
Know Your Customer (KYC) Policy for Anjouan Internet Gaming Operators
The English version prevails.
1. Purpose of the KYC Policy
The Know Your Customer (KYC) Policy establishes mandatory procedures and standards to ensure that Internet Gaming Operators licensed in Anjouan:
- Verify the identity of their players.
- Prevent fraudulent activities.
- Comply with Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) regulations.
- Maintain a safe, transparent, and secure gaming environment.
2. Objectives of KYC
- Compliance with Regulations: Ensure adherence to local and international AML/CTF laws and FATF recommendations.
- Player Integrity: Verify the identity of players to prevent underage gambling, fraud, and financial crime.
- Risk Mitigation: Minimize risks associated with high-risk jurisdictions, Politically Exposed Persons (PEPs), and suspicious transactions.
- Transparency: Promote responsible gaming and safeguard player funds.
3. Scope
This policy applies to:
- All players registering for gaming services.
- Business relationships established with third-party service providers.
- Transactions exceeding designated thresholds or identified as high-risk.
4. Key KYC Principles
- Customer Identification: Verify the identity of players when the total value of aggregate lifetime deposits reaches $10,000 USD or a withdrawal request of any amount.
- Risk-Based Approach: Apply varying levels of due diligence based on the playerâs risk profile.
- Record Retention: Maintain all KYC-related documents and transaction records for at least five (5) years.
- Continuous Monitoring: Monitor player behavior and transactions to identify suspicious activity.
5. Customer Identification and Verification Process
5.1 Information Collection
The following information must be collected from all players during registration:
- Full legal name.
- Date of birth (to confirm minimum legal age).
- Nationality.
- Residential address.
- Contact information (email and phone number).
- Payment information (e.g., bank account or e-wallet details).
5.2 Document Verification
Operators must obtain and verify the following documents:
- Proof of Identity
Valid government-issued ID, such as:
- Passport.
- National ID card.
- Driverâs license.
- Residence permit.
The ID must contain the playerâs photo, name, and date of birth.
- Proof of Address
- Recent utility bill, bank statement, or government correspondence (not older than three months).
- Payment Verification
- Bank statements or screenshots showing ownership of payment methods used.
5.3 Enhanced Due Diligence (EDD)
EDD is required for:
- Players with high-risk profiles (e.g., PEPs or players from high-risk jurisdictions).
- Transactions exceeding $10,000 USD or groups of linked transactions exceeding $10,000 USD.
- Unusual or complex transaction patterns.
EDD measures include:
Verifying the source of funds and source of wealth.
Conducting additional identity checks.
Monitoring transactions more frequently.
Screening customers against global sanctions and watchlists, including those issued by:
- United Nations (UN)
- European Union (EU)
- Australian Government
- U.S. Treasury Department (OFAC)
- UK HM Treasury
6. Risk-Based Approach
Operators must classify players into risk categories based on:
- Geographic location: High-risk countries as per FATF guidelines.
- Player activity: Frequent or high-value transactions.
- Player type: PEPs or individuals with adverse media mentions.
Based on the risk classification:
- Low-risk players: Standard Due Diligence (SDD).
- High-risk players: Enhanced Due Diligence (EDD).
7. Ongoing Monitoring
7.1 Transaction Monitoring
Implement automated tools to monitor transactions for unusual activity, such as:
Large deposits or withdrawals.
Rapid movements between accounts.
Multiple small transactions designed to evade reporting thresholds.
7.2 Behavioral Monitoring
Identify patterns indicative of problem gambling, fraud, or potential ML/TF activities.
7.3 Trigger Events
Conduct periodic reviews of player accounts, triggered by:
- Account inactivity followed by large transactions.
- Player profile updates (e.g., changes in address or or payment method).
- Notifications from third-party monitoring services.
8. Politically Exposed Persons (PEPs)
8.1 Identification
PEPs include individuals who hold or have held prominent public functions, as well as their family members or close associates.
8.2 Enhanced Measures
âą Conduct comprehensive checks using third-party databases.
âą Obtain approval from senior management before establishing a business relationship.
âą Regularly review the account and transactions for unusual activity.
8.3 Sanctions and Watchlist Screening
The Company, at a minimum, screens customers against a consolidated set of global sanctions and watchlists, including but not limited to:
- United Nations (UN) Sanctions List
- European Union (EU) Consolidated List
- Australian Sanctions List
- U.S. Treasury (OFAC) SDN List
- UK HM Treasury Financial Sanctions List
9. Record Keeping and Confidentiality
9.1 Retention Period
Retain all KYC documents, transaction records, and communication logs for a minimum of five (5) years after the business relationship ends.
9.2 Data Protection
Securely store player data in compliance with the Data Protection Act and international privacy laws such as GDPR.
Ensure player data is used solely for verification and compliance purposes.
9.3 Accessibility
Ensure that KYC records are accessible to regulatory authorities upon request.
10. Reporting Obligations
10.1 Suspicious Activity Reporting (SARs)
Report suspicious activities within 7 days of detection.
Include detailed information on the player, transaction, and reasons for suspicion.
10.2 Threshold Reporting
Report all transactions exceeding $10,000 USD, even if no suspicion arises.
11. Compliance Oversight
11.1 Appointment of a Compliance Officer
Every operator must appoint a Compliance Officer responsible for:
Overseeing KYC implementation.
Liaising with regulatory authorities.
Ensuring the submission of SARs and transaction reports.
11.2 Internal Audits
Conduct periodic internal audits to evaluate the effectiveness of KYC measures.
11.3 Training Programs
Train employees on KYC procedures, including:
- Identifying fraudulent documentation.
- Recognizing red flags for ML/TF activities.
- Reporting obligations under Anjouanâs regulatory framework.
12. Penalties for Non-Compliance
Failure to comply with KYC requirements may result in:
- Administrative penalties, including fines.
- Suspension or revocation of the operatorâs gaming license.
- Referral for criminal investigation, if applicable.
13. Continuous Improvement
Operators are encouraged to:
- Regularly review and update KYC policies to align with changes in AML/CTF regulations.
- Adopt advanced technologies, such as AI and blockchain, to enhance verification processes and reduce fraud.
14. Contact Information
For assistance or inquiries regarding KYC compliance, contact:
- Email: [email protected]
- Website: Oxibet
Disclaimer: This KYC policy is a framework designed to meet the regulatory requirements of the Autonomous Island of Anjouan. Operators must adapt this policy to their specific operational needs while ensuring full compliance with local laws and regulations.
Last updated: 2025-05-09
KYC Casino Guidelines: Identity Verification Policy at Oxibet
Know Your Customer (KYC) is the set of checks that confirms you are the person named on your account before any money leaves it. Oxibet operates as a licensed kyc casino under the Autonomous Island of Anjouan Internet Gaming framework. Alongside that framework we apply global Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) protocols.
These procedures are mandatory. They keep the platform transparent and secure for Canadian players, and they protect you directly: a verified account is far harder to hijack, and a verified payout is far harder to contest. Legal queries and documents go to [email protected].
Core Objectives of Our Identity Verification Policy
Our online casino verification program rests on three regulatory pillars, and every rule further down this page traces back to one of them.
- Regulatory adherence: total alignment with local Anjouan laws and with the global Financial Action Task Force (FATF) recommendations that govern licensed gaming operators.
- Player protection: verification steps designed to stop underage gambling, identity theft, and account fraud before funds or data are exposed.
- Financial accountability: systematic screening that reduces the risks associated with high-risk jurisdictions and with Politically Exposed Persons (PEPs).
Account Verification Triggers & Document Protocols
The sections below set out exactly when a check is executed and what you must supply. Nothing here is discretionary, and no account is exempt, whatever its balance or its age.
Submit every document in a single batch where you can. Partial files sit in a pending queue, and a pending file is treated as no file at all once a trigger is reached.
Standard Verification Thresholds
An online casino verification check is triggered by one of two events. The first is any withdrawal request, regardless of size: no payout leaves a pending state until your file is complete and approved. The second is a deposit marker, reached when your aggregate lifetime deposits total $10,000 USD, at which point verification becomes mandatory whether or not you have asked to withdraw.
You may upload documents at any time before either trigger fires, and we encourage it. Accounts that reach a trigger with an incomplete file are restricted from further wagering until the paperwork is submitted.
Required Proof of Identity Documents
Proof of identity means a valid, government-issued document that has not expired. We accept a passport, a national ID card, or a driver's licence, provided the image shows a clear photograph, your full name, and your date of birth. Both sides are required for national ID cards and driver's licences.
Upload the original colour image or a high-resolution scan. Cropped corners, glare over the photograph, or an obscured document number will fail the check. The name on the document must match the name on your Oxibet account exactly.
Send identity files to [email protected] or upload them from your account.
Required Proof of Address & Payments
Proof of address must be a recent utility bill or bank statement issued less than 3 months ago, showing your name and residential address. Mobile phone bills, handwritten documents, and post office boxes are not accepted. The address must match your registration details.
You also need to prove ownership of every payment method on your account. For Interac and bank transfers, that means a statement header carrying your name; for credit and debit cards, a photograph of the card with the middle digits and CVV covered. For Bitcoin, Ethereum, and Tether, send a screenshot of the wallet address used.
Enhanced Due Diligence (EDD) & Sanctions Screening
Enhanced Due Diligence applies when an account's activity moves beyond its established pattern. Triggers include rapid deposit-and-withdrawal cycles, transaction volumes inconsistent with the information supplied at registration, structured payments that sit just below a reporting threshold, and the crossing of a high-value marker. In those cases our compliance team conducts a deeper asset evaluation and asks you to evidence your primary source of wealth.
Acceptable source-of-wealth evidence includes payslips, tax assessments, audited company accounts, a notarized deed of sale, or documented inheritance. Account functions may be limited while that review runs. We tell you what we need and why.
Oxibet screens player records against leading global watchlists on an ongoing basis, not only at registration. Those lists include the United Nations (UN), the European Union (EU), UK HM Treasury, and the United States Treasury's Office of Foreign Assets Control (OFAC).
A confirmed match results in immediate suspension of the account and a report to the relevant authority. Politically Exposed Persons are not barred from the platform outright, but their accounts require senior-management approval and remain under a heightened monitoring schedule for the life of the relationship.
Data Protection, Record Keeping, and Financial Reporting
Every document you send is encrypted in transit and at rest, then stored in access-controlled systems built to international data protection standards, including GDPR principles. Access is limited to trained compliance staff with a direct operational need. Each retrieval is logged.
We never sell your documents and never release them for marketing. Disclosure happens only where a regulator, a court, or applicable AML law compels it.
All player verification files, transaction logs, and communication records are securely retained for a minimum of five (5) years after the business relationship ends. That retention period is a legal obligation under the Anjouan framework, so a deletion request cannot override it while the clock is running. You may still ask for a copy of the personal data we hold, or ask us to correct inaccurate details, by writing to [email protected].
Our compliance officer must file a Suspicious Activity Report (SAR) within 7 days of identifying any anomalous behaviour. Reports go confidentially to the competent authority, and we are prohibited by law from informing the account holder that a report has been made. Tipping off is a criminal offence in every jurisdiction we answer to.
FAQs About Oxibet KYC Requirements
Why does Oxibet require me to complete an identity verification policy check?
Verification is a legal condition of our gaming licence under the Autonomous Island of Anjouan framework, not an internal preference. The check confirms your age, your identity, and your ownership of the payment method on the account. It also protects your balance from anyone attempting to access the account in your name.
Can I play and withdraw funds without completing KYC?
You can register and play before verification, but no withdrawal is released until your documents are approved. Any withdrawal request automatically triggers the check, as does reaching $10,000 USD in aggregate lifetime deposits. Submitting your file early is the most reliable way to avoid a hold on a payout.
How long does the verification team take to process my documents?
Review begins as soon as a complete file reaches our compliance team. Documents that are blurred, cropped, expired, or mismatched against your registration details are returned for resubmission, which restarts the review. Accounts under Enhanced Due Diligence take longer, because source-of-wealth evidence requires a second layer of assessment.
Is my personal documentation safe and encrypted at Oxibet?
Your documents are encrypted in transit and at rest, and held in systems only trained compliance staff can open. Storage follows international data protection guidelines, including GDPR principles, and files are retained for a minimum of five (5) years after the business relationship ends. We never sell your data or release it for marketing, and disclosure occurs only where a regulator, a court, or AML law requires it.