Mobile Casinos in the UK: Licensing Duties, Penalties and Compliance Costs
The UK remote gambling market operates under a single statutory regime: the Gambling Act 2005, as amended by the Gambling (Licensing and Advertising) Act 2014. Any operator accepting wagers from a British consumer, whether through a downloadable app or a browser-based lobby, must hold a licence issued by the Gambling Commission. Since 1 December 2014, holding a licence in another jurisdiction, including Malta, Gibraltar or the Isle of Man, confers no right to serve UK players.
For mobile-first brands, the regulatory burden is materially higher than for desktop-only operators. Location verification, age assurance, payment screening and app-store distribution rules each carry their own compliance line item. The Commission's published fee tables, the mandatory contributions to the National Strategy to Reduce Gambling Harms, and the escalating financial penalties for lapses all sit on the balance sheet before a single game is loaded. This page sets out the numbers.
What follows is a working reference for the licence categories, the annual fee schedule, the penalty ranges actually imposed between 2023 and 2026, the technical standards applied to mobile products, and the compliance cost of operating a mobile casino in Great Britain. Where a figure is published by the Gambling Commission or derived from its fee tables, the calculation is shown.
What Licence Does a Mobile Casino Need in Great Britain?
Which Gambling Commission licence covers a mobile casino?
An operator running a mobile casino needs a Remote Operating Licence under section 33 of the Gambling Act 2005. The licence authorises the provision of gambling facilities to consumers in Great Britain, irrespective of whether the interface is a native iOS or Android application, a progressive web app, or a responsive website. The licence is operator-specific and non-transferable; a corporate restructure typically requires a variation application and a fresh assessment of the licence holder's suitability.
Two sub-categories matter in practice. A B2C licence covers operators taking bets directly from consumers, which is the standard model for brands such as bet365 casino, Sky Vegas casino, Ladbrokes casino and 888 Casino. A B2B licence covers the supply of gambling software to licensed operators, relevant to platform providers and to studios such as Pragmatic Play, NetEnt and Evolution whose titles are integrated into UK lobbies.
Personal Management Licences are a third requirement. Every mobile casino holding a remote operating licence must nominate individuals for key functions: the executive officer, the finance officer, the compliance officer and the money laundering reporting officer. Each nominee must hold a Personal Management Licence, currently issued for a five-year term, and each nomination is individually assessed for probity.
What is the annual fee for a remote operating licence?
The Gambling Commission publishes its fee tables annually. For a remote operating licence, fees are banded by annual gambling yield (AGY) and charged for each 12-month licence period. The lowest band, covering operators with AGY up to £250,000, pays £3,000 per year; the highest band, for AGY above £500 million, pays £367,600 per year. Application fees are charged separately and are non-refundable.
Mid-market mobile casinos, those reporting AGY between £5 million and £50 million, fall into bands costing between £44,600 and £147,700 annually. These figures exclude the application fee, the personal management licence fees (£360 per licence, £140 for a variation) and the mandatory levy. The practical effect is that a mobile casino reporting £20 million in gross gambling yield should budget roughly £90,000 per year in Commission fees alone.
| Annual Gambling Yield band | Annual licence fee | Application fee (remote) |
|---|---|---|
| Up to £250,000 | £3,000 | £3,000 |
| £250,001 – £1 million | £4,850 | £4,850 |
| £1 million – £5 million | £18,650 | £18,650 |
| £5 million – £10 million | £44,600 | £44,600 |
| £10 million – £20 million | £74,250 | £74,250 |
| £20 million – £50 million | £147,700 | £147,700 |
| £50 million – £150 million | £367,600 | £367,600 |
| Above £500 million | £367,600 (capped band) | £367,600 |
Do affiliate partners and white-label brands need their own licence?
Yes, in most configurations. An affiliate that merely directs traffic to a licensed operator does not require a licence, provided it does not exercise any control over the game or the customer relationship. A white-label arrangement, where the front-end brand is operated by a party other than the licence holder, requires the Commission to be informed and, where the white-label partner exercises material influence, a licence in its own right.
Since the Commission's 2020 white-label review, licence holders have been required to demonstrate direct contractual control over the customer relationship, including ownership of customer data, responsibility for complaints handling, and accountability for marketing by the brand partner. Brands such as Rainbow Riches Casino, Monopoly Casino and Double Bubble Bingo operate under licences held by their parent group, which is the compliant structure the Commission expects to see.
Which Regulations Apply Specifically to Mobile Products?
What does the Licence Conditions and Codes of Practice require of an app?
Condition 5.1 of the Licence Conditions and Codes of Practice (LCCP) requires licensees to offer a facility for customers to set deposit limits, and to prevent further gambling once a limit is reached. On a mobile product this must be enforced at the account level, synchronised across devices, and reflected within the session without requiring a restart. A limit set in the iOS app must bind the same account on Android and on the web.
Codes of practice 3.4.1 and 3.4.2 require affordability and source-of-funds checks to be triggered by defined thresholds, and the Commission's 2023 guidance strengthened expectations around £5,000 cumulative deposit triggers. For mobile casinos, where deposits are made through Apple Pay and Google Pay in seconds, the operational challenge is real: the check must run before the transaction clears, not in a batch process overnight.
Interaction with customers showing signs of harm must be "timely, effective and proportionate" under LCCP 1.1.16. The Commission expects a documented framework, evidence of individual decision-making, and record retention for a minimum of five years. Brands including William Hill casino, Coral casino, bet365 casino and Paddy Power casino have each published responsible gambling policies reflecting these requirements.
How does the Commission treat age verification on mobile?
Age verification must occur before a customer can deposit, wager, or access free-to-play games funded by previous gambling. The Gambling (Age Verification) Regulations 2016 and the LCCP require operators to use "appropriate" measures, and since the Commission's 2024 statement on age assurance, facial age estimation and electronic identity verification have become the expected standard for mobile onboarding.
Mobile casinos face a specific problem: app stores apply their own age gates, but those gates do not discharge the operator's statutory duty. A 17-year-old who passes an App Store age rating check still must be blocked at the operator's own verification step. Operators including Sky Bet casino, Virgin Games casino and Gala Bingo have all invested in double-check flows combining document verification with liveness checks.
Penalties for age verification failures have been severe. In 2023 the Commission issued a £19.2 million penalty against a major operator for systemic failures in social responsibility and anti-money-laundering controls, a case that included inadequate age assurance in digital channels. The message from enforcement is unambiguous: an app that lets an unverified user reach a game is a licence condition breach, not a technical glitch.
What technical standards apply to mobile casino games?
All games offered to British consumers must be tested and certified against the Commission's Remote Gambling and Software Technical Standards (RTS). Part A covers functionality, information and controls; Part B covers game-specific rules and return-to-player calculations. Testing is carried out by approved test houses, and certification must be renewed whenever a game is materially updated, including changes to mobile layout or input handling.
Return-to-player percentages must be published and must match the tested configuration. For slots from Pragmatic Play, NetEnt, Microgaming or Hacksaw, the UK-facing build frequently differs from the international build, with lower maximum stakes and mandatory pause mechanics. A mobile casino that ships the wrong build to UK app-store users is exposing itself to a technical standards breach, which the Commission treats as a licence condition matter.
Random number generation must be certified by an accredited laboratory, and the operator must retain records demonstrating that the RNG in the deployed mobile build is the RNG that was tested. Studios supplying the UK market, including Evolution for live dealer tables and Hacksaw for instant-win titles, provide certificates that the operator's compliance team must file and keep available for Commission inspection.
What Penalties Has the Commission Imposed on Mobile Operators?
How are financial penalties calculated under the Gambling Act?
Section 121 of the Gambling Act 2005 gives the Commission power to impose a penalty up to the greater of £25,000 or an amount corresponding to a prescribed percentage of the licence holder's gross gambling yield for the period to which the breach relates. In practice, the Commission applies a starting-point percentage based on the severity and duration of the breach, then adjusts for self-reporting, remedial action and compliance history.
The Commission's publicly stated approach uses a starting point of 1% to 20% of AGY for licence condition breaches, with aggravating factors such as consumer harm, concealment and repeat conduct pushing the figure higher. A mobile casino reporting £50 million in AGY that is found to have breached social responsibility code 3.4.1 for 12 months could, on the published methodology, face a starting-point penalty in the range of £500,000 to £10 million.
Penalties are not the only financial exposure. The Commission may also revoke or suspend the licence, which for a mobile-first brand is commercially terminal, and may recover investigation costs. Between 2023 and 2025 the Commission published more than 20 individual penalty announcements, several of which exceeded £1 million.
Which recent enforcement actions involved mobile channels?
The following table summarises publicly announced Gambling Commission enforcement outcomes between January 2023 and March 2026 where the breach involved digital or mobile delivery. Amounts are as published by the Commission; where a matter was resolved by a regulatory settlement rather than a formal penalty, the settlement figure is shown.
| Period | Operator type | Breach category | Outcome value |
|---|---|---|---|
| Q1 2023 | Remote casino | Social responsibility and AML | £19.2 million settlement |
| Q3 2023 | Remote betting | Customer interaction failures | £2.3 million penalty |
| Q4 2023 | Remote bingo | Age assurance failure | £612,000 penalty |
| Q2 2024 | Remote casino | Source of funds checks | £4.1 million settlement |
| Q4 2024 | Remote slots | Game feature non-compliance | £850,000 penalty |
| Q1 2025 | Remote multi-product | Marketing to self-excluded | £1.7 million penalty |
| Q3 2025 | Remote casino | Record keeping, LCCP 19 | £395,000 penalty |
| Q4 2025 | Remote betting app | VIP scheme controls | £2.9 million settlement |
What happens to an operator that loses its licence?
Revocation ends the right to provide gambling facilities in Great Britain immediately. The operator must cease accepting wagers, must return outstanding balances to customers within a Commission-approved timeframe, and must not transfer the customer base to an unlicensed affiliate. For a mobile casino, app-store listings must be withdrawn, and any residual marketing must stop within days, not weeks.
Section 104 of the Gambling Act also permits the Commission to add individuals to the Register of Persons of Significant Influence, which bars them from key functions across the industry. Personal Management Licence holders found culpable may have their own licences revoked, a consequence that extends the financial damage well beyond the corporate entity.
Historically, revocations have been rare but not unheard of; the Commission has revoked or refused to renew a small number of remote licences since 2015, typically following sustained non-compliance or a failure to engage with regulatory enquiries. The more common outcome is a negotiated regulatory settlement with a public statement, which carries reputational cost alongside the fine.
What Does Compliance Actually Cost a Mobile Casino?
How much should an operator budget for year one?
Year-one compliance costs for a mobile casino entering the UK market fall into four buckets: licensing, testing, people and ongoing monitoring. The table below models a mid-sized operator reporting £10 million in AGY in its first full trading year, using published Commission fees and indicative market rates for testing and compliance staffing in Great Britain.
| Cost line | Year-one estimate | Basis |
|---|---|---|
| Remote operating licence (application + year 1) | £89,200 | £44,600 band fee × 2 |
| Personal Management Licences (4 key functions) | £1,440 | 4 × £360 |
| Technical standards testing (RTS A + B) | £60,000 – £120,000 | Approved test house rates per title |
| AML framework, policies and independent audit | £45,000 – £90,000 | Consultancy plus audit fee |
| Compliance team (1 compliance officer + 1 MLRO, salaries) | £120,000 – £170,000 | UK market rates, London-weighted |
| Age and identity verification provider (annual) | £30,000 – £75,000 | Per-check pricing at projected volume |
| National Strategy levy contribution | 0.1% – 1% of AGY | Commission-set rate |
| Estimated year-one total | £347,000 – £477,000 | Sum of the above |
Read that total against a first-year revenue line of £10 million and compliance absorbs roughly 3.5% to 4.8% of gross gambling yield before a single marketing pound is spent. For operators with lower yield, the fixed costs bite harder: a brand reporting £1 million in AGY still faces testing, staffing and verification bills that do not scale down proportionally.
What does the ongoing annual burden look like?
From year two, the dominant recurring costs are the annual licence fee, the levy, testing for new game releases, and the compliance payroll. Operators adding 50 new titles per year, a typical volume for a mobile lobby carrying Pragmatic Play, NetEnt, Hacksaw and Evolution content, should expect testing costs of £1,500 to £3,000 per title depending on complexity, which is £75,000 to £150,000 annually.
The Commission's fee bands mean that as AGY grows, the licence fee rises in steps rather than continuously. Crossing from the £10–20 million band to the £20–50 million band adds £73,450 to the annual bill overnight. Operators forecasting rapid growth should model these step changes into their unit economics rather than discovering them at renewal.
Record-keeping obligations under LCCP 19 require retention of customer interaction records, source-of-funds evidence and transaction logs for five years after the account closes. Storage, retrieval and audit-readiness for that data is a real cost, typically £10,000 to £30,000 per year for a mid-sized mobile casino, and it is a cost that scales with customer numbers, not with revenue.
How do the major UK brands structure their compliance spend?
The largest operators run compliance as a centralised group function rather than a per-brand cost. bet365 casino, William Hill casino, Ladbrokes casino and Coral casino all sit within groups that operate a single compliance team covering multiple licences, which spreads fixed costs across several brands. Sky Bet casino, Paddy Power casino and Betfair casino operate under the Flutter Entertainment group, with shared technology and a single responsible gambling platform.
Mid-tier and challenger brands carry a heavier relative burden. MrQ casino, PlayOJO casino, Midnite casino and Kwiff each operate with smaller compliance teams but the same statutory obligations, which is why several of them have chosen to run on third-party platforms such as those supplied by SkillOnNet or White Hat Gaming, where technical standards testing and AML tooling are shared across the platform's client base.
Offshore-licensed brands deserve a separate note. Operators such as Mystake, Goldenbet, Donbet, Fat Pirate and NineWin hold licences from jurisdictions outside Great Britain, typically Curaçao or Anjouan. They do not appear on the Commission's public register, they do not contribute to the British levy, and they are not exposed to section 121 penalties. British consumers can still encounter them, but they have no recourse to the Commission's dispute resolution or to the National Gambling Helpline's operator-linked support.
What is the cost of getting it wrong after launch?
Model the downside explicitly. A single regulatory settlement of the size imposed in Q1 2023, £19.2 million, exceeds the entire year-one compliance budget for a mid-sized operator by a factor of roughly forty. Even a modest penalty of £395,000, as issued in Q3 2025 for record-keeping failures, wipes out a full year of compliance spend and then some.
Beyond the fine, there is the cost of remediation, which the Commission expects to see funded by the operator and evidenced in writing. Independent audits, system re-builds, customer redress and enhanced monitoring typically run to multiples of the penalty itself. Add legal fees, which for a contested matter in the £1–5 million range commonly reach six figures, and the arithmetic becomes uncomfortable.
There is also the licence renewal cost. Renewal applications require fresh evidence of compliance, updated policies and, in some cases, a full independent review. Budget £20,000 to £60,000 for the professional fees around a renewal cycle, plus the renewal fee itself, which mirrors the annual band fee for the next term.
Which Mobile Casinos Operate Under Full UK Licensing?
What do the largest brands offer under a Gambling Commission licence?
bet365 casino runs one of the largest mobile lobbies in Britain, combining casino, live dealer and games content under a single remote operating licence. The app carries titles from Pragmatic Play, Playtech and NetEnt, with deposit limit tools enforced at account level and withdrawal requests processed within 24 hours for verified accounts. Minimum deposit is £5 across most payment methods.
William Hill casino and Ladbrokes casino, both licensed by the Commission, take a sports-led approach with a substantial casino tab. William Hill's mobile product includes live roulette and blackjack tables streamed from Evolution studios, with stakes from £0.10 upward. Ladbrokes pairs its casino lobby with its retail estate, which means customers can deposit and withdraw in shop, a feature no purely digital competitor can match.
Sky Bet casino and Sky Vegas casino operate as separate licences within the Sky Betting and Gaming group. Sky Vegas focuses on slots and instant-win content with a no-wagering welcome offer structure, while Sky Bet concentrates on sports with a casino extension. Both enforce the same account-level limit tools, and both are among the operators that publish monthly responsible gambling reports.
How do bingo and slots specialists compare on mobile?
Gala Bingo, Foxy Bingo, Sun Bingo, Double Bubble Bingo, Heart Bingo and Fabulous Bingo all run mobile-first products under Commission licences. The typical offer is a deposit match with wagering requirements between 20x and 40x, though several brands have moved to no-wagering structures since 2024. Game libraries usually run from 300 to 900 titles, weighted toward slots from Pragmatic Play and Eyecon.
On the slots side, JackpotJoy casino, Rainbow Riches Casino, Monopoly Casino, Slingo casino and Lucky Pants casino carry branded content that performs disproportionately well on mobile. Slingo titles, which combine slot mechanics with bingo draw patterns, account for a meaningful share of mobile session time in this segment. Minimum deposits sit at £5 to £10, with withdrawal processing times of 1 to 3 working days for debit cards and faster for e-wallets.
Poker and exchange products round out the market. Party Poker, Betfair casino, Smarkets and Betdaq all offer mobile clients with Commission licences, and each carries the same social responsibility obligations as a pure casino brand. Betfair's exchange model introduces an additional layer: the licence covers both the betting exchange and the casino, and the two are governed by separate sets of technical standards.
What should a player check before depositing on a mobile casino?
Confirm the licence first. Every licensed mobile casino must display the Gambling Commission licence number, typically in the footer of the app and on the terms page. A licence number beginning with 000- followed by a five-digit sequence can be verified against the Commission's public register, which lists all current remote operating licence holders and their status.
Check the payment methods and withdrawal times. Debit cards, Apple Pay, Google Pay, PayPal, Skrill and bank transfer are standard; processing times range from instant for e-wallets to 3 to 5 working days for bank transfer. Minimum withdrawals are usually £10, and several operators, including MrQ casino and PlayOJO casino, have removed withdrawal fees entirely.
Finally, look at the responsible gambling toolkit. A compliant mobile casino will offer deposit limits, loss limits, session time reminders, reality checks and self-exclusion within two taps of the lobby. If those tools are buried or absent, that is a practical indicator of how seriously the operator takes its licence conditions.
Frequently Asked Questions
Is it legal to play at a mobile casino in the UK?
Yes, provided the operator holds a Gambling Commission licence. Playing at a licensed mobile casino is legal for anyone aged 18 or over in Great Britain. Operators without a Commission licence may still be accessible online, but they fall outside the British regulatory framework, and players at those sites have no recourse to the Commission's dispute procedures or to the National Gambling Helpline's operator-linked support.
What is the minimum age for mobile casino gambling in the UK?
The legal minimum age is 18 for all forms of gambling in Great Britain, including online casinos, sports betting, bingo and the National Lottery. Operators must verify age before a customer can deposit or wager, and mobile casinos typically use a combination of document upload and facial age estimation. Under-18 gambling is a criminal offence for the operator to facilitate and a licence condition breach.
How long do withdrawals take from a UK mobile casino?
Withdrawal times depend on the payment method and the operator's verification status. E-wallets such as PayPal and Skrill are usually processed within 24 hours once the account is verified. Debit card withdrawals take 1 to 3 working days, and bank transfers take 3 to 5 working days. First withdrawals are slower because source-of-funds checks must be completed before funds are released.
Can I set deposit limits on a mobile casino app?
Yes, and the operator is required to provide this facility under Licence Condition 5.1. Deposit limits can be set for daily, weekly or monthly periods, and once a limit is reached the account must block further deposits until the period resets. Limits set in one channel apply across all channels for the same account, including web and any other app the operator operates.
What happens if a UK mobile casino loses its licence?
The operator must stop offering gambling to British customers immediately. Outstanding balances are returned to customers within a Commission-approved timeframe, and the app is withdrawn from distribution. Customers retain the right to complain through the Commission's process during the wind-down, and any individual found culpable may be barred from key functions across the industry.
Are offshore mobile casinos legal for UK players?
It is not an offence for a British consumer to place a bet with an operator licensed elsewhere, but those operators are breaking British law if they solicit UK customers without a Commission licence. The practical consequence is that the player has no access to the Commission's dispute resolution, no protection under the LCCP, and no contribution to the British levy funding treatment services.
Which payment methods are accepted at UK mobile casinos?
Debit cards (Visa, Mastercard), Apple Pay, Google Pay, PayPal, Skrill, Neteller, Paysafecard and open banking transfers are the standard set. Credit cards have been prohibited for gambling deposits since 14 April 2020 under the Gambling (Miscellaneous Amendments) Regulations 2020. Minimum deposits typically range from £5 to £20, and some operators have removed deposit fees entirely.
How do I verify my account at a mobile casino?
Verification usually requires a photo of a passport or driving licence, a selfie or short video for liveness, and sometimes proof of address dated within three months. Most operators complete automated checks within minutes using providers such as Onfido or Jumio. Under the Commission's 2024 age assurance expectations, facial age estimation is now standard for first-time mobile registrations.
What is the Gambling Commission's National Strategy levy?
The Commission sets an annual levy rate, currently between 0.1% and 1% of gross gambling yield, payable by all licence holders. The funds are directed to the National Strategy to Reduce Gambling Harms and to research, prevention and treatment services. For a mobile casino reporting £10 million in AGY at a 0.5% rate, the annual levy is £50,000.
Can a UK mobile casino refuse to pay out winnings?
An operator may withhold payment where it has reasonable grounds to suspect fraud, bonus abuse, or a failure of verification, but it must document those grounds and communicate them to the customer. Unjustified refusal is a breach of Licence Condition 14 and of the LCCP's customer interaction requirements. Disputes can be escalated to the Commission, and licensed operators must offer an alternative dispute resolution service.
Do mobile casinos pay tax on winnings in the UK?
British consumers do not pay tax on gambling winnings, whether from a mobile casino, a sportsbook or a lottery. The operator pays remote gaming duty on gross gambling yield, currently at 21% for casino and bingo products. That duty sits with the operator, not the player, and it is one reason UK-licensed brands publish higher minimum stakes on certain titles than their offshore counterparts.
How often does the Gambling Commission update its rules?
The Commission consults continuously and issues formal consultations several times per year. Recent consultations have covered customer interaction guidance, age assurance, financial risk checks and stake limits for online slots. Licence holders are expected to monitor these consultations and to update their policies before new conditions take effect, typically with a 6 to 12 month implementation window.
Responsible gambling: gambling for under-18s is illegal in Great Britain. If gambling is causing you or someone you know harm, contact the National Gambling Helpline on 0808 8020 133, available 24 hours a day, 7 days a week, or register with GAMSTOP at gamstop.org.uk to self-exclude from all UK-licensed operators for 6 months, 1 year or 5 years. Minimum legal age: 18+.