The most reliable check is the licence claim. Find the licence holder and regulator named on the site, then search that regulator's official register yourself and confirm the entry matches the company and website address. Also watch for pressure tactics, promises of guaranteed wins, vague terms, obstacles to withdrawing your own money, missing safer gambling tools and requests for personal data through unofficial channels.
On this page
Why the licence claim matters most
A genuine licence means a regulator has authority over the business and its conduct. The Gambling Commission in Great Britain explains that a business holding its licence is subject to consumer and gambling protection rules there1.
An unlicensed site, or one falsely claiming a licence, offers none of that. If something goes wrong, there may be no regulator to complain to and no rules requiring your money to be returned.
That is why checking the claim, rather than trusting it, is the first step.
How to check a licence on a regulator's register
A logo in a website footer proves nothing. The only reliable check is the regulator's own register.
- Find the details on the site. Look for the name of the company holding the licence, the regulator and any licence number, usually in the footer or terms.
- Go to the regulator directly. Type the regulator's web address yourself or find it through a search engine, rather than clicking a link on the gambling site.
- Search the register. Look up the company name and, where the register allows it, the website address.
- Match the details. The company name, the licence status and the website address should all correspond.
- Check for regulatory action. Some registers also show enforcement taken against a business.
Two examples of how registers work:
- The Gambling Commission's public register lets anyone search gambling businesses, regulatory actions and public statements2. Businesses it licenses must display that they are licensed and link to the register1.
- The Malta Gaming Authority's register can be searched by licensee name, authorisation status, URL or gaming service3.
If a site names a licence you cannot find, names a regulator whose register does not list that website, or gives no licence details at all, treat it as unverified.
Clone and phishing sites
Some unsafe sites imitate genuine operators, as the Malta Gaming Authority's notice shows4. Others are promoted through messages designed to push you somewhere quickly.
The UK's National Cyber Security Centre lists common tactics used by scammers5:
- Authority – pretending to be an official organisation or well-known company
- Urgency – short deadlines, such as acting within 24 hours
- Emotion – threatening language or teasing you into wanting to find out more
- Scarcity – offers presented as rare or about to disappear
- Current events – messages linked to major events or seasonal moments
A padlock in the address bar is not proof of safety. The FBI's Internet Crime Complaint Center has warned people not to trust a website just because it shows a lock icon or "https", and to check links for misspellings or the wrong domain6.
Practical habits help. Look closely at the exact web address, be wary of links that arrive unexpectedly, and contact organisations using details you have found independently, as the NCSC advises5.
Unrealistic promises
Unsafe sites often sell certainty that gambling cannot offer.
Be wary of claims such as "guaranteed wins", "risk-free", "can't lose" or systems that promise profit. Every casino game is designed to return less than is staked over time, and even the published RTP is only an average over a significant number of plays, not a result for any session7.
Also be wary of offers whose conditions you cannot find. In Great Britain, the significant conditions of a promotion must be presented clearly and prominently, and the Gambling Commission states that simply including them in website terms and conditions is not sufficient8.
Our wagering requirements guide explains what those conditions usually include.
Warning signs in terms and withdrawals
Withdrawal rules deserve particular attention, because the terms can reveal problems before any money is deposited.
Rules for businesses licensed in Great Britain give a useful benchmark for what fair treatment looks like:
- Your deposit. Players must be allowed to withdraw their deposit balance without restriction, even when a bonus is active9.
- Identity checks. Online gambling businesses must ask customers to prove their age and identity before they gamble, and delaying a withdrawal to request identification that should have been obtained earlier may breach the rules10.
- Clear restrictions. Terms must list specific types of restricted play rather than relying on vague references to "abuse" decided at the operator's discretion11.
- Complaints. Businesses must deal with complaints, have 8 weeks to resolve them, and complaints can then be taken to an alternative dispute resolution provider12.
Terms that contradict these benchmarks, or a site with no complaints procedure at all, are strong warning signs wherever a business is based.
Sites that advertise weaker checks
Treat any site that markets itself on skipping identity checks or operating outside self-exclusion schemes as high risk. The Gambling Commission's research into illegal gambling websites identifies avoiding identity checks and circumventing self-exclusion among the reasons consumers are drawn to illegal sites13.
Identity checks exist partly to confirm that customers are old enough to gamble and have not self-excluded10. A site that removes them has also removed a layer of protection for you.
Personal data and security
Gambling sites handle identity documents and payment details, so data practices matter.
Look for a privacy policy that names the company responsible for your data and explains how it is used. Be cautious about sending identity documents or payment information through messaging apps or links sent to you directly.
The Commission's research notes that gambling taking place directly through messaging platforms falls outside its monitoring methods13. That is one more reason to be careful with offers that arrive in private messages.
Safer gambling tools as a signal
Responsible operators make it easy to control spending and time. In Great Britain, licensed gambling websites must let customers set limits on time and money, access their account history and self-exclude14. Customers must also be prompted to set a financial limit when registering or making a first deposit15.
If a site offers no limits, no self-exclusion and no links to support services, it is telling you something about its priorities.
Quick checklist
| Check | Reassuring sign | Warning sign |
|---|---|---|
| Licence | Licence holder and website found on the regulator's own register | No details, or details that do not match the register |
| Web address | Exactly matches the name on the register | Misspellings, extra words or unfamiliar domain endings |
| Promises | Clear statements about risk | Guaranteed wins, risk-free play, pressure to act fast |
| Bonus terms | Significant conditions shown clearly | Conditions hidden or missing |
| Withdrawals | Deposit withdrawable; limits and fees stated in advance | Deposit locked; new document requests only at withdrawal |
| Complaints | Published procedure and named dispute resolution service | No procedure |
| Safer gambling | Limits, time-outs and self-exclusion available | None offered |
| Data | Privacy policy naming the responsible company | No privacy policy; requests for documents via messaging apps |
If you think you have used an unsafe site
Stop depositing and do not send further documents.
If you have shared sensitive information, the NCSC advises contacting your bank if banking details were involved, changing passwords on any accounts that use the same password, and reporting financial loss to the relevant fraud reporting service16.
If the operator claims a licence, you can raise a complaint through its procedure and contact the regulator named. KiraBet cannot intervene in disputes, as explained on our contact page.
If gambling has become a source of stress, free and confidential support is listed on our responsible gambling page.
- KYC (know your customer)
- Checks a gambling operator carries out to confirm a customer's identity and age, and sometimes their source of funds. Some regulators, such as Great Britain's Gambling Commission, require age and identity to be verified before a customer gambles.
- Self-exclusion
- A request to a gambling operator, or to a scheme covering several operators, to stop you gambling for a set period, usually between six months and five years.
- Deposit limit
- A cap a customer sets on how much can be deposited into a gambling account over a period such as a day, week or month. Under Great Britain's rules, for example, reductions take effect immediately while increases require a cooling-off period of at least 24 hours.
- Wagering requirement
- A condition requiring a set total of bets to be placed before bonus funds, or winnings from them, can be withdrawn. It is usually expressed as a multiple, such as 10x the bonus amount.
If gambling is causing harm. Losses cannot be recovered by playing more, and no game offers a guaranteed return. Free, confidential support is available, including services you can reach from the Maldives.