MawarSlotResmiLicensing & player protection

Compliance

Anti-money-laundering in gambling

Which operators the money-laundering rules actually bind, what due diligence requires, and why a delay you cannot get an explanation for is not automatically a bad sign.

Last reviewed: 18 September 2026MawarSlotResmi Editorial Desk

In short

Gambling is treated as a money-laundering risk because it moves cash at volume and can convert it into apparently legitimate winnings. In Great Britain the Money Laundering Regulations’ customer due diligence machinery applies within gambling to casinos — betting, bingo, lotteries and arcades are not on that list, though they remain bound by proceeds-of-crime law and by a licence condition requiring a money-laundering risk assessment. For a player this shows up as document requests, questions about where money came from, delays, and sometimes an operator that is legally forbidden from explaining itself.

Why gambling is within scope at all

The vulnerability is structural rather than a judgement about the industry. Gambling converts stakes into winnings, and winnings look like clean money with a plausible story attached. High transaction volumes, fast turnover and (in land-based settings) cash make the sector attractive for placing and layering funds.

The response is a set of obligations on operators: know who the customer is, understand the relationship, monitor it, apply more scrutiny where risk is higher, and report suspicion to the authorities. None of those obligations is owed to you as a customer — they are owed to the state — which is why they can feel opaque from the inside.

Who the rules actually bind — narrower than most writing implies

What binds which gambling operators in Great Britain
InstrumentWho it bindsWhat it requires
Money Laundering Regulations 2017CasinosCustomer due diligence, ongoing monitoring, enhanced due diligence, and the supervisory regime that goes with them
Proceeds of Crime Act 2002 and the Terrorism Act 2000All gambling operatorsCriminal offences relating to handling criminal property, and suspicious activity reporting
LCCP licence condition on money launderingAll licenseesA money-laundering and terrorist-financing risk assessment, reviewed at least annually, with proportionate policies, procedures and controls
LCCP condition on customer identityRemote licenseesVerifying name, address and date of birth before the customer may gamble — an identity and age requirement, not an AML one

Every figure and instrument on this page belongs to Great Britain. Other jurisdictions covered on this site have their own frameworks, recorded on their own jurisdiction pages.

The two check regimes, and why they get confused

Being asked for documents does not tell you which regime you are in, and the difference determines whether what is happening is normal.

Identity and age verification
A gambling-licensing requirement applying to remote licensees generally. Name, address and date of birth, verified before the customer gambles. The regulator's position is that information should not be sought at withdrawal where the operator should have sought it earlier. See KYC verification.
Customer due diligence
An AML requirement, applying within gambling to casinos. Risk-based, ongoing, and capable of being triggered at any point in the relationship by activity rather than by a timetable. A request arising here can legitimately come later.

So: a basic identity check appearing for the first time at withdrawal is the first regime happening late. A source-of-funds question arising after a change in your activity is the second regime working as designed. They feel identical and are not.

The due-diligence tiers

Due diligence is tiered by risk rather than applied uniformly.

  • Standard due diligence — identifying the customer and verifying that identity, and understanding the relationship. In casinos this attaches to defined transaction thresholds as well as to the opening of a relationship.
  • Ongoing monitoring — scrutinising activity over time to check it remains consistent with what the operator knows about the customer, and keeping that information up to date. This is why a long-standing account can suddenly attract questions: it is the obligation functioning, not a change of mind.
  • Enhanced due diligence — a higher tier for defined higher-risk situations. Source of funds and source of wealth live here.

What triggers enhanced due diligence

The regulations set out the circumstances. In outline they include:

  • a business relationship or transaction with a person established in a high-risk third country;
  • a customer who is a politically exposed person, or a family member or close associate of one;
  • a case where the customer has provided false or stolen identification documentation;
  • a transaction that is unusually large, or unusually complex;
  • an unusual pattern of transactions with no apparent economic or legal purpose.

Two of these were narrowed by amendments in 2026: the high-risk-country trigger was tied to the international standard-setter’s “call for action” list rather than also its increased-monitoring list, and the word “complex” became “unusually complex”. Both changes reduce the range of situations requiring the enhanced tier.

What this means for you in practice

How AML obligations show up in a player account
What you experienceWhat is behind it
Document requests when you open an accountStandard identification and verification
Questions after a change in your pattern of play or depositsOngoing monitoring
Being asked where deposited money came fromSource of funds, in the enhanced tier
Being asked how your wealth was accumulatedSource of wealth — a higher bar again
A withdrawal held while a review happensDue diligence, or an identity check happening late
An account restricted or closed with little explanationPossibly a due-diligence failure, possibly a report the operator cannot discuss
A vague answer that never becomes specificPossibly the tipping-off offence — see below

Keep records of everything you send and when. Whatever is behind a delay, your position in a later complaint depends on being able to show what was asked and when you answered it.

What is not a red flag about the operator

It is easy to read compliance as hostility, and that leads people to escalate the wrong things and miss the right ones.

Equally, none of this excuses the following, which remain legitimate complaints:

  • basic identity documents demanded for the first time at withdrawal, after months of uneventful play;
  • requests that keep changing without explanation;
  • an operator’s own stated timeframe passing with no update;
  • risk profiling that only begins once your balance grows — a pattern the Gambling Commission has criticised operators for;
  • any demand for a payment to release your own balance, which is never part of due diligence.

The escalation route sets out what to do about these.

What we could not verify, and are therefore not claiming

One further observation belongs here because it affects how you should read official guidance generally. The Gambling Commission’s current anti-money-laundering guidance for casinos — a document carrying a 2025 last-updated date — still contains a passage referring to regulations that were superseded years earlier. The operative framework through the rest of the guidance is the current regulations. It is a reminder that an official source being current in date does not guarantee every passage within it has been revisited.

Common questions

Does anti-money-laundering law apply to my betting account?

Not the due-diligence machinery of the Money Laundering Regulations, which within gambling in Great Britain applies to casinos. Your operator is still bound by proceeds-of-crime law, by suspicious activity reporting, and by a licence condition requiring a money-laundering risk assessment — and separately by the requirement to verify your identity and age before you gamble.

Why are they asking now, after years without a question?

Ongoing monitoring is continuous, not a one-off at registration. A change in deposit size, frequency, payment method or pattern of play can prompt a review. It can also be an identity check that should have happened at the start — which is a complaint rather than a wait.

Can they freeze my balance?

Accounts can be restricted while a review is carried out, and where due diligence cannot be completed the regulations require an operator to refuse the transaction and terminate the relationship. What then happens to a balance depends on the terms and the circumstances, and is a legitimate subject for a complaint and for dispute resolution.

Is there a deposit amount that avoids checks?

That is the wrong question, and structuring deposits to stay under a threshold is itself a recognised laundering pattern that monitoring is designed to detect. Thresholds are a floor for certain obligations, not a ceiling on scrutiny: risk-based monitoring applies regardless of amount.

Primary sources

Each link below goes to the issuing authority’s own website. Where a page could not be retrieved by our automated checks, that is stated rather than hidden.