You press withdraw, wait two days, and start wondering whether the casino has lost your request. Behind that silence sits a chain of checks a UK Gambling Commission licence requires: age, identity, source of funds, and a review of how you play. None of it shows on your screen. All of it decides when your money lands.
You hand over personal details before you ever spin a reel. The Commission tightened this rule in 2019, and it now forces operators to confirm two things before you deposit or gamble: that you are 18 or over, and that the name on the account belongs to the person funding it. A casino gets a short window to collect documents. One that lets you stake while your identity sits unproven breaks its licence conditions.
Uploading a passport photo or a driving licence takes a minute. Clearing it takes longer, because the operator cross-checks your name against electoral roll data, credit reference files, and sometimes your bank record. The home page of a UKGC-licensed site advertises instant payouts, and that promise rests on this step finishing first.
The Gambling Commission does not read your passport. It audits the operator's systems, and it checks whether those systems match the Licence Conditions and Codes of Practice. Your paperwork lands with a compliance team inside the business, not with a regulator in Birmingham.
Those teams work to deadlines, and the deadlines create queues. Operators pull your file, match it against the account, flag mismatches, and either clear you or ask for more. A passport carrying a maiden name, an address that differs from your bank record, a joint account funding a solo player: each one sends your file back for a second look.
The Commission requires an operator to name a personal management licence holder who answers for compliance, and it can suspend a licence when checks fail. That threat shapes behaviour. It explains why a withdrawal from a £20 deposit can stall over a document you uploaded in March.
Spend enough and you meet the affordability question. Customer interaction rules require an operator to understand where your money comes from once deposits look unusual against your stated income. A request for a bank statement, a payslip, or a savings summary puts you in source of funds territory.
Source of wealth asks a different question: how you built the pot in the first place. A house sale, an inheritance, a business you ran for a decade, years of saving. Compliance staff want to see that the money belongs to you and that gambling will not wreck your finances. Send a redacted statement with your salary visible and the review tends to close within two days. Refuse, and the operator can block deposits, suspend play, and hold your balance while it decides.
Thresholds vary by operator, and few publish them. Someone depositing £200 a month may never see a request. Someone depositing £2,000 in a fortnight will. The Commission expects operators to set limits that reflect a customer's income, and it fines the ones that ignore the signals.
Payment rails set the pace. Debit cards from Visa or Mastercard sit at the slow end: the casino releases the funds, then your bank takes one to three working days to post them. Credit cards cannot fund a UK gambling account at all, a ban the Commission brought in during April 2020, so a site offering that route operates outside the rules.
E-wallets and open banking move faster. PayPal and Pay by Bank transfers through providers such as Trustly return money within hours once the operator approves. Paysafecard works for deposits and nothing else, which means you need a second method on the account for withdrawals. Apple Pay and Google Pay push money through the debit card behind them.
Every withdrawal returns to the method you funded with. That rule stops a stolen card funding an account while a clean bank account collects the payout. If your debit card expired since your last deposit, expect a wait while the operator arranges a bank transfer instead.
Compliance teams watch behaviour alongside paperwork. A stake that jumps from £1 to £50, a session running past four in the morning, three deposits inside an hour: those patterns trigger a review. The operator can respond with a deposit limit, a time-out, or a conversation about how you play.
The controls you set do more work. A deposit limit binds from the moment you apply it, and UKGC rules force a 24-hour delay before any increase takes effect, so a bad night cannot override a decision you made on a calm afternoon. GamStop blocks you from every UKGC-licensed operator in one step, covering the whole market rather than one brand. BeGambleAware and GamCare run the support side, offering free counselling, live chat, and practical tools for anyone whose gambling has stopped being fun.
Casinos once let you reverse a withdrawal and stake the money again. The Commission banned that practice in October 2020, so a pending period now reflects processing time rather than a second chance for the house. What remains is the audit trail: the request passes a fraud screen, a check against your verified payment method, and a final sign-off before release.
Behind those steps sits a person. Fraud analysts compare your account activity against patterns they know from stolen card cases. Compliance staff confirm the destination account matches your verified identity. Both steps take hours on a good day and days when the queue runs long.
Win a few thousand and the checks restart. Operators set internal thresholds, and a payout above them pulls your account into a fresh review. Expect questions about the games you played, the deposits that funded them, and the bank account receiving the money.
Some brands split large payouts into instalments. Others cap daily withdrawals at £10,000 or £20,000 and release the rest across the following week. Read the withdrawal terms before you need them, because a cap you discover on the day slows everything down.
Every UKGC-licensed operator must join an alternative dispute resolution scheme. If a withdrawal stalls, documents go missing, or a balance disappears, raise a complaint with the casino first. Give it eight weeks to answer. After that, or sooner if the business issues a deadlock letter, the ADR provider takes over and can order the operator to pay.
Keep records as you go. Screenshots of your balance, emails with timestamps, and a transaction history give an adjudicator something concrete to work with. Complaints built on memory tend to fall apart.
Check the licence first. The Gambling Commission publishes a public register, and a legitimate operator prints its licence number in the footer of every page it runs. Look for the deposit protection statement too, which explains what happens to your money if the business folds.
Test the small things. Deposit £10, withdraw £10, and time how long the round trip takes. Read the wagering terms before you accept a welcome offer, because a 40x requirement on a £100 bonus asks for £4,000 in stakes before a penny converts to cash.
An operator that clears your documents, explains its limits, and pays without a fight earns your custom. Compliance teams behind the screen decide which operators reach that standard.
