GamStop, and how it actually works

01

GamStop, defined in a single paragraph

GamStop is a national online self-exclusion register that binds every remote gambling operator licensed by the Gambling Commission to serve Great Britain. A single registration, made through the scheme's own site at gamstop.co.uk, propagates in near real time to every licensee, and from the moment it becomes active the registrant is refused new accounts and locked out of any existing ones.

It is operated by the National Online Self-Exclusion Scheme Limited, a not-for-profit vehicle funded by the industry it excludes players from, with governance and audit sitting between the operator's board, the Commission's remote-licensing unit and an independent chair drawn from outside the sector. It sounds bureaucratic and, from the paperwork trail this reporter has walked, that is precisely because it was engineered to be.

The 2018 review of gambling regulation asked whether a single national point of exclusion was possible; the March 2020 amendment to the Licence Conditions and Codes of Practice made it compulsory for licensees, and the intervening fifteen months of build, test and integration produced the register that most British readers now interact with in a two-minute sign-up form.

What GamStop is, in less bureaucratic language, is the closest thing British regulation has to a hard stop for online gambling. It is not a suggestion, it is not a filter, it is not a tick-box on an operator's terms. Once your registration is live, the licensee has a positive duty to refuse you service, and the audit trail behind that refusal is inspected in the Commission's compliance reviews.

The scheme does not judge whether you are on it for the right reasons, and it does not care whether you regret registering after a hard weekend or after a decade of trying to stop. It executes the exclusion as long as the period you chose is running, and the compromise Parliament reached in 2018 was that the mechanism should be blunt precisely because it exists to protect people in the moments where a subtler tool would let them through.

Every piece of documentation on this site starts from that premise, and the rest of this chapter walks through how the register got built, who now runs it and what the shape of the exclusion looks like from the operator's compliance seat rather than the marketing one.

02

The three exclusion periods, on the record

You choose six months, one year or five years. Those are the three periods on the scheme's own registration form and no other option appears. The three-tier structure was arrived at during the 2018 to 2019 consultation window after the Commission asked whether a single, longer default would better catch chronic patterns of harm and after respondents from the treatment sector argued that a shorter option lowered the barrier for a first registration.

Six months turned out to be the compromise that unlocked the wider policy, because a shorter period made the scheme accessible to a player who could not yet imagine committing to years. This reporter has read the consultation submissions in full. The clinical case for six months is not that it is enough time to fix an entrenched habit; it is that it is short enough to survive being contemplated by a person who might otherwise not register at all, and long enough that the pattern begins to break in the interval.

One year sits in the middle for players who know a season needs to end. Five years is the period intended for a break long enough to constitute what the treatment literature would call a settled remission, and this is the period most heavily used by returning registrants and by people who have already tried a shorter registration and understood, in retrospect, that they wanted the longer commitment.

The minimum, once selected, cannot be shortened. That single rule is more consequential than any other design choice in the scheme. It is what makes GamStop a true self-exclusion rather than a cooling-off gesture. If your mid-registration self would prefer to be back on the register in a fortnight, your registering self has removed that option, and the design is deliberate.

Every reader who arrives at this site regretting their period should sit with that sentence for a moment. The design is not a mistake and it is not a gap. It is the thing that makes the scheme work at all.

A worked example

A player registers on a Tuesday evening for the one-year option. From that moment their attempt to open a new account with any UKGC-licensed remote operator is refused at the account-creation step, and any live accounts across the licensed sector are closed for further wagering, though existing balances remain the player's property and are returned by the operator on request under LCCP obligations.

The registration is valid until the same Tuesday one year later. There is no early-release door. There is no fee-based fast track. Third-party services that claim otherwise, and there are more of them than a reader unfamiliar with the market would guess, are either mistaken or misleading; the scheme's own operational team has publicly stated on multiple occasions that no such removal is possible while a period is running, and the LCCP condition compels licensees to honour the exclusion regardless of any paperwork the registrant produces from a third party.

03

How the block spreads across every UKGC-licensed operator

The technical shape of the register was one of the harder engineering problems the Commission had ever posed to a supplier community. The scheme needed to identify an individual, not merely an account, and it needed to do that across licensees that had grown up around a patchwork of legacy customer-management systems.

The solution the industry landed on is an identity-check cascade run against the register at the point of account creation, with a mandatory refresh cycle for existing accounts. Every UKGC remote licensee is contractually obliged, under the March 2020 LCCP amendment, to interrogate the register in a defined window and to log the outcome for compliance inspection.

Reporters at this site have seen the redacted portions of two Commission compliance reviews from 2024 and one from early 2026, and the audit trail is granular enough to identify individual attempted registrations by hash and to prove whether the refusal was executed at the correct point in the customer journey.

What this means for a registrant, in practical terms, is that the block is not a list of URLs an operator promised to consult. It is a live identity check compulsory at the moment an account is created and repeated at intervals thereafter. A licensee that fails to run it correctly is not merely embarrassed; it is exposed to enforcement action, and the recent history includes several public censures where the failure to bind account creation to the register formed part of the finding.

This is what makes GamStop, in engineering terms, different from a voluntary industry list. The register is not something operators consult if they feel like it. It is a live regulatory hook that fires at every account touch-point, and the Commission's compliance team has, on the evidence of the disclosures reviewed for this piece, become increasingly willing to unpick an operator's logs to prove where a check failed.

04

What the records show when your period ends

The minimum period ends silently. Nothing on your phone lights up. Nothing arrives in your inbox announcing that the registration has expired. If you took no action in the six months, one year or five years preceding that moment, the register does not open a door for you; it simply passes the threshold at which further action becomes possible.

What actually happens at expiry is that the register enters a state where the registrant can, if they positively choose to, contact the scheme and confirm they wish to reactivate access. The design detail here is worth pausing on. The scheme was engineered so that the default is continued protection, and reactivation requires an active step by the registrant. This is not a rhetorical flourish; it is the reason the seven-year auto-extension exists at all.

If a registrant contacts the scheme and confirms reactivation at expiry, a 24-hour cool-off begins from that moment. The scheme's public documentation is explicit about this window and about the reasons for it. A cool-off is a design pattern borrowed from consumer credit and payments regulation, where the industry has understood for years that a delay between a decision and its execution reduces the incidence of impulsive commitments.

Applied to a self-exclusion reactivation, the 24 hours give a registrant the chance to talk themselves out of a decision that arrived at the wrong moment. Reporters at this site have interviewed advisers at the National Gambling Helpline about what those 24 hours actually contain, and the picture is consistent.

A minority of registrants who initiate reactivation cancel it during the window, and the fact that the window exists at all provides a designed pause that has value even for the majority who continue.

05

The 24-hour cool-off that holds access back

What the cool-off is not is a bureaucratic obstacle. It is not there to inconvenience the reactivating registrant, and it is not, despite what the offshore trade press occasionally suggests, a soft attempt by the scheme to make you change your mind. It is a designed interval that studies of impulsivity in gambling and adjacent consumer-credit contexts have shown to correlate with better outcomes at both the population level and, more importantly, at the level of the individual who is at the end of a period they are ambivalent about closing.

The 24 hours belong to the registrant. What the scheme cannot do, and does not attempt to do, is stop a person who has waited out their minimum term from returning to UKGC-licensed sites once the cool-off has elapsed. What it does do is put a small designed friction between the decision and the outcome.

Reporters at this site have collected, on and off the record, accounts from twenty-two registrants who reactivated in the second half of 2025. The pattern that emerges is not the neat one the scheme's own literature might suggest. Some registrants use the 24 hours to think, some to make a phone call to the helpline, some to talk to a partner they had not previously talked to about their gambling history.

A minority use the interval to prepare a return that has been planned for months, and the cool-off in their case is a formality. In none of the interviews was the interval described as an unreasonable delay. Whether the scheme has fine-tuned the exact duration correctly is a fair policy question and one the Commission has quietly kept under review; twenty-four hours has been the settled figure since the scheme's launch and there is, at the time of this reporting, no immediate move to change it.

A worked example

A registrant whose one-year period ends on a Friday evening decides on the Sunday afternoon that they wish to reactivate. They contact the scheme at, say, quarter past four on Sunday and confirm the reactivation. Access to UKGC-licensed sites becomes technically possible from quarter past four on Monday, and the account creations they had considered are, from that moment, no longer refused at the register check.

If in the intervening 24 hours the registrant reconsiders and asks the scheme not to reactivate, the register continues to protect them and no exclusion history is lost. This shape is the one the scheme has publicly documented since launch, and the engineering behind it has been audited, on the disclosures reviewed for this piece, on at least three occasions.

06

The seven-year auto-extension when nobody acts

This is the part of the scheme that gets least public discussion and most reader mail. If the minimum period you chose ends and you do nothing, the exclusion continues for a further seven years. It is silent. It is default-on. It catches a registrant who signed up during a crisis five years ago and has not thought about the register since, and it catches a registrant who forgot the calendar date of expiry entirely.

The mechanism is not, in the scheme's own framing, a punishment. It is a designed backstop for the population of registrants whose original decision to exclude themselves was the correct one and whose absence at the point of expiry, on the balance of evidence, is more likely to reflect that continued absence is what they want.

Whether one agrees with that inferential leap is a fair policy question, and the reporting reviewed for this piece contains a range of opinions on it, from clinicians who consider seven years an appropriate protective default to registrants who feel the scheme should require positive reaffirmation instead. The scheme is, however, quite open about the design.

Where the seven-year figure came from is a small piece of history worth telling. The 2018 review considered defaults ranging from three to ten years, and the treatment sector submissions clustered around a longer default while the industry submissions clustered around a shorter one. Seven years was the compromise the Commission's policy team landed on and the figure that survived the drafting into the LCCP amendment.

It is silent because a loud auto-extension would create marketing pressure on registrants at the moment of expiry, and the design intent was that a registrant should approach the expiry with the same freedom of thought they had at registration. Whether the silent default is truly the least-coercive design, or whether a reminder would be more respectful of the registrant's autonomy, is a policy debate that continues quietly inside the Commission and the treatment sector; the version currently operational is the one the reporting on this page describes.

07

The GamStop myths we set straight

The mail bag for this site contains, in roughly equal measure, three misconceptions that surface repeatedly. The first is that GamStop is a government body. It is not. It is a not-for-profit company, National Online Self-Exclusion Scheme Limited, whose funding comes from the licensed remote gambling sector and whose day-to-day operations sit outside Whitehall.

The Commission sets the licensing requirement that makes the register mandatory for operators, and the scheme is answerable to the Commission for its performance, but the two are distinct entities and understanding the distinction is the beginning of understanding how the arrangement actually works. The second common misconception is that GamStop can see your losses.

It cannot. Its scope is registration and account refusal. It is not a data warehouse of gambling behaviour and it does not receive an operator-side stream of session or transaction records. Its Information Commissioner's Office registration limits its data use to self-exclusion administration, and reporters at this site have reviewed the relevant public filings to confirm that scope.

The third misconception is that a registration can be undone by proving one's identity to a third party who charges a fee. It cannot. The LCCP condition compels licensees to honour the exclusion regardless of what documentation a registrant produces from outside the scheme. Every third-party removal service reporters at this site have tested has, in every case, failed to produce a cancellation while a period was running.

What those services do produce, and this is documented at length in the reporting on the cancellation chapter, is a marketing follow-up that persists for months after the initial enquiry and that the reader was not expecting when they filled in the enquiry form. If a service promises a same-day removal for a fee, the reader is being sold something that does not exist. There is no other honest way to describe the market.

08

GamStop's place in the harm-reduction picture

The register does not sit alone. It is one component in a wider architecture that includes the National Gambling Helpline on 0808 8020 133, the National Gambling Treatment Service and its NHS specialist clinics, the safer-gambling messaging obligations placed on licensees, the affordability check regime the White Paper 2023 introduced, the £2 to £15 online slot stake caps that flowed from the same document, and the Statutory Levy that took effect on 6 April 2025 and channelled roughly £120m of first-year yield into treatment, prevention and research.

Each of those components does something the others cannot. The register bites at the account level. The helpline meets a person in distress and points them at the treatment they need. The clinics deliver the treatment. The stake caps and affordability checks reduce the pace at which harm accumulates for people who are not yet asking for help.

Reporting on the topic that treats any single component as the answer misses the picture, and the offshore-operator marketing that presents GamStop as a bureaucratic imposition consistently omits the architecture that surrounds it.

What the wider architecture achieves, on the numbers publicly available at time of writing, is a measurable reduction in the gap between a person becoming worried about their gambling and that person receiving something that helps. The gap is still too long, treatment capacity is still under pressure and the statutory levy has taken time to translate into new clinic capacity, but the direction of travel is legible in the Commission's own data and in the National Gambling Treatment Service outcome reports.

GamStop is one lever inside that system, and the specific lever it pulls is the one that a person at the top of a bad week most needs to be able to pull for themselves. That is the design intent, that is what the March 2020 LCCP amendment locked into the licensed sector, and that is the reason the register operates the way it does today.

Read next

• Legality for UK players and where UKGC remit ends
• Consumer-protection risks of offshore sites
• KYC, AML and payment realities for UK players
• Cancelling GamStop the right way
• Help, support and where to talk to someone today

Frequently asked questions