Mobile Casinos in the UK: Licensing, Compliance Costs and Penalties

Mobile casinos now account for the overwhelming majority of real-money play in Britain, and every operator serving UK players from a phone screen needs a Gambling Commission licence. This guide walks through the legal requirements, the running costs and the penalty regime, with concrete figures from 2025 and 2026 filings.

Think of it as a working brief rather than a brochure. If you are an operator, an affiliate manager or a compliance lead, the numbers below are the ones your finance team will ask about before you sign a lease, hire a MLRO or launch an app in the Apple App Store.

What Counts as a Mobile Casino Under UK Law?

The Gambling Act 2005 does not distinguish between a desktop site and a phone app. If a product lets British customers stake real money on casino games remotely, it falls under remote casino operating licence requirements, regardless of the delivery channel or the device used.

Is a mobile casino app legally different from a mobile website?

No. The Gambling Commission treats both as remote casino. The licence application asks for technical platform details, not for whether the front end is native iOS, Android, a progressive web app or a responsive HTML5 site. Distribution method affects your compliance obligations, not your licence category.

Which licence class covers mobile slots and live dealer play?

Remote casino operating licence, class B2C, covers slots, table games, live dealer streams and in-play casino products delivered to UK consumers. If you also offer sports betting from the same wallet, you need a remote betting licence in addition, and the fees stack rather than merge.

Do white-label and platform deals change who holds the licence?

The brand owner named on the app store listing must hold the licence or operate under a written agreement with the licence holder. White-label arrangements are common, but the Commission expects the licence holder to retain control of customer funds, complaints handling and the self-exclusion integration with GAMSTOP.

What happens if you serve UK players without a licence?

Unlicensed remote gambling is an offence under section 33 of the Gambling Act 2005. Penalties reach level 5 on the standard scale, unlimited fines, and the Commission can pursue unlicensed operators through the High Court. Payment processors and app stores are also required to block unlicensed merchants.

Licensing Requirements and Application Costs in 2026

The initial application fee for a remote casino operating licence is £3,605, non-refundable, paid to the Gambling Commission before assessment begins. That figure covers the standard application route; the Commission publishes its full fee schedule annually and has held the remote casino fee broadly steady since 2023.

How much does the first-year licence fee cost?

Year-one fee for a remote casino licence is £36,778, payable once the Commission grants the licence. This is separate from the application fee, so budget for both in your first-year compliance line. Remote betting licences carry a higher first-year fee of £48,290.

What are the ongoing annual fees after year one?

From year two onward, remote casino operators pay an annual fee based on declared gross gambling yield. The Commission bands the fee, with a base tier starting around £4,500 for smaller operators and rising with GGY. Operators file their GGY return annually, usually within four months of the licence anniversary.

How long does a licence application actually take?

The Commission's stated assessment window is up to 16 weeks for a straightforward remote casino application, assuming no queries. Complex corporate structures, overseas beneficial owners or prior regulatory issues push this to 6 months or more. Budget a full quarter for legal review before you even file.

Which supporting documents does the Commission require?

• Corporate structure chart showing all entities above 10% ownership
• Bank statements and source-of-funds evidence for each beneficial owner
• Technical platform documentation including game server locations
• Responsible gambling policy, self-exclusion procedure and staff training plan
• AML risk assessment and named MLRO with CV and screening records

What does compliance cost beyond the licence fee itself?

Real-world first-year compliance spend for a mid-sized mobile casino typically runs £150,000 to £400,000 when you include legal counsel, independent testing of the random number generator, ongoing game audits, AML software subscriptions and the cost of a dedicated compliance hire. These are not licence fees, but they are unavoidable.

Regulatory Obligations Specific to Mobile Delivery

Mobile screens create obligations that desktop operators can sometimes avoid. Smaller viewports limit the prominence of age verification prompts, deposit limit tools and reality checks, so the Commission expects the same information density on a 5-inch screen as on a 27-inch monitor.

What age verification rules apply to mobile sign-ups?

Strict age verification is required before any account can deposit or play. Operators must check age through an electronic identity verification provider, typically matching name, date of birth and address against credit reference or electoral roll data. Failure to verify before play has triggered penalties in the £1m+ range.

How does the 1 April 2025 stake limit rule affect mobile slots?

Since 1 April 2025, online slots not classified as high-risk carry a maximum stake of £5 per spin, while high-risk slots are capped at £2 per spin. The Commission published its classification criteria in 2024, and mobile operators must enforce these caps client-side and server-side to prevent override attempts.

What are the rules on bonus offers and free spins in apps?

Remote gaming bonus terms must be presented clearly before opt-in, with wagering requirements, game weighting and withdrawal restrictions visible without expanding a menu. The Commission has repeatedly fined operators for burying key terms; typical penalties for unclear bonus terms run from £50,000 to £300,000 depending on consumer harm.

Do mobile casinos need to support GAMSTOP and self-exclusion?

Yes. Every UK-licensed mobile casino must integrate with GAMSTOP, the national self-exclusion scheme covering online gambling. Operators must also maintain their own in-house exclusion tools with minimum durations of 6 months, 12 months or 5 years, and must not market to excluded players during the exclusion period.

What accessibility obligations apply to mobile interfaces?

WCAG 2.2 AA compliance is expected for all customer-facing screens, including deposit flows, reality checks and self-exclusion pages. The Commission has flagged inaccessible responsible gambling tools as an aggravating factor in enforcement cases, which can raise the penalty band by one tier.

Financial Penalties and Enforcement Actions

The Gambling Commission publishes every enforcement action in a public register. Between 2023 and 2025, remote casino operators received penalties totalling over £60m, with mobile-first brands making up a significant share of the cases due to higher transaction volumes.

What is the largest fine issued to a mobile casino operator?

Flutter Entertainment, parent of Sky Bet and Paddy Power, agreed a £17m settlement with the Commission in 2022 covering systemic AML and responsible gambling failures across its mobile platforms. The case remains the benchmark for how the Commission calculates penalties on remote operators.

How does the Commission calculate penalty amounts?

The Commission applies a five-step framework: identify the breach, assess the harm, determine the operator's turnover attributable to the breach, apply a percentage multiplier, then adjust for aggravating and mitigating factors. Percentage multipliers typically run between 1.5% and 5% of relevant turnover for serious breaches.

Which breaches attract the highest penalties?

Anti-money laundering failures and allowing self-excluded or otherwise vulnerable customers to keep playing sit at the top of the penalty ladder. Both attract the highest multiplier bands because the Commission links them directly to criminal exploitation and to measurable customer harm, not just to procedural gaps.

Can the Commission suspend or revoke a mobile casino licence?

Yes. Licence review under section 116 of the Gambling Act 2005 can result in licence conditions being added, a suspension of up to 12 months, or full revocation. Revocation removes the operator from the UK market entirely and typically follows where the operator fails to engage with the review process.

What happens to customer funds if a licence is revoked?

Remote casino licence holders must hold customer funds in segregated accounts, either designated or protected, as declared at application. On revocation the Commission requires a wind-down plan, and funds should be returned to customers within a defined period. Designated accounts offer weaker protection than protected accounts in insolvency.

Comparing Major UK Mobile Casino Operators

The UK market has roughly 30 active mobile casino brands held by around 15 licence-holding groups. Several of the biggest names operate under shared licences: Ladbrokes and Coral sit under Entain, Sky Bet and Paddy Power under Flutter, while Bet365, William Hill and 888 Casino each hold their own.

Which mobile casino brands hold their own standalone licence?

Bet365, 888 Casino, MrQ, William Hill and Virgin Games each operate under a licence registered to their own group entity rather than a shared parent. Standalone licences simplify compliance ownership, but they also mean the penalty history attaches directly to that brand rather than being diluted across a portfolio.

Why do group structures matter for penalty exposure?

When Entain received its £14m penalty in 2023, the financial hit sat at group level, but the reputational damage landed on Ladbrokes and Coral individually. Investors and app store reviewers look at brand-level exposure, so a group fine can still trigger app removal warnings or partner contract reviews.

How do operators split mobile revenue across brands?

Flutter reported £1.7bn in UK and Ireland online revenue for 2023, split across Sky Bet, Paddy Power, Betfair and Sky Vegas. Entain reported £4.1bn group net gaming revenue for 2023, with mobile accounting for around 70% of digital play. These are group figures, not per-app numbers.

Compliance Costs: A Realistic Budget Breakdown

Launching a mobile casino in the UK is cheaper than opening a land-based venue, but the recurring compliance spend surprises most operators in year two. Below is a working budget model based on published fee schedules and typical supplier contracts.

What does a licence application cost line by line?

1. Application fee: £3,605, non-refundable, paid upfront
2. Year-one licence fee: £36,778, payable on grant
3. External legal counsel for the application: £15,000 to £40,000
4. AML policy drafting and independent review: £8,000 to £25,000
5. Technical platform audit and RNG certification: £10,000 to £30,000
6. Identity verification provider setup: £5,000 to £15,000 initial

What are the recurring annual compliance costs?

Annual costs include the Commission's ongoing licence fee, typically £4,500 to £30,000 depending on GGY band; game testing and certification renewals at roughly £20,000 to £60,000; AML software subscriptions at £12,000 to £48,000; and responsible gambling tool licensing such as Playtech's SAFER or GeoComply's GeoGuard, running £10,000 to £40,000 per year.

How much does a dedicated compliance hire cost in the UK?

A Compliance Manager in London or Manchester earns £55,000 to £85,000 per year, with senior heads of compliance reaching £110,000. An MLRO with Gambling Commission experience commands £70,000 to £120,000. Smaller operators often outsource the MLRO function at £2,000 to £5,000 per month.

What does app store compliance add to the budget?

Apple requires gambling apps to hold a Gambling Commission licence, display age ratings of 17+ or 18+, and include responsible gambling links on every download page. Google Play applies similar rules for the UK market. App review delays of 2 to 5 business days are standard, and a rejected build can cost a launch window.

How do payment processing fees compare for gambling merchants?

UK-licensed mobile casinos typically pay 1.5% to 3.5% per card transaction, plus a fixed fee of £0.10 to £0.20. High-risk merchant category codes push rates toward the upper end. E-wallet deposits via Skrill or Neteller add another 1 to 2% in interchange, which operators either absorb or pass to customers.

Market Structure and Competitive Landscape

The UK remote casino market generated approximately £4.2bn in gross gambling yield for the year to March 2024, according to Commission statistics, with mobile devices driving the majority of that total. Market concentration is high: the top five groups hold over 60% of remote casino GGY.

How many mobile casino brands operate in the UK?

The Commission's public register lists roughly 60 remote casino licence holders, supporting well over 100 consumer-facing brands. Many brands share a licence, so a single compliance failure can affect multiple apps simultaneously. This consolidation has accelerated since 2022 as smaller operators exited the market.

Which providers power the biggest mobile casino libraries?

Pragmatic Play, NetEnt, Evolution, Hacksaw Gaming and Big Time Gaming dominate mobile slot and live dealer lobbies. Evolution supplies live blackjack and roulette streams to most major UK brands, while Pragmatic's Drops and Wins network runs across Sky Vegas, Paddy Power and Bet365 Casino mobile apps.

What share of deposits come from mobile devices?

Industry reporting from 2024 puts mobile at roughly 75% to 80% of all UK remote gambling deposits, with iOS slightly ahead of Android in average deposit value. Desktop remains relevant for high-stakes live dealer play, but the trend line has moved toward phones consistently since 2019.

How do UK mobile casinos compare with offshore alternatives?

Several brands popular with British players, including Mystake, Goldenbet, Donbet and Fat Pirate, operate under licences from Curaçao or Anjouan rather than the Gambling Commission. These are offshore operators with a different licence and different consumer protections, and they are not permitted to advertise to UK consumers under section 33 of the Gambling Act.

Responsible Gambling and Player Protection Duties

Mobile casinos carry a licence condition requiring proactive identification of customers showing signs of harm. This is not a soft expectation. The Commission audits interaction records and will fine operators who rely on automated flagging without documented human review.

What deposit limit tools must mobile casinos provide?

Every UK-licensed mobile casino must let customers set daily, weekly and monthly deposit limits from the account menu, with immediate effect for decreases and a cooling-off period of at least 24 hours for increases. Limits must be visible without leaving the cashier screen.

How do reality checks work during mobile play?

Operators must offer session time notifications at intervals chosen by the player, defaulting to 60 minutes. The notification must display net position for the session and require acknowledgement before play continues. Non-intrusive placement on mobile is a common audit finding.

What is required for affordability checks in 2026?

The Commission's ongoing work on financial risk checks requires operators to review customer spend patterns and request evidence of source of funds when thresholds are crossed. Thresholds vary by operator policy, but the Commission expects checks at cumulative deposit levels that regulators have signalled could reach £5,000 over a rolling 12-month period.

Who enforces responsible gambling rules on mobile apps?

The Gambling Commission is the primary regulator, supported by the Advertising Standards Authority for marketing claims and by app stores for distribution rules. The Independent Betting Adjudication Service handles customer complaints that operators fail to resolve within 8 weeks.

Frequently Asked Questions

Do I need a separate licence for an iOS app and an Android app?

No. One remote casino operating licence covers all delivery channels, including iOS, Android, responsive web and progressive web apps. The Commission cares about the activity, not the packaging, so a single licence fee applies regardless of how many app store listings you maintain.

How much does it cost to launch a UK mobile casino in 2026?

Budget £3,605 for the application, £36,778 for the year-one licence, and £150,000 to £400,000 for legal, testing, AML software and compliance staffing. Realistic total first-year outlay sits between £200,000 and £450,000 before marketing spend.

Can the Gambling Commission fine an operator for a single customer complaint?

One complaint rarely triggers a fine on its own. Repeated failures, patterns of vulnerable customer harm, or a complaint that reveals a systemic control gap can open a licence review. Penalties start where the Commission identifies a breach affecting multiple customers or a serious control failure.

What happens if my app is removed from the Apple App Store?

Apple removes gambling apps that fail to display a valid UK licence number, omit responsible gambling links or change their gambling functionality without a new review. Operators can appeal, but reinstatement typically takes 5 to 10 business days, during which mobile revenue drops to zero.

Do mobile casinos have to pay UK corporation tax?

Yes. Remote casino operators pay corporation tax at 25% on profits for the 2025/26 financial year, plus a 21% Remote Gaming Duty on gross gaming yield. Both apply to UK-facing revenue regardless of where the operating company is incorporated.

Is it legal to play at an offshore mobile casino from the UK?

Playing is not an offence for the customer, but the operator must hold a Gambling Commission licence to advertise or accept UK customers. Offshore brands without a UK licence operate outside the Commission's enforcement reach, which means no UK complaints process and no access to GAMSTOP.

How often does the Commission audit mobile casino operators?

The Commission runs a risk-based assessment programme, with most remote casino operators reviewed at least once every 3 years. High-risk operators, those with prior penalties or elevated complaint volumes, can be reviewed annually. Each review covers AML files, responsible gambling interactions and technical platform controls.

What is the minimum age to play at a mobile casino in the UK?

18. Age verification must be completed before any deposit or play, using electronic checks against identity data. Operators face penalties for onboarding under-18s, with the Commission treating each instance as a separate breach of licence conditions.