Every online casino looks trustworthy on its homepage. The real difference sits in documents most players never open: a licence register, a complaints procedure, a page of bonus terms. Ten minutes with those three separates a regulated operator from a site that can hold a withdrawal with no one to answer to. Here is what to check, where to find it, and what each finding means.
Licensing and Regulation
The licence is the first check, and it decides whether every other check matters. The Gambling Commission's public register lists every business holding an operating licence, along with any action taken against it (Gambling Commission, Public Register). Sanctions and settlements stay on that register for three years from publication, per the same page. A footer seal on a casino site is a claim. The register entry is the evidence, and checking a casino licence against it takes only a few minutes.
Register Fields Worth Reading
The business register carries more than a yes-or-no licence status. The Commission's data notes describe each field, and four of them do most of the work (register data notes).
| Register field | What it records | What a pass looks like |
|---|---|---|
| Licence status | Whether the operating licence is current | Active |
| Trading names | Brand names the business has declared | The brand on the site appears in the list |
| Domain names | Website addresses declared, marked Active, Inactive or White label | The exact URL appears with Active or White label status |
| Regulatory actions | Sanctions and settlements imposed after investigation | None, or past actions with remedial steps completed |
The Commission adds that trading and domain names are supplied by the business itself and that it cannot guarantee their accuracy (per the same notes). A missing domain is still a red flag. A listed domain confirms declaration, not conduct.
Shared Licences and White Labels
Many UK brands don't hold their own licence. A domain marked White label on the register trades under another company's licence, and several brands on one licence form a network of sister sites. The practical consequences follow the licence holder rather than the brand. Complaints run through the licence holder's procedure and its named dispute service, per the Commission's complaints code (LCCP 6.1.1).
Two further consequences are structural inference rather than documented rule. A regulatory penalty against the licence holder is relevant to every brand on that licence, not only the brand named in the press release. Network terms can limit welcome offers to one per person across the group (verify against live terms). Checking the licence number, then searching the register by that number, shows every sister brand in one place.
Offshore-Only Licences
A site that accepts British players while showing only a Malta, Curacao or similar licence sits outside the Commission's regime. The Commission states that businesses it doesn't license aren't required by it to offer dispute resolution (Gambling Commission, complaints and ADR guide). That removes the free, independent escalation route covered later on this page. An offshore licence can sit alongside a UK licence on a multi-market brand. It cannot replace one for a British customer.
Game Fairness and Independent Testing
Game fairness on a UK-licensed site is a tested outcome, not an operator promise. Remote casino licensees must comply with the Commission's remote technical standards (RTS) under licence condition 2.3.1, and games and random number generators (RNGs, the software that produces each result) must be tested by an approved test house. The Commission keeps a public list of approved test houses, last updated 2 March 2026. Test houses must be financially independent from any operator.
What the Testing Covers
The Commission's testing strategy sets out three layers of assurance (testing strategy).
- Pre-release game testing. Maths verification, simulation and game play confirm the game delivers its stated return to player (RTP).
- RNG testing. The test house checks the generator and the mapping that turns raw numbers into reel positions or card draws.
- Annual audit. An approved test house confirms the licensee runs live RTP monitoring each year (testing strategy, annual games testing).
Test reports go to the Commission before release, per the procedure page above. They are not routinely published to players.
Limits of a Fairness Check
Testing confirms that a game pays what it says it pays. It doesn't confirm that the stated RTP is generous, and the same title can be released at more than one RTP setting by its supplier. Where a site shows RTP in a game's information panel, that figure is the tested theoretical return for the version on that site. Opening the panel before the first spin settles which version is live. Players outside the UK regime have no equivalent check on games served by unlicensed sites.
Security and Data Protection
Security is one area where the licence carries most of the weight. The Commission's information security standards for licensed remote operators are based on ISO 27001 (the international standard for information security management) and cover all critical gambling systems. Compliance is checked by third-party audit under the Commission's testing strategy for remote gambling. That is a stronger basis than any badge a site places on its own footer.
Visible Checks on the Site
A player can confirm three things without specialist tools.
- Encrypted connection. The address bar shows https on every page, including the cashier and the registration form.
- Privacy policy. The policy names the data controller, which matches the licence holder on the register.
- Account protection. Two-step login and login alerts appear in account settings where the operator offers them.
The padlock deserves a qualification. An encrypted connection proves the data is protected in transit. It proves nothing about who receives that data, and copycat sites run valid certificates too. The match between the privacy-policy controller and the register entry is the more useful test. Two-step login availability is not surfaced from the register and varies by operator.
Payments, Withdrawals and Identity Checks
The cashier is where most trust problems surface, and the rules here are specific. Credit card gambling has been banned in Great Britain since April 2020 (Gambling Commission, National Strategic Assessment 2020). Tougher age and identity verification rules arrived in May 2019, per the same timeline. A UK-facing site that accepts a credit card deposit is breaking a licence condition or isn't licensed at all.
Customer Funds Protection
Every licensed operator holding customer money must state in its terms how that money is protected if the business becomes insolvent (Harris Hagan). The statement must appear at the point of first deposit, per the same briefing. There is no legal duty to protect customer funds, so the rating is a genuine point of difference between operators.
| Rating | What it means on insolvency |
|---|---|
| Not protected – no segregation | Customer money is mixed with company money |
| Not protected – segregation of customer funds | Held in a separate account but still exposed to creditors |
| Medium protection | Segregated under a Quistclose trust or equivalent arrangement |
| High protection | Held in an independent trust account |
Source: Gambling Commission, customer funds statements and the Harris Hagan briefing above. Since 31 October 2025, operators rated not protected must remind customers of that status every six months, per the same briefing.
Withdrawal Terms and Verification
Identity checks themselves are normal and required. How long a payout takes after them depends on the payment method, so withdrawal times by method are worth comparing before choosing one. A document request that arrives with the first withdrawal, rather than at sign-up, is what turns a check into a delay. Completing verification before the first deposit removes the most common cause of a stalled payout. Run a small test withdrawal before you commit larger sums.
The terms worth reading before any deposit are these.
- Processing time. A stated pending period, then a stated payment time per method.
- Limits. Minimum and maximum withdrawal amounts per transaction and per month.
- Fees. Any charge on withdrawals, including charges on dormant accounts.
- Method rules. Whether withdrawals must return to the deposit method first.
Where an operator publishes none of these, the gap is itself a finding.
Bonus Terms and Conditions
Bonus terms are now a compliance test as much as a value test. Since 19 January 2026, wagering requirements (the number of times bonus funds must be staked before winnings can be withdrawn) on UK-licensed offers are capped at 10 times (Gambling Commission, consultation response). The same change bans promotions that require play across different product types, such as betting and casino, per that response. Before the cap, many major operators set welcome-offer wagering at 40 or 50 times (Wiggin).
Reading the Cap Correctly
The Commission's own worked example shows the scale of the change. A £10 bonus at 50x required £500 of play, while the same bonus at the new cap requires £100 (Intergame). The cap is a ceiling, though, and the remaining bonus terms still decide what an offer is worth.
| Term | What to check |
|---|---|
| Wagering multiple | 10x or lower on bonus funds |
| Game weighting | Share of each stake that counts towards wagering, by game type |
| Maximum win | Any cap on winnings converted from the bonus |
| Expiry | Days allowed to complete wagering |
| Maximum bet | Stake limit while bonus funds are active |
Offers That Fail on Sight
Three findings disqualify an offer outright for a British player. A wagering multiple above 10x on a current offer means the terms are out of date or the operator sits outside the Commission's regime. A welcome offer that requires sports bets to unlock casino spins breaches the mixed-product ban. Terms that can't be found before deposit are the third. Comparing the headline figure with the full terms page before you claim settles all three.
Reputation and Complaints Handling
The complaints route is fixed by regulation, so its presence on a site is checkable. A UK operator has eight weeks to resolve a complaint, after which the player can take an unresolved dispute to an alternative dispute resolution (ADR) provider (Gambling Commission, complaining about a gambling business). The ADR service is free and independent, and it has up to 90 days to adjudicate once it holds the full information (Gambling Commission, ADR guide). The Commission itself doesn't decide individual complaints, per the first page above.
What a Compliant Complaints Page Shows
- The operator's own complaints procedure in plain English.
- The name of its approved ADR provider and how to contact it.
- The eight-week timeframe, stated or implied by the escalation steps.
The ADR route has limits worth knowing before relying on it. Under the Commission's guidance on ADR complaints, providers don't accept complaints about customer service quality or an operator's refusal to accept a customer. A dispute over a withheld withdrawal qualifies. A dispute over slow live chat doesn't.
Reading Review Scores
Aggregate scores are tertiary evidence and need three numbers attached to mean anything: the score, the sample size and the date. A rating of 1.8 from 128 reviews says more than a rating of 4.2 with no count shown. Patterns in one-star reviews matter more than the average. Repeated mentions of verification loops or delayed withdrawals point to operator behaviour, while scattered complaints about losing point to the product. Cross-checking those patterns against the regulatory actions register shows whether the Commission has acted on the same conduct.
Customer Support Quality
Support quality is the one area on this page with no regulatory benchmark. The Commission's complaints guidance requires procedures that are simple and easy to find on operator websites (Gambling Commission, complaints and disputes guidance). It sets no standard for live-chat response times. This guide didn't test support response times for any operator, so the checks below are ones a reader runs directly.
| Check | Pass |
|---|---|
| Contact channels | Live chat plus email, with stated hours |
| Pre-deposit question | A specific answer on withdrawal times for a named method |
| Terms question | A direct answer on the wagering multiple of the current offer |
| Escalation | The agent can name the ADR provider without searching |
An agent who answers the withdrawal question with a time range and a method is a better signal than a fast greeting. Asking both questions before you deposit costs nothing and tests the answers that matter later.
Safer Gambling Tools
Safer gambling tools on a UK-licensed site are mandatory, so their absence is a compliance failure rather than a design choice. Since 31 March 2020, every online operator licensed in Great Britain must participate in National online self-exclusion (the national online self-exclusion scheme), and the Commission suspended two licences within days of that deadline for non-integration (Harris Hagan). Since 31 October 2025, operators must prompt customers to set a financial limit before the first deposit (Harris Hagan).
| Tool or rule | Requirement | In force since |
|---|---|---|
| national self-exclusion participation | Mandatory for all online licensees | 31 March 2020 |
| Slot stake limit, age 25+ | £5 maximum per game cycle | 9 April 2025 |
| Slot stake limit, age 18–24 | £2 maximum per game cycle | 21 May 2025 |
| Deposit limit prompt | Before first deposit, editable at any time | 31 October 2025 |
| Account review reminder | Every six months | 31 October 2025 |
Sources: Gambling Commission, online slots stake limit guidance for the stake limits, and the Harris Hagan briefings above for the rest.
What Absence Signals
A site with no deposit-limit prompt at registration, or a slot that accepts a £10 spin, is not operating under these rules. Either finding points to an unlicensed operator. A site that advertises itself as available to players registered with the national online self-exclusion scheme is, by definition, outside the Commission's regime. Free, confidential support is available from the National Gambling Helpline run by GamCare.
Ownership and Site Transparency
A licensed site has to say who runs it. Licence conditions 8.1.1 to 8.1.3 govern how operators display their licensed status on the screens customers use, including websites and apps (Harris Hagan, LCCP updates). The footer of a compliant UK site therefore carries a legal entity name and a licence number that both match the register.
The Footer Test
Four items belong in the footer or a linked About page.
- The legal name of the operating company, matching the register's account name.
- The Commission account number, with a link to the register entry.
- A registered office address.
- Direct links to terms, privacy policy, complaints procedure and safer gambling pages.
The qualification here concerns copycat sites. A cloned site can reproduce a genuine footer word for word, including a real licence number. The decisive check is the domain column on the register. If the exact web address isn't listed against that licence, the footer can't be relied on.
Trust Checklist
The ten checks below run in order of weight, with documentary checks first. The first three are disqualifying on failure. The rest refine a shortlist.
| # | Check | Where to look | Pass |
|---|---|---|---|
| 1 | Licence status | Commission public register | Active |
| 2 | Domain declared | Register, domain names | Exact URL listed |
| 3 | Dispute service | Complaints page | Approved ADR provider named |
| 4 | Regulatory actions | Register, regulatory actions | None, or remediated |
| 5 | Bonus wagering | Offer terms | 10x or lower, no mixed-product conditions |
| 6 | Funds protection | Terms, first-deposit screen | Rating stated, medium or high preferred |
| 7 | Withdrawal terms | Payments page | Times, limits and fees published |
| 8 | Safer gambling | Registration flow | Deposit-limit prompt, national self-exclusion notice |
| 9 | Review patterns | Review platforms | Score with count and date, no verification-loop cluster |
| 10 | Support answers | Live chat | Specific withdrawal time and ADR name |
Warning Signs
Some findings end the assessment on their own. Each item below either breaches a current Commission rule for British customers or removes the protections those rules provide, per the sources cited in the sections above.
- No licence number, or a number with no match on the register.
- A licence from another jurisdiction only, on a site accepting British players.
- Credit card deposits accepted.
- Wagering above 10x on a current offer, or casino spins tied to sports bets.
- No deposit-limit prompt before the first deposit.
- Marketing aimed at players registered with the national online self-exclusion scheme.
- Slot stakes above £5 per spin.
- No named ADR provider in the complaints procedure.
One further sign is behavioural rather than regulatory. Repeated document requests after a withdrawal request, with new items asked for each time, match the verification-loop pattern described under review scores above. It isn't a breach by itself. Combined with any item above, it is decisive.
Final Verdict
The register check is the single most decisive test of a casino's trustworthiness. It confirms the licence, the domain and the enforcement history in one search, and every protection on this page depends on it. The right supporting checks vary by what a player needs from the site.
| Use case | Checks that matter most |
|---|---|
| First account at a UK casino | Register entry, deposit-limit prompt, funds protection rating |
| Choosing between sister sites | Shared licence number, regulatory actions on that licence, network bonus terms |
| Claiming a welcome offer | Wagering multiple, game weighting, maximum win, expiry |
| Large or frequent withdrawals | Withdrawal limits, verification at sign-up, ADR provider |
| Existing dispute with an operator | Complaints procedure, eight-week clock, named ADR provider |
A site that passes the register check and the first three rows of the checklist meets the documentary baseline. Everything beyond that is a matter of preference rather than safety, and setting deposit limits and other safer play tools belongs on every account from day one. Running the register search before you register is the check that does the most work.
How We Tested
This guide is built from documentary sources, as of October 2026. We read Gambling Commission guidance, licence conditions, consultation responses and register documentation, and law-firm briefings where the Commission's own pages didn't state an effective date. Every regulatory claim above names its source in the same sentence or the sentence after.
We did not open accounts, make deposits or request withdrawals for this guide. We did not test support response times at any operator. Regulatory dates and thresholds change, so readers should verify against live terms and the current register before relying on any figure here. Full scoring criteria for individual casino reviews sit on the [methodology page link].
Sources
- Gambling Commission – Public Register
- Gambling Commission – Register of gambling businesses, data notes
- Gambling Commission – LCCP 6.1.1 Complaints and disputes
- Gambling Commission – Handling complaints and ADR
- Gambling Commission – Complain about a gambling business
- Gambling Commission – Taking your complaint to an ADR provider
- Gambling Commission – Complaints and disputes guidance
- Gambling Commission – Test houses
- Gambling Commission – Testing strategy for compliance with remote gambling and software technical standards
- Gambling Commission – Customer funds statements
- Gambling Commission – Socially responsible incentives consultation response
- Gambling Commission – Online slots stake limit guidance
- Gambling Commission – National Strategic Assessment 2020, timeline
- Harris Hagan – Customer-led tools and customer funds
- Harris Hagan – the national online self-exclusion scheme
- Harris Hagan – LCCP updates
- Wiggin – New promotion rules
- Intergame – Cross-selling ban delayed until January
Common questions
How can I tell if an online casino is licensed?
The Gambling Commission's public register confirms it. Searching by account number or company name returns the licence status, declared domains and any regulatory actions (Gambling Commission, Public Register). A matching footer number without a matching domain isn't enough.
Are casinos licensed outside the Gambling Commission safe for UK players?
An offshore-only casino serving British players sits outside the Commission's protections. The Commission doesn't require unlicensed businesses to offer dispute resolution, per its complaints and ADR guide. Stake limits, the 10x wagering cap and national online self-exclusion coverage also don't apply.
Why is a withdrawal taking so long?
The operator's published pending period and any outstanding identity checks are the first two places to look, followed by the usual withdrawal times for the payment method used. Where neither explains the delay, the formal complaints procedure starts the eight-week clock. Escalation to the named ADR provider follows if the complaint isn't resolved.
What happens if a casino won't pay out?
A written complaint to the operator comes first. After eight weeks without resolution, the dispute can go to the operator's approved ADR provider free of charge (Gambling Commission, ADR guide). The provider has up to 90 days to decide once it holds full information.