New Casino Sites: What a UK Licence Actually Demands in 2026

New casino sites launch in the UK every month, and most of them are licensed, audited and boringly compliant. The interesting question is what it costs an operator to get and keep that licence, and how you read the paperwork before depositing.

This guide walks through the accountability chain: the Gambling Commission application, anti-money-laundering duties, know-your-customer checks, independent game audits, and the enforcement record that shows what happens when operators cut corners. Concrete numbers, real brands, no hype.

What It Costs to Hold a UK Casino Licence

How much does a Gambling Commission licence cost?

A remote casino licence in the UK costs £37,150 in application fees for a standard operating licence covering remote betting, bingo or casino, plus an annual fee banded by gross gambling yield. Yields up to £500,000 pay £5,000 a year; the top band above £500m pays £501,777.

Those figures come straight from the Gambling Commission's published fee structure, which was last revised in April 2023. The application itself is a 24-week assessment on average, with the Commission able to extend review periods if documentation is incomplete.

Who actually grants and enforces the licence?

The Gambling Commission regulates all commercial gambling in Great Britain under the Gambling Act 2005, as amended by the Gambling (Licensing and Advertising) Act 2014. Northern Ireland falls under separate betting legislation, and the Isle of Man or Malta regulators cover operators targeting other markets.

Enforcement is not theoretical. In 2024 the Commission issued £66.8m in fines across the industry, with individual penalties reaching £19.2m against operators failing to meet social responsibility and AML obligations. Licence review is the standard tool, not a rare escalation.

What happens during the 24-week assessment?

Applicants submit a detailed operating plan covering ownership structure, source of funds evidence, key person vetting, technical platform details, and responsible gambling controls. The Commission runs enhanced due diligence on beneficial owners and can refuse any application where ownership transparency is unclear.

Expect follow-up questions. Most rejections trace back to incomplete corporate documentation or unresolved historic compliance issues rather than the casino product itself.

Which new casino sites hold a full GB licence in 2026?

Recent launches such as Pub Casino, PricedUp, Ivy Casino and Mega Riches all operate under Gambling Commission remote licences, published in the Commission's public register. Each one lists licence numbers you can verify in under a minute.

Offshore brands behave differently. Mystake, Goldenbet, Donbet, Fat Pirate, NineWin, Rainbet and Roobet run under Curaçao or Anjouan licences, meaning they cannot legally advertise to GB players. They exist, they pay out, but the accountability layer is thinner.

Anti-Money-Laundering Duties on New Operators

What AML checks must a new casino run?

Every UK-licensed casino must register with the Gambling Commission as a high-value dealer under the Money Laundering Regulations 2017, appoint a nominated officer, and file suspicious activity reports to the National Crime Agency. Customer due diligence triggers at €/£1,000 for occasional transactions and at £15,000 for one-off cash transactions.

The practical work looks like transaction monitoring: flags on rapid deposit-withdrawal cycles, structuring below reporting thresholds, or unusual payment-source patterns. Software providers such as GBG, Sumsub and Onfido handle identity verification for most UK brands.

How often does the Commission audit AML controls?

Licensees submit an annual AML audit report prepared by an independent third party, plus a compliance review every three years. The Commission's 2023/24 compliance report found that 24% of audited operators had material AML control failures, mostly around source-of-funds evidence for high-deposit customers.

Failures cost money. In 2023 the Commission fined Entain £17m for AML and social responsibility breaches across its UK-facing operations, a case that took 18 months from initial investigation to final settlement.

Which new brands have offshore AML frameworks instead?

Offshore operators under Curaçao's new 2023 licensing framework must still run KYC and transaction monitoring, but reporting goes to the Curaçao Gaming Authority rather than the NCA. The standards exist on paper; the enforcement budget does not compare with the Gambling Commission's.

Brands like Velobet, Rolletto, Kinghills and Goldenbet publish AML policies, and most use the same verification vendors as UK operators. The difference sits in audit frequency and public enforcement records, not in the stated policy text.

What does source-of-funds evidence look like in practice?

When a player deposits £2,000 in a week, the operator's AML team may request payslips, bank statements or sale-of-property documents. Refusal to provide evidence triggers account restriction rather than automatic closure, giving the customer a chance to comply.

Operators with mature processes, including Bet365, William Hill, Ladbrokes and Grosvenor Casinos, run these checks through dedicated financial-crime teams. Newer entrants often outsource the function, which speeds onboarding but can slow edge-case decisions.

Know-Your-Customer Onboarding on New Casino Sites

How fast can a UK casino verify a new player?

Automated document checks clear most UK customers in under 5 minutes using driving licences, passports or ePassport chips. Roughly 80% of UK gambling accounts are verified without human review, according to industry verification vendors reporting to the Commission.

Manual review kicks in for address mismatches, non-UK documents, or age-edge cases. Those take 12 to 48 hours, and the player cannot deposit until the check clears. It is friction, yes, but it is the friction that keeps under-18s out.

When must a casino re-verify an existing customer?

Re-verification triggers on address change, payment-method change, or when risk scoring flags unusual behaviour. The Commission's 2024 guidance also expects periodic refresh of customer records at least every five years for active accounts.

Brands like 888 Casino, Unibet and Betway automate the refresh cycle; smaller operators handle it manually. Either way, the obligation sits with the licensee, not the software provider.

What happens if verification fails?

Failed verification means the account stays restricted: no deposits, no withdrawals, no gameplay. Funds already in the account are returned to the original payment method once identity is confirmed as unresolvable, a process that can take 15 working days.

Repeated failed attempts across sister brands raise flags. White Hat Gaming and Jumpman Gaming platforms share verification databases across their casino networks, so one unresolved identity issue can block you on several sites at once.

Do new casino sites use the same KYC vendors as old ones?

Yes, mostly. The verification market consolidates around a handful of providers: Sumsub, Onfido, Jumio and GBG. A new brand launching on a White Hat or ProgressPlay platform inherits the platform's verification stack by default.

That is good news for players. Platform-level KYC means a new brand does not rebuild verification from scratch, and the audit trail sits with a vendor that already serves regulated operators across multiple jurisdictions.

Independent Game and RTP Audits

Who checks that a slot actually pays what it claims?

Every game released to UK players must be tested by a laboratory accredited to ISO/IEC 17025, with eCOGRA, GLI, BMM Testlabs and NMI handling most casino titles. The lab certifies the random number generator, confirms the published RTP, and issues a certificate the operator must display.

Pragmatic Play, NetEnt, Microgaming and Hacksaw Gaming publish RTP ranges per title, typically between 94% and 96.5% for slots. Some games ship with configurable RTP tiers, which means the operator chooses the setting within the certified range.

How often are audited games retested?

Retesting follows any material game update, plus a periodic cycle most labs run at 12-month intervals. Operators must hold current certificates for every title in their lobby; the Commission can request certificates at any time during compliance reviews.

Live casino products from Evolution and Pragmatic Play Live carry separate certification for studio equipment, dealer procedures and stream integrity. Those audits are more frequent, generally quarterly, because live tables involve human operation.

What does an RTP certificate actually prove?

It proves the game's maths matches its published return over a statistically significant sample, usually billions of simulated spins. It does not predict what any individual session returns, and it does not cover the operator's bonus terms or withdrawal behaviour.

Players sometimes confuse game fairness with operator fairness. A certified slot from Hacksaw or Nolimit City pays honestly; whether the casino honours a £5,000 withdrawal within 24 hours is a separate question entirely.

Which new casino sites publish RTP data openly?

PlayOJO publishes per-game RTP in its lobby and markets itself on wagering-free bonuses. MrQ, Slots Temple and All British Casino also display return figures clearly, and videoslots historically ran a public "RTP stats" tool showing actual observed returns per title.

Offshore brands are inconsistent here. Some list RTP in game information panels; others omit it entirely. If a casino will not tell you the return rate of its own games, treat that as information.

Responsible Gambling Controls and Player Protection

What responsible gambling tools must new sites offer?

UK licensees must provide deposit limits, loss limits, session time reminders, reality checks, self-exclusion via GAMSTOP, and access to account history at all times. Since the October 2025 stake limits for online slots, maximum bets sit at £2 per spin for under-25s and £5 for everyone else.

Operators must also run automated affordability checks triggered by deposits, with enhanced checks at £1,000 in a rolling month and £10,000 in a rolling year. Failure to intervene at those thresholds is a common finding in Commission compliance reviews.

How does GAMSTOP connect to new casino sites?

GAMSTOP covers all Gambling Commission licensees, so self-excluding once blocks you across every GB-licensed brand: Bet365, Sky Bet, Coral, Ladbrokes, Paddy Power, Betfred, Gala Bingo, Betfair, Virgin Games, JackpotJoy and hundreds more.

Offshore casinos do not participate. That is the structural gap: a player who self-excludes from GB-licensed brands can still register at Mystake or Rainbet. The self-exclusion register protects you where the law reaches, and stops where it does not.

What happens when an operator misses a vulnerable-player signal?

The Commission reviews individual cases through licence reviews, and the pattern repeats: deposit spikes, chase behaviour after losses, or late-night session escalation without intervention. Penalties for these failures run into seven figures for large operators.

In 2024 Flutter Entertainment and Entain both accepted additional compliance undertakings covering vulnerable-player checks. Smaller new entrants face the same standards, though their enforcement exposure is proportionally smaller.

Which new brands score well on player protection?

MrQ, PlayOJO, Virgin Games and Monopoly Casino consistently publish responsible gambling reports and hold Safer Gambling Standard accreditation from GamCare. Bet365 and William Hill operate dedicated safer-gambling teams running 24/7 monitoring.

Newer entrants like Pub Casino, LiveScore Bet and talkSPORT BET inherit group-level responsible gambling infrastructure, which usually means better tooling than a first-time standalone operator would build alone.

How to Vet a New Casino Site Before Depositing

What should you check in the first five minutes?

Four checks, in order: the Gambling Commission licence number in the footer (verify it on the Commission's public register), the terms page for wagering requirements and withdrawal limits, the game providers listed in the lobby, and the payment methods including whether fees apply to withdrawals.

A licence number that does not resolve, or resolves to a different company name than the one trading on the site, is a hard stop. Everything else is negotiable; that one is not.

How do wagering requirements compare across new sites?

UK-licensed new casinos typically attach 30x to 40x wagering to welcome offers, with game weighting that counts slots at 100% and table games at 10% or less. Offshore brands often advertise lower multiples but attach stricter max-win caps, sometimes limiting bonus winnings to 10x the bonus amount.

Read the cap, not the multiplier. A 40x offer with no win cap can outperform a 10x offer capped at £100, depending on what you actually play.

Which new casino sites pay fastest?

UK operators using Trustly, Open Banking or PayPal clear withdrawals within 1 to 24 hours once KYC is complete. Brands such as MrQ, Pub Casino, Kwiff and Smarkets advertise sub-hour processing for verified accounts.

Card withdrawals take longer: 1 to 3 working days is normal, with 5 days as the outer limit under Visa and Mastercard settlement cycles. Crypto-friendly offshore sites quote minutes but depend on network confirmation and internal review queues.

What game libraries do new sites actually run?

A typical new UK casino launches with 1,500 to 3,000 titles, sourced from aggregators like Relax Gaming, Games Global, Play'n GO and Hacksaw. Live casino sections carry 50 to 200 tables, mostly from Evolution with some Pragmatic Play Live and Playtech coverage.

Offshore brands often push higher counts, 5,000+, because they include studios that do not hold UK certification. More games is not automatically better; certified titles come with published RTP and dispute routes.

Should you trust a new brand with no track record?

Track record matters, but licence status matters more. Bet365, William Hill, Ladbrokes and Coral have decades of operational history; Pub Casino and PricedUp have months. Both operate under the same licence conditions, the same audit cycle, and the same enforcement powers.

The practical difference shows up in edge cases: how a brand handles a disputed bonus, a delayed withdrawal, or a responsible gambling intervention. Longer histories usually mean more refined processes, but a fresh licence holder has everything to prove.

What should you do if something goes wrong?

Complain to the operator first; UK licensees must acknowledge complaints within 24 hours and resolve them within 8 weeks. Unresolved cases go to IBAS (Independent Betting Adjudication Service), which adjudicates free of charge for consumers.

Still stuck, escalate to the Gambling Commission's complaints team. The Commission does not award compensation, but it does open compliance reviews, and operators move quickly once a regulator is watching.

FAQ: New Casino Sites in the UK

Are new casino sites legal in the UK?

Yes, if they hold a Gambling Commission licence. Check the licence number in the site footer and verify it on the Commission's public register. Unlicensed sites cannot legally advertise to GB players, and playing there removes your access to IBAS, GAMSTOP and Commission enforcement.

How do I know a new casino site is safe?

Verify the Gambling Commission licence number, confirm games come from certified providers like Pragmatic Play or Evolution, check withdrawal times in real player reviews, and read the bonus terms for wagering and win caps. Four minutes of checking beats four hours of regret.

What is the minimum age for new casino sites?

18 across the UK. Every licensed operator must verify age before allowing deposits, using automated document checks or manual review. Under-18 gambling is a criminal offence for the operator, and age-verification failures are among the most heavily penalised breaches.

Do new casino sites offer better bonuses than established ones?

Often, yes, because new brands buy market share with larger welcome packages. But bigger numbers come with stricter terms: check wagering multiples, game weighting, max-win caps and time limits. A 100% match to £200 at 40x is £8,000 of turnover before withdrawal.

Can I play at offshore casino sites from the UK?

You can access them, but they are not licensed for GB customers and sit outside Commission enforcement. Self-exclusion, complaint routes and responsible gambling tools are weaker. Brands like Mystake, Goldenbet and Donbet operate this way, and you should weigh that trade-off consciously.

How long do withdrawals take at new casino sites?

Verified UK accounts using e-wallets or open banking often see funds within 1 to 24 hours. Card withdrawals take 1 to 3 working days. First withdrawals take longer because KYC runs before the first payout, sometimes adding 24 to 48 hours.

What is the difference between a UK-licensed and offshore casino?

UK-licensed operators answer to the Gambling Commission: mandatory AML audits, published enforcement, IBAS dispute access, GAMSTOP coverage and stake limits. Offshore operators answer to a different regulator with a smaller enforcement budget and no obligation to accept GB players.

Gambling can be addictive. UK only, 18+. If gambling is affecting your life, contact the National Gambling Helpline on 0808 8020 133, available 24 hours a day. Self-exclude across all GB-licensed operators through GAMSTOP, or use bank-level blocks and deposit limits set inside your account settings.