Legal
KYC Policy
Documents required, processing times, rejection reasons, and what happens to your data after verification.
Last updated
1. Why we ask
Curaçao law and our licence conditions require us to verify the identity of every player. “Know Your Customer” (KYC) protects players from identity fraud, protects the operator from money laundering, and protects the wider system from sanctions evasion.
2. When we ask
KYC is required:
- At first withdrawal.
- When cumulative deposits exceed USD 2,000 in any 30-day window.
- When a single transaction exceeds USD 5,000.
- When automated screening flags a risk indicator (PEP match, sanctions partial match, geolocation anomaly, etc.).
- Periodically thereafter — typically every 24 months or when material information changes.
We may also conduct KYC at registration where the player’s declared country has elevated risk.
3. Documents required (standard tier)
You will be asked to provide:
- Government-issued photo ID — passport, national ID card, or driver’s licence. Must be valid, in colour, all four corners visible, and machine-readable.
- Selfie / liveness check — a short video or sequence of photos produced through our KYC provider’s flow. We never accept a still photo on its own.
- Proof of address — a utility bill, bank statement, or tax letter dated within the last 90 days, showing your full name and address.
4. Documents required (enhanced tier)
For enhanced due diligence — see the AML Policy — we will additionally request:
- Source of funds — recent payslips, an employment contract, a bank statement covering at least three months, a sale-of-asset contract, or a tax return.
- Source of wealth — narrative plus supporting documents explaining how you accumulated the wealth you are gambling with (inheritance documents, business sale paperwork, investment statements).
- Updated screening on PEP / sanctions / adverse media.
5. Processing time
- Standard tier: most reviews complete in under 30 minutes, median 7 minutes. Up to 24 hours in edge cases.
- Enhanced tier: typically 1 – 3 business days depending on document complexity.
We do not require documents to be notarised or apostilled for standard tier. Enhanced-tier reviews may request certified copies of high-value source-of-wealth documents.
6. Common rejection reasons
If we reject a submission we will tell you why. The most common reasons:
| Reason | What to do |
|---|---|
| Document expired | Submit a current document. |
| Glare, blur, or cropped corners | Re-shoot in good light, flat surface, all corners visible. |
| Name mismatch between ID and account | Update the account name or submit a name-change document. |
| Address on proof of address differs from account | Update the address; re-submit a recent bill. |
| Photoshopped / suspected fabricated document | The account is restricted pending investigation. |
| Document not in a supported language | Submit a certified translation alongside the original. |
7. What we do with the documents
KYC documents are transferred over TLS 1.3 directly to our KYC provider (Sumsub) and held in encrypted storage. The Operator receives the verification verdict plus a minimal record (document type, document country, expiry). The Operator does not normally hold the document images itself; where it does (for example, to satisfy a regulator request) the images are stored under envelope encryption and access is logged.
8. Retention
KYC records are retained for at least seven (7) years from the date of account closure to satisfy AML obligations. After that period, they are deleted from active systems on the next quarterly purge cycle. Backup retention is described in the Data Retention Schedule.
9. Your rights
You have the same rights over KYC data as over other personal data we hold (see the Privacy Policy). The right to erasure is subject to the AML retention obligation above.
10. Contact
KYC questions: kyc@theultimatepokergame.com.