Our AML and Verification Policy
We verify every player at Malina Casino before money leaves the platform. This page explains what we check, when we check it, and what we need from you, so your first withdrawal goes through without delays.
Our AML Commitment
Why we run these checks
We operate under licence number 8048/JAZ2016-064 issued by Curaçao eGaming (Antillephone N.V.), and that licence binds us to the anti-money-laundering rules of our jurisdiction. As a result, we cannot accept funds whose origin we cannot establish, and we cannot process payouts to unverified accounts.
Our internal compliance programme covers risk assessment, staff training, transaction monitoring and suspicious activity reporting. The Money Laundering Reporting Officer (MLRO) owns this programme and reviews it whenever our regulator updates its guidance.
When We Verify You
Three trigger points
Verification is not a one-off event. We run it at three points: at registration, where we screen your details against sanctions lists; at your first withdrawal; and at any later point where your activity crosses a threshold or raises a question. Most players only notice the first withdrawal stage.
- A government-issued photo ID (passport, driver licence or national ID card)
- Proof of address dated within the last 3 months (utility bill, bank statement or council rate notice)
- Proof of payment method ownership (card photo, e-wallet screenshot or crypto wallet address)
Thresholds that trigger review
If your cumulative deposits reach a level our compliance team flags as material, or a single transaction stands out against your usual pattern, we ask for updated documents before processing further deposits or withdrawals. This is a regulatory obligation, not a judgement about you personally.
How Verification Works
Step by step
The whole process runs through your account's verification tab, so nothing goes out over email unless we specifically request it.
- Upload the document through the secure verification page in your account
- Our compliance team checks it against your registered details
- We confirm the result by email, usually within 24 hours
- If anything is unclear, we tell you exactly what to fix and re-upload
Document security
Documents are stored on encrypted servers with access restricted to our compliance team. We mask card numbers in storage, keep the files separate from your gaming records, and delete them on schedule once retention periods expire. Your documents are never used for marketing or shared with third parties outside our licence obligations.
Source of Funds Requests
When we ask
For most players, ID and address are enough. We ask for source of funds evidence when your deposits exceed a level our risk framework treats as high, when you are withdrawing a large win, or when your deposit pattern does not match the profile we hold for you.
Acceptable evidence includes recent payslips, tax returns, bank statements showing regular income, a signed employment letter or dividend statements. We only need enough to connect the money you deposit to a lawful origin; we do not ask about your spending habits.
How We Monitor Transactions
Deposit and withdrawal checks
Every deposit is screened against sanctions and fraud databases in real time. Withdrawals get a second layer of review: we confirm the account, the method and the amount before releasing funds. Our minimum deposit and minimum withdrawal both sit at AUD 30, and daily withdrawals cap at AUD 5,000 with a weekly ceiling of AUD 15,000.
E-wallet and crypto payouts complete within 24 hours; cards and bank transfers take 3-5 business days. We charge no fees on either side.
We also apply the same-method rule. Withdrawals go back to the same card, e-wallet or crypto wallet the deposit came from, in proportion to what was deposited through each method. If that wallet or card is closed, contact [email protected] and we will arrange a bank transfer after verification.
If Verification Fails
What happens then
When documents are missing or unreadable, we pause withdrawals but keep your account open, and you keep full access to your balance. You get a clear list of what is missing and a reasonable window to supply it.
If the documents are refused, the outcome depends on the reason. Blurry photos or expired IDs are fixed with a re-upload. A mismatch between the account holder and the document holder, or evidence that the account is being used on someone else's behalf, means we freeze the account, void any pending withdrawals and return deposits to their originating method where the licence allows it. Suspected money laundering or fraud is reported to the authorities under our licence, and we cannot tell you when that has happened.
How Long We Keep Records
Retention periods
We keep verification records for the period required under our Curaçao eGaming licence after your account closes, typically five years, because our regulator can audit any transaction in that window. Your gaming history and financial records are retained on the same schedule. After that, records are securely destroyed. You can request a copy of the personal data we hold at any time by writing to [email protected].
Frequently asked questions
Can I play before completing verification?
Yes. Registration screening is automatic and you can deposit and play straight away. Full document verification kicks in at your first withdrawal.
Why was my withdrawal paused?
The usual reasons are a missing document, a mismatch between your account details and your ID, or a deposit pattern that needs source of funds evidence. We email you the specific reason and exactly what to upload.
Do I have to verify again later?
Possibly. If your ID expires, your address changes, or your cumulative deposits cross a threshold in our risk framework, we ask for updated documents.
Can I withdraw to a different method than I deposited with?
No. We return funds to the originating method in proportion to your deposits. Exceptions apply only when that method is closed, and we arrange alternatives after verification.
Is my passport scan safe with you?
Documents sit on encrypted servers with access limited to our compliance team, and we destroy them on schedule once the retention period under our licence expires.