How online casinos are regulated

How online casinos are regulated: the short answer

UK online casino regulation works in layers. Parliament sets the law. The Gambling Commission turns it into licences and conditions. Technical standards define how games must behave, approved laboratories test them, the Advertising Standards Authority polices marketing, and HMRC collects duty on operators' profits. Each layer has a different job, and together they decide what a casino can and can't do with your money, your data and your time.

This guide explains each layer in turn, then shows what it means for you as a player. If you just want to confirm that a particular casino is covered, our guide to checking a casino licence is the quicker route. Our UK casino rules hub has a page on each individual rule, and the rest of our online casino guides put them into practice.

The law behind UK online casino regulation

The Gambling Act 2005 received royal assent on 7 April 2005 and was the first UK law to regulate internet gambling specifically. It created the Gambling Commission, which took over from the Gaming Board for Great Britain on 1 September 2007, and replaced older laws including the Gaming Act 1968.

The original Act licensed operators based in Great Britain, but many online casinos serving British players were based overseas. The Gambling (Licensing and Advertising) Act 2014 closed that gap. From 1 November 2014, any business providing or advertising remote gambling to people in Great Britain has needed a Commission licence, wherever it is located. Our page on point of consumption licensing explains the change, and the history of UK gambling law covers the earlier statutes.

The Gambling Act 2005 and the Commission's rules cover Great Britain only. Northern Ireland has its own law, dating from 1985, and no full framework for online gambling; see gambling law in Northern Ireland.

The Gambling Commission: licensing UK online casinos

The Gambling Commission is sponsored by the Department for Culture, Media and Sport and regulates arcades, betting, bingo, casinos, gaming machines, lotteries and remote gambling. An online casino needs a remote casino operating licence, which is a distinct licence activity. There's no requirement to be incorporated in a particular country, but a UK address for service is required.

Licensing doesn't stop at the company. Senior people in key roles, such as the chief executive and the heads of finance, marketing, compliance, IT and anti-money laundering, need a Personal Management Licence, which costs £463 and is renewed every five years. That makes named individuals answerable for how the casino is run. Local authorities, not the Commission, issue premises licences for land-based venues. Our page on remote gambling licences goes into the licence types.

What the Commission doesn't do is settle individual disputes between players and casinos. That job sits with the casino's own complaints process and then an independent ADR provider.

The LCCP: rules every licensed casino must follow

Every licence comes with the Licence Conditions and Codes of Practice, usually shortened to the LCCP. The current online version took effect on 29 July 2026, and the full text is on the Commission's LCCP page (opens in a new tab). These are the provisions you're most likely to notice as a player:

The LCCP is long, and our LCCP explainer walks through it section by section. Two points are worth stressing. First, January 2026 brought no new ban on time-based offers: the changes were the 10x cap and the mixed-product ban, alongside a carried-over rule that an offer can't be changed or increased because you hit the qualifying spend faster. Second, the credit-reference financial risk assessments sometimes described as affordability checks were only piloted and aren't live.

Technical standards and game testing

The remote technical standards (RTS) set out how online games must work. They're the reason UK games behave differently from those in some other markets. The main ones for casino players are:

• RTS 3: the RTP or likelihood of winning, rules and payouts must be available before you play.
• RTS 7: random outcomes must be acceptably random, mapped fairly to the published paytables, and games can't swap losing results for near misses. Games simulating cards, dice or wheels must match the real device's probabilities.
• RTS 14: no autoplay, at least 2.5 seconds per slot spin and 5 seconds per cycle for other casino games, no turbo or slam-stop, no celebrating a return that's no more than your stake, and one game at a time.

Before a new game or random number generator can go live, an approved test house must test it and send its report to the Commission. RNG testing covers documentation, source code and statistical tests of raw output, and in-house updates are audited each year. The Commission lists 14 approved test houses (opens in a new tab), among them eCOGRA, GLI and BMM entities. Our pages on remote technical standards and casino game testing labs explain the process.

How casino advertising is regulated

Gambling adverts fall under the CAP Code for non-broadcast media and the BCAP Code for TV and radio, enforced by the Advertising Standards Authority. Section 16 of the CAP Code on gambling (opens in a new tab) requires marketing to be socially responsible and to protect under-18s and vulnerable people. Since 1 October 2022, adverts must not be of strong appeal to under-18s, and nobody who is or looks under 25 can be shown gambling or playing a significant role.

Promotions must state their significant conditions in the advert itself, which is why offer boxes carry key terms such as deposit, spin value and expiry. The LCCP links the two systems: licensees must follow the advertising codes, so a breach can become a licensing matter. The gambling advertising rules page covers the detail.

Duty, the statutory levy and who pays

Players in the UK don't pay tax on gambling winnings. Operators pay remote gaming duty on their profits instead, and the rate rose from 21% to 40% on 1 April 2026. See gambling tax in the UK for how it works.

Since April 2025 operators have also paid a statutory levy to fund research, prevention and treatment of gambling harm, replacing the old voluntary contributions. Online operators pay 1.1% of the previous year's gross gambling yield. The money is split 20% to research, 30% to prevention and 50% to treatment, the last mainly through the NHS. The charity GambleAware, which previously handled much of the voluntary funding, has wound down. The National Gambling Helpline, run by GamCare on 0808 8020 133, is the free 24/7 helpline. See our page on the statutory levy.

How online casino regulation has changed since 2023

The government's gambling white paper, published in April 2023, set off the biggest round of changes since the 2005 Act. Most of its online proposals are now in force:

Not everything has happened. Credit-reference financial risk assessments remain a pilot with no decision to roll them out, and no gambling ombudsman has been created. The gambling white paper explainer tracks each proposal.

Enforcement: what happens when casinos break the rules

The Commission can fine operators, agree settlements, add conditions to a licence, suspend it or revoke it. Most recent penalties relate to failures in customer interaction or anti-money-laundering checks rather than game fairness. The Commission's enforcement action list (opens in a new tab) publishes every case.

Suspension is used too: in November 2022 the Commission suspended LEBOM Limited for failing to take part in GAMSTOP. A fine doesn't necessarily mean a casino is unsafe today, but the record is useful context when choosing where to play.

What UK casino regulation means for you

All of this adds up to a set of practical rights at any licensed casino. Your age and identity are checked before you play. You can withdraw your money without unreasonable delay, you can't be made to take it in instalments, and the casino can't confiscate it because you didn't log in or verify within a time limit. You choose which marketing you receive. You can set limits, take time-outs and self-exclude. And if something goes wrong, there's a route to an independent decision.

1. Raise the problem with the casino's support team and keep a record of dates, amounts and messages.
2. If it isn't fixed, make a formal complaint under the casino's published complaints procedure.
3. Allow up to eight weeks for the casino to resolve it.
4. If it's still unresolved, ask for referral to the casino's named ADR provider, which is free and independent.
5. Submit the dispute to the ADR provider within 12 months of the casino's final response.
6. Report wider concerns about a licensed operator's conduct to the Gambling Commission, bearing in mind that it doesn't settle individual cases.

Our guide on how to complain to a casino covers each stage, and casino complaints and ADR lists the approved providers.

Where to play: regulated partner casinos

All three casinos below hold Gambling Commission licences and follow the rules described on this page: Coral and Ladbrokes through LC International Limited (account 54743) and PlayOJO through Skill On Net Limited (account 39326). Their welcome offers are slot offers for new customers aged 18+, and terms apply.

• Coral: bet £10 on slots, get 100 free spins on selected games at 10p each, accepted within 48 hours and valid for 7 days, with no wagering on winnings. Runs 1 October 2026 to 1 February 2027; Neteller, PayPal, Paysafe, Skrill, prepaid cards and certain debit cards don't qualify.
• PlayOJO: 80 free spins on Big Bass Bonanza at 10p each with a first deposit of £10 or more, no wagering, winnings paid in cash. Excludes Northern Ireland; can't be combined with other offers; only through the designated offer link.
• Ladbrokes: play £10 on slots, get up to 500 free spins as 50 a day for 10 days, 10p each on selected games, claim before 23:59 each day, valid 7 days, no wagering. Prepaid cards, PayPal, Paysafe, Neteller, Skrill and Moneybookers deposits don't qualify.

With Coral and Ladbrokes sharing one licence holder, a single person may not be able to open new accounts at both.

18+. Every casino game has a built-in house edge, so over time you should expect to lose what you stake. Set a budget before you play and stop when it’s gone: safer gambling tools and support. Free, confidential help: National Gambling Helpline 0808 8020 133.