{"id":8091,"date":"2026-10-23T14:42:33","date_gmt":"2026-10-23T11:42:33","guid":{"rendered":"https:\/\/legalbit.top\/en\/?p=8091"},"modified":"2026-10-23T16:01:35","modified_gmt":"2026-10-23T13:01:35","slug":"igaming-responsible-gambling-aml","status":"publish","type":"post","link":"https:\/\/legalbit.top\/en\/igaming-responsible-gambling-aml\/","title":{"rendered":"Responsible Gambling and AML for iGaming Operators: Mandatory Procedures"},"content":{"rendered":"\n<div class=\"lbm\"><svg width=\"0\" height=\"0\" style=\"position:absolute\" aria-hidden=\"true\"><symbol id=\"i-list\" viewBox=\"0 0 24 24\"><path d=\"M9 6h11M9 12h11M9 18h11\"\/><path d=\"M4 6h.01M4 12h.01M4 18h.01\"\/><\/symbol><symbol id=\"i-user\" viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"8\" r=\"4\"\/><path d=\"M4 21c0-4 3.6-7 8-7s8 3 8 7\"\/><\/symbol><symbol id=\"i-ban\" viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"9\"\/><path d=\"M5.6 5.6l12.8 12.8\"\/><\/symbol><symbol id=\"i-layers\" viewBox=\"0 0 24 24\"><path d=\"M12 3l9 5-9 5-9-5z\"\/><path d=\"M3 13l9 5 9-5\"\/><\/symbol><symbol id=\"i-eye\" viewBox=\"0 0 24 24\"><path d=\"M2 12s4-7 10-7 10 7 10 7-4 7-10 7S2 12 2 12z\"\/><circle cx=\"12\" cy=\"12\" r=\"3\"\/><\/symbol><symbol id=\"i-doc\" viewBox=\"0 0 24 24\"><path d=\"M7 3h8l4 4v14H7z\"\/><path d=\"M15 3v4h4M10 12h6M10 16h6\"\/><\/symbol><symbol id=\"i-pen\" viewBox=\"0 0 24 24\"><path d=\"M4 20l4-1 11-11-3-3L5 16z\"\/><path d=\"M14 6l3 3\"\/><\/symbol><symbol id=\"i-alert\" viewBox=\"0 0 24 24\"><path d=\"M12 3l10 18H2z\"\/><path d=\"M12 10v4M12 17.5h.01\"\/><\/symbol><symbol id=\"i-bulb\" viewBox=\"0 0 24 24\"><path d=\"M9 18h6M10 21h4\"\/><path d=\"M12 3a6 6 0 0 0-3.5 10.9c.6.5 1 1.2 1 2.1h5c0-.9.4-1.6 1-2.1A6 6 0 0 0 12 3z\"\/><\/symbol><symbol id=\"i-info\" viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"9\"\/><path d=\"M12 11v5M12 8h.01\"\/><\/symbol><symbol id=\"i-coin\" viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"9\"\/><path d=\"M14.5 9.5c-.5-1-1.5-1.5-2.5-1.5-1.4 0-2.5.8-2.5 2s1.1 1.6 2.5 2 2.5.8 2.5 2-1.1 2-2.5 2c-1 0-2-.5-2.5-1.5M12 6.5v11\"\/><\/symbol><symbol id=\"i-clock\" viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"9\"\/><path d=\"M12 7v5l3 2\"\/><\/symbol><symbol id=\"i-globe\" viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"9\"\/><path d=\"M3 12h18M12 3c2.5 2.7 3.8 5.7 3.8 9s-1.3 6.3-3.8 9c-2.5-2.7-3.8-5.7-3.8-9S9.5 5.7 12 3z\"\/><\/symbol><\/svg><section class=\"lbm-intro\"><div class=\"lbm-intro-main\"><p class=\"lbm-lead\">An online gambling operator answers to the regulator on two fronts. The first is protection against money laundering, known as AML. The second is responsible gambling, which means protecting the players themselves. This article covers the procedures that are mandatory on each front in the EU, the UK, Malta, Cura\u00e7ao and Estonia, where the two overlap, and what regulators are penalising now. Everything is based on primary sources: laws, regulators&#8217; rules and their decisions.<\/p><p class=\"lbm-verified\">Checked on 23 October 2026. Rules and sources are current as of this date.<\/p><ul class=\"lbm-toc\"><li><a href=\"#two\">Two regimes<\/a><\/li><li><a href=\"#aml\">AML<\/a><\/li><li><a href=\"#rg\">Responsible gambling<\/a><\/li><li><a href=\"#link\">Where they overlap<\/a><\/li><li><a href=\"#practice\">Regulator practice<\/a><\/li><li><a href=\"#build\">How to build it<\/a><\/li><li><a href=\"#choose\">What to do<\/a><\/li><li><a href=\"#faq\">Questions<\/a><\/li><\/ul><\/div><\/section><section id=\"two\"><h2>Two regimes, checked separately<\/h2><p style=\"max-width:70ch\">For the regulator these are different topics with different documents and different inspectors. For the operator it is one system, because both use the same data about the player.<\/p><div class=\"lbm-roles\"><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-ban\"\/><\/svg><\/span><h3>AML<\/h3><p>Preventing money laundering. The operator checks who the customer is, where the money comes from, and whether gambling is used to legalise funds. The sources are the anti-money laundering law, the financial intelligence unit&#8217;s supervision and international standards.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-user\"\/><\/svg><\/span><h3>Responsible gambling<\/h3><p>Protecting the player from harm. The operator checks age, provides control tools, notices signs of problem gambling and intervenes. The sources are the gambling regulator&#8217;s rules and licence conditions.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-layers\"\/><\/svg><\/span><h3>Where they meet<\/h3><p>The player&#8217;s source of funds, payment methods, a sudden rise in stakes, attempts to get round self-exclusion. These signals matter for both player protection and AML, and decisions on them must be recorded.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-globe\"\/><\/svg><\/span><h3>Which rules are yours<\/h3><p>The rules depend on your licence, not on where you sit. Below we take five systems: the EU, the UK, Malta, Cura\u00e7ao and Estonia. If you hold another licence the structure is the same, but check the details in its rules.<\/p><\/div><\/div><\/section><section id=\"aml\"><h2>AML: the mandatory minimum<\/h2><p style=\"max-width:70ch\">General customer checks are covered in our article on <a href=\"\/en\/kyc-kyb-payment-providers\/\">KYC and KYB<\/a>. Here we cover only what is specific to gambling.<\/p><div class=\"lbm-roles\"><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-layers\"\/><\/svg><\/span><h3>Business risk assessment<\/h3><p>The operator assesses risk across its games, payment methods, player countries and acquisition channels, and records the assessment. In the UK the Gambling Commission publishes its own risk assessment of the industry for operators to use when preparing theirs.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-user\"\/><\/svg><\/span><h3>Customer due diligence<\/h3><p>The operator establishes the player&#8217;s identity and verifies it against documents. From 10 July 2027 the EU&#8217;s AMLR (Regulation (EU) 2024\/1624) applies and defines gambling as a distinct service for the first time. Checks are required when a stake is placed or winnings are collected at EUR 2,000 or more, in a single transaction or linked ones (recital 64).<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-coin\"\/><\/svg><\/span><h3>Source of funds<\/h3><p>If a player deposits and withdraws large sums, the operator finds out where the money comes from and checks it against documents. Regulators look at whether you follow your own procedures, not only at whether they are written down.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-ban\"\/><\/svg><\/span><h3>Sanctions and PEPs<\/h3><p>Players are screened against sanctions lists and checked for politically exposed person (PEP) status, meaning officials, their relatives and close associates. Such customers get deeper checks. In Malta this is expressly part of the FIAU (Malta\u2019s financial intelligence unit) guidance for remote gaming.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-eye\"\/><\/svg><\/span><h3>Monitoring and reporting<\/h3><p>The operator tracks transactions that do not fit the player&#8217;s profile and reports suspicious ones to the financial intelligence unit. In the UK this is done under the Proceeds of Crime Act (POCA), in Cura\u00e7ao through the goAML portal.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-pen\"\/><\/svg><\/span><h3>AML officer<\/h3><p>Someone must be responsible for AML and for reporting suspicions: in Malta this is the MLRO, in Cura\u00e7ao the compliance officer. Cura\u00e7ao publishes the requirements for the role in a separate document.<\/p><\/div><\/div><div class=\"lbm-cmp\"><table><thead><tr><th>System<\/th><th>Basis<\/th><th>What matters<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">EU<\/th><td>AMLR, from 10 July 2027<\/td><td>Checks at a stake or winnings of EUR 2,000 or more. Online gambling, casinos and sports betting cannot be exempted as low-risk (recital 63). Until 2027, national laws apply.<\/td><\/tr><tr><th scope=\"row\">FATF (the international anti-money laundering standard-setter)<\/th><td>Recommendation 22<\/td><td>International standard. For casinos, checks at transactions of USD or EUR 3,000 or more, and customer data must be linkable to the customer&#8217;s transactions. An ID check at the door is not enough.<\/td><\/tr><tr><th scope=\"row\">United Kingdom<\/th><td>Money Laundering Regulations 2017 and POCA<\/td><td>Casinos, including online, have extra duties. Following the Commission&#8217;s guidance is part of licence conditions, and failures can affect the licence.<\/td><\/tr><tr><th scope=\"row\">Malta<\/th><td>FIAU Implementing Procedures, Part II for remote gaming<\/td><td>Customer due diligence, ongoing monitoring, PEPs, MLRO. Risk from affiliates is assessed separately. Revised 2 July 2020.<\/td><\/tr><tr><th scope=\"row\">Cura\u00e7ao<\/th><td>LID (Cura\u00e7ao law on customer identification) and LMOT (Cura\u00e7ao law on reporting unusual transactions) laws of 2017, CGA regulations as of 10 January 2025<\/td><td>Apply to everyone offering gambling. Supervised by the CGA since 15 February 2019. Reports go through goAML.<\/td><\/tr><\/tbody><\/table><\/div><div class=\"lbm-co soft\"><span class=\"lbm-ico\"><svg><use href=\"#i-bulb\"\/><\/svg><\/span><div><b>What this means<\/b><p>The EUR 2,000 or 3,000 figure is the minimum for a check, not permission to play unchecked below it. The operator must be able to attribute transactions to a specific customer even before identity verification is complete. The AMLR recitals say so directly.<\/p><\/div><\/div><\/section><section id=\"rg\"><h2>Responsible gambling: mandatory tools<\/h2><p style=\"max-width:70ch\">The player-facing rules run from simple to complex. First age and control tools, then operator intervention.<\/p><div class=\"lbm-roles\"><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-user\"\/><\/svg><\/span><h3>Age<\/h3><p>In Cura\u00e7ao the operator collects the date of birth and confirmation that the player is over 18, and runs further checks. A photo ID is required at certain thresholds and no later than the first withdrawal. If a minor is found, the account is closed at once and every step is recorded.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-coin\"\/><\/svg><\/span><h3>Limits<\/h3><p>In Malta the operator must offer a deposit or wagering limit, and the regulator encourages both. Players are asked about limits after registration and before the first deposit, and access to them must be easy. In Cura\u00e7ao a player can set daily, weekly or monthly deposit limits. A limit can be tightened immediately but loosened only after 24 hours.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-clock\"\/><\/svg><\/span><h3>Breaks and reminders<\/h3><p>In Cura\u00e7ao a cooling-off period of 24 hours, 7 days, one month or 3 months is mandatory. In Malta the operator must provide reality checks. The pop-up pauses play, shows time played, amount wagered and the session&#8217;s result, and stays until the player acknowledges it.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-ban\"\/><\/svg><\/span><h3>Self-exclusion<\/h3><p>A player can block their own access for a fixed period or permanently. The operator must not delay it and must not let the player return early. Self-exclusion covers all brands and domains under one licence.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-eye\"\/><\/svg><\/span><h3>Harm monitoring<\/h3><p>The operator tracks indicators of harm, for example a sharp rise in spending, very long sessions or frequent limit changes. One signal proves nothing, so look at the combination. Every intervention is recorded.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-pen\"\/><\/svg><\/span><h3>Staff, advertising, records<\/h3><p>Customer service and responsible gambling staff are trained to spot warning signs, and VIP managers and marketers should be too. Advertising must not target vulnerable people and must carry a responsible gambling message. Exclusions and player interactions are kept on record.<\/p><\/div><\/div><div class=\"lbm-cmp\"><table><thead><tr><th>System<\/th><th>Self-exclusion term and process<\/th><th>Notes<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">Malta (MGA)<\/th><td>Fixed term or indefinite. Must take effect without delay, and more than 24 hours counts as non-compliant<\/td><td>Revocation of a fixed exclusion after at least 24 hours, of an indefinite one after 7 days. Applies to all brands under the licence<\/td><\/tr><tr><th scope=\"row\">Cura\u00e7ao (CGA)<\/th><td>From 1 year, options 1, 3, 5, 10 years or lifetime. Fully online<\/td><td>Irrevocable for the chosen term. Reactivation only at the player&#8217;s written request after the term ends. Applies to all brands and domains<\/td><\/tr><tr><th scope=\"row\">Estonia<\/th><td>6 to 36 months, register kept by the Tax and Customs Board (EMTA)<\/td><td>Only the person can apply. The term cannot be shortened. Operators must not let the person gamble<\/td><\/tr><\/tbody><\/table><\/div><div class=\"lbm-co info\"><span class=\"lbm-ico\"><svg><use href=\"#i-info\"\/><\/svg><\/span><div><b>New in the UK<\/b><p>Since 28 February 2025, when a player&#8217;s net deposits exceed \u00a3150 in a rolling 30 days, the operator must run a financial vulnerability check (LCCP condition 3.4.4, part of the licence conditions code). At minimum this is a search of public records for debts and bankruptcy. If such a check was done in the previous 12 months, it need not be repeated.<\/p><\/div><\/div><\/section><div class=\"lbm-svc\"><div><b>Need help with this topic?<\/b><p>We will review your situation and propose a solution for your project.<\/p><\/div><a class=\"lbm-svc-btn popmake-4929\" href=\"#\" role=\"button\">Contact us<\/a><\/div><section id=\"link\"><h2>Where responsible gambling and AML overlap<\/h2><p style=\"max-width:70ch\">Regulators increasingly look at both together, because they share data and share failures.<\/p><div class=\"lbm-roles\"><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-coin\"\/><\/svg><\/span><h3>Source of funds and affordability<\/h3><p>If a player spends a lot, the operator must understand whether they can afford it, and separately where the money comes from. These are two questions, but checking the player&#8217;s finances usually yields data for both.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-ban\"\/><\/svg><\/span><h3>Self-excluded players and payments<\/h3><p>Cura\u00e7ao requires reasonable measures against duplicate accounts and known payment methods of an excluded player. Malta requires exclusion across all brands under the licence and detection of matching details, IP addresses and devices.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-alert\"\/><\/svg><\/span><h3>Shared risk signals<\/h3><p>A sharp rise in deposits, failed payments, split amounts and several accounts of one person point to two risks at once. A good system does not run two separate rule sets but passes the signal to both functions.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-clock\"\/><\/svg><\/span><h3>Withdrawals and checks<\/h3><p>Cura\u00e7ao expressly prohibits using responsible gambling measures to delay legitimate withdrawals. In the L &amp; L Europe case the UK regulator separately noted late information requests at withdrawal. Checks are better done early.<\/p><\/div><\/div><div class=\"lbm-co dark\"><span class=\"lbm-ico\"><svg><use href=\"#i-alert\"\/><\/svg><\/span><div><b>What this means<\/b><p>You can and should separate the functions in the organisation. But decisions on one player should end up in one place, so the AML specialist sees signs of problem gambling and the responsible gambling specialist sees signs of suspicious transactions.<\/p><\/div><\/div><\/section><section id=\"practice\"><h2>Regulator practice<\/h2><p style=\"max-width:70ch\">Below are two decisions of the UK Gambling Commission (UKGC). They are not EU or Cura\u00e7ao decisions, but their lessons on AML and responsible gambling apply to any operator.<\/p><div class=\"lbm-roles\"><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-alert\"\/><\/svg><\/span><h3>Grosvenor Casinos, 7 October 2026<\/h3><p>A \u00a35 million payment and a mandatory third-party audit. The operator is part of Rank Group. Policies were not updated after the 2020 rule changes, decisions on higher-risk customers were inconsistent, and high-risk funds were accepted without enough scrutiny. Enhanced due diligence was not carried out even where the operator&#8217;s own policies required it. On responsible gambling, there was no interaction while one customer lost \u00a350,000, and no record of interaction with a customer who won about \u00a3260,000 and lost about \u00a3250,000 within 12 days. A customer returning from self-exclusion was not approached until they had lost \u00a325,000.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-alert\"\/><\/svg><\/span><h3>L &amp; L Europe, 21 October 2026<\/h3><p>A \u00a3900,000 settlement. The company runs seven sites. AML controls relied mainly on thresholds and sampling, not on risk factors and the customer&#8217;s profile. The company did not follow its own due diligence procedures, for example it did not verify that funds in newly opened accounts came from employment, business or savings. Harm alerts were active on only some of the seven sites, and there was no process to assess whether interactions were effective. Separate failings were found on withdrawals: information that could have been requested earlier was asked for at payout.<\/p><\/div><\/div><div class=\"lbm-co info\"><span class=\"lbm-ico\"><svg><use href=\"#i-info\"\/><\/svg><\/span><div><b>What this means<\/b><p>In both cases the document existed but did not work in practice. The regulator checks not whether a policy exists but whether it is applied to real customers, and whether the mechanisms work the same on every brand.<\/p><\/div><\/div><\/section><section id=\"build\"><h2>How to build the procedures<\/h2><p style=\"max-width:70ch\">The structure is the same for any licence. Timelines, document names and details differ.<\/p><div class=\"lbm-roles\"><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-doc\"\/><\/svg><\/span><h3>Policies<\/h3><p>An AML policy with a business risk assessment, and a responsible gambling policy. In Cura\u00e7ao the responsible gambling policy is uploaded to the CGA portal and material changes are reported to the regulator.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-user\"\/><\/svg><\/span><h3>Responsible people<\/h3><p>A separate AML officer (MLRO or compliance officer) and a separate person or function for responsible gambling. In Cura\u00e7ao the person responsible for responsible gambling (or the compliance officer) reports to management at least once a year.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-clock\"\/><\/svg><\/span><h3>Records<\/h3><p>Licence rules decide what to keep and for how long. In Cura\u00e7ao, records of operator-initiated exclusions are kept for at least five years, and betting history must be available for at least six months. AML records are kept as required by your country&#8217;s law.<\/p><\/div><div class=\"lbm-role\"><span class=\"lbm-ico\"><svg><use href=\"#i-eye\"\/><\/svg><\/span><h3>Training and testing<\/h3><p>Staff training, regular testing of the tools (limits, reminders, self-exclusion) on every brand, and checks that decisions on players are recorded. In 2025 Malta tested self-exclusion with mystery shoppers, so it is worth running such tests yourself.<\/p><\/div><\/div><\/section><section id=\"choose\"><h2>What to do now<\/h2><p style=\"max-width:70ch\">These steps do not depend on which licence you hold.<\/p><ol class=\"lbm-steps\"><li><span class=\"lbm-ico\"><svg><use href=\"#i-globe\"\/><\/svg><\/span><div><h3>Work out which rules are yours<\/h3><p>Your licence, the markets where you accept players, and your payment partners. List the requirements by source.<\/p><span class=\"lbm-tag\">Start here<\/span><\/div><\/li><li><span class=\"lbm-ico\"><svg><use href=\"#i-layers\"\/><\/svg><\/span><div><h3>Update the risk assessment<\/h3><p>Games, channels, payment methods, countries, affiliates. Record the assessment and the review dates.<\/p><\/div><\/li><li><span class=\"lbm-ico\"><svg><use href=\"#i-doc\"\/><\/svg><\/span><div><h3>Put policies and responsible people in order<\/h3><p>AML policy, responsible gambling policy, and appointment of an MLRO or compliance officer and a responsible gambling lead.<\/p><\/div><\/li><li><span class=\"lbm-ico\"><svg><use href=\"#i-coin\"\/><\/svg><\/span><div><h3>Test player tools on every brand<\/h3><p>Limits, breaks, reminders, self-exclusion. Check that an exclusion applies to all brands and domains and that the player cannot return early.<\/p><\/div><\/li><li><span class=\"lbm-ico\"><svg><use href=\"#i-eye\"\/><\/svg><\/span><div><h3>Link AML and responsible gambling signals<\/h3><p>One decision log per player, shared risk indicators, a clear escalation route.<\/p><\/div><\/li><li><span class=\"lbm-ico\"><svg><use href=\"#i-clock\"\/><\/svg><\/span><div><h3>Train and test yourself<\/h3><p>Staff training, mystery-shopper tests, an annual report to management and review dates for policies.<\/p><\/div><\/li><\/ol><div class=\"lbm-co dark\"><span class=\"lbm-ico\"><svg><use href=\"#i-alert\"\/><\/svg><\/span><div><b>Benchmark<\/b><p>Cura\u00e7ao&#8217;s responsible gambling policy was to be fully implemented by the end of September 2026, and the AMLR applies in the EU from 10 July 2027. Build your processes to the stricter of the rules that apply to you.<\/p><\/div><\/div><\/section><figure class=\"lbm-pull\"><q>The regulator asks not only whether you have a policy, but whether it worked on a specific player.<\/q><cite>LegalBit team<\/cite><\/figure><section id=\"faq\"><h2>Frequently asked questions<\/h2><div class=\"lbm-faq\"><details><summary>Do I need both sets of procedures with a Cura\u00e7ao licence?<\/summary><p>Yes. The LID and LMOT laws on AML apply to everyone offering gambling in Cura\u00e7ao, and the CGA separately requires a responsible gambling policy. They are different documents with different checks.<\/p><\/details><details><summary>What counts toward the AMLR&#8217;s EUR 2,000 threshold?<\/summary><p>A single stake or collection of winnings of EUR 2,000 or more, or several linked transactions that add up to it. The operator must be able to attribute transactions to the customer even before identity verification is complete (recital 64).<\/p><\/details><details><summary>Can a player return early after self-exclusion?<\/summary><p>No. In Cura\u00e7ao self-exclusion is irrevocable for the chosen term, and in Estonia the term cannot be shortened. In Malta revocation applies only after a pause, 24 hours for a fixed exclusion and 7 days for an indefinite one.<\/p><\/details><details><summary>Can I hold a withdrawal while checks are under way?<\/summary><p>Responsible gambling measures must not be used to delay legitimate withdrawals, as the Cura\u00e7ao policy says directly. In the UK, late information requests at withdrawal were among the failings in the L &amp; L Europe case.<\/p><\/details><details><summary>Do I need a separate responsible gambling officer?<\/summary><p>In Cura\u00e7ao you need a person responsible for responsible gambling, who can be the compliance officer, reporting to management at least once a year. In other jurisdictions check the licence conditions.<\/p><\/details><details><summary>What does an operator risk for failures?<\/summary><p>Financial penalties and extra measures. In October 2026 the UK Gambling Commission took \u00a35 million from Grosvenor and required an audit, and \u00a3900,000 from L &amp; L Europe.<\/p><\/details><\/div><p class=\"lbm-more\"><b>See also: <\/b><a href=\"\/en\/kyc-kyb-payment-providers\/\">KYC and KYB for payment providers<\/a>; <a href=\"\/en\/online-casino-license\/\">Online casino licence<\/a>; <a href=\"\/en\/gambling-payment-laundering\/\">Illegal gambling through third-party card payments<\/a>; <a href=\"\/en\/brazil-betting-ban\/\">Brazil betting ban<\/a>. Services: <a href=\"\/en\/regulatory-and-compliance\/\">regulatory and compliance<\/a>.<\/p><div class=\"lbm-src\"><b>Sources<\/b><ul><li><a href=\"https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/1624\/oj\" rel=\"nofollow noopener\" target=\"_blank\">EUR-Lex: Regulation (EU) 2024\/1624 on preventing use of the financial system for money laundering (AMLR)<\/a><\/li><li><a href=\"https:\/\/cfatf-gafic.org\/documents\/fatf-40r\/388-fatf-recommendation-22-dnfbps-customer-due-diligence\" rel=\"nofollow noopener\" target=\"_blank\">FATF Recommendation 22: customer due diligence for DNFBPs (text published by CFATF)<\/a><\/li><li><a href=\"https:\/\/www.gamblingcommission.gov.uk\/licensees-and-businesses\/guide\/approach-to-preventing-money-laundering\" rel=\"nofollow noopener\" target=\"_blank\">Gambling Commission: approach to preventing money laundering<\/a><\/li><li><a href=\"https:\/\/www.gamblingcommission.gov.uk\/licensees-and-businesses\/lccp\/condition\/3-4-4-financial-vulnerability-check\" rel=\"nofollow noopener\" target=\"_blank\">Gambling Commission: LCCP condition 3.4.4, financial vulnerability check<\/a><\/li><li><a href=\"https:\/\/www.gamblingcommission.gov.uk\/news\/article\/land-based-casino-operators-to-pay-gbp5m-for-regulatory-failures\" rel=\"nofollow noopener\" target=\"_blank\">Gambling Commission: casino operators to pay \u00a35m (7 October 2026)<\/a><\/li><li><a href=\"https:\/\/www.gamblingcommission.gov.uk\/news\/article\/l-and-l-europe-pays-gbp900-000-for-failures-including-withdrawal-delays\" rel=\"nofollow noopener\" target=\"_blank\">Gambling Commission: L &amp; L Europe pays \u00a3900,000 (21 October 2026)<\/a><\/li><li><a href=\"https:\/\/www.mga.org.mt\/licensing\/remote-gaming\/\" rel=\"nofollow noopener\" target=\"_blank\">MGA: mandatory responsible gaming tools for remote gaming<\/a><\/li><li><a href=\"https:\/\/www.mga.org.mt\/app\/uploads\/Thematic-Review-Self-Exclusion-Practices.pdf\" rel=\"nofollow noopener\" target=\"_blank\">MGA: thematic review of self-exclusion practices<\/a><\/li><li><a href=\"https:\/\/fiaumalta.org\/news\/implementing-procedures-part-ii-for-the-remote-gaming-sector-revised-version-2\/\" rel=\"nofollow noopener\" target=\"_blank\">FIAU Malta: Implementing Procedures Part II for the remote gaming sector (2020 revision)<\/a><\/li><li><a href=\"https:\/\/www.cga.cw\/regulation\/aml\" rel=\"nofollow noopener\" target=\"_blank\">CGA Cura\u00e7ao: AML\/CFT\/CFP for gambling providers<\/a><\/li><li><a href=\"https:\/\/gobiernu.cw\/wp-content\/uploads\/2025\/05\/CGA-responsible-gaming-policy.pdf\" rel=\"nofollow noopener\" target=\"_blank\">CGA Cura\u00e7ao: Responsible Gaming Policy, version 1.0, 17 April 2025<\/a><\/li><li><a href=\"https:\/\/www.emta.ee\/en\/private-client\/e-services-tax-literacy\/registers-inquiries\/setting-restrictions-gambling\" rel=\"nofollow noopener\" target=\"_blank\">EMTA Estonia: setting restrictions on gambling<\/a><\/li><\/ul><\/div><\/section><\/div>\n\n\n\n<div class=\"lb-ac\"><h2>This topic is our service<\/h2><p>More on how we help iGaming companies:<\/p><ul><li><a href=\"https:\/\/legalbit.top\/en\/regulatory-and-compliance\/\">Regulatory and compliance<\/a><\/li><li><a href=\"https:\/\/legalbit.top\/en\/risk-assesment-consulting\/\">Risk assessment<\/a><\/li><\/ul><\/div>\n\n\n\n<script type=\"application\/ld+json\">{\"@context\": \"https:\/\/schema.org\", \"@type\": \"BlogPosting\", \"headline\": \"Responsible Gambling and AML for iGaming Operators: Mandatory Procedures\", \"url\": \"https:\/\/legalbit.top\/en\/igaming-responsible-gambling-aml\/\", \"mainEntityOfPage\": \"https:\/\/legalbit.top\/en\/igaming-responsible-gambling-aml\/\", \"image\": \"https:\/\/legalbit.top\/wp-content\/uploads\/2026\/10\/igaming_aml-scaled.webp\", \"datePublished\": \"2026-10-23T11:45:00Z\", \"dateModified\": \"2026-10-23T11:45:00Z\", \"inLanguage\": \"en\", \"author\": {\"@type\": \"Organization\", \"name\": \"LegalBit\", \"url\": \"https:\/\/legalbit.top\/\"}, \"publisher\": {\"@type\": \"Organization\", \"name\": \"LegalBit\", \"url\": \"https:\/\/legalbit.top\/\"}}<\/script>\n","protected":false},"excerpt":{"rendered":"<p>An online gambling operator answers to the regulator on two fronts. The first is protection against money laundering, known as AML. The second is responsible gambling, which means protecting the players themselves. This article covers the procedures that are mandatory on each front in the EU, the UK, Malta, Cura\u00e7ao and Estonia, where the two [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":8092,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[82,69],"tags":[],"post_folder":[],"class_list":["post-8091","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-compliance-and-aml","category-igaming"],"_links":{"self":[{"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/posts\/8091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/comments?post=8091"}],"version-history":[{"count":3,"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/posts\/8091\/revisions"}],"predecessor-version":[{"id":8118,"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/posts\/8091\/revisions\/8118"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/media\/8092"}],"wp:attachment":[{"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/media?parent=8091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/categories?post=8091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/tags?post=8091"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/legalbit.top\/en\/wp-json\/wp\/v2\/post_folder?post=8091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}