Which Gambling Act Review measures apply to UK players now, and which are still to come

One white paper, three kinds of instrument, four dates each

The Department for Culture, Media and Sport published High stakes: gambling reform for the digital age on 27 April 2023. It is a policy document. Nothing in it changed a rule on the day it appeared.

Its executive summary said the intention was that "the main measures in the white paper will be in force by summer 2024". As at 24 September 2026, the primary sources checked for this register still leave some commitments without a confirmed effective date.

What the white paper set in motion was three separate legal routes, and a reader who wants to know whether a rule applies to them needs to know which route a measure took.

Some measures needed regulations made by ministers and approved by both Houses: the online slot stake limit and the statutory levy are both statutory instruments dated 25 February 2025 on legislation.gov.uk.

Some measures needed only a change to the Gambling Commission's Licence Conditions and Codes of Practice (LCCP) or its Remote Gambling and Software Technical Standards (RTS), which the Commission can amend after consultation without Parliament. Bonus rules, marketing opt-in, game design rules and deposit-limit tools all travelled that way.

A third group, including the proposed ombudsman, has no confirmed commencement in the sources checked. The absence of a new rule does not remove existing operator duties.

Our shorter note on the two dates every regulatory summary needs explains the basic distinction.

Sources: High stakes: gambling reform for the digital age; The Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025, SI 2025/215; The Gambling Levy Regulations 2025, SI 2025/213.

Four dates on the Commission route, and which one counts

Each measure on that second route also generated four dates: the day the Commission opened a consultation, the day it closed, the day the Commission published its response with a decision, and the day the new wording took effect. The response and the effective date are routinely months apart.

The bonus wagering cap was decided on 26 March 2025 and applied from 19 January 2026. This page treats only the last date as "in force". Our shorter note on the two dates every regulatory summary needs explains why that discipline matters; this page applies it across the whole review.

Scope is Great Britain. The online-casino licensing measures discussed here concern Great Britain, not a UK-wide gambling regime. The two statutory instruments expressly extend to England and Wales and Scotland.

Sources: High stakes: gambling reform for the digital age; The Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025, SI 2025/215; The Gambling Levy Regulations 2025, SI 2025/213; Gambling promotions to be safer and simpler.

Slot stake limits: the measure that needed Parliament

The white paper proposed "a stake limit for online slots, consulting on a limit of between £2 and £15 per spin", with three options for 18 to 24 year olds: £2, £4 or "an approach based on individual risk".

DCMS ran the consultation from 26 July to 4 October 2023 and published its outcome on 23 February 2024, choosing £5 per spin for adults aged 25 and over and £2 for adults aged 18 to 24. The outcome document gives no implementation date. It could not: the limit needed regulations.

Those regulations are the Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025, SI 2025/215, made on 25 February 2025. Regulation 1(2) says they "come into force six weeks after the day on which they are made", which is 9 April 2025.

The operative wording attaches a condition to remote casino operating licences: for an individual under 25, "the total amount which an individual may stake in relation to any game cycle may not exceed £2"; for an individual aged 25 or over, "may not exceed £5".

A transitional provision applies the £5 figure to everyone for a further six weeks, which is how the Commission's guidance arrives at two dates: the £5 limit from 9 April 2025 and the £2 limit for under-25s from 21 May 2025.

For a closer look at the systems and jurisdictions around those rules, read Night Atlas's work on online casino jurisdictions.

Sources: Government response on maximum stake limits for online slots games in Great Britain; The Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025, SI 2025/215; Online slots stake limit guidance.

What the stake limit covers — game cycle, slots, GB licences

Three things about scope are stated in the primary sources and are worth carrying whole. The unit is the game cycle, which is a per-spin ceiling, not a session or daily cap. The product is online slots: the Commission's guidance says the limits "do not apply to other casino games, such as roulette or blackjack".

The condition attaches to a Gambling Commission remote casino operating licence. A business based abroad can hold that licence; another jurisdiction's licence does not replace the licence required to offer online slots to consumers in Great Britain.

Where a game is based, and under which licence, is a question Night Atlas's work on online casino jurisdictions handles in the long form.

Sources: Government response on maximum stake limits for online slots games in Great Britain; The Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025, SI 2025/215; Online slots stake limit guidance.

Financial checks: the one that exists and the one that does not yet

The word "affordability checks" covers two different measures, so a summary should identify which measure it means. The white paper proposed two tiers. The first was "background checks at moderate levels of spend" triggered "at £125 net loss within a month or £500 within a year".

The second was an "enhanced" assessment at "£1,000 net loss within 24 hours or £2,000 within 90 days". Only a version of the first tier is in force.

The in-force measure is LCCP social responsibility code 3.4.4, the financial vulnerability check. It applies to the remote licence categories listed in that code, with explicit exclusions including host, software, technical and certain ancillary and lottery licences.

From 30 August 2024 to 27 February 2025 it was triggered when a customer's "deposits minus withdrawals exceeds £500 in a rolling 30-day period"; from 28 February 2025 the figure is £150.

The check is "a customer-specific public record information check for significant indicators of potential financial vulnerability": bankruptcy orders, county court judgments, individual voluntary arrangements, debt relief orders and similar.

It is not a request for payslips or bank statements, and the Commission's 1 May 2024 announcement said it would use "publicly available data" and would not use the customer's postcode or job title. The trigger is net deposits, not net loss as the white paper had framed it.

A check need not be repeated at the threshold if a qualifying vulnerability check or risk assessment was conducted within the previous 12 months.

Sources: LCCP Condition 3.4.4: Financial vulnerability check; New rules boosting safety and consumer choice; Commission updates on progress of the financial risk assessments pilot; Commission to introduce Financial Risk Assessments in staged approach.

Financial risk assessments — a pilot, not a rule in force

The second tier, the financial risk assessment, went into a pilot instead of into force. The Commission's response of 1 May 2024 said it was "not being rolled out in a live environment".

A progress update on 10 February 2025 reported that stage 1 had run over 530,000 assessments across three credit reference agencies for roughly 300,000 accounts, with "approximately 95 percent of assessments were matched". The LCCP record shows a financial risk assessment pilot analysis phase taking effect on 7 August 2025 for the businesses that participated in the pilot.

That is a pilot obligation, separate from a general rollout of the announced customer thresholds.

Sources: New rules boosting safety and consumer choice; Commission updates on progress of the financial risk assessments pilot; Commission to introduce Financial Risk Assessments in staged approach; LCCP previous changes.

The staged approach of 7 July 2026 — announced, no start date

Then, on 7 July 2026, the Commission announced that financial risk assessments would be introduced in "a staged approach". Stage 1 is intended for the largest operators. Its thresholds are above £5,000 net deposit in a rolling 24 hours for customers aged 25 and over and above £2,500 for those under 25.

The final thresholds are net deposits above £1,000 in 24 hours or £3,000 in 90 days for those aged 25 and over, and above £750 in 24 hours or £2,000 in 90 days for those under 25.

The announcement gives no start date. It states that the Commission "will confirm the timetable for stage one following engagement with industry and other stakeholders". Its table leaves the intermediate thresholds "to be set following further engagement".

The announcement reports that in the pilot "97 percent of those spending above the threshold levels could be easily and frictionlessly assessed", against the white paper's estimate of 80 percent. The announcement and current LCCP change record checked on 24 September 2026 provide no effective date for these thresholds.

Existing customer-interaction duties continue; a pending new assessment rule is not permission to ignore financial risk.

Sources: LCCP Condition 3.4.4: Financial vulnerability check; New rules boosting safety and consumer choice; Commission updates on progress of the financial risk assessments pilot; Commission to introduce Financial Risk Assessments in staged approach.

The levy moves money between operators and the state

The white paper said "Government will introduce a statutory levy paid by operators and collected and distributed by the Gambling Commission under the direction and approval of Treasury and DCMS ministers." DCMS consulted from 17 October to 14 December 2023 and published its response on 27 November 2024.

The Gambling Levy Regulations 2025, SI 2025/213, were made on 25 February 2025 and came into force on 6 April 2025.

The rate depends on licence type. Remote casino, bingo, general betting, betting intermediary (excluding trading-room-only) and software licences have a 1.1% rate. Non-remote casinos, off-course betting and betting intermediary licences, including trading-room-only licences, are at 0.5%.

Adult gaming centres, non-remote bingo and on-course betting are at 0.2%; family entertainment centres, lotteries, pool betting and machine technical licences at 0.1%.

The base is the leviable amount, defined in the regulations as stakes and other amounts paid to the licensee during the levy period "minus the aggregate of amounts deducted during the levy period ... for the provision of prizes or winnings", for non-lottery licences. Lottery licence categories use their own definitions.

Current Commission guidance bases the non-lottery calculation on gambling revenues earned from Great Britain customers, so company-wide overseas revenue is not interchangeable with this base.

The government's response put the expected total at "approximately £90-£100 million" a year, split 50% to treatment through NHS England and the Scottish and Welsh equivalents, 30% to prevention, and 20% to research through UK Research and Innovation and the Commission.

Sources: The Gambling Levy Regulations 2025, SI 2025/213; Government response to the consultation on the structure, distribution and governance of the statutory levy on gambling operators; LCCP previous changes; How the statutory levy is calculated.

What the levy changes for a player, and what it replaced

The levy does not itself create a per-deposit or per-spin charge payable by a player. That does not establish whether a business has changed its prices or other terms. It is a charge on the operator, calculated on the operator's yield.

What it replaced is worth recording: the LCCP requirement that operators make annual voluntary contributions to research, education and treatment bodies was removed on 1 April 2025, five days before the levy took effect.

The first levy period for most licences was "the period of 9 months beginning with 1st July 2024", with payment due "before the 1st October following the end of that levy period", so the first payments fell due before 1 October 2025. The first non-society-lottery period also has a four-thirds multiplier.

The ordinary rates should not be applied to that nine-month period without that adjustment.

Sources: The Gambling Levy Regulations 2025, SI 2025/213; Government response to the consultation on the structure, distribution and governance of the statutory levy on gambling operators; LCCP previous changes; How the statutory levy is calculated.

Bonuses and marketing: the 10× cap and the opt-in

The white paper asked the Commission to "review the design and targeting of incentives such as free bets and bonuses to ensure there are clear rules and fair limits on re-wagering requirements and time limits". The Commission's autumn 2023 consultation on socially responsible incentives closed on 21 February 2024; the response was published on 26 March 2025.

It chose a cap over a ban. The Commission's reasoning was that a ban would push operators towards "terms and conditions that prevent customers from cashing out bonuses" and could push customers "to seek higher value offers in the online illegal market", and that there was "limited evidence to justify 5 times over the 10 times wagering requirement".

The response notes that some operators "currently apply up to 60 times wagering requirements".

For a practical terms-reading method, see Terms in Plain Sight's guide to reading bonus wagering requirements.

Sources: Autumn 2023 consultation response: Proposal 1, ban or limit the use of wagering requirements; LCCP Condition 5.1.1; Gambling promotions to be safer and simpler; LCCP Condition 5.1.12: Direct marketing preferences.

The wagering cap — in force from 19 January 2026

The result is the current LCCP social responsibility code 5.1.1. Licensees must not "apply wagering requirements, which requires a customer to play through bonus funds, over a maximum of 10 times", and must not "include more than one type of gambling product (betting, casino, bingo, and lottery) within an incentive".

It applies to all licences except gaming machine technical and gambling software licences. The effective date was first published as 19 December 2025. The Commission's news page carries an update note: "The date for implementation has been changed from 19 December 2025 to 19 January 2026." The LCCP change log confirms 19 January 2026.

A summary written from the March 2025 announcement and never revisited will carry the wrong date. How a wagering requirement is calculated, and what a 10× term means for a given bonus, is the subject Terms in Plain Sight covers; this page records only the rule and its date.

Sources: Autumn 2023 consultation response: Proposal 1, ban or limit the use of wagering requirements; LCCP Condition 5.1.1; Gambling promotions to be safer and simpler; LCCP Condition 5.1.12: Direct marketing preferences.

Direct marketing opt-in — in force from 1 May 2025

Direct marketing took the other route in the same review. The white paper wanted customers "opting-in for online bonuses and offers for different types of gambling products". The Commission's summer 2023 consultation response on 1 May 2024 confirmed the change with an effective date of 1 May 2025.

LCCP code 5.1.12 now requires the remote casino, bingo and betting licence categories it covers (with listed ancillary, host and other exclusions) to let customers opt in by product, "betting, casino, bingo, as applicable", and by channel, "phone call, email and text messages (SMS) as applicable".

Existing customers who had not already opted out had to be asked "at their first log-in after commencement".

A customer who has not opted in to a product and a channel should not be receiving that marketing; opting in does not guarantee messages will be sent, or override separate restrictions on marketing to someone at risk of harm.

Sources: Autumn 2023 consultation response: Proposal 1, ban or limit the use of wagering requirements; LCCP Condition 5.1.1; Gambling promotions to be safer and simpler; LCCP Condition 5.1.12: Direct marketing preferences.

Inside the game screen: design rules and deposit-limit tools

Deposit limits arrived in two phases. The autumn 2023 consultation response of 4 February 2025 required operators, from 31 October 2025, to "prompt their customers to set a financial limit before they make their first deposit", to "remind consumers every six months to review their account and transaction information", and to make the limit "easy to review and alter".

A separate disclosure rule from the same date requires operators holding unprotected customer funds to "actively remind consumers once every six months that their funds are not protected" in an insolvency.

For practical guidance on tools outside the rule itself, see Play in Balance's guidance on limits and support.

Sources: Updates to RTS effective 17 January 2025; New rules empowering consumers and boosting operator transparency; New deposit limit rules provide clarity for consumers; Implementation extension for new deposit limit requirements; RTS 14: Responsible product design; High stakes: gambling reform for the digital age.

Are there new responsible gambling tools mandated by UK law for 2026?

The second phase fixes what the words "deposit limit" mean. The Commission's response of 7 October 2025 requires a deposit limit to be "based solely on the amount a customer pays into their account over a set duration", that is, a gross figure, not deposits net of withdrawals. The original effective date was 30 June 2026.

On 26 May 2026 the Commission extended it to 30 September 2026 "to allow for further operator technical development time". At this review on 24 September 2026 that date has not arrived, so the register lists the phase as announced.

The extension also says gross deposit limits must use fixed time frames and be at least as prominent as other financial limits.

What a player can do with these tools once they exist, and how they interact with time-outs and self-exclusion, is Play in Balance's territory.

Sources: Updates to RTS effective 17 January 2025; New rules empowering consumers and boosting operator transparency; New deposit limit rules provide clarity for consumers; Implementation extension for new deposit limit requirements.

The change register

Every row below was checked against the primary sources listed for this article on 24 September 2026. "Announced" is the publication date of the document that stated the decision, not the consultation that preceded it. "In force" is the date the instrument, condition or standard took effect, as that instrument states it.

"Open" means the primary sources checked for this register give no confirmed effective date. A measure is marked in force only where the effective date has passed.

A related date outside the register differs by a day between Commission pages. The Personal Management Licence change, which is not player-facing and is not in the table, is dated 30 November 2024 in the Commission's news release and 29 November 2024 in its LCCP change log.

Where a similar discrepancy affects a row above, the date in the instrument itself is used and the news date is treated as secondary.

Sources: Government response on maximum stake limits for online slots games in Great Britain; The Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025, SI 2025/215; Online slots stake limit guidance; The Gambling Levy Regulations 2025, SI 2025/213; New rules boosting safety and consumer choice; LCCP Condition 3.4.4: Financial vulnerability check; Commission to introduce Financial Risk Assessments in staged approach; Updates to RTS effective 17 January 2025; LCCP Condition 5.1.12: Direct marketing preferences; LCCP Condition 5.1.1; Gambling promotions to be safer and simpler; New rules empowering consumers and boosting operator transparency; New deposit limit rules provide clarity for consumers; Implementation extension for new deposit limit requirements; LCCP previous changes; DCMS concludes consultation on gambling regulation funding; RTS 14: Responsible product design.

What the white paper promised that has not arrived

For three commitments, the sources checked for this page give no confirmed effective date for the proposed new obligation. This is a dated finding from those sources, not proof that no relevant document could exist elsewhere.

The ombudsman, described as "fully operationally independent" and meant to "adjudicate complaints relating to social responsibility or gambling harm", has no confirmed launch date in the government and Commission material located in this review.

The white paper proposed consulting on mandatory cross-operator data sharing after a trial. GamProtect is already operating, as the Commission's 2026 information release confirms; this review did not locate a general mandatory participation rule implementing that proposal.

And the enhanced financial risk assessment, one of the measures described as an "affordability check", has thresholds published but no start date.

Sources: High stakes: gambling reform for the digital age; Commission to introduce Financial Risk Assessments in staged approach; New deposit limit rules provide clarity for consumers; GamProtect information request, 3 May 2026; LCCP previous changes.

Two proposals changed between the white paper and the rule

Two proposals were changed on the way through. The white paper's first-tier check was framed as net loss, "£125 net loss within a month or £500 within a year"; the rule in force is framed as net deposits, £150 in a rolling 30 days, with the £500 figure having served as an interim threshold for six months.

The July 2026 final-stage announcement uses net deposits above £1,000 in 24 hours or £3,000 in 90 days for adults aged 25 and over. For those under 25 it uses above £750 or £2,000 respectively. These amounts and their deposit basis differ from the white paper's proposals.

They are what consultation is for, and a reader quoting the 2023 numbers as current is quoting a proposal.

One measure has gone the other way and reached an announced implementation date without appearing in the white paper's headline list: the gross definition of a deposit limit, which came out of a supplementary consultation in 2025 once the Commission found operators labelling net-of-withdrawal limits as "deposit limits".

Sources: High stakes: gambling reform for the digital age; Commission to introduce Financial Risk Assessments in staged approach; New deposit limit rules provide clarity for consumers.

How to read a date, and how this register was built

The method is repeatable with a browser. For each measure, find the document that states the decision, not the one that proposed it: for a statutory instrument that is the "made" text on legislation.gov.uk, and for an LCCP or RTS change it is the Commission's consultation response.

Take the effective date from the instrument or from the LCCP change log, not from a news article, because news pages are edited after publication; the bonus-cap page carries an update note for exactly that reason. Record the licence type the rule attaches to, the product it names, and the unit it uses.

Then compare the effective date with today's date. If today is earlier, the rule is announced. If a source says "to be confirmed", record an open date for that proposed measure.

Existing rules can still apply to the same conduct.

Sources: LCCP previous changes; Gambling promotions to be safer and simpler; Self-exclusion and current help and support contacts.

How long a rule has taken, and what this register leaves out

Applied to the question of when a rule announced today applies, the register gives a working range rather than a promise. Examples in this register range from 121 days for the first vulnerability-check threshold to 365 days for direct marketing preferences. Game-design rules took 261 days; the bonus cap took 299.

These are calculated intervals, not a forecast or an exhaustive range of all Commission changes.

Where the source gives no commencement date for a proposed new requirement, this register records that uncertainty. It does not suspend existing obligations.

Limits of the register. It covers measures that change what an online casino or betting operator licensed in Great Britain must do towards a customer. It does not attempt a complete register of land-based measures, internal regulatory-panel changes or Personal Management Licences.

It does not assess whether any operator complies. It will be corrected when a source above changes; the "Sources checked" date at the top of the page is the date to trust.

Sources: New rules boosting safety and consumer choice; Gambling promotions to be safer and simpler; LCCP previous changes.