Player protection
Player protection
What a licensed operator is obliged to do for you, what to do when it does not — and what none of it guarantees.
In short
Player protection is the set of obligations a gambling regulator places on its licensees for the benefit of customers: verifying identity and age, handling complaints, holding customer funds in a disclosed way, offering limits and breaks, participating in self-exclusion, and meeting technical standards. These obligations are the practical difference between a licensed operator and an unlicensed one — and they are also the thing you lose entirely if the site you are using is not licensed for your market.
What "player protection" actually covers
The phrase gets used loosely. In a regulatory context it means specific, enforceable obligations, which fall into three groups.
- Protections that apply whether you ask or not
- Age and identity verification, anti-money-laundering procedures, rules on how customer funds are held, complaint-handling requirements, technical standards for games, and constraints on advertising. You do not opt in to these and cannot waive them.
- Tools the operator must make available
- Deposit limits, time-outs, reality checks and access to self-exclusion. The obligation is generally that the tool exists and is usable; whether you use it is your choice. Covered in responsible gambling.
- Routes that exist when something fails
- A published complaints procedure, and in some jurisdictions independent dispute resolution funded by the operator. These matter most at the exact moment the relationship has broken down.
What a licensed operator owes you
| Obligation | In practice | Where it is explained |
|---|---|---|
| Age verification | Confirming you are old enough before you gamble or deposit, with the minimum set by your jurisdiction and sometimes by product | Age verification |
| Identity verification | Confirming you are who you say you are — frequently the reason a first withdrawal stalls | KYC verification |
| Anti-money-laundering | Due diligence proportionate to risk, source-of-funds questions, and reporting obligations | AML in gambling |
| Fair and tested games | Games and random number generators tested against the regulator’s technical standards | Fairness and RNG testing |
| Customer funds disclosure | Telling you how player balances are held and what happens if the business fails | Read the operator’s own disclosure — the level of protection varies |
| Complaint handling | A published procedure, and in some regimes independent dispute resolution | Complaints and ADR |
| Limits and breaks | Deposit limits, time-outs and reality checks, available without argument | Limits · Breaks |
| Self-exclusion | Operator-level exclusion, and participation in any scheme the regulator runs | Self-exclusion |
| Identifying itself | Publishing the licensee company and its licensing information so you can verify it | How to check a licence |
Verification is protection, even when it is inconvenient
Identity and age checks are the obligations customers experience most directly, and almost always as friction: a withdrawal held while documents are reviewed.
They are worth separating into two categories, because the handling differs.
- Normal and expected: being asked to prove identity, age, address or ownership of a payment method, particularly at a first withdrawal or when activity changes. Licensed operators are required to do this. Supply exactly what is asked for, keep a record of when you sent it, and note the operator’s stated timeframe.
- A complaint: documents supplied and nothing moving, requests that keep changing, a stated timeframe passing with no explanation, or verification appearing only once you tried to withdraw a large sum after many uneventful deposits.
When something goes wrong
A withdrawal is refused or stalled
Preserve evidence, make a formal complaint, then use the dispute route that exists for that licence.
Escalation workflowMaking a complaint
The ladder from operator to dispute resolution to regulator, and what each body can actually decide.
Complaints and ADRReporting an operator
Where to report an operator you believe is unlicensed, fraudulent, or breaching its licence.
Reporting routesSomething does not look right
A checklist of signals with what each does and does not prove on its own.
Scam checklist
What you lose if the operator is not licensed for your market
This is the clearest argument for spending five minutes verifying before depositing.
| With a licence covering your market | Without one |
|---|---|
| A published complaints procedure the operator must maintain | Whatever the operator chooses to offer |
| Independent dispute resolution, in some jurisdictions funded by the operator | None — dispute resolution is a licence condition |
| A regulator that can sanction the operator | No authority with jurisdiction over it |
| Rules on how customer funds are held, and disclosure about them | No obligation to tell you anything |
| Enforceable age and identity verification | No obligation |
| Access to any self-exclusion scheme the regulator runs | Outside the scheme entirely — this is the gap that matters most |
| Games tested against technical standards | No testing obligation |
The last row is the one people underestimate. A national self-exclusion scheme binds the operators its regulator licenses and nothing else, so the sites most likely to accept an excluded person are exactly the ones outside it.
The limits of player protection
Protection is real and it is not a guarantee. Being straight about the boundary is more useful than reassurance.
- Obligations are enforced imperfectly. Enforcement registers exist because licensees breach conditions. Supervision is continuous and after the fact.
- Protection does not make gambling safe. These rules constrain how a product is sold, not what the product does. A fully compliant operator can still cause someone serious harm.
- Funds protection varies. Disclosure is usually required; a particular level of protection often is not. Read what the operator actually discloses rather than assuming.
- Dispute resolution is not universal. Operator-funded independent resolution exists in some jurisdictions and not others, and where it does not you are in the general consumer system or the courts.
- Nothing here is a recommendation. That an operator is licensed and subject to these obligations is regulatory information, not advice to use it. This site rates no operator.
Primary sources
Each link below goes to the issuing authority’s own website. Where a page could not be retrieved by our automated checks, that is stated rather than hidden.
-
EUR-Lex (Publications Office of the European Union)
Directive (EU) 2015/849 on the prevention of the use of the financial system for money laundering or terrorist financing (Fourth Anti-Money Laundering Directive)
Returned an empty body to the fetcher; two further URL forms of the same directive (HTML and PDF views) failed identically. Nothing from the EU AML Directives is verified — do not cite article numbers, the gambling-services definition, the member-state exemption or any EU threshold.Checked 18 September 2026 · js-only
-
EUR-Lex (Publications Office of the European Union)
Regulation (EU) 2024/1624 on the prevention of the use of the financial system for money laundering or terrorist financing
Resolves but returns an empty JavaScript shell with no extractable text; a second URL form for the same regulation behaved identically. Nothing from the EU AML Regulation is verified: do not state whether gambling providers are obliged entities, do not state any EU threshold, and do not state an application date.Checked 18 September 2026 · js-only
-
EUR-Lex (Publications Office of the European Union)
Summary: Preventing abuse of the financial system for money laundering and terrorism purposes (from 2027)
Returned an empty document to the fetcher. No plain-language EU position may be taken from it.Checked 18 September 2026 · js-only
-
EUR-Lex (Publications Office of the European Union)
Summary: Preventing abuse of the financial system for money laundering and terrorism purposes (from 2027) – member states' mechanisms
Returned an empty body to the fetcher.Checked 18 September 2026 · js-only
-
European Parliament
Parliamentary question E-001659/2022 – Exemptions for gambling services
Returned an empty body to the fetcher; its content is unverified.Checked 18 September 2026 · js-only
-
Financial Action Task Force (FATF)
Explanatory materials on Recommendations 18 and 23 (PDF)
HTTP 403 Forbidden; the PDF was never retrieved.Checked 18 September 2026 · bot-blocked
-
Financial Action Task Force (FATF)
Guidance on the Risk-Based Approach for Casinos
HTTP 403 Forbidden to automated access on every attempt by both analysts; no body was retrieved. Nothing from FATF is verified anywhere in this research, so no FATF rule, recommendation number, threshold or adoption date may be stated. The source is listed because a reader may open it in a browser.Checked 18 September 2026 · bot-blocked
-
Financial Action Task Force (FATF)
Risks of gaming and gambling (2026 news item)
HTTP 403 Forbidden; no body retrieved. The 2026 gaming-and-gambling risk indicators are unverified and must not be described.Checked 18 September 2026 · bot-blocked
-
Financial Action Task Force (FATF)
The FATF Recommendations (PDF)
HTTP 403 Forbidden; the PDF was never retrieved. The text of Recommendation 22 on casinos, and any threshold figure or currency in it, are unverified and must not be written.Checked 18 September 2026 · bot-blocked
-
Gambling Commission
Age, ID and financial verification (guide for the public and players)
Four years old at the check date and predates the 2024–2025 GB financial risk check developments.Checked 18 September 2026 · reachable
-
Gambling Commission
AML/CTF casino casework trends: October 2025
The page sets out roughly eleven casework failings. Any summary drawn from it must not imply it reproduces the regulator's complete list.Checked 18 September 2026 · reachable
- Gambling Commission Anti-money laundering (licensees and businesses hub) Checked 18 September 2026 · reachable
- Gambling Commission Anti-money laundering bodies and organisations Checked 18 September 2026 · reachable
-
Gambling Commission
Anti-money laundering legislation
Independently reproduced internal inconsistency: this page lists the Proceeds of Crime Act 2002, the Terrorism Act 2000, the Gambling Act 2005 and the LCCP, and does not mention the Money Laundering Regulations 2017 at all.Checked 18 September 2026 · reachable
-
Gambling Commission
Anti-money laundering responsibilities for all other gambling businesses
The page says nothing about whether the Money Laundering Regulations 2017 apply to non-casino licensees, in either direction.Checked 18 September 2026 · reachable
- Gambling Commission Anti-money laundering responsibilities for remote and non-remote casinos Checked 18 September 2026 · reachable
-
Gambling Commission
Approved alternative dispute resolution (ADR) providers
Over a year and a half stale at the check date, and the list is volatile — the page already records one removal. It sits in the licensees-and-businesses section, not the consumer section, and the consumer-facing ADR page does not link to it. The page renders one entity as 'ADR group'; reproduce names as the page prints them.Checked 18 September 2026 · reachable
-
Gambling Commission
Blog: Key issues and our expectations concerning account withdrawals
A blog post by the Chief Executive — regulator commentary, not a rule. The "around 2,000 complaints a year about delays to withdrawals" figure is two years old at the check date. When quoting, keep the full sentence, which ends "...should have sought that information earlier if needed".Checked 18 September 2026 · reachable
-
Gambling Commission
Commission urges operators to review when customer identity checks are made
Published 21 June 2017 — this predates licence condition 17.1.1 (May 2019) and is the compliance finding that led to the rule. Present it historically, not as current guidance.Checked 18 September 2026 · reachable
-
Gambling Commission
Emerging money laundering and terrorist financing risks from April 2025
The consumer-facing assertions drawn from this page were not independently re-fetched in the verification pass and should be re-read before being quoted. The acronym "ARC" is used on the page without being expanded; do not expand it.Checked 18 September 2026 · reachable
-
Gambling Commission
Gambling Commission money laundering risk assessment 2026 published
The notice describes the assessment as an update to the 2023 publication; it does not use the word "supersedes". It carries no per-sector risk ratings.Checked 18 September 2026 · reachable
-
Gambling Commission
Gambling regulation and the General Data Protection Regulation (GDPR)
The five-year wording uses the modal "should" and is about regulatory-compliance data generally — it is not a statement that operators must keep identity documents for five years. The page does not designate the data controller for operator-held customer data.Checked 18 September 2026 · reachable
-
Gambling Commission
How long does it take to complete ID checks?
Five years old at the check date. The page states no timescale can be given, so there is no official service level for completing identity checks, and it does not say what to do if checks stall.Checked 18 September 2026 · reachable
-
Gambling Commission
How to complain about a gambling business
Sets the eight-week window for the operator to resolve a complaint. It also references the third-party tool Resolver while noting 'the Gambling Commission isn't involved in how Resolver's services work'.Checked 18 September 2026 · reachable
-
Gambling Commission
Identity verification (guidance for licensees and businesses)
Over four years old at the check date. The verification pass found the 12-month / 30-day unverified-account rule is also conditional on repeated verification attempts, an attempt to return funds to the original payment method, and fees set out in the operator's terms — do not state the 12-month and 30-day figures alone.Checked 18 September 2026 · reachable
-
Gambling Commission
LCCP licence condition 12.1.1 – Anti-money laundering: Prevention of money laundering and terrorist financing
No last-updated date is displayed. This condition is how non-casino GB licensees pick up AML duties; it applies far more widely than the casino-only Money Laundering Regulations.Checked 18 September 2026 · reachable
-
Gambling Commission
LCCP licence condition 17.1.1 – Customer identity verification
The condition page displays no "last updated" date, so its currency cannot be asserted. It is a remote licence condition and does not, on its face, govern land-based premises. The verification pass also found that the dossier's "paragraph 1, verbatim" quotation is only the first sentence of paragraph 1.Checked 18 September 2026 · reachable
-
Gambling Commission
LCCP Section 17 – Customer identity verification (conditions index)
Index page only: it lists the single condition in section 17 and carries no substantive wording and no last-updated date.Checked 18 September 2026 · reachable
-
Gambling Commission
LCCP social responsibility code provision 3.2.11 – remote SR code (age verification)
No last-updated date is displayed. The verification pass corrected the quotation: the sub-items are lettered (a), (b), (c) — not numbered — and limb (c) reads "gamble with the licensee using either their own money or any free bet or bonus".Checked 18 September 2026 · reachable
-
Gambling Commission
New age and identity verification rules – changes to the LCCP from Tuesday 7 May
Published 3 May 2019. This is a news article describing a change, not the current consolidated rule. The verification pass could not reproduce any mention of a previous 72-hour verification window on this page; that detail must not be attributed to it.Checked 18 September 2026 · reachable
-
Gambling Commission
Opening accounts (guide for the public and players, print view)
Reached only via the print view; the ordinary guide path returns HTTP 404. Recorded as a negative finding: the Commission's consumer account-opening material contains no anti-money-laundering content.Checked 18 September 2026 · reachable
- Gambling Commission Our approach to preventing money laundering Checked 18 September 2026 · reachable
-
Gambling Commission
Public register of gambling businesses, personal licences, premises and regulatory actions
Links five registers — gambling businesses, personal licences, regulatory actions, public statements, premises — plus a Freedom of Information item. No last-updated date, and the page states no retention period, contrary to what search-engine summaries claim.Checked 18 September 2026 · reachable
-
Gambling Commission
Public Register of licensees, premises and regulatory actions — digital service
Service landing page with a 'Start' button into the register. Shows a build identifier ('Release-181') but no last-updated date.Checked 18 September 2026 · reachable
-
Gambling Commission
Register of gambling businesses – full list
Browsable list with activity and remote/non-remote filters applied by an 'Apply filter' button. Query-string search parameters are ignored: five patterns were tested and each returned the unfiltered list, which a reader who does not notice would mistake for a result.Checked 18 September 2026 · reachable
-
Gambling Commission
Register of gambling businesses (search)
The search field is labelled 'Search by business name, trading name, domain name or account number', so domain search is officially supported. Two caveats the register states or demonstrates itself: 'Domain names and trading names are provided by the gambling business' — the domain list is self-reported, not compiled by the regulator — and no Commission page defines what the status values (Active, Expired, Forfeited, Lapsed, Pending, Revoked, Surrendered, Suspended) actually mean. The search is form-driven: there is no link that runs it for you.Checked 18 September 2026 · reachable
-
Gambling Commission
Taking your complaint to an Alternative Dispute Resolution (ADR) provider
This consumer page carries no link to the Commission's list of approved ADR providers — it routes the consumer via the operator, which 'should be able to tell you which ADR provider to use'. It also records what ADR will not take: customer service issues, and refusal to accept a bet or a customer's custom.Checked 18 September 2026 · reachable
- Gambling Commission The 2023 money laundering and terrorist financing risks within the British gambling industry – Introduction Checked 18 September 2026 · reachable
-
Gambling Commission
The 2026 money laundering and terrorist financing risks within the British gambling industry
The individual per-sector risk ratings sit in section pages that were not fetched; do not reuse the 2020 ratings as current.Checked 18 September 2026 · reachable
-
Gambling Commission
The money laundering and terrorist financing risks within the British gambling industry – 1. Executive summary
This is the 2020 assessment — two generations out of date at the check date. Its sector ratings must not be presented as current.Checked 18 September 2026 · reachable
-
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – 1.4 The role of the Gambling Commission
URL recorded exactly as fetched. This subsection was served under aChecked 18 September 2026 · reachable
/manual/prefix while sibling subsections are cited under/guidance/. Both resolve and the alias is not a dead link, but the verifier recommended the/guidance/form for durability; that form was not captured as a fetched URL, so the alias is what is recorded here. -
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – 6.10 Identification and verification
Observed staleness in the official text: this current fifth-edition page still contains a passage referring to the superseded 2003 Regulations, although the operative framework throughout the rest of the guidance is the 2017 Regulations. Single-pass extractions from this page proved unreliable.Checked 18 September 2026 · reachable
- Gambling Commission The prevention of money laundering and combating the financing of terrorism – 6.17 Requirements to cease transactions or terminate relationship Checked 18 September 2026 · reachable
-
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – 6.2 Risk-based customer due diligence and risk profiling
URL recorded exactly as fetched, under theChecked 18 September 2026 · reachable
/manual/alias; the page's own canonical breadcrumb points into/guidance/. -
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – 6.4 Customer due diligence measures
Fifth edition (Revision 5), published 13 November 2020. This guidance is addressed to remote and non-remote casino operators, not to every gambling licensee.Checked 18 September 2026 · reachable
-
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – 6.5 Timing of verification
The page does not use the labels "on-entry approach" or "threshold approach"; those sit in adjacent sections.Checked 18 September 2026 · reachable
-
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – 6.7 Enhanced customer due diligence and enhanced ongoing monitoring
Source of funds and source of wealth sit in the enhanced tier and are risk-triggered, not universal. Independently confirmed: the page does not say what happens if enhanced due diligence cannot be completed.Checked 18 September 2026 · reachable
-
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – 6.8 Threshold approach
Live conflict: this page states the casino threshold as €2,000 while legislation.gov.uk's revised text of the same provision states £2,000. Both were fetched on the same day by two analysts and the conflict was reproduced. Do not publish either figure as settled.Checked 18 September 2026 · reachable
-
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – 8.14 Tipping off or prejudicing an investigation
The page states no maximum penalty. Its offence set also includes section 342 of the Proceeds of Crime Act (prejudicing an investigation), not only section 333A. This is why an operator may be legally unable to explain a delay.Checked 18 September 2026 · reachable
- Gambling Commission The prevention of money laundering and combating the financing of terrorism – 8.2 What is meant by knowledge and suspicion Checked 18 September 2026 · reachable
-
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – Part 6: Customer due diligence (contents)
Contents page only — it carries no substantive wording and should not be cited for any rule. It confirms the guidance is the fifth edition (Revision 5).Checked 18 September 2026 · reachable
-
Gambling Commission
The prevention of money laundering and combating the financing of terrorism – Part 8: Suspicious activities and reporting (contents)
Contents page only.Checked 18 September 2026 · reachable
-
Gambling Commission
The prevention of money laundering and combating the financing of terrorism (guidance for casino operators)
Fifth edition (Revision 5), published 13 November 2020. No statement that the guidance is HM Treasury-approved was visible on the page; do not assert that it is.Checked 18 September 2026 · reachable
-
Gambling Commission
Upcoming changes to The Money Laundering Regulations 2017
Notice of changes in force 30 June 2026, including the conversion of the casino threshold from euros to sterling. The notice does not print the amending instrument's number; that was identified separately from legislation.gov.uk as S.I. 2026/621.Checked 18 September 2026 · reachable
-
Gambling Commission
What type of documents can I be asked to provide?
Six years old at the check date. Its key line — that the Commission does not say which types of information gambling businesses should ask for — means there is no official list of accepted documents; any "documents you will need" list is industry practice, not regulation.Checked 18 September 2026 · reachable
-
Gambling Commission
Why do I need to provide ID?
Not independently re-fetched in the verification pass.Checked 18 September 2026 · reachable
-
Gambling Commission
Why gambling businesses ask for selfies
Six years old at the check date and not independently re-fetched in the verification pass.Checked 18 September 2026 · reachable
-
Gambling Commission
Why gambling businesses want to know about your finances
Predates the GB financial-risk-check policy developments of 2024–2025, which were not verified in this research. The page states no Commission-set deposit or loss threshold and does not say what happens if a customer declines.Checked 18 September 2026 · reachable
- legislation.gov.uk (The National Archives) Money Laundering Regulations 2017, regulation 14: High value dealers, casinos, auction platforms and art market participants Checked 18 September 2026 · reachable
- legislation.gov.uk (The National Archives) Money Laundering Regulations 2017, regulation 21: Internal controls Checked 18 September 2026 · reachable
- legislation.gov.uk (The National Archives) Money Laundering Regulations 2017, regulation 28: Customer due diligence measures Checked 18 September 2026 · reachable
- legislation.gov.uk (The National Archives) Money Laundering Regulations 2017, regulation 33: Obligation to apply enhanced customer due diligence Checked 18 September 2026 · reachable
-
legislation.gov.uk (The National Archives)
Money Laundering Regulations 2017, regulation 40: Record-keeping
The ten-year figure in regulation 40(4) is a ceiling on transaction records within a business relationship, not a general retention period.Checked 18 September 2026 · reachable
-
legislation.gov.uk (The National Archives)
Money Laundering Regulations 2017, regulation 8: Application
Independently confirmed: the list of relevant persons names casinos but not betting, bingo, lotteries or arcades — so the Regulations do not cover most gambling in Great Britain. Version served carried changes known to 16 September 2026.Checked 18 September 2026 · reachable
-
legislation.gov.uk (The National Archives)
The Money Laundering and Terrorist Financing (Amendment) Regulations 2026 (S.I. 2026 No. 621) – Table of contents
Fetched during the independent verification pass rather than the original research, to identify the instrument behind the 30 June 2026 changes — the Commission's own notice does not print an SI number.Checked 18 September 2026 · reachable
- legislation.gov.uk (The National Archives) The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 – Table of contents Checked 18 September 2026 · reachable
-
legislation.gov.uk (The National Archives)
The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, regulation 27: Customer due diligence
Read the version banner, not just the text. The page is marked "Latest available (Revised)" and flags S.I. 2026/621 threshold changes effective 30 June 2026 as not yet applied, although that date precedes the check date — so the displayed £2,000 may already be superseded. The displayed sterling figure also conflicts with the €2,000 in the Commission's own guidance. The operative provision is regulation 27(5), with qualifying transactions in 27(6).Checked 18 September 2026 · reachable
-
National Crime Agency
Suspicious Activity Reports (SARs)
Confirms the NCA has sole national responsibility for receiving, analysing and disseminating SARs. A consumer cannot find out whether they were the subject of one.Checked 18 September 2026 · reachable
-
National Crime Agency
UKFIU guidance – Chapter 2: Submitting a SAR (PDF)
The PDF downloaded (about 452 KB) but no text could be extracted in the research environment, so nothing in it is verified. The document title and version were taken from a search listing and were not confirmed from the file itself.Checked 18 September 2026 · uncertain