AML Policy and KYC Verification at Tombet Casino

Our AML and Verification Policy

We operate Tombet Casino under licence MGA/B2C/832/2025 issued by the Malta Gaming Authority. This page explains, in plain terms, how we verify who you are, how we monitor transactions and what we ask of you to keep the platform compliant.

Our AML Commitment

TomBet Gaming Limited holds licence MGA/B2C/832/2025 from the Malta Gaming Authority, and we apply the anti-money-laundering and counter-terrorism-financing framework required under that licence. This framework sits at the centre of everything we do: every account, deposit and withdrawal passes through it.

In practice, our commitment means three things. We know who our players are before we release funds. We monitor activity continuously rather than at random. And we report suspicious activity to the relevant authorities where the law obliges us to, without notifying the account holder concerned.

You will never be asked to do anything beyond what the rules require, and we will always tell you clearly what is needed and why. If anything on this page is unclear, our support team is available 24/7 via live chat and at [email protected].

When We Verify Your Account

Verification points

We verify your identity at set moments rather than all at once. You will notice checks at the points below, and we may run additional checks at any time if your account activity prompts them.

  • At registration, we validate your basic details against public and licensed data sources.
  • Before your first withdrawal, we complete full identity verification.
  • At cumulative transaction thresholds, we review your account and may request updated documents.
  • Whenever a change of payment method, address or personal detail occurs, we re-verify the affected information.

Documents we accept

Each check asks for a specific document, and we only ever request what the verification step requires.

  • Photo ID: passport, national identity card or driving licence, valid and showing all four corners.
  • Proof of address: a utility bill, bank statement or official letter dated within the last three months.
  • Payment method ownership: a photo of your card (middle digits covered) or a screenshot of your e-wallet or bank account showing your name.
  • Occasionally, a proof of income or wealth document, where a source-of-funds check applies.

How Verification Works, Step by Step

Verification runs through your account settings, and most submissions are reviewed within 24 hours. Here is the sequence from start to finish.

  • 1. Open the Verification section of your account and select the outstanding requirement.
  • 2. Photograph or scan the requested document in full, in colour, with all edges visible and no glare.
  • 3. Upload the file through the secure form; we accept common image and PDF formats.
  • 4. Our compliance team reviews the submission, normally within 24 hours.
  • 5. You receive an email confirming approval or explaining what needs to be resubmitted.
  • 6. Once approved, your withdrawal is released to your chosen method.

How your documents are protected

Uploaded documents travel over an encrypted connection and are stored on access-controlled servers. Only members of our compliance team can view them, and access is logged. We never share your verification data with third parties except where the law or our regulator requires it.

Why We May Ask for Source of Funds

A source-of-funds check confirms where the money you play with comes from. We are not questioning your right to spend it; we are meeting a specific obligation under our MGA licence to establish that funds derive from a legitimate origin.

We typically request this when deposits reach a level that our risk framework flags, when your pattern of play changes noticeably, or when a single withdrawal is large relative to your history. Acceptable evidence includes payslips, employment contracts, bank statements, pension or benefit letters, sale agreements, or dividend statements.

If we ask you for this, we will tell you which documents fit your situation, and you can send them through the same secure upload used for identity documents.

How We Monitor Transactions

Every deposit and withdrawal on our platform is screened against our monitoring rules. This is automated, continuous and applied to all accounts equally, and it covers the relationship between your deposits, stakes, winnings and withdrawals rather than any single transaction in isolation.

Two rules matter to you day to day. First, we return withdrawals to the same method you used to deposit wherever that method supports it; this prevents third parties from receiving funds they never sent. Second, our limits are fixed and published: a minimum deposit and withdrawal of £10, and a maximum withdrawal of £5,000 per day.

Withdrawals enter a pending period of up to 24 hours, after which e-wallets are paid within 24 hours and cards within 1 to 3 business days. We charge no fees on either side of the transaction.

ItemDetail
Minimum deposit£10
Minimum withdrawal£10
Maximum withdrawal£5,000 per day
Pending periodUp to 24 hours
E-wallet payoutWithin 24 hours after approval
Card payout1 to 3 business days after approval
FeesNone

If Verification Fails or Stalls

When a document is rejected, we tell you the reason, whether that is an expired ID, a cropped edge or a mismatched name, and you can resubmit straight away. A rejection never closes your account on its own.

If you do not complete verification when asked, we suspend withdrawals from your account until the outstanding documents arrive. Your deposited funds remain yours, and play is still possible in most cases, but nothing leaves the platform while a verification requirement is open.

Where our checks indicate a serious regulatory concern, or where documents appear fraudulent, we must suspend the account, freeze the balance and, where required, file a report with the authorities. In those cases we will contact you through the email address on your account. Funds held in a suspended account are returned to the verified source method once the review concludes.

How Long We Keep Your Records

Under our MGA obligations we retain verification documents and transaction records for five years after the end of your relationship with us. This retention period is a legal requirement, and it protects you as much as it protects us, since it provides an auditable record of every check we completed on your account.

After the retention period expires, we delete or irreversibly anonymise your documents. If you close your account and want confirmation of what we hold, write to [email protected] and we will confirm the categories of data retained and the deletion date.

Frequently Asked Questions

How long does verification take at Tombet Casino?

Most document submissions are reviewed within 24 hours. Complex cases, such as source-of-funds checks, can take longer, and we will keep you informed by email throughout.

Can I withdraw before verification is complete?

No. We complete full identity verification before your first withdrawal, and withdrawals stay suspended while any verification requirement is outstanding.

Why must withdrawals go back to my deposit method?

Our same-method rule confirms that funds return to the person who deposited them. Where a method cannot receive withdrawals, such as Paysafecard, we pay out by bank transfer to an account in your name.

What happens if my documents are rejected?

We email you the reason, for example a cropped image or an expired ID, and you can resubmit immediately. A rejection alone never leads to account closure.