Why Online Casinos Ask for Your Documents (KYC Explained)
Few things frustrate new players more than winning and then being told a withdrawal is on hold pending “verification”. The process has a name — Know Your Customer, or KYC — and it isn’t the casino being difficult. It is a legal obligation under UK gambling and anti-money-laundering law.
What the casino has to establish
UK Gambling Commission rules require operators to verify, before allowing a customer to gamble, that the person is:
- At least 18. Age verification must be completed before any deposit or play, not just before withdrawal.
- Who they say they are. Name, date of birth and address must be confirmed.
- Not self-excluded. Every registration is checked against GamStop.
Separately, anti-money-laundering regulations require operators to understand the source of funds where deposits or activity reach certain thresholds, and to keep records.
How verification usually works
Most casinos run an automatic check at sign-up, matching your details against credit reference and electoral data. If that succeeds, you may never be asked for a document. If it fails — a recent house move, a name variant, a thin credit file — you’ll be asked to upload:
- Proof of identity: passport, driving licence or national ID card.
- Proof of address: a utility bill, bank statement or council tax letter, usually dated within three months.
- Proof of payment method: an image of the card used (with the middle digits hidden) or a screenshot of an e-wallet account.
Source-of-funds checks
If your deposits or losses reach a level the operator deems significant, you may be asked how you fund your play — payslips, bank statements or similar. Since 2025 the Commission has also required “frictionless” financial vulnerability checks once net deposits pass £150 in a rolling 30-day period. These run in the background using credit reference data and shouldn’t require anything from you unless a concern is flagged.
Getting through it quickly
- Verify at registration, not at withdrawal. Most sites let you upload documents from your account page at any time.
- Use the same name and address that appear on your bank account and ID.
- Photograph documents flat, in good light, with all four corners visible.
- Make sure the address on your proof matches the one you registered.
- Don’t deposit with a card in someone else’s name; it will be rejected at withdrawal.
Your data
Operators must handle documents under UK GDPR. Reputable sites explain their retention periods in the privacy policy. You are entitled to ask what is held and to have it deleted once legal retention periods expire.
Why it protects you as well
KYC is the mechanism that stops someone else using your card, keeps self-excluded people out and makes a licensed casino accountable for who it takes money from. The friction is real; the alternative — sites that ask nothing and then refuse to pay — is worse.
If a casino’s requests seem excessive or unclear, ask support to specify exactly which document is needed and why. If you can’t resolve it, the Gambling Commission’s complaints guidance explains next steps.
