Best Online Poker Sites UK 2026: Software and Fair Play Guide

Every hand of online poker you play is a small software transaction. A server generates a deck, deals it, accepts your actions, settles the pot and writes the whole thing to a log that an integrity team may later read line by line. Most guides to online poker sites talk about bonuses and traffic. We wanted to look at the machinery instead, because that machinery decides whether the game in front of you is honest.

This guide covers what British rules actually demand of a licensed poker room’s software: how the shuffle is produced and tested, how collusion and bots are hunted, what happens when your connection dies halfway through a hand, and how your account and balance are protected. Rake gets a short, practical section near the end. We name no operators and rank nobody; the aim is to give you the questions that separate a well-engineered room from a shaky one.

What happens between the shuffle and your screen?

Online poker runs on a client-server model. The program on your laptop or phone is a display and input device. It draws the table, shows your two hole cards and sends your fold, call or raise back to the room. The authoritative game state lives on the operator’s servers: the order of the deck, who holds what, the size of the pot and the betting sequence. Your client only ever receives the information you are entitled to see. A correctly built room never sends an opponent’s hole cards to your machine, which is why “reading the client’s memory” to see other hands is a myth at any properly engineered site.

The deck itself is produced by a random number generator (RNG). Gambling Commission rules put this in plain terms. RTS requirement 7A says random number generation and game results must be “acceptably random”, meaning it should be possible to show with a high degree of confidence, through recognised statistical tests, that the output is random. The implementation guidance behind 7A spells out the qualities a tester looks for.

The last row matters to anyone who has been rivered three times in an hour. RTS 7A states that adaptive behaviour, which it describes as a compensated game, is not permitted. RTS 7B adds that random numbers must be used in the order received and may not be discarded because of adaptive behaviour. A licensed room cannot “notice” that a hand would be boring and redeal it.

So why does online poker feel swingier than a home game? Mostly volume. An online player can see several hundred hands an hour across a few tables, against perhaps thirty at a live table. Rare coolers happen at the rate maths predicts; you simply watch far more hands per session, so the rare events arrive faster.

Who checks the software before it goes live?

Rules on paper would be worthless without a testing regime, and the Gambling Commission runs one. Its testing strategy for compliance with the remote technical standards requires licensees to make sure new products have been adequately tested by an approved test house before release, with the test report supplied to the Commission. Poker software, including its RNG, falls inside that net.

What happens after launch is where the detail gets interesting. Software changes constantly, and not every change needs a laboratory. The strategy splits updates into major and minor. A major update is any change that could affect the fairness of a game, and it names changes to the RNG, to scaling and mapping, and to game rules. Those need external retesting by an approved test house. Minor changes can go through the licensee’s own controlled internal process.

Think of it like patch notes with a referee attached. A room can push a new theme on a Tuesday afternoon, but a change to how the deck is built goes back to the lab first. RTS 5 then covers the live environment: gambles must be accepted, processed and settled in line with the published rules, and where a system fault affects customers, the operator must fix it and treat those customers fairly, including correcting account balances where needed.

One limit is worth stating plainly. Test houses certify that the software does what it should. They do not sit at your table watching for two players sharing hole cards over a messaging app. That job belongs to the room’s own security team, and it has its own standard.

How do poker rooms catch collusion?

Poker differs from every casino product in one crucial way: you play other customers, and other customers can cheat. Two or more players might share information about their cards, squeeze a third player with coordinated raises, or deliberately lose chips to one account to move money (chip dumping). Cheating at gambling is a criminal offence in Great Britain under section 42 of the Gambling Act 2005, carrying up to two years’ imprisonment on indictment. Criminal law is a blunt tool for a hand played at 2am, though, so the practical defence sits in RTS 11.

RTS requirement 11A says licensed rooms must put in place measures to deter, prevent and detect collusion and cheating, keep records that make investigation possible, be able to suspend or disable accounts and sessions, and monitor whether their own policies work. The guidance lists the kind of data worth recording: which players sat at which tables, amounts won from and lost to specific accounts, and game activity down to individual actions. That last item is the key. A room that stores every check, bet and fold can reconstruct any session after a complaint.

Records do not stop at the hand histories. Where an investigation ends with an account being closed, the guidance expects the room to log player details, the scale of the offence in money and number of players affected, the reason for the investigation (including whether a customer reported it), the outcome and supporting evidence such as screenshots or chat logs. Rooms are also told to feed those findings back into their risk policies, so a new collusion technique discovered in one case tightens detection for the next.

RTS 11B covers the customer side. Licensed rooms must publish information about their cheating policies, what happens to funds recovered from cheating accounts, and how to complain if you suspect other players. At minimum, customers must be told that accounts will be closed if they are found to have cheated. If a room’s help centre says nothing about any of this, that silence is informative.

A casino only has to be honest with you. A poker room has to be honest with you and also police everyone else at the table.

Bots, solvers and helper tools under RTS 16

Poker software aids range from harmless to table-wrecking. A notepad for opponent notes is one thing. A program that plays hands on your behalf, or one that feeds solver-based advice into a live decision, is something else entirely. British rules do not ban any specific category of tool outright. Instead, RTS 16 forces each room to draw its own line clearly and then enforce it.

What rooms must tell you

Under RTS 16A, where customers could be playing against bots deployed by other customers, or against customers assisted by third-party software, the room must say this is possible and, if it breaches the terms, explain how to report it. The guidance adds a neat warning that rooms should pass on: if you let a program play for you, other players may be able to exploit it. Bots follow patterns, and patterns can be read.

RTS 16B requires rooms to make clear whether third-party software is permitted and, if so, which types. A room that bans certain tools must also put measures in place to deter, prevent and detect their use. This information should appear in the terms and conditions and the player guide at the very least.

RTS 16C covers the rarely discussed scenario of the operator running its own automated players. If a peer-to-peer room uses programs that gamble on its behalf, it has to display that clearly, on home pages and in the game description or help pages. A licensed room cannot quietly seat house bots at your table.

How tool policies usually break down

Individual rooms set their own policies, so the categories below describe common approaches rather than any single site’s rules. Always read the room’s own permitted software page.

• Study tools used away from the table. Reviewing your own hands or running solver scenarios after a session is generally a separate matter from using tools while you play.
• Heads-up displays (HUDs) and trackers. Policies vary most here: some rooms permit them, some build a limited version into the client so everyone sees the same stats, and some prohibit them.
• Hand history access. Some rooms let you export your own hands; others offer only in-client replays, which also limits what a HUD could use.
• Seating and table-selection scripts. Tools that automatically join tables with particular opponents are a common target of prohibitions.
• Real-time assistance. Software that recommends actions during a live hand is where rooms tend to draw the hardest line.
• Automated play. A program making decisions for you is the classic bot, and the scenario RTS 16A was written to warn about.

Detection methods are, understandably, not published in detail. What rooms can and do disclose is the policy itself, the reporting route and what happens to funds recovered from banned accounts. When you compare rooms, compare those three disclosures.

What happens when your connection drops mid-hand?

Every online player eventually meets the lag spike that lands just as they are facing an all-in. What happens next is not left to chance or goodwill. RTS 10 deals with interrupted gambling, and it applies to peer-to-peer gaming.

RTS requirement 10A says a room’s policies on service interruptions must be fair and must not systematically disadvantage customers. For games with multiple participants, which includes a poker hand, the guidance says interruptions should be dealt with fairly on a case-by-case basis. RTS 10B requires systems to be able to recover from failures, including voiding gambles and returning stakes where appropriate, and to keep enough information to restore an event to its pre-failure state. The guidance lists the state of a deck of cards and any hands already dealt as information to be restored.

RTS 10C obliges rooms to publish how they handle common interruption scenarios, though not every conceivable one. If you play multi-table tournaments with sizeable buy-ins, read the cancellation section before you register, not after the room’s servers go down during the bubble.

Desktop client, browser or phone app

Poker rooms deliver their software in three broad formats, and the choice affects more than screen size. Some rooms offer all three; others focus on one. No standard names a minimum specification for a player’s device, so the practical differences come down to how each format handles multiple tables, hand histories and security prompts.

There is one legal detail about trying before you deposit. Since 7 May 2019, licensed operators must verify age and identity before customers can deposit or gamble, and that includes free-to-play versions of their games. If you want to test a client on play-money tables at a licensed room, expect to complete checks first. That is mildly annoying and also a decent early test of how smoothly the room’s verification process runs.

How your login and balance are protected

Poker accounts are attractive targets. A hijacked account can be used to chip dump a balance to a thief sitting at the same table, which turns an ordinary password leak into lost money within minutes. The Gambling Commission’s remote technical standards include a security section built on Annex A of ISO/IEC 27001:2022, which replaced the 2013 version as the reference.

Those security requirements focus on critical systems. The Commission lists them: systems handling sensitive customer information such as card details, authentication information and account balances; systems that generate or process random numbers used for game outcomes; systems that store results or the current state of a gamble; entry and exit points to those systems; and networks carrying sensitive customer information. The controls drawn from the ISO standard include access control, secure authentication, protection against malware, logging, clock synchronisation, use of cryptography, network segregation and separation of development, test and production environments.

Money protection is a separate issue from login security. Every licensee has to tell you how customer funds are protected if the business becomes insolvent, rated as not protected, medium protection or high protection. For poker this matters more than it first seems, because a room’s pooled balances are the source of every player’s winnings.

Your side of the bargain is straightforward. Use a unique password, switch on two-step login if the room offers it, keep the client updated and never share your account. Account sharing typically breaches the terms at licensed rooms and can void a balance.

Rake, briefly

A poker room earns nothing from who wins a pot. It charges for the table. In cash games that charge is rake, a percentage taken from each pot up to a maximum amount (the cap). In tournaments it is an entry fee added to the buy-in. Rooms publish these structures, usually on a page called something like “rake and fees”, and the figures vary by stake, game and number of players.

Here is a worked illustration using invented round numbers, not any real room’s structure. Suppose a room took 5% of each pot up to a £2 cap. A £20 pot would pay £1. Double the pot to £40 and the charge becomes £2. Grow it to £200 and it stays at £2, because the cap has been reached. At small stakes, nearly every pot pays the full percentage; at larger stakes the cap kicks in and the effective rate falls. That is the core reason rake bites hardest at the micro stakes where most new players start.

Poker promotions at licensed rooms now sit under two rules that took effect on 19 January 2026: wagering requirements are capped at 10 times the bonus, and promotions mixing products (for example, requiring casino play before a poker reward is released) are banned. If a room shares a wallet with a casino, our guide to UK online casinos covers the separate slot rules, including the stake limits that do not apply to poker.

Where licensed rooms still frustrate players

Licensed British poker is well regulated on paper, and in several places the regulation creates genuine friction. Pretending otherwise would be poor engineering reporting.

• Verification before play. Identity checks come first, including for play-money tables, which slows down anyone who just wants to try a client.
• Financial vulnerability checks. These run once net deposits reach £150 in a rolling 30 days (the threshold since 28 February 2025). They use public records and do not affect your credit score, but tournament regulars with lumpy deposit patterns hit them regularly.
• Opaque detection. Rooms publish their policies but not how they detect bots or collusion. You are trusting a process you cannot inspect, backed by a regulator that can.
• Inconsistent tool rules. Because RTS 16 lets each room set its own permitted software list, a HUD that is fine at one site can get your account closed at another.
• Payment limits. Credit cards have been banned for gambling since 14 April 2020, including e-wallets funded by credit, and crypto is rarely offered.
• Tighter promotions. Remote gaming duty rose from 21% to 40% for accounting periods beginning on or after 1 April 2026. How individual groups respond is their decision, but rewards budgets face pressure.

Withdrawal friction is the other common complaint across British gambling generally. In a July 2024 blog, the Gambling Commission said withdrawal delays were the top complaint topic it received, at about 2,000 a year, and made clear operators should not ask for extra information only because a customer has requested a withdrawal. If fast cash-outs matter to you, our guide to fast withdrawal casinos explains the payment rails involved.

A pre-install checklist for any room

We would run through this list before downloading any poker client, whatever the brand. None of it takes long, and each step maps to a rule described above.

• Run the licence lookup. Copy the account number printed near the bottom of the page into the Gambling Commission’s online register, then make sure the status reads active and the web address you are on appears in the list of domains.
• Find the fair play page. RTS 11B and 16B mean it should explain cheating policies, what software is permitted and how to report suspicions.
• Look for a bot disclosure. Check whether the room states that automated players may be present and how it responds.
• Read the interruption policy. RTS 10C requires one. Pay attention to tournament cancellation rules.
• Check funds protection. Look for the not protected, medium or high rating.
• Note the dispute route. Complaints go to the operator first, which has up to 8 weeks, then to its approved alternative dispute resolution provider, commonly IBAS.
• Read the rake page. Write down the percentage and cap for the stake and table size you actually play.
• Set limits on day one. Since 31 October 2025, a new account asks you to choose a financial limit ahead of the first deposit. Lowering a limit is immediate; raising one needs at least 24 hours and a confirmation.

If your interest in poker has drifted towards rooms that sit outside the licensed system, our guide to poker not on GAMSTOP explains what disappears from this checklist when there is no British licence behind the software.

Online poker sites: questions we get asked

Is online poker rigged to create bad beats?

Not at a licensed room. RTS 7A bans adaptive behaviour, meaning a game cannot be adjusted to change outcome probabilities during play, and RTS 7B stops random numbers being discarded to reshape a deal. Online play simply shows you far more hands per hour, so rare results appear more often in absolute terms.

Who tests the random number generator at a UK poker site?

An approved test house, before release. Any later change to the RNG, to the way numbers are mapped to cards, or to game rules counts as a major update and needs external retesting. Licensees also face an annual games testing audit.

Are poker bots allowed on UK-licensed sites?

Each room sets its own rules, but RTS 16 requires rooms to warn customers where bots or software-assisted players may be present, say what third-party software is permitted, and take steps to detect prohibited tools. If the operator runs automated players itself, it must disclose that clearly.

What should I do if I think two players are colluding?

Note the table name, time and the hand numbers from your history, then use the room’s reporting route. RTS 11B requires licensed rooms to explain how to complain about suspected cheating, and RTS 11A requires them to keep records detailed enough to investigate it.

What happens to my chips if the site crashes during a hand?

Licensed rooms must be able to restore a game to its last known state or void it where appropriate, and multi-player hands are handled case by case under RTS 10. Each room must publish its interruption policy, including how tournaments are treated.

Can I play online poker on a Mac or phone?

Usually, through a downloadable client, a browser version or an app, depending on the room. All formats connect to the same servers and deck, but multi-tabling and hand history features are typically strongest in desktop clients.

Is there a maximum stake at UK poker tables?

There is no statutory one. The per-spin caps that arrived in 2025, £5 for adults aged 25 and over from 9 April and £2 for 18 to 24 year olds from 21 May, were written for online slots and leave cash games and tournament buy-ins untouched.

Is GAMSTOP relevant to poker rooms?

Very much so. Participation became a licence condition for online operators on 31 March 2020, which means one GAMSTOP registration shuts you out of standalone licensed rooms and the poker tabs inside licensed casino and sportsbook brands alike.