The UK Gambling Commission's Licence Conditions and Codes of Practice (LCCP) impose a comprehensive set of payment-related obligations on licence holders. These obligations govern how operators must hold player funds, process withdrawals, handle third-party payments, and manage the prohibition on credit card gambling deposits. Compliance failures in payment obligations have been among the most frequent grounds for Gambling Commission enforcement action in recent years, with penalties in the millions of pounds for operators that have failed to segregate player funds properly or delayed withdrawals without valid grounds.
Player Fund Segregation: Licence Condition 4.2.1
Licence Condition 4.2.1 of the LCCP requires all B2C licence holders to protect player funds by holding them in an account that is separate from the operator's own funds. The condition specifies three levels of protection, and operators must choose and implement one:
Basic protection (Level 1) requires the operator to ensure that player funds are kept in a separate bank account or e-money account. The account must not be used for any purpose other than holding player funds. This provides protection in the normal course of business but does not guarantee player access to funds in the event of the operator's insolvency, as the account is not a trust account and the operator's creditors may have competing claims.
Medium protection (Level 2) requires the same segregation as Level 1 but adds a requirement that the banking institution confirm in writing that the funds are not subject to set-off against the operator's liabilities to the institution. This additional assurance reduces (but does not eliminate) insolvency risk, as it prevents the bank from seizing player funds to recover the operator's overdraft or loan liabilities.
High protection (Level 3) requires player funds to be held in trust, with a corporate trustee legally holding the funds on behalf of players. The trust structure ensures that in an insolvency of the operator, the player funds are outside the operator's estate and available for distribution to players ahead of general creditors. This is the most robust form of protection but requires a trust deed, a licensed trustee, and ongoing trustee fees.
Operators must publish on their website which level of player fund protection they offer, so players can make informed decisions. The Gambling Commission publishes guidance on what each level means in plain English for consumers.
Withdrawal Processing: Speed and Third-Party Rules
The UKGC expects operators to process withdrawal requests promptly. While the LCCP does not specify an absolute maximum processing time, the Commission's guidance and enforcement decisions establish that withdrawals should ordinarily be processed within five working days, with same-day processing becoming the industry standard for Faster Payments withdrawals. Operators that introduce systemic delays — using withdrawal processing windows as a mechanism to retain funds or create friction that reduces the rate of withdrawals — face regulatory action.
LCCP Licence Condition 6.1.2 (the third-party payment prohibition) is one of the most operationally significant payment requirements for card-accepting operators. It requires that withdrawals be returned to the same payment method as the deposit, where technically feasible. A player who deposited by Visa Debit card must receive their withdrawal to the same card — not to a different card, not to a bank account in a different name, and not to a third party.
The purpose of this condition is AML-related: it prevents players from depositing with one payment method and withdrawing to a different payment source as a mechanism for layering illicit funds. The card scheme Original Credit Transaction (OCT) facility — which allows operators to push funds to a Visa or Mastercard debit card — is the technical mechanism for compliance with this condition. Operators must ensure their acquirer can process OCT payments; not all gambling acquirers offer OCT as standard, and it requires specific scheme registration and processing setup.
The Credit Card Gambling Prohibition
Since 14 April 2020, LCCP Licence Condition 6.1.2 prohibits licensed operators from accepting deposits made by credit card. This applies to all credit card products — Visa Credit, Mastercard Credit, American Express — and also extends to debit products linked to credit facilities (such as charge cards). The prohibition applies regardless of how the credit card transaction is categorised by the issuing bank.
The prohibition applies at the point of deposit initiation. Operators must implement controls that identify credit card BIN ranges and decline transactions from credit cards before they reach the acquirer for authorisation. Relying on the acquirer to block credit card gambling transactions is insufficient — the operator itself must implement the control and must not knowingly accept credit card deposits even where the acquirer fails to block them.
E-wallet deposits present a specific challenge: where a player funds an e-wallet (such as Skrill or Neteller) using a credit card, and then deposits from the e-wallet to the gambling site, the operator may not have visibility of the underlying funding source. The UKGC requires operators to take reasonable steps to ensure e-wallet providers have controls in place to prevent credit card-funded balances being used for gambling deposits, and to obtain written assurance from e-wallet providers about their controls.
Payment Method Record-Keeping
Operators must maintain detailed records of all payment transactions — deposits, withdrawals, reversals, and adjustments — for a minimum period of five years from the transaction date, consistent with the record-keeping requirements of the Money Laundering Regulations 2017. These records must be sufficient to reconstruct the full deposit and withdrawal history of any player account and to demonstrate compliance with the third-party payment prohibition and credit card ban on a transaction-by-transaction basis.
The payment records must be accessible for production to the Gambling Commission on request, and operators should be able to produce them within 48 hours as part of a compliance review or enforcement inquiry. Systems that archive payment records in a format requiring significant reconstruction effort before they can be reviewed create operational risk at precisely the moment — a Gambling Commission inquiry — when rapid access is most critical.
CCYFX provides specialist banking infrastructure for iGaming, crypto, FX brokers, and offshore structures. UK, European & US IBANs.
Speak to Our Team