Incaspin Casino operates an Anti Money Laundering programme designed to match both Spanish legal requirements and the international standards defined by the Financial Action Task Force. This policy sits in the casino’s legal and affiliates section and describes the compliance steps covering every financial touchpoint — from player registration and deposits to onboarding affiliate partners and settling commissions. Management views the prevention of money laundering and terrorist financing as a fundamental part of working with integrity. All employees, contractors and affiliate partners must comply with the procedures set forth here, so that Incaspin Casino continues to be a trusted, legally sound place to play. That commitment transcends ticking regulatory boxes. It entails building a risk‑aware culture that safeguards the Spanish gaming community and the wider financial system from illegal activity.
Spain’s Legal Structure and Permit Obligations
Incaspin Casino possesses a license from Spain’s gambling authority, which applies rigorous anti‑money laundering conditions rooted in Law 13/2011 on gambling control and the more comprehensive Law 10/2010 on preventing money laundering and terrorist funding. The regulatory scene is bolstered by Royal Decree 304/2014 and the mandatory rules published by SEPBLAC, Spain’s financial intelligence unit housed within the Bank of Spain. Meeting these laws means Incaspin Casino must operate a fully detailed AML programme covering customer due diligence, ongoing oversight, suspicious transaction disclosure and record keeping. The licensing demands also mandate a designated compliance officer who communicates directly to the board on financial crime deterrence. Punishments for neglecting to conform can include significant fines, licence withdrawal and severe reputational harm, which is why the casino’s internal controls are intended to go beyond minimum legal thresholds. Grounding the policy in this Spanish legal hierarchy shows a legally justifiable stance that satisfies supervisory expectations and gives players a protected atmosphere for their wagers.
Enhanced Due Diligence for Elevated-Risk Profiles
Incaspin Casino’s risk categorisation engine systematically flags accounts that meet established high‑risk criteria for money laundering, directing them into a deeper due diligence workflow. Politically exposed persons, their family members and close associates are recognized through regular screening against global PEP lists and must get senior management approval before any business relationship begins or continues. The same strict standard applies to legal persons, trusts and other structures where the real beneficial owner cannot be easily identified or where ownership chains involve places with weak transparency registers. Enhanced due diligence means collecting extra information about the purpose and expected nature of the business relationship, examining the source of wealth more forensically, and reviewing transactions more often than the baseline risk profile requires. Each enhanced review produces a detailed internal report that documents the reason for accepting or rejecting the account, the verifying evidence collected and the approval chain. If information gaps remain after reasonable effort, the casino maintains the right to refuse service and, where there is a suspicion of money laundering, to file a report with SEPBLAC without telling the customer, strictly obeying the tipping‑off prohibition.
Record-Keeping and Information Security Safeguards
The documentary basis of Incaspin Casino acuerdo de usuario Casino’s AML programme depends on careful record‑keeping that satisfies both the data retention rules of Spanish money laundering law and the data protection principles of the General Data Protection Regulation, as applied by Organic Law 3/2018 in Spain. The casino stores all due diligence documentation, transaction logs, business correspondence about account activity and internal investigation files for ten years after the business relationship ends or an occasional transaction is carried out. This retention window makes sure records stay available for later inspection by the DGOJ, SEPBLAC or law enforcement bodies looking into historical matters. Data is stored in encrypted repositories with access controls limited to authorised compliance staff, and a strict deletion protocol ensures materials securely destroyed once the statutory period runs out. Regular audits confirm that the storage infrastructure meets security standards and that no unauthorised copies exist. The records kept for AML purposes belong to these categories:
- Proof of identity and the results of electronic identity checks, including any discrepancies flagged during onboarding and how they were resolved.
- Full sequential records of every financial transaction, showing the date, amount, currency, payment instrument, IP address, device fingerprint and geolocation data when available.
- Suspicious activity reports, internal investigation notes and the evidence that justified the choice to file or not file a report with the financial intelligence unit.
- Written messages between the casino and the player about account queries, source of funds requests or clarifications tied to enhanced due diligence steps.
Reporting Duties to SEPBLAC
Under Spanish law, Incaspin Casino is an regulated entity and therefore has a statutory duty to send suspicious transaction reports to the Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offences, known as SEPBLAC. The reporting process kicks in whenever the compliance team has valid reasons to suspect that a transaction or a linked chain of transactions is associated to money laundering or terrorist financing, without regard to the amount. In those cases, the assigned compliance officer drafts a restricted report through SEPBLAC’s secure electronic channels, specifying the subject’s identity, the type of the suspicious conduct, the financial record and any confirming information gathered during the internal probe. The report is sent within the statutory deadlines and the casino delays executing the transaction until a response is received, unless putting it off is unworkable or would frustrate the inquiry. All employees are under a strict duty to keep the fact of reporting and the content of any report strictly confidential. Informing the customer or an unauthorized third party is a criminal violation under Spanish anti‑money laundering law. Incaspin Casino records the resolution of each report, using judicial feedback and typology revisions to improve its internal monitoring rules.
Affiliate Programme AML Requirements and Partner Due Diligence
The Incaspin Casino affiliate programme remains compliant through a due diligence process that enforces AML expectations beyond the operator itself. Before any partnership deal launches, prospective affiliates undergo screening that checks their business registration, tax standing, beneficial ownership and the reputation of their digital properties. Partners agree to a contract mandating them to promote the casino in a way that prevents drawing anonymous, high‑risk traffic, and they must not publish content that could be seen as enabling money laundering or structuring financial flows. The affiliate agreement grants Incaspin Casino the right to audit the partner’s referral practices and to suspend commissions on the spot if suspicious patterns show up, such as a cluster of low‑activity accounts generating unusually high commission volumes. Affiliates also must run their own basic know‑your‑customer checks on sub‑affiliates and report any concerns to the casino’s compliance department without delay. By tying the marketing ecosystem that serves the Spanish platform into the same vigilance that underpins internal AML controls, Incaspin Casino builds a full shield against financial crime — from the first promotional click right through to the final withdrawal settlement.
Extent and Commitment to AML Compliance
This Anti Money Laundering Guideline applies to every product line, customer group and promotional channel Incaspin Casino manages under its Spanish licence. That comprises real‑money casino games, live dealer experiences, sports betting integrations and any future gambling services. Compliance obligations extend vertically through the whole value chain, from the first customer onboarding check through ongoing transaction monitoring, periodic reviews and, where necessary, ending business relationships. The policy also applies to the affiliate network, requiring every partner to behave in a way that does not facilitate or conceal the movement of dirty money. By integrating AML controls into daily operations, Incaspin Casino identifies risk indicators at the earliest possible stage. The leadership team assesses the policy’s scope every year, revising it to incorporate changes in Spanish law, guidance from the Dirección General de Ordenación del Juego and new financial crime patterns. That keeps the document alive and adaptive to the threats we face.
Client Due Diligence and Verification Measures
No customer gets a financial relationship with Incaspin Casino until thorough customer due diligence is finished. The verification procedure follows the “know your customer” rule Spanish law demands, requiring every person to hand over valid information that gets checked against trusted sources or electronic databases. The compliance team conducts real‑time checks against mandatory sanctions lists, politically exposed persons databases and watch lists maintained by European and international agencies. If a potential match turns up, the account is frozen immediately while a manual investigation runs, and a report is sent to SEPBLAC if necessary. Verification is not a one‑time door‑check. It continues through the whole relationship, with periodic reviews initiated by changes in account behaviour, large withdrawals or when official documents expire. Incaspin Casino presents the documents needed in a structured format so players understand clearly what to provide to unlock and retain their accounts. The standard documents requested over the life of a player account include:
- A valid government‑issued identity document — passport, national ID card or Spanish residence permit — showing a clear photograph and a valid ID number.
- A recent utility bill, bank statement or tax form that verifies the player’s registered residential address and is no older than three months.
- Ownership verification of the payment method used, which may be a redacted screenshot of an e‑wallet profile, a photo of the physical payment card showing the first six and last four digits, or a bank certificate.
- When cumulative deposits reach a set threshold, a source of funds declaration backed by salary slips, tax returns or investment account statements.
Risk-Focused Methodology and Internal Controls
Every AML measure at Incaspin Casino is calibrated through a dynamic risk‑based methodology, aligning with the methodology endorsed by the European Banking Authority and Spanish supervisory agencies. The compliance team conducts a comprehensive, enterprise‑wide risk analysis at least once a twelve-month period, examining product weaknesses, delivery methods, customer characteristics and where player accounts are located. What they uncover defines the level of due scrutiny, transaction monitoring trigger levels and where compliance resources are allocated. Internal controls follow a documented policy system that contains clear escalation paths, segregated duties and independent audit reviews. A risk appetite document sanctioned by senior management defines the limits the casino is prepared to work inside, so that higher‑risk situations always get more scrutiny. The list below displays the main risk types that influence how strictly controls are applied to individual accounts and associates:
- Location-based risk: vulnerability to countries Spanish authorities flag as having weak AML frameworks or high bribery.
- Game risk: games or payment methods that allow fast money transfers, high‑stakes privacy or person‑to‑person transfers.
- Customer risk: profiles including non‑resident persons, complex corporate structures or jobs that often handle lots of money.
- Transaction risk: trends like frequent small payments, immediate withdrawals with little play, or payments from third entities.
- Referral risk: partners active in unregulated referral sectors or using marketing that attracts anonymous, unverified traffic.
Workforce Development and Compliance Culture
Incaspin Casino recognizes that even the best technical controls can be insufficient if the people running them are not fluent in financial crime prevention. So the casino invests in ongoing training that gives every staff member the understanding to identify red flags, comprehend their reporting duties and grasp the legal fallout of breaching rules. New employees undergo a mandatory induction addressing the basics of Spanish AML law, the internal reporting chain and the confidentiality principle, while current staff undergo annual refresher courses that fold in recent regulatory changes and real, anonymised case studies from the industry. The training is split by role: customer‑facing agents are given scenarios focused on player interactions and verbal cues, while compliance analysts delve deeper into transaction pattern analysis and report writing. Board‑level executives are briefed on strategic risk shifts and the consequences of enforcement actions observed across the European gambling sector. A solid whistleblowing channel lets any employee report issues anonymously through an independent route, strengthening a culture where the platform’s integrity is the responsibility of everyone, not just one department.
Transaction Oversight and Suspicious Behavior Detection
Incaspin Casino operates an automated transaction monitoring system that operates nonstop, examining every deposit, withdrawal and platform transfer for patterns that stray from expected behaviour. The system integrates rule‑based scenarios written by compliance analysts, machine learning models trained on historical data and real‑time sanctions screening at the moment of each financial event. When a transaction activates an alert, a compliance operations team member examines the context, assessing the customer profile, game history and the nature of the alert before determining if it is legitimate. The investigation is logged with a timestamp and stored in the case management module, creating a defensible audit trail that can be demonstrated to Spanish regulators on request. The casino holds a library of suspicious activity indicators that is constantly enhanced through feedback loops and typology reports issued by SEPBLAC and international partners. Some of the indicators that often trigger closer scrutiny include:
- Structuring patterns, where a player deliberately divides a large transaction into several smaller amounts to avoid reporting thresholds or bypass internal alarms.
- Quick money cycling, with withdrawal requests immediately following a deposit and little to no play, suggesting the casino is being used as a quasi-banking channel.
- Several accounts operating from a single device, IP cluster or financial instrument, especially when money flows between accounts in a way that obscures the origin of funds.
- Discrepancies between stated occupation, income and betting volumes — for example, a student profile running six‑figure monthly turnover without a clear explanation.
- Repeated changes to personal details like email, phone number and residential address within short periods, which can signal efforts to mask identity and reset monitoring cycles.
