Online Bingo in the UK: Licensing Duties, Compliance Costs and Penalties

Online bingo in Great Britain sits under one of the strictest gambling regulators on earth. If you run, market or supply bingo over the internet, the Gambling Commission licence is the price of admission. This guide walks through the legal duties, the real money involved and the penalties for getting it wrong.

What Licence Do You Actually Need to Offer Online Bingo?

Which licence class covers remote bingo?

Remote bingo falls under a B2C operating licence issued by the Gambling Commission. The Commission splits licences by activity, and bingo has its own category separate from betting and casino. A standard operating licence for remote bingo currently costs £36,820 for the application plus an annual fee that scales with gross gambling yield.

The application itself is not the expensive part. The real cost sits in the readiness work: policies, procedures, supplier checks and the evidence pack the Commission expects before it will even consider granting. Budget eight to twelve weeks for assessment in a clean case, longer if your beneficial ownership structure is complicated.

Do white-label operators need their own licence?

Yes. The brand name on the site is not what matters; the entity that contracts with players and holds their funds needs the licence. White-label bingo arrangements are common in the UK, but the label sits on top of a licensed operator, and the label holder that takes customer interaction responsibility may itself need a licence or a formal written agreement with the licensee.

Practical rule: if you set the rules of the game, control the wallet, or hold player balances, you are the operator in the Commission's eyes. Getting this wrong is one of the fastest routes to a licence review, and reviews are public.

What about suppliers and game studios?

Key equipment suppliers and game providers need a Commission licence too, though the门槛 differs. Studios behind Pragmatic Play, NetEnt or Hacksaw titles supplying UK bingo rooms must hold a remote licence or be covered by the operator's own due diligence regime under licence condition 3.4.2.

Operators carry the burden of checking that their suppliers are licensed and that the games are tested to the Commission's technical standards. Keep those records for at least five years. Auditors will ask for them, and "our supplier said they were fine" is not a defence.

How long does a licence application take?

The Commission quotes a statutory determination period of four months from a complete application, but clock stops whenever they request more information. In practice, straightforward remote bingo licences land in 12 to 16 weeks. Anything involving offshore entities, trusts or multiple jurisdictions pushes that to six months or beyond.

Plan your launch date backwards from the licence, not forwards from the marketing calendar. Several operators have paid for campaigns, hired staff and signed affiliate deals before the licence was granted, then sat idle for a quarter waiting on the regulator.

What Does Compliance Actually Cost?

What are the annual licence fees in 2026?

The Gambling Commission reviews fees each October. For a remote bingo operator, the annual fee is banded by gross gambling yield: operators under £1 million GGY pay the lowest band, while those above £10 million GGY pay the top band. The application fee for a remote bingo licence stands at £36,820 regardless of band.

On top of the Commission's own fees sits the Gambling Participation Levy introduced under the Gambling Act review. Operators now pay a percentage of GGY into research, prevention and treatment, with rates differing by vertical. Bingo sits in a lower band than online slots, but the levy is calculated quarterly and paid in arrears.

How much should a new operator budget for year one?

Working from published fee scales and typical consultancy rates, a single-brand remote bingo launch in the UK lands between £180,000 and £350,000 before a single ticket is sold. That covers the licence, legal advice, policy build, game certification, payment integration, compliance hires and the first audit cycle.

Multi-brand groups like those behind Gala Bingo, Mecca and Foxy Bingo amortise those costs across several skins, which is one reason consolidation keeps happening. A solo operator with one brand carries the full compliance overhead on a single revenue line.

Who pays for player protection tools?

The operator pays. affordability checks, deposit limits, reality checks and self-exclusion integration all sit on the operator's balance sheet. The Commission's guidance on customer interaction, updated in 2024 and tightened again in 2025, requires operators to act on indicators of harm without waiting for the customer to ask.

Expect to fund a dedicated safer gambling team from day one. For a mid-sized bingo site, that is at least three full-time staff, monitoring tooling and a 24/7 cover arrangement for high-risk periods. Skimp here and the Commission will find out through a compliance assessment.

What does a failed compliance assessment cost?

Commission compliance assessments are scheduled, not random. If the assessor finds breaches, the operator funds the remediation and often the regulator's costs of investigation. Recent cases have run to six figures in remediation alone, before any financial penalty is applied.

The cheaper route is pre-emptive: commission your own independent audit before the Commission does. Firms like BMM Testlabs and eCOGRA publish standard pricing for bingo platform reviews, and the invoice is always smaller than the enforcement outcome.

Which Rules Bite Hardest in Practice?

What does the Gambling Act 2005 require of a bingo operator?

The Act sets three licence objectives: preventing gambling from being a source of crime or disorder, ensuring gambling is conducted fairly and openly, and protecting children and vulnerable people. Every licence condition, code of practice and enforcement case traces back to one of those three aims.

Bingo has historically enjoyed a lighter touch than casino games, partly because of its social format and partly because of the sector's land-based heritage. That gap has closed. Remote bingo rooms with chat hosts, side games and jackpot features now attract the same scrutiny as slots.

How does the 2023 White Paper change things?

The "High Stakes, High Safeguards" White Paper, published April 2023, set the direction for every rule change since. It introduced online stakes limits for slots, strengthened the Gambling Ombudsman proposal, and pushed affordability checks up the risk ladder. Bingo operators are caught by the customer interaction changes even where stakes limits do not apply directly.

Implementation ran through 2024 and 2025, with several measures still phasing in during 2026. If your compliance manual was written before 2023, it is out of date. Rewrite it.

What are the advertising rules?

The Committee of Advertising Practice code, read alongside the Broadcast Committee of Advertising Practice, governs gambling ads. Under-18s must not be materially appealed to, offers must state significant conditions up front, and social media influencers need to hold an affiliate licence where they promote for reward.

The ASA issued 30 gambling-related rulings in 2024, a chunk of them against bingo and slot brands. Penalties for repeat offenders include referral to the Commission, which can suspend a licence. Free bingo offers with hidden wagering terms are a recurring trigger.

What are the AML obligations?

Bingo operators fall squarely within the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017. That means a documented risk assessment, a nominated Money Laundering Reporting Officer, customer due diligence at set thresholds and ongoing transaction monitoring.

The Commission has fined operators for weak source-of-funds checks on bingo and slot customers showing rapid deposit escalation. Keep your enhanced due diligence criteria written down and applied consistently. Ad hoc judgement calls are how cases get missed.

Which data protection rules apply?

UK GDPR and the Data Protection Act 2018 govern everything from marketing lists to self-exclusion records. Gambling data is not a special category under UK GDPR, but the sensitivity of the information means the Information Commissioner's Office expects tighter controls than for a standard e-commerce file.

Retention schedules matter. Self-exclusion data must be kept for the duration of the exclusion plus a reasonable period afterwards, while marketing consent records need a clear audit trail. The ICO fined a gambling operator £3.4 million in 2024 for sending marketing without valid consent.

What Happens When Operators Get It Wrong?

How large are recent Gambling Commission fines?

The Commission publishes every penalty action. Recent settlements show a clear upward trend: £19.2 million against an operator in 2023, £17.1 million in 2024, and multiple seven-figure settlements in 2025 for customer interaction failures. Bingo brands have not been exempt.

Fines are calculated on a scale that starts with a base amount for the breach, then adds aggravating factors such as duration, customer numbers affected and whether the operator self-reported. Cooperation with the investigation reduces the multiplier. Fighting obvious facts increases it.

Can a licence be revoked?

Yes, and it has been. Revocation requires a review under section 116 of the Gambling Act 2005, with the operator entitled to make representations. The Commission has revoked licences for repeated failures, for operators who continued trading after warning notices, and for cases involving criminal conduct by senior managers.

Revocation is rare. Licence conditions, suspensions and licence reviews are the more common tools, and each one appears on the Commission's public register where partners, banks and affiliates will see it.

What are the personal liabilities for directors?

Individuals can be made subject to a personal licence condition or, in serious cases, disqualified from holding a personal licence altogether. The Commission can also pursue directors through the Company Directors Disqualification Act where conduct is deemed unfit.

Senior managers should assume their decisions are documented. Emails, Slack messages and board minutes all become evidence. If you approved a marketing campaign that breached the code, your name is on it.

What is the Gambling Ombudsman's role?

Established under the 2023 White Paper, the Gambling Ombudsman provides free dispute resolution for players who have exhausted an operator's internal complaints process. Operators must be members, and the Ombudsman's determinations on compensation are binding up to a set limit.

Budget for it. A bingo operator handling 40,000 active customers a month should expect a small but steady flow of escalated complaints, each taking staff time and sometimes requiring redress payments beyond the original stake.

What happens with cross-border supply?

Supplying bingo to Great Britain from Malta, Gibraltar or the Isle of Man is legal and common, provided the operator holds a UK licence for that activity. The reverse is not true: a UK licence does not let you sell into other jurisdictions, and each market has its own regime.

Groups like Entain and Flutter run multi-jurisdiction portfolios with separate compliance teams per licence. Trying to run one policy manual across the UK, Malta and Ontario is how groups end up with inconsistent enforcement outcomes.

How Do the Major UK Bingo Brands Handle Compliance?

What does Gala Bingo do differently?

Gala Bingo, operated by Entain, runs one of the largest remote bingo footprints in Britain. Its compliance approach leans on group-level policy with brand-level execution: shared AML frameworks, shared safer gambling tooling, and a dedicated Entain regulatory affairs team that handles Commission correspondence centrally.

Scale helps. Entain's 2024 regulatory spend across the group ran into tens of millions of pounds, spread across bingo, sports and casino brands. A single-brand operator cannot match that headcount, but it can copy the structure: a named compliance officer, written policies, and an audit calendar.

How does Mecca Bingo manage land-based overlap?

Mecca, owned by Rank Group, runs clubs and a remote site under one licence framework. The overlap creates extra obligations: age verification on premises must reconcile with online checks, and self-exclusion lists need to cover both channels. Rank publishes a single safer gambling report covering clubs and digital.

The dual-channel model also creates an advantage. A player who self-excludes in a club is blocked online automatically, which is exactly the kind of joined-up control the Commission likes to see during an assessment.

What about JackpotJoy and Double Bubble Bingo?

Gamesys, now part of Bally's, operates JackpotJoy and Double Bubble Bingo under UK licences with a strong emphasis on product-level controls. Their rooms carry visible stake limits, session timers and chat host moderation, all of which map directly onto licence condition 3.4.5 on customer interaction.

Chat hosts deserve a mention. In bingo, chat is where harm indicators show up first: late-night intensity, escalating stakes, emotional language. Operators who train moderators to log concerns and route them to the safer gambling team close the loop faster than those relying on automated deposit flags alone.

How do smaller brands like MrQ and Heart Bingo compete on compliance?

Smaller operators such as MrQ, Heart Bingo and Double Bubble's competitors often win by being visibly tighter rather than bigger. MrQ, for instance, built its brand around no-wagering offers, which removes a whole class of complaints about hidden terms. Fewer complaints means fewer escalations to the Ombudsman.

That commercial choice has a compliance dividend. Clear bonus terms reduce ASA risk, reduce customer dispute volume and reduce the chance of a Commission information request about misleading promotions.

What do operators like Foxy Bingo and Sun Bingo do about affiliate risk?

Affiliate marketing is where bingo brands get into trouble. Foxy Bingo, Sun Bingo and their competitors work with hundreds of review sites, comparison tables and streamers. Under the Commission's guidance, the licensee remains responsible for what its affiliates say, even when the content sits on a third-party domain.

The working solution is contractual: approved marketing lists, pre-approval for offers, audit rights, and swift takedown for breaches. Operators who only check affiliates annually tend to be the ones explaining a code breach to the Commission in month three.

What Should a New Operator Do First?

Which comes first, the licence or the platform?

Licence first. The Commission will ask about your technical platform, your game suppliers and your payment processors during assessment, but you cannot sign binding commercial contracts for UK-facing operations until the licence position is clear. Getting the order wrong creates contractual exposure.

Run a parallel track instead: prepare the application, line up platform demos, and hold commercial negotiations on a conditional basis with a licence-granted clause. That keeps momentum without committing capital prematurely.

Who should be your first compliance hire?

A head of compliance with UK remote gambling experience, hired before the marketing lead. This person writes the policies the Commission will read, runs the risk assessment, and signs off on the customer interaction framework. Expect to pay £65,000 to £95,000 plus benefits in London or remote-equivalent.

Do not outsource the whole function to a consultancy. External advisers are useful for the application and the first audit, but the Commission expects a named individual inside the business who owns the licence.

Which games should you launch with?

Start with proven bingo formats: 90-ball and 75-ball rooms from established providers, plus a small selection of side games from studios like Pragmatic Play, Dragonfish or Playtech. Each title needs certification to the Commission's technical standards, which typically takes four to six weeks per game.

Adding a live casino studio or a sportsbook later is straightforward from a licensing view, since the licence covers the activity not the product. Adding them before your bingo compliance is stable is how operators lose focus in year one.

How do you prepare for the first compliance assessment?

Ask for a pre-assessment review. Several firms offer a dry run using the Commission's published assessment template, and the fee is a fraction of the cost of a failed first pass. Fix the gaps while you still have time.

Have these documents ready on day one: board-approved policies, staff training records, supplier due diligence files, complaint logs, self-exclusion registers and your last independent audit report. Missing files signal to the assessor that the licence is being run from a spreadsheet.

What does year-two compliance look like?

Once the licence is granted and the first assessment is passed, the workload shifts to maintenance: quarterly levy returns, annual licence fee payments, ongoing staff training, refreshed risk assessments and periodic independent audits. Calendar it all, with named owners.

Year two is also when the Commission looks at whether the operator's growth plan matches its compliance capacity. Aggressive expansion without matching control investment is a pattern they have flagged repeatedly in published review outcomes.

Frequently Asked Questions

Is online bingo legal in the UK?

Yes, provided the operator holds a valid Gambling Commission licence for remote bingo. Playing is legal for residents of Great Britain aged 18 or over. Operators without a licence face criminal prosecution, and players using unlicensed sites have no regulatory recourse if something goes wrong.

How old do you have to be to play online bingo?

Eighteen. The Gambling Act sets 18 as the minimum age for all commercial gambling in Great Britain, including bingo, and operators must verify age before a player can deposit. Under-18 bingo exists only in specific licensed formats with strict controls, and those are not offered remotely.

How much does a UK bingo licence cost?

The application fee is £36,820, with annual fees banded from roughly £5,110 at the lowest tier to £22,995 at the top, depending on gross gambling yield. Add the participation levy, audit costs and staffing, and a realistic first-year compliance budget starts around £180,000.

Can an offshore company run a UK bingo site?

Yes, many do. Operators based in Malta, Gibraltar and the Isle of Man hold UK licences, provided they meet the Commission's requirements including local senior management access and full financial transparency. The licence, not the company's location, determines legality for UK players.

What happens if a bingo operator breaks the rules?

The Commission can issue a warning, attach licence conditions, open a formal review, impose a financial penalty or suspend and, in the worst cases, revoke the licence. All enforcement outcomes appear on the public register, and penalties in recent years have reached eight figures.

Do bingo winnings get taxed in the UK?

No. Gambling winnings are not subject to income tax or capital gains tax for players in Great Britain. Operators, however, pay corporation tax on profits and contribute to the participation levy, which is factored into their commercial margins.

How do self-exclusion schemes work for online bingo?

GAMSTOP allows players to self-exclude from all UK-licensed gambling sites in one request, with exclusion periods of six months, one year or five years. Licensed bingo operators must honour GAMSTOP registrations and maintain their own internal self-exclusion registers as well.

The compliance bar for online bingo in Britain is high and rising, but it is knowable. Licence the right entity, budget honestly for year one, hire compliance before marketing, and treat every Commission communication as a document that may one day be read in public. Operators who do those four things rarely feature in enforcement notices.