Anti-Money Laundering and KYC Verification Requirements

The security and integrity of modern digital gaming depend fundamentally upon transparent financial accounting and verifiable customer identity. In the contemporary financial ecosystem, gaming platforms operate not as isolated entertainment portals, but as covered institutions subject to comprehensive oversight designed to prevent financial crimes, illicit fund flows, and identity theft.

Under Philippine legislation—specifically Republic Act 9160 (the Anti-Money Laundering Act of 2001 or AMLA), as amended by Republic Act 10927, and administrative circulars enforced by PAGCOR—licensed operators must execute rigorous Customer Due Diligence (CDD) and Know Your Customer (KYC) procedures. This comprehensive guide outlines the statutory legal foundations, required Philippine identification credentials, step-by-step verification workflows, transaction monitoring thresholds, and data protection safeguards governing account verification.

Statutory Framework and the AMLC Mandate

The requirement to identify players and monitor transactional activity is grounded in statutory jurisprudence enacted by the Congress of the Philippines to protect national financial integrity.

v

[Republic Act 9160 (AMLA of 2001)]

Foundational anti-money laundering statute

Establishment of the AMLC regulatory body

v

[Republic Act 10927 (2017)]

Explicit inclusion of casinos & gaming operations

Coverage extended to land-based and digital venues

v

[PAGCOR AML/CTF Regulatory Rules]

Mandatory customer due diligence for all operators

Direct integration with AMLC transaction databases

v

[Republic Act 10173 (Data Privacy Act)]

Statutory protection of all collected personal data

Confidential, encrypted storage of identity records

Republic Act 9160 and Republic Act 10927

v v

[National Digital Records] [State Agency Documents]

• PhilSys National ID (Physical or ePhilID) - LTO Driver's License
• Philippine Republic Passport - UMID (Unified Multi-Purpose ID)
• Professional Regulation Commission (PRC) - SSS / GSIS Biometric Cards

Primary Tier-1 Identification (Instant Verification Preferred)

• PhilSys National ID (Physical Card or printed ePhilID with valid QR code): The official primary identification document issued by the Philippine Statistics Authority.
• Philippine Passport: Issued by the Department of Foreign Affairs (DFA), displaying full biographical data and machine-readable zone.
• Driver's License: Issued by the Land Transportation Office (LTO), featuring biometric imagery and clear validity dates.
• Unified Multi-Purpose ID (UMID): Issued by the Social Security System (SSS) or Government Service Insurance System (GSIS).
• PRC Identification Card: Issued by the Professional Regulation Commission for licensed Philippine professionals.

Secondary Supporting Documents (Accepted for Verification Support)

• Postal ID (issued by PhilPost, biometric plastic card format).
• Voter's Certification issued by the Commission on Elections (COMELEC) central office.
• Barangay Certification with photo seal (accepted only in specific secondary support workflows alongside a primary credential).

Step-by-Step KYC Verification Workflow

Completing identity verification is a straightforward digital process that protects your account balance against unauthorized third-party cash-outs.

> 🔄 Execution Workflow: [Account Registration] ---> [Upload Gov ID] ---> [Biometric Liveness Check]

v

[Payment Name Match] <--- [Compliance Review] <--- [Address & AML Screen]

v

[Full Account Privileges Activated]

Step 1: Submitting Your Government Identification

Navigate to your account profile settings and select the Verification (KYC) tab. Choose the document type you wish to provide. Using your smartphone camera, take a clear, well-lit photograph of your original physical ID:

• Ensure all four corners of the card are visible within the viewfinder frame.
• Avoid camera flash glare, reflections, or shadows that obscure your personal information.
• Never submit black-and-white photocopies, blurred screenshots, or digitally manipulated files.

Step 2: Biometric Liveness and Facial Matching

To guarantee that the individual submitting the document is indeed the rightful owner, the platform verification interface initiates a short facial liveness test:

• Position your face within the onscreen oval guide on your smartphone or webcam.
• Follow simple automated prompts, such as blinking, turning your head slightly, or smiling.
• This biometric data is processed instantly to match your facial geometry against the photograph embedded on your submitted government ID.

Step 3: Payment Method Ownership Confirmation

Under strict anti-fraud regulations, the legal name registered on your casino gaming profile must match the registered ownership name of your primary funding channel:

• When depositing or requesting cash-outs via GCash or Maya, the platform verifies that the mobile telephone number and account owner's legal name correlate exactly.
• Third-party deposits—such as using an account belonging to a spouse, relative, or acquaintance—are strictly prohibited and will result in transactional freezes.

Step 4: Compliance Review and Status Activation

Automated verification algorithms process most standard submissions within five to fifteen minutes. If manual review is required by the compliance desk, processing is typically concluded within two to twelve hours. Once validated, your account receives full verified status, unlocking expedited cash-outs and higher transaction limits.

Transaction Monitoring and AML Reporting Obligations

Under Republic Act 9160 and PAGCOR regulatory mandates, gaming operators must actively monitor transactions across their platforms to identify and report unusual financial activity.

Covered Transaction Reporting (CTR)

A Covered Transaction Report must be formally submitted to the Anti-Money Laundering Council for any financial transfer or linked series of transactions that exceeds the statutory threshold set by the AMLC for gaming entities. In the digital sector, transactions approaching predetermined cumulative limits trigger automated compliance alerts, requiring operators to archive complete audit trails.

Suspicious Transaction Reporting (STR)

An operator is legally required to submit a Suspicious Transaction Report regardless of the transaction amount whenever there is reasonable ground to suspect that:

• There is no apparent underlying legal, economic, or commercial justification for the transaction (such as depositing substantial funds and requesting an immediate withdrawal without engaging in meaningful gaming turnover).
• The player is attempting to structure or split deposits into multiple smaller increments to deliberately evade standard verification thresholds (a practice known as "smurfing").
• The client provides falsified, altered, or stolen identification documentation.
• Funds are suspected to originate from unlawful activities, fraud, or syndicated cybercrime.

Data Privacy and Document Security Under Republic Act 10173

Submitting sensitive personal information, photographs of government credentials, and financial documentation understandably raises questions regarding personal data privacy.

All identity data collected during the KYC process is protected under Republic Act 10173 (the Data Privacy Act of 2012) and supervised by the National Privacy Commission (NPC):

• Cryptographic Encryption: Document uploads are transmitted across 256-bit encrypted SSL/TLS channels and stored on secure, partitioned servers equipped with multi-layered firewalls.
• Strict Need-to-Know Access: Only certified compliance officers who have undergone rigorous background checks and confidentiality training can access submitted identification files.
• No Third-Party Commercial Sale: Identification documents are collected solely for statutory regulatory compliance and anti-fraud verification. They are never sold, rented, or transferred to third-party commercial marketing entities.
• Mandatory Retention Periods: In accordance with AMLA guidelines, customer identification records and transaction logs must be retained securely for a period of five (5) years following the closure of an account, after which they are permanently expunged via secure data-destruction protocols.

Responsible Gaming and Self-Exclusion Connections

Identity verification plays a vital role in upholding player welfare standards. By maintaining an accurate, verified identity register, platforms can effectively enforce self-exclusion directives issued under the National Voluntary Exclusion Program managed by PAGCOR.

If an excluded individual attempts to circumvent exclusion by registering under a different telephone number, the mandatory KYC identity check prevents them from participating, preserving the integrity of their self-exclusion commitment.

For confidential, compassionate guidance regarding responsible gaming habits or assistance with problem gambling, players and their families can connect with Gambling Therapy and Gamblers Anonymous.

Frequently Asked Questions

Why do I need to complete KYC verification before my first withdrawal?

Under Republic Act 9160 (AMLA) and PAGCOR regulatory rules, gaming platforms must establish the true identity of every individual withdrawing real money. This requirement prevents money laundering, thwarts identity theft, and ensures funds are sent exclusively to the rightful account owner.

Can I submit my PhilSys National ID in digital ePhilID format?

Yes. Both physical PVC PhilSys National ID cards and printed digital ePhilIDs are recognized as valid primary identification, provided the printed copy displays a clear, scannable QR code and all personal biographical data is legible.

Why was my submitted identification card rejected?

Common reasons for document rejection include:

• The photograph was blurry, low-resolution, or suffered from camera flash glare.
• The document has expired.
• The edges or corners of the physical card were cropped out of the photograph.
• The name on the identification card does not match the legal name registered on the gaming profile and funding e-wallet.

Can I deposit funds using my spouse's or friend's GCash or Maya account?

No. Philippine AML regulations strictly prohibit third-party financial transfers. The legal name registered on your GCash or Maya account must match the legal name on your verified gaming profile. Utilizing third-party funding sources triggers an automated security hold.

How does Republic Act 10173 protect my submitted documents?

Republic Act 10173 (Data Privacy Act of 2012) mandates that organizations handle personal information with strict confidentiality, employ bank-grade cryptographic storage, limit access to authorized compliance personnel, and prohibit the unauthorized commercial distribution of your sensitive personal data.

How long does the verification review take to complete?

Automated biometric verification typically resolves within 5 to 15 minutes. In cases requiring manual document inspection by a compliance specialist, review times generally range between 2 and 12 hours.

Connected Resources and Platform Portals

• Filbet Main Gaming Portal
• Filbet Casino Registration and Identity Setup
• GCash and Maya Deposit and Withdrawal Guide
• Understanding Digital Slot Mechanics and RTP
• Live Dealer Studio Transparency and Audits
• Philippine Traditional Table Games and Regulations
• Responsible Gaming Tools and Support Resources

Official Member Access and Registration

To access real-money gaming tables, practice slot mechanics, or claim verified promotional credits, visit the official Filbet Portal on mobile or desktop.