Why an online casino asks for your documents
Sooner or later every casino account runs into verification. A withdrawal sits pending, an email asks for a photo of your driver licence, and the reaction is usually annoyance mixed with suspicion. The request is routine. KYC — Know Your Customer — is the identity check licensed gambling operators are required to run, and AML — Anti-Money Laundering — is the wider framework it belongs to.
The purpose is easier to see from the operator’s side. A gambling account moves money in and out, which makes it attractive to three groups: people using stolen card details, people opening accounts in someone else’s name, and people pushing criminal proceeds through a business that produces legitimate-looking payouts. Verification blocks all three, and it protects you too, because an account tied to a verified identity is much harder for a stranger to drain.
This page covers what GoldenBet and operators of the same class typically ask for, how the process runs, why documents get rejected, and what to do when a check stalls. Exact processing times at GoldenBet are not published, so the timings below are expectations rather than promises.
The licence behind the requirement
GoldenBet is operated by Santeda International B.V., registered in Curaçao with company number 151296 at Zuikertuintjeweg Z/N. The brand holds licence OGL/2024/1798/1048 from the Curaçao Gaming Authority, issued on 14 August 2024, and publishes its own AML/KYC Policy alongside its Refund Policy and Dispute Resolution pages.
A licence turns “we would like to see your ID” into “we are obliged to see your ID”. Under the Curaçao framework an operator has to identify its customers, keep records of who they are and how they fund play, monitor transactions for laundering patterns, and report suspicious activity to the regulator. A site that never asked for documents would not be a friendlier site; it would be one ignoring the rules its licence rests on.
The local backdrop matters as well. The Interactive Gambling Act 2001 targets operators rather than players, and offshore casinos hold no Australian licence, so their compliance obligations sit with the Curaçao regulator. That is worth weighing up when you decide where your documents are going.
What you will be asked to provide
Verification splits into three proofs: who you are, where you live, and that the payment method belongs to you. Larger withdrawals tend to trigger a fuller check.
Proof of identity
An Australian passport, a state or territory driver licence (front and back), or a Keypass or Proof of Age card. It must be current, with all four corners visible in the photo. The name has to match the account name exactly — accounts opened as “Dave” while the licence says “David” are the most common first-round failure.
Proof of address
A utility bill, council rates notice, bank or credit card statement, or a government letter such as an ATO or Centrelink notice. It normally has to be dated within three months and show your full name and residential address on the same page. Mobile phone bills and PO box addresses are frequently rejected, and a downloaded PDF invoice beats a screenshot of a billing portal.
Proof of payment method
For a card, a photo showing the first six and last four digits with the middle covered and the CVV blacked out. For an e-wallet such as Skrill, Neteller or MiFinity, a screenshot of the profile showing your name and account email. For PayID or bank transfer, a statement header with your name and the account used. For crypto, the wallet address and sometimes an exchange account screenshot.
File formats and scan quality
JPG, PNG and PDF cover almost every upload form, usually with a ceiling between 5 MB and 10 MB per file. Photograph documents flat on a plain surface in daylight, because glare across a licence hologram wipes out the details a reviewer needs. Keep the whole document in frame, fingers off the edges, and skip heavy cropping — edited files look altered and get pushed to manual review.
| Document | Accepted formats | What it proves | Common rejection reason |
|---|---|---|---|
| Passport photo page | JPG, PNG, PDF | Identity, age, nationality | Glare across the machine-readable strip |
| Driver licence, both sides | JPG, PNG, PDF | Identity, age, address in most states | Only one side uploaded, or expired card |
| Utility bill or rates notice | PDF preferred, JPG or PNG accepted | Residential address | Older than three months, or name and address on separate pages |
| Bank or card statement | Address and ownership of the payment account | Full account number visible, or a cropped header | |
| Card photo, digits masked | JPG, PNG | The card belongs to the account holder | CVV visible, or cardholder name unreadable |
| E-wallet profile screenshot | JPG, PNG | Wallet registered in your name | Email or account name cropped out |
| Selfie holding your ID | JPG, PNG | The sender is the document holder | Face or document text out of focus |
| Source of funds evidence | Where deposited money came from | Redacted so heavily nothing is confirmable |
How the check runs, step by step
- Trigger. Verification is prompted by a first withdrawal request, by cumulative deposits crossing a threshold, or occasionally at sign-up. The account registration steps page covers the details you enter when the account is created, and getting those right is what makes verification painless later.
- Request. An email or on-site notice lists the documents needed. Partial submissions restart the clock.
- Upload. Files go through the account area or a support email address, ideally all in one go.
- Automated screening. Software reads the document fields, compares them with your account details, and checks sanctions and politically exposed person lists.
- Manual review. A compliance officer looks at anything flagged. Operators of this class usually turn this around within 24 to 72 hours, and busy periods stretch it further.
- Outcome. The account is verified, or a specific replacement document is requested. A clear rejection reason is a good sign — someone actually looked.
Verify before your first withdrawal
Nothing stops you uploading documents on day one, and doing so removes the most frustrating scenario in online gambling: a win sitting pending while you hunt for a three-month-old electricity bill. Withdrawal timeframes quoted by any casino start counting once the account is verified. Fifteen minutes on registration day buys back several days later.
Source of funds requests
A source of funds check goes a step beyond standard KYC. It asks where the money came from, and it typically appears when deposits climb well beyond your normal pattern, when funds arrive from several unrelated payment methods, or when a quiet account suddenly spikes.
Documents that satisfy it include recent payslips, a tax return or ATO notice of assessment, bank statements showing salary credits, a letter from an accountant for self-employed income, or paperwork for a property sale, inheritance or redundancy payout. For crypto deposits, an exchange transaction history showing the purchase usually does the job.
Being asked is not an accusation. Under AML rules the operator has to demonstrate it made reasonable enquiries, and silence leaves it one available action: freeze the account. Answering promptly is the fastest route through, and you may ask which specific concern the operator is trying to resolve.
AML in plain terms
Anti-money laundering rules exist because gambling businesses process large transaction volumes and can turn dirty money into clean-looking payouts. The classic pattern is deposit, minimal play, withdraw: money goes in and comes back out as “winnings” with a paper trail attached.
What compliance teams watch for
- Deposits followed by withdrawal with little or no wagering in between.
- Structuring — many small deposits sized to stay under a reporting threshold.
- Deposits from one method and withdrawal requests to a different one in another name.
- Several accounts sharing a device, IP address or payment instrument.
What the operator has to do
- Identify and verify customers before allowing significant transactions.
- Keep customer and transaction records for a defined retention period.
- Monitor activity continuously rather than only at sign-up.
- Report suspicious matters to the regulator without telling the customer.
Two practical consequences follow for ordinary players. Withdrawals are normally returned to the method used to deposit — a closed-loop rule that exists specifically to defeat laundering. And an account has to belong to one person: sharing with a partner or family member breaches the terms of every licensed operator and is a reliable way to have a withdrawal refused.
What happens to your documents
Storage and retention
Uploaded files should travel over an encrypted connection into encrypted storage with access limited to the compliance team. Retention periods under AML frameworks run for years after an account closes, because the operator must be able to reconstruct the record if a regulator asks. Closing your account therefore does not delete your documents, and no compliant operator can promise otherwise.
Reducing what you hand over
- Mask the middle digits of card numbers and black out the CVV before uploading.
- Redact balances and unrelated transaction lines, leaving name, address and header intact.
- Upload only through the account area or the support address published on the site — a second request from an unfamiliar address deserves a check with live chat first.
Your rights under the Privacy Act 1988 (Cth)
The Privacy Act 1988 (Cth) and the Australian Privacy Principles set out how organisations must handle personal information: collect only what is needed, keep it secure, explain the purpose, allow access and correction. An offshore operator without an Australian presence may sit outside the Act’s practical reach, so treat those principles as a standard for measuring a site rather than a guarantee enforceable from Sydney. Before uploading, read how the operator describes the data used for identity verification, and if a request looks disproportionate, ask which regulation requires it.
When verification stalls
- Re-read the original request and confirm every item was uploaded, including the reverse of a licence.
- Open live chat and ask which document failed and why. Vague answers deserve a follow-up.
- Replace the failed file: better light, full document in frame, no cropping.
- Email [email protected] with your username, the request date and the documents attached, creating a written trail.
- If a week passes without a substantive answer, invoke the operator’s Dispute Resolution process in writing and quote licence number OGL/2024/1798/1048.
- Escalate to the Curaçao Gaming Authority if the internal process fails. Keep screenshots and timestamps from the start — complaints backed by records move faster.
Delays cluster around three causes: a name mismatch between account and ID, an address document older than three months, and a withdrawal pointed at a payment method the account never deposited with. Clearing those before you submit removes most of the wait.
The short version
Verification is the price of a payout system that can tell customers apart, and the reason a stranger with your email address cannot empty your balance. Upload a clear passport or licence, a recent utility bill and proof of your payment method on the day you register, keep the account name identical to the document name, and expect the review to take a day or three at operators of this class. The sign-up flow is covered in our review of the GoldenBet Australia official site, and the account controls that sit alongside verification are explained under responsible gambling tools. Gambling is for adults aged 18 and over; free confidential support is available from Gambling Help Online on 1800 858 858.