13 November 2026
Section 21 of the Financial Intelligence Centre Act 38 of 2001 prohibits an accountable institution from establishing a business relationship or concluding a single transaction until it has established and verified the client's identity. That one provision explains most of what South African players experience as friction: the request for an ID photo, the demand for something showing where you live, the hold on a first cash-out while someone checks your paperwork. The checks are not an arbitrary house rule. They follow from the Act itself, as published by Parliament, and understanding them makes the process far less irritating.
What FICA means for online casino withdrawals
The Financial Intelligence Centre Act, usually called FICA, is South Africa's anti-money-laundering law. Its logic is simple: before a business takes you on as a client or handles a transaction for you, it must know who you are and be able to prove it. Section 21 puts that in the form of a flat prohibition, so a business cannot decide to skip the step because it is busy or because the amount looks small.
The Financial Intelligence Centre, which administers the Act, has translated this into more specific expectations. According to the centre, Regulation 4 requires the verification of a natural person's full names, date of birth, identity number and residential address. That is four separate data points, and each has to be confirmed, not merely collected. A player who types an address into a registration form has supplied information; the operator still has to verify it.
The centre's guidance on online gambling is direct about timing. It says bookmakers and totalisators must not accept funds into an online betting account before the client identification and verification process has been completed. In other words, the legal expectation is that verification comes first and money follows. Many players only meet the process at the withdrawal stage, because a deposit may go through smoothly while the operator's compliance team asks for documents once there is something to pay out. The delay at that point is the visible end of a requirement that, on paper, should have been satisfied at the start.
The same guidance deals with the fact that online play involves no counter, no clerk and no face. The centre says bookmakers and totalisators should apply equally effective client identification and verification procedures in non face-to-face online betting as in face-to-face situations. The screen is not a loophole. If anything, it means operators lean on document uploads and electronic checks to reach the same standard that a person standing at a window would meet.
The practical consequence for you is that a withdrawal request is not a simple instruction to move money from one place to another. It sits on top of a legal obligation the operator cannot waive, and no amount of polite pressure on a support agent will change that.
Which documents casinos usually ask for
Operators ask for different things in different orders, but the requests tend to fall into a handful of categories. These map onto what the law requires them to verify, plus a banking check that protects the payout itself.
The documents most commonly requested are these:
- Proof of identity, showing your full names, date of birth and identity number
- Proof of address, showing where you currently live
- Proof of banking, showing that the account receiving your winnings is yours
- Proof of source of funds, which is requested only in some cases
Proof of identity answers the first three items in Regulation 4: full names, date of birth and identity number. In South Africa that is usually your ID document, though the exact forms an operator accepts are a matter for its own procedures. What matters is that the details on it match what you entered when you registered. A middle name left off, a surname spelled differently, or a date of birth typed in the wrong order can stall the whole check, because the operator is verifying the information you gave against the document in front of it.
Proof of address answers the fourth item, the residential address. This is the one that trips up many players, because people move, share homes, or have bills and statements in someone else's name. If the address you registered with is not the one on your supporting document, expect a query. Check the details before you upload anything rather than after a rejection.
Proof of banking is less about FICA's identity rules and more about making sure the money goes to the right person. Operators generally want to see that the account receiving your winnings belongs to you. Using a bank account in another person's name is a common reason for withdrawals being held up.
Proof of source of funds is the exception rather than the rule. Some operators request it in particular circumstances, and the further checks the Financial Intelligence Centre expects for non face-to-face clients give them room to do so. If you receive this request, it is not an accusation. It means the operator is working through its own risk process, and a prompt, clear answer usually moves things along fastest.
What South African regulators expect from online gambling operators
Alongside the Financial Intelligence Centre, the National Gambling Board has made the obligations plain for the industry. In material it published for 2022-23 on the FIC Act, the board says gambling entities must perform customer due diligence when a client conducts a single transaction or establishes a business relationship. Customer due diligence is the umbrella term for the identification, verification and record-keeping that FICA demands.
The board also addresses the situation where a player is only passing through. For once-off transactions below R5 000, it says, the gambling entity must still obtain and record some information on the client. The wording matters. A smaller transaction does not mean no questions; it means a lighter touch, with the operator still required to capture and keep certain details. Players who assume a modest first bet or a small once-off deposit sits outside the rules have misread the position.
Repeat play changes the picture. The board says that where a client returns to conduct further transactions, the gambling entity must identify and verify the client. So the light-touch approach for a single small transaction does not stretch into an ongoing relationship. Once you come back and play again, the operator is expected to move to full identification and verification. That is why a casino that let you register and play a little without much fuss may later ask for a full set of documents when you ask to withdraw or when your activity grows.
This helps explain a pattern many players find confusing: the experience can feel inconsistent. One operator asks for everything up front, another waits until a cash-out, and a third asks for fresh documents after you have been playing for a while. The legal framework sets the floor, namely that verification has to be completed and money should not be accepted into an online betting account before it is. How an operator sequences the paperwork within that framework is a matter of its own systems.
For you, the useful reading is that verification is the expected condition of using a licensed gambling service in South Africa, not a penalty. An operator that never asked anything of you would be the one to worry about, because it would suggest it was not meeting its obligations under the Act.
How to avoid delays when cashing out
Most withdrawal delays come from a small number of avoidable causes, and nearly all of them are about the quality and consistency of what you submit.
Start early. Because the law expects verification to be completed before funds are accepted into an online betting account, the sensible time to do it is when you register, not when you have a balance you want to move. Finishing it before your first meaningful deposit means a later withdrawal request meets no surprise queue.
Make sure every document is legible. A blurred photo, a cropped corner or a glare across the ID number gives a reviewer no choice but to reject it. Photograph or scan documents in good light, show the whole page, and check that every detail you are trying to prove can actually be read. It is a dull piece of advice, and it prevents a large share of rejections.
Match your details exactly. Regulation 4 turns on your full names, date of birth, identity number and residential address, so a mismatch between your registration profile and your documents is a problem the operator has to resolve before proceeding. Compare them line by line before you submit.
Do not assume that sending an ID picture finishes the job. The Financial Intelligence Centre has said that a mere copy of a customer's identity document, certified or not, is not enough by itself to prove that the customer's identity has been verified. A copy shows what a document says; it does not on its own show that the person using the account is the person named. If an operator asks for something additional, such as a further document or a confirmation step, that is the law at work, not the operator being difficult.
Expect extra steps because you are online. For non face-to-face clients, the centre says accountable institutions must take reasonable steps to confirm the existence of the client and verify the identity of the natural person involved. Since nobody checks you in person, an operator may ask for more than one kind of evidence, or follow up if something does not line up. Replying quickly and completely to those requests is the single biggest thing within your control.
Finally, keep your own record of what you sent and when, and make withdrawals to an account in your own name. If a request drags on, you can show exactly what has been supplied. Verification done early, with clear and consistent documents, is usually the difference between a payout that arrives in the normal course and one that sits pending while the paperwork is sorted out.