Pay, Trustly and Paysafecard all still work, and each one behaves differently. How deposit methods compare decides how fast your money moves and how easy it is to stop. None of them let you bet money you do not have.
Online slots carry their own limit. The commission capped spins at £5 for most adults and £2 for players aged 18 to 24, and brought the rules in during 2025. The £5 cap on slot spins targets the product where losses build fastest, because a slot can spin every few seconds for hours. The lower rate for younger players reflects the evidence that this group takes bigger risks relative to income.
Losses build fast on slots for a reason. Short spin cycles, near-miss visuals and an autoplay button compress an hour of betting into minutes. Why a slot holds your attention traces back to that design, and the stake cap exists to slow the bleed. Designers know how long a losing run keeps a player watching, and they build around that number.
Reading a licence before you deposit
You can check any operator before you hand over a card. The commission publishes a register of licensed businesses, and a legitimate site shows its number in the footer. A brand such as Felixspin casino in UK carries a UKGC licence, which means the games come from approved suppliers and you can take any dispute to an approved alternative dispute resolution service. Run the number against the register. If the site cannot show a UKGC licence at all, close the tab.
Reviews help when the reviewer does the work. A useful one tests withdrawal speed, the support queue and the licence before handing out a score. How a reviewer vets a casino explains the checks behind that score, and a review that skips them tells you nothing about the site. Star ratings cost nothing to write. Verification takes a deposit, a cashout and a wait on live chat.
Accounts do not last forever. You can close one, an operator can close one, and a long quiet spell turns it dormant. The stages an account passes through run from sign-up through verification, activity and closure, and the commission sets out the rules for each stage in the licence conditions. Ask for your data when you leave, and the operator must hand it over within a month. Dormant balances sit with the firm until you claim them.
Self-exclusion works the same way across every licensed site. GamStop lets you block yourself from all UK-licensed operators with one form, and the block holds for a minimum of six months. BeGambleAware runs free support by phone and chat, and GamCare runs a helpline and a forum. Operators must promote both, and a firm that buries the links risks a fine on its own.
Enforcement protects the market. Your protection is the licence number in the footer, the checks on your account and the tools you set before a bad run. Use them early. A block you set on a good day costs you nothing. The same block after a bad night arrives too late.