GamStop Guide UK Self-Exclusion and Registration Steps for Gamblers and Support

Prepare these exact items: full legal name, date of birth, current UK postcode, a working mobile number, a valid email and one proof of address dated within the last three months (utility bill or bank statement). Typical activation window is under 24 hours; keep screenshots or confirmation emails as evidence of the enrollment timestamp.

Scope and limits: the service blocks access to all operators licensed by the UK Gambling Commission for the chosen period; retail betting shops and operators located outside UK licensing do not fall under this block. Active wagers are normally settled by operators according to their terms; pending withdrawals can take operator-specific processing times (usually 1–7 business days).

Immediate actions to reduce risk: close or restrict payment methods (cards and e-wallets), ask individual operators to close accounts and return remaining balances, and install device-level blockers such as Gamban (subscription) or BetBlocker (free). Keep copies of account closure confirmations and reference numbers from operator support.

If you need support: contact the National Gambling Helpline (24/7) at 0808 8020 133 or use the live-chat on the major support websites; local NHS mental-health services and charities offer counselling and CBT referrals. If you suspect identity or address mismatches during sign-up, double-check entries and contact the scheme’s support desk immediately to correct errors before activation completes.

Note: removal before the selected term is generally not permitted; choose the shortest period you are confident you can maintain if you want an option to return sooner.

Who can join the national blocking scheme and what checks are performed?

If you are 18 or over and resident in Great Britain (England, Scotland or Wales), sign up to the national blocking scheme; have your full name, date of birth, current UK postcode, email and phone ready to speed approval.

Eligibility criteria

Age: minimum 18 years.

Residency: living in Great Britain (Northern Ireland, Crown dependencies and many offshore territories are excluded).

Contact details: valid email address and UK phone number required for account creation and verification communications.

Address proof: you may be asked to supply a recent bank statement, utility bill (usually within 3 months) or a confirmed postcode matched via public records.

Choice of blocking period: typical options are 6 months, 1 year, 3 years or 5 years; selection is binding for the chosen period.

Checks performed during enrolment

Identity matching: submitted name, date of birth and postcode are checked against third-party identity services and public records (electoral roll, credit-reference databases) to confirm a UK identity.

Operator cross-checks: participating licensed operators compare the registrant’s identifiers (name + DOB + postcode, plus email, phone, payment details where available) against their customer databases to locate and block accounts.

Document verification: for mismatched or ambiguous records you may be asked to upload passport or driving licence images and a recent proof of address; automated ID-check providers typically validate these.

Activation timeframe: most enrolments are processed electronically and take effect within 24 hours; manual reviews extend processing time.

Limitations: land-based betting shops and operators outside the scheme’s remit remain accessible; examples include unregulated offshore platforms such as sites not on gamstop.

Sign up online in under 10 minutes: provide full name, date of birth, National Insurance number, contact details and photo ID for fastest confirmation

Step-by-step process

1) Open the UK central gambling-blocking portal and choose “Create an account” or “Enrol”.

2) Enter legal full name exactly as on ID, date of birth (DD/MM/YYYY), and National Insurance number – presence of NI speeds automated checks.

3) Add current residential address (must match proof of address), primary email and mobile number for verification codes.

4) Choose your desired ban length: 6 months, 1 year, 5 years, or permanent. Confirm choice; it cannot be shortened once active.

5) Upload photo ID (passport or driving licence) and one proof of address dated within 3 months (bank statement, utility bill). Use PDFs or JPEGs and keep file sizes under the portal limit (commonly 5 MB).

6) Complete CAPTCHAs and accept terms; submit. You will receive an email and/or SMS with confirmation steps.

Required field	What to supply	Typical verification time
Full name	As on passport/driving licence	Immediate (automated match)
Date of birth	DD/MM/YYYY, matches ID	Immediate
National Insurance number	e.g. AB123456C – optional but speeds checks	Instant to 24 hours
Address	Current residential address; must match proof	Immediate to 48 hours
Email & mobile	Active address and phone for codes	Immediate (code delivery)
Photo ID	Passport or driving licence (clear photo)	Instant to 48 hours (manual review possible)
Proof of address	Bank statement/utility bill ≤3 months	Instant to 48 hours
Choice of ban length	Select from preset durations	Actioned within 24–72 hours across providers

Timing expectations and practical tips

Completion time for the online form: typically 5–10 minutes if documents are ready. Automated identity checks return results instantly in most cases; if documents require manual review, expect 24–48 hours, occasionally up to 72 hours on busy days.

Block takes effect immediately for some operators but can propagate across the network within 24 hours; allow up to 72 hours for full coverage. If you see access after confirmation, contact the portal support with your reference number rather than individual sites.

Tips to avoid delays: use exact ID spellings, upload high-contrast scans or photos, provide a recent proof of address, do not use VPNs or proxy IPs, and complete SMS/email code steps within the validity window (usually 10 minutes).

Documents and ID verification required to complete sign-up

Provide a clear colour copy of one government-issued photo ID plus a proof-of-address document dated within the last three months to avoid delays.

Acceptable photo ID: passport (photo/data page), photocard driving licence (both front and back), national identity card, Biometric Residence Permit (show both sides). ID must be valid (not expired) and show full name, date of birth and a clear likeness.

Acceptable proof of address: recent utility bill (gas, electric, water), bank or building society statement, council tax demand, tenancy agreement, or HMRC letter. Documents should display full name and a UK address; PO Boxes usually will not be accepted.

If the name on your account differs from the name on your ID, upload supporting evidence such as a marriage certificate, deed poll or a second official document that links both names.

Card verification: when requested, submit a photo of the card that displays the cardholder name and the first six or last four digits. Hide the middle digits and never upload the CVV. If asked for a bank statement instead, ensure the page shows the account name, sort code and at least the last four digits of the account number.

File format and quality: submit colour images or PDFs. Preferred formats are JPEG, PNG or PDF; keep file size typically between 200 KB and 5 MB and use at least 300 DPI where possible. Keep all four corners visible, avoid glare, shadows, stamps or edits, and make sure text is legible without zooming.

Live face checks: if a live photo or short video is required, use a plain background, remove sunglasses and hats, face the camera directly and follow on-screen prompts (look left/right, blink, or turn head slowly). Do not use filters or edited images.

Common reasons for rejection: blurred images, expired documents, cropped pages that cut off text or corners, mismatched names or addresses, screenshots or photos of screens, handwritten utility notes, and documents older than the stated time window.

Typical processing times: automated checks can complete instantly; manual reviews generally take 24–72 hours. If a document is rejected, resubmit with the specific corrections requested and include a short note explaining the change.

When contacting support about verification, include the full name on the account, date of birth, verification reference or ticket number, and attach freshly captured images or PDFs of the requested documents. Label files clearly (e.g., “passport_front.pdf”, “utility_bill_mar2025.jpg”) to speed handling.

How to choose a 6, 12, 24-month period

Opt for a 6-month block when losses remain under roughly 5% of net monthly income; gambling sessions occur fewer than twice weekly; no missed rent or utility payments in the past three months; this is your first formal break from wagering sites.

Selection criteria by duration

6 months – Best for short-term control: fewer than two sessions per week; losses below ~5% of take-home pay; no persistent urges to chase losses; stable household support available. Choose this when motivation is high and external pressures are low.

12 months – Suitable for moderate risk: weekly sessions between two and five; losses around 5–20% of net monthly income; one or more missed discretionary payments; repeated attempts to stop that lasted less than six months. Select this when patterns show escalation but immediate crisis is absent.

24 months – Appropriate for high risk or entrenched problems: daily or near-daily use; losses exceeding roughly 20% of net monthly income or outstanding gambling-related debt above £1,000; multiple missed essential payments; documented mental-health impact or prior failed attempts at shorter blocks. Use this when long-term separation from wagering environments is required.

Concrete actions once a duration is chosen

Set a financial threshold to monitor progress: percentage of income lost per month; maximum weekly spending limit; automatic alerts from your bank when thresholds are breached. Remove saved payment methods from devices; cancel one-click options; notify your card issuer to block transactions to known operators. Install reputable blocking software on each device; enable router-level filters where possible. Arrange a midway review: at three months for a 6-month period; at six months for a 12-month period; at twelve months for a 24-month period; use those checkpoints to assess cravings, finances, relapse risk. If debts exist seek free debt-advice services immediately; if cravings persist contact a specialist clinician or a local support organisation. Record replacements for gambling activity (exercise regime, volunteer hours, hobby schedule) before the block starts; assign accountability partners from family or friends who can remove access to devices when requested.

Which UK gambling sites and services are covered by the national opt-out scheme?

Enrol in the UK national opt-out scheme to block access across licensed remote operators: this covers online casino platforms (slots, table games, live dealer), mobile and desktop sports betting (pre-match and in-play), poker networks, online bingo rooms and remote lotteries run under a UK Gambling Commission (UKGC) remote licence.

Covered services – concise checklist

Includes:

• Remote casino sites and apps that hold a UKGC remote licence.
• Sports betting platforms licensed for UK customers (desktop and mobile, including in-play markets).
• Online poker networks and poker rooms with a UKGC licence.
• Licensed online bingo sites and licensed remote lottery services (not the National Lottery operator unless separately included).
• Multiple brand sites operated under the same UKGC licence – the ban is applied across those brands where the licence-holder is required to participate.

Not covered – quick exclusions

Does not cover:

• Land-based venues: betting shops, racetrack betting facilities, bricks-and-mortar casinos and arcades.
• The National Lottery run by the national lottery operator (separate rules apply).
• Operators without a UKGC remote licence (offshore or unlicensed sites and some crypto-only operators).
• Social gaming, sweepstakes apps, free-to-play casino-style sites that are not regulated as gambling in the UK.
• Third-party services such as payment processors, affiliates or advertising platforms – access controls fall to licensed operators, not payment providers.

Category	Coverage under the opt-out scheme	Examples
Online casino	Covered if operator holds UKGC remote licence	Slots, roulette, blackjack, live dealer via licensed sites/apps
Sports betting	Covered for licensed remote bookmakers	Pre-match and in-play bets on mobile/desktop
Poker & bingo	Covered when run under UKGC remote licences	Online poker rooms, licensed bingo sites
National Lottery	Not covered by this scheme	National draw tickets and official lottery services
Land-based venues	Not covered	Betting shops, casinos, arcades
Offshore/unlicensed operators	Not covered	Sites without UKGC remote licence, crypto-only platforms

Check an operator’s UKGC licence number on its site before relying on the opt-out; if a brand is part of a separate licence-holder group it may not be covered unless that licence-holder participates. For any uncertainty, contact the operator’s support and request confirmation of participation under the national opt-out scheme.

How operators implement the UK opt-out system: account blocking, payment controls and customer contact

Suspend access immediately on a confirmed opt-out match: terminate active sessions, disable login and wagering functionality within 1 hour of an automated or manual match. Flag the account status as “blocked” in core ledger and authentication services and prevent any new wagers or gaming sessions.

Detection: multi-layer matching – run checks at account opening (real-time), nightly batch reconciliations and on-demand manual checks. Use exact-match rules for name + date of birth + postcode to trigger immediate action; apply fuzzy matches (e.g., alternate spellings, transposed digits) to queue accounts for human review within 24 hours. Log match type, confidence score and decision outcome for audit.

Account controls – remove or disable all stored payment tokens and card-on-file identifiers immediately; lock account balances to prevent promotions or bonus credits; quarantine loyalty points and promotional entitlements. Allow customers to withdraw remaining ledger balances but require identity verification before payouts; process withdrawals through a dedicated compliance workflow to prevent reactivation.

Payment-level interventions – configure gateway rules to decline deposit authorisations for blocked accounts and intercept recurring payment mandates. Instruct payment service providers and acquirers to flag PANs/tokens tied to blocked profiles and to stop tokenisation for new instruments. Implement transaction monitors that reject deposit attempts by instrument ID, customer ID, email and device fingerprinting.

Third-party coordination – maintain API connections with the national opt-out list for real-time queries and daily pulls. Share suppression lists with major PSPs and wallets using hashed identifiers. Establish SLAs: confirm receipt of suppression updates within 24 hours and confirm PSP action within 48 hours.

Customer contact policy – cease all marketing and promotional outreach within 24 hours of a match; apply global opt-out suppression flags to CRM, SMS, push and postal channels. If the customer contacts support, use staff trained in vulnerability handling, follow a scripted flow that (1) confirms identity, (2) explains account state, (3) outlines fund withdrawal options, (4) provides at least two independent support helplines and self-help resources. Do not attempt to re-engage with incentives or alternative products.

Interaction handling and governance – record and timestamp every interaction, decision and system change in an immutable audit trail. Retain logs and decision evidence for at least five years and make them available for internal audit and regulator requests. Run monthly reconciliation reports: target 100% of confirmed matches blocked within 24 hours, investigate any false positives above 1% and document corrective actions.

Testing and continuous checks – perform quarterly simulated registrations and deposit attempts to verify end-to-end blocking across front-end, payments and PSP integrations. Maintain a documented incident response that restores correct blocking within predefined RTOs (recommended: 4 hours for critical failures) and circulates a post-incident report with root cause and remediation deadlines.

Handle gambling on unlicensed or offshore sites immediately: close accounts, withdraw any available funds, document every transaction, then contact your bank to block further payments.

Immediate steps (within 24–48 hours):

• Close the account on the offshore site where possible and request withdrawal; take screenshots of balance, transaction history and any terms or communications.
• Remove stored cards and bank details from the site and your browser; delete saved payment methods in any linked e-wallets.
• Contact your card issuer and bank to: request a gambling-merchant block (ask them to block Merchant Category Code 7995 where supported), cancel or replace cards used, and set a fraud dispute/chargeback claim for unauthorized or misleading transactions.
• If funds are stuck with an offshore operator, ask the bank about chargeback timescales (many schemes require claims within ~120 days of the transaction) and provide the screenshots and transaction IDs.
• Report suspected fraud or scams to the UK national fraud reporting service (Action Fraud) and keep the reference number for complaints and chargeback processes.

Technical and account controls

• Install reputable blocking software that blocks gambling domains and apps across devices (examples: commercial blockers and free lists that alter hosts files); apply the block on all household devices and routers.
• Enable two-factor authentication for email and any financial accounts; change passwords to unique, strong phrases and remove autofill payment data from browsers and phones.
• Close or limit e-wallets and crypto accounts used for deposits; transactions with cryptocurrencies are typically irreversible–treat those deposits as high-risk.

Banking, payment and legal options

• Ask your bank to place a permanent merchant-block for gambling transactions on your cards and any future accounts; request confirmation in writing.
• Use chargeback procedures for credit/debit card payments and ask about filing a Section 75 claim when applicable (credit card purchases over £100 and under £30,000 may qualify if goods/services are misrepresented).
• Report the operator to UK regulators only if it falsely claims a UK licence; otherwise regulators outside UK have limited reach–focus on payment reversals and fraud reporting.
• If money was stolen or misused, file a police report and include the Action Fraud reference when contacting police or financial ombudsman services.

Support and long-term prevention

• Subscribe to a commercial blocking product or community-maintained blocker to prevent accidental access to offshore domains; update blocklists weekly.
• Set deposit and transaction limits with regulated operators you trust; request permanent gambling transaction blocks from your bank for recurring card and bank transfers.
• Contact specialist support charities by phone or web chat for practical coping strategies and referral to local groups (for UK callers, the national gambling helpline and GamCare services operate a free helpline: 0808 8020 133).
• Keep a written timeline of actions taken (dates, correspondence, bank reference numbers) to support chargebacks, fraud investigations and any complaint escalation.

Stop marketing emails and SMS after you join a national opt-out service

Log into each operator account now and switch off promotional messages in the account’s “Communication” or “Marketing preferences”; take a timestamped screenshot as proof.

Immediate actions

Click the unsubscribe or “manage preferences” link in any marketing email; reply “STOP” to promotional SMS where offered – expect SMS processing within 24–72 hours and email systems to cease within 3–7 days in most cases.

Send a short written request to customer support: include your full name, account ID, email and phone number, state you withdraw consent to direct marketing under Article 21 UK GDPR, and ask for written confirmation within 7 days.

Create inbox rules to auto-delete or move incoming promotional messages, block sender domains and shortcodes on your phone, and forward persistent examples to the operator’s complaints address so you have timestamps and message headers.

If messages continue

Escalate with a formal complaint to the operator: attach copies of messages, your opt-out proof and the earlier support request; state you expect remedial action within one month under UK GDPR (extensions may apply if complex).

If no satisfactory response, lodge a complaint with the Information Commissioner’s Office (ICO) – phone 0303 123 1113 or use the ICO complaints portal – and include a timeline, screenshots, message headers and the operator’s responses.

Keep records for at least six months: dates of opt-outs, screenshots, copies of emails/SMS, support case numbers. If third‑party agencies are named in headers, notify them directly and request removal from their lists as well.

Can a voluntary account block be ended early? Requesting a temporary reversal and expected outcomes

You cannot normally end a voluntary account block before the selected term; early removal is only considered for administrative enrolment errors, confirmed identity fraud, or a court order.

How to submit a request for temporary reversal

• Use the central scheme’s official contact channel (secure portal or listed email). Include the unique reference number shown at sign-up.
• Provide a concise cover message with: full name, date of birth, account reference, exact date the block began, and a clear statement whether you request a temporary lift or permanent removal.
• Attach documentary evidence. Typical required items:
  • Valid photo ID (passport or driving licence).
  • Proof of address dated within the last 3 months (utility bill, bank statement).
  • Evidence of the reason for reversal: copy of an operator’s error message, screenshot proving mistaken enrolment, police crime reference, court order, or solicitor’s letter.
  • If acting for someone else, a signed authorisation and proof of your authority (power of attorney or solicitor’s letter).
• Request a written acknowledgement and a timetable for decision-making.

What to expect after you apply

• Initial acknowledgement: usually within 48 hours for submissions via the official portal.
• Standard decision window: commonly 10 working days; complex cases or third-party evidence can extend to 20 working days.
• Possible outcomes:
  1. Approved removal: applied only where enrolment was demonstrably incorrect or legally overturned; removal is permanent and communicated to operators.
  2. Temporary lift: rare; may be granted for a tightly defined period for a specific operator only; operators must wait for confirmation from the central scheme before restoring access.
  3. Refusal: request denied and original block remains for the full term; a written explanation should be provided.
• If refused, request a formal internal review and written reasons. If unsatisfied, escalate through the scheme’s complaints procedure and consider contacting the Gambling Commission for regulatory issues or the Information Commissioner’s Office for data disputes.

Practical recommendations: submit all documents in one secure package to avoid delays, label each attachment, keep copies of every communication, and do not attempt to bypass protections by opening new accounts or using unregulated sites – that undermines safeguards and increases risk.

Troubleshooting failed enrolments and technical errors

Clear browser cache, enable cookies, turn off VPN/proxy, and retry the sign-up using the latest Chrome, Firefox or Edge before changing personal details.

If the form rejects your name or date of birth, ensure the spelling and format exactly match the ID document you upload (passport, driving licence). Use plain ASCII characters if the site refuses accented letters. If address verification fails, submit a recent utility bill or bank statement dated within the last 90 days that matches the address field.

For email or SMS one-time codes not arriving: check spam folder, confirm the mobile number country code is correct, switch from Wi‑Fi to mobile data, request a resend after 90 seconds, and verify your carrier is not blocking short codes. If an automated voice code option exists, try that.

If you see “account exists” or “duplicate entry” errors, do not create a new account. Use the password-reset flow, or request account recovery from official support while providing a copy of ID and the last four digits of any payment card used previously.

Disable ad blockers, script blockers and strict privacy extensions. Allow third-party cookies temporarily and enable JavaScript. If the site throws a cryptic error code, take a screenshot, note the exact time (with timezone) and reproduce the action once while logging browser console errors (F12 → Console) to include with your support request.

Common error causes

Error / symptom	Likely cause	Immediate action
Form won’t submit; spinner never stops	Blocked requests from extensions or stale session cookies	Open private/incognito window, disable extensions, clear cookies, retry
“ID mismatch” or “Document rejected”	Poor image quality, wrong ID type, or mismatched data	Upload high-resolution photo, ensure edges visible, use accepted ID
No OTP via SMS	Carrier filtering, incorrect number format, resend timeout	Check format +44 for UK, try resend after 90s, try voice call option
“Account already registered”	Previous enrolment under same name/email/phone	Use account recovery; do not create duplicate accounts
Error code (e.g., 500 / 502 / 503)	Server-side outage or maintenance	Wait 10–30 minutes, retry; if persistent, contact support with timestamp

When to contact support

Contact official help if fixes above fail. Provide: exact error text or screenshot, device model and OS, browser name and version, time of failure (with timezone), steps taken, and copies of ID or proof-of-address used. Ask for a reference number and estimated SLA for resolution.

Acting for a relative: legal, practical and safeguarding steps

Obtain a Lasting Power of Attorney (LPA) for property and financial affairs recorded at the Office of the Public Guardian (OPG), or secure a Court of Protection deputy order, before submitting any third‑party application on their behalf.

• Legal verification

  • Confirm the document type: LPA for property and financial affairs or a deputy order from the Court of Protection.
  • Verify the LPA is recorded at the OPG (the operator will usually require evidence of this).
  • Check the LPA scope and any restrictions (dates, named providers, geographic limits).
  • If there is no recorded LPA or deputy order, do not act without involvement of the local authority adult social care or legal advice.
  • Note obligations under the Mental Capacity Act 2005: act in the person’s best interests, keep records of decisions, use the least restrictive option.

• Documents to prepare (bring originals and certified copies)

  • Original LPA or certified court order plus one certified copy.
  • Proof of identity for the attorney: passport or driving licence (photographic ID).
  • Proof of the person’s address: recent utility bill or bank statement (issued within last 3 months).
  • Written statement from the donor where capacity is present, or a capacity assessment from a GP/psychiatrist/social worker if capacity is in doubt.
  • Letter of authority on attorney letterhead including name, contact details, and the scope of authority being used.

• How to contact the provider and what to give them

  1. Phone first to confirm the exact evidence they accept (original, certified copy, or digital scan) and any internal reference number.
  2. Submit documents by tracked post or secure encrypted email; record the date, time, staff member’s name and reference number.
  3. Request written confirmation of outcome and the effective date; ask for that confirmation within seven working days.
  4. If uploading via a web portal, use PDF format, include a cover letter listing documents supplied, and password‑protect sensitive files; transmit the password by phone to a named contact.

• Financial and technical controls to reduce access immediately

  • Contact the person’s bank to request blocking of transactions to gambling merchant category code MCC 7995 and to freeze or replace cards used for online payments.
  • Cancel any Direct Debits and standing orders to operators; obtain confirmation in writing.
  • Remove stored card details from browsers, payment providers (PayPal, Apple Pay, Google Pay) and merchant accounts; change passwords and enable two‑factor authentication.
  • Install device and router‑level blocking: reputable blocking apps (examples: Gamban, BetBlocker), host file blocks, or DNS filters (OpenDNS) to restrict access across all devices.
  • Set bank and card transaction alerts for any card‑not‑present transactions above a low threshold (e.g., £1–£5) to catch attempted purchases quickly.

• Safeguarding and reporting steps

  • If there is immediate danger to the person’s health or finances, call emergency services (999) or ask the bank for an emergency freeze.
  • Report suspected financial abuse or fraud to the police and Action Fraud; provide copies of LPA/deputy paperwork and transaction records.
  • Contact the local authority adult social care safeguarding team to arrange a welfare visit or safeguarding enquiry.
  • Report any suspected misuse of power by an attorney to the OPG with dates, transactions and supporting documents.

• Recordkeeping, follow‑up and retention

  • Log every contact: date, time, name of staff, job title, outcome, and reference numbers. Keep call recordings if permitted.
  • Retain originals and certified copies of legal documents; keep digital backups encrypted. Share only the minimum personal data needed for the task.
  • Keep a decision log under the Mental Capacity Act 2005 detailing why you acted, alternatives considered, and evidence consulted.
  • Recommend a minimum retention period of six years for all transaction and correspondence records, or as advised by your solicitor or bank for specific cases.

• When you cannot act

  • If the provider refuses third‑party applications without a recorded LPA or deputy order, seek urgent legal advice or ask adult social care to facilitate an application under safeguarding powers.
  • If an attorney’s power is contested, stop acting and seek legal guidance; preserve all records to support any court or police investigation.

Data protection: what personal data the UK national opt-out scheme stores and how long it is retained

Recommendation: submit only mandatory identity items and photocopies, choose the appropriate opt-out period (6 months, 1 year or 5 years), and file a formal data-erasure or subject access request after your chosen term ends if you want additional removal beyond automated post-term processing.

Stored personal data (concrete items): full name; date of birth; residential address and postcode; primary email address; telephone number(s); government ID scans or photos used for verification (passport, driving licence, national ID); a unique scheme identifier allocated at enrolment; date/time stamps of sign-up and verification; list of participating operators notified about the enrolment; verification outcome and notes; IP address and basic device metadata captured at sign-up; consent/opt-out term chosen.

Retention by category (practical timelines):

Registration record (name, DOB, contact, chosen term): retained for the duration you select – options are 6 months, 1 year or 5 years – and then removed or pseudonymised.

Verification documents (ID scans): retained for the chosen term and commonly kept for up to an extra 6 months after expiry for fraud checks and dispute handling before deletion or secure anonymisation.

Audit and security logs (IP/device data, audit trails, operator query logs): typically retained longer for compliance and legal defence – commonly up to 6 years from the last relevant event.

Aggregated/anonymised records used for statistics: retained indefinitely in anonymised form, without direct identifiers.

Operational notes and user actions: ask for an exact retention schedule and a data processing addendum from the scheme operator; lodge a subject access request to obtain copies of everything stored; request erasure once the selected term expires (expect a formal process and up to 30 calendar days for completion); if ID scans are excessive, replace with less-sensitive verification where accepted or ask for selective redaction prior to upload; keep copies of confirmation emails and reference numbers for any data requests.

Legal and security advice: if you suspect unlawful retention beyond the published timelines, escalate to the scheme’s Data Protection Officer and, if unresolved, file a complaint with the UK Information Commissioner’s Office. Use secure transfer methods when submitting identity documents and enable multifactor authentication on any linked accounts to reduce risk of unauthorised access.

Questions and Answers:

How do I register with GamStop and how long does the sign-up take?

Registration is done on the GamStop website. You provide basic details such as full name, date of birth, email, address, phone number and a few questions about your gambling behaviour. After submission you receive an email confirmation and a short identity check may occur using the details you supplied. Most people complete the whole process within 10–20 minutes, though verification can take longer if extra documentation is needed. Once registration completes, your exclusion period begins immediately for the length you chose (six months, one year or five years).

What documents or proof will GamStop ask for during registration?

In many cases the registration process finishes without uploading documents, relying on name, address and date of birth checks. If additional verification is required you may be asked to provide a photo ID (passport or driving licence) and a recent proof of address such as a utility bill or bank statement dated within the last three months. Keep scans or clear photos ready in common formats (PDF, JPEG). Any requests for extra information will come through the secure GamStop portal or the email address you supplied.

Can I cancel or shorten my self-exclusion period after I register?

No. Once you choose a six-month, one-year or five-year exclusion, that period cannot be reduced or cancelled by you or by GamStop. The block stays in place for the full duration you selected. When the chosen time runs out you must re-register if you want a new exclusion. If you need help while the ban is active, support organisations and NHS services for gambling concerns can offer advice and treatment options without changing the exclusion itself.

Which gambling sites and services are blocked by GamStop, and are there any gaps?

GamStop blocks online gambling operators that hold a UK licence and have signed up to the scheme. This includes most major UK-facing bookmakers, casinos and bingo sites that use the UK Gambling Commission licence. The scheme does not cover land-based betting shops or casinos, nor does it reach overseas or unregulated sites that do not participate. Some payments into unlicensed services or use of offshore platforms may remain possible unless you and other providers take extra measures, such as using bank blocking tools or third-party blocking software alongside GamStop.

How does GamStop handle my personal information and how long is it stored?

GamStop processes personal data to verify identity and ensure matches with participating operators. Data handling follows UK data protection law and the platform keeps records for the time frame required by its policies and regulatory obligations. Access to your file is restricted to authorised staff and participating operators who need to check whether an account holder is excluded. If you need specific details on retention periods or want to exercise rights such as access or correction, contact GamStop’s data protection contact or consult the privacy notice on their site for the precise steps.