Our AML and Verification Policy

We operate Richyfish Casino under licence MGA/B2C/491/2022 issued by the Malta Gaming Authority. That licence binds us to strict anti-money-laundering and counter-terrorist-financing obligations, and verification of every player is the backbone of those obligations. This page explains, in plain terms, what we check, when we check it and what we ask of you.

Our Commitment to AML Rules

Why these obligations matter

As a licensed operator, we must prevent our platform from being used to launder criminal proceeds or finance terrorism. We therefore apply the anti-money-laundering framework of the Malta Gaming Authority, including the Prevention of Money Laundering and Funding of Terrorism Regulations that govern all MGA licensees. In practice this means we identify every customer, screen against sanctions and politically-exposed-person lists, monitor transaction patterns and report suspicions to the Financial Intelligence Analysis Unit.

We have appointed a Money Laundering Reporting Officer and a deputy, and we train every member of staff who handles payments or accounts in AML awareness. Our internal risk assessment is reviewed annually, and customer risk ratings are refreshed whenever behaviour or information changes. Nothing in this policy is optional: these duties are legal obligations, and we treat them as such.

• Customer due diligence on registration and before first withdrawal
• Sanctions and PEP screening against official lists
• Ongoing transaction monitoring with defined alert thresholds
• Suspicious activity reporting to the competent authority
• Annual staff AML training and independent compliance audits

When We Verify Your Identity

Three verification points

We verify you at three defined points. At registration we collect your name, date of birth, address and contact details, and we screen this data against sanctions and PEP lists. Before your first withdrawal we require full identity verification: a photo ID, proof of address and payment method ownership. Thereafter, whenever a transaction threshold is crossed or a risk signal appears, we may re-verify any element of your profile.

The minimum withdrawal amount on our platform is £20, and no withdrawal is released to an unverified account. We also refuse registration to residents of restricted jurisdictions, including the United States, France, the Netherlands, Spain, Italy, Germany, Belgium and Portugal, and verification includes confirming that you are not resident in a restricted territory.

• Photo ID: valid passport, national identity card or driving licence showing your name, date of birth, document number and expiry date
• Proof of address: utility bill, bank statement or official government letter issued within the last three months
• Payment verification: card photo showing the first six and last four digits with the middle digits covered, or a wallet or crypto wallet statement in your name

How Our Verification Works

Step by step

Verification on Richyfish Casino is designed to finish within 48 hours of receiving clear documents. In most cases we complete identity checks well inside that window, provided the uploads are legible, unaltered and complete. You can submit documents yourself from your account area, and you will receive email confirmation at each stage.

• Step 1: Log in and open the verification section of your account.
• Step 2: Photograph or scan your photo ID so that all four corners and the full data page are visible.
• Step 3: Upload proof of address dated within the last three months.
• Step 4: Add payment method proof showing you own the card, wallet or crypto address used.
• Step 5: Our compliance team reviews the file and either approves it or requests a replacement document with a specific reason.
• Step 6: You receive written confirmation, and withdrawal restrictions on a verified account are lifted.

How we protect your documents

Your documents are stored on encrypted servers with access limited to our compliance team on a strict need-to-know basis. Transfers are protected with TLS encryption, and no verification file is shared with third parties except where the law, our licence or a payment provider's own regulatory duties require it. We never ask for documents by live chat, and any request that does not come through your account inbox or our official support address should be reported to us immediately.

When We Ask for Source of Funds

A legal obligation, not a judgement

For most players, identity verification is where our checks end. Where deposits exceed thresholds set in our risk policy, where a large single win is withdrawn at once, or where deposit behaviour does not match the profile we hold, we are legally required to establish the origin of the funds. A request for source of funds evidence is not an accusation; it is a mandatory step under the MGA framework and we cannot release funds until it is satisfied.

Acceptable evidence typically includes payslips, an employment contract, a tax return, audited company accounts, a pension statement, or a sale contract for property or other assets. We ask only for documents relevant to the amounts involved, and we scale our requests to the level of risk. Once the evidence supports the funds you have played with, the file is closed and no further source requests follow unless activity changes materially.

How We Monitor Transactions

Deposits, withdrawals and alerts

Every deposit and withdrawal on our platform passes through automated screening that flags unusual size, frequency or pattern compared with your established profile. Deposits from payment methods that have not been verified in your name are rejected. Withdrawals are paid to the same method used for deposit wherever the payment provider permits it, and any difference must be justified by the method's own limitations, not by player preference. Where a card cannot accept a refund we fall back to a bank transfer in your verified name.

We cap withdrawals at £5,000 per day and £20,000 per month. Crypto and e-wallet withdrawals are processed within 24 hours, and card and bank transfer withdrawals take one to three business days. We charge no fees on withdrawals, and we will never hurry a payout past an open compliance check.

If Verification Fails

What we do and what you can do

If a document is unclear, expired or inconsistent with your account details, we reject it with a written reason and give you a fresh opportunity to supply a correct one. If you do not respond to a verification request within 30 days, we suspend deposits, play and withdrawals on the account. The suspension is administrative, not punitive, and it is lifted as soon as acceptable documents arrive.

Where we cannot verify your identity at all, where documents appear forged, or where sanctions screening returns a confirmed match, we must close the account. In such cases your deposit balance is returned through the verified original payment method, less any amount we are legally obliged to freeze or forfeit under a competent authority's instruction. You may appeal any decision by writing to our compliance team, and unresolved disputes can be escalated to the Malta Gaming Authority's player support channel.

• Rejected document: written reason given, resubmission invited
• No response within 30 days: deposits, play and withdrawals suspended
• Failed or fraudulent verification: account closure and balance refund where lawful
• Confirmed sanctions match: account frozen and the relevant authority notified
• Available appeal: internal review first, MGA escalation second

How Long We Keep Documents

Retention periods and your rights

We retain verification documents and transaction records for five years after the end of our business relationship, which is the minimum retention period required of MGA licensees. We hold these records so that we can respond to lawful requests from the Malta Gaming Authority, the Financial Intelligence Analysis Unit or law enforcement, and so that we can defend our due diligence decisions if they are ever examined.

When the retention period expires, documents are securely destroyed and payment details that are no longer needed are deleted. You may request a copy of the personal data we hold about you at any time, and you can ask us to correct anything that is inaccurate. Requests go to our data protection team via [email protected] and are answered within the statutory response window.

Frequently Asked Questions

How long does verification take at Richyfish Casino?

We review documents within 48 hours of receiving them, and most files are approved faster if the uploads are clear and complete.

Can I withdraw before my account is fully verified?

No. Full verification, including photo ID, proof of address and payment method ownership, must be completed before your first withdrawal is released.

Why do you ask for source of funds?

Our MGA licence requires us to establish the origin of funds when deposits or withdrawals cross defined thresholds or when activity looks inconsistent with your profile. It is a legal duty, not a suspicion of you personally.

Do you charge fees for verification or AML checks?

No. We charge no fees for verification, deposits or withdrawals. Any AML-related freeze applies to funds only while a review is pending.

Who can see my verification documents?

Only our compliance team on a need-to-know basis. Documents are stored encrypted, and we never request them through live chat or unofficial channels.