What Is KYC? A Practical Guide to Online Casino Verification in the Philippines and Asia
Updated: Sep 2
KYC stands for Know Your Customer. It refers to the procedures regulated businesses use to establish a customer's identity and evaluate potential risks associated with maintaining an account. These checks may take place when an account is created and can continue later if a customer's circumstances or activity require further review.
To understand what is KYC, and why the process has become increasingly important to Philippine regulators, it helps to begin with the basic concept before looking at how KYC applies to Filipino players and the broader Asian gambling industry.
For online gambling in the Philippines, KYC can include identity checks, age confirmation, location verification, payment-method checks, and source-of-funds reviews when a customer's risk profile requires additional scrutiny. Comparable elements are found in many Asian markets, although the exact requirements vary according to local laws and regulatory frameworks.
From a player's perspective, KYC may seem like an additional administrative task, particularly when completing verification for the first time. Its purpose, however, extends beyond allowing an operator to meet regulatory obligations. In the Philippines, effective verification helps prevent underage gambling, reduce identity fraud, protect accounts from unauthorized access, and support the country's anti-money laundering (AML) framework.
These AML controls have attracted significant attention in recent years. The Philippines spent several years under increased FATF monitoring and was placed on the Financial Action Task Force's (FATF) "grey list," with concerns including weaknesses associated with casino junket operations.
There is no universal KYC procedure used by every online casino in Asia. The requirements can depend on the jurisdiction, the operator's internal risk assessment, the customer's activity, and the games or payment methods involved. This guide therefore focuses on the Philippine market while also providing context for how similar checks operate elsewhere in Asia.
What is KYC?
The question what is the meaning of KYC has a simple starting point: Know Your Customer. In practical terms, KYC is part of customer due diligence. It allows a business to establish that a customer is genuinely who they claim to be and, where required, understand other information relevant to the account.
Depending on the regulatory environment, this may include the customer's age, location, source of funds, and transaction behavior.
The Financial Action Task Force describes customer due diligence as identifying and verifying customers and then monitoring their activity on an ongoing, risk-based basis. For a Philippine online casino, this can involve questions such as:
Is the person creating the account the same individual identified on the account?
Has the player reached the minimum gambling age of 21 in the Philippines?
Is the player physically located in a permitted jurisdiction?
Does the bank account, GCash account, Maya account, or other e-wallet belong to the verified account holder?
Does the customer's activity create a need for additional checks under the Anti-Money Laundering Act?
This is why what is KYC verification is broader than simply asking which ID a player must upload. Identity verification is only one part of a wider process that can also involve age, location, payment ownership, and the movement of funds.
Why do Philippine online casinos require KYC verification?
Before looking at specific documents and procedures, it is useful to understand the main risks KYC is designed to address in the Philippine gambling environment. These include underage gambling, identity fraud, and money laundering.
Age verification
Gambling is restricted by age in most countries, but the Philippines applies a comparatively high minimum age. Under Presidential Decree 1869, known as the PAGCOR Charter, as amended by Republic Act No. 9487 and reinforced by Malacañang Memorandum Circular No. 6, series of 2016, the minimum age for entering, remaining in, or playing at a PAGCOR-regulated gaming establishment is 21.
This requirement also applies to PAGCOR-licensed online gambling platforms. In addition, students enrolled in a Philippine school, college, or university are prohibited from gambling regardless of whether they have reached the age of 21.
For this reason, age verification law is a significant part of KYC in the Philippines. Verification is not only intended to satisfy financial or regulatory requirements; it is also an important player-protection measure designed to prevent people who are not eligible from accessing gambling services.
Operators use KYC to help enforce these restrictions. A government-issued identification document containing a date of birth can be compared with the information supplied during account registration.
PAGCOR also maintains a National Database of Restricted Persons and operates a self-exclusion program through its OSEA portal. Licensed operators are expected to screen customers against the applicable records during onboarding and, where necessary, through ongoing monitoring.
Fraud and identity protection
Identity verification can make fraudulent account creation more difficult. Requiring genuine identification helps reduce the likelihood of someone registering with another person's personal details or submitting fabricated documents.
The benefit also extends to legitimate customers. If stolen personal information could be used to create an account without meaningful verification, the person whose identity was compromised could potentially face unauthorized transactions, account disputes, or other activity they did not approve.
Anti-money laundering
KYC in the Philippine casino sector operates within a specific AML framework. Casinos were not originally included among the entities covered by the country's anti-money laundering legislation. That changed in July 2017.
Republic Act No. 10927 amended the Anti-Money Laundering Act of 2001, Republic Act No. 9160, and brought casinos within the definition of "covered persons." The amendment specifically included internet-based and ship-based casinos.
In October 2017, the Anti-Money Laundering Council (AMLC), PAGCOR, the Cagayan Economic Zone Authority, and the Aurora Pacific Economic Zone and Freeport Authority jointly signed the Casino Implementing Rules and Regulations (CIRR), establishing the requirements for applying the law within the casino sector.
Under this framework, a casino cash transaction above five million pesos must be reported to the AMLC as a "covered transaction." This threshold is considerably higher than the five-hundred-thousand-peso threshold applicable to banks and other covered institutions, reflecting the different transaction volumes associated with casino activity.
Casinos must also submit suspicious transaction reports regardless of the amount involved. Other requirements include appointing compliance officers and applying risk-based due diligence to customers.
The importance of these measures became particularly apparent during the Philippines' period of FATF monitoring. In June 2021, the FATF placed the Philippines on its "grey list" of jurisdictions subject to increased monitoring. The concerns included money laundering risks connected with casino junket operations and weaknesses in prosecuting related cases.
The Philippines remained under increased monitoring for almost four years. On February 21, 2025, the FATF formally removed the country from the grey list after the government completed its action plan. The measures included stronger controls over casino junkets and increased supervision of the sector.
Effective KYC and stronger customer-due-diligence practices formed part of the broader improvements associated with these regulatory changes.
Protecting the integrity of an account
KYC also helps establish who legitimately controls an account. This can become important when a customer disputes a withdrawal, unusual payment activity appears, or an account-related disagreement needs to be investigated.
For players, this means KYC is not simply a requirement designed to protect the casino. Establishing the legitimate account holder can also help protect the customer's personal information, account access, and funds.
Ultimately, KYC provides a framework for confirming that an online gambling customer is eligible to use the service and that the account activity can be assessed appropriately. In the Philippines, that framework combines identity and age checks with location, payment, AML, and risk-based controls.
What documents are needed for online casino verification in the Philippines?
There is no universal casino KYC requirements checklist, since operators can request slightly different documents depending on their own risk-based procedures. Understanding what is KYC in online casino terms specific to the Philippines starts with the same basic categories used worldwide, adapted to PAGCOR's rules. The categories below are consistent across PAGCOR-licensed platforms.
Document or check | What it typically establishes |
Government-issued photo ID (Philippine passport, driver's license, UMID, PhilSys National ID, or similar) | Name, date of birth, photo, and identity |
Proof of address | Residential address, where required |
Selfie or short video verification | That the person completing the check matches the ID photo |
Payment-method evidence (bank account, GCash, Maya, or card details) | That the payment method is genuinely tied to the account holder |
Source-of-funds evidence | Where gambling funds originate, when additional checks are triggered |
Location or geolocation check | Whether the player is accessing the platform from within the Philippines |
A passport, driver's license, UMID, or PhilSys National ID (PhilID) are the most commonly accepted primary documents. Proof of address, when requested, can involve a recent utility bill or bank statement. Casino KYC requirements should always have a clear verification purpose behind them - a licensed operator should be able to explain exactly why a document is needed.
What is the KYC process at a Philippine online casino?
The what is KYC process question is best answered as a sequence rather than a single action, especially for players navigating a Philippine-licensed platform for the first time.
A typical flow looks like this:
Account registration - the player provides basic details: name, date of birth, and contact information.
Identity verification - the operator requests an accepted government ID and checks it against the details provided at registration.
Age and eligibility checks - the operator confirms the player is at least 21, is not enrolled as a student, and is not on PAGCOR's National Database of Restricted Persons or self-exclusion list.
Additional verification, if required - a selfie or short video, proof of address, or payment-method evidence.
AML and risk screening - depending on transaction size and risk profile, the operator may apply the sanctions, politically-exposed-person, or transaction-monitoring checks required under the CIRR.
Ongoing monitoring - verification does not necessarily end once an account is approved; a change in activity or a large transaction can trigger further checks, consistent with the risk-based approach the FATF framework calls for.
That's the what is KYC process in practice for a Philippine-licensed platform, from registration through ongoing monitoring. One Philippine-specific shift worth noting: where verification once tended to happen mainly around a player's first withdrawal, industry reporting since early 2026 points to PAGCOR-licensed platforms increasingly requiring identity verification - a valid ID plus a real-time selfie - before a player's first deposit, rather than waiting until money is being paid out.
How long does KYC verification take?
How long does KYC verification take? There is no fixed answer. Automated checks can clear in minutes; manual reviews, or cases involving unclear, expired, or mismatched documents, take longer.
Because enhanced verification is increasingly requested up front rather than only at withdrawal, completing it early is now the more reliable way to avoid a delay when it's time to cash out.
Players can reduce avoidable delays by:
Using a valid, unexpired ID
Photographing documents in good light, with all four corners visible and text legible
Making sure the name and date of birth on the account match the ID exactly
Following the operator's document instructions precisely rather than improvising
Responding promptly if support asks for clarification, rather than resubmitting different documents repeatedly
If a verification remains pending well beyond the operator's stated timeframe, the right move is to contact the operator through its official support channel and ask what stage the review has reached - not to send documents anywhere else.
Can you do KYC online in the Philippines?
Can I do KYC online? Yes. Verification at PAGCOR-licensed platforms is typically completed digitally: uploading photos of an ID, taking a live selfie, and in some cases a short video check, all through the operator's own website or app.
That said, "online" does not mean every platform follows the same steps, and it does not mean every platform asking for documents is legitimate. Players should complete KYC only through an operator's official, PAGCOR-licensed website or app, and never through an unsolicited message on social media, a personal email address, or a third-party messaging app claiming to "process" verification on a casino's behalf.
This caution matters more in the Philippines than it once did. Offshore operators known as Philippine Offshore Gaming Operators, or POGOs, which were licensed to serve players outside the country, were ordered to wind down entirely under Executive Order No. 74, signed by President Ferdinand Marcos Jr. on November 5, 2024, with a hard deadline of December 31, 2024. That ban was made permanent in law on October 23, 2025, when the President signed Republic Act No. 12312, the Anti-POGO Act of 2025, which bans the establishment, operation, or facilitation of offshore gaming in the Philippines outright and sets penalties of up to twelve years' imprisonment and fines as high as fifty million pesos for repeat violations. Notably, this ban targets offshore operations aimed at foreign markets - it does not cover PAGCOR-licensed domestic online gaming, land-based casinos, or licensed integrated resorts serving Philippine-based players, which continue to operate under PAGCOR's Philippine Inland Gaming Operator framework.
Given that history, verifying that a site is licensed for the domestic market - rather than an unlicensed offshore operation - is itself a form of due diligence worth doing before ever uploading a document.
Are KYC verifications safe?
Is KYC verification safe? In general, it can be, but much depends on the casino handling your information and the security measures it has in place. Online gambling operators may collect identification and financial details, so players should pay attention to how their personal information is processed and protected.
In the Philippines, Republic Act No. 10173, known as the Data Privacy Act of 2012, establishes rules for organizations that handle personal information. Online casinos that determine how customer data is collected and used may have responsibilities as personal information controllers.
The National Privacy Commission (NPC) administers the country's data-protection framework. Organizations processing personal data are expected to maintain reasonable and appropriate organizational, physical, and technical safeguards. These obligations can also extend to situations where a business hires another company to process information on its behalf.
The law also emphasizes several principles that matter to casino customers. Businesses should explain why information is being collected, personal-data processing should be appropriate for the stated purpose, and certain data breaches must be reported to the NPC as well as affected individuals.
Before submitting an ID or financial document, consider these checks:
Verify the operator: Confirm that the casino is genuinely licensed by PAGCOR and is authorized to serve players in the Philippine domestic market.
Read the privacy policy: Check how the company says it stores, uses, retains, and shares customer information.
Question the request: Make sure you understand why a particular document is required.
Check third-party involvement: If another verification company is handling the process, find out who that company is.
Contact support: When instructions are unclear, ask the operator's official customer-support team for an explanation.
A normal KYC request should have a clear connection to your account and the operator's compliance procedures. An unsolicited message requesting identification documents, particularly through an unfamiliar link, should be approached with caution.
Why can KYC affect casino withdrawals?
Players sometimes complete a deposit successfully and only encounter KYC when they attempt to take money out. This can happen because a withdrawal or a change in account activity prompts the operator to carry out checks that were not previously required.
Several issues can lead to additional verification:
The account's identity check has not been completed.
The ID previously supplied has expired.
The uploaded document cannot be read clearly.
Part of the document is missing from the submitted image.
The customer's registered details differ from the information shown on the ID.
The casino needs proof of residential address.
The operator needs to establish that the payment account belongs to the customer.
Source-of-funds documentation has become necessary.
The customer's transactions or betting activity require further AML assessment under the CIRR.
A request for additional information during a withdrawal is not automatically evidence of improper behavior. Verification can be triggered by legitimate compliance requirements.
Nevertheless, customers should examine unexpected requests carefully. If you are uncertain, ask the casino to explain the reason for the request, submit documents only through its recognized verification system, and retain records of your communications.
KYC in the Philippines and other Asian markets
Anyone who has opened a Philippine bank account may already have gone through a KYC check. So, what is kyc in banking, and why might the process look different at an online casino?
Banks use KYC and customer due diligence to establish who their customers are, evaluate potential risks, and support financial-crime prevention measures. The approach follows the wider customer-due-diligence principles promoted by the FATF.
Casinos apply similar principles, but gambling creates some additional considerations. In the Philippines, operators need to consider the 21-year minimum gambling age, restrictions on who can gamble, location, payment ownership, and AML obligations specific to casino businesses.
Payment services such as GCash and Maya may therefore form part of the verification process when an operator needs to establish that the payment method belongs to the customer.
The general concept is similar across the region: identify the customer, assess risk, and continue monitoring where appropriate. The precise rules vary according to each jurisdiction.
Philippines | Macau | Singapore | |
Regulatory authority | PAGCOR, with AMLC involvement for AML supervision | Gaming Inspection and Coordination Bureau (DICJ) | Gambling Regulatory Authority (GRA) |
Relevant framework | PD 1869 (PAGCOR Charter); RA 9160/RA 10927 (AMLA); RA 10173 (Data Privacy Act) | Law No. 16/2022 (Macau Gaming Law); DICJ AML instructions | Laws administered by the GRA for licensed remote and land-based gambling |
Minimum gambling age | 21 | 21 | 21 |
Remote gambling position | Domestic online gaming may operate under PAGCOR licensing; offshore POGO operations were prohibited | No separate online casino licensing regime; gambling is primarily regulated through land-based casinos | Remote gambling is highly limited; Singapore Pools is the only licensed operator |
The Philippines, Macau, and Singapore all operate within the wider Asia/Pacific Group on Money Laundering environment, where FATF standards influence customer due diligence, transaction monitoring, reporting, and casino verification.
That does not mean the rules are identical. Each jurisdiction determines its own documentation requirements, reporting limits, licensing conditions, and enforcement procedures. What they share is the objective of identifying the customer and understanding financial activity when additional scrutiny is required.
Precautionary steps to take before sending your casino documents
Players can take several straightforward precautions before completing verification.
Check PAGCOR licensing: Confirm that the casino's license is genuine and that the operator is authorized to serve the Philippine domestic market.
Begin from a trusted source: Open the casino's website or application yourself and access verification after logging into your account instead of relying on an unexpected link.
Review the requested documents: Know exactly what information the operator wants and why it is necessary.
Keep login credentials private: A casino should not need your password or one-time authentication code to verify your identity documents.
Keep submission records: Record the documents you provide and the date of submission.
Ask for clarification: If a compliance request seems unusual, contact the operator through its official support channel.
Frequently asked questions
What is the meaning of KYC?
It means Know Your Customer. KYC describes the procedures used to identify customers, confirm relevant information, and evaluate risks connected with an account.
What is KYC in an online casino?
What is KYC in online casino gambling in the Philippines? It is the set of checks an operator uses to confirm a player's identity and eligibility. These checks can cover age, location, payment ownership, and source of funds when further review is necessary.
Can I complete KYC online?
What is online KYC? It is the digital version of customer verification. Instead of attending a physical location, the customer submits documents and completes applicable identity checks online.
Whether the process can be trusted depends on the operator and the verification channel. A properly licensed casino using an official verification system presents a very different situation from an unknown website or an individual requesting documents through an unsolicited message.
Is KYC verification safe?
is kyc verification safe when the operator is legitimate and follows appropriate data-protection practices. Players should verify the casino's credentials, read its privacy information, and submit documents only through official channels.
How does Philippine age verification law compare with other countries?
The Philippine age verification law sets the minimum gambling age at 21. Many countries use an 18-year minimum instead. Philippine restrictions also prohibit students enrolled at Philippine schools, colleges, or universities from gambling, regardless of age.
Are POGOs still operating in the Philippines?
No. Offshore gaming operators, commonly called POGOs, were required to end operations by December 31, 2024 under Executive Order No. 74. The prohibition was subsequently made permanent through the Anti-POGO Act of 2025, Republic Act No. 12312, signed on October 23, 2025.
The POGO prohibition concerns offshore gaming operations. It does not mean that every online gambling platform serving Philippine customers is prohibited, as PAGCOR-licensed domestic operations remain a separate category.
Why might a casino request information about my source of funds?
A source-of-funds request can be part of a casino's risk-based AML procedures. Under the Casino Implementing Rules and Regulations connected with Republic Act No. 10927, additional financial information may be requested when transaction values, unusual activity, or other risk indicators justify further examination.
Final takeaways
KYC can become frustrating when extra verification appears during a withdrawal, but the process has an important role within the Philippine gambling regulatory system.
The country's approach has changed substantially over the past decade. Casinos were brought under the AML framework in 2017, the Philippines later spent almost four years subject to FATF increased monitoring, and the government subsequently introduced measures that ended the offshore POGO industry during 2024 and 2025.
For players, the best approach is to be careful rather than automatically suspicious of every KYC request.
A genuine request from a PAGCOR-licensed operator serving the Philippine market can be a normal part of regulatory compliance. At the same time, personal documents should never be handed to an unknown person or uploaded to an unverified website.
Check the operator's license, enter the verification process through an official channel, understand the reason for each requested document, and keep passwords and one-time codes confidential.
Ultimately, understanding what is KYC means more than knowing which documents an online casino may request. It means recognizing why customer verification exists, knowing what information you are being asked to provide, and taking sensible steps to protect your personal data throughout the process.
About Asia Casino News
Asia Casino News (ACN) provides casino, gambling, gaming, regulatory, and market news and information across Asia, with a focus on giving readers clear, practical context on developments affecting the region's gambling and gaming markets.
Sources
Philippine Amusement and Gaming Corporation (PAGCOR) - Responsible Gaming / Regulatory pages (pagcor.ph) reference for the 21-and-above minimum age, the PAGCOR Charter (PD 1869, as amended by RA 9487), and PAGCOR's self-exclusion and restricted-persons programs.
Republic Act No. 10927 (2017) and its Casino Implementing Rules and Regulations (CIRR), jointly issued by AMLC, PAGCOR, CEZA, and APECO
Republic Act No. 10173, the Data Privacy Act of 2012, and the National Privacy Commission data-protection principles, breach-notification rules, and NPC oversight of personal data processing by gaming operators.
Financial Action Task Force - Customer Due Diligence guidance, and reference for the general definition of customer due diligence and the risk-based approach.
Executive Order No. 74, s. 2024, via the Supreme Court E-Library and the Presidential Communications Office regarding the POGO ban, its December 31, 2024 deadline, and its scope relative to PAGCOR-licensed domestic gaming.
Republic Act No. 12312, the Anti-POGO Act of 2025, via the Philippine News Agency
Macau Gaming Inspection and Coordination Bureau (DICJ) and Law No. 16/2022 (Macau Gaming Law)
Comments