UKGC withdrawal rules tighten after L&L Europe settlement

Sue Young chose her words with care. "There may be occasions where a gambling business can ask consumers for information at withdrawal to fulfil legal obligations," the UK Gambling Commission's Executive Director of Operations said last week, "but this was not the case here." That qualifier — occasions — is doing the regulatory work. It is not a door left open. It is a door the Commission is telling the industry it will be watching.

L&L Europe Limited operates seven online casino websites, including AllBritishCasino and HyperCasino, and will pay £900,000 to settle findings that it made customers wait for existing withdrawal requests to be authorised before submitting new ones. The Commission found that requirement unfair under the Consumer Rights Act 2015. It also found that the company manually reviewed every fifth or tenth withdrawal for certain customers, requiring them to supply documentation before funds were released — documentation the Commission concluded could reasonably have been gathered earlier in the customer relationship.

The anti-money laundering failures compound the picture. L&L's controls relied on financial thresholds and sampling rather than individual risk profiles. Its due diligence procedures went unenforced: the company failed to assess risks associated with newly opened bank accounts or verify the source of funds against employment, business income, or savings. Safer gambling alerts were active on some websites but not across the full portfolio.

Taken individually, any one of these findings is a standard enforcement action. Taken together, they describe a compliance architecture built around friction at the exit. Customers could deposit; withdrawal required an obstacle course. That pattern is not accidental — it is a design choice, and the Commission knows how to read it.

The consensus reading of this settlement is that it represents routine UKGC enforcement at a mid-tier operator. I think that undersells what Young's public statement signals about enforcement trajectory. The Commission has historically led with AML and social responsibility when it moves against operators. Young explicitly noted that this case is different — that the regulator "will not hesitate to act when we see incidents of gambling not being fair and open" even outside those traditional categories. That is a material expansion of the enforcement frame, stated publicly, attributed to a named senior official.

The Consumer Rights Act 2015 gives the Commission a separate lever from its gambling licence conditions — one grounded in consumer contract law rather than regulatory breach. An operator that believes it can survive an AML audit may not have priced in exposure under consumer fairness standards applied to withdrawal terms. Those are two different legal tests, and L&L appears to have failed both.