Exposed: Sprawling Illegal Casino Network Bypasses UK GamStop, Draws Millions of Vulnerable Visitors

A joint investigation by The Guardian and Investigate Europe has peeled back the layers on a massive illegal online casino operation, one that's been quietly siphoning in UK players desperate to dodge self-exclusion tools like GamStop; operators behind it, centered around Curaçao-based Santeda International and once propped up by Georgian firm Upgaming AG, have funneled gamblers toward unlicensed platforms such as MyStake, Velobet, and Goldenbet, all while evading UK regulations with slick domain tricks and affiliate promotions.

What's striking here is the scale: these sites racked up 2.3 million monthly visits from UK IP addresses between November 2025 and January 2026, figures that data from the probe reveals through traffic analytics and user tracking; people who've signed up for GamStop, the national self-exclusion register meant to block access to licensed UK operators, found themselves lured back in via ads on social media, search engines, and gaming forums, where affiliates peddle "GamStop-free" havens without a whisper of the risks involved.

And it doesn't stop at easy entry; the network thrives on mirror sites and rapid domain switches, slipping past the UK Gambling Commission's domain-blocking powers that have targeted thousands of illicit addresses, yet enforcement gaps allow these platforms to resurface almost overnight, keeping the doors wide open for anyone with a VPN or a quick Google search.

Santeda International, registered in Curaçao—a jurisdiction known for lax oversight on online gambling—serves as the nerve center, handling payments, software, and player data across a web of interconnected brands; Upgaming AG, based in Georgia, provided backend tech support until recent shifts, including white-label solutions that let these sites spin up slots, tables, and sportsbooks tailored to UK tastes, complete with Premier League odds and familiar payment methods like Trustly or crypto wallets.

Take the sites themselves: MyStake offers a flashy array of slots and live dealers, Velobet pushes sports betting with boosted odds, while Goldenbet mixes crash games and virtuals; all share the same underlying infrastructure, player accounts that migrate seamlessly between domains, and promotional emails that ping excluded users with "exclusive bonuses" despite their self-exclusion status, a tactic that experts tracking affiliate networks have flagged as particularly predatory.

Observers note how affiliates, often operating from Eastern Europe or Asia, earn commissions up to 50% of player losses, flooding Telegram channels, TikTok, and Reddit with sponsored posts; one case highlighted in the investigation shows a single promoter driving 10,000 clicks monthly, turning vulnerability into revenue streams that bypass any ethical checks.

November 2025 through January 2026 marked a peak, with UK visits hitting 2.3 million per month on average—numbers pulled from SimilarWeb data and cross-verified server logs—spiking around holidays when isolation hits harder; those stats don't capture the full picture, since VPN users and mobile proxies mask even more activity, but they paint a clear trend of GamStop's barriers crumbling under offshore pressure.

Harms pile up fast in stories like these: fraud runs rampant with chargebacks ignored and bonus terms twisted to void winnings, while massive losses drain accounts—one player detailed dropping £23,000 over weeks on MyStake, chasing "risk-free" spins that locked funds behind impossible wagering requirements; worse still, the probe links the network to a suicide in January 2026, where a long-term gambler, excluded via GamStop but active on Velobet, left notes citing debts and despair, a tragedy that underscores how easy access amplifies addiction's grip.

But here's the thing: researchers who've analyzed player complaints on forums like AskGamblers and Casinomeister find patterns of aggressive retention tactics—personalized offers based on deposit history, loyalty programs that reward heavy play, and withdrawal delays stretching weeks— all fueling a cycle where one bet turns into relentless sessions, especially for those already flagged as high-risk by UK tools.

The UK Gambling Commission, armed with £26 million in funding for enforcement as of early 2026, has blocked over 7,000 domains tied to unlicensed operators, yet the Santeda network dodges bullets by cycling through fresh URLs weekly; payment blocking hits major cards and e-wallets, but crypto endpoints and niche processors keep cash flowing, with transaction data showing millions in UK deposits monthly despite crackdowns.

Labour MP Alex Ballinger, whose campaigns have spotlighted problem gambling, called for tougher laws in April 2026 responses to the investigation, pointing to GamStop's limitations—it's voluntary for offshore sites, covers only licensed UK operators, and lacks real-time verification against illicit platforms; Ballinger urged mandatory levy hikes on operators to fund better tech, like AI-driven ad monitoring, and cross-border pacts with Curaçao and Georgia to shutter backends at the source.

That's where affiliates enter the fray again: networks like these pay out via Neteller or bank wires, operating in gray zones where UK influence wanes; one expert who mapped promoter sites counted over 200 UK-targeted campaigns live in March 2026, promising "no verification, instant wins," drawing in ex-GamStop users who discover too late the house edge grinds them down.

Turns out, even as domain blocks multiply, accessibility remains child's play; a simple search for "GamStop casino alternatives" surfaces top results from these very networks, SEO tricks keeping them ahead of filters, while social proof from fake reviews seals the deal for the desperate.

People who've fallen into this trap often share similar paths: take the £23,000 loss case, where a 40-something from Manchester started with £50 "fun money" on Goldenbet, enticed by a 200% welcome bonus, only to hit wagering walls that forced bigger deposits; sessions stretched through nights, fueled by auto-play slots adn live chat nudges like "one more spin hits big," until savings vanished and loans piled up.

Another thread from the investigation details a family man on Velobet, excluded since 2024 for chasing football bets, who racked up £15,000 via mirrors after affiliates DM'd his gaming Discord; harms extend beyond money—relationships shatter, jobs slip away, mental health craters—patterns that Gambling Commission's own reports echo, with self-excluded players 10 times more likely to seek offshore bypasses.

What's interesting is the tech layer: Santeda uses geofencing that detects UK IPs but serves content anyway, paired with KYC skips for deposits under £2,000; Upgaming's legacy code, still embedded, optimizes for mobile, where 70% of traffic originates, making it pocket-easy to relapse on the bus or at midnight.

As April 2026 unfolds, the Santeda network's exposure lays bare the cat-and-mouse game between illicit operators and regulators, with 2.3 million UK visits signaling a vulnerability that GamStop alone can't seal; Labour's push for reform, backed by stark cases of £23,000 losses and a linked suicide, pressures the Gambling Commission to wield its £26 million more sharply, targeting affiliates and crypto flows, while international talks with Curaçao loom as the next frontier.

Yet the reality persists: without sealing affiliate pipelines and mandating offshore compliance, sites like MyStake, Velobet, and Goldenbet will keep resurfacing, drawing in the excluded with promises that deliver pain; data from the probe suggests enforcement must evolve fast, or the monthly millions will climb, turning self-exclusion into a hollow shield.