AML and Verification at Bigwinbox Casino

We hold a remote gaming licence issued by the Malta Gaming Authority (MGA), and that licence obliges us to know who plays on our platform and where their money comes from. This page explains, in plain terms, how our verification works, when it applies and what we do with your documents.

Our Anti Money Laundering Commitment

Money laundering and terrorist financing are criminal offences, and our MGA licence binds us to the Prevention of Money Laundering and Funding of Terrorism Regulations. We operate a risk-based AML programme supervised by our appointed Money Laundering Reporting Officer (MLRO), whose job is to assess risk, escalate concerns and, where the law requires it, report suspicious activity to the Malta Financial Intelligence Analysis Unit.

Every account on our platform is screened against sanctions lists and politically exposed person (PEP) databases at onboarding and on an ongoing basis. We do not accept players from restricted jurisdictions, including the USA, France, the Netherlands, Italy, Spain, Belgium and Switzerland.

When We Verify Your Account

Verification (KYC) is not optional under our licence, but we keep it proportionate. Most checks run automatically in the background, and we only ask for documents when we genuinely need them.

• At registration: age verification (18+) and identity screening run automatically against electronic databases.
• At any time: if electronic checks cannot confirm your identity, address or age, we request documents before you can deposit or play.
• Before your first withdrawal: full KYC is always completed, covering ID, proof of address and payment method ownership.
• At thresholds: deposits, withdrawals or betting patterns that exceed certain internal limits trigger enhanced due diligence regardless of your history with us.

Documents we may ask for

We only ever ask for what the regulation requires, and never for documents that serve no verification purpose.

• Photo ID: passport, national identity card or driving licence, valid and showing all four corners.
• Proof of address: a utility bill, bank statement or official letter dated within the last 3 months.
• Proof of payment method: a photo of the card (masking the middle digits and CVV), a bank statement showing the account, or a screenshot of your e-wallet or crypto wallet showing your name.
• Additional evidence in enhanced cases: payslips, tax returns or other proof of the source of your funds.

How Verification Works Step by Step

The process is deliberately simple. Upload your documents through the secure verification area of your account, and our compliance team reviews them in strict order.

• Open the Verification section of your account profile.
• Select the document type requested and upload clear, uncropped photos or PDFs.
• Our compliance team reviews the submission and checks it against electronic records.
• If anything is unclear, we contact you by email with the exact issue; you then re-upload only the affected document.
• Once approved, your account status changes to verified and withdrawals are released.

Processing time and data protection

Standard reviews complete within 24 hours, and most straightforward submissions clear in a few hours during business hours. All documents are transmitted over TLS encryption and stored on access-restricted servers in the EEA. Only authorised compliance staff can view them, and we never share verification data with third parties except where the law obliges us to.

Why We Ask About Source of Funds

For most players a source of funds check never happens. We trigger it when deposits or play patterns are materially larger than average, for example when cumulative deposits reach levels set by our risk policy, or when a single deposit is out of line with your previous activity.

This is not an accusation. Licence conditions require us to be satisfied that money wagered on our platform comes from legitimate earnings, savings, investments, inheritance or other lawful origin. If we ask, acceptable evidence includes payslips, a pension statement, a bank statement showing savings, a property sale completion letter or dividend statements. The quicker you provide it, the quicker we lift any pending withdrawal hold, and we treat everything you submit as strictly confidential.

Deposit and Withdrawal Monitoring

Every payment in and out of our platform is monitored against your verified profile. Our systems flag unusual patterns, such as rapid deposit and withdrawal cycling, deposits inconsistent with declared income, or attempts to move funds through multiple payment methods.

Same-method withdrawals

We return funds by the same method you used to deposit, in line with MGA anti-money-laundering rules. If you deposited by Visa Debit, we withdraw to that same card; if you deposited by Bitcoin, we return funds to a crypto wallet you own and have verified. Where a method cannot technically receive withdrawals (such as Paysafecard), we return funds to a bank account or e-wallet in your name. We do not process withdrawals to accounts, cards or wallets belonging to anyone else, without exception.

If Verification Fails or Delays

If your documents are rejected, we tell you exactly why: a blurred edge, an expired document, a name mismatch. You can re-upload corrected documents at any time, and there is no limit on reasonable resubmissions.

If you simply do not provide the documents we request, we must act. Unverified accounts have deposits and play suspended after the period stated in our request, withdrawals remain blocked, and any remaining balance is held in a segregated account until verification is completed or the account is closed with funds returned to a verified source. In cases of suspected fraud, third-party account use or deliberate evasion of our checks, we may close the account immediately, forfeit winnings obtained through the breach and, where required, file a report with the relevant authorities. You have the right to appeal any decision through our support team at [email protected], available 24/7.

How Long We Keep Your Documents

MGA and anti-money-laundering law require us to retain verification records for five years after the end of our business relationship with you, and in some cases longer if an investigation is ongoing. Retention exists to protect both sides: it evidences that you were of legal age, that funds were legitimately sourced and that we met our obligations.

When the retention period expires and no legal hold applies, we delete or irreversibly anonymise your documents. You may request deletion of your account data at any time under GDPR, and we will honour it to the extent the law still requires us to keep specific verification records. To exercise this right, contact [email protected].

Frequently asked questions

Do I need to verify before I can play at Bigwinbox Casino?

No. Registration checks run automatically, and most players can deposit and play straight away. Full document verification is always required before your first withdrawal, or earlier if our electronic checks cannot confirm your age, identity or address.

How long does verification take?

Most submissions are reviewed within 24 hours. Straightforward, clearly photographed documents are often approved within a few hours.

Why was my withdrawal returned to a different method than I expected?

We must return funds by the same method you deposited with. If that method cannot receive withdrawals (for example Paysafecard), we send the money to a verified bank account or e-wallet in your own name.

Is it safe to send you my ID and bank statements?

Yes. Documents travel over encrypted connections, are stored on access-restricted servers, and only authorised compliance staff can view them. We never sell or share your verification data.

Can I refuse a source of funds check?

You can, but we would then be unable to release your withdrawals, since the check is a licence condition. Once you provide the evidence, holds are lifted and your play continues as normal.