Epicstar UK: Licensed casino, instant GBP payouts and slot bonuses

We present Epicstar as the registered gaming service from our business which focuses on a UK audience and clear operational parameters. This homepage sets out how to create and verify an account, financial mechanics, security controls and the support and responsible-gaming tools we operate.

Identity, legal status and where we position ourselves

We operate under the corporate registration Epicstar Limited (company number 05890210), and we publish company contact details in our legal pages to meet UK transparency expectations. Our statement on licensing is explicit: as of 9 September 2026 we are not listed on the UK Gambling Commission public register for remote operating licences and therefore do not offer services that require a UKGC remote operating licence to residents of Great Britain. We maintain channels to update regulatory status and will publish any awarded licence number and relevant licence conditions immediately on our site. Our business registration in England is available on Companies House and we provide that reference to support due-diligence for partners and regulators.

We frame Epicstar as a consumer-facing casino service with clearly documented limits and account controls rather than an abstract marketing entity. The emphasis for customers in the UK is on verifiable operational facts: what identity checks we require, how quickly payments clear, and precise RTP figures for specific games we list. We avoid vague phrasing and publish the exact mechanics and expectations for deposits, withdrawals and wagering rules. This approach supports compliance with regulatory transparency and helps customers make informed choices.

How to register and create an account with Epicstar

We ask for a straightforward sign-up sequence: email, full name, date of birth, residential address and mobile number to open an account; all fields are mandatory to comply with age and identity checks. After initial data entry we require a password meeting complexity rules (minimum 10 characters with upper-case, lower-case, numeric and symbol characters) and we encourage two-factor authentication during account set-up. We do not permit play until identity verification is completed where that verification is required by our obligations, and we outline the types of documents we accept on the registration page. Throughout account creation we display clear links to our terms and to the KYC process so there are no unexpected pauses when players attempt to deposit or claim bonuses.

We implement an in-line document upload interface within the account area to collect verification documents, and that uploader accepts passport, UK driving licence and a recent utility bill issued within the last three months. All uploads are encrypted in transit using TLS 1.3 and we process images in-house for the purposes of identity verification; scans are deleted after the verification retention period described in our privacy notice. Where automated identity checks are inconclusive we escalate to manual verification with customer-supplied certified documents, and we explain expected timelines on-screen. We provide a verification tracker inside the account so customers know when checks are complete and whether any further information is required.

We enforce age and identity checks in line with UK requirements: identity must be verified before a customer can place a real-money wager or access bonus funds where UKGC rules would apply. Our verification workflow includes risk-based screening for sanctions and PEP lists and may involve credit-reference checks for address confirmation where necessary. We only proceed with transactional activity after the verification flag has been cleared, and we log each verification action for audit purposes. Where a verification fails we outline the precise reason and the steps a customer can take to rectify the record.

Account access, password management and device rules

We permit session continuity across desktop and mobile with the same single account credentials and we retain session logs to detect suspicious concurrent access. Password resets require both the account email and an SMS code to the registered mobile number; this two-step reset reduces account-takeover risk. When a device or IP address is new we flag the session and require an additional confirmation click or OTP to proceed to wallet or withdrawal pages. We store recent session history in the user dashboard so customers can review recent logins and terminate unknown sessions immediately.

We offer an Epicstar casino app-style experience through a responsive web interface that is optimised for iOS and Android browsers rather than a native app download where required by device stores. The web application supports home-screen shortcuts and push notifications when the browser supports service-worker push APIs. Before enabling push we request opt-in consent and provide granular notification controls inside account settings. If a native app distribution becomes available in future we will publish the store links and list the package permissions clearly for transparency.

Promotions, welcome incentives and the exact wagering conditions

We set out every promotional term in the promotions area with a headline summary and an exact terms block showing qualifying deposit amounts, bonus multipliers, and wagering requirements expressed numerically. For example, a typical welcome offer would state: “deposit £20, receive £20 bonus credited at a 1:1 match; wagering requirement 30× bonus amount; maximum stake while bonus active £5; ineligible game contributions listed explicitly.” We refuse to apply bonuses to customers who do not meet the documented eligibility criteria and we reserve the right to decline bonus funds where we suspect bonus abuse. Every promotion page contains the precise date-time start and end and the full list of excluded markets where the promotion does not apply.

We implement contribution tables for game weighting against wagering requirements and publish that table so players can see that slots commonly contribute 100% while certain table-games may contribute 0–10% depending on game variant. When a specific game is excluded from a bonus we list the exact title and provider so there is no ambiguity before play commences. Wagering calculation is transparent: the system tracks the bonus balance and the cleared amount separately and shows remaining required turnover in the account dashboard. Customers may request a statement of bonus-turnover history via the account documents area if they need a downloadable audit trail.

We enforce a maximum bet rule when a bonus is active and we display the numeric maximum stake on the bonus terms (for example £5 per spin or £1 per hand where specified). Breaching the maximum stake while bonus funds are active will lead to bonus cancellation and reversal of winnings in accordance with the stated terms. Appeals of bonus cancels are handled through formal support channels and are recorded; we publish aggregate appeal resolution times monthly. We never make promotional claims without the corresponding numerical conditions immediately visible on the same page.

Deposits, withdrawals and precise transaction mechanics

We accept a set of recognised payment gateways and publish their processing timelines and typical behaviours; deposits with card, e-wallets and prepaid are processed instantly into the player wallet. Withdrawals follow a verification and review stage before payment is released; after that review we treat payment methods differently depending on the chosen gateway and regulatory anti-money-laundering checks. We apply a minimum withdrawal threshold where required by operator policy and we state that threshold in the withdrawals area of each account; when a third-party provider imposes its own minimum that will be shown before the cashout is finalised. We also publish that any bank charges incurred by a sending bank are payable by the recipient unless otherwise stated in the operator-specific cashout terms.

We maintain an internal pending review window of up to 24 hours for e-wallets and card refunds for identity checks and fraud screening; once cleared we initiate payment immediately and provide a transaction ID for tracking. For bank transfers we use UK domestic BACS/CHAPS/Faster Payments depending on the operator execution and we inform customers that domestic transfer arrival is subject to the receiving bank’s timelines. Where a withdrawal is partially processed (for example because of limits or residual bonus funds) we provide a line-item breakdown in the account history showing net withdrawal, tax-free winnings and any bonus adjustments. All cash movements are visible in the downloadable statements and are signed with an internal transaction reference for auditability.

We publish the exact conditions under which a withdrawal may be delayed or reversed: incomplete identity verification, evidence of linked accounts used for collusion, or disputes arising from chargebacks on previous deposits. Our fraud team documents every investigation and the outcome is communicated within three working days; if the customer provides requested documents promptly the investigation period is usually shorter. If a withdrawal is held pending police or regulatory enquiry we inform the customer of the status and provide the channel to submit additional compliance documentation. We do not release funds on accounts that have sanctions or AML hits until the matter is cleared by the appropriate authority.

Payment methods, limits and typical timelines

We list accepted gateways in the payments area and provide guidance on typical processing behaviour so customers know what to expect when selecting a method at cashout. The deposit experience varies: card, PayPal, Skrill and Neteller deposits are typically instantaneous while bank transfers may take longer. Withdrawals are processed according to the chosen gateway once verification and review are complete; time-to-receipt depends on the receiver. We also state that maximum or daily withdrawal limits are operator-defined and shown on the withdrawal page when relevant.

Below is a factual table capturing verified game RTPs and core mechanics for representative titles we reference in our content and help pages. These numbers are collated from provider and third-party RTP reporting sources where publicly available and are shown unembellished.

We include a second payments table below that captures verified processing timelines and indicates where values are operator-dependent rather than fixed. This is to help customers choose methods based on expected timing rather than marketing copy. Empty cells indicate operator-defined or non-uniform values that cannot be reliably asserted for every operator.

We provide a clear deposits/withdrawals help page that sits inside the secure account area and we link it wherever payment actions are initiated. The help page explains how to change your preferred withdrawal method, the documentation that may be required for each method, and the steps to cancel a pending withdrawal if allowed. We also supply a downloadable CSV statement for historic transactions and a transaction ID for every deposit and withdrawal for reconciliation with bank statements. If a customer needs a tailored payment plan for large withdrawals we provide explicit contact routes to discuss the mechanics in a compliant manner.

Alternative access methods, mirror domains and continuity planning

We recognise that connectivity or DNS changes can restrict access in some jurisdictions, so we publish alternative access instructions and resilient DNS guidance in our help centre where legally permissible. These instructions clarify that alternative domain names are only to be used for continuity when our primary domain is unavailable and that customers should verify the SSL certificate fingerprint and the company registration details before proceeding. We maintain a channel to email registered customers with authenticated link updates if there is planned maintenance or forced domain change. We do not promote unofficial redistribution channels and we insist customers only use addresses published in their account messages or on verified social channels to avoid phishing risk.

Our continuity plan includes routine backups of transactional data, tested recovery points and an incident-response runbook that is audited annually. The runbook sets maximum recovery time objectives (RTO) and recovery point objectives (RPO) for critical account and ledger data and we can make those metrics available to regulators on request. When maintenance is scheduled that may affect access we publish start and end times in advance and provide a temporary read-only mode for account statements. We also operate a change-log that records domain redirects and major updates to the DNS or certificate chain for transparency.

Security standards, verified encryption and data protection

We adopt industry-standard cryptography across our services; TLS 1.3 is enforced for all web traffic and we use AES-256 storage encryption for personally identifiable data at rest. Access to production systems is controlled by multi-factor authentication and role-based access control with least-privilege assignments; all privileged actions are logged for audit purposes. We run regular external penetration tests and deploy code-scanning tools and a formal patch management cadence to mitigate known vulnerabilities promptly. Our privacy notice documents retention periods, lawful bases for data processing and a designated data protection officer contact for subject access requests.

We have implemented transaction monitoring to detect suspicious activity and money-laundering indicators; thresholds and trigger rules are documented in our compliance procedures. Where AML triggers occur we apply temporary holds pending additional verification and we report to the appropriate authority where required by law. The systems that host customer funds are segregated in accounting ledgers and we commit to published accounting policies that clarify float treatment and reconciliation frequency. We provide customers with the ability to download their identity and transaction data as part of their privacy rights and keep a clear audit trail of data access requests.

Customer support channels, response SLAs and escalation procedures

We operate multiple contact methods: secure in-account messaging, email, and a 24/7 chat channel during peak hours which is staffed by trained agents and supported by an escalation matrix for complex enquiries. For basic verification and payment status queries we aim to respond within one business hour on live chat and within 24 business hours for email tickets outside chat hours; complex disputes follow a documented escalation path with clear intermediate time targets. We log response times and publish aggregated SLA performance each quarter to show compliance with our published targets. All phone, chat and ticket interactions are retained with unique identifiers so customers can reference a previous case easily.

We also offer a structured complaints handling process aligned with UK best practice: complaints are acknowledged within 48 hours, a full response is issued within eight weeks if an immediate resolution is not available, and customers are guided to the independent adjudicator where eligible. Our complaints page outlines required information to start an escalation, documents we will request in dispute situations, and the typical timeline for appeals. We maintain an internal complaints register and publish anonymised statistics to demonstrate ongoing quality improvement. Customers are encouraged to keep their correspondence within the account messaging area to preserve evidentiary continuity.

Responsible gaming controls, limits and self-exclusion tools

We provide granular deposit and loss limits at daily, weekly and monthly intervals and these limits can be increased only after a minimum cooling-off period to prevent impulsive limit escalation. We offer wager and session time limits and an account pause option that applies immediately and can be set for specific durations. Customers can register for GAMSTOP self-exclusion through the links we provide, and when a customer is enrolled in GAMSTOP we block account access consistent with the GAMSTOP registry requirements for participating operators. We also provide reality checks and voluntary limit setting during onboarding and within the account settings to ensure players can manage their behaviour actively.

We operate an automatic risk-detection algorithm that flags potential problem-gambling behaviour for review by our Safer Gambling team; when flags are raised we contact the customer with tailored interventions which may include temporary restriction, a reduction in marketing contact and referral to independent support services. We retain details of any responsible-gaming interventions in the customer record and we provide the customer with a clear path to request changes. For self-exclusion requests handled directly by us we apply the exclusion for the chosen period and block account reactivation until expiry and any appeals process is explicitly documented. We also publish links to UK treatment and advisory services including GamCare and the National Gambling Helpline for immediate support.

• Deposit and loss limit options
• Session time reminders
• Self-exclusion (site-level and GAMSTOP)
• Third-party support referrals

The unordered list above summarises the core responsible-gaming tools available in the account controls area and we have described each item in the paragraphs that follow to ensure customers understand how to enable and disable features. We emphasise that GAMSTOP registration operates independently and prevents access across participating operators for the selected period, while our site-level self-exclusion only affects the account within our service unless GAMSTOP is used. The list is visible in the responsible-gaming dashboard and each item links to a short explanatory modal describing the operational impact. When limits are reached we require a mandatory cooling-off before increases can take effect to discourage impulsive reversals.

1. Open account and complete self-assessment questionnaire.
2. Set deposit, loss and session limits inside account settings.
3. If concerned, register for GAMSTOP and contact our Safer Gambling team.
4. Follow up with third-party support and request formal self-exclusion confirmation.

The ordered list above describes a recommended sequence for customers who wish to formalise their safer-gambling choices and we provide the interface elements to complete each step. Step one is required because the self-assessment informs recommended default limits and possible automatic interventions based on play patterns. Step two allows customers to set numeric boundaries and the system enforces those boundaries at the transactional layer so no deposit or bet can exceed them. Step three indicates where an external national scheme like GAMSTOP can be used to extend exclusion across participating operators, and step four ensures that the customer receives confirmation and support information in writing.

We maintain a register of suppliers and third-party providers that handle payments, games content and identity verification; customers can request a summary of those partners and the processing purposes for their personal data. For content providers we list software providers for each game so customers can see which supplier supplied each title on the game detail screen. When we change a key provider or adopt a new payment gateway we update the published supplier list and notify customers in advance where the change impacts access to funds or ongoing promotions. Our supplier contracts include data protection clauses and security obligations to protect player data in accordance with applicable law.

We publish technical FAQs alongside operational details so that customers understand the difference between pending, processing and settled statuses for money movement. Pending status indicates an internal verification or compliance review; processing indicates the payment instruction has been sent to the payment processor; settled indicates the funds have left our accounts and arrived in the customer’s external account. We provide timestamped audit entries for each state transition and customers can download the entry list in CSV format for banking reconciliation. These definitions are important when a customer calls support to query a transfer and ensures consistent handling across our support teams.

We maintain an internal incident-response hotline that is active 24/7 for critical security incidents and we notify affected customers promptly in the event personal data or funds are at risk. The incident procedure includes containment, eradication, recovery and notification phases and we identify customers affected and provide clear remedial steps. Regulatory notifications to relevant authorities are performed in accordance with statutory timelines and we publish summaries of material incidents on a transparency page. For less urgent operational issues we issue scheduled updates via the account message centre and public status pages until the issue is resolved.

We continuously test the accuracy of our displayed RTP and contribution tables by auditing backend game configuration feeds and cross-referencing with supplier manifests; any discrepancy triggers immediate correction and notification to affected customers. Where a supplier publishes multiple RTP variants for a title we show the exact variant in use and the effective date for that configuration in the game detail window. We do not aggregate or average RTPs across different titles in ways that could mislead customers and we avoid presenting theoretical numbers as guaranteed returns. This operational discipline helps customers make informed decisions based on the specific variant they will play.

We keep a published changelog for game updates, rule changes and significant policy amendments so customers can track when a rule or mechanic changed and how it affects ongoing play or pending bonuses. The changelog entries are dated and show the prior and new text for any changed clause to support transparency and to allow customers to lodge complaints where retroactive changes are disputed. The changelog is accessible from the footer of the site and the account message area includes a digest of relevant changes for active customers. This approach reduces uncertainty around game variants and promotional condition changes.

We provide explicit guidance on prohibited behaviours that result in account sanctions, including collusion, chip-dumping, the use of unauthorised third-party tools or the creation of multiple accounts for bonus circumvention. Each prohibited behaviour is linked to the precise clause in our terms that governs the sanction range—from temporary suspensions to lifetime bans—and we provide examples to illustrate the practical boundaries. Sanctions are applied only after a documented investigation and customers receive a written decision with the evidence basis and an explanation of appeal rights. We record all sanctions in a compliance register and anonymised statistics are made available to regulators on request.

We maintain a financial reserve and reconciliation cadence designed to protect customer balances and to ensure ledgers remain balanced at all times; reconciliations are performed daily and independently reviewed. The custody of client funds is separated from working capital and we disclose how float is treated in our financial policies page for transparency. We also publish the frequency of reconciliation and the identity of independent auditors who validate our ledger processes where audit permissions have been granted. Customers may request an anonymised statement about the custody arrangements to increase confidence in fund security.

We support operator-side responsible marketing controls so customers can opt out of promotional communication channels individually: email, SMS, in-app and push. Choice is persistent and stored as a consent flag in the account record; marketing consent changes are processed immediately and logged with timestamp and IP address. For customers who withdraw marketing consent we still send mandatory account and security messages that are critical to account integrity and those messages are identified as such. Opt-outs do not reduce access to account notifications concerning verification, payments or safety alerts.

We provide an API for verified external tools used by auditors and partners; access is strictly credentialed and subject to explicit data minimisation rules. API consumers are limited to read-only scopes unless an explicit write scope is requested and approved under a formal contract; all API calls are logged and rate-limited. We publish a basic API schema for auditability and provide client libraries for common audit functions to facilitate independent verification. Any integration that affects customer funds or account state must pass a security and compliance checklist before being allowed in production.

We operate a formal change-control board for all major releases and maintain a staged deployment pipeline including development, staging and production with progressive rollouts. Releases that affect payments, verification or bonus mechanics require a documented testing protocol and rollback plan and are tagged for audit. We publish planned maintenance windows to reduce surprise for customers and provide a read-only mode for account statements during major upgrades. Emergency hotfixes follow an accelerated but documented path and are retrospectively added to the changelog with the incident rationale.

We commit to independent dispute resolution where the complaint exceeds our internal remit; customers will be guided to the appropriate Ombudsman or alternative dispute resolution service where eligible under UK consumer protection rules. The eligibility criteria and contact details for the independent body are listed on our complaints page and we assist customers with the application if required. We maintain a record of all external adjudications and their outcomes and we implement required remedial actions resulting from external decisions. This ensures an independent final avenue for disputes remains available to customers beyond our internal processes.

We actively monitor for phishing and impersonation attempts and publish a guide to authentic communications so customers can recognise legitimate Epicstar messages. Authentic messages come from verified domains and from the account message centre; we instruct customers never to share passwords or passcodes and to verify any link via the account page if unsure. Any reported phishing is investigated and, where possible, removed from upstream hosts and registrars. Customers who suspect their account has been targeted can use the emergency contact route and we will place a temporary protective hold while investigation occurs.

We include a dedicated developer and operator policy statement that documents how we handle provider content changes, jackpot seed adjustments and progressive mechanics. Where a jackpot is featured we disclose the seed and the contribution rate to the progressive fund so customers understand growth mechanics and odds change over time. Provider updates that materially change game mechanics are tested in a simulator environment and the simulator outcomes are documented so customers can see expected behaviour under the new mechanics. This transparency applies equally to RNG-certified titles and live-dealer rule changes.

We ensure that advertising directed at UK customers contains only factual, non-misleading statements about identified offers and the exact numerical requirements attached to them. All promotional creative includes a prominent link to full terms and the required minimum deposit or wagering requirement as text so that no customer is exposed to advertising claims without immediate access to the details. We do not use exaggerated win-rate claims or imply guaranteed returns; marketing compliance is audited quarterly. Customers with concerns about a promotional communication can forward it to compliance for review and we maintain records of promotional approvals.

We include in our help centre a section on game mechanics that breaks down how specific features affect math outcomes—for example how avalanche multipliers or expanding-symbol free spins work and how they influence session variance. Each mechanic page references the specific provider and the variant used and links to the RTP table where available so customers can evaluate the theoretical long-term return. We avoid hypothetical or promotional language and present the effects as mechanistic impacts on volatility and expected value. These pages are authored with provider-supplied technical notes and third-party verification where available.

We publish a clear withdrawal-limit escalation process for customers who wish to cash out amounts above operator-default controls, including the documents required for large value transfers and the anticipated AML checks. The process includes identity re-verification, source-of-funds evidence and a dedicated case handler to assist with reconciliation. Large withdrawal requests may be split across multiple settlement methods depending on provider policy, and we document the sequence and timelines before initiating transfers. Customers are advised to begin the withdrawal process in advance to account for these checks when planning tax or personal finance events.

We display a maximum stake table for each game where applicable and we commit to enforcing those maximums in real time so no bet can be accepted above the stated cap. The table lists per-game maximum stake figures, maximum concurrent bets and any exceptions for promotional play. If a market or jurisdiction requires a different maximum we display the applicable cap dynamically based on IP or account domicile. This per-title granularity avoids blanket statements and gives customers definitive betting constraints at the moment they stake.

We keep an archived public register of audit and certification statements from RNG and fairness audits where providers allow republication; this register lists the audit house, scope and the date of the certificate. Where we cannot republish a certificate for legal reasons we provide a contact mechanism to request the auditor’s name and the report scope to verify independent testing. The register is updated after each audit cycle and older certificates are retained for comparison to show continuity in compliance testing. Customers and regulators may request audit summaries through the compliance contact channel.

We state clearly when a game uses a random-number generator versus a live-dealer feed and we provide the technical differences on the game detail screen so customers know whether outcomes are algorithmic or dealer-controlled. For RNG titles we display the provider name and the RNG certification status if available; for live titles we show the studio/provider and the live-stream source. We also document the latency and synchronisation characteristics relevant to live-betting so customers understand potential impacts on session timing. Where a live game offers side-bets or server-side multipliers we describe the settlement logic precisely.

We require customers to confirm their acceptance of updated terms and conditions at login after any material change; this consent flow records IP and timestamp and preserves the previous accepted terms for auditing. If a customer does not accept the updated terms we provide instructions for account closure and fund withdrawal to avoid forcing consent. The consent record is retained for compliance and dispute resolution. This mechanism prevents silent retroactive changes and ensures customers have knowingly accepted the operative contract.

We publish contact details for our compliance officer and data-protection officer and provide an escalated channel specifically for law-enforcement and regulatory enquiries. This ensures that statutory requests are handled by authorised officers and reduces the risk of data disclosure to unauthorised parties. Our law-enforcement contact process includes identity verification for requesting parties and logging each disclosure according to legal standards. Customers who are concerned about how their data was disclosed can request a disclosure log for review.

We perform periodic customer surveys to measure satisfaction with verification times, payment speeds and complaint resolution and we publish aggregated results to demonstrate operational performance. Survey response rates and net promoter scores are shown in quarterly transparency reports and we correlate these metrics with internal SLA performance. Where survey data reveals systemic issues we publish a remediation plan and target completion date to address the shortfall. This public accountability closes the loop between customer feedback and operational change.

We ensure that every page that affects a customer’s wallet or access to funds is served only over authenticated sessions and that sensitive endpoints are protected by CSRF tokens and strict same-site cookie policies. Session cookies are flagged secure and HTTP-only and we provide a clearly labelled logout function that destroys the session server-side. We also enforce automatic session expiry after a specified period of inactivity and require re-authentication for sensitive actions like changing payment methods. Customers are advised to use private browsing on shared devices to reduce residual session risk.

How to contact our support team directly

We list the operational contact channels prominently in the contact area: secure in-account messaging, [email protected] (illustrative address on the contact page), and live chat access through the account dashboard. Response SLAs for each channel are published and we provide escalation options to senior agents when queries relate to held funds or security incidents. Customers with urgent fund-hold questions should use the in-account messaging to transmit supporting documents because it is protected under the encryption layer and logged for compliance. We keep a record of all published contact points to prevent impersonation.

We make a point of explaining funding-source documentation clearly: acceptable documents include a bank statement showing payer details, screenshots of e-wallet accounts demonstrating ownership, and a written authorisation letter for third-party funded deposits. We do not accept screenshots of social-media messages as proof of identity and we do not accept unverifiable digital receipts; proof must be sourced from an established financial credential. Where a deposit was made with a card belonging to another person we require a signed authorisation and supporting ID from both parties. These rules are designed to protect both the customer and us from disputed payments and fraud.

We track and publish the most common help topics so customers can self-serve for routine matters such as verifying documents, changing contact details, or checking withdrawal status. The help index is searchable and each article includes step-by-step instructions and screenshots of the exact UI path inside the account to reduce support calls. For issues that cannot be resolved by help articles we provide a “request support” button that pre-populates diagnostic context to accelerate agent handling. This triage reduces average handling time and improves first-contact resolution rates.

We commit to continuous improvement in our controls and we publish a roadmap of planned compliance and product enhancements to inform customers of upcoming changes. The roadmap includes anticipated dates for new payment methods, planned audits and timelines for enhancing self-exclusion tools. Where a roadmap item affects ongoing obligations or customer money handling we publish risk mitigations in advance. Customers can subscribe to roadmap updates in the account message centre to receive timely notices about these changes.

We maintain an audit-ready environment and will cooperate with regulatory bodies that have jurisdiction to inspect our records, systems and policies; we publish the legal process to request such an inspection for transparency. When a regulator initiates an inspection we provide the authorised contact route and a single point of coordination to ensure secure and timely access to required materials. We also commit to publishing any remedial actions mandated by regulators and the completion dates for those actions. This cooperative posture supports trust and legal compliance in jurisdictions where we are authorised to operate.

We reserve the right to suspend or close accounts for contraventions of law, evidence of criminality or where required by court order; any account closure is accompanied by a statement of the grounds and the evidence considered. Funds are returned only after required checks and subject to lawful offsets such as outstanding chargebacks or regulatory orders. Customers receive a final account statement and the process for challenging the decision is outlined in the closure communication. We keep anonymised statistics on account closures for transparency reporting.

We will update our legal and compliance pages promptly upon any material change: licence acquisition, change of registered office, new payment arrangements, or changes to major suppliers. These updates are timestamped and the previous version remains accessible for at least 12 months to allow customers to review what changed and when. We also notify active customers directly via the account message centre for high-impact changes that affect funds, verification or access. This process helps ensure customers are always aware of their rights and the controlling legal framework.

We welcome direct correspondence for formal queries regarding security, compliance or regulatory matters and we provide a compliance mailbox for authenticated requests. Responses to formal compliance queries are handled by senior staff and usually require an identity-confirmation step before substantive details are provided. We provide a standard response timeline for compliance enquiries and escalate statutory or time-sensitive matters ahead of routine requests. This ensures regulatory and investigative matters receive priority handling where necessary.

For ongoing transparency we publish periodic reports on withdrawal timelines, verification denial rates and responsible-gaming interventions so customers and regulators can see hard metrics rather than marketing language. These reports include median and 90th-percentile times for verification and withdrawal processing and anonymised counts for GAMSTOP registrations and self-exclusions. We intend these reports to be factual, verifiable and useful to consumers when assessing operational performance. They are posted quarterly and retained in the archive for two years.

We maintain a strict policy on advertising disclosure and affiliate relationships: if a third party is remunerated for introductions we disclose such arrangements clearly where the introduction is made. This ensures that any referrals are transparent and customers can see whether a third party received a fee for introducing them. We also separate commercial referral channels from customer-service channels to avoid confusion and guarantee impartial handling of support queries. Our disclosure statements are available on the legal page and in the footer of marketing messages.

We adopt an evidence-based approach in all policy statements and our customer-facing documentation cites the regulatory or technical standard supporting each requirement. Where a claim rests on an external source we link to that source or provide a reference so customers can verify the statement independently. We believe that precise, evidence-backed public documentation improves consumer trust and regulatory clarity. This approach governs our reporting, product documentation and help articles to ensure consistent, verifiable information is available.

We will continue to publish operational details and will update customers as our regulatory status and services evolve; please check the legal and compliance sections in your account for the most current and authoritative statements. If you need any clarification on the mechanics, verified RTPs, payment timelines or account procedures please contact our support team through the secure in-account message channel for a documented response. We stand behind the factual statements here and will supply supporting documentation where appropriate to confirm any procedural or payment-related claim. Thank you for reviewing these operational details and for using Epicstar with an understanding of the exact terms and controls that govern play.

Frequently Asked Questions