Compliance
KYC (Know Your Customer)
Know Your Customer
Definition
The identification, verification, and risk assessment of players, performed at onboarding and refreshed periodically. The foundation of AML compliance and one of the largest sources of conversion friction.
Key takeaways
- KYC is the identification, verification and risk assessment of players, carried out at onboarding and refreshed over time.
- It covers identity, address and age checks and sanctions and PEP screening, and it feeds AML monitoring.
- Some markets require full KYC before any deposit, others before withdrawal, and regulation is moving towards upfront checks.
Why it matters
KYC is one of the foundational operator compliance disciplines and one of the largest sources of customer friction in the funnel. The discipline combines identity verification (typically through document scanning, biometric matching, and database lookups), address verification, age verification, sanctions and PEP screening, and risk-based assessment that feeds the operator's AML monitoring programme. The work has shifted heavily toward automation through eKYC vendors over the past decade.
KYC timing differs across markets. Some regulators require complete KYC before any deposit (mandatory upfront KYC). Others permit deposit with KYC required before withdrawal (deferred KYC). The difference matters substantially for conversion: mandatory upfront KYC markets see materially lower registration-to-FTD conversion than deferred markets. Pay N Play is an alternative model that uses bank authentication as the KYC primary, achieving frictionless onboarding without compromising the verification standard. The pattern of regulatory tightening generally favours mandatory upfront KYC over deferred models.
Sources
- LCCP Condition 17.1.1: Customer identity verification - Gambling Commission
Frequently asked questions
Is KYC a one-time check?
One-time at onboarding for the formal initial verification, but with refresh triggers and ongoing monitoring of the same data points. Material changes (address, payment method, behaviour) typically trigger refresh. Higher-risk profiles have shorter refresh cadences. AML monitoring is continuous through the customer relationship.
How long does eKYC verification take?
For clean low-risk profiles, often seconds. For profiles requiring manual review, hours to days depending on operator workflow and document quality. The trend toward higher automation has compressed verification times substantially over the past decade.