How We Verify and Protect Your Account
We operate Luckyones Casino under Curaçao licence OGL/2024/164/0246, and that licence obliges us to know who plays on our platform. This page sets out, in plain terms, what we check, when we check it and what we ask from you.
Our AML Commitment
Why the rules bind us
Money laundering is the attempt to push proceeds of crime through a legitimate business. Since our launch in 2024 we have held a Curaçao licence, and under that licence we must maintain a full anti-money-laundering and counter-terrorism-financing programme. That programme is not paperwork for its own sake: it protects you, our other players and the integrity of every AUD, BTC, ETH and USDT transaction on our platform.
Our MLRO team owns this programme. We run risk assessments on every account, train our staff annually and report suspicious activity to the relevant authorities. We never tip off a player that a report has been made; doing so is itself an offence.
When We Verify Your Identity
Three checkpoints
Verification is not a single event. We apply it at defined checkpoints so that, for most players, the process is quick and only needed once.
- At registration: we confirm you are 18 or older, that your details are consistent and that your jurisdiction is not on our restricted list (USA, UK, France, Netherlands, Spain, Italy, Belgium, Sweden, Lithuania, Latvia, Estonia, Israel, Russia, Ukraine, Iran, North Korea).
- Before your first withdrawal: full identity verification is mandatory. We require an ID document, a proof of address and proof that you own the payment method used.
- At thresholds: if deposits, withdrawals or betting patterns reach levels set in our internal risk matrix, we re-verify your details and may ask for updated documents.
Documents we accept
For identity: a government-issued photo ID such as a passport, driver licence or national ID card. For address: a utility bill, bank statement or official government correspondence dated within the last three months. For payment ownership: a photo of the card (middle digits covered), a screenshot of your e-wallet or crypto wallet showing your name, or a bank statement showing the transaction to us.
Step by Step Verification
How it works
If a document is unclear or a name mismatch appears (for example, a maiden name), we contact you with a specific request rather than a generic rejection. All files are transmitted over TLS encryption and stored in an access-controlled repository; only vetted compliance staff can open them, and we never share them with third parties except where the law requires it.
- Open the Verification section of your account profile.
- Upload a clear, uncropped photo of your ID document; all four corners must be visible, with no glare.
- Upload your proof of address and payment method evidence.
- Our compliance team reviews the files and confirms the name, date of birth and address against your profile.
- You receive an email and an on-site notification once your account is verified.
When We Ask for Source of Funds
A legitimate question at high value
If a single deposit or a pattern of deposits exceeds a level flagged in our risk framework, we may ask where the money comes from. This is not an accusation; it is a statutory duty under our Curaçao licence.
Acceptable evidence includes payslips, a employment contract, bank statements showing regular income, dividend statements, a signed contract for a business sale or an inheritance document. We treat this information as strictly confidential and use it only for the assessment at hand. If you would rather not disclose it, we will close your account and return your balance through the original deposit method.
How We Monitor Transactions
Deposits and withdrawals
Every deposit and withdrawal passes automated screening. Our systems flag structuring (many small transactions designed to stay under thresholds), rapid deposit-withdrawal cycling with minimal play, and inconsistent patterns against your profile. Flagged transactions are reviewed by a human analyst before any funds are released.
| Check | What we look at | Our rule |
|---|---|---|
| Withdrawal method | That you withdraw to the same method you deposited with | Same-method rule; exceptions only where the method cannot receive funds, then by bank transfer in your name |
| Withdrawal limits | Daily and monthly caps | 16,000 AUD per day, 80,000 AUD per month |
| Minimum withdrawal | Lowest payout we process | 30 AUD |
| Processing time | Speed by method | Crypto and e-wallets 0 to 24 hours; cards and bank transfer 1 to 5 business days |
| Fees | Charges from our side | None |
Crypto specifics
For Bitcoin, Ethereum, Litecoin, Tether and Dogecoin we screen wallet addresses against sanctions lists and trace transactions through blockchain analytics tools. Crypto does not bypass KYC; the same identity checks apply before your first withdrawal.
If Verification Fails
What happens then
We do not confiscate balances arbitrarily, but we do restrict accounts. If you do not provide documents within 30 days of our request, or if documents fail verification, the following applies in order.
- Withdrawals are suspended first; you can still log in but not request a payout.
- If 30 days pass without valid documents, deposits are also blocked.
- If fraud, third-party payment use or identity theft is confirmed, we freeze the account, void related winnings and report to the authorities and the payment provider.
- You may appeal any decision by writing to [email protected]; a senior compliance officer reviews every appeal.
How Long We Keep Records
Storage periods
Our licence requires us to retain verification records for five years after your account closes. During that period the documents support audits, regulator inspections and, where needed, law enforcement requests. After five years we delete or irreversibly anonymise them, unless a longer retention period is mandated for an open investigation.
You may request a copy of the personal data we hold about you at any time under our privacy policy. Our live chat operates 24/7, and compliance matters can always be escalated to the MLRO through [email protected].
Frequently Asked Questions
Do I need to verify before I can deposit and play?
No. You can register, deposit and play after confirming you are 18 or older. Full KYC applies before your first withdrawal or when thresholds in our risk framework are reached.
Which documents count as proof of address?
A utility bill, bank statement or official government correspondence issued in your name, dated within the last three months. Mobile phone bills and handwritten documents are not accepted.
Why must I withdraw through the same method I deposited with?
It is an anti-money-laundering control that stops funds moving through accounts you do not own. If a deposit method cannot receive payouts, we send the funds by bank transfer to an account in your verified name.
What happens to my documents after verification?
They are stored encrypted in an access-controlled system for five years after your account closes, then deleted or anonymised. Only vetted compliance staff can access them.
Can I play in AUD and still withdraw in crypto?
You can hold AUD, BTC, ETH and USDT balances. Withdrawals must go to a wallet or account in your own verified name, and the same-method rule applies to the extent the payment rails allow it.