AML and Verification at Papayawins Casino
We hold an MGA licence and operate under strict anti-money-laundering obligations. This page sets out, in plain terms, what we verify, when we verify it, and what we expect from you as a player at Papayawins Casino.
Our Anti Money Laundering Commitment
Papayawins Casino is operated by Papaya Wins Ltd under a licence issued by the Malta Gaming Authority. Since we launched in 2023, every part of our platform has been built around the MGA anti-money-laundering framework, which means we must know who our players are, where their funds come from, and that every transaction on our site has a legitimate purpose.
Our commitment is simple: we run a clean platform. Gambling must never be used to hide criminal proceeds, finance terrorism, or move money for third parties. To that end we employ a dedicated compliance team, headed by our Money Laundering Reporting Officer, and we report suspicious activity to the relevant authorities without notifying the account holder concerned.
- Full compliance with MGA anti-money-laundering directives
- Customer due diligence at registration, on withdrawals and at set thresholds
- Ongoing transaction monitoring across deposits and withdrawals
- Internal reporting of suspicious activity through our MLRO
- Staff training on AML awareness for all relevant employees
When We Verify Your Identity
Verification triggers
We verify your identity at three points: when you register, before your first withdrawal, and whenever your account activity crosses a threshold set by our licence conditions. At registration we confirm your basic details, including your age, because no one under 18 may hold an account with us. Full document checks follow before we release any funds to you.
- At registration: name, date of birth and contact details are screened against our records
- Before your first withdrawal: full identity, address and payment method verification
- At licence thresholds: enhanced checks when cumulative deposits or withdrawals reach the limits set by the MGA
- On suspicion: any time our monitoring system flags unusual activity on your account
Documents we accept
To complete verification we ask for three categories of document. Each must be in your own name, legible, and current. We accept clear photos or scans, and we will tell you straight away if a document fails our checks so you can replace it without delay.
| Check | Accepted documents |
|---|---|
| Photo ID | Passport, driving licence or national identity card (government issued, valid) |
| Proof of address | Utility bill, bank statement or council tax bill dated within the last 3 months |
| Payment method ownership | Photo of the card (front, with middle digits masked) or a bank statement showing the account used |
You may submit documents at any time from your account profile rather than waiting for a withdrawal request. Uploading early shortens your first payout, because our team will already have what it needs to release funds within the stated timeframes.
How Verification Works Step by Step
Our process is deliberately short. Most players complete verification in a single session, and we aim to review standard documents within 24 hours of submission. Here is the exact sequence from upload to clearance.
- 1. Open the Verification tab in your account profile and select the document type you are uploading
- 2. Photograph or scan the document so all four corners and every detail are visible, with no glare or cropping
- 3. Upload the file through the secure form; we accept JPG, PNG and PDF up to 10 MB per file
- 4. Our compliance team reviews the submission, normally within 24 hours, and often faster outside peak periods
- 5. You receive an email and an on-site notification with the outcome; approved documents clear instantly
- 6. If anything is missing or unreadable, we specify exactly which document to replace and why
How we protect your documents
Documents you send us are stored on encrypted servers with access restricted to our compliance team. We never share your verification data with third parties except where we are legally obliged to, for example in response to a lawful request from the MGA or a competent financial authority. Automated screening runs against sanctions and politically exposed person lists, and those checks use the same encrypted infrastructure.
When We Ask for Source of Funds
For most players, standard verification is enough. A small number of accounts trigger a source-of-funds request, and it is never personal. We make these requests when the amounts moving through an account are out of step with what our monitoring expects, or when a statutory threshold in the MGA rules applies to you.
A source-of-funds check asks one question: where did the money you deposited come from? Acceptable evidence includes payslips, employment contracts, pension statements, sale agreements, dividend statements or tax returns. Screenshots of your own bank account showing regular income also work in many cases.
- Cumulative deposits exceed the level set in our licence conditions
- Deposit sizes are inconsistent with your declared profile
- Funding comes from a method registered in another person's name
- Winnings withdrawn are materially higher than your verified play history supports
We ask only for what the rules require, and nothing you send us is used for any purpose other than compliance. The review is confidential, your play continues in the meantime, and funds already in your account remain yours throughout. Once we resolve the query, withdrawals proceed normally.
How We Monitor Your Transactions
Every deposit and withdrawal on our platform is screened in real time by automated systems, with human review on flagged cases. Monitoring covers the amounts, frequency, payment methods and patterns of play attached to your account, and it runs continuously rather than only at withdrawal time.
| Parameter | Our standard |
|---|---|
| Minimum deposit | £2 |
| Minimum withdrawal | £10 |
| Maximum withdrawal | £5,000 per day, £20,000 per month |
| E-wallet payout time | 0 to 24 hours |
| Bank transfer payout time | 1 to 3 business days |
| Fees | None |
Same method rule
Wherever technically possible, we pay withdrawals back to the same method you used to deposit. This is a core AML control: it sends funds to the verified source they came from, which blocks attempts to launder money by depositing through one channel and withdrawing through another. If you deposit with Bitcoin, your withdrawal goes back to a Bitcoin wallet registered to you.
Where a method cannot receive withdrawals, for example Paysafecard, we return funds to a verified bank account or card in your name instead. Splitting withdrawals across multiple accounts or third-party wallets is not permitted under any circumstances, and requests of that kind are refused.
What Happens If Verification Fails
If we cannot verify your identity, or if you do not send the documents we request, we restrict the account in stages. Deposits and play stop first; withdrawals are held last. Funds in a restricted account remain yours and are released as soon as the outstanding checks are completed, though we cannot process a payout to an unverified account under any circumstances.
- Pending withdrawals are held, not cancelled, until verification is complete
- The account may be suspended from further deposits and gameplay
- Repeated submission of false, altered or third-party documents leads to permanent closure
- We confiscate and report to the authorities any balance we can reasonably link to criminal proceeds or third-party play
- Accounts closed for failed verification can be appealed by writing to our compliance team
Deliberate deception is treated more seriously than a missing utility bill. Submitting a doctored ID or playing on someone else's payment method counts as fraud rather than an administrative slip, and we act on it accordingly. If you simply cannot find a document, contact our live chat, which is staffed 24/7, and we will help you identify an acceptable alternative.
How Long We Keep Your Documents
We retain verification records for five years after your account closes, or five years after the last transaction on an active account, whichever the MGA rules direct for your case. Retention is not optional: it lets us answer lawful requests from the authorities and reconstruct your account history if a dispute or investigation arises later.
After the retention period ends, we delete or irreversibly anonymise your documents. You can request a copy of the personal data we hold, ask us to correct anything inaccurate, or withdraw consent for marketing at any time by emailing [email protected]. Statutory retention duties override deletion requests only for the records the law requires us to keep.
Frequently asked questions
Can I withdraw before completing verification?
No. We must complete identity, address and payment method checks before your first withdrawal. Uploading your documents right after registration avoids any payout delay.
Why was I asked for a payslip or bank statement?
This is a source-of-funds request triggered by deposit levels or activity patterns under our MGA obligations. It is routine, confidential and affects only accounts whose transaction profile requires it.
How long does verification take?
Standard documents are reviewed within 24 hours, often faster outside peak periods. If a document is unreadable or expired, we contact you with the exact reason and you can replace it immediately.
Can I withdraw to a different method than I deposited with?
Wherever possible we pay out to the same method you used to deposit. If that method cannot receive withdrawals, funds go to a verified bank account or card in your own name.