The Gambling Commission has regulated commercial gambling in Great Britain since 2007, and it draws its powers from the Gambling Act 2005. Every casino, slot site, bingo room, and sportsbook open to UK players runs under one of its licences. Getting that licence takes months of checks, and keeping it takes constant compliance work. Those conditions cover the games you play, the bonuses you claim, and the speed at which you get paid.
You cannot apply for a casino licence as a company alone. The Commission investigates the business and every person attached to it. Directors, major shareholders, compliance officers, and money laundering reporting officers all face a fit and proper test. Investigators look at criminal records, personal finances, and any regulatory action taken against the applicant in another country. An unresolved court case or a gap in a director's financial history can end the application before it reaches the technical stage.
People who hold senior roles need a personal management licence. Staff who carry out specific functions, such as handling customer funds or supervising a gambling area, need a personal functional licence. The Commission checks those applications in the same way, and it can suspend or revoke them when someone breaks the rules later.
A remote casino operating licence covers slots, table games, and live dealer play delivered over the internet. Operators who want to add bingo or sports betting need those categories as well. Application fees for a remote casino licence run to several thousand pounds, and each personal licence carries its own smaller fee. Annual fees are banded against gross gambling yield, so a small operator pays a few thousand pounds while the largest pay six figures. The Commission also asks for a business plan, a three-year financial forecast, and proof that the operator holds enough capital to cover player liabilities.
Every game on a licensed site has to meet the Remote Technical Standards. An approved test house examines the random number generator, the return-to-player figures, and the way the software handles a dropped connection mid-spin. Operators keep player funds separate from company money, so a business failure does not swallow your balance. They also connect to GamStop, which means a self-exclusion you set with one brand covers every licensed site in the country. Data handling follows UK GDPR rules monitored by the Information Commissioner's Office.
The Licence Conditions and Codes of Practice set the day-to-day rules. Age verification gives you the clearest example. Since 2019 operators must confirm your age and identity within 72 hours of your first deposit, and they cannot let you keep playing or withdraw until that check finishes. When it fails, they return your money and close the account.
Social responsibility provisions cover the way staff treat you. Operators watch for markers of harm such as a sudden jump in deposits, long sessions at three in the morning, or repeated failed payment attempts. Staff must intervene when those markers appear, and the Commission expects a record of what they did. You also get tools on demand: deposit limits, loss limits, session reminders, a time-out, and self-exclusion through GamStop.
Payments run through debit cards, PayPal, Apple Pay, Google Pay, Trustly and other open banking transfers, or Paysafecard. Credit cards have been off the table since April 2020, when the Commission banned them for gambling. The regulator also ended reverse withdrawals in that round of rule changes, so once you request a payout, no operator can offer to cancel it and leave your money in play.
Bonus terms attract more complaints than anything else on a licensed site, and the Commission knows it. Its rules require operators to state the significant conditions of an offer before you claim it, in plain language, beside the offer itself. Wagering requirements have to be achievable, and a term that makes a bonus impossible to clear counts as unfair. When you start comparing UK casino bonus types, look at the wagering multiple, the maximum bet allowed while a bonus is active, and the games that count toward clearing it.
Contribution rates decide how much of your play chips away at the wagering total. Slots count at 100% in most offers, table games count at 10% or nothing, and live dealer games sit at zero on many sites. That spread explains the gap between a 35x bonus you clear on slots and a 35x bonus you claim while planning to play roulette. Working out which bonus suits your play takes five minutes with a contribution table.
Every offer carries an expiry date. Some run for seven days from the moment you claim, others for 30, and a few reset when you make a qualifying deposit rather than when you open the email. Max bet clauses matter too. Stake £6 on a slot with a £5 cap and the operator can void the bonus along with any winnings it produced. Reading the bonus terms before you deposit tells you whether the deadline fits your week and whether the cap suits your stake size.
A capped win is the term most players miss. A bonus with a £250 maximum payout still lets you build a balance past that figure, then pays only the cap when you withdraw. That single clause changes the value of a 100% match. Checking terms before you opt in, rather than after, means you can skip the offer and take a cleaner one with no ceiling on winnings.
The Commission also bans the practices that used to hide real costs. Operators cannot call a bonus free when it carries a deposit condition, and they cannot advertise winnings from a bonus that no player could clear under the terms. The way UK bonus rules are written tells the same story, because regulators here stripped out the clauses that caused trouble. Fewer headlines promise £5,000 when the operator only intends to pay a fraction of that.
When something goes wrong, you complain to the operator first. The operator has eight weeks to resolve it before you can escalate to an approved alternative dispute resolution provider. The Commission does not settle individual disputes, but it watches the pattern. Repeated complaints about the same term trigger a licence review. Operators also report key events, including any breach that could affect players, within five working days.
Check the licence before you deposit. The footer of a licensed site carries the UKGC account number, and you can confirm the operator on the Commission's public register. Player feedback fills in the gaps a licence number cannot show. Reading VegasWild reviews on Trustpilot tells you how a brand handles withdrawals and support in practice, and the accounts written by people who have waited for a payout carry more weight than any banner.
A licence tells you a site meets a set of standards that someone else enforces. The terms attached to a bonus tell you whether the site respects those standards when money moves. Read both before you sign up.