Skip to content
Gibraltar
Wire

Sections

Alerts

What do you want to understand?

No KYC casinos: what the identity rules actually require

Published: 6 min read

Last reviewed · Editorial policy

An empty wooden table in a quiet study at dusk, a polished brass balance scale at its centre, warm lamplight pooling on dark walnut, a tall window behind showing a soft blue twilight sky.

A sourced look at what know-your-customer checks involve at gambling sites, how British & Curaçao rules handle them, & why accounts can still be checked after sign-up.

What KYC means at a gambling site

KYC is short for “know your customer”. It describes the checks a business makes to confirm who it is dealing with & whether their money is legitimate.

According to the UK Gambling Commission, gambling companies ask for ID for three main reasons: to check you are old enough to gamble, to check whether you have self-excluded, & to confirm your identity. Self-exclusion is when a person asks to be blocked from gambling.

The Commission says companies may also ask for financial information. Bank statements can be requested “to help check that your source of funds are legitimate”, as part of anti-money laundering checks. These are controls meant to keep criminal money out of a business.

The Commission frames this as part of a wider duty. In its words, gambling companies “want to keep crime and money laundering out of the gambling industry and do not want their customers falling into financial difficulties.”

What ‘no KYC’ usually means

The sources do not define “no KYC” as a term. When Investigate Europe tested AI chatbots, its prompts included requests for sites that don’t require identity checks, & Google’s Gemini told users in Poland that “choosing a casino without verification is a popular trend in 2026 among players who value privacy and instant payouts”.

The sources do not show that skipping checks at sign-up means no checks ever. Even under British rules, the Gambling Commission says there may be occasions when a business can only ask for information at the point of withdrawal “in order to fulfil legal obligations”.

Crypto rules in Curaçao point the same way.

The licensed standard in Great Britain: verify before you play

Verification is often electronic. The Commission says companies can match an account against databases such as credit referencing agencies & the electoral roll, which may make the process instant. If that is not enough, customers are asked for copies of documents, which can take longer.

The rules also cover withdrawals. A gambling business “can’t ask you to prove your age and identity as a condition of withdrawing your money if they could have asked you at an earlier point.” If more information is needed for anti-money laundering checks, the business should ask promptly, not only when you want to withdraw.

The Commission warns that a business delaying a withdrawal because of insufficient ID may be in breach of Licence Condition 17, Customer identity verification, & may face regulatory action.

Curaçao is tightening its rules

Curaçao has introduced binding rules on identifying customers remotely, the Curaçao Chronicle reports. The Provisions for Identification & Verification without Physical Contact took effect on 21 August; the article does not state the year.

The rules were developed jointly by the Curaçao Gaming Authority (CGA), the Central Bank of Curaçao & Sint Maarten & the Financial Intelligence Unit Curaçao. They apply to all service providers under the National Ordinance on Identification when Rendering Services, known as NOIS, not only gambling companies.

Passports, identity cards, driving licences & other documents designated by the Minister of Finance can be used. Providers may use document scanning & video verification. Automated systems must be able to confirm that the person is physically present rather than a photograph, recording or other impersonation.

Businesses starting remote onboarding must comply before launching their systems. Those already using remote identification have until 1 May 2027 to comply fully.

The CGA has also issued a crypto policy guideline for holders of its business-to-consumer online gambling licences, iGaming Business reports. It took effect in June 2026, with full compliance expected within 12 months, by June 2027.

Sanctioned wallets, mixers & operators acting as exchanges were prohibited immediately. iGaming Business says the guidance aligns with standards urged by the Financial Action Task Force (FATF), including the Travel Rule, a transparency requirement for virtual asset transactions.

Your wallet is checked too

Under the CGA guideline, licensees must have blockchain analytics capability. That means mandatory wallet screening, risk-scoring & transaction monitoring at deposit & withdrawal, according to iGaming Business.

Funds linked to mixers, tumblers or sanctioned addresses are prohibited outright. Fiat-backed stablecoins, which are tokens tied to ordinary currencies, are preferred. Privacy coins, meme coins & wrapped tokens of unclear origin require assessment or exclusion.

Licensees may only accept crypto for gambling, not act as exchanges or custodians. Player, operational & treasury wallets must be kept separate.

iGaming Business notes that operators will need to build wallet screening & chain analytics infrastructure “that many offshore firms have long ignored”. It also says challenges persist around privacy coins, wrapped tokens & decentralised finance.

When checks are triggered & what you may be asked for

In Great Britain, the main check comes before any betting. The Commission says the documents a business can request include passports, driving licences & household bills, though it does not set which types must be asked for.

A selfie may be requested if a business suspects fraud on an account. The Commission’s example is identity theft, where an account is opened in someone’s name but that person is not the one gambling.

Financial checks can follow patterns of play. The Commission says companies profile customers to spot signs that someone may be gambling with money they do not have, & may ask for bank statements or details of irregular income, such as a pending house sale.

Companies also look at deposit or loss thresholds based on income, using open source data & Office for National Statistics publications. For crypto in Curaçao, the CGA guideline makes deposit & withdrawal the points at which wallets are screened.

The cost of going anonymous

Investigate Europe states that casinos lacking national licences for the countries where they operate “do not offer the same consumer protections as legal operators, and may expose players to the risk of scams or fraud.”

Self-exclusion schemes such as Gamstop in the UK & Oasis in Germany are mandatory for locally regulated firms & allow individuals to block their access to all legal online gambling in the country, according to Investigate Europe. Sites outside those schemes are not covered by them.

Over two weeks, Investigate Europe tested seven AI chatbots across 10 European countries. In three quarters of replies, the chatbots recommended sites not licensed in Europe. Asked for sites without identity checks, Grok, Meta AI & Gemini recommended unlicensed operators in all countries.

A UK Gambling Commission spokesperson told Investigate Europe that protecting consumers from unlicensed overseas operators “who will often seek to scam and defraud British consumers” is a priority.

What the sources suggest checking before depositing

The sources do not set out a full checklist of terms. They do point to a few questions that decide what protections apply.

One is who licenses the site & for which country. Investigate Europe’s reporting ties consumer protections & self-exclusion coverage to holding a national licence where the site operates.

Another is when verification happens. In Great Britain, the Commission expects it before betting & limits ID requests at withdrawal.

A third is the complaint route. The Commission says that if you are unhappy with information requested, you should contact the company directly & follow its complaints process.

Questions

Can a British-licensed site ask for ID only when I withdraw?

The UK Gambling Commission says a business can’t make proving age & identity a condition of withdrawal if it could have asked earlier. There may be occasions where it can only ask at that point to meet legal obligations.

Do Curaçao-licensed crypto casinos check wallets?

Under the Curaçao Gaming Authority’s crypto guideline, licensees must screen, risk-score & monitor wallets at deposit & withdrawal, with full compliance expected by June 2027. Funds linked to mixers, tumblers or sanctioned addresses are prohibited.

Why might a gambling site ask for a selfie?

The UK Gambling Commission says a selfie may be requested if a business thinks there may be fraudulent activity on an account, such as an account opened with a stolen identity.

Sources

Sources checked 11 October 2026. Information only. 18+.

Discussion

Ask a question, add useful context or share a source. Keep it relevant & respectful.

Add a comment

Comments are reviewed before publication.

Your comment

Your email address will not be published. Required fields are marked .

The InfoBets Brief

A clearer view.
Once a week.

Three useful reads & one takeaway. Betting, padel & industry information, every Friday at 12:00 Gibraltar time. Free.

Read the Brief

We will email a confirmation link before subscribing you. Privacy policy.

The InfoBets Brief

Three useful reads & one takeaway, every Friday at 12:00 Gibraltar time. Free.

Or get the Brief on Telegram, every Friday:

Get the Brief on Telegram

Read the latest Brief