The licensing objectives the UK Gambling Commission enforces have not changed since the Gambling Act 2005 reached the statute book, yet the rulebook built on them changes several times a year. Five sets of LCCP amendments took effect between October 2025 and July 2026. For anyone holding a Great Britain licence, or applying for one, the objectives set the direction and the LCCP supplies the detail.
Three Licensing Objectives Sit Behind Every Decision the Commission Takes
Section 1 of the Gambling Act 2005 lists three, and the Commission returns to them in almost every public statement it issues.
- preventing gambling from being a source of crime or disorder, being associated with crime or disorder, or being used to support crime
- ensuring that gambling is conducted in a fair and open way
- protecting children and other vulnerable persons from being harmed or exploited by gambling
The objectives do practical work in casework. When the Commission issued a warning to Spribe OÜ on 12 June 2026 over hosting carried out without a host licence, it framed the failure as undermining the first objective. When it settled with Evolution Malta Holding Limited on 23 July 2026, it recorded the potential impact on the third. The same three explain why a Great Britain licence carries the weight it does under the GICNT-LS licensing and legal status requirements, which look at supervisory intensity rather than at the existence of a licence document.
How the LCCP Separates Conditions from Codes of Practice
Section 23 of the Act requires the Commission to publish a statement of licensing principles, and section 24 gives it the power to issue codes of practice. Within the LCCP, the social responsibility code provisions bind and the ordinary ones guide. Confusing the two is a common source of misplaced confidence going into an audit.
| Component | Status | What a breach means |
|---|---|---|
| General licence conditions | Attached to operating and personal licences | Licence review under section 116, and a financial penalty available under section 121 |
| Social responsibility (SR) code provisions | Compliance is itself a condition of the licence | Same exposure as a licence condition: suspension, revocation or a penalty |
| Ordinary (OC) code provisions | Good practice, no condition status | Admissible as evidence; an operator may take another route where it shows the alternative is reasonable or similarly effective |
| Individual conditions | Attached to a single licence, usually after a review | Same as general conditions, and often paired with an independent audit requirement |
Sector-specific parts of the LCCP add further requirements on top of the general conditions, and the Commission can attach a condition to one licence alone. Most of what GICNT-PP checks under its player protection requirements sits in the SR codes rather than in the general conditions, which is why an operator that treats the code sections as guidance walks into a review badly prepared.
Which Operating Licences the Commission Issues, and to Whom
The requirements attached to a UKGC operating licence differ by activity and by channel, and a business rarely needs only one.
- B2C operating licences covering casino, bingo, general betting, betting intermediary, pool betting and lottery activity, each split into remote and non-remote
- B2B licences for gambling software, hosting and gaming machine technical work
- Ancillary remote licences, which sit alongside a non-remote licence and cover a limited online element
- Personal management licences and personal functional licences held by individuals in specified roles
The Spribe review shows what happens when the permission and the business model drift apart. The Commission suspended the company’s software licence on 30 October 2025 under section 118(2), lifted the suspension on 30 March 2026, and closed the review on 12 June 2026 with a warning covering unlicensed activity between 28 May 2021 and 30 October 2025. No financial penalty followed, since section 121 allows one only where a licence condition has been breached, and carrying on an unauthorised activity is a different failure. Anyone mapping the gambling licence application route in Great Britain against Malta or Curaçao should read the scope of permission first and the fee schedule second.
Every Remote B2C Licensee Must Register with GAMSTOP
SR code provision 3.5.5 states that licensees must participate in the national multi-operator self-exclusion scheme. The GAMSTOP participation requirement has bound operators holding remote licences since 31 March 2020, the date the Commission set for registration. Following a consultation that closed in 2023, the Commission extended the scheme to licensees that make and accept bets by telephone and email, closing a channel that had let a self-excluded customer keep betting by picking up the phone.
The provision does not reach every licence. Remote lottery licences whose holders offer no instant win products sit outside it, along with remote general betting (remote platform), remote betting intermediary (trading room only), gaming machine technical, gambling software, host, ancillary remote bingo and ancillary remote casino licences.
Registration on its own does not discharge the obligation. SR code 3.5.3 requires licensees to take all reasonable steps to prevent a self-excluded customer from gambling, and public statements published by the Commission regularly turn on marketing that continued after a customer had excluded. Coverage is national but single-market: a customer registered with GAMSTOP can still gamble with operators licensed elsewhere, which is why GICNT-PP treats national self-exclusion registers as a floor rather than a finished control.
Financial Risk Assessments Replace Document Requests at the Top of the Spend Curve
Two separate checks operate in Great Britain and the industry keeps merging them. Financial vulnerability checks came first, triggered at a £500 net deposit in a rolling month from 30 August 2024 and lowered to £150 from 28 February 2025, using publicly available data such as county court judgments and bankruptcy records. Financial risk assessments, which the Gambling Commission board approved on 7 July 2026, work from limited credit reference data supplied by credit reference agencies and return four data points to the operator.
- a default
- multiple arrears
- significant arrears
- an active debt management plan
| Stage | Customers aged 25 and over | Higher-risk groups, including under-25s |
|---|---|---|
| Stage 1, largest operators only | Net deposits above £5,000 in a rolling 24 hours | Net deposits above £2,500 in a rolling 24 hours |
| Interim stages | To be set with implementation groups | To be set with implementation groups |
| Final stage | Above £1,000 in a rolling 24 hours, or £3,000 across a rolling 90 days | Above £750 in a rolling 24 hours, or £2,000 across a rolling 90 days |
Pilot figures put fewer than 3 percent of accounts in scope at full implementation, with 97 percent of those assessed frictionlessly and roughly 1 in 1,000 unable to complete an assessment at all. The Commission has said it will take no enforcement action for a failure to act on an assessment during early roll-out, provided existing obligations are met, and the Stage 1 start date waits on the formal consultation response.
None of this displaces the requirements on remote customer interaction at SR code 3.4.3, which already oblige operators to monitor spend patterns, time spent gambling, use of gambling management tools and changing payment methods. The Petfre settlement of 30 June 2026 turned on that provision. Assessments add one input to the picture GICNT-PP expects an operator to assemble from markers of harm it can observe in its own data.
What Changed in the LCCP Between October 2025 and July 2026
| Effective date | Change |
|---|---|
| 31 October 2025 | LC 4.2.1 gains a paragraph on disclosing how customer funds are protected; operators must invite a deposit limit before the first deposit and prompt a review every six months |
| 19 January 2026 | SR 5.1.1 rewritten, with limits on wagering requirements and a ban on incentives that mix products |
| 19 March 2026 | LC 15.2.1 key event threshold rises from 3 percent to 5 percent; relevant persons extended to entities without share capital; all relevant loans reportable whether documented or not |
| 6 April 2026 | References to the Consumer Protection from Unfair Trading Regulations 2008 replaced by the Digital Markets, Competition and Consumers Act 2024 |
| 29 July 2026 | New condition requiring non-remote licensees to remove non-compliant gaming machines once the Commission gives written notice |
Complaints and disputes provisions move once the Department for Business and Trade switches off the 2015 ADR Regulations under the DMCC Act. The Commission has already removed references to its list of approved ADR providers from SR 6.1.1.
Statutory instruments carry the rest of the reform package rather than the LCCP. Online slots stake limits took effect at £5 per game cycle for players aged 25 and over on 9 April 2025, and at £2 for those aged 18 to 24 on 21 May 2025. The Gambling Levy Regulations 2025 came into force on 6 April 2025, charging between 0.1 percent and 1.1 percent of gross gambling yield with online operators at the top rate, invoiced each 1 September and payable before 1 October. Non-payment is a licence breach. The Gambling Act review sets out what remains outstanding from the 2023 White Paper.
Enforcement Practice: What Section 116 Reviews Produced in 2025 and 2026
Enforcement action by the UKGC produced fines, settlements and licence suspensions across thirteen operators between May and December 2025, then went quiet until four outcomes landed in June and July 2026.
| Date | Licensee | Outcome | Basis |
|---|---|---|---|
| May 2025 | Spreadex Limited | £2,022,000 penalty, warning, added licence condition | AML and social responsibility failings |
| 22 October 2025 | Platinum Gaming Limited | £10 million penalty | Regulatory failures following investigation |
| 3 December 2025 | Done Brothers (Cash Betting) Limited | £825,000 penalty, warning, third-party audit condition | Predominantly technical breaches |
| 12 June 2026 | Spribe OÜ | Warning under section 117(1)(a), no penalty | Hosting without a host licence |
| 25 June 2026 | Stakelogic BV | £122,835 settlement plus a public statement | RTS requirement 14D, game cycle speed |
| 30 June 2026 | Petfre (Gibraltar) Limited | £900,000 settlement | Remote customer interaction controls |
| 23 July 2026 | Evolution Malta Holding Limited | £4.75 million settlement, independent audit condition | Licence conditions 12.1.1 and 12.1.2 |
Two patterns run through the 2026 outcomes. Suppliers now face the scrutiny operators have had for years: Stakelogic timed its game cycles with a manual stopwatch and ran 16 games below the 2.5 second minimum, and Evolution’s money laundering risk assessment failed to consider that a sub-licensee might supply its games to unlicensed sites reaching British consumers. The second pattern concerns detection speed. In Petfre’s case the Commission treated delayed manual handling of risk flags as a systemic failure to protect customers at pace.
The Commission also reported 741 cease-and-desist orders in the last financial year, 397,527 URLs referred to search engines producing 266,667 removals, and 1,134 sites disrupted, backed by £26 million of government funding for 2026 to 2027. Set against the wider pattern of regulatory fines in iGaming, the British figures show a regulator spending as much effort on the unlicensed market as on its own licensees.
Where GICNT-LS and GICNT-PP Ask for More Than the LCCP
A Great Britain licence answers many of the questions a certification audit asks, and leaves others open.
- GICNT-LS verifies the licence against the Commission’s public register at each annual review, including the licensed activities, the status and any condition attached after a review. A live register entry counts for more than a logo in a footer.
- GICNT-PP requires connection to every self-exclusion scheme covering a market the operator serves, not only the scheme attached to its principal licence.
- GICNT-PP expects a documented path from a detected marker of harm to an action taken, with the reasoning retained for an external auditor. The Commission’s own casework points the same way.
- GICNT-AM applies the advertising code of each market served, so a British licensee marketing into Ontario or Sweden answers to three sets of rules at once.
Certification records what an operator does across every market it touches. A licence authorises activity in one. The two answer different questions, which is why certification and licensing should never be presented to a commercial partner as interchangeable.
FAQ
Does a UKGC licence allow an operator to accept customers outside Great Britain?
No. It authorises the licensed activities for consumers in Great Britain, and serving another market requires a licence or a lawful basis there. The Evolution settlement of July 2026 came from the opposite direction: games supplied to operators without a Commission licence that were reaching British consumers in volume.
Is a social responsibility code provision enforceable in the same way as a licence condition?
Yes. Compliance with an SR code provision is itself a condition of the licence, so a breach can lead to review, suspension, revocation or a financial penalty. Ordinary code provisions carry no such status, and an operator may depart from them where it can show its alternative is reasonable in its circumstances or similarly effective.
When do financial risk assessments actually start?
The Commission board agreed staged implementation on 7 July 2026 without publishing a Stage 1 date. Implementation groups formed over the summer of 2026, and the start date will appear in the formal consultation response. Until then the £5,000 and £2,500 Stage 1 thresholds are settled but the calendar is not.
Which licences fall outside the GAMSTOP requirement?
SR 3.5.5 exempts remote lottery licences whose holders offer no instant win products, remote general betting (remote platform), remote betting intermediary (trading room only), gaming machine technical, gambling software, host, ancillary remote bingo and ancillary remote casino licences. Every other remote licence brings the obligation to register.
Does the Commission publish every enforcement outcome?
It publishes financial penalties, regulatory settlements, warnings and suspensions on its public register, usually with a public statement setting out the findings and the aggravating and mitigating factors. Investigations that close with advice to the licensee do not always appear there, so the register understates the volume of casework.