Why does a casino ask for your bank statement or payslip? 

Casino asking for a bank statement or payslip? Read the difference between identity verification and source of funds, along with tips for privacy and safe submission. 

You request a withdrawal and receive an unexpected request: send a bank statement or a recent payslip. Didn’t you already verify your identity? Why does a casino also want to know what happens in your bank account or how much you earn? 

The answer depends on the specific check the operator is carrying out. A bank statement may be needed to establish that a bank account belongs to you. The same document may also be requested to understand the origin of a deposit. A payslip answers yet another question than an identity card. 

A document request is not in itself evidence of fraud or obstruction. However, the words ‘mandatory check’ are equally not a blank check to collect unlimited personal data. Ask first about the purpose, the specific information required, and the secure method of submission. 

Identity checks and source of funds investigations are not the same 

Identity verification centers on whether you are genuinely the person in whose name the player account is registered. This involves checking your name and date of birth via an accepted form of identification. 

Payment method verification addresses an additional question: does the bank account or card used belong to that same person? A confirmed identity does not automatically prove that every designated bank account belongs to you. 

Investigating the source of funds goes further. Here, the operator seeks to understand how the money you play with was obtained. A payment from an account in your name shows the direct payment route, but does not necessarily explain the original source. 

Our guide on identity verification and KYC at online casinos covers the fundamentals. KYC, or Know Your Customer, is often used as an umbrella term. Always ask which concrete check lies behind the request. 

One bank statement can answer several different questions 

The scope of an appropriate document request depends on its purpose. Confirming an account holder requires different details than investigating a specific flow of funds. 

Purpose of the check	Potentially relevant information
Confirm identity	Identification details and accepted proof thereof.
Verify account holder	Name, account number, and a reliable bank document.
Trace a payment	Amount, date, involved account, and payment reference.
Substantiate source of funds	Information on the source and, where necessary, the corresponding cash flow.
Assess financial situation	Information aligned with the specifically explained assessment objective.

This table is not a mandatory checklist of documents. An operator must be able to explain per request which information is required and on what legal basis. Just because a document can be uploaded technically does not mean it is necessary to collect everything displayed on it. 

Why can a payslip be relevant? 

A payslip can substantiate that someone receives income from salaried employment. A corresponding salary deposit can subsequently demonstrate that the amount was actually received into the bank account. Both documents therefore do not answer the exact same question. 

Even within an individual case file, salary is not the only possible source. Funds may, for instance, come from previously accumulated savings or a verifiable sale. If you do not have a payslip that explains the amount in question, state this clearly and ask what appropriate alternative is accepted. 

Do not simply send an extensive collection of private records. Start with an accurate explanation of the source and let the operator specify which evidence is required to support it. 

Source of funds and source of wealth 

‘Source of funds’ generally refers to the money behind a specific transaction or series of transactions. Suppose you transfer money from your savings account: the question may be how that amount ended up in that savings account in the first place. 

‘Source of wealth’ focuses on the broader financial background: how has an individual built up their overall wealth? That is a much wider question than where a single deposit originated. 

These concepts also appear in the National Bank’s guidance on anti-money laundering controls in the financial sector. That guidance is not an independent document rule for every casino player, but it clarifies the distinction between both investigations. 

Ask which of the two is intended. A request for your entire financial history requires a different justification than checking a single payment. Describe the facts accurately and provide documents tailored to the specific question asked. 

Why does the request only come upon withdrawal? 

A player may wonder why depositing succeeded earlier, while additional documents suddenly prove necessary when withdrawing. The fact that an earlier check was completed does not rule out a subsequent check. Identity, payment details, and the explanation for a transaction are separate components. 

A new bank account, updated personal details, or an unclear flow of funds can trigger additional questions. You must ask the operator which specific trigger applies. There is no universal monetary threshold at which every Belgian casino is required to request the exact same documents. 

During certain investigations, an operator may not be able to share every detail. That does not prevent you from asking for practical instructions: which document is missing, which time period is being reviewed, and via which channel should you respond? 

In case of delays, our guide on handling a blocked casino withdrawal helps track the document verification and payment status separately. 

Ask these questions before sending documents 

Ask customer service to clarify the request in writing. ‘We need this for verification’ provides very little clarity when a full bank statement is requested. 

You can combine these questions: 

• Does this concern my identity, account ownership, a specific payment, or the source of funds? 
• Which specific details and what time period are necessary? 
• What is the legal basis for this data processing? 
• Can a more limited document achieve the same purpose? 
• Which information may I redact without making the check impossible? 
• Where can I upload the document securely, and how long will it be retained? 

By asking this, you are not refusing the check. You are establishing what is needed and how you can cooperate appropriately. Keep the reply so it remains clear later which instructions you received. 

May you redact transactions on a bank statement? 

A bank statement can reveal information about medical payments, personal relationships, daily expenses, or other private matters. Not every detail is relevant to verifying your bank account number. 

Ask in advance whether a certificate of account ownership, a specific transaction confirmation, or a statement with irrelevant details redacted is sufficient. An investigation into cash flow may require more context than a straightforward account ownership check. 

European privacy rules stipulate that personal data must be limited to what is necessary for the intended purpose. This is the principle of data minimization under the General Data Protection Regulation (GDPR).  

Never alter documents in a way that creates a misleading impression. Never change amounts, names, dates, or the origin of a payment. If redaction is accepted, keep both the original document and the operator’s written instructions. Also confirm whether adding a watermark specifying the recipient and purpose is permitted. 

Submit documents via a verified channel 

Open the official website or app yourself and verify that the request belongs to your account. Never blindly follow an upload link from an unexpected email or social media message. 

Also check which company operates the website. Our directory of legal online casinos in Belgium helps provide orientation. A copied logo or license number is no reason to send financial documents to an unfamiliar domain. 

Preferably use the operator’s verified upload portal. If submission takes place through an external verification service, ask which party that is and how the data is processed. If only an email address is provided, ask what secure transmission method is available. 

Never share your online banking password, PIN, login code, or payment approval with a staff member. A bank statement is a document; granting direct access to your bank account is something else entirely. 

A concrete example: proof of account or proof of income? 

Suppose a casino asks you to confirm that the IBAN for your withdrawal belongs to you. A bank document displaying your name, account number, and issuing bank may contain all relevant information. Ask if that suffices before sending months of transaction history. 

In another case, the operator asks how a specific deposited sum was accumulated. That same IBAN proof alone will not explain the origin. You could, for example, state that it comes from savings and ask which documents are needed to substantiate that explanation. 

The difference is not that one request is automatically justified and the other is not. What matters is that the supporting documents genuinely answer the question and that the requested scope is properly justified. 

Similarly, a payslip is not general proof that every gambling amount is affordable. Source of funds and the impact of gambling on your household budget remain distinct matters. 

How long may the casino retain your documents? 

The privacy policy must provide information on the retention period or the criteria used to determine it. Ask for clarification if it only contains a vague reference to ‘as long as necessary’. 

No single retention period applies universally to every document and every purpose. Applicable legal obligations may require certain data to be retained longer, even after your player account has been closed. 

The right to erasure is therefore not absolute. The Data Protection Authority explains that data processing necessary to comply with a legal obligation can stand in the way of immediate deletion. 

This does not mean that all submitted data may be used indefinitely for unrelated purposes. In case of privacy concerns, ask who the data controller is and how you can reach the privacy contact or Data Protection Officer. 

What if you refuse or find the request excessive? 

A refusal can have consequences if mandatory checks cannot be completed. For instance, the operator may restrict services while the file is under review. This does not automatically mean your balance is permanently forfeited. 

Ask which exact piece of information is missing and whether an alternative is possible. A self-employed individual does not necessarily have a payslip; someone relying on savings may need to explain a different origin. The objective is proper substantiation, not submitting a document that does not fit your situation. 

If a document is repeatedly rejected, ask for a concrete reason. Is it illegible, outdated, incomplete, or does it fail to answer the question? Keep records of your uploads and receipts, but do not repeatedly send sensitive files to changing email addresses. 

If you cannot reach a resolution, submit a written complaint. Our guide on filing a complaint against a legal online casino in Belgium helps organize facts and supporting evidence. For a separate privacy dispute, you can review the appropriate complaint procedure with the Data Protection Authority. 

A well-handled document request starts with a clear question and ends with clarity regarding the check. Provide accurate information via a verified channel, request explanations for unnecessarily broad requests, and keep your privacy file separate from the question of when your withdrawal is processed.