KYC and AML checks explained
Almost every complaint you read about an offshore casino withholding a payout turns out, on inspection, to be a verification problem. The player deposited happily for weeks, hit a win, asked for the money, and only then met the document request. This page explains Didibet verification from the player’s side: what KYC and AML actually are, what the operator asks for, how to get your documents accepted first time, and where the limits of an offshore process sit. Last updated: September 2026.
Nothing here is a policy of this website. We hold no accounts, see no documents and verify nobody. Think of it as the briefing you would want before clicking the withdraw button for the first time.
KYC and AML in plain language
Know Your Customer
KYC is the operator confirming that you are a real adult person, that you are who the account says you are, and that the payment method attached to the account belongs to you. There is nothing more mysterious behind it than those three questions.
Anti-Money Laundering
AML is the layer above it. Gambling accounts are attractive to anyone who wants dirty money to come out the other side looking clean — deposit, play a little, withdraw to a different rail and call it winnings. AML procedures make that awkward. Money has to leave the way it came in, patterns that look more like laundering than playing get flagged, and harder questions follow once the numbers stop making sense. A large, sudden win on a young account happens to fit that shape, which is why the request so often lands at the worst possible moment.
Why an offshore operator bothers at all
Didibet has no Australian licence and no Australian regulator standing over it, so why run checks it is not locally compelled to run? The reasons are commercial. Payment partners push their own compliance obligations onto the merchants they serve, and a casino that cannot show customer checks loses its rails. The claimed Philippine licensing framework carries its own AML expectations. Verification also kills bonus abuse, duplicate accounts and chargeback fraud at the ID stage. Whatever the motive, the outcome for you is the same — you will be asked, and the ask comes when you want your money out.
What Didibet asks for
The operator’s terms state that before processing a withdrawal it may require proof of identity, images of the card used on the account showing both the front and the back, and either a passport or a recent bank statement. That is the published list. What is missing from it matters just as much: no timeframes, no service levels, and no description of how documents are stored or for how long. Our full assessment of the brand, including that gap, sits in the Didibet review and verdict.
The first request is usually the smallest one that answers the compliance desk’s question. A card-funded account gets a card request, a bank-transfer account gets a statement request, and a crypto deposit produces questions about the wallet behind it. Assume the list can grow, and that nothing is paid until the desk is satisfied.
Why the request comes at withdrawal, not deposit
For an operator, taking money in carries very little risk, while paying money out is where the exposure sits. Front-loading verification at sign-up also costs conversions, so most offshore platforms delay it until there is a reason to bother. The result is a predictable trap. Months of smooth deposits create the impression that the account has been approved, and the first withdrawal reveals that it never was.
The fix costs nothing. Upload your documents shortly after opening the account — long before there is a balance you care about. If something gets rejected you find out with nothing at stake, rather than discovering the problem with a four-figure balance sitting behind it.
Photographing documents so they pass first time
Most rejections come down to photography rather than anything suspicious. Nobody is judging your camera work. Automated checks and tired reviewers simply cannot read what you sent.
Photo identification
Driver licence or passport, in colour, with all four corners inside the frame. That means no cropped edges, no thumb over the expiry date and no ceiling-light glare across the hologram. Lay the document flat on a dark, plain surface in daylight and shoot straight down rather than at an angle. Every character of the name, date of birth and document number needs to be readable at normal size. Photographs of a screen showing a document get rejected as a matter of routine.
Card images
Where a card is requested, both faces are normally required. Standard practice everywhere is to cover the middle digits, leaving the first six and last four visible, and to cover the CVV on the reverse. Leave the cardholder name and expiry showing, since those are the fields being matched to your account. A compliance team never needs your full number and CVV together. If something asks for them unedited, stop and query it with support before sending anything.
Bank statement or proof of address
A statement issued within the last three months, showing the bank’s name, your full name and your residential address on the same page. A PDF downloaded from your banking app works better than a photo of a printout, simply because it arrives legible. Redact the transaction lines if you prefer, but leave the header block intact — the header is the part being read.
Underneath all of it sits one rule: the name and address on your documents must match the account exactly. A nickname where the licence carries a full legal name will fail, and so will an old address you never updated or a hyphen dropped from a surname. Mismatches are the most common reason a file bounces, and the easiest thing to prevent. Fix the account details first, then send the documents.
Why the payment method must be in your name
The principle is closed-loop: money leaves the way it came in, to an instrument belonging to the account holder. Depositing with a partner’s card, a parent’s account or a friend’s wallet breaks the chain the compliance desk exists to verify. The usual response is not a polite correction but a frozen balance, held while the operator works out whose money it has. Third-party funding is prohibited in the terms of practically every gambling platform on earth. It bites hardest with crypto, which is a live rail at Didibet, because a transfer from an exchange account in someone else’s name, or from a mixing service, reads as exactly what AML procedures exist to catch. Fund from a wallet or exchange account in your own name, and keep the withdrawal address consistent with it. The mechanics of each rail are covered on our page about Didibet’s withdrawal rails.
Source-of-funds requests
A source-of-funds request is a different animal from ID verification. Rather than asking who you are, it asks where the money you are gambling with came from — payslips, a tax return, a sale contract, a statement showing the salary credit. Requests like this land when the numbers grow: deposit volumes out of step with a typical account, a rapid escalation in stake size, a very large withdrawal, or repeated deposits from several instruments. If the money is ordinary earnings, answering is straightforward. Refusing, or sending something that does not reconcile with the deposit pattern, stalls the payout indefinitely.
How long Didibet verification takes
Didibet does not publish a timeframe. There is no stated service level for document review anywhere in its public terms, no “within 72 hours” promise, and no published escalation path if a review stalls. We are not going to invent a number to fill that gap. What you can influence is the document side: one clean, legible, correctly named set reviewed once beats three rounds of resubmission, and each round means another wait of unknown length. The operator’s own pace is outside your control entirely. Keep your chat transcripts and reference numbers, and avoid scheduling anything around money that has not landed.
Why verifications get rejected
- Name mismatch between the account, the document and the payment instrument.
- Stale proof of address — a statement older than three months, or one with the address cropped out.
- Cropped or glared images where a corner, a date or the document number cannot be read.
- Third-party payment method, which usually freezes the balance rather than merely delaying it.
- Expired identification, where the licence ran out and nobody noticed until this moment.
- A second account found during the check, which in most terms voids winnings outright.
What not to do
Do not edit a document. Adjusting a date, retouching an address or cleaning up a scan in an image editor counts as document tampering to a compliance desk, and it turns a delay into a closed account with forfeited funds. Do not send someone else’s card or identification, even with their blessing. Do not open a second account to escape a stuck verification, since duplicates are exactly what these checks are designed to surface. And do not send documents to any address or chat handle that arrived unsolicited claiming to be the operator. Phishing around gambling accounts works precisely because a verification request is the one message players are expecting.
How this differs from a licensed Australian bookmaker
With a locally licensed operator, verification is a legal requirement under Australian law, it is generally completed at sign-up rather than at withdrawal, and there is somewhere to go when it goes wrong. State and territory regulators license those operators, dispute schemes accept complaints about them, and a licensee sitting on a payout without cause has something to lose by doing so.
None of that exists around an offshore account. Didibet holds no Australian licence, so no regulator here has jurisdiction over your dispute, no local ombudsman will take the file, and the chargeback route through your bank is limited and slow. The operator’s own support is both the first and the last line of appeal. The sensible response to that is not alarm, but care with the details. Verify early, keep every document legible and consistent, and fund only from an instrument in your own name. Save your correspondence. And never stake money you are not prepared to see sitting in a process with no published deadline and no external referee.