What a licence actually obliges your casino to do

Checked against the regulators' own material on 19 September 2026. The British rulebook has been amended twice already this year, so every rule below carries its date.

On 30 September the phrase "deposit limit" stops meaning whatever a British operator would like it to mean. Eleven days. Most players will never be told.

It is a small change, and a good way into a question that gets skipped. Our guide on how to read a casino licence deals with confirming a licence exists and with why a licence issued in one country buys you nothing in another. Assume you have done all that, and the licence is real, and it covers you. What has the regulator actually made the operator promise? The answer runs to more than most licence badges suggest, and the two big regimes promise noticeably different things.

The limit you are offered before you put money in

Since October 2025 a British operator has had to prompt you to set a financial limit before your first deposit, keep the setting easy to find and change, and remind you every six months to look at your own account history. Most people click past it.

The real change is in the definition. From 30 September 2026 only a gross limit may be called a deposit limit, and it has to be offered over fixed time frames with at least equal prominence to anything else on the page. Until that date an operator can attach the same two words to a net limit, which counts your withdrawals back against the total. Deposit £100, win some of it back, withdraw, deposit again: under a net limit that money can cross the line repeatedly without the limit ever tripping. Under a gross limit it cannot. Same words on the button, different arithmetic behind it.

The Commission had originally set 30 June for this, then pushed it to the end of September to give operators more development time.

There is a trap for anyone who sets two limits at once, which is worth knowing because the interface rarely explains it: the most restrictive always wins. A £10 daily limit sitting alongside a £100 weekly limit gives you £10 a day and £70 a week. Not £100.

Malta asks less here. Under the Player Protection Directive, an MGA licensee has to offer either a deposit limit or a wagering limit; further limits are encouraged rather than required. An operator can therefore satisfy its regulator with a wagering limit alone and never put a deposit cap in front of you at all.

The wagering cap Malta never introduced

British licensees have been capped at 10× wagering on any incentive since 19 January 2026, and there is no Maltese equivalent. Malta regulates how an offer is presented and how arguments about it get resolved, but it does not tell an operator how large the multiplier may be.

You can see the difference in the turnover. A £50 bonus at 10× is £500 of wagering. The same £50 at 35×, an unremarkable figure in markets without a cap, is £1,750. Identical headline. Three and a half times the work. And that is before the basis, the game weighting and the max-bet clause move the number again, which our guide to wagering requirements works through properly.

Stopping

Both regulators require self-exclusion, but Britain is the one that made it national.

Social Responsibility Code 3.5.5 obliges British licensees to take part in GAMSTOP, so a single registration reaches every British-licensed operator at once. Since 1 April 2024 that duty has also covered firms taking bets by telephone and email rather than only by website and app.

Code 3.5.3 sets out what the individual operator must do, and it goes further than most people expect. The account is closed and the funds are returned; blocking withdrawals while continuing to accept stakes is expressly not good enough. Your details have to come out of the marketing databases, or at least be flagged, within two days. You also have to be able to exclude yourself through an automated route rather than only by asking customer services, which matters more than it sounds when the alternative is a live-chat agent asking why. Separately, the ordinary code expects a minimum period of six to twelve months, with an option of at least five years.

Malta's version stops at the operator's own door. It does carry one protection that Britain arrives at by a different route: while you are excluded you must not be able to gamble, but you must not be prevented from withdrawing your money either. Coming back requires a cooling-off period of at least 24 hours after a definite exclusion, and seven days after an indefinite one.

If you are reading this section for yourself rather than out of curiosity, self-exclusion and getting help is the practical version.

The money you have not staked yet

This rule decides what happens to your balance if the operator fails. Britain relies on disclosure; Malta relies on segregation.

The British approach is to make every operator place its customer funds in one of three published ratings, not protected, medium protection or high protection, and state which one applies in its terms. Holding the money in overseas bank accounts is permitted, and the Commission says plainly that doing so changes nothing about your rights.

Two details matter more than the rating itself. The first is what actually counts as customer funds: deposits, winnings owed to you, and bonus money you have properly earned. Money sitting inside an unsettled bet does not count, and no protection arrangement covers it.

The second is that "not protected" is a lawful answer rather than a breach. It means that in an insolvency you queue with the other unsecured creditors. Which of the three your operator has chosen sits in the terms, it takes about thirty seconds to find, and it is rarely the thing anyone checks before depositing.

Malta went structural instead. Player funds have to be segregated and stay separately identifiable at all times, and the Authority can inspect the common player-funds account whenever it decides to. Its guidance also closes an obvious gap by confirming that "account" is not limited to a payment account: money resting briefly with a payment acquirer before settlement is still in scope.

Which is better depends on what you are worried about. Britain will tell you exactly where you stand while permitting the answer to be bad. Malta imposes a structure and leaves you trusting that it is supervised properly.

When it goes wrong

Britain runs this on deadlines. Your complaint has to be acknowledged within three working days, or 24 hours if the operator offers round-the-clock gambling. The whole internal process, escalations included, cannot exceed eight weeks. If it is unresolved at that point or earlier, you must be offered dispute resolution free of charge, and the decision binds the operator once you accept it, for anything up to £10,000, which is the small-claims threshold.

The Maltese framework is built around procedure rather than a clock. A licensee has to staff a player-support function, publish its complaints procedure inside its terms, and state how long it expects to take. Once the internal route is exhausted it has to offer referral to a registered ADR entity and name that entity in the procedure. Two things then differ from the British model. The ADR conclusion binds both parties rather than the operator alone, and referring a dispute does not give up your right to go to court. Malta will also take a complaint from a player directly, through its own form.

So Britain gives you a date to hold someone to, while Malta gives you a route whose outcome cuts both ways. How to file a complaint that wins covers the evidence to collect before you start. If the operator has simply gone quiet, the Tribunal is open.

Both rulebooks are moving

Britain is changing who accredits the dispute services. Under the Digital Markets, Competition and Consumers Act 2024 that job passes to the Secretary of State's regime, and the Commission is withdrawing its own list of approved providers. The consultation response landed on 18 December 2025, and the marketing element took effect on 6 April 2026. The change to the complaints code itself is settled in direction but still has no commencement date, because it waits on the Department for Business and Trade; transitional arrangements are expected to run both frameworks side by side for a while. Your right to free ADR is unaffected. Which body sits behind it is the part that changes.

Malta has proposed writing fund segregation into statute rather than leaving it in guidance, formalising the mediating role of its Player Support Unit, and creating an administration process so that a failing operator can be protected or wound down without the players' money going with it. That is a white paper and not a rule, so read it as intent. What the Authority has actually committed to for 2026 is a supervisory focus on player protection and on the consistency of operators' monthly ADR reporting, which is a fair indication of where its attention is going.

The short version

Every line of that table describes an operator that is complying. Whether a particular one does is a separate question, and it is the question the Licensing panel on each operator's page here is for: it names the licence we have actually verified, names the regulator that would decline to hear a complaint from you, and says whether the operator sits inside a national self-exclusion scheme. Where a licensee has stopped complying, the cases end up in the Tribunal.

If you want the operators we hold a verified British licence for, that list is UKGC-licensed casinos, and the Maltese one is MGA casinos. Read the customer-funds rating in the terms before you deposit with either.

---

If gambling has stopped being entertainment, GamCare runs the National Gambling Helpline on 0808 8020 133, free, 24 hours a day, with live chat at gamcare.org.uk. 18+.

Sources. UK Gambling Commission: deposit-limit implementation extension, LCCP, SR Code 3.5.5, SR Code 3.5.3, handling complaints and ADR, customer funds, LCCP amendments due to the DMCC Act. Malta Gaming Authority: player protection, how player funds are protected, lodging a complaint, white paper on reform, 2026 supervisory priorities.