
Content
- What UK Gambling Commission Regulation Covers
- How Non-UK-Regulated Casinos Fit into the UK Legal Picture
- What Changes When a Casino Is Outside GamStop
- Where Non-UK Casino Licences Come From
- What a Non-UKGC Casino Site May Mean for You
- Crypto Casinos, Payment Routes and Withdrawal Terms
- Anjouan Licensing: What Its Framework Does and Does Not Provide
- Are Slot Machines Regulated Differently at Offshore Casinos?
- How to Check a Casino Licence Before You Use It
- When a Casino Is Regulated by the UK Gambling Commission
A foreign licence does not authorise an operator to offer real-money gambling to customers in Great Britain without the relevant UKGC licence.
What UK Gambling Commission Regulation Covers
For an online casino to serve customers in Great Britain legally, its operator must hold a licence from the UK Gambling Commission (UKGC). That requirement applies whether the company is based in Britain or runs its business from somewhere else. The operator’s address does not determine which regulator’s rules apply to its services in this market.
A UKGC licence is the legal authorisation an operator needs to offer real-money online gambling to customers in England, Scotland and Wales. When a casino describes itself as licensed and regulated in Great Britain, the important point is not simply that it has a licence somewhere. It must have the relevant UKGC operating licence for the gambling services it provides to customers here.
This distinction matters when you are comparing UK-regulated online casinos with sites licensed elsewhere. A foreign licence does not replace the UK permission required to serve the British market. A company may be established overseas and may hold authorisation from another jurisdiction, but that does not remove the UKGC requirement if it is offering gambling to customers in Great Britain.
What the licence tells you
A UKGC licence places the operator within Britain’s gambling regulatory system. It identifies the regulator responsible for the operator’s permission to provide covered gambling services in this market. It is therefore a more meaningful indicator of the site’s status for a British customer than a general claim that the casino is “licensed”.
That does not mean a licence guarantees that every experience will be trouble-free, or that gambling is without risk. It tells you which regulatory framework the operator is required to work within when serving customers in Great Britain. You should not read the word “licensed” on its own as proof of UK regulation: the relevant question is whether the operator holds the UKGC licence required for its activity.
The distinction also prevents a common misunderstanding. A casino can be licensed and regulated in another country while remaining outside the UKGC system. For a customer in Great Britain, those are different regulatory statuses. The existence of a foreign licence does not make the operator a UK-regulated casino.
Non-Gamban Casinos in the UK: What the Label Means
The operator’s location does not change the rule
Online services can be provided across borders, but the location of the company does not decide whether it needs permission to serve British customers. The UKGC requirement follows the market the operator serves: remote gambling operators supplying services to customers in Great Britain need the relevant UK licence, regardless of where the business is based.
So, when a site presents itself as a non-UK-regulated casino, the phrase describes its position outside UKGC oversight; it does not create an exception to the requirement for operators serving Great Britain. A site may be accessible online and may display a licence from another jurisdiction, but neither fact turns that authorisation into a UKGC licence.
This is why “licensed overseas” and “licensed for Great Britain” should not be treated as interchangeable descriptions. If you are considering whether a casino is regulated for customers here, focus on the regulator responsible for its permission to operate in this market, not the country named in its company address or the presence of a licence badge on its pages.
The baseline for comparing sites
The UKGC licence provides the baseline for understanding what “regulated” means in the British context. It is not a generic label for any online casino with a licence. It refers to an operator holding permission from the UK regulator to provide the relevant gambling services to customers in Great Britain.
That baseline is useful when you encounter claims about online casinos regulated outside the UK. Such a casino may have a different regulator and a different licensing framework, but that does not change the UKGC rule for operators serving Great Britain. The key distinction is between an operator authorised in another jurisdiction and an operator holding the licence required for this market.
A site’s location, branding or claims about international availability cannot answer that distinction by themselves. What matters is whether the operator has the appropriate UKGC authorisation to serve customers in Great Britain. Without that, it is not a UK-regulated online casino, even if it describes itself as licensed elsewhere.
For you, this is the starting point when reading any casino’s licensing claims: UK regulation means UKGC authorisation for the operator’s service to customers in Great Britain. A licence issued outside the UK may describe a separate regulatory relationship, but it does not stand in for the British licence.
UK regulation means the operator holds a UKGC authorisation to serve customers in Great Britain; a licence issued outside the UK does not stand in for the British licence.
How Non-UK-Regulated Casinos Fit into the UK Legal Picture
The legal position depends on who is providing the gambling service. Under the Gambling Act 2005, the focus is on operators supplying gambling to the UK market, rather than on individual customers placing bets. A company does not avoid that responsibility simply because it is based abroad or holds permission from a regulator in another country.
For operators serving customers in Great Britain, a foreign licence is not a substitute for a UK Gambling Commission licence. A non-UK-regulated casino may be available to someone in Britain, but availability does not make its services authorised for the British market. The distinction matters: the operator’s obligations and the player’s position are not the same question.
What the law says about players
UK law does not expressly make it an offence for a British citizen to use a gambling service licensed in another country. Nor do players commit a criminal offence simply by gambling on a site that lacks a UK licence. Those points describe the position of the individual player; they do not mean that the operator is entitled to offer gambling to people in Britain without the required UK authorisation.
It is easy to read a site’s foreign licence as proof that the whole arrangement is lawful in the UK. That conclusion does not follow. The licence may relate to the operator’s activity under another jurisdiction’s rules, while UK requirements concern services offered to customers in Great Britain. If you are considering a non-UK-regulated casino, keep those separate questions in view: a player’s lack of criminal liability is not approval of the operator’s conduct.
VPN-Friendly Casinos in the UK: Access and Rules
“Accepting UK players” can be ambiguous
A website may load in Britain, permit account registration or process a deposit. Those practical signs do not establish that it is licensed to supply gambling here. Likewise, a casino’s claim that it accepts customers from the UK should not be treated as confirmation that it meets UK requirements. The phrase describes what the site appears to allow, not necessarily what the operator is authorised to do.
This is especially relevant when you see a casino described as an option for UK players or as a site outside GamStop. Those descriptions do not settle the legal question. The central issue remains whether the operator holds the relevant UK licence to serve customers in Great Britain. A licence issued elsewhere, or the ability to access a website, cannot answer that question by itself.
The Gambling Act 2005 applies in England, Wales and Scotland, but not Northern Ireland. If you live in Northern Ireland, or are travelling or using a service across borders, do not assume that one general description covers every local situation. Check the rules that apply where you are before using an offshore gambling service.
Your decision still needs care
The fact that a player does not commit a criminal offence is not a guarantee that using a particular site is risk-free, nor does it settle every possible legal or practical issue. You are responsible for checking the laws that apply to you and understanding the implications of using a gambling service licensed outside the UK. Consider whether the operator’s terms permit customers in your location and whether the foreign licence actually covers the service being offered.
Legal Responsibility
While using a non-UK licensed site is not a criminal offence for the player, it does not mean the operator is authorised to offer gambling in the UK.
Avoid treating promotional wording, a licence badge or successful access to the site as a legal check. If you cannot establish whether the operator is authorised to serve people in your part of the UK, do not assume that its overseas status answers the question. The key distinction is straightforward: UK law places the relevant licensing duty on operators supplying the market, while a player’s use of an unlicensed site is not, in itself, a criminal offence.
Top online casinos in the UK
- SlotoSportBonus: 500% up to £ 10 200+ 777 FS · Payout speed: 1-3 business days
- BeOnBetBonus: 100% up to €500 + 100 FS · Payout speed: 1-3 business days
- AmunbetBonus: Join now and get 450% up to 2,700 GBP + 450 FS · Payout speed: 1-3 business days
- NightWinBonus: £900 + 400 free spins · Payout speed: 1-3 business days
- WinBeastBonus: €5000 + 500 FS + €650 Freebet · Payout speed: 1-3 business days
- ChanzeBonus: Slots Welcome Bonus #1 200% up to €500 · Payout speed: 1-3 business days
- DieselwinBonus: Welcome Pack 250% up to £4000 + 200 FS · Payout speed: 1-3 business days
What Changes When a Casino Is Outside GamStop
GamStop is the UK’s self-exclusion scheme for gambling websites licensed by the UK Gambling Commission. A casino that is not part of GamStop will not be included in that scheme, so registering with GamStop does not block your access to it. That distinction matters if you have self-excluded because gambling is causing harm: a site outside the scheme may remain available even when UK-licensed sites are closed to you.
The label “not on GamStop” describes a boundary, not a quality rating. It does not tell you whether a casino is trustworthy, whether its safeguards work well, or whether it is suitable for you. Nor does it mean that the site is a safer alternative. The practical question is what protections you can actually use if you need to pause, set limits or get support.
At a casino outside the UK system, you forfeit access to mandatory responsible-gambling tools that apply to UKGC-licensed operators. You also cannot rely on GamStop to carry your self-exclusion across to that site. Do not assume that a casino will offer equivalent controls simply because its own website refers to responsible gambling. Check what the account lets you do before depositing, including whether you can set deposit limits or exclude yourself directly with the operator. If those controls are absent, unclear or difficult to activate, treat that as a meaningful gap rather than a minor inconvenience.
This is especially important if you have already chosen to self-exclude. Looking for another site that accepts you can undo the barrier you put in place for yourself, and the absence of GamStop means you may need to rely on a separate operator-level restriction. If you are trying to stop gambling, do not open an account to test whether the site will let you in. Consider using blocking tools on your devices and seeking support from a gambling-help service instead. A change of website does not remove the reason you self-excluded.
There is also a difference between a tool being mentioned and being usable in practice. Before you create an account, look for clear information on how to set or change limits, request a break, and close an account. Check whether the operator explains how to contact its support team about gambling concerns. If the terms are difficult to find or the process is not clear, you have little basis for assuming that you can act quickly when you need to.
Responsible-gambling protections are only part of the gap. Non-UK-regulated casinos may apply less stringent standards for responsible gambling and data protection than UKGC-licensed operators. That can affect what controls are available and how your personal information is handled. A site’s claim that it takes player welfare seriously is not the same as having the UK’s mandatory protections behind it.
At casinos outside the UK system, you forfeit access to mandatory responsible-gambling tools and the GamStop self-exclusion network.
The same caution applies to phrases such as “non-GamStop casino” or “casino outside GamStop”. They say that the site is outside the scheme; they do not establish what other safeguards it provides. Whether a site is described as a casino regulated outside the UK or simply as a site not on GamStop, focus on the specific limits and exclusion options you can verify, not the label.
If you have self-excluded, treat any site outside GamStop as a possible route around the boundary you set. If you have not, remember that a non-UK-regulated casino may not provide the mandatory tools available at a UKGC-licensed site. GamStop status alone cannot tell you how a casino handles a gambling problem, and it should not be used as a shortcut for judging safety.
Where Non-UK Casino Licences Come From
A non-UK-regulated casino is an online gambling site that operates without oversight from the UK Gambling Commission. It may still hold a licence issued elsewhere. The two descriptions are not contradictory: a licence from another jurisdiction is not a UK Gambling Commission licence.
Malta, Curaçao, Gibraltar and Anjouan are among the jurisdictions associated with these casinos. Their names can appear in a site’s licensing information, but they are not interchangeable labels for a single regulatory system. Each refers to a separate jurisdiction, and seeing one named does not establish that the site is overseen by the UK regulator.
Non-GamStop Curacao Casino Sites: UK Checks
It also helps to distinguish a casino’s place of operation from the jurisdiction that issued its licence. A company may be based in one place and hold permission from an authority elsewhere. A country name in an operator’s description, by itself, therefore does not tell you which regulator is responsible for its gambling licence.
The phrase “non-UK-regulated” describes the absence of UK Gambling Commission oversight, not the absence of every possible licence. Some sites in this category identify an overseas licensing jurisdiction; others may present their status differently. The relevant point is that a licence issued outside the UK does not turn the site into a UK-regulated casino.
The four jurisdictions are best treated as separate entries on a map, not as a ranking or a recommendation. Their appearance in the same list does not mean their rules, oversight or player protections are equivalent. Nor does the presence of a jurisdiction’s name alone tell you what a particular operator’s licence covers. The name identifies a claimed licensing route; it should not be read as a general assurance about the site.
This distinction matters when you encounter terms such as “international licence” or “foreign-licensed casino”. Those descriptions can sound broad, but the meaningful detail is the named licensing jurisdiction and the regulator associated with it. A non-UK-regulated casino may be licensed by Malta, Curaçao, Gibraltar or Anjouan, but none of those names should be mistaken for the UK Gambling Commission.
So, when a site describes itself as licensed, separate that claim from the question of UK oversight. The jurisdiction named may explain where its licence comes from; it does not change the fact that the casino is outside the UK regulator’s system. That is the basic distinction behind the term “non-UK-regulated casino”.
What a Non-UKGC Casino Site May Mean for You
If a dispute arises with a casino that does not hold a UK Gambling Commission licence, you cannot use the Commission’s player complaint route to resolve it. The fact that a site accepts your account or displays a licence from another jurisdiction does not give you access to UK regulatory protections. You also do not have access to the UK’s Financial Ombudsman Service for a gambling dispute with an offshore operator.
Dispute Resolution
If a dispute arises with a non-UKGC casino, you cannot use the Commission’s player complaint route or the Financial Ombudsman Service.
That changes what happens if the casino interprets its terms differently from you, delays action on a complaint or changes its rules while you have money in the account. You may be left dealing with the operator directly, under its own complaints procedure. A policy describing how to complain is not the same as an independent body able to review the case and make a decision.
The position depends on the licence the operator claims to hold. For example, the Anjouan authority does not handle, mediate or decide individual player complaints. An Anjouan-licensed casino also does not provide an independent dispute-resolution route comparable to services approved by the UKGC. If the operator’s response does not satisfy you, there may be no external route with a similar role to take the matter further.
This does not mean every complaint will be ignored or that every operator will act in the same way. It does mean you should not assume that a regulator will intervene for you. A casino’s support team may explain its position, but it represents the operator; it is not an independent adjudicator. If a dispute concerns a bonus condition, account restriction or unpaid balance, the operator’s terms and its own records may carry considerable weight in the process.
Before depositing, read the rules that could affect a future withdrawal or account decision, and save a copy of the terms as they appear at the time. Keep confirmation messages and records of your transactions and contact with support. These steps may help you set out what happened, but they cannot create a UK complaint route where one does not exist or guarantee that the operator will resolve the dispute in your favour.
Treat statements such as “licensed” or “customer support available” as limited information. A licence label does not establish that you can take a complaint to an independent body, and a support channel does not promise a particular outcome. If you are considering a non-UKGC-regulated casino site, make the possibility of having no UK regulator to turn to part of your decision before you open an account. If the terms later change or a disagreement develops, the practical options available to you may be narrower than they would be with a UKGC-licensed operator.
Crypto Casinos, Payment Routes and Withdrawal Terms
A payment method shown at a non UK regulated casino tells you how you may be able to deposit, not necessarily how you can withdraw. Offshore sites may accept cards, e-wallets, bank transfers and cryptocurrency, sometimes using payment processors other than the ones familiar from UK regulated casinos. Before sending money, check the cashier and the withdrawal terms separately: a deposit route may not be available for payouts, and the operator may require you to use another method.
Crypto does not have a separate gambling regulator simply because a casino accepts it. The relevant oversight depends on the operator’s licence and jurisdiction. Cryptocurrency payments can also bypass the UK ban on credit-card-funded gambling, but that does not make the casino UK regulated or give you the protections attached to a UK Gambling Commission licence. Consider whether you can trace and recover a payment if a withdrawal is delayed or disputed.
Do
- Check withdrawal terms separately from deposit options
- Verify fees and currency conversion rates
- Read current promotion rules and wagering requirements
Don’t
- Assume a deposit route is available for payouts
- Rely on reported withdrawal speeds as a guarantee
- Assume a headline bonus includes unlimited withdrawals
Some specialist reviews also describe deposits charged to a mobile phone bill or taken from a prepaid balance. Treat these as reported options, not a standard feature of the market, and verify that the operator currently offers them. In every case, check fees, currency conversion, minimum and maximum transaction amounts, and any conditions attached to the payment method before depositing.
Published accounts of withdrawal speed do not agree. Some describe payouts arriving within 24 hours to five business days, while others say a withdrawal can take three or four weeks; outside the UK regulatory system, there is no regulatory clock to enforce a payout deadline. A faster policy may be possible, but it is not a promise that your payment will arrive on time. Read the operator’s stated processing period and ask what can pause it, including identity checks, payment-provider processing or a review of account activity.
A specialist review may also report daily, weekly or monthly withdrawal caps, which can mean that a larger win is paid in instalments. Treat that as a possibility to verify in the casino’s current terms, rather than an industry-wide rule. The same care applies to verification: a specialist review may describe requests for notarised documents or video calls. If the required documents, process or timeline are unclear, resolve that before depositing; a payout can be held while checks are outstanding.
Bonuses can add further conditions. Specialist reviews have reported welcome offers with wagering requirements of 35x or more, but terms vary and may change. A 40x requirement, where offered, might apply to the bonus and deposit together, to the bonus alone, or to the bonus and free spins together. Reported free-spin terms include wagering of 30–50 times winnings, withdrawal caps of £5–£50 and expiry within 24–72 hours. These are offer-specific details, not guaranteed terms. Read the current promotion rules, including eligible games and withdrawal conditions, before accepting an offer: a headline bonus does not tell you how much you can withdraw or when.
Anjouan Licensing: What Its Framework Does and Does Not Provide
An Anjouan casino licence should not be read as proof that player funds are protected or that games are independently checked. The framework does not require operators to segregate customer balances from company money, and it does not mandate random number generator testing or audits. Those are meaningful gaps: a licence label alone cannot establish how a casino checks its games or what would happen to balances if the business failed.
Fund segregation matters because it can affect whether customer money remains separate from an operator’s own funds. Anjouan-licensed casinos do not guarantee that separation. If an operator becomes insolvent, players are unsecured creditors rather than holders of funds protected by a required segregation arrangement. In practical terms, you may have to seek repayment alongside other creditors, with no assurance that your balance will be recovered.
The absence of mandated testing and audits also limits what you can infer from the licence about game integrity. It does not establish that a casino’s random number generator has been independently tested or that the operator is subject to a required audit process. That is not proof that a particular game is unfair; it means the framework itself does not require those checks. Do not treat the presence of familiar games or a licence badge as evidence of testing.
Complaints have a separate limitation. The Anjouan authority does not handle, mediate or decide complaints between players and casinos. If a dispute concerns a balance, a bonus term or an account decision, the regulator is not an independent adjudicator you can ask to resolve it. The casino may have its own complaints process, but that is not the same as an external body reviewing the dispute.
Fund Segregation
No requirement to keep customer balances separate from company money.
Game Integrity
No mandated random number generator testing or audits.
Dispute Resolution
The authority does not handle, mediate, or decide individual player complaints.
Before depositing, read the operator’s terms and identify how it says complaints are handled, what records you should keep and which company is responsible for the account. Keep copies of relevant terms and communications. These steps may help you explain a dispute to the operator, but they do not create a regulator-run complaint route or guarantee a particular outcome.
An Anjouan casino licence therefore gives you limited assurance on these specific points: it does not require game testing, audits or segregated player funds, and the authority does not adjudicate player complaints. Consider those limits before deciding whether the service is suitable for you. A licence is not, by itself, a promise that your funds are ring-fenced, games are independently tested or disputes will receive external review.
Are Slot Machines Regulated Differently at Offshore Casinos?
The rules depend first on the operator, not simply on the slot displayed on your screen. A company serving customers in Great Britain must hold a UK Gambling Commission licence, even if it is based elsewhere. If a non UK regulated casino accepts players without that licence, the games on its site are not brought under UKGC oversight just because they are familiar titles or appear in a polished online lobby.
That distinction matters when you ask how slot machines are regulated. A game’s name or appearance does not tell you which standards apply to it, who has assessed it, or whether anyone independent has checked its operation. Nor does a casino’s statement that a slot is fair establish UK regulatory supervision. The operator’s licensing position is the relevant starting point for understanding which regulator’s requirements apply to the gambling service.
For a casino operating under Anjouan’s framework, the framework does not require random number generator testing or audits. That is a specific limitation of that framework; it should not be read as proof that every game at every non UK regulated casino has been tested, or that no other checks exist. The standards can differ between jurisdictions, and a licence label alone does not answer questions about a particular slot.
If you are considering a site, look for clear information about the operator and the regulator named in its licence, then check what the stated framework actually requires. Do not treat a provider logo, a game description, or a claim of independent testing as a substitute for identifying who is responsible for oversight. Those details may help you understand what the operator says about its games, but they do not turn the casino into a UKGC-licensed service.
This is separate from the rules that apply to legal online slots in Britain. Those requirements attach to operators serving customers in Great Britain. Where the operator lacks a UK Gambling Commission licence, you should not assume that British rules govern the slot or that the UK regulator has assessed that individual game. If a site does not explain its testing arrangements in plain terms, you cannot safely infer them from the game’s popularity or presentation.
How to Check a Casino Licence Before You Use It
A licence badge on a casino website is a claim, not proof. Before you create an account or send money, identify the company operating the site and check its details against the register maintained by the regulator named on the badge. Do not rely on a logo, a copied certificate or a link that leads only to the casino’s own page.
Verify Casino Licence
- Identify the company operating the site
- Check the operator’s details against the regulator’s public register
- Confirm the company name matches the terms and conditions
- Verify that the licence has not expired
For a UK Gambling Commission licence, use the Commission’s public register to look up the operator. Check that the company name and licence information correspond to the site you intend to use. If you cannot establish that the business behind the casino is the one listed, treat the licence claim as unverified. A UKGC entry is relevant to a casino regulated for the British market; a licence from another jurisdiction is not a substitute for it.
For an Anjouan casino licence, look for the operator’s entry in Anjouan’s public register. Compare the registered company name with the name in the site’s terms and conditions, and check that the licence has not expired. Names that differ, missing details or an expired entry are reasons to stop and seek clarification rather than assume the badge is accurate. The licence should relate to the operator, not merely to a similarly named company.
Then consider what the licence actually permits. An Anjouan casino licence does not authorise the operator to serve customers in the United Kingdom. A genuine entry therefore does not establish that the casino has UK Gambling Commission oversight or that you have access to UK regulatory protections.
Check the operator’s terms for a named complaints route, but do not confuse an internal process with independent review. Anjouan-licensed casinos are not required to provide an independent dispute resolution service comparable to those approved for UKGC-licensed operators. Nor does an Anjouan licence require a casino to join GAMSTOP. A licence label alone cannot promise either protection.
If the register is unavailable, the company details do not match, or the operator’s explanation is unclear, do not treat uncertainty as confirmation. You can check a UKGC licence through the Commission’s register, but a foreign licence does not make a site UK-regulated. Verify the specific operator and understand the limits of its licence before deciding whether to proceed.
When a Casino Is Regulated by the UK Gambling Commission
A casino regulated by the UK Gambling Commission operates under the rules that apply to gambling businesses serving customers in Great Britain. The operator’s registered office or other base does not change that requirement: if it offers real-money gambling to people in England, Scotland or Wales, it must hold the relevant UKGC licence.
That is what separates UK regulation from oversight elsewhere. A licence issued by another jurisdiction does not replace a UK Gambling Commission licence for serving the British market. A site may describe itself as licensed, but the key point for you is whether it is authorised to provide gambling services in Great Britain. Without UKGC oversight, you should not treat the site as a UK-regulated casino or assume that the same standards and protections apply.
Age checks are part of the process too. Operators must verify a customer’s age before allowing them to deposit money into a gambling account. Online gambling in the UK is for people aged 18 and over when the operator holds a UK Gambling Commission licence. If a site lets you deposit before confirming that you meet the age requirement, that is a clear reason to pause rather than continue.
Regulation is not a promise that you will win or that every experience will be trouble-free. It does, however, identify which system governs an operator serving customers in Great Britain. When you compare a UK-licensed casino with a non UK regulated casino, do not rely on familiar branding, a polished website or a licence claim alone to make them seem equivalent. The location of the business is not the deciding factor; the licence required for the market it serves is.
For your own decision, keep the distinction simple: UKGC regulation means the operator is authorised under the British system, while a foreign licence alone does not confer that status. Age verification before deposits is one concrete requirement, not an optional courtesy. If you are unsure which rules apply to a site, do not assume that an overseas licence makes it a UK-regulated service.
Are non-UK-regulated casinos legal for UK players to use?
UK law does not explicitly prohibit you from using a gambling service licensed in another country, and players do not commit a criminal offence by gambling on an unlicensed site. However, operators serving customers in Great Britain need a UKGC licence; a foreign licence does not replace it.
What payment options are available at non-UK casinos?
You may find credit cards, e-wallets, bank transfers and cryptocurrencies, often processed through alternative providers. Some sites also accept payments charged to your phone bill or deducted from a prepaid balance.
What is the biggest risk of playing at a non-UK-regulated casino?
You may have less protection if the operator withholds your money or fails. Anjouan-licensed casinos, for example, do not guarantee that player funds are kept separate, so you could be an unsecured creditor if the operator fails.
Are gaming sites not on GamStop permitted for UK players?
You are not committing a criminal offence simply by using one. However, sites outside GamStop are not part of the UKGC self-exclusion scheme, and operators serving customers in Great Britain require a UKGC licence.