Markets

United Kingdom (Great Britain): iGaming Payments, KYC, RG and Marketing Rules

A one-page summary of the rules that shape payments, verification, safer gambling and marketing for online operators licensed by the Gambling Commission, with links to the detailed guides.

6 min readPart of markets

On this page
  1. Who regulates online gambling in Great Britain?
  2. Which payment rules apply?
  3. What are the KYC and AML rules?
  4. What responsible gambling rules apply?
  5. What are the marketing and bonus rules?
  6. What recent enforcement matters?
  7. What should an operator check first when entering Great Britain?
  8. How do UK players most often contact support?
  9. What does a compliant UK player journey look like?
  10. What mistakes do operators commonly make?
  11. Checklist
  12. Frequently asked questions
  13. Sources
  14. More guides

Online gambling in Great Britain is licensed and regulated by the Gambling Commission under the Gambling Act 2005 and the Licence Conditions and Codes of Practice (LCCP). Key rules for payments and compliance: identity and age verified before play, credit cards banned since April 2020, no reverse withdrawals, customer due diligence under the Money Laundering Regulations 2017, financial vulnerability checks at £150 net deposits in 30 days with staged credit-data risk assessments to follow, GAMSTOP participation, a 10x wagering cap and marketing consent by product and channel.

Key takeaways

  • Verify identity and age before deposit or play.
  • Credit cards banned; reverse withdrawals banned; withdrawals must not trigger information requests that could have been made earlier [1] [2].
  • FVCs at £150 in 30 days; FRAs confirmed for a staged rollout [3] [4].
  • 10x wagering cap and mixed-product ban from 19 January 2026 [5].
  • Marketing needs opt-in by product and channel; self-excluded customers removed within two days [6] [7].
18minimum age
Apr 2020credit card ban
10xwagering cap
£150FVC trigger

Who regulates online gambling in Great Britain?

The Gambling Commission licenses and regulates gambling under the Gambling Act 2005. Licensees must comply with the LCCP and the Remote Technical Standards. The Commission publishes public statements on enforcement cases, which are a useful guide to its priorities; recent ones covered withdrawal delays, source of funds and customer interaction failures [8] [9].

Which payment rules apply?

Rules at a glance
Area Rule in brief Deep guide
Credit cards Banned for gambling since 14 April 2020, including e-wallets funded by credit [1] Payment methods by market
Withdrawals No friction; explain delays; no new information requests that could have been asked earlier; reverse withdrawals banned [2] Casino withdrawals in the UK
Closed loop Payouts to the deposit method first How casino withdrawals work
Deposit limits Gross deposit limits must be offered from 30 September 2026 [10] Deposit limits by market

What are the KYC and AML rules?

Remote operators verify name, address and date of birth before deposit or play. Casino operators are subject to the Money Laundering Regulations 2017, including risk-based CDD, EDD and PEP rules under regulation 35, with domestic PEPs a lower risk starting point since 2024 [11] [12]. Sanctions screening uses the OFSI consolidated list. See KYC requirements in the UK and source of funds.

What responsible gambling rules apply?

SR code 3.4.3 requires monitoring from account opening across seven indicator groups and prompt, proportionate action, including stopping marketing and bonuses on strong indicators [13]. FVCs apply at £150 net deposits in 30 days; FRAs start at £5,000 net deposits in 24 hours (£2,500 under 25) at the largest operators [3] [4]. Online slots have stake limits and GAMSTOP participation is mandatory [7]. See markers of harm.

What are the marketing and bonus rules?

Wagering is capped at 10 times the bonus and mixed-product bonuses are banned from 19 January 2026 [5]. Direct marketing needs opt-in consent by product and channel (SR code 5.1.12, from 1 May 2025) [6]. High-value customer schemes have specific requirements since 31 October 2020. Self-excluded customers must be removed from marketing within two days [14]. See bonus compliance.

What recent enforcement matters?

Recent Gambling Commission cases
Case Date Theme Source
L&L Europe, £0.9m October 2026 Withdrawal delays, deferred checks, unfair terms [8]
Grosvenor, £5.01m October 2026 Source of funds, crypto, customer interaction [9]
QuinnBet, £609,104 August 2026 Recycled winnings assumptions, SAR timeliness, limits [15]

What should an operator check first when entering Great Britain?

  1. Licence and personal licencesA Gambling Commission operating licence and personal management licences for key people.
  2. PaymentsDebit cards, bank transfer and e-wallets; no credit cards [1]; no reverse withdrawals.
  3. Verification before playIdentity, age, GAMSTOP and PEP or sanctions checks before deposit [7] [12].
  4. Financial checksFinancial vulnerability checks from £150 net deposits in 30 days [3], and financial risk assessments as they phase in [4].
  5. Marketing consentConsent by product and channel [6]; bonus wagering capped at 10x [5].
  6. Customer interactionMonitor indicators of harm and act on them [13].
  7. Complaints and ADREight-week complaints process and an approved ADR provider.

How do UK players most often contact support?

Common UK support topics
Topic Why it comes up Guide
Withdrawal holds Checks triggered by spending or AML risk UK withdrawals
Verification Electronic checks failed or documents requested UK KYC
Financial checks Players asking why they are being checked affordability checks
Bonus terms Wagering and product restrictions bonus compliance
Limits and self-exclusion Setting limits or joining GAMSTOP self-exclusion schemes

For support teams, see withdrawal support automation guide and how to automate withdrawal support in online casinos.

What does a compliant UK player journey look like?

  1. Identity, age, GAMSTOP, PEP and sanctions checks; marketing preferences by product and channel.
  2. Debit card or pay-by-bank; credit cards blocked.
  3. FVC runs automatically.
  4. Single-product, wagering at or below 10x.
  5. Approved by rules; closed loop to the debit card.

What mistakes do operators commonly make?

Checks at withdrawal

Contradicts Commission expectations [2].

Marketing without channel consent

Breaches SR code 5.1.12 [6].

Ignoring support signals

Customer-led contact is an indicator of harm [13].

Treating FVCs as the whole affordability picture

Financial risk assessments and customer interaction duties also apply.

Checklist

  • Verify before play.
  • Credit cards blocked.
  • FVCs live; FRA plan in place.
  • GAMSTOP integrated.
  • 10x cap and single-product offers.
  • Consent by product and channel.
  • Two-day suppression.
  • Eight-week complaints process with named ADR.
  • Online slots stake limits by age.

Frequently asked questions

Who regulates online gambling in the UK?

The Gambling Commission, for Great Britain.

Is gambling with credit cards allowed?

No, since 14 April 2020.

What is the UK wagering cap?

10 times the bonus from 19 January 2026.

What are FVCs?

Light-touch public-record checks at £150 net deposits in 30 days.

What is GAMSTOP?

The national online self-exclusion scheme.

Can players cancel withdrawals?

No, reverse withdrawals are banned.

Do UK operators need marketing consent?

Yes, opt-in by product and channel.

What is the minimum age?

18.

What is the online slots stake limit in Great Britain?

£5 per spin for adults aged 25 and over, and £2 for 18 to 24-year-olds.

Can UK operators accept credit cards?

No. Gambling with credit cards has been banned since April 2020.

How long do UK operators have to resolve complaints?

Eight weeks, after which the customer can go to ADR.

Sources

  1. Gambling Commission: credit card ban
  2. Gambling Commission: expectations concerning account withdrawals
  3. Gambling Commission: financial vulnerability checks
  4. Gambling Commission: financial risk assessments
  5. Gambling Commission: gambling promotions to be safer and simpler
  6. CMS: direct marketing requirements
  7. Gambling Commission: LCCP 3.5.5
  8. Gaming Intelligence: L&L Europe settlement
  9. Gambling Commission: Grosvenor public statement
  10. igaming.cx: UK deposit limit rules from 30 September 2026
  11. Gambling Commission: AML guidance
  12. Gambling Commission: PEP notice
  13. Gambling Commission: customer interaction guidance
  14. Gambling Commission: LCCP 3.5.3
  15. Gambling Commission: QuinnBet public statement

Casino withdrawals in the UK

LCCP withdrawal rules, the reverse withdrawal ban, closed loop, ADR and Gambling Commission cases.

KYC requirements in the UK

Verification before play, GAMSTOP, MLR 2017 due diligence and financial vulnerability checks.

Affordability checks

UK financial vulnerability checks, Dutch thresholds, German limits and Sweden’s duty of care.

UK financial risk assessments

The staged FRA rollout: thresholds, data, timelines and how to prepare.

Bonus and promotion compliance by market

Bonus and inducement rules in the UK, Ontario, Brazil, Netherlands, Sweden, Germany and US states.

Further reading elsewhere