Incaspin Casino maintains an Anti Money Laundering program built to satisfy both Spanish legal standards and the international standards set by the Financial Action Task Force https://incaspin-casino.com.es/legal-and-affiliates/. This policy appears in the casino’s legal and affiliates section and outlines the compliance steps addressing every financial touchpoint — from player registration and deposits to integrating affiliate partners and settling commissions. Management views the prevention of money laundering and terrorist financing as a fundamental part of conducting business with integrity. All employees, contractors and affiliate partners must adhere to the procedures described here, so that Incaspin Casino continues to be a trusted, legally sound place to play. That commitment transcends ticking regulatory boxes. It entails building a risk‑aware culture that protects the Spanish gaming community and the wider financial system from illegal activity.
Documentation and Data Protection Safeguards
The documentary basis of Incaspin Casino’s AML programme rests on careful record‑keeping that meets both the data retention rules of Spanish money laundering law and the data protection principles of the General Data Protection Regulation, as implemented by Organic Law 3/2018 in Spain. The casino keeps all due diligence documentation, transaction logs, business correspondence about account activity and internal investigation files for ten years after the business relationship ends or an occasional transaction is carried out. This retention window ensures records stay available for later inspection by the DGOJ, SEPBLAC or law enforcement bodies investigating historical matters. Data is stored in encrypted repositories with access controls limited to authorised compliance staff, and a strict deletion protocol guarantees materials securely destroyed once the statutory period runs out. Regular audits check that the storage infrastructure meets security standards and that no unauthorised copies exist. The records kept for AML purposes fall into these categories:
- Proof of identity and the results of electronic identity checks, including any discrepancies flagged during onboarding and how they were resolved.
- Detailed time-ordered registers of every financial transaction, showing the date, amount, currency, payment instrument, IP address, device fingerprint and geolocation data when available.
- Alert filings, internal investigation notes and the evidence that justified the choice to file or not file a report with the financial intelligence unit.
- Written messages between the casino and the player about account queries, source of funds requests or clarifications tied to enhanced due diligence steps.
Workforce Development and Regulatory Culture
Incaspin Casino understands that even the finest technical controls can fall short if the people running them are not versed in financial crime prevention. So the casino allocates resources to ongoing training that gives every staff member the expertise to identify red flags, grasp their reporting duties and grasp the legal fallout of failing to comply. New employees go through a mandatory induction addressing the basics of Spanish AML law, the internal reporting chain and the confidentiality principle, while current staff undergo annual refresher courses that incorporate recent regulatory changes and genuine, anonymised case studies from the industry. The training is divided by role: customer‑facing agents get scenarios concentrated on player interactions and verbal cues, while compliance analysts go deeper into transaction pattern analysis and report writing. Board‑level executives are updated on strategic risk shifts and the consequences of enforcement actions observed across the European gambling sector. A strong whistleblowing channel lets any employee report issues anonymously through an independent route, strengthening a culture where the platform’s integrity is the responsibility of everyone, not just one department.
Transaction Monitoring and Suspicious Transaction Detection
Incaspin Casino uses an automated transaction monitoring system that never stops, reviewing every deposit, withdrawal and platform transfer for patterns that stray from expected behaviour. The system combines rule‑based scenarios written by compliance analysts, machine learning models trained on historical data and real‑time sanctions screening at the moment of each financial event. When a transaction triggers an alert, a compliance operations team member examines the context, reviewing the customer profile, game history and the nature of the alert before deciding if it is legitimate. The investigation is timestamped and stored in the case management module, establishing a defensible audit trail that can be demonstrated to Spanish regulators on request. The casino holds a library of suspicious activity indicators that is constantly refined through feedback loops and typology reports released by SEPBLAC and international partners. Some of the indicators that often prompt closer scrutiny include:
- Structuring patterns, where a player deliberately splits a large transaction into several smaller amounts to avoid reporting thresholds or evade internal alarms.
- Fast fund rotation, with withdrawal requests immediately following a deposit and little to no play, implying the casino is being used as a pseudo‑banking channel.
- Several accounts operating from a single device, IP cluster or financial instrument, especially when money flows between accounts in a way that conceals the origin of funds.
- Discrepancies between stated occupation, income and betting volumes — for example, a student profile running six‑figure monthly turnover without a clear explanation.
- Frequent changes to personal details like email, phone number and residential address within short periods, which can indicate efforts to conceal identity and reset monitoring cycles.
Reporting Obligations to SEPBLAC
Under Spanish law, Incaspin Casino is an obligated entity and therefore has a statutory duty to send suspicious transaction reports to the Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offences, known as SEPBLAC. The reporting system kicks in whenever the compliance team has justifiable grounds to believe that a operation or a related series of transactions is connected to money laundering or terrorist financing, regardless of the amount. In those cases, the assigned compliance officer compiles a private report through SEPBLAC’s secure electronic channels, detailing the subject’s identity, the type of the suspicious behavior, the financial path and any confirming information collected during the internal inquiry. The report is sent within the regulatory deadlines and the casino holds off finalizing the transaction until a reply comes back, unless delaying it is unworkable or would obstruct the investigation. All employees are under a strict duty to keep the reporting itself and the details of any report absolutely confidential. Telling the customer or an unauthorised third party is a criminal violation under Spanish anti‑money laundering law. Incaspin Casino tracks the resolution of each report, using judicial responses and typology updates to improve its internal monitoring rules.
Spanish regulatory Legal Structure and Permit Duties
Incaspin Casino possesses a permit from Spain’s gambling authority, which applies rigorous anti‑money laundering conditions grounded in Law 13/2011 on gambling regulation and the more comprehensive Law 10/2010 on preventing money laundering and terrorist financing. The regulatory picture is strengthened by Royal Decree 304/2014 and the mandatory directives issued by SEPBLAC, Spain’s financial intelligence unit housed within the Bank of Spain. Meeting these laws means Incaspin Casino must operate a fully recorded AML programme encompassing customer due diligence, ongoing oversight, suspicious transaction disclosure and record keeping. The licensing stipulations also mandate a appointed compliance officer who reports directly directly to the board on financial crime prevention. Sanctions for neglecting to comply can include heavy penalties, licence revocation and major reputational injury, which is why the casino’s internal measures are structured to go beyond minimum legal limits. Grounding the policy in this Spanish legal structure reflects a legally sound approach that meets supervisory requirements and offers players a protected setting for their gambling.
Extent and Obligation to AML Compliance
This Anti Money Laundering Policy covers every product line, customer group and promotional channel Incaspin Casino manages under its Spanish licence. That comprises real‑money casino games, live dealer experiences, sports betting integrations and any future gambling services. Compliance obligations reach vertically through the whole value chain, from the first customer onboarding check through ongoing transaction monitoring, periodic reviews and, where necessary, ending business relationships. The policy also extends to the affiliate network, requiring every partner to act in a way that does not assist or hide the movement of dirty money. By embedding AML controls into daily operations, Incaspin Casino spots risk indicators at the earliest possible stage. The leadership team reviews the policy’s scope every year, revising it to reflect changes in Spanish law, guidance from the Dirección General de Ordenación del Juego and new financial crime patterns. That ensures the document alive and responsive to the threats we face.
Risk-Focused Methodology and In-House Safeguards
Every AML measure at Incaspin Casino is adjusted through a living risk‑based approach, aligning with the methodology endorsed by the European Banking Authority and Spanish supervisory agencies. The compliance team performs a comprehensive, enterprise‑wide risk evaluation at least once a annually, examining product vulnerabilities, delivery methods, customer profiles and where player accounts are based. What they uncover determines the level of due diligence, transaction monitoring trigger levels and where compliance resources are focused. Internal controls adhere to a formalized policy framework that includes clear escalation paths, divided duties and independent audit checks. A risk appetite document endorsed by senior management sets the limits the casino is prepared to work inside, so that higher‑risk situations always get more examination. The list below presents the main risk types that affect how strictly controls are implemented to individual accounts and associates:
- Location-based risk: susceptibility to countries Spanish authorities identify as having weak AML frameworks or high dishonesty.
- Service risk: games or payment methods that enable fast money transfers, high‑stakes anonymity or person‑to‑person payments.
- User risk: profiles featuring non‑resident persons, complex corporate arrangements or jobs that often process lots of money.
- Transaction risk: behaviors like frequent small credits, immediate payouts with little gaming, or payments from third sources.
- Partner risk: partners working in unregulated referral areas or using marketing that attracts anonymous, unverified traffic.
Extended Due Diligence for Elevated-Risk Profiles
Incaspin Casino’s risk categorisation engine systematically flags accounts that meet predefined high‑risk criteria for money laundering, directing them into a more thorough due diligence workflow. Politically exposed persons, their family members and close associates are recognized through regular screening against global PEP lists and must get senior management approval before any business relationship starts or continues. The same strict standard holds to legal persons, trusts and other structures where the real beneficial owner cannot be simply identified or where ownership chains involve places with weak transparency registers. Enhanced due diligence means gathering extra information about the purpose and expected nature of the business relationship, scrutinizing the source of wealth more forensically, and reviewing transactions more often than the baseline risk profile requires. Each enhanced review creates a detailed internal report that records the reason for accepting or rejecting the account, the verifying evidence collected and the approval chain. If information gaps exist after reasonable effort, the casino maintains the right to refuse service and, where there is a suspicion of money laundering, to file a report with SEPBLAC without telling the customer, strictly following the tipping‑off prohibition.
Customer Identification and Validation Steps
No customer gets a account setup with Incaspin Casino until complete identity verification is finished. The identification process follows the “know your customer” rule Spanish law mandates, requiring every person to provide valid information that gets verified against reliable documents or electronic databases. The compliance team conducts real‑time checks against required watch lists, politically exposed persons databases and watch lists held by European and international agencies. If a potential match turns up, the account is suspended immediately while a manual investigation is conducted, and a report is submitted to SEPBLAC if necessary. Verification is not a one‑time door‑check. It continues through the whole relationship, with periodic reviews activated by changes in account behaviour, large withdrawals or when official documents become invalid. Incaspin Casino lists the documents needed in a straightforward manner so players are aware of what to provide to unlock and maintain their accounts. The standard documents asked for over the life of a player account include:
- A valid government‑issued identity document — passport, national ID card or Spanish residence permit — showing a visible photo and a valid ID number.
- A recent utility bill, bank statement or tax form that proves the player’s registered residential address and is no older than three months.
- Evidence of control of the payment method used, which may be a redacted screenshot of an e‑wallet profile, a photo of the physical payment card showing the first six and last four digits, or a bank certificate.
- When cumulative deposits pass a set threshold, a source of funds declaration accompanied by salary slips, tax returns or investment account statements.
Partner Program AML Requirements and Due Diligence for Partners
The Incaspin Casino affiliate programme remains compliant through a due diligence process that enforces AML expectations past the operator. Before any partnership deal is activated, prospective affiliates go through screening that checks their business registration, tax standing, beneficial ownership and the reputation of their digital properties. Partners agree to a contract requiring them to promote the casino in a way that prevents drawing anonymous, high‑risk traffic, and they must not publish content that could be seen as enabling money laundering or structuring financial flows. The affiliate agreement grants Incaspin Casino the right to audit the partner’s referral practices and to suspend commissions on the spot if suspicious patterns show up, such as a cluster of low‑activity accounts generating unusually high commission volumes. Affiliates also have to run their own basic know‑your‑customer checks on sub‑affiliates and report any concerns to the casino’s compliance department without delay. By connecting the marketing ecosystem that serves the Spanish platform into the same vigilance that underpins internal AML controls, Incaspin Casino creates a full shield against financial crime — from the first promotional click right through to the final withdrawal settlement.