A safer-gambling message, limit or account review can arrive without much warning. For customers of an online casino licensed to serve Great Britain, these actions may be part of the Gambling Commission’s remote customer-interaction rules.
The rules do not prescribe one identical check for every player. They require licensees to monitor for harm or potential harm, respond in a timely and proportionate way, and assess whether that response worked. This guide explains that framework without guessing an operator’s private thresholds or promising a particular result.
What casino safer gambling checks are
The Gambling Commission calls this process remote customer interaction. Social Responsibility Code Provision 3.4.3 requires covered remote licensees to build three elements into an ongoing process:
- identify harm or potential harm;
- act to minimise harm; and
- evaluate the impact of the action.
Monitoring must begin when an account is opened. It continues throughout the customer relationship rather than operating as a single pass-or-fail check.
These requirements apply to operators holding the relevant Great Britain remote licences. Before relying on an operator’s claims, use the Gambling Commission public register and follow our guide to checking whether a casino is licensed to serve Great Britain.
What a licensed casino must monitor
The Commission’s current rule lists seven categories that a remote licensee must include when looking for harm or potential harm:
- customer spend;
- patterns of spend;
- time spent gambling;
- gambling-behaviour indicators;
- customer-led contact;
- use of gambling-management tools; and
- account indicators.
The rule deliberately refers to a range of indicators relevant to the customer and the gambling facilities provided. It does not publish one universal monetary threshold, session length or behaviour that produces the same outcome for everyone.
Spend and patterns of spend
An operator must consider both customer spend and patterns of spend. Those are separate categories in the rule. A change in activity can therefore matter as well as an amount viewed on its own.
This customer-interaction duty should not be confused with a separate financial-vulnerability check or financial risk assessment. An operator may consider information under more than one regulatory process, but the legal purpose and applicable requirements are not identical.
Time and gambling behaviour
Time spent gambling is another required category. Gambling-behaviour indicators must also form part of the operator’s systems.
The Commission does not give players a public table that turns a particular number of minutes, game rounds or stake changes into an automatic decision. Avoid any website that presents an invented universal formula as a UK rule.
Customer-led contact
What a customer tells the operator can be relevant. A message asking for help, raising concern about gambling, or discussing a limit should not be isolated from the safer-gambling process when it indicates possible harm.
Keep copies of important chats and emails. They can help you understand what was reported, when the operator responded and what action was described.
Gambling-management tools
The operator must consider use of gambling-management tools. These may include tools available through the account, but the rule does not say that using one tool proves that a customer is safe or unsafe.
Using a tool also does not replace the operator’s duty to consider the wider range of indicators. The framework is designed to consider context rather than treat one account setting as the whole picture.
Account indicators
Account indicators complete the Commission’s required list. The public rule does not provide a fixed player-facing catalogue of every internal signal.
Do not try to test or evade an operator’s monitoring. If an account action is unclear, ask which process applies and request a written explanation that you can keep.
The identify, act and evaluate cycle
The Commission’s formal guidance describes customer interaction as continuous. The three stages lead back into further monitoring rather than ending after one message.
Identify
The licensee must have effective systems and processes that monitor customer activity from account opening. Indicators of risk must be flagged in time for manual intervention and must also feed into automated processes where the strong-indicator rule applies.
The licensee remains responsible when it uses a third-party provider for part of its service. Outsourcing does not remove the duty to monitor the required categories.
Act
When risk of harm is identified, the licensee must act in a timely manner. The action has to be tailored to the number and level of indicators.
The rule requires systems capable of:
- tailored action at lower levels of indicators to minimise future harm;
- increasing action when an earlier step has not had the required impact;
- taking strong or stronger action immediately where appropriate;
- reducing or preventing marketing or the take-up of new bonuses where appropriate; and
- ending the business relationship where necessary.
This list describes possible regulatory responses, not a guaranteed sequence for one account. A casino is not required to start with a light action when stronger action is appropriate.
Evaluate
The operator must consider what effect an interaction or action had on the customer’s behaviour and the continuing risk of harm. It must then decide whether further action is needed.
Licensees must also take reasonable steps to evaluate their overall approach. The process therefore involves both the individual response and the effectiveness of the operator’s wider systems.
Marketing and new bonus offers
Marketing and new bonuses are specifically addressed by the customer-interaction rule.
Where appropriate, an operator’s systems must reduce or prevent marketing or the take-up of new bonus offers. Where the operator’s own processes identify strong indicators of harm, it must prevent marketing and the take-up of new bonus offers.
That is a safer-gambling requirement, not evidence that a customer broke a rule. It also does not mean every lower-level interaction must have the same marketing outcome.
If promotional contact continues after an operator told you it had identified strong indicators, retain the messages and the earlier interaction record. Ask the operator to explain the position through its formal complaint process if necessary.
Automated decisions and manual review
Strong indicators of harm, as defined in the licensee’s processes, must be acted on in a timely manner through automated processes.
The rule adds two important safeguards when automated processes are applied:
- the licensee must manually review their operation in each individual customer’s case; and
- the customer must be allowed to contest any automated decision that affects them.
This does not guarantee that a restriction will be removed. It does mean that an affected customer should have an opportunity to challenge the automated decision and have its operation reviewed manually.
When requesting review, identify the exact decision and date. Ask which contact channel should be used, what information the operator needs, and when it will provide its response under its own procedure.
How these checks differ from other casino reviews
Several processes can occur around the same time. Keeping them separate makes communication clearer.
Identity verification
Identity checks concern matters such as verifying age and identity under separate licence conditions. Our casino age and identity-check guide explains that process.
A safer-gambling interaction is focused on harm or potential harm. A message may refer to more than one process, so ask the operator to say which requirement it is applying.
Anti-money-laundering checks
Anti-money-laundering and source-of-funds work concerns separate legal and regulatory duties. A safer-gambling interaction should not be described as proof that an operator suspects crime.
Do not send sensitive documents to an unverified address. Use the operator’s official logged-in account area or confirmed support route and check the privacy information before providing personal data.
Financial checks
Financial-vulnerability checks and financial risk assessments are separate from the full customer-interaction framework, even though information from a financial process may be relevant to the operator’s wider view of risk.
This guide does not state a financial-check threshold because that would not explain the broader identify–act–evaluate duty and could change independently. Check the Commission’s current guidance for the rule that applies to the message you received.
What to save if an account is restricted
A short evidence file can reduce confusion. Save:
- the date and time of each message or account change;
- the operator’s stated reason or policy name;
- screenshots of limits or restrictions that affect the account;
- copies of chats, emails and complaint references;
- the account balance and relevant transaction history; and
- the response to any request for manual review.
Record facts rather than assumptions about the operator’s internal model. If the issue also involves funds, identity or a transaction, label those points separately.
How to complain
The Gambling Commission tells customers to complain directly to the gambling business first and follow its published complaints procedure.
A written complaint should include relevant dates, times, amounts and evidence. Keep a copy of everything sent. The Commission’s consumer guide says the business has eight weeks from receipt to resolve the complaint and must explain the result and what happens next.
You may then be able to take an unresolved dispute to an Alternative Dispute Resolution provider, but ADR eligibility depends on the nature of the dispute and the applicable procedure. You cannot go to ADR without first using the business’s complaint process.
See our separate guide to casino complaints and ADR and the Commission’s current how to complain guidance.
The Gambling Commission does not decide individual complaints for customers. Regulatory information can still help it identify wider compliance issues, but reporting a concern is not the same as obtaining a remedy in an individual dispute.
Questions players often ask
Does every interaction lead to an account restriction?
No. The rule requires action to be tailored to the number and level of indicators. It allows stronger action immediately where appropriate, but it does not prescribe one outcome for every interaction.
Can a casino stop bonuses or marketing?
Yes, in the circumstances set out by the rule. Operators must have systems that reduce or prevent marketing or new bonus take-up where appropriate, and must prevent both when strong indicators of harm are identified under their processes.
Can I challenge an automated restriction?
The customer-interaction rule says a customer must be allowed to contest an automated decision that affects them. The operator must also manually review how the automated process operated in the individual case.
Must the operator reveal its private thresholds?
The public rule sets required indicator categories and outcomes. It does not require a universal public trigger table. Ask for a clear explanation of the decision affecting you without assuming the operator must disclose every internal control.
Is a safer-gambling check an accusation?
No. It is a player-protection process concerned with harm or potential harm. Other identity, financial or anti-money-laundering processes have different purposes.
Sources reviewed
Reviewed 8 October 2026:
- Gambling Commission LCCP 3.4.3 — Remote customer interaction
- Customer interaction guidance for remote gambling licensees
- Gambling Commission — How to complain
- Gambling Commission — Taking a complaint to ADR
Rules and guidance can change. Check the linked official sources and the operator’s current procedure before acting.