KYC and AML Standards in Kenya: Identity Check and Transparency
This page explains how WinWin applies Know Your Customer (KYC) and Anti-Money Laundering/Counter-Terrorism Financing (AML/CTF) controls for users in Kenya.
These measures support ID verification, transaction monitoring, and reporting obligations required under Kenyan regulatory requirements.
Compliance aligns with the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA), the Prevention of Terrorism Act, and oversight by the Financial Reporting Centre (FRC) and the Betting Control and Licensing Board (BCLB).
Purpose: ID Verification for User Safety and Fair Play
KYC and AML controls are applied to verify identity, deter fraud, and prevent misuse of the platform.
The aim is to uphold transparency, account protection, and lawful gaming in Kenya.
- Fair play for all participants
- User safety and protection of funds
- Transparency in processes and outcomes
- Full compliance with regulatory requirements
KYC Requirements: Document Submission and Identity Check
Every new account holder must complete ID verification before full access is provided.
Additional checks can be requested at any time to maintain security measures and meet reporting obligations.
- Government-issued photo identification
- Proof of residential address
- Confirmation of ownership of the selected payment method
AML Security Measures and Transaction Monitoring
The platform implements layered controls to prevent money laundering, terrorism financing, and other illegal activity.
Controls are risk-based and consistent with Kenyan law and supervisory guidance.
- Ongoing transaction monitoring and activity reviews to detect suspicious activity
- Automated detection rules and alerts based on behavioural patterns
- Enhanced due diligence for high-risk profiles, events, or jurisdictions
- Reviews of large, complex, or unusual transfers and settlements
- Risk scoring for customers and periodic reassessment
- Sanctions and PEP screening against relevant lists, including UN lists applicable in Kenya
- Timely reporting to the FRC and maintenance of records for legally prescribed retention periods
Prohibited Conduct Supporting AML/KYC Controls
To protect user safety and compliance, certain actions are not allowed on the platform.
Restrictions apply to activities that undermine identity checks and fair play.
- Opening or using multiple accounts for the same individual
- Presenting forged, altered, or stolen documents
- Attempting to launder funds or transmit proceeds of crime
- Manipulating systems, tools, or outcomes to disguise transactions
- Sharing, selling, or transferring account access to others
- Using third-party payment instruments or wallets
- Misrepresenting identity or acting on behalf of an undisclosed party
Enforcement and Outcomes for Non-Compliance
Breaches of KYC/AML rules trigger proportionate enforcement in line with Kenyan regulatory requirements.
Actions may be taken without prior notice where required by law and may be reported to the BCLB or FRC.
Consequences can include temporary or permanent account suspension, freezing or confiscation of funds linked to suspicious activity, cancellation of bets or winnings, reporting to competent authorities where applicable.
User Responsibilities for Account Protection
Users must provide accurate and current personal data and complete verification within the timelines communicated.
Document submission must be clear, legible, and authentic, and additional information must be provided when requested for due diligence.
Only payment methods owned and controlled by the account holder may be used.
Any suspicious activity or unauthorised access should be reported to support promptly to protect account security.
Users are expected to cooperate in investigations and follow responsible gaming guidelines where relevant to risk controls.
Fair Play, Transparency, and User Safety
The platform promotes a safe and transparent environment through clear rules and consistent oversight.
These principles guide fair play for all users in Kenya.
- Adherence to KYC/AML standards and reporting obligations
- Confidential handling and protection of personal data under the Data Protection Act, 2019
- Ongoing monitoring to identify suspicious activity and address risks
- Prevention of manipulation, collusion, and other unfair behaviour
- User support to explain safety measures and compliance steps
- Shared responsibility between the platform and each account holder
- Equal conditions and procedures applied to all users
Updated: