What to Do When a Gambling Site Lets You Bet While Self-Excluded
When a UK-licensed gambling operator lets a customer bet while they are self-excluded, the customer's practical response must be to gather evidence and make a written complaint, escalating to the regulator if…

What the Rule Says
The Gambling Commission states that self-exclusion is when a customer asks a gambling business to stop them gambling. A self-excluded customer can ask a gambling business to stop them gambling, and the gambling business must close the account and return any money in the account to the customer. GAMSTOP is the national self-exclusion scheme, but direct operator self-exclusion has the same obligation: the customer commits to not gamble and the operator must prevent it.
There are mandatory exclusion periods and a standoff after a period ends, reinforcing what should be a clear operational line between self-excluded and non-excluded. These rights and rules are set out in Gambling Commission guidance.
How the Failure Happens
In practice, the practical operation of a scheme can be less than ideal. Both GAMSTOP and direct operator exclusions can fail technically, allowing a customer to resume gambling under the same or a new customer record after they should have been stopped. The common failure, described by sources, is when a registration or login GAMSTOP check is skipped, failed, or confused, letting a new or old customer account proceed to gambling despite exclusion.
In a direct exclusion case, a customer can set off a new exclusion by changing a single detail that is not part of GAMSTOP, such as an email address, and opening a new account under their older data. It is not guaranteed to work, but it only requires simple, easily-obtained information. Operators must prevent either kind of breach, with GAMSTOP required for all remote operators, but exclusion methods are not standardised.
What Evidence to Gather
When a self-excluded customer encounters gambling, sources state, a proof trail must be gathered. The customer should record the exact date and time of play, their customer reference and contact details, the branding and domain of the platform, the specific games played, the stake values, and the outcome of any bets. This evidence is needed to prove the breach of the operator’s self-exclusion duty.
Both the timeline of play and the operator's records are needed to back up the claim. The customer should make a contemporaneous note of the full display: what appears to be shown is evidence of a failure of decision support on the operator's side too. Together, this is granular proof of failure for a complaint. The customer's steps, including their date of self-exclusion, must also be documented.
A complaint backed up by a direct breach of self-exclusion rules is a clear cut points-based claim, contrasting with a general player complaint that might have to be ruled on less objectively. Ombudsmen do not stand between every customer and every operator. However they have spelled out a nationwide right to self-exclusion, and a specific proof and action requirement to prove and enforce it. The outcome is not automatic for the self-excluded customer, but the complaint is allowed.
The Complaint Route
The first step in a complaint is always through the operator, as with other types of consumer grievance. Most operators have an advertised complaints route that a customer should start with, including their contact address and email. If the company does not respond, or responds with a final view in less than 8 weeks, the next step is to a Gambling Commission-approved ADR provider. ADR is an independent decision-maker that will rule on whether the company has failed to respect the customer’s exclusion in law.
The GAMSTOP customer can also escalate directly to that agency, which links to the Financial Ombudsman Service (FOS) or an alternative. In any ADR complaint, the customer’s evidence trail is vital: the more proof of a decision made by the company which ignored their exclusion, the more the ADR provider will have to act on that evidence. A small detail not proven is the risk of a rejected complaint where the outcome seems obvious to the operator's disadvantage but cannot be stated on the record.
What Redress Looks Like
The type of redress for a self-exclusion failure is similar to a general gambling refund. So if a customer makes a bet, the outcome can only be calculated once an ADR provider finds an operator has breached the customer’s exclusion. If the gambling is proved illegal, the customer should get back their stakes, not just the net result.
Where the customer wins, the win is deducted from the refunded stake. Where the customer loses, the full stake is refunded for a self-exclusion breach. If a customer plays with multiple accounts on the same platform, even if they are each excluded correctly, the total across those accounts is the refundable amount. Where the customer repeats their exclusion breach across multiple operators, it has to be proven operationally on each one as separate cases.
ADR agencies reserve the right to refuse a claim, of course, but this is rare. The customer has to prove a breach of law, and the agency will usually just rule on the evidence. It is a complaint route where the principle of self-exclusion is so strong that the customer does not have to be careful to word it as a point in their favour.
When the Regulator Matters
It is not the role of GAMSTOP or the Commission to intervene in individual complaints, only to be the ultimate arbiter when ADR fails. Almost always the disputes have to be redressed in ADR, not by the regulator, since a fall short of the operator's operational duty is always considered an individual complaint, not a general failure by the industry. This is why it is even necessary to assign an ADR arbiter, although they are nominated by the regulator and are accountable to it.
The regulator's powers are not to compensate the customer, but to discipline the operator through legal channels for the breach. The ADR route exists to make the Commission's powers redundant most of the time, since ADR is a player right protected by law that should only go further. ADR providers only become involved in individual redress where the complaint is not settled by the operator, and that is rare in a legal case.
The regulator's separate action means the operator has to be told to enforce self-exclusion under whatever rules GAMSTOP or another scheme specifies, as well as paying the stakes or losses out. In a failure to enforce exclusion, the customer is owed their initial deposit back, and an improvement in the operator's own processes to stop the breach taking place again in the future.