Crypto casinos and ID checks (KYC): what Canadians should know

A “no KYC” crypto casino usually means one that does not check your ID when you sign up. It almost never means one that will never check it. The terms of the casinos we have read let them ask for identity documents at any time, and refuse a withdrawal until you provide them. In practice, the check is put off until you try to take money out, which is the point where players get stuck.

This page explains what identity checks (known as KYC, for “know your customer”) are, why licensed casinos have to do them, what documents are usually asked for and when, and how to avoid having a withdrawal frozen. We use two casinos’ own terms as worked examples. We do not recommend casinos on the basis that they skip ID checks, and this is not a guide to avoiding them.

The short version

• Registration and withdrawal are different things. Many crypto casinos let you open an account and deposit with only an email address. Withdrawing is where checks start.
• The right to ask is always in the terms. Stake’s terms let it request “any KYC documentation it deems necessary” at any time (clause 4.8). Cloudbet’s require ID once your total deposits reach USD 2,200, and reserve the right to ask at any time after that (clause 21.1.5).
• Failing a check can cost you your winnings. Cloudbet’s clause 11.1 lets it withhold winnings if you do not complete verification within the time it specifies.
• The fix is boring and effective. Verify your account before you deposit anything you would mind losing access to.

What KYC is and why casinos do it

KYC is the process of confirming a customer is who they say they are, is old enough, lives where they say they live, and is not using the account to move criminal money. Banks, crypto exchanges and casinos all do it because anti-money-laundering (AML) rules require them to.

In Canada’s regulated market, checks come first. Licensed Canadian casinos are reporting entities under Canada’s Proceeds of Crime (Money Laundering) and Terrorist Financing Act, supervised by FINTRAC. They must verify identity for certain transactions and report large ones, including single transactions of $10,000 or more in cash or in virtual currency (FINTRAC guidance for casinos). Ontario’s rules go further. AGCO Standard 3.04 requires your name, date of birth and address to be “validated before a player account is created”. Standard 5.70 says a withdrawal is only allowed once the casino has confirmed it is going to the account holder, at an account the player legally holds (AGCO Registrar’s Standards, retrieved 9 October 2026). On a regulated Ontario site, you are verified before you place your first bet, so there is nothing left to check when you win.

Offshore crypto casinos have AML duties too. Both casinos we use as examples here hold licences from the Curaçao Gaming Authority, and both describe AML and KYC procedures in their terms. What differs is the timing. They are allowed to, and commercially prefer to, let you start playing first and check later.

Identity checks are also a player protection. They stop under-age accounts, they are what makes self-exclusion work (a casino cannot keep you out if it does not know who you are), and they make it harder for someone else to withdraw your money.

What “no KYC” actually means: two casinos’ terms

We read the full terms of two large crypto casinos that let you sign up without documents. Both are linked below, with the clause numbers, so you can check them yourself.

Stake

Terms read from an archived copy dated 29 September 2026 (the live page was blocked from our location). Operator: Medium Rare N.V., licensed by the Curaçao Gaming Authority.

• Clause 4.8: Stake can ask “at any time” for any KYC documentation it deems necessary to establish your identity and location, and can restrict the service, payments or withdrawals until your identity is “sufficiently determined”, or “for any other reason” at its discretion.
• Clause 8.1: Stake can refuse any withdrawal until your identity is verified, the withdrawal is going to an account in your name, and you have provided any extra information it asks for.
• Clause 8.2: if Stake suspects a breach, it can delay or decline withdrawals while it investigates, and “may not be in a position to provide an explanation”.
• Clause 8.6: before any withdrawal, Stake can carry out “enhanced due diligence where deemed necessary”. Clause 8.12 adds that it can run additional KYC checks “for any withdrawal”.
• Clause 4.19(c): Stake can close or suspend your account if it cannot verify your identity, profession or source of funds where regulations require it.

There is no threshold in Stake’s terms below which you are guaranteed not to be asked. The check can come at sign-up, at your first withdrawal or your hundredth.

Cloudbet

Terms read directly on 9 October 2026, “last updated 30 September 2026”. Operator: Halcyon Super Holdings B.V., licensed by the Curaçao Gaming Authority under OGL/2024/328/0599.

• Clause 21.1.5: “Identity verification will be required when cumulative deposits reach or exceed USD 2,200.” Cloudbet also reserves the right to ask for up-to-date documents at any time, even after you have passed, and says deposits and withdrawals “may be restricted, and funds may be locked” until verification is complete.
• Clause 7.5.7: where it requires KYC, withdrawals depend on photo ID (passport or driving licence), proof of address (a recent utility bill), the payment card you used, and a photo of yourself with proof of date.
• Clause 21.1.3: automated checks are run by a third-party provider, Sumsub.
• Clause 11.1(v): if you “fail to complete any identity verification (KYC) or other due diligence procedures requested by us within the timeframe we specify”, Cloudbet can suspend or close the account and withhold winnings.
• Clause 7.1.12: one account per customer, IP address, household or phone number. Breaking it can get every linked account closed and its crypto frozen.

Two different USD 2,200 limits, and they are easy to mix up. Cloudbet’s terms (clause 21.1.5, updated 30 September 2026) make identity checks compulsory once your total deposits reach USD 2,200. Separately, its help centre sets a daily withdrawal limit of USD 2,200 for unverified and Level 1 accounts; fully verified (Level 2) accounts have no daily withdrawal limit. So until you verify, you face both: a cap on what you can withdraw each day, and a stop on further deposits once you pass USD 2,200 in total.

We could not read the full terms of the other casinos we review for this guide, because their sites block visitors from our location. We will add them as we verify them, and we will not fill the gaps with figures from other review sites.

What you will usually be asked for

The exact list varies, but these are the documents that come up in the terms we have read and in regulated markets:

Source-of-funds requests are the ones that surprise people. They are normal at higher stakes in any regulated market, Stake’s terms mention source of funds directly (clause 4.19) and allow enhanced due diligence before any withdrawal (clause 8.6). Cloudbet’s let it request “any additional information and documents” where it considers a transaction suspicious (clause 21.4).

Why deferred checks catch people out

When the ID check comes after the deposit and the play, three things can go wrong at once.

Your address may disqualify you. Proof of address is how a casino learns where you live. If you live somewhere its terms exclude, the check that releases your withdrawal is also the check that shows you should never have had an account. For Canadians, that matters most in Ontario: Stake’s clause 14.3 names Ontario as a prohibited jurisdiction, and clause 14.4 treats using a VPN to get round that as a breach. We cover this in which crypto casinos work in Ontario.

Your details may not match. An account opened with a nickname, a different email or a slightly different name will not match your passport. Deposits from a wallet or card that is not yours will fail a payment-method check.

The amount may now be large. A check that would have taken minutes on a $50 deposit can turn into a source-of-funds review on a $20,000 win. We found no time limit in either casino’s terms on how long a review can take.

Red flags

Being asked for ID at withdrawal is normal, even after a win. These are the patterns that should worry you:

• A check that only appears after a big win, then keeps growing. One request for ID and address is routine. A fresh request each time you comply, with no clear list of what would complete the process, is a stalling pattern.
• Repeated rejections of clear, valid documents, with no specific reason given.
• A fee to “unlock” or “release” your withdrawal. Legitimate casinos do not ask you to send more money to get your own money out. Treat this as a likely scam.
• Requests to send documents through Telegram, WhatsApp or a personal email address rather than the casino’s own upload system.
• Terms that let the casino keep winnings if you miss an unstated deadline. Cloudbet’s clause 11.1(v) does this. If you get a verification request from any casino, ask in writing what the deadline is and keep the reply.
• Marketing built on “no KYC, ever” from a site whose own terms say the opposite. Read the verification clause before you believe the banner.

How to protect yourself

• Read the verification clause before you deposit. Search the terms for “KYC”, “verification” and “identity”. Note any threshold, like Cloudbet’s USD 2,200, and any clause allowing funds to be withheld.
• Verify early. If the casino has a verification option in your account settings, use it before you deposit a meaningful amount. A failed check is a cheap problem on a small balance.
• Use your real details from the start. Your legal name, date of birth and current address, matching your ID exactly.
• Only use payment methods in your own name. Your own card, bank account or a crypto wallet you control and can show is yours.
• Make a small test withdrawal early. It tells you how the casino’s checks and payout times actually work before you have much at stake.
• Check the casino accepts players from where you live. No verification will get money out of an account the terms say you should not have had. If you are in Ontario or Alberta, none of the crypto casinos we review is licensed for you.
• Keep records. Screenshot your balance, every withdrawal request and every message with support, with dates.
• Never use someone else’s account or ID, and never open a second account. Both sets of terms we read treat this as grounds to close every linked account, and to keep (Stake, clause 4.9) or freeze (Cloudbet, clause 7.1.12) the money in them.

If you are searching for a casino that never asks for ID

We do not list or rank casinos on that basis, and we do not think one exists that you could rely on. The casinos that advertise “no KYC” reserve the right to check you in their own terms. A site that genuinely never verified anyone would be one with no means of stopping under-age players, enforcing self-exclusion or protecting your account from someone else, and with very little to stop it keeping your balance either. If keeping your gambling private matters to you, the better question is how a casino handles and stores your documents, which is covered in its privacy policy.

If you want to gamble without anyone knowing because you are worried about how much you are gambling, that is worth talking to someone about. Our responsible gambling page lists free, confidential help.

Questions

Do crypto casinos need ID?

Most can ask for it at any time, even if they let you sign up with only an email. Stake’s terms let it request KYC documents “at any time” (clause 4.8), and Cloudbet’s require ID once your total deposits reach USD 2,200 (clause 21.1.5). Expect a check before or during your first meaningful withdrawal.

Can I withdraw from a crypto casino without verifying?

Sometimes, for small amounts, but you cannot rely on it. Both casinos whose terms we read can refuse or hold any withdrawal until your identity is verified. Verifying before you deposit much is the safer approach.

What is Cloudbet’s limit before KYC?

Cloudbet’s terms, last updated 30 September 2026, say identity verification “will be required when cumulative deposits reach or exceed USD 2,200” (clause 21.1.5). It can also ask earlier or again at any time. Separately, its help centre sets a daily withdrawal limit of USD 2,200 for unverified and Level 1 accounts, with no daily limit once you are fully verified.

Why is the casino asking for ID only after I won?

Because many crypto casinos defer checks until withdrawal, and larger amounts trigger more scrutiny. One routine request for ID and proof of address is normal. Repeated new requests, unexplained rejections or a fee to release funds are warning signs.

Do Canadian licensed casinos do KYC?

Yes, and earlier. In Ontario, AGCO Standard 3.04 requires your identity to be validated before an account is even created. Licensed Canadian casinos also report to FINTRAC, including transactions of $10,000 or more in cash or virtual currency.

How long does casino verification take?

Automated checks can clear in minutes; manual reviews and source-of-funds requests can take days or longer. Neither of the casinos whose terms we read sets a maximum time.

Gambling involves risk and most players lose money over time. You must be of legal gambling age in your province: 18 in Alberta, Manitoba and Quebec, 19 elsewhere.

Written by Ray Sutton. Cloudbet terms read on 9 October 2026 (last updated 30 September 2026). Stake terms read from an archived copy dated 29 September 2026. AGCO Standards and FINTRAC guidance checked 9 October 2026. Last updated 9 October 2026. This is general information, not legal or financial advice.

Correction, 9 October 2026: an earlier version of this page said Cloudbet sets no daily withdrawal limit for unverified accounts, and that sites describing its USD 2,200 figure as one were wrong. That was our error. Cloudbet’s help centre sets a USD 2,200 daily withdrawal limit for unverified and Level 1 accounts, in addition to the USD 2,200 deposit threshold in its terms. We have corrected the page.