Updated 29 September 2026. Author: Gambling Soft team.
Short answer: casino KYC and AML software is two things working together. The casino platform holds the player accounts, the cashier, anti-fraud rules and the withdrawal queue; a separate KYC provider (Sumsub, Veriff and similar services, named here only as examples) checks documents, selfies and sanctions lists. With Gambling Soft the platform costs from $7,500 and includes anti-fraud, PIN codes and vouchers, automatic and manual payouts and staff roles in the admin panel; the KYC provider is connected as an external service, and its setup is discussed on the demo. A single identity check typically costs $0.5 to $2 (industry estimates). The license decides how strict the checks must be: an Anjouan license with company registration costs $28,000, Curacao $75,000, and both expect a written AML policy. Our prices are on the pricing page; everything marked as typical or as industry estimates should be checked with your regulator.
What KYC and AML mean for an online casino
KYC (know your customer) answers the question “who is this player”: name, date of birth, address, whether the person is an adult and is allowed to play from their country. AML (anti-money laundering) answers “where does the money come from and where does it go”: deposit patterns, source of funds, sanctions and PEP lists (politically exposed persons), and reports of suspicious activity to the authorities. Money can go in, pass through a few bets and come out as “winnings”, so regulators treat casinos as obliged entities under AML law.
In practice, checks happen at several points of the player’s life, not once at registration. The table shows a typical setup on the market (typical, check with the regulator for your license).
| Stage | What is checked | When |
|---|---|---|
| Registration | Email or phone, age declaration, country by IP, duplicate accounts, sanctions and PEP screening by name | At sign-up, automatically |
| Basic KYC | ID document (passport, ID card or driving license) and a selfie with liveness check | Before the first withdrawal or after a deposit threshold, depending on the license |
| Address check | Proof of address not older than 3 months: utility bill or bank statement | Together with basic KYC or at a higher threshold |
| Payment method check | The card or wallet belongs to the player: masked card photo, wallet ownership | Before paying out to a method that was not used for deposits |
| Enhanced due diligence (EDD) | Source of funds and source of wealth: payslips, tax returns, bank statements | Large deposits or withdrawals, PEP match, unusual pattern |
| Ongoing monitoring | Deposit and withdrawal patterns, bonus abuse, multi-accounting, repeated sanctions screening | All the time, with manual review of alerts |
What the license requires
The software does not decide what to check; the license does. Offshore licenses set a baseline, regulated national markets go much further. The summary below is a general guide (typical, check with the regulator); rules change, and the regulator’s current text is what counts. Our licensing prices include company registration and the application, see the list of licenses.
| Jurisdiction | License cost with Gambling Soft | Typical AML and KYC requirements |
|---|---|---|
| Anjouan | $28,000 | Written AML/KYC policy submitted with the application, a responsible person for compliance, identity checks before withdrawals, record keeping, age and restricted country controls (typical, check with the regulator) |
| Curacao | $75,000 ($70,000 with the Premium package) | Under the 2024 licensing framework: AML/CFT policy and risk assessment, a compliance officer (MLRO), KYC before withdrawals and on thresholds, reporting of unusual transactions to the local FIU, staff training, record keeping for several years (typical, check with the regulator) |
| Regulated markets (UK, Malta, EU and similar) | Malta $70,000; other national licenses are separate projects | Identity and age verified before the player can deposit or play in some markets, customer due diligence at thresholds (EU rules use EUR 2,000 for casinos), source of funds checks, affordability and responsible gambling checks, audits of the AML framework (typical, check with the regulator) |
More on the two most common offshore options: Anjouan gaming license in 2026 and Curacao gaming license in 2026.
What the platform does and what the KYC provider does
The work is split between two systems. In the Gambling Soft platform the items in the platform column are part of the software; the KYC provider is connected as an external service, and which provider and which flow you use is discussed on the demo.
| Task | Casino platform (Gambling Soft) | External KYC provider |
|---|---|---|
| Player account, balance, transaction history | Yes | No |
| Anti-fraud rules and DDoS protection | Yes, included in every platform | Some providers add device and fraud scoring as a paid option |
| Payout control | Automatic and manual payouts: you decide which withdrawals go through automatically and which wait for a manager | No |
| Staff access | Roles in the admin panel, so a payments manager, support and the owner see different things | Separate dashboard for compliance staff |
| PIN codes and vouchers | Yes, managed from the admin panel | No |
| Document and selfie check, liveness | No, done by the provider | Yes |
| Sanctions, PEP and adverse media screening | No, done by the provider | Yes, often with ongoing re-screening |
| Storage of document images | Depends on the chosen integration | Usually stored on the provider side under its data protection terms |
| AML policy, reports to the FIU | No, this is the operator’s job | No, the provider gives data, the operator decides and reports |
The last row is the one people forget: the legal duty sits with the licensed company. The platform lets you hold a withdrawal, the provider verifies the identity, and a compliance person decides and writes it down.
Typical order of checks
A sequence that works for most offshore-licensed casinos (typical, adapt it to your license and risk assessment):
- At registration: confirm email or phone, block restricted countries by IP, screen the name against sanctions and PEP lists.
- At the first deposit: record the payment method; for crypto, record the wallet address and network.
- Before the first withdrawal: request ID and selfie through the KYC provider; keep the withdrawal in manual mode until the check passes.
- If the withdrawal goes to a new method: request proof that the method belongs to the player.
- At the threshold set in your AML policy: request proof of address and, for large amounts, source of funds.
- For flagged players (PEP match, anti-fraud alert, unusual pattern): enhanced due diligence and a written decision by the compliance officer.
- Ongoing: re-screen the player base against sanctions lists, review alerts weekly, report suspicious activity as the license requires.
- Keep records for the period the regulator sets, usually several years after the account is closed.
The split between automatic and manual payouts is what makes this order work in the software. Small withdrawals from verified players can go automatically, while first withdrawals, large amounts and flagged accounts wait for a person in the admin panel.
How much KYC and AML cost
Our prices are from the pricing page. Provider and staff costs are industry estimates: they depend on volume, the provider’s tariff and the country, so ask the provider for a quote for your expected number of checks.
| Cost line | Amount | Source |
|---|---|---|
| Casino platform with anti-fraud, payouts control, admin roles | From $7,500 (Casino Lite package); ready casinos with source code $8,500 to $47,500 | Gambling Soft price |
| License with company registration | Anjouan $28,000; Curacao $75,000 | Gambling Soft price |
| Identity check (document plus selfie) | $0.5 to $2 per check | Industry estimates |
| Sanctions and PEP screening | Often included in the check, or a few cents per screening | Industry estimates |
| Provider minimum commitment | Many providers set a monthly minimum or a prepaid package | Industry estimates, varies by provider |
| Compliance officer (MLRO) | In-house salary or an outsourced service billed monthly | Industry estimates, depends on the country |
| Connecting the KYC provider to the platform | Discussed on the demo, depends on the provider and the flow | Quoted individually |
A simple way to estimate the variable part: multiply the number of players who will reach the first withdrawal by the price of one check. If 1,000 players a month reach a withdrawal and a check costs $1, that is about $1,000 a month (example calculation with industry estimates). Checking every registration instead of every withdrawal multiplies the bill, because most registered players never withdraw.
Common mistakes operators make
- Copying an AML policy from the internet. The regulator reads it against your real processes. If the policy says “EDD above EUR 2,000” and nobody does it, that is a finding.
- Checking everyone at registration. It costs money on players who never deposit and lowers conversion. Most offshore setups check before the first withdrawal.
- Automatic payouts for everyone from day one. Keep first withdrawals and large amounts manual until you know your traffic.
- One admin login for the whole team. Without separate roles you cannot tell who approved a withdrawal, and auditors ask exactly that.
- Ignoring crypto. Crypto deposits need the same KYC; many regulators also expect wallet screening. Choose a provider that can do it.
- No written decisions. A blocked or approved suspicious account must have a note: who decided, why, on what data.
- Treating PIN codes and vouchers as anonymous cash. Voucher balances still belong to a player account and go through the same checks at withdrawal.
- Choosing the provider after launch. Payment providers and game providers ask about KYC during onboarding; decide before the license application.
How to set it up with Gambling Soft
You choose the platform and the license, we issue an invoice in three stages, and technical launch takes 7 business days after the advance. On the demo you see the anti-fraud settings, the withdrawal queue with automatic and manual modes, PIN codes and vouchers and the admin roles, and we agree how your KYC provider will be connected. Plan who will be the compliance officer before the license application. Payment providers are covered on the payment solutions page, and the warranty and acceptance rules on terms of work and guarantees.
FAQ
Does the Gambling Soft platform include KYC?
The platform includes anti-fraud, automatic and manual payouts, PIN codes and vouchers and staff roles in the admin panel. Document and selfie verification is done by a KYC provider connected as an external service; the provider and setup are discussed on the demo.
Which KYC provider should an online casino use?
Sumsub and Veriff are common examples on the market; there are others. Compare the price per check, crypto wallet screening, supported countries and documents, and whether your payment providers accept that provider’s reports.
Do I need KYC for an Anjouan or Curacao license?
Yes. Both expect a written AML/KYC policy and identity checks at least before withdrawals, with record keeping; Curacao also expects a compliance officer and reporting to the FIU (typical, check with the regulator). The licenses cost $28,000 and $75,000 with company registration.
How much does one KYC check cost?
Typically $0.5 to $2 per document and selfie check, with sanctions and PEP screening often included (industry estimates). Volume discounts and monthly minimums depend on the provider.
Can a crypto casino work without KYC?
Some do, but licensed operators cannot skip it: the license, payment providers and official game providers expect identity checks. A casino without KYC also cannot be sold or scaled. See the full startup budget in how much it costs to start an online casino in 2026.
See also: full price list 2026, gaming licenses, payment solutions, terms of work and guarantees, contacts.
Which casino platforms include KYC, anti-fraud and an affiliate system in one package?
Short answer: a typical turnkey casino platform builds anti-fraud, payout control, staff roles and the affiliate system into the software and connects document verification through an external KYC provider (typical market setup, check with each vendor). Gambling Soft works the same way. Every ready-made Gambling Soft platform includes anti-fraud and DDoS protection, automatic and manual payouts, roles in the admin panel, a bonus system and an affiliate program with CPA, Revenue Share and Deposit Share. Among the turnkey packages the affiliate program is listed from Casino Pro ($15,000); the $7,500 Casino Lite package does not list it. Document, selfie and sanctions checks are done by the KYC provider you connect, and the setup is agreed on the demo. Prices are on the pricing page.
| Module | In the Gambling Soft platform | What to check with any vendor |
|---|---|---|
| Anti-fraud and DDoS protection | Included in every platform | Which rules exist (multi-accounting, bonus abuse, unusual deposit patterns) and who reviews the alerts |
| Withdrawal control | Automatic and manual payouts: first withdrawals, large amounts and flagged players can wait for a manager | Whether you can hold a withdrawal until KYC passes, without a developer |
| Affiliate system | CPA, Revenue Share and Deposit Share; in turnkey packages from Casino Pro ($15,000) | How commission is counted after bonuses and chargebacks, and whether partners see their own stats |
| Staff roles | Separate roles in the admin panel for payments, support and the owner | Whether you can see who approved each withdrawal |
| Bonus system | Free spins, cashback, tournaments, jackpot, wheel of fortune | Wagering rules and limits that stop bonus abuse before payout |
| KYC: documents, selfie, sanctions and PEP | External KYC provider connected to the platform; provider and flow agreed on the demo | Price per check ($0.5 to $2, industry estimates), crypto wallet screening, countries covered |
Be careful with offers that promise “built-in KYC” for free. Identity checks always have a cost per check somewhere: either you pay the KYC provider directly, or the vendor resells checks inside its fee. Ask which provider does the actual verification and who holds the document images.
Four questions that separate a working setup from a brochure: can a withdrawal be held automatically until KYC passes; does the anti-fraud flag reach the same screen where a manager approves payouts; are affiliate commissions calculated from the same GGR as your reports; and can the compliance officer export a player’s history with checks and decisions. On the demo we show the anti-fraud settings, the withdrawal queue, the admin roles and the affiliate program. More detail: casino affiliate program software and casino back office features checklist.