Vast Illegal Casino Network Draws Millions of UK Visitors, Sidestepping Self-Exclusion Rules

A sprawling network of online casinos, including prominent names like MyStake, Velobet, and Goldenbet, has captured the attention of UK gamblers even as these platforms operate without approval from the UK Gambling Commission; figures reveal that from November 2025 through January 2026, these sites drew a staggering 2.3 million monthly visitors from the UK, many of whom had self-excluded via GamStop, the national self-exclusion scheme designed to block access to licensed operators.

What's interesting here is how these platforms, run by Santeda International out of Curaçao, manage to reach right into the heart of the UK market; operators link back to Georgian businessmen through Upgaming AG, a setup that keeps executives hidden behind layers of international entities and AI-generated fake identities, making enforcement a real challenge for regulators watching closely in April 2026.

Take the traffic stats alone—they paint a picture of aggressive targeting; data from The Guardian investigation shows monthly UK visits holding steady at that 2.3 million mark over those key winter months, a period when holiday spending and colder weather often push people toward online entertainment, although these sites offer none of the protections afforded by UK-licensed venues.

Santeda International, licensed in Curaçao—a jurisdiction known for lighter regulatory touch—stands at the center of this operation; the company oversees multiple brands that mirror each other in design and bonuses, creating what experts describe as a seamless ecosystem for gamblers to hop between sites if one gets blocked, while Georgian ties via Upgaming AG add another layer, with software and management funneled through Swiss-registered entities that obscure ownership trails.

And here's where it gets interesting: investigators uncovered how AI tools generate realistic but fictitious executive profiles, complete with photos and bios that don't match real people, a tactic that's becoming common in the unregulated corners of online gambling; those who've dug into similar networks note that this not only dodges personal accountability but also confuses law enforcement chasing leads across borders.

People familiar with the industry point out that Curaçao's licensing, while legitimate there, holds no weight in the UK, where the Gambling Commission requires strict standards on fairness, responsible gaming, and player funds; without those, sites like Velobet can offer unrestricted deposits and high-stakes games to anyone, including the self-excluded, turning GamStop's barriers into mere speed bumps rather than walls.

Self-excluded gamblers, who've opted into GamStop to curb their play, find these offshore sites popping up anyway; the network employs marketing tricks like SEO-optimized ads, affiliate promotions on social media, and even direct emails that slip past filters, drawing in users who thought they'd locked themselves out of real-money betting entirely.

Turns out the numbers back this up—2.3 million UK visits monthly isn't random; researchers tracking web analytics observed spikes during evenings and weekends, times when licensed sites would honor exclusions, but these platforms don't check against GamStop databases, allowing seamless access with just an email signup, often sweetened by no-ID verification bonuses that hook players fast.

One case highlighted in reports shows how a single IP in the UK could access dozens of sister sites under the Santeda umbrella, each promising the same high-roller perks without the red tape; observers note that's where the rubber meets the road for vulnerable groups, as data indicates self-excluded individuals face higher risks of relapse when unlicensed options fill the void left by regulated markets.

Executives stay ghosts thanks to AI; tools create deepfake images and backstories for listed directors, a move that The Guardian exposed through cross-checks against public records, revealing mismatches that scream fabrication, while domain hopping—shifting URLs when blocks hit—keeps the sites live and accessible via VPNs or mirrors.

But here's the thing: UK authorities have ramped up blocks on payment processors and ISPs targeting these domains, yet the network adapts quickly, launching clones that retain the same backend and player accounts; studies of similar operations found that such resilience stems from the Curaçao base, where local laws prioritize operator rights over foreign player protections.

Georgian connections via Upgaming add tech muscle; the AG entity provides white-label platforms that these casinos customize minimally, ensuring a uniform experience across brands, and that's significant because it scales the problem— one crackdown barely dents the whole fleet.

In January 2026, an inquest linked one gambler's suicide directly to heavy losses on these sites; the coroner noted unrestricted access despite GamStop registration, highlighting how the platforms' lack of intervention tools—like deposit limits or reality checks—left the individual spiraling without safeguards, a stark reminder of the human cost behind the traffic figures.

That event, unfolding just months before the April 2026 exposé, fueled demands from campaigners and lawmakers for tougher laws; proposals include expanding GamStop to cover offshore sites via mandatory ISP blocks, blacklisting payment gateways more aggressively, and even international pressure on Curaçao to tighten licensing for UK-facing operators.

Experts who've studied self-exclusion breaches emphasize that while tech like AI evasion complicates things, the writing's on the wall—regulators must evolve faster, perhaps with AI-driven monitoring of their own to match the networks' sophistication; figures from the period show UK visits didn't dip post-inquest, underscoring the challenge ahead.

So now, in April 2026, the Gambling Commission signals intent to pursue operators individually, freezing assets and partnering with international bodies; past efforts blocked thousands of unlicensed sites, but this network's scale—millions of visits—demands more, with industry watchers predicting fines in the millions if Georgian and Curaçao links lead to prosecutions.

Yet the reality is complex; while self-excluded users bear the brunt, broader data reveals millions more casual visitors dipping in unaware of risks, prompting calls for public awareness drives alongside enforcement; one study of offshore gambling patterns found that 40% of UK users on such sites didn't realize they lacked UK protections, a gap that's closing slowly as news spreads.

Campaigners push for GamStop 2.0, a global whitelist that payment firms must honor, and that's gaining traction; those tracking legislative moves note bills in Parliament echoing the inquest's findings, aiming to criminalize advertising for unlicensed casinos and mandate KYC across borders.

The Santeda-run empire of MyStake, Velobet, Goldenbet, and kin exposed a vulnerability in UK protections, pulling 2.3 million monthly UK eyes from November 2025 to January 2026 while hiding behind AI veils and offshore shields; the January suicide inquest crystallized the stakes, spurring calls for laws that match the operators' cunning.

As April 2026 unfolds, regulators hold the ball, but experts caution that without cross-border muscle, these networks will morph again; data underscores the urgency—visitors keep coming, self-excluded or not—making this story a pivotal chapter in the fight for safer online gambling landscapes.