KYC — “know your customer” — is the verification every UK-licensed gambling operator must complete. It is the most common cause of withdrawal delays, and almost all of that delay is avoidable by doing it at the right time.
Why it exists
Three legal requirements sit behind it: age verification, so nobody under 18 gambles; anti-money-laundering obligations under UK regulations; and affordability and safer-gambling duties. UK operators must verify age and identity before a customer deposits or plays — not at withdrawal. An operator that lets you deposit unverified and only asks when you try to take money out is not following the rules it is meant to.
What they will ask for
| Check | Typical documents |
|---|---|
| Identity | Passport, UK driving licence, or national ID |
| Address | Utility bill or bank statement from the last three months, or a council tax bill |
| Payment ownership | Card image with all but the last four digits masked, or an e-wallet screenshot |
| Source of funds | Payslips or bank statements — only above certain thresholds |
Most accounts are verified electronically against databases without any document upload at all. Manual documents are the fallback when the electronic check cannot confirm you.
What is legitimate to send
Identity and address documents to a licensed operator through a secure upload in your account area: normal and required. A masked card image: normal. Source-of-funds evidence above a threshold: intrusive, and also a legal obligation on the operator rather than a choice.
What is not
- Documents by email or live chat. Use the secure upload in the account area. Email is not an appropriate channel for a passport.
- Your full unmasked card number. Never necessary.
- Your online banking login. Never, under any circumstances, whatever the reason given.
- A selfie holding your ID next to handwritten text for a site you have not verified is licensed. This format is heavily used in identity fraud.
Getting through it without delay
- Verify at registration. Before depositing. This removes the classic withdrawal-day scramble.
- Match your details exactly. The name and address on the account must match the documents — a middle name or an old address is the most common rejection.
- Send clear, complete images. All four corners visible, no glare, in colour, unedited.
- Use a document that is in date. Obvious, and a frequent failure.
- Register in your own name only. Third-party accounts and payments are prohibited and will fail verification.
How long it should take
Electronic verification is usually instant. Manual document review is typically 24 to 72 hours. Longer than that, without a clear explanation, is worth chasing in writing.
Where your documents go
A licensed operator is a data controller under UK GDPR: it must state retention periods, secure the data, and delete it when the retention basis expires. You have a right to ask what is held. An unlicensed site has none of these obligations, which is the strongest practical argument against sending identity documents to one. If a site is not verifiably licensed, do not upload a passport to it — check the register first.
Read next
18+ only. Gambling can be addictive — please play responsibly. Free, confidential support is available from BeGambleAware and GamCare on 0808 8020 133. UK players can self-exclude from all licensed online operators through GAMSTOP. This article is editorial information, not advice, and nothing here improves your odds.
