AML & KYC
Betwinner AML policy sets controls against laundering, fraud, and account abuse. Anti-money laundering compliance follows FATF guidance and local betting rules. Players submit ID, address proof, and payment ownership evidence. Risk scoring and AI-driven monitoring flag odd deposits, rapid turnover, or linked wallets. Data is handled under GDPR duties, using encryption and access limits.
KYC verification process confirms identity before withdrawals or high-risk activity. Customer identification procedures can include selfie liveness and biometric checks where lawful. The platform screens sanctions exposure, PEP risk, and duplicate profiles. Users must keep documents current and report compromised devices. Extra evidence may be requested for source of funds. Users can request access or correction of stored data where law allows.

Anti-Money Laundering (AML) Policy
What is AML?
Anti-money laundering in betting means controls that block criminal funds entering gameplay. It targets laundering, terrorist financing, and fraud-linked payment flows. FATF standards rely on risk-based controls, identity checks, and ongoing monitoring. Virtual-asset risk is treated as a priority topic in FATF updates.
Key AML controls used on regulated gambling platforms:
- Customer due diligence and ongoing review for risk changes.
- Transaction screening for structuring, rapid turnover, and proxy funding.
- Sanctions and PEP screening as part of risk scoring.
- Record retention and audit trails for investigations.
Betwinner’s AML Commitments
Betwinner states operation under Curaçao master license #8048/JAZ via Antillephone N.V., with regulatory transition notes tied to Curaçao reforms. The Antillephone validator content describes license #8048/JAZ, names the Gaming Control Board of Curaçao as regulator, and flags a termination note after November 1, 2024 under new government rules.
Publicly circulated operator details for betwinner.com commonly reference PREVAILER B.V. as the license holder and HARBESINA LTD (HE 405135) as a billing agent in Cyprus; these details should be cross-checked against the operator’s own footer disclosures before reliance in a dispute.
Operational commitments typically expected under AML compliance in online casinos:
- Risk-based onboarding, including sanctions and PEP checks.
- Enhanced checks for high-risk profiles, including source of funds evidence.
- Controls for virtual assets, aligned to FATF virtual-asset standards.
- Data protection aligned to GDPR principles for lawful processing and security.
EU-facing expectations that often influence policy wording include the EU AML framework and the 5AMLD update path.
Procedures for Detection and Reporting
How Betwinner prevents money laundering is based on layered screening, event-based verification, and continuous monitoring. Monitoring uses AI-driven tools for anomaly detection, plus rule-based triggers for known typologies.
Typical monitoring and escalation steps:
- Collect identity and age evidence before withdrawals or risk triggers.
- Verify address and payment ownership when risk is elevated.
- Score activity for unusual patterns: rapid deposit–withdraw cycles, bonus abuse, collusion signals.
- For crypto: apply blockchain analytics to flag risky wallets and laundering clusters.
- Freeze or limit transactions while checks run, then decide on release or refusal.
- Document the case and follow SAR filing processes where the applicable regime requires reporting.
Reporting practice depends on jurisdiction. Many regimes require internal escalation first, then external suspicious activity reporting when thresholds are met.
User Responsibilities
Users must keep account data accurate and provide truthful documents. Failure to do so can block withdrawals and trigger investigations.
User duties during customer due diligence:
- Upload clear, unedited document images and valid expiry dates.
- Use payment instruments registered in the same legal name.
- Avoid third-party deposits, proxy wallets, or shared cards.
- Provide source of funds evidence if requested for large withdrawals.
- Report account takeover signs and change credentials immediately.
Data rights and obligations apply together. GDPR-based frameworks permit access and correction requests, while AML laws can require retention despite deletion requests.
Consequences of Non-Compliance
Non-compliance can lead to restrictions, payment refusal, and account closure. Cases with forged documents or confirmed criminal indicators may be escalated to authorities under applicable law.
Possible outcomes:
- Temporary limits until KYC or source-of-funds checks finish.
- Withdrawal holds during enhanced due diligence.
- Cancellation of transactions linked to prohibited third-party funding.
- Account suspension or closure for falsification or repeated evasion attempts.
- Reporting obligations triggered by suspicious activity thresholds.
AML requirements across jurisdictions (EU vs non-EU)
| Requirement area | EU-oriented expectation (5AMLD context) | Non-EU / mixed regimes (typical baseline) |
| Trigger for enhanced checks | Higher focus on risk scoring, UBO links, and stricter CDD refresh cycles | Risk-based, often less prescriptive, varies by local regulator |
| PEP and sanctions handling | Strong expectation of screening and enhanced measures for higher-risk PEP exposure | Screening common, depth and frequency vary by market |
| Virtual asset oversight | Increasingly formal expectations around traceability and VASP-aligned controls | Often policy-led, may rely on provider tooling and internal rules |
| Record retention | Documented audit trails aligned to AML directives and supervisory requests | Retention periods differ; operator follows the controlling legal framework |
| Reporting model | Formal suspicious activity reporting channels, defined obliged-entity duties | Reporting may exist but can be narrower or less standardized |
| Data protection | GDPR baseline for lawful processing, minimization, and security controls | Local privacy rules apply; GDPR may still apply for EU residents |