Every other review here starts a stopwatch. This one cannot, because its subject never moves: the balance sitting in a gambling account before anybody asks for it back. No rail, no transit leg, no bank credit. Just one question — whose money is that, if the operator stops trading on Tuesday — and a four-rung answer the Gambling Commission requires operators to publish. You have almost certainly agreed to one, on a deposit screen, with a box to tick.

The file

The ladder, from the bottom

The customer funds insolvency ratings system sets out four categories. The vocabulary rewards close reading.

Not protected - no segregation. Per the guidance, permitted for non-remote and ancillary remote operators only — so not at a full remote licensee, the ordinary online casino. It survives on the non-remote side, and in remote activity ancillary to it.

Not protected - segregation of customer funds. The guidance calls this the minimum for all remote operators holding customer funds — the default online answer, then. Money sits in accounts separate from the business accounts, and the guidance is blunt about what that buys: in insolvency those funds would form part of the assets of the business and provide no protection. The Commission’s separate example-statements page pairs that sentence with a flat denial; its first footnote calls describing such funds “protected” misleading to consumers.

Medium protection. Quistclose accounts, insurance arrangements or an equivalent: kept separate, with arrangements meant to distribute the money if the company fails. The guidance adds its own caveat — no absolute guarantee that funds will be protected in the event of insolvency — the honest half of a rung whose name contains the word “protection”. A footnote on that same page warns operators not to present bare segregation, with nothing Quistclose-equivalent behind it, as this category.

High protection. A formal trust account, legally and in practice separate from the company’s affairs, overseen by an independent trustee or external audit. The Commission has not defined an independent trust; it lists relevant factors instead.

Who wrote the rating

The operator applies the rating to its own arrangements, and must not imply the Commission approved the level chosen. A disclosure regime in the regulator’s vocabulary, then, not a protection regime in its gift — though compliance activity can ask an operator to evidence what it claims.

The guidance also lists the errors its compliance checks commonly turn up. One belongs on this desk’s wall: acknowledgement assumed from the click of a general continue button, not a separate tick box. Consent measured by a button you were going to press anyway.

The line that has been running since October

The Commission’s guide page on protecting customer funds sets out the duties: arrangements, level of protection and method stated in the terms, available at deposit, and actively acknowledged before the funds can be gambled.

Then the newer one. Since 31 October 2025, an operator holding customer funds with a “not protected” rating has had to remind each customer every six months that their funds are not protected in insolvency, and state the amount held for them. That commenced almost ten months ago; it is not a forthcoming change. Carry a balance at such a cashier since then and at least one should already have reached you, with a number in it.

Where it goes wrong

Two of the four rungs use “protected” only to negate it. A skimmer sees a protection heading and a label; the operative half is the denial.

The customer-facing examples are four years old. The guidance around them was updated on 9 September 2025 to carry the new reminder condition, and the licensee guide the day after. The example-statements page still records 25 July 2022, published and last updated, with no changes to show.

It says nothing about payout speed, either way. Nothing in the ratings system sets a processing time, and no processing time implies a rating. Unrelated mechanisms; reading one from the other is guessing. The balance behind a fast-payout badge is still the operator’s until it lands — as we noted in our review of push-to-card payouts.

A balance you have not asked for is still stake as far as the cashier is concerned. A rating says what happens if the company fails; a deposit limit is the one clock on this page you set yourself, and it reads best while the balance is still an abstraction. If it has stopped being one, begambleaware.org is the address with nothing to sell you.

The columns

Verdict

The lowest score we have given anything — not because the Commission’s words are evasive, they are the least evasive text in a cashier, but because an operator grades itself on the one question a customer cannot check. Read the four words before you tick the box.