A £4.75m settlement puts the supplier, not the offshore operator, on the hook for unlicensed sites

The Gambling Commission has published a public statement setting out a £4.75 million settlement with Evolution Malta Holding Limited, holder of a software and casino game host licence. The Commission’s investigation found the company’s games appeared on six unlicensed websites accessible to consumers in Great Britain, with large volumes of British visits recorded between December 2023 and November 2024.

According to the Commission, Evolution’s assessment of whether its business could be used for money laundering or terrorist financing was not effective enough to flag that two operators it did business with were supplying its games to British consumers without a Commission licence. The regulator says it first identified the unauthorised availability in August 2024 and formally notified the company that December. Its enforcement director stated the failings were serious enough for licence suspension to be considered, and that Evolution moved quickly to strengthen controls once notified, with subsequent testing finding no further instances.

The settlement itself is unremarkable in size. The enforcement theory is not. A regulator that cannot reach an offshore operator can reach the licensed supplier whose product the operator depends on — and the obligation being enforced is not "do not serve Britain" but "know where your games end up". That reframes commercial due diligence as a licensing condition.

Where this leads is worth watching rather than predicting. If supply-chain knowledge becomes the standard route to enforcement, the practical consequence falls on B2B licensees with distribution through aggregators and white-label chains — arrangements built, in part, so that no single party has full visibility of the endpoint.