L&L Europe settlement reveals gaps in vulnerable-customer safeguards

L&L Europe Limited has agreed to pay £900,000 (around $1.2 million) to the UK Gambling Commission after a review found the operator failed to protect vulnerable customers, ran weak anti-money laundering checks and used an unfair withdrawal clause, iGaming Business reported.

The Commission's compliance assessment covered L&L Europe's remote licence, number 038758, which spans seven gambling sites including allbritishcasino.com, casinocasino.com and hypercasino.com. The breaches identified date from October 2024 to October 2025.

Among the individual cases the regulator highlighted was a customer who made 84 failed deposits within seven days without triggering a flag. A 21-year-old lost £6,500 over three days without timely intervention, and an 18-year-old lost £4,000 in eight minutes, which the Commission said reflected inadequate safeguards.

The regulator found that safer-gambling alerts at L&L Europe were largely triggered by financial thresholds and applied inconsistently across its sites, sometimes requiring several indicators to appear on the same day before action was taken. Automated responses to what the Commission called "strong indicators of harm" were limited to a single trigger, losses within 24 hours, during the period under review. Manual reviews, the Commission said, rarely assessed whether earlier interventions had actually worked, and the operator had no system for evaluating its overall customer-interaction strategy.

Separately, the Commission ruled that a clause limiting customers to "one withdrawal at any time" — forcing them to wait for a prior request to clear before submitting another — was "unfair within the meaning of the Consumer Rights Act 2015." It also found that manual reviews of withdrawals were applied unevenly, with some customers having every fifth or tenth withdrawal scrutinised, often prompting requests for extra information late in the process rather than earlier.

On anti-money laundering controls, the review described an over-reliance on financial thresholds and sampling, unclear risk scoring, and insufficient distinction between UK-based customers and others. Due diligence was also found wanting, including instances where a customer's stated source of funds was accepted without adequate supporting evidence. The Commission said these gaps breached Licence Condition 12.1.1, which requires operators to assess risk properly and to implement and review AML controls.

Sue Young, the Commission's executive director of operations, said consumers should expect to withdraw winnings "swiftly without hindrance from unfair terms and conditions or the operator failing to carry out checks at an earlier stage," adding that this was "essential to consumer trust." She said the case should serve "a clear reminder to the industry that, although much of our enforcement action frequently relates to anti-money laundering and social responsibility failings, we will not hesitate to act when we see incidents of gambling not being fair and open."

Rather than issue a formal fine, the Commission accepted the £900,000 payment to the consolidated fund plus investigation costs, citing L&L Europe's cooperation, prompt remedial steps and early acceptance of its findings as mitigating factors, against the seriousness and repeated nature of failings previously flagged to the sector.

The settlement follows the Commission's pursuit of land-based AML breaches, with the Rank Group agreeing earlier this month to a financial settlement exceeding £5 million.