KYC—“know your customer”—is the process a regulated gambling operator uses to confirm who holds an account and, in relevant markets, whether that person is old enough to gamble. It can involve automated database checks or documents such as photo ID and proof of address. Separate financial or source-of-funds checks can be requested when legal, anti-money-laundering or safer-gambling duties require more information. There is no single verification time that applies to every customer.
Key takeaways
- Age and identity verification is normal at regulated online casinos.
- Photo ID, address evidence and payment ownership are different checks and may be requested at different stages.
- Source-of-funds evidence is not the same thing as basic identity verification.
- UKGC guidance says basic ID should not be delayed until withdrawal if it could have been requested earlier.
- Submit sensitive documents only through a verified secure channel and redact information only if the operator confirms it is acceptable.
What KYC is trying to establish
Basic KYC answers three questions: is this a real person, is the account information consistent with that person, and is the person legally old enough for the product in the relevant jurisdiction? Gambling operators also use customer information to detect duplicate accounts, fraud, payment abuse and other risks.
The process can be invisible when electronic data sources verify details automatically. If that fails or information conflicts, the operator may ask for documents. A manual request is therefore not necessarily a sign that the account has done something wrong.
Common identity documents
A passport, driving licence or national identity card can be used to show name, date of birth and photograph where the operator accepts that document. Requirements vary by country and operator, so do not upload extra documents “just in case”. Provide only what the authenticated request asks for.
Images generally need to be readable and complete enough to verify authenticity. Cropping security features, editing dates or using screenshots of a document image can cause rejection. If the operator allows specific details to be obscured, follow its written instructions rather than improvising.
Proof of address and account consistency
Proof of address can include an accepted bank statement, utility bill, government correspondence or other document showing your name, address and a recent date. The operator’s list and acceptable age of the document can differ, so use its current guidance.
Address checks can fail when customers use an old address, transliterate names differently, omit apartment information or register while travelling. Correct the account through support rather than creating a second account, which can trigger a separate risk flag.
Payment ownership checks
Casinos may need to confirm that the payment method belongs to the account holder. A request can involve a limited card image, statement or e-wallet evidence. Never send a full card security code. If a document contains unrelated transactions, ask whether the operator accepts an appropriately redacted copy before modifying it.
Using a friend’s card or bank account can create both fraud and compliance issues even when permission was given. The safest approach is to deposit and withdraw with methods held in your own name.
What source-of-funds checks mean
Source-of-funds checks go beyond proving identity. They seek evidence about where gambling money originated, for example salary, savings, sale proceeds or another legitimate source. The depth of evidence depends on risk, legal duties and customer circumstances.
A request for bank statements or income information is sensitive, so verify the operator’s licence and contact route first. Ask which period and which evidence are required. A regulated operator should have privacy and retention information, and staff should be able to explain the purpose of the request in general terms.
KYC and withdrawals
Verification can affect withdrawals when an operator still needs information to meet legal or security obligations. However, UKGC guidance says an operator should not make age and identity verification a last-minute withdrawal condition when it could have asked earlier. If a new request appears at withdrawal, ask whether it is basic identity verification, payment ownership, AML information or another specific check.
That distinction matters for complaints. Keep the original request, your submission date, any rejection reason and the operator’s stated next step. withdrawal stages explains where verification fits.
How long verification takes
There is no responsible universal promise such as “KYC always takes 24 hours”. Automated checks can complete quickly, while manual reviews, unclear documents, weekends, additional AML questions or third-party validation can add time. The operator’s published service target is more useful than a generic industry number.
If there is no update within the operator’s stated timeframe, contact support and ask whether the case is awaiting a document, manual review or external check. Avoid uploading repeated versions unless requested, because duplicates can complicate the review.
How to submit documents safely
Begin from a domain you have verified through the regulator. Sign in directly rather than using a link from an unsolicited message. Use the account’s secure upload tool or another method the operator explicitly identifies. Turn on account security features where offered, use a unique password and secure the email account linked to gambling services.
If anyone asks you to share a one-time banking code, remote-control your device, send cryptocurrency to “verify” a wallet or pay a fee to unlock KYC, stop. Those are not ordinary identity-verification steps.
When to complain
A rejected document is usually a service issue first: ask what requirement it failed. Escalate to a formal complaint if the operator repeatedly changes the requirements without explanation, does not follow its published process, or appears to be using verification as an unreasonable barrier to access to funds.
For a Great Britain-licensed operator, the formal complaint and ADR route is the correct escalation mechanism for eligible unresolved disputes. Keep the evidence factual and chronological.
FAQ
Can a casino verify me without documents?
Yes. Operators may use electronic data sources. Documents are often requested when automatic checks are incomplete or additional evidence is required.
Why does a casino need proof of address?
It can be used to confirm identity details, jurisdiction and account consistency, and to support regulatory or fraud controls.
Is source of funds the same as source of wealth?
No. Source of funds concerns the origin of money used for a transaction or gambling activity; source of wealth is broader and concerns how a person accumulated overall wealth. Operators may use different terms and requirements.
Can I cover parts of a bank statement?
Only if the operator confirms the redaction is acceptable. Altering evidence without guidance can cause rejection.
Why was I asked for KYC when withdrawing?
The operator may still need a legal, AML, security or payment-ownership check. Ask which specific check is outstanding, especially if basic identity could have been verified earlier.
How can I tell a document request is genuine?
Verify the casino domain and licence, sign in directly, find the same request inside the authenticated account and use the operator’s official upload process.
Conclusion
KYC is a compliance and security process, not a fixed document checklist. The best way to make it predictable is to keep account details accurate, use payment methods in your own name, respond through secure channels and ask the operator to identify the exact check when additional information is required.
Sources
- UK Gambling Commission — basic age and identity verification and withdrawal timing
- UK Gambling Commission — financial information and source-of-funds context
- UK Gambling Commission — operator and domain verification before sharing documents
- UK Gambling Commission — withdrawal rights and complaint route
How this page was prepared
Reviewed by HolySlots Editorial Team. Claims, terminology, and time-sensitive details were checked against the sources listed below and the page was last updated September 15, 2026.
AI-assisted tools supported research organization or drafting; editorial review remained responsible for source selection and the published conclusions.