Casino ID Verification Rules: What Is and Isn't Allowed in the UK

UK gambling sites are legally required to verify a customer’s name, address, and date of birth before they can begin gambling, according to the Gambling Commission. The same rules also restrict operators from turning a withdrawal request into a fresh identity hurdle, while also limiting what they can demand you prove after a failed check.

What UK operators must verify before play

The core legal requirement is clear: online gambling operators must verify a customer’s identity and age before permitting them to gamble. Specifically, at a minimum, operators must verify the individual’s name, address, and date of birth.

This rule means that even before a customer makes their first deposit or bet, they must be willing and able to prove their identity. The Gambling Commission sets out this requirement clearly in its public-facing guidance on the types of identity checks that customers should expect.

What documents are commonly accepted

So what constitutes acceptable proof? The Gambling Commission specifies that operators may request documents including passports, driving licences, and household bills to determine identity and age.

A longer list appears in the Commission’s guidance on preventing money-laundering, which includes current signed passports, for UK-based customers, alongside documents such as birth certificates, photo card driving licences,, council tax bills, and bank statements. Yet this too remains a list of examples rather than a definitive checklist, and operators are not forbidden from using additional data sources that can also verify a customer’s identity.

What an operator can and cannot request when you request a withdrawal

It is also important to know your rights if you have begun gambling, deposited funds, and then decide to cash out. The Gambling Commission expressly states that a request for a withdrawal must not be used to require additional information as a condition of that withdrawal, if the operator could reasonably have asked for that information earlier in the process. This means that if an operator failed to verify your identity when you opened the account or deposited funds, it cannot use your desire to withdraw those same funds as a pretext for demanding new information. Instead, if they have yet to verify your identity, and are bound to do so, then they may need that information in order to comply with their legal obligations – but only if they did not previously ask for it and there are no other grounds to delay withdrawal.

A practical example to illustrate: if your identity wasn't requested during the initial registration when you opened the account, but your gaming and withdrawal, you cannot be asked for extra documents when you withdraw funds. However, even with all the documents already submitted due to previous checks, if there were issues verifying the documents, you may face one more round of checks.

What happens if there is a problem with verification

If the operator requests the customer’s information and cannot verify their identity, then the operator cannot just remove the funds. According to the Commission, licensees should not remove funds in the customer’s account balance. This means that a customer with a proven deposit could not have those funds expropriated on the basis of an incomplete identity verification, even if the full identification could ultimately not be confirmed as true.

However, in the event where a customer has continually failed to provide documents or complete the verification for a long duration, the Commission's Fair and Transparent terms and practices guidance states that after 12 months of the customer not being able to verify their identity, a reasonable periodic charge can be levied by the operator for maintaining the account. This implies that if the operator cannot verify the identity of the customer but continues to hold the funds, they can charge a fee for maintaining the account, but.

Keeping the data accurate

One final note: while the Commission specifies that operators should secure identity information from reliable and independent sources, it also stipulates that licensees must use reasonable steps to ensure this identity information remains accurate as time goes on. This means monitoring and updating, should a customer’s details change during the course of their relationship with the company.

Key Takeaway

The key takeaway here, for most customers, is that if an operator requests additional information as a hurdle during an attempted withdrawal, their request will be unacceptable if the gambling site could have legally requested that information earlier in the time you’ve been a customer. Beyond this, be aware that if you become an active gambler, you’ll need to live up to the request of identity in order to continue as a member, and, should that fail, you might find your account will require holding fees in order to keep it open, and limit your withdrawals over your activity.