Licensing pages tend to be either a wall of legal jargon or a single badge in a footer. This one sits in between. Below, the Pack Desk explains what a UK Gambling Commission (UKGC) licence actually obliges an operator to do, shows you how to check the licence yourself, and is upfront about which claims we could confirm and which we could not. If you want the wider picture first, our full review covers games, payments and support in depth.
What a UKGC licence means for players
Pawbets states that it is licensed and regulated for Great Britain by the UK Gambling Commission. A UKGC licence is not a badge that is bought once and framed; it comes with ongoing conditions, regular reporting and the threat of fines or suspension if the operator falls short.
For you as a player, the licence matters for three practical reasons:
- Rules apply by default. Wagering caps, stake limits, age checks and the ban on credit cards are not optional extras. A licensed site has to follow them whether or not it advertises the fact.
- There is a referee. If a dispute cannot be settled with the operator, you can take it to an independent Alternative Dispute Resolution (ADR) body.
- Your money is handled under scrutiny. Licensed operators must disclose how customer funds are protected and run anti-money-laundering checks.
How to verify the licence yourself
We never print a licence number on this site, because numbers change when companies restructure and a stale figure would be worse than none. Instead, check the live source in about two minutes:
- Find the number in the footer. Scroll to the bottom of the casino site. The licence number and the name of the licensed company should be stated there.
- Open the UKGC public register. Search the Gambling Commission website for “public register” and choose the search for online operators.
- Search by number or trading name. Enter the licence number from the footer. The result shows the licensed company and its trading names.
- Check the trading name and domain. Look through the listed domains and confirm the site you are actually using appears there. Lookalike sites copy footers; they cannot copy register entries.
- Check the status. It should read active. If it says suspended, revoked or surrendered, do not deposit.
If anything does not match
A footer number that returns no result, a register entry that lists different domains, or a status other than active are all reasons to stop. Do not deposit until the mismatch is explained, and treat any site that cannot explain it as unlicensed.
What the licence forces on the operator
The interesting part of a UK licence is not the badge but the list of things it rules out. Under current UKGC conditions, the casino must apply all of the following to British accounts:
- Age and identity checks before play. You cannot deposit or spin until your age and identity are verified. Most checks are automatic and finish in minutes; some players are asked for photo ID and proof of address, and occasionally source of funds.
- A 10x wagering cap on bonuses. Since 19 January 2026, bonus wagering cannot exceed 10x. The welcome offer uses exactly 10x, as covered on our promotions page.
- No bonus buys. Feature buys are banned for GB players, so you will not find them in the lobby.
- Slot stake limits. Online slots are capped at £5 per spin, or £2 per spin for players aged 18 to 24. Autoplay and turbo spin are also off, with a minimum 2.5-second spin cycle.
- No credit cards. Credit cards are not accepted for gambling in Great Britain. Crypto is not permitted on UK accounts either.
- GAMSTOP participation. The casino takes part in the national self-exclusion scheme.
- A complaints process plus ADR. You get an internal complaints route and, if that fails, a free independent review.
Woof!
Game fairness and independent testing
The operator states that its random number generators (RNGs) and published return-to-player (RTP) figures are tested by an independent testing house approved by the Gambling Commission. We deliberately do not name a lab, because we did not see a certificate that would let us do so accurately.
What you can see for yourself is the RTP. Open the information panel in any slot and the theoretical return is listed. Across the library, the average shown in-game is about 96.2%. Remember that RTP is a long-run average over millions of spins; it tells you nothing about the next session, and a 96% game can still lose your entire session budget quickly.
Live dealer tables are a different case: results come from physical wheels, shoes and cards, streamed from studios such as Evolution. Fairness there rests on studio controls and the studio’s own licensing.
Payment security
On the technical side, the casino states it uses TLS 1.3 encryption for traffic between your browser and its servers, and that card payments run through a PCI-DSS compliant payment processor, meaning full card numbers are not stored by the casino itself.
You can add a layer of your own. Two-factor authentication (2FA) is optional and can run via an authenticator app or SMS. We recommend the app route, since SMS codes can be intercepted through SIM-swap fraud. Our login guide walks through switching it on.
Withdrawals follow a closed-loop rule: money goes back to the method you deposited with. That is a security measure as much as an anti-money-laundering one, because it stops a hijacked account sending funds to a stranger’s wallet.
Switch on 2FA first
It takes about a minute in account settings and is the single most useful step you can take to protect your balance. If you get locked out after five failed attempts, the lock lasts 30 minutes; our troubleshooting page has the fixes.
Data protection
Any operator serving British players is bound by UK GDPR and must be registered with the Information Commissioner’s Office (ICO). In plain terms, you are entitled to:
- know what personal data is held about you and why;
- request a copy of it (a subject access request);
- have inaccurate data corrected;
- ask for deletion, within the limits of anti-money-laundering law, which requires some records to be kept for years after an account closes.
Marketing consent is separate from account terms. You can switch off promotional emails and VIP contact without closing your account. The privacy policy on the casino site sets out retention periods and data processors; read it if you want the specifics.
Responsible gambling tools
The licence requires the tools; how easy they are to find is up to the operator. The casino offers the full standard set in account settings:
- deposit limits (daily, weekly or monthly) and loss limits;
- session reminders and reality checks;
- time-outs from 24 hours to six weeks;
- self-exclusion for six months or longer, plus GAMSTOP for every licensed UK site at once.
Limit decreases apply immediately; increases normally have a cooling-off delay. If gambling has stopped being fun, free help is available from BeGambleAware.org, GamCare via the National Gambling Helpline on 0808 8020 133, and Gordon Moody.
Certifications at a glance
| Certification | What it covers | How to check |
|---|---|---|
| UKGC operating licence | Legal right to offer gambling in Great Britain, plus all player-protection conditions | Footer licence number against the UKGC public register |
| Independent RNG and RTP testing | Randomness of game outcomes and accuracy of published RTPs | RTP in each game’s info panel; ask live chat which testing house is used |
| GAMSTOP participation | Self-exclusion across all licensed UK sites | Register at the GAMSTOP website; the casino should block access |
| PCI-DSS payment processing | Secure handling of card data by the payment processor | Ask live chat to name the processor; check its PCI status |
| TLS 1.3 encryption | Data in transit between you and the site | Padlock icon and certificate details in your browser |
| UK GDPR and ICO registration | Lawful handling of personal data | Search the operator’s company name on the ICO register |
| ADR provider | Independent review of unresolved complaints | Named in the complaints section of the full terms |
What we could not verify
Being honest about the gaps is part of the job. The Pack Desk did not see, and therefore does not quote:
- the licence number itself. You must check it on the register, as described above;
- the name of the testing house or any certificate number for RNG testing;
- the name of the ADR provider, which should be stated in the casino’s full terms;
- the ICO registration number or the PCI-DSS processor’s name.
None of these gaps is unusual for a review site; the information lives with the operator and the regulator, not with us. It is also why our security score of 9.3 reflects the controls we could observe directly, such as verification before play, 2FA, closed-loop withdrawals and responsible gambling tools, rather than paperwork we could not inspect.
Our approach
We report what the operator states, what we could test, and what you should check yourself. Read how our scores are built on the about page, and the plain-English guide to the terms and conditions for the rules that follow from the licence.
If the register check comes back clean and you are comfortable with the terms, you can compare the welcome offer against other UK options on our comparison page before deciding.
18+ only. Play within limits you set in advance, and treat any bonus as entertainment value, not income.
