L & L Europe Pays £900,000 After the Gambling Commission Finds Its One-Withdrawal-at-a-Time Rule Unfair

The operator of allbritishcasino.com and six other British-facing sites let customers request only one withdrawal at a time and held back every fifth or tenth withdrawal for some customers for manual review, the regulator found. The Commission is presenting the case as a warning that fairness breaches will be enforced as firmly as money laundering and harm failures.

• L & L Europe Limited, the Malta-based operator of seven British-facing sites including allbritishcasino.com, casinocasino.com and hypercasino.com, will pay £900,000 in lieu of a financial penalty, the Gambling Commission announced on 21 October
• A term allowing only one withdrawal request at a time was unfair under the Consumer Rights Act 2015, and a fraud policy sent every fifth or tenth withdrawal for some customers to manual review, according to the Commission
• Money laundering controls relied on financial thresholds and sampling rather than customer risk, and safer gambling alerts were switched on for only some of the company's sites
• An 18-year-old lost £4,000 in eight minutes and a 21-year-old lost £6,500 within three days of opening an account, with the risk indicators missed, according to the public statement
• The money goes to the Consolidated Fund under the Commission's new settlement policy, less than four months after Betfred operator Petfre was ordered to pay the same £900,000

The Commission Found a One-Withdrawal-at-a-Time Rule Unfair Under Consumer Law

The Gambling Commission announced on 21 October that L & L Europe Limited will pay £900,000 under a regulatory settlement, after a compliance assessment of its remote operating licence led to a review under section 116 of the Gambling Act 2005. According to the Commission's public statement, the company breached licence requirements on fair terms, customer identity, anti-money laundering (AML), customer interaction and technical standards between October 2024 and October 2025. The settlement comprises the £900,000 payment in lieu of a financial penalty, publication of a statement of facts and a payment towards the Commission's costs, the amount of which is not disclosed. The statement does not say how the £900,000 was calculated.

The company's terms said customers could have only one withdrawal request open at a time and could make another only once the first had been authorised. The Commission found that term unfair under the Consumer Rights Act 2015, a breach of Licence Condition 7.1.1, and its officials saw withdrawal requests withheld for reasons other than regulatory or legal requirements. It acknowledges that the company acted swiftly to fix the breach.

Separately, the company's "Fraud & Collusion policy" meant every fifth or tenth withdrawal was reviewed manually for some customers, some of whom had to supply more information before they were paid. Licence Condition 17.1.1 bars operators from making extra information a condition of withdrawal if they could reasonably have asked for it earlier. The company accepts that the reviews delayed withdrawals, according to the statement, and it no longer withholds withdrawals unless a regulatory or legal requirement applies.

Thresholds Instead of Risk, and Alerts on Only Some Sites

The company's AML controls were largely based on financial thresholds and sampling rather than on risk factors and each customer's risk profile, the Commission found. In one case a customer deposited £4,400 within eight hours of registering, and the company accepted that the funds came from a "gambling account" without considering that the customer's bank account had been opened two weeks earlier.

Safer gambling alerts for time spent gambling, failed deposits and the number of deposits were active on some of the company's sites but not all, and fired only when two indicators appeared on the same day. One customer had 84 failed deposits for insufficient funds within seven days and was not identified as at risk. A 21-year-old lost £6,500 within three days of opening an account and an 18-year-old lost £4,000 in eight minutes, without the risk indicators being identified. A customer returning from self-exclusion also ended £98 over a £1,000 net monthly deposit limit, a technical standards breach.

The Commission counted as aggravating that the failings were serious and resembled earlier cases on which it had published lessons for the industry, and as mitigating that the company co-operated, accepted the failings early and promptly began an action plan. "A basic expectation is that when you have winnings you can withdraw those swiftly," said Sue Young, the Commission's Executive Director of Operations, adding that operators may sometimes need information at withdrawal to meet legal obligations, "but this was not the case here."

The Commission's register gives L & L Europe's head office as Mosta, Malta, shows a remote casino licence since 1 November 2014 and lists no earlier regulatory action. The statement does not name the company's owners, and iGaming Times could not confirm them from a public register. In Sweden, Spelinspektionen fined the company SEK600,000, approximately $60,500, in April 2020 after self-excluded players were able to gamble, iGaming Business reported, and in January 2026 imposed a reprimand and an SEK80,000 fee, approximately $8,100, over missing website information.

The Withdrawal Findings Are the Point of the Case

Much of the Commission's enforcement concerns AML and social responsibility, Young said, but "we will not hesitate to act when we see incidents of gambling not being fair and open." The regulator has been building to this. In July 2024 its then chief executive, Andrew Rhodes, wrote that withdrawal delays were the number one subject of complaints, at around 2,000 a year, and its 2024 to 2025 annual report made transparency over checks at withdrawal a priority for 2025 to 2026. A one-at-a-time rule and sampling every fifth or tenth payout are not money laundering controls. They are operational conveniences paid for with the customer's time, and the Commission has now priced them through the licence.

Thresholds and Sampling Are the Recurring Weakness

The AML and safer gambling findings share a cause: controls keyed to money crossing a line rather than to who the customer is. That was also the pattern behind Rank's £5 million settlement for its Grosvenor casinos two weeks ago. An alert that waits for two indicators in one day cannot catch an 18-year-old losing £4,000 in eight minutes, and alerts that run on some sites but not others show the risk in operating several brands on one licence: the controls are only as good as the least protected site.

£900,000 Is a Figure Without a Disclosed Formula

The payment matches Petfre's, but neither the size of L & L Europe's British business nor the basis of the calculation is public, which makes the figure hard to read as a deterrent. With the money going to the Treasury rather than harm prevention, the remedy that matters to customers is the changed withdrawal process.

The Commission has turned an unfair term under consumer law into a licence breach with a price attached. Operators that still gate withdrawals behind sampling rules or late checks now have a public statement to measure their own terms against.