A withdrawal request, then an email asking for a passport, a household bill and your bank statements: is that allowed? Online casino age verification in the UK is required, and since 7 May 2019 a licensed site has had to check your name, address and date of birth before you can play. Later requests are allowed too, within limits that this guide sets out.

The guide starts with what to do when a request arrives, then covers the rules behind it, the separate anti-money laundering checks and the point where the Gambling Commission’s reach stops.

A casino has asked for your documents: what to do first

Work through these steps before sending anything. They apply to a site licensed by the Gambling Commission; the last step covers a site that is not.

  1. Check the request is real. Open your account by typing the web address yourself, not by following a link in an email or message, and look for the same request there. Carry on only if it appears in the account.
  2. Compare it with what the operator told you earlier. Under the commission’s licence conditions, a licensee should tell you, before accepting a deposit, which identity documents or other information may be needed, when, and how to send them. The wording is in paragraph 3 of licence condition 17.1.1.
  3. Send documents only through the secure upload in your account. Note the date and what you sent. A complaint without dates is hard to follow up.
  4. Ask why the request came now. If it arrived only when you tried to withdraw and asked for information the operator could reasonably have requested earlier, paragraph 2 of licence condition 17.1.1 restricts it. The section on what the commission checks below sets out the wording.
  5. Complain in writing if it stays unresolved. The operator has eight weeks to resolve a complaint. After that you can take it to an Alternative Dispute Resolution (ADR) provider, a free and independent service.
  6. Treat a site with no licence differently. The commission’s complaints route and ADR do not reach it. Contact your bank about the payments and report the site to Report Fraud on 0300 123 2040, or in Scotland to Police Scotland on 101.

Online casino age verification in the UK: what the rules require before you can play

The checks sit inside the wider system of how gambling is regulated in Great Britain. On 3 May 2019 the commission announced that new rules would come in on Tuesday 7 May 2019. An online operator that had not yet verified the name, address and date of birth of a customer had to complete verification before allowing that customer to gamble.

The requirement now sits in licence condition 17.1.1. A licensee must obtain and verify information to establish a customer’s identity “before that customer is permitted to gamble”, and the information must include, but is not restricted to, name, address and date of birth. The duty sits with the operator.

Age has a rule of its own. Social responsibility code 3.2.11 requires a licensee to verify a customer’s age before they can “deposit any funds into their account”, before they can access any free-to-play versions of its games, and before they gamble with their own money or a free bet or bonus. A demo game is not exempt, and neither is a bonus.

The commission’s page for players gives three reasons for the checks: to confirm you are old enough, to check whether you have self-excluded, and to confirm your identity. Operators may first try to match your details against sources such as credit reference agencies and the electoral roll. The commission names passports, driving licences and household bills as examples of what a business may ask for, but it does not set a list of documents.

The age limit is 18 for online casino games, betting and bingo, and, since 1 October 2021, for the National Lottery. An exception exists for subscription and low-frequency lotteries run online, where the commission’s code allows players aged 16 and over, so 18 is not the limit for all online gambling. The offence in section 46 of the Gambling Act 2005 is aimed at whoever “invites, causes or permits a child or young person to gamble”.

Why does your date of birth still matter after sign-up?

Checking whether you have self-excluded is one of the three purposes the commission gives, and an online operator licensed in Great Britain has had to take part in Gamstop since 31 March 2020.

The date of birth also decides which stake limit applies on online slots: £5 per game cycle for players aged 25 and over, and £2 for 18 to 24-year-olds, under rules in force since 2025. The detail is in the £5 and £2 stake limits on online slots.

Paragraph 4 of licence condition 17.1.1 adds that licensees must take reasonable steps to keep the identity information they hold accurate, so a request to update details after a move can follow from that duty.

Anti-money laundering checks and source of funds

A second set of checks comes from money laundering law, not from the gambling rules. The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 require a casino to apply customer due diligence measures, broadly checks on who a customer is, to any transaction of £2,000 or more. Under regulation 27 the amount can be reached in a single operation or “in several operations which appear to be linked”.

For an online casino, the regulation counts as a transaction both “the deposit of funds required to take part in remote gambling” and the collection of winnings, including the withdrawal of funds deposited to gamble. The £2,000 figure was substituted with effect from 30 June 2026 by the Money Laundering and Terrorist Financing (Amendment) Regulations 2026.

Do not read £2,000 as the point at which checks begin. Licence condition 17.1.1 applies to every customer, whatever the amount. The threshold marks only where this particular duty applies.

The commission says that bank statements can be requested as part of anti-money laundering checks, to help check that your source of funds is legitimate. Source of funds means where the money you deposit came from, such as wages or savings. If an operator needs more information for these checks, they “should ask promptly and not only when you want to withdraw your funds”.

Are financial checks the same thing as ID checks?

No. Neither ID checks nor anti-money laundering checks are the same as financial checks. The commission says gambling companies use “a variety of techniques to profile customers”, looking for signs of gambling with money a person does not have. Financial vulnerability checks apply above £150 of net deposits a month, a threshold in place since 28 February 2025, and the commission has said that neither these light touch checks nor its financial risk assessment pilot will affect consumer credit ratings (commission announcement).

On 7 July 2026 the commission announced that it will introduce financial risk assessments (often called affordability checks) in stages, and said it will confirm the timetable for stage one.

If a request for statements, or a look at your own, shows gambling taking more of your money than you intended, the National Gambling Helpline offers free support on 0808 8020 133. More tools are described under safer gambling tools and support.

What the commission actually checks, and what it cannot see

Paragraph 2 of licence condition 17.1.1 is the rule that matters most when a withdrawal stalls. A request to withdraw must not lead to a requirement for additional information as a condition of withdrawal “if the licensee could have reasonably requested that information earlier”. The exception is information the licensee must obtain at that time “due to any other legal obligation”, which could include the money laundering rules. This guide gives general information and is not legal advice, and whether a particular request falls inside the exception depends on the facts.

The commission’s page on withdrawing winnings makes the same point in plain terms. You can withdraw your money “at any time without unreasonable delay or restriction”, and a business should not hold on to your money unnecessarily. Nor can a business confiscate your money because you did not log in or prove your identity within a certain timeframe. A withdrawal may be stopped where unusual activity has been spotted in the account.

In a reminder to operators, the commission said that an operator that delays a request to withdraw funds due to insufficient ID being verified may be in breach of licence condition 17.

Where the commission’s reach stops matters just as much. It says it has no access to customers’ accounts, so it cannot see what happened if there is a problem. Take the complaint to the operator first, then to an ADR provider.

What you lose without a licence

Licence condition 17 and social responsibility code 3.2.11 bind businesses licensed by the commission, whose remit covers Great Britain. A site without that licence is not bound by them. There is no eight-week complaints process leading to an ADR provider, no link to Gamstop, which blocks access to operators licensed in Great Britain, and no licence condition limiting when the site may ask for documents or hold your money.

A site that takes a deposit without any age check appears not to follow the commission’s rules. That is a signal, not a verdict. Check the commission’s public register: a licensed business must display that it is licensed and link to the register, and the register shows what each business is licensed to do.

Questions players ask about ID checks

Is online casino age verification in the UK required, or just a site’s own rule?

It is a licence condition, not a site’s own rule. Licence condition 17.1.1 and social responsibility code 3.2.11 bind every business licensed by the Gambling Commission. Later requests fall under the same conditions, including the limit on conditions of withdrawal in paragraph 2 of licence condition 17.1.1.

Why does an online casino need your ID?

Because its licence requires it. A licensed operator must verify your name, address and date of birth before you can gamble, and must verify your age before you deposit, play free demo games or use a bonus. The commission gives three purposes: age, self-exclusion and identity.

Can a casino ask for ID only when you want to withdraw?

Not if it could reasonably have asked earlier. Paragraph 2 of licence condition 17.1.1 says a withdrawal request must not lead to a demand for extra information as a condition of withdrawal in that case. The exception is information the operator must obtain at that time under another legal obligation.

What documents can a casino ask for?

The commission names passports, driving licences and household bills as examples, but says it does not specify which documents a business should ask for. Before you deposit, the operator should tell you which documents or information they may need, when, and how to send them.

Why is a casino asking for your bank statements?

Bank statements can be requested as part of anti-money laundering checks, to help check that your source of funds is legitimate. The money laundering rules require customer due diligence for transactions of £2,000 or more, and the commission says an operator should ask promptly, not only when you withdraw.

Can a casino keep your money if you do not send ID in time?

The commission says a gambling business cannot confiscate your money because you did not log in or prove your identity within a certain timeframe, and should not hold on to it unnecessarily. Withdrawals can still be stopped where unusual activity has been spotted in the account. If a hold continues, complain to the operator, then use an ADR provider.

Do you need to verify your age to play free demo games?

Yes, at a site licensed by the commission. Social responsibility code 3.2.11 requires age verification before a customer can access any free-to-play versions of the licensee’s games, as well as before depositing or gambling with a free bet or bonus. A demo game does not postpone the check.

Why would a casino ask for a selfie?

The commission says a gambling business may ask for a selfie if they think there may be fraudulent activity on your account. Treat the request like any other: check that it appears in the account itself, then send the image only through the secure upload and note the date.

Do the same rules apply in Northern Ireland?

The commission says its jurisdiction under the Gambling Act 2005 covers Great Britain, and that in Northern Ireland gambling is a devolved matter. This guide does not cover how age and identity checks work for online gambling there.

Where to report and where to get help if an ID check stalls a withdrawal

When a check under the UK’s online casino age verification rules holds up a withdrawal, and a complaint to the operator has run for eight weeks without a result, take it to an ADR provider, which is free. If the site has no licence, tell your bank about the payments and report the site to Report Fraud at reportfraud.police.uk or on 0300 123 2040; in Scotland, call Police Scotland on 101. If gambling is causing harm for you or someone close to you, the National Gambling Helpline offers free support on 0808 8020 133 for anyone in Great Britain.

Sources

Sources for this guide, read on 9 October 2026 unless a different date is given.