1. Purpose of the Policy
This document sets out the internal standards and operational procedures that the Tikitaka company follows to prevent and detect money laundering, terrorist financing, and the misuse of online gaming services.
The purpose of the KYC (Know Your Customer) and AML (Anti–Money Laundering) policy is to safeguard both players and the operator by ensuring that every transaction carried out through the platform is legitimate and transparent.
Our objective is to maintain an ethical and compliant gaming environment where the identity of every player is verified, financial flows are traceable, and all suspicious activities are reported in accordance with global financial regulations.
This policy aligns with the requirements of the Curaçao eGaming Authority, the UK Financial Conduct Authority guidelines, and the recommendations of the Financial Action Task Force (FATF).
It also reflects the company’s commitment to integrity, accountability, and regulatory cooperation with international oversight bodies. Every employee is trained to recognise potential red flags and report anomalies that could indicate attempts at fraud or money laundering.
Through continuous monitoring and risk assessment, the operator aims to maintain one of the highest compliance standards in the iGaming industry.
2. Player Verification (KYC)
To comply with international regulations, every player must go through a structured verification process before accessing certain features such as withdrawals, bonuses, or high-value deposits.
The “Know Your Customer” process helps confirm the authenticity of player information and prevents the creation of multiple or fraudulent accounts.
Verification consists of several key steps:
- Identity Confirmation: Each player must provide a valid government-issued document such as a passport, national ID, or driver’s licence. The document must clearly display the player’s full name, date of birth, and photograph.
- Address Verification: Players are required to submit proof of address such as a recent utility bill, bank statement, or government-issued document, issued within the last three months.
- Payment Verification: To prevent unauthorised use of payment methods, Tikitaka Casino requests confirmation of ownership for credit/debit cards or digital wallets used on the platform.
- Source of Funds (where applicable): For significant transactions or cumulative deposits, players may be asked to provide documentation showing the legitimate origin of their funds.
The verification process is typically completed within 24 hours, though enhanced checks may take longer if additional documentation is required.
All data submitted for verification is handled confidentially and stored securely. Any inconsistencies between the registration data and the submitted documents may result in temporary account suspension until the issue is resolved.
Players are notified via email or their account dashboard once verification is complete. Failure to comply with KYC requirements may result in restricted access to certain services or permanent account closure.
3. Anti–Money Laundering Controls (AML)
The company maintains a robust AML framework that monitors all financial activity in real time to detect and prevent suspicious transactions. Each deposit, withdrawal, and internal transfer is automatically reviewed through risk-based filters designed to identify unusual patterns, irregular payment sources, or behaviour inconsistent with normal gameplay.
Large or rapid transactions that deviate from typical player activity may trigger enhanced due diligence (EDD) checks, requiring players to submit additional evidence about their source of income or occupation.
The operator reserves the right to delay or reject any transaction that appears suspicious or cannot be verified according to AML standards.
Among the red flags that may prompt investigation are:
- Multiple deposits from different cards or wallets under one name;
- Frequent withdrawals without gameplay activity;
- Attempts to use third-party or anonymous payment methods;
- Structuring deposits just below reporting thresholds;
- Unusual transfers between accounts or affiliates.
Tikitaka’s compliance officers are trained to handle such cases discreetly but thoroughly. If a transaction cannot be justified or validated, the account may be suspended and the case reported to the relevant authorities, including financial intelligence units.
All actions taken are logged, traceable, and periodically reviewed by external compliance auditors.
This proactive approach ensures the casino remains a safe and transparent environment for all legitimate users while contributing to the global fight against financial crime and terrorist financing.
4. Data Protection and Confidentiality
All customer data collected during verification and AML monitoring is treated with the utmost care and stored according to the General Data Protection Regulation (GDPR) and international privacy standards.
Sensitive information such as ID copies, payment details, or verification files are encrypted using AES-256 encryption and stored on secured servers protected by multi-layer firewalls and restricted access controls.
Only authorised personnel from the Compliance and Risk departments have permission to handle verification data, and all access is recorded in encrypted system logs.
Tikitaka implements strict internal privacy protocols, ensuring that verification data is used exclusively for legal and compliance purposes and is never sold, traded, or shared with third parties unless required by law or a regulatory authority.
The company conducts annual data security audits and employee training sessions to maintain high standards of confidentiality. All staff members are bound by non-disclosure agreements (NDAs) and data protection clauses.
In the event of a data breach, immediate countermeasures and reporting procedures are activated in compliance with GDPR Article 33.
Furthermore, the casino maintains a zero-tolerance policy for insider threats — any attempt by staff to access, misuse, or leak client information results in immediate disciplinary action and legal reporting.
By combining technological security with regulatory discipline, the platform ensures that player identities, financial data, and verification records remain fully protected at all times.