Background reading for anyone working on UK gambling content. Four topics β start with
GAMSTOP, then use the Terminology tab on the main guide for the wider vocabulary.
Why this matters to your work. GAMSTOP is the most important consumer-protection scheme in
the UK market, and it sits behind a lot of the language you will see in briefs. Knowing what it
actually does β and what it does not β is what stops a piece of copy going wrong.
What GAMSTOP is
GAMSTOP is a free, independent self-exclusion scheme for Great Britain. Someone who signs up is
blocked from every UK-licensed online gambling operator for the period they choose. It exists for
people who feel their gambling may be becoming harmful and who want a firm boundary rather than a
personal resolution.
It is not a marketing tool or an optional integration. Participation is a licence requirement: every
UK-licensed remote operator must connect to it and check customers against it.
One registration blocks the person across every UK-licensed operator β
but a site with no UK licence has no obligation to check, which is exactly what "non-GamStop" means.
How it works, step by step
Registration. The person registers, provides identity details β name, date of birth,
address β and verifies who they are. They choose a period: 6 months, 1 year or 5 years.
Activation can take up to 24 hours.
Blocking and enforcement. Every UK-licensed operator checks new registrations and logins
against the GAMSTOP database. If the identity matches someone excluded, access is refused. Operators
must also stop all direct marketing to that person.
During the exclusion. The person cannot use existing accounts or open new ones with
UK-licensed operators. The exclusion cannot be shortened or cancelled once active.
After it expires. It does not lapse automatically β the person must contact GAMSTOP to have
it lifted, and that takes a few days rather than being instant.
Limitations worth understanding
What it covers
All UK-licensed online operators, in one action
New account creation as well as existing logins
Direct marketing β operators must stop contacting the person
What it does not cover
Operators without a UK licence β it only reaches UKGC licensees
Land-based venues, which run separate schemes
Identity mismatches: it matches on the details given, so changed or misspelled details weaken
the block
Two further points. It is not reversible during the term, which is deliberate β the friction is
the protection. And it is not a complete solution on its own: it is normally used alongside device
blocking software, bank gambling blocks and support services such as GamCare.
Self-exclusion from the user's side
Useful context for writing about it honestly β it is a serious commitment, not a soft setting.
Aspect
What works well
What people find hard
Control
One action covers every UK-licensed site, so there is no need to close
accounts individually.
All or nothing. No pause, no per-day limit, no partial version.
Impulse
Removes the late-night, in-the-moment decision entirely β when most
regretted gambling happens.
Someone who signs up to "try it" is still committed for the full
period.
Setup
Free, quick, active within 24 hours.
Coming back means contacting
GAMSTOP and waiting β it does not switch off by itself.
Coverage
Comprehensive across the licensed UK market.
Does not reach
operators outside UK licensing, so it is a boundary rather than a wall.
What this means for our work
Never market to a self-excluded person. One of the most serious compliance failures an
operator can commit, and the obligation sits in the licence conditions.
Be accurate about what "non-GamStop" means. Because integration is mandatory for UK
licensees, a site not on GAMSTOP is by definition not UK-licensed. Never imply UK regulatory
protection where it does not exist.
Do not frame self-exclusion as an obstacle. It is a protection someone chose for themselves.
Treating it as friction to be worked around is both a compliance problem and the wrong side of the
argument.
Signpost support. UK creative carries 18+ and a safer-gambling reference such as
BeGambleAware.org as standard.
Proxies and VPNs
A proxy is a middleman for an internet connection. When you visit a site through one, the site
sees the proxy's IP address instead of yours. A VPN does much the same thing for location, routing
your traffic through another server.
The reason this comes up constantly in this industry is that IP address is what most websites and
ad systems use to guess where a visitor is. If a site sees a Polish IP, it records a Polish visitor β
regardless of where the person is actually sitting.
The website reads the proxy's location, not yours β a Georgian visitor
is recorded as Polish.
The analogy that makes it stick
Think of a proxy like a post office box: you write the letter at home, but it goes out with the post
office's address on it. The recipient sees the post office, not your house.
Why it matters day to day
A page can look completely different depending on the country it thinks you are in β different
language, different offers, sometimes a different page entirely. So checking how something appears in a
given market usually means viewing it from an IP in that market, not from your desk.
PWAs β Progressive Web Apps
A PWA is a website built to behave like a mobile app. The user opens a link, gets an "Add to
Home Screen" prompt, and from then on it launches full-screen with its own icon β no browser bar, and
nothing downloaded from an app store.
How it works
The user opens the link on their phone.
The site is built with app-like technology β HTML, JavaScript and service workers.
The browser offers "Add to Home Screen".
Once added, it opens full-screen like a native app.
It can send push notifications, work offline, and remember a login.
No app store anywhere in the chain β the app installs straight from a
link, which is the whole appeal in markets where stores restrict gambling apps.
Why this industry uses them
Two practical reasons. Updates ship instantly, with no store review cycle to wait on. And the major
app stores restrict gambling apps heavily β allowing them only in particular licensed markets, or not at
all β so a PWA is how many operators offer an app-like experience at all.
Worth being clear about: distributing outside an app store changes the distribution route, not
the rules. Licensing requirements, advertising codes and responsible-gambling obligations apply to a
PWA exactly as they do to a website or a store-listed app.
Why this is here. Cloaking is a term you will run into around grey-market advertising, and
it is worth understanding what it means β both so the vocabulary is clear, and so it is obvious why
it is a line we do not cross. This tab explains the concept. It is not a how-to.
What cloaking means
Cloaking is showing one version of a page to an ad platform's reviewers and a different version to
real users. The reviewer sees something clean and policy-compliant; the actual visitor is sent to the
real offer. The point is to get an advert approved that would be rejected if the platform saw where it
truly led.
The name is literal β the real destination is cloaked from the people whose job is to check it.
How it works, in concept
You do not need the technical detail to understand the idea. A visitor arrives, and a decision gets
made about who they appear to be β an ordinary user, or a platform's automated reviewer. Based on that
guess, they are shown one of two pages: a harmless one for the reviewer, the genuine offer for everyone
else.
That is the whole mechanism. Everything else is just detail about how the "reviewer or real user"
guess is made.
The same advert sends the reviewer and the real user to two different
places. That split is the cloak.
A worked example
Picture an advert on Facebook for an article titled "Top 5 Ways to Enjoy Football This Weekend."
When Meta's reviewer opens the link, that is exactly what loads β a tidy, gambling-free article β so
the advert is approved. But when a real person in the UK taps the same advert, they are redirected to a
casino deposit page instead. Meta approved an article; users received a casino. That gap between the two
is the cloak, and it is precisely what the platform's rules exist to catch.
Why it exists in this space
The major platforms β Google, Meta, TikTok β restrict or ban gambling adverts, and only allow them
from operators licensed in the specific country being targeted. Cloaking is used to get around that:
to slip an advert past review that the platform's own rules would otherwise refuse.
Why it is a line we do not cross
It is a direct policy violation. Every major ad platform explicitly prohibits showing
different content to their systems than to users. It is not a grey area in their terms β it is named
and banned.
The consequences are severe and permanent. Detection typically means an immediate,
irreversible ban of the ad account and often the associated assets and domains β not a warning.
It is deception, not optimisation. The entire technique depends on misleading the reviewer.
That is a different thing from making a compliant advert perform better, and it is worth being clear
about the difference.
The compliant route is the real one. Advertising gambling on these platforms means holding
the right licence for the market and following the advertising codes β the material on the UK market
research tab. That is the version of this work that lasts.
Scope of this tab. This explains what the term means and why it breaks platform rules. The
source folder also held a step-by-step operational guide to building cloaked pages and avoiding
detection β that part is deliberately not reproduced here. The original document is untouched in Drive.
The market in numbers
Useful for sizing any argument you make about the UK. Figures come from the source research and were
current when it was written β check the Gambling Commission's own statistics before quoting them
externally.
Measure
Figure
What it tells you
UK population
~68.3 million
Total, including a migrant population of roughly 10 million
Adult population
~52 million
The addressable base, 18+
Gambling participation
27% of adults
Roughly 14 million people, excluding lottery draws
Problem gambling rate
0.3% of adults
Around 156,000 people β the group every rule on this page exists to protect
Of roughly 52 million UK adults, about 27% gamble and around 0.3%
experience problem gambling β the group every rule on this page exists to protect.
Who regulates what
Three bodies, and they are easy to confuse:
UKGC β the Gambling Commission licenses and regulates operators, and requires all
advertising to be socially responsible.
CAP β the Committees of Advertising Practice write the advertising codes, including the
gambling-specific rules.
ASA β the Advertising Standards Authority enforces those codes across all media.
So: UKGC licenses the operator, CAP writes the advertising rules, ASA polices the adverts.
Advertising restrictions
The most important section here for anyone making content. An operator without a UK licence
cannot advertise to UK consumers at all β that covers every form of marketing communication, not
just paid ads.
Paid platforms. Google, Meta and the other major platforms restrict gambling ads to
UKGC-licensed operators. Paid search and social targeting UK audiences is licensed-only.
Audience. No targeting of under-18s or other vulnerable groups β covering imagery, themes
and tone, not just the targeting settings.
Promotions. Bonuses and free bets must be clear, not misleading, with terms stated. Without
a UK licence, offering them to UK residents is not permitted at all.
Affiliates. Affiliates must check the operators they promote hold a UK licence. Promoting an
unlicensed operator exposes the affiliate to regulatory action too.
Sponsorship. Sponsoring UK teams, events or media is restricted to licensed operators.
Why offshore licensing exists
CuraΓ§ao is a common licensing jurisdiction because it is cheaper and less demanding than the UKGC.
Operators there typically offer larger bonuses and faster onboarding, and often support crypto payments.
The trade-off is the one above: they are not permitted to advertise to or target UK players, and their
customers sit outside UK consumer protections.
Audience segments
The research divides UK players into recognisable types. Useful when a brief asks who something is
for.
The Social Bettor
25β40, urban, moderate to high disposable income
Bets around sports events and social occasions
Motivated by shared experience and friendly competition
For the Entertainment
30β50, balanced gender, middle income
Slots and live dealer, small stakes in downtime
Motivated by fun rather than financial gain
The Strategic Thinker
35β55, higher income, analytical
Poker, blackjack, sports betting where knowledge counts
Responds to transparency on odds and mechanics
The Escape Seeker
25β45, low to middle income
Plays to cope with stress or boredom, often alone
The at-risk group. The research's own guidance is to lead with responsible-gambling tools
and support, not offers
The High-Roller
30β60, affluent, seeks exclusivity
High-stakes tables and VIP programmes
Note that UK rules restrict spend-based VIP schemes
The Digital Explorer
18β30, heavy mobile and app use
Live streaming, esports, crypto, newer formats
Churns on slow or dated interfaces
What people actually bet on
Vertical
Adult participation
Core audience
Football
~5.6%
Mostly male, 18β34. The biggest by some distance.
Horse racing
~3.3%
Mostly male, 35β54. Traditional and culturally embedded.
Greyhound racing
~1.2%
Mostly male, 45+. Small but committed.
Tennis
Lower
Male and female, 25β44. Spikes around major tournaments.
Cricket
Modest
Male, 30β50. Concentrated around internationals.
Esports
Low but growing
Male, 18β24. The emerging one to watch.
What the research says about UK players generally
They are aware of regulation and expect operators to be compliant.
They are tech-literate β convenience and a fast, clean experience drive choice.
They increasingly value responsible-gambling tools, and treat their presence as a trust
signal.
They respond to transparent terms. Misleading promotions do measurable damage to trust.
What is not on this page, and why. The Cloaking tab explains what the technique is and why it
breaks platform rules; the source folder's step-by-step guide to building cloaked pages and evading
review is deliberately not reproduced. Also left out: a section on running multiple ad accounts
with separated browser fingerprints so platforms cannot connect them; and from the market research, a
passage attributing higher piracy rates to migrants (demographic stereotyping rather than usable insight)
and two engagement tactics built on conditioning players toward real-money risk. All original documents
are untouched in Drive.