Katrina Griffiths
Senior editor
Published on: September 29, 2026
Why licensed casinos ask for your ID, and what they do with it
Every online casino registered in Alberta is required to know who you are before it lets you place a bet. That requirement sits in AGLC’s standards for internet gaming and in federal anti-money-laundering law, so be wary of any site that never asks who you are.
The request can still feel intrusive, especially when a site wants a photo of your driver’s licence before you’ve played a hand. However, it helps to know what an operator can collect, why it’s needed, and what the operator can and can’t do with the data afterward. If verification is holding up the first payout, there’s a reason why a first withdrawal takes longer than advertised.
Three reasons a casino has to know who you are
Verification is usually called KYC, short for “know your customer.” In Alberta, it does three jobs:
- Age: you must be 18 or older to hold an account, and a date of birth typed into a form proves nothing on its own.
- Exclusion: every registered site is connected to AGLC’s central list of self-excluded and banned players, and KYC identifies who has to be stopped from registering or logging in.
- Money laundering: casinos are reporting entities under the federal Proceeds of Crime (Money Laundering) and Terrorist Financing Act, so they have to identify the people moving money through them.
Exclusion is easily overlooked. AGLC’s list only works if a site can match a real person to it, and the standard requires rechecking every registered player whenever the list is updated. A self-exclusion you could get around with a new email address wouldn’t protect anyone.
What a registered site needs to collect
AGLC sets a minimum for what’s gathered at sign-up, and the account can’t be opened until it’s been checked:
- Your full name, exactly as it appears on government-issued ID.
- Your date of birth, matched to that ID.
- Your physical address. The standard accepts only a street address or a legal land description but not a PO box.
- A valid email address and phone number.
- A username or other login for signing in later.
Federal record-keeping rules for casinos require you to provide your occupation when you open an account, which is why some sign-up forms ask what you do for a living.
Note: While AGLC accepts a few different forms of ID, a provincial health card isn’t accepted as ID under its rules.
You can also hold only one account per site. A second account under a slightly different name is exactly what the name-matching is there to catch.
How the check works
Most players expect to upload a photo of their licence at sign-up, but you may not have to.
The database check
AGLC doesn’t require an operator to see your photo ID at registration. FINTRAC’s rules allow two other methods: matching your details against a Canadian credit file, or the dual-process method, which confirms your name, address and date of birth against two separate reliable sources. If everything matches, you can be verified without handing over a document.
That’s why AGLC tells operators to ask for your name exactly as it appears on your ID. “Bill” on the form and “William” at the credit bureau are enough to fail the match. If the only problem is a minor address error, such as a typo or an old address, a location check showing you’re at or near the address on file can count as a pass.
The document upload
When the database check can’t confirm you, the site falls back on documents: usually a government-issued photo ID, and sometimes proof of address. FINTRAC allows this to be done remotely, so it’s often paired with a selfie that software can compare against the photo on your ID. The ID must be genuine, unaltered and not expired, so check the date on yours before you start.
When you’ll be asked again
Passing at sign-up isn’t the only checkpoint. These are the points where a registered site can come back to you:
- Your first withdrawal. Before any payout, the operator must confirm the request comes from the account holder and that the money is going to an account you legally hold. This is where proof of ownership of the card or bank account usually comes in.
- A large payout. FINTRAC requires a casino to verify the identity of anyone receiving a disbursement of $10,000 or more.
- Unusual activity. AGLC requires every operator to set out, based on risk, when it will ask where a player’s money comes from. A win far outside your deposit history can trigger a source-of-funds request.
- Your location. Only players physically in Alberta can play, so the site re-checks where you are and blocks known VPNs and proxies.
A source-of-funds request can feel like an accusation, but every registered operator runs one when its risk rules are triggered. Sending the document it asks for is what gets the payout moving again.
What happens to your information
Privacy is important, and the news is rife with people’s privacy being exploited. This is the part most players worry about, and the rules are tighter than many assume:
- Information use is limited to gaming. AGLC’s standard says player personal information can only be used for the gaming conducted and managed by AGLC or the Alberta iGaming Corporation (AiGC).
- Protection is set by Alberta law. Collection and storage must meet Alberta’s privacy legislation, and player data has to be encrypted both in storage and in transit.
- It’s kept for years. FINTRAC requires casinos to keep account records for at least five years after an account is closed, and AGLC requires compliance records to be kept for at least three.
- Some of it can be reported. Suspicious transactions are reported to FINTRAC through AiGC, and operators must be able to share information about high-risk or criminal activity with each other.
Closing your account doesn’t erase any of this. Even when your details are removed from an account, the operator still has to keep them for the required period. What you can do is see them: your deposit and withdrawal history, transactions and balance have to be available in your account, and Alberta’s Personal Information Protection Act gives you the right to ask an organization for the personal information it holds about you.
Red flags: When an ID request is a warning sign
A registered site asks for ID inside your account or through its verification provider, after you’ve signed up. Be suspicious of any request that doesn’t fit that pattern:
- It arrives by email, text or social media message rather than inside your account.
- It asks for your online banking password, a card PIN or a one-time code. No verification check needs those.
- It’s tied to claiming a prize, often unsolicited and sometimes with an associated fee. AGLC’s fraud warning says legitimate venues will never ask for financial information to pay out a prize and only request information for verification.
- The site isn’t on AiGC’s directory of registered sites.
Licensing matters more than it sounds. A copy of your driver’s licence handed to a fake site is worth more to a fraudster than a card number, because it can be used to open accounts in your name.
Conclusion
An ID check is one of the clearest signs you’re dealing with a registered site. The questions at sign-up, the name that has to match your licence and the document requests at withdrawal all come from rules set by AGLC and FINTRAC. The same rules decide how your information is stored, how long it’s kept and who it can be shared with.
The easiest way through is to sign up with your name exactly as it appears on your ID, keep that ID in date, and only send documents from inside your account. If a request arrives any other way, or a site never asks at all, stop and check with an official source before you share anything.
You must be 18 or older to gamble online in Alberta. If gambling is causing problems for you or someone you know, the Alberta Health Services Addiction Helpline is open 24/7 on 1-866-332-2322, and GameSense has free tools and advisors.
