WinLion KYC and AML: Why Verification Matters Before Your First Withdrawal
Identity checks are a normal part of online gambling. This page explains WinLion's Know Your Customer policy, which follows the framework for gaming operators licensed in Anjouan. For the brand overview, see the plain-language WinLion Canada overview.
What the policy is for
The policy sets mandatory procedures for verifying players, preventing fraud, following anti-money-laundering (AML) and counter-terrorist-financing rules, and keeping the gaming environment safe and transparent. How the licence checks out is covered under who stands behind the operator. Its stated goals are compliance with local and international rules, including the FATF recommendations, protecting players from underage play and financial crime, lowering risk from high-risk jurisdictions and suspicious transactions, and safeguarding player funds.
Who it applies to
It covers every player who registers, the casino's business relationships with third-party service providers, and any transactions that exceed set thresholds or are flagged as high-risk.
The rule that affects you most
You can complete KYC right after registering, and you must complete it before your first withdrawal, whatever the amount. Nothing is paid out until verification is finished, which is why sending documents early saves waiting later. How payouts and support rate overall is shown in the casino review with scores.
Three principles behind every check
- Risk-based approach. The depth of checking depends on the player's risk profile.
- Record retention. Verification documents and transaction records are kept for at least five years.
- Continuous monitoring. Behaviour and transactions are watched for suspicious activity.
What you will be asked for
At registration the casino collects your full legal name, date of birth, nationality, home address, email, phone number and payment details. For verification it needs:
- a valid government photo ID showing your name and date of birth, such as a passport, national ID card or driver's licence;
- proof of address, such as a recent utility bill, bank statement or government letter no older than three months;
- proof that you own the payment method you use, such as a bank statement or a screenshot.
The date of birth confirms you meet the minimum legal age, and the payment proof stops a stranger's card or wallet from being used on your account.
How players are sorted by risk
The casino groups players by three factors: where they live, with attention to countries flagged by FATF; how they play, such as frequent or high-value transactions; and who they are, for example politically exposed persons or people with negative media coverage. Low-risk players go through standard due diligence. High-risk players go through enhanced due diligence.
When checks get stricter
Higher-risk situations trigger enhanced due diligence. These include politically exposed persons, players from high-risk jurisdictions, unusual or complex activity, and transactions or linked transactions above USD 10,000. The casino may then verify your source of funds and wealth, run more identity checks and monitor the account more often.
Politically exposed persons
This group includes people who hold or have held prominent public roles, plus family members and close associates. The policy asks for comprehensive checks through third-party databases, approval from senior management before the relationship starts, and regular review of the account for unusual activity.
Sanctions screening
Players are screened against consolidated sanctions and watchlists. The policy names the UN sanctions list, the EU consolidated list, the Australian sanctions list, the US Treasury OFAC list and the UK HM Treasury list.
Ongoing monitoring
Verification is not a one-off. Automated tools watch for large deposits or withdrawals, rapid movement between accounts and many small payments meant to dodge thresholds. The casino also looks for patterns that may point to problem gambling, fraud or money laundering.
Reviews can be triggered by activity after a long quiet spell, by changes to your address or payment method, or by alerts from monitoring services. If you change your details, expect a possible re-check.
Reporting and records
Suspicious activity is reported within seven days of detection, with details of the player, the transaction and the reasons for suspicion. Transactions above USD 10,000 are reported even without suspicion. KYC records are kept for at least five years after the relationship ends, stored securely in line with data protection law, used only for verification and compliance, and available to regulators on request.
Oversight inside the company
Each operator must appoint a compliance officer who oversees KYC, liaises with regulators and makes sure suspicious activity and transaction reports are filed. The policy also calls for periodic internal audits and staff training on spotting fake documents, recognising red flags for money laundering and meeting reporting duties.
What happens if rules are broken
Failure to comply can lead to fines, suspension or revocation of the operator's gaming licence, and referral for criminal investigation where applicable. The policy also encourages operators to review it regularly and to adopt better verification technology.
Why verification can take longer
Most delays come from the documents, not the casino. A blurry or cropped photo, a name that differs from the account, an address that does not match the utility bill, a bill older than three months, or a document sent from an unofficial channel will all hold things up. Higher-risk cases, such as large or unusual transactions, also need extra steps like proof of the source of funds. Sending everything correctly the first time is the fastest route.
What happens to your documents
The policy says KYC records are used only for verification and compliance, stored securely under data protection law, and made available to regulators on request. They are kept for at least five years after the relationship ends. If you want to know more about how your personal data is handled, the privacy policy explains your rights to access, correct or restrict it.
Tips for smooth verification
Use clear, uncropped photos. Make sure the name and address match your account exactly. Use documents that are current. Send them only through the casino's own site, never to someone who contacts you offering help.
Contact
Questions about the KYC policy: [email protected]. Everyday support: [email protected] or live chat.