Offshore licensing, from a UK reader's perspective

Last updated · Reviewed by Duncan Rothbury, Regulatory & Compliance Analyst

Diagram of offshore casino licensing jurisdictions with tiers

A licence badge in a website footer is a claim, not proof. This page walks through the regimes you'll encounter in the non-GamStop segment, what each actually requires, and how to check whether a given badge is worth what it looks like it's worth.

Why the licensor matters

Every online casino operates under some form of legal authority. The licensor sets the rules on capital adequacy, player-fund segregation, dispute handling, advertising standards, technical testing, and — critically — what happens when a complaint is filed. Two operators with the same games and the same interface can offer very different consumer experiences depending on whose rules they're playing under.

The UK Gambling Commission sits at the strict end of the spectrum. Its Licence Conditions and Codes of Practice run to hundreds of pages, its enforcement staff is well-resourced, and its fines are large enough to matter to the licensees. The offshore regulators covered below range from meaningfully strict to essentially nominal, and the practical experience of playing at their licensees varies accordingly.

Malta Gaming Authority (MGA)

The closest analogue to the UKGC in the offshore world. MGA-licensed operators must segregate player funds in ring-fenced accounts, hold minimum capital reserves, submit to the Malta Financial Services Authority for anti-money-laundering supervision, and belong to an Alternative Dispute Resolution scheme. Complaints go through a formal process with the regulator as arbiter of last resort.

Games are tested by approved labs (typically GLI, iTech Labs, or eCOGRA) against published technical standards. Return-to-player figures are audited. Advertising is subject to specific rules on responsible-gambling messaging and prohibitions on targeting minors or self-excluded players.

Most large MGA holders also hold UKGC licences and are therefore inside GamStop. MGA-only operators exist in the non-GamStop pool but are a minority.

Curaçao Gaming Control Board and the LOK reforms

Curaçao has been the workhorse of offshore gambling licensing for two decades. Historically it operated a sublicensing model: a handful of "master licence" holders were licensed by the government, and each master licensed hundreds of operators onwards. This meant the operator's actual compliance relationship was with the master licensee, not the regulator — a structure that critics correctly identified as delivering weaker oversight than a direct-licence regime.

The Landsverordening op de kansspelen (LOK), enacted through 2023–2024, is progressively replacing this with direct issuance by a new Curaçao Gaming Authority. New operators apply directly, are supervised directly, and are subject to updated standards on player-fund handling, complaints processes, and reporting. Existing sub-licensees are being transitioned across.

What this means for a UK reader in practice: a Curaçao-licensed operator today may be under the old master-licence chain, the transitional regime, or the new direct-licence regime. The regulator's own site lists current direct licensees. A verifiable direct licence is a meaningfully stronger signal than a sub-licence lineage.

Anjouan Offshore Financial Authority

Anjouan (an island in the Union of the Comoros) has emerged as a lower-cost alternative to Curaçao. Its licensing regime is direct, faster to obtain, and lighter on ongoing compliance requirements. Expect fewer mandatory reporting obligations and thinner complaints infrastructure than either Curaçao's new direct regime or MGA.

An Anjouan licence is real — verifiable through the regulator's portal — but the practical level of consumer protection behind it is towards the bottom of what this guide considers acceptable. Combined with other positive signals (established operator, published RTPs, working ADR route) an Anjouan licence is workable. As the sole regulatory signal on a new operator, treat it more cautiously.

Kahnawake Gaming Commission

The regulator of the Mohawk Territory of Kahnawake in Canada. A long-standing offshore regulator, quiet, with a decent reputation for handling complaints. Less common in the non-GamStop space today than a decade ago but still occasionally seen.

Isle of Man Gambling Supervision Commission

Comparable to MGA in stringency. Rare in the non-GamStop pool because most Isle of Man operators are British-market-focused and therefore inside the UKGC framework as well.

How to verify a licence

Every licence badge on an operator's site should be clickable and should lead to a page on the regulator's own domain confirming the licence number, the holder company, and the current status. If the badge is a static image, the link is broken, or the destination is a generic page rather than a specific record, that is a red flag — treat the licence claim as unverified.

Cross-reference the company name on the regulator's record with the company name in the operator's own terms and conditions. Mismatches happen legitimately (parent vs subsidiary) but they can also be a sign of a stale badge or a white-label complication.

What the licence does not tell you

A licence certifies process compliance, not outcome. It does not mean the operator will always pay withdrawals promptly, apply bonus terms fairly, or handle a dispute in your favour. It does mean there is a regulator to complain to if they don't. For a UK player used to UKGC-standard remedies (ADR, statutory rights, small-claims court in a familiar jurisdiction) that remedy path is meaningfully more distant with an offshore complaint, even a legitimate one.

See our player protection guide for a side-by-side of what each regime actually delivers.

Frequently asked

MGA (Malta) is the strongest for consumer protection, followed by Isle of Man, then Kahnawake. Curaçao under the new LOK direct-licensing regime is the strongest of the mid-tier options. Anjouan is real but at the lighter end.
Yes, but the process is slower, in writing, and often in Dutch or English via the regulator's portal. There is no equivalent of the UK ADR schemes' user-friendly interface. Keep records of everything from your first deposit.