Crypto KYT for iGaming: casinos and sportsbooks
Screen crypto deposits and cash-outs, and keep a file that stands up in a licence review. A player funds in USDT, plays for twenty minutes and asks to cash out to a different address. Your obligation begins at the deposit and is judged at the withdrawal.
Why gambling is the hardest funding case
AML training uses one pattern as the textbook example of layering: money in, little genuine activity, money out somewhere else. At a casino that is an ordinary evening. A player who deposits 2,000 USDT, plays a few hands and withdraws 1,700 has done nothing wrong, and looks the same as someone who has. An address-level risk score cannot resolve that, because the address is not what is in question.
Volume makes it worse. A broker sees a handful of funding events per customer each year. An operator can see thousands of deposits an hour, most of them small, from addresses never seen before. A process that needs a human to look at each one becomes a queue that grows until someone turns it off.
What the rules say, and from when
Under the EU's anti-money-laundering regulation, providers of gambling services are obliged entities. Due diligence is triggered at EUR 2 000 or more on the wagering of a stake or the collection of winnings. The amount is counted per customer rather than per session, so a player who deposits EUR 400 five times has crossed it. That regime applies from 10 July 2027. Most operators reading this are licensed outside the EU and serve players inside it. That does not remove the exposure, though it changes who asks about it first.
Sanctions already bind you today, everywhere, with no threshold. Paying out to a designated person is prohibited whatever the amount, licence or jurisdiction. A stablecoin payout also cannot be charged back like a card payment. It is permanent and public, and the transaction stays on-chain, with your hot wallet on one side of it, for as long as the chain exists.
How KYTGate fits an iGaming stack
You make one API call at deposit and one before each cash-out. KYTGate verifies the transaction on-chain and screens the paying or receiving address against OFAC, UK and EU sanctions data and live USDT and USDC freeze status. It applies your written policy and returns ALLOW, REVIEW, BLOCK_PENDING_MLRO or TECHNICAL_HOLD with a signed Decision Receipt. Anything other than ALLOW opens a case. Blocks need a second person to close, so one operator cannot release a held payout alone.
Some things are out of scope. KYTGate holds no player names or documents, and it does not detect bonus abuse, chip dumping or multi-accounting. Those are your platform's job and need your gameplay data rather than chain data. KYTGate covers the funding leg, with a record you can hand to a regulator.
Three common situations
Cash-out to an address that never deposited
The deposit decision and the withdrawal request are linked screenings on the same player reference, so the mismatch is visible in one case instead of being reconstructed from two systems afterwards.
Tether freezes the player's address mid-session
Freeze status is read live from the issuer's contract at decision time rather than from a cached list. A frozen destination is blocked, and the receipt proves the freeze existed on the day you declined, even if it is lifted later.
A player crosses the threshold in small deposits
The occasional-transaction signal fires on the cumulative amount against your configured threshold. It lands on the case as information rather than as an automatic block. The decision stays yours, and it is recorded.
Best fit: licensed online casinos and sportsbooks taking stablecoin deposits at volume, where the compliance team needs the funding leg evidenced without a human in every loop.
Still working out which obligations apply to you? Who must screen crypto payments sets out the two layers: sanctions, which bind every EU business today, and due diligence, which binds a defined list of sectors from 2027, with the source next to each row.
Decision-support software, not legal advice. Which obligations apply to you depends on your licence and structure; confirm with counsel.