I. Introduction

Withheld withdrawals are among the most common disputes between players and online gambling platforms. A player deposits money, wins or accumulates a balance, requests a withdrawal, and then the site delays, rejects, freezes, or ignores the request. In the Philippine context, the legal remedy depends heavily on one threshold question: is the online gambling site licensed or authorized to operate under Philippine law, or is it an offshore or illegal operator?

This distinction matters because licensed operators are subject to regulatory supervision, consumer-protection obligations, anti-money-laundering rules, responsible-gaming rules, and complaint mechanisms. Unlicensed operators, by contrast, may be difficult to pursue because they may be outside Philippine jurisdiction, may conceal their corporate identity, and may operate in violation of gambling laws.

This article explains the legal framework, practical complaint routes, evidence preparation, available remedies, and risks involved when an online gambling site withholds withdrawals from a player in the Philippines.

II. Common Reasons Online Gambling Sites Withhold Withdrawals

Online gambling sites may withhold withdrawals for legitimate or illegitimate reasons. Understanding the stated reason is important because it determines how the complaint should be framed.

Common reasons include:

Incomplete identity verification

Many gambling platforms require “Know Your Customer” or KYC checks before releasing funds. The player may be asked to submit a government ID, proof of address, selfie verification, source-of-funds documents, or payment-account proof.
Alleged bonus abuse

The site may claim that the player violated bonus terms, wagering requirements, maximum bet limits, game restrictions, or promotional conditions.
Suspicion of fraud or money laundering

Operators may freeze withdrawals if they suspect identity fraud, multiple accounts, suspicious payment behavior, chargebacks, use of third-party accounts, or attempts to launder funds.
Account irregularities

The site may allege duplicate accounts, use of another person’s e-wallet or bank account, VPN use, location masking, underage gambling, or violation of responsible-gaming restrictions.
Technical or payment-processing delays

Some withdrawal delays are caused by payment-provider issues, banking holidays, manual review queues, system maintenance, or failed payout transactions.
Bad-faith refusal to pay

In some cases, the site has no valid reason and is simply delaying payment, imposing shifting requirements, ignoring support messages, or using vague “security review” explanations indefinitely.
Unlicensed or scam operation

The platform may be operating illegally, without meaningful regulatory oversight, and may have no intention of honoring withdrawals.

III. First Legal Issue: Is the Gambling Site Licensed in the Philippines?

Before filing a complaint, the player should determine whether the site is connected to any lawful Philippine gambling authority or licensed operator.

In the Philippines, gambling is generally prohibited unless expressly authorized by law. Legal gambling activities are usually regulated through government-authorized entities. Online gambling may fall under different regulatory structures depending on the operator, location of players, and nature of the platform.

The most relevant regulator is commonly the Philippine Amusement and Gaming Corporation, or PAGCOR, which regulates and licenses many gaming activities in the country. Other gaming-related entities and special economic zones may also be involved depending on the operator’s structure, although the regulatory landscape has changed over time.

For a Philippine player, the key practical questions are:

Does the site claim to be licensed by PAGCOR or another Philippine authority?
Does the site legally accept players located in the Philippines?
Is the operator a domestic Philippine-facing platform, or an offshore gambling site?
Does the site disclose its corporate name, license number, business address, and regulator?
Does the license actually cover the activity being offered?
Does the site’s terms and conditions say disputes must be filed in another country?

A site’s claim that it is “licensed,” “regulated,” or “authorized” should not be accepted at face value. Scam sites often display fake seals, expired license numbers, copied logos, or vague references to foreign regulators.

IV. Why Licensing Matters

Licensing affects the player’s complaint strategy.

A. If the site is licensed or locally regulated

The player may complain through:

the operator’s internal complaints process;
PAGCOR or the relevant Philippine gaming regulator;
payment providers, banks, or e-wallets;
consumer-protection agencies, where applicable;
civil courts;
law-enforcement agencies if fraud is involved.

A licensed operator is more vulnerable to regulatory pressure because failure to pay legitimate withdrawals may expose it to sanctions, fines, license issues, or reputational harm.

B. If the site is unlicensed or offshore

The player may still complain, but recovery may be more difficult. The available routes may include:

reporting the site to Philippine authorities;
filing a complaint with foreign regulators, if any;
reporting fraud to law enforcement;
contacting the bank, e-wallet, or payment processor;
sending a formal demand letter;
filing a civil or criminal complaint where jurisdiction exists.

However, an unlicensed offshore operator may ignore complaints, use shell companies, change domains, or operate from jurisdictions where enforcement is difficult.

V. Immediate Steps Before Filing a Formal Complaint

Before escalating, the player should build a clean record. Gambling disputes are document-heavy. Regulators, lawyers, police, banks, and courts will usually need proof.

1. Preserve all account records

The player should save:

username or account ID;
registered email address and phone number;
date the account was created;
copies of the site’s terms and conditions;
bonus terms, if any;
account balance screenshots;
game history;
deposit history;
withdrawal history;
pending withdrawal screenshots;
rejected withdrawal notices;
verification requests;
all emails and chat transcripts.

Screenshots should include dates, times, URLs, and account identifiers where possible.

2. Download or screenshot the terms and conditions

Terms can change. The player should preserve the version applicable at the time of registration, deposit, bonus claim, wagering, and withdrawal request.

Important terms include:

withdrawal limits;
KYC requirements;
bonus wagering rules;
maximum bet rules;
restricted games;
account-closure clauses;
confiscation clauses;
dormant-account rules;
dispute-resolution clause;
governing-law clause;
jurisdiction clause;
anti-fraud or multiple-account provisions.

3. Complete reasonable KYC requirements

A player who refuses normal verification may weaken the complaint. If the site requests reasonable documents, the player should comply while keeping proof of submission.

However, the player should be cautious if the site asks for excessive, irrelevant, or unsafe information, such as full card details including CVV, passwords, remote-access app installation, or payments to “unlock” withdrawals. Those may be scam indicators.

4. Ask for a written explanation

The player should ask the site to state, in writing:

the exact reason the withdrawal is withheld;
the specific rule allegedly violated;
the evidence supporting the allegation;
the amount being withheld;
whether the account is under review, suspended, closed, or confiscated;
the expected date of resolution;
the complaint or appeal process.

A vague answer such as “security review” or “management decision” is usually inadequate if the delay becomes unreasonable.

5. Avoid threats or abusive messages

All communications may later be reviewed by a regulator, lawyer, court, or payment provider. The player should remain factual, polite, and firm.

VI. Internal Complaint to the Gambling Site

The first formal step is usually an internal complaint. Regulators often expect players to try resolving the issue directly before escalation.

The complaint should include:

full name;
account username or ID;
registered email and phone number;
date and amount of deposits;
date and amount of withdrawal request;
payment method used;
current account balance;
history of communication with support;
documents already submitted;
specific remedy requested;
deadline for response.

The player should not merely say “release my money.” The complaint should identify why the withholding is improper.

Example framing:

“I requested withdrawal of PHP ______ on ______. The withdrawal remains pending/rejected without a clear contractual or regulatory basis. I have completed the requested verification and have not been given a specific rule violation. Please release the withdrawal or provide a written explanation identifying the exact term relied upon, the evidence supporting the decision, and the appeal process.”

The player should send the complaint through all official channels available: support email, live chat, complaint form, account manager, and any regulatory-contact email listed in the site’s terms.

VII. When Is a Withdrawal Delay Legally Problematic?

Not every delay is unlawful. A short delay for verification or payment processing may be reasonable. A delay becomes legally problematic when the operator:

fails to provide any clear reason;
repeatedly asks for documents already provided;
imposes new requirements not found in the terms;
changes explanations over time;
confiscates winnings without evidence;
refuses to identify the violated rule;
blocks account access after a withdrawal request;
ignores complaint emails;
approves deposits quickly but delays withdrawals indefinitely;
uses unfair or one-sided terms;
applies hidden terms;
relies on ambiguous bonus rules against the player;
withholds both winnings and original deposit without valid basis;
operates without a license or misrepresents its license.

A major legal issue is whether the operator’s terms are being applied fairly, clearly, and consistently. Even where a gambling contract is involved, regulators may still examine whether the operator acted in bad faith, misled the player, or violated licensing conditions.

VIII. Complaint to PAGCOR or the Relevant Gaming Regulator

If the site is licensed by PAGCOR or claims Philippine authorization, the player may file a complaint with the relevant gaming regulator.

A regulatory complaint should be concise but well-supported. It should include:

the operator’s name;
website URL;
claimed license number, if available;
player account details;
amount deposited;
amount withheld;
withdrawal request date;
documents submitted;
operator’s reason for non-payment;
copies of communications;
screenshots of balance and withdrawal status;
requested relief.

The player should ask the regulator to:

verify whether the operator is licensed;
determine whether the operator is allowed to accept Philippine players;
require the operator to explain the withheld withdrawal;
direct payment if the withholding is unjustified;
investigate possible regulatory violations.

Regulators do not always act as private collection agencies, but they can pressure licensed operators, investigate misconduct, and impose licensing consequences.

IX. Complaint to a Foreign Regulator

Many online gambling sites claim licenses from foreign jurisdictions. If the site is not Philippine-licensed but claims foreign regulation, the player may complain to the foreign gaming regulator.

The complaint should ask the foreign regulator to confirm:

whether the operator is actually licensed;
whether the license covers the website used;
whether the operator may accept Philippine residents;
whether the withheld withdrawal violates license conditions.

This route may be helpful if the foreign regulator has a player-dispute process. However, some foreign licenses offer little practical protection to Philippine players, and some license references may be fake or unrelated to the actual website.

X. Consumer Protection Issues

A withheld withdrawal may also raise consumer-protection concerns, especially where the site used misleading advertising, unfair terms, fake license claims, deceptive bonus promotions, or hidden withdrawal restrictions.

Potential consumer-protection arguments include:

misleading representation of licensing status;
false promise of fast withdrawals;
unfair or hidden wagering requirements;
refusal to disclose material terms;
unilateral confiscation without due process;
deceptive bonus advertising;
failure to honor advertised payout policies;
unconscionable terms;
bad-faith handling of complaints.

However, gambling has a special legal status. Not every consumer-protection body will treat gambling disputes the same way as ordinary retail or e-commerce complaints. The stronger route is usually through the gambling regulator if the operator is licensed.

XI. Possible Criminal Issues

A withdrawal dispute can become a criminal matter if there is evidence of fraud, identity theft, cybercrime, illegal gambling, or estafa-type conduct.

Possible red flags include:

the site falsely claims to be licensed;
the site accepts deposits but never processes withdrawals;
the site demands extra payments before releasing funds;
the site impersonates a legitimate operator;
the site uses fake customer service agents;
the site steals identity documents;
the site manipulates account balances;
the site locks users out after winning;
the site disappears or changes domain names;
payment accounts are under unrelated personal names;
the operator uses mule accounts or suspicious e-wallet accounts.

In such cases, the player may consider reporting to law enforcement or cybercrime authorities. The complaint should focus on the fraudulent conduct, not merely the existence of a gambling loss.

Important distinction: losing money from gambling is not the same as being defrauded. Criminal remedies are more realistic where there is deception, false representation, illegal operation, or intentional refusal to release funds despite no valid basis.

XII. Civil Remedies

A player may consider a civil action if the amount is significant and the operator can be identified and reached by Philippine courts.

Possible civil theories may include:

breach of contract;
recovery of a sum of money;
damages for bad faith;
unjust enrichment;
misrepresentation;
rescission, where applicable;
enforcement of obligations under the operator’s terms.

However, civil litigation has practical obstacles:

the operator may be offshore;
the terms may contain foreign-law or foreign-jurisdiction clauses;
the cost of litigation may exceed the withheld amount;
gambling-related claims can raise enforceability issues;
the operator may be difficult to serve with court papers;
the player may need to prove legitimacy of the funds and compliance with terms.

For smaller amounts, a formal demand letter and regulatory complaint may be more practical than a lawsuit.

XIII. Demand Letter

A demand letter is often useful before regulatory escalation or litigation. It shows that the player made a formal request and gave the operator a chance to resolve the issue.

A demand letter should include:

the player’s identity and account information;
amount claimed;
timeline of deposits, play, and withdrawal request;
summary of KYC compliance;
summary of the operator’s failure or refusal;
legal and contractual basis for payment;
demand for release of funds;
deadline for compliance;
notice that the player may escalate to regulators, payment providers, and legal authorities.

The tone should be professional. The letter should avoid exaggerated accusations unless supported by evidence.

XIV. Payment Provider, Bank, or E-Wallet Complaint

If the withdrawal is withheld, the player may also contact the payment provider, bank, credit card issuer, or e-wallet used for the deposit.

Possible remedies depend on the payment method:

card dispute or chargeback;
e-wallet complaint;
bank fraud report;
merchant dispute;
unauthorized transaction complaint, if truly unauthorized;
report of suspicious merchant activity.

The player must be truthful. A chargeback should not be filed falsely by claiming that an authorized gambling deposit was unauthorized. False disputes can create legal and account consequences.

Payment-provider complaints are stronger when:

the site is unlicensed;
the merchant name is misleading;
the transaction was processed through suspicious channels;
the site accepted payment but refused to provide the promised service;
the operator demands additional payments;
the payment account belongs to an unrelated person.

XV. Data Privacy Complaint

Withheld withdrawals often involve submission of identity documents. If the gambling site mishandles personal data, refuses to explain its processing, exposes documents, or demands excessive information, a data privacy issue may arise.

Possible privacy concerns include:

unnecessary collection of sensitive documents;
unclear privacy policy;
refusal to delete data after account closure, subject to legal retention rules;
disclosure of personal information to unauthorized parties;
use of identity documents for other purposes;
poor security practices;
identity-theft risk.

In the Philippines, data privacy concerns may fall under the Data Privacy Act framework. A privacy complaint is separate from the payment dispute. It may not directly recover the withdrawal, but it can address misuse of personal information.

XVI. Anti-Money-Laundering and KYC Considerations

Online gambling operators may be required to conduct identity verification and monitor suspicious transactions. A player should understand that KYC is not automatically harassment or bad faith.

Operators may ask for:

valid ID;
proof of address;
proof of payment ownership;
source-of-funds information;
selfie or liveness check;
bank or e-wallet confirmation;
explanation of unusual activity.

A complaint is weaker if the player refuses ordinary verification. But the operator should not use KYC as a pretext to avoid payment indefinitely.

A reasonable position is:

“I am willing to comply with lawful and proportionate verification requirements. I request a complete list of remaining documents needed, the reason each document is required, and the expected timeline for completion of review.”

XVII. Bonus Disputes

Many withdrawal conflicts arise from bonus terms. The site may claim that winnings are void because the player breached bonus rules.

Common bonus issues include:

wagering requirement not completed;
maximum bet exceeded while wagering;
prohibited games played;
bonus used with restricted payment method;
multiple accounts used to claim bonuses;
irregular betting patterns;
bonus expired before wagering completion;
withdrawal requested before bonus conditions were met.

The player should check whether the rule was:

clearly disclosed before accepting the bonus;
part of the applicable terms;
actually violated;
applied proportionately;
used to confiscate only bonus-related winnings or also the cash deposit;
applied consistently to other players.

A strong complaint argues that the operator cannot rely on vague, hidden, or retroactively applied bonus terms.

XVIII. Account Closure and Confiscation

Some operators close accounts and confiscate balances after a withdrawal request. This is one of the most serious dispute scenarios.

The player should ask:

Was the account closed permanently or temporarily suspended?
Is the entire balance confiscated or only bonus winnings?
Will the original deposit be refunded?
What specific term authorizes confiscation?
What evidence supports the alleged violation?
Is there an appeal process?
Is the decision final?
Was the player given a chance to respond?

A regulator is more likely to take interest when the operator confiscates funds without giving a specific contractual basis.

XIX. Jurisdiction Problems

Online gambling disputes often involve multiple jurisdictions:

player located in the Philippines;
website hosted abroad;
company incorporated offshore;
license issued by a foreign regulator;
payment processor in another country;
customer support outsourced elsewhere;
terms governed by foreign law.

Jurisdiction affects enforcement. Even if the player has a valid claim, it may be hard to force an offshore operator to pay unless:

the operator has Philippine assets;
the operator is locally licensed;
the payment processor can intervene;
the foreign regulator is effective;
the operator cares about reputation;
the amount justifies cross-border legal action.

This is why identifying the operator’s legal entity is critical.

XX. Evidence Checklist

A strong complaint should include the following:

Evidence	Purpose
Account profile screenshot	Shows ownership and account details
Deposit receipts	Proves funds were paid
Withdrawal request screenshot	Proves amount and date requested
Balance screenshot	Shows unpaid amount
KYC submission records	Shows compliance
Emails and chat logs	Shows operator’s explanations
Terms and conditions	Shows applicable rules
Bonus terms	Important for bonus disputes
Game/bet history	Refutes alleged irregular play
License claim screenshot	Supports regulatory complaint
Website URL and domain details	Identifies operator
Payment merchant name	Helps bank/e-wallet complaint
Timeline summary	Helps regulators understand the case

The player should keep originals where possible and avoid editing screenshots except for marking or organizing copies.

XXI. Complaint Timeline

A practical timeline may look like this:

Day 1 to Day 3: Follow up internally

Ask customer support for status and complete pending verification.

Day 4 to Day 7: Send formal written complaint

Request a specific explanation and deadline.

Day 8 to Day 14: Escalate internally

Contact complaints department, compliance email, or account manager.

After unreasonable delay: File external complaints

Depending on the facts, complain to:

gaming regulator;
payment provider;
bank or e-wallet;
consumer or cybercrime authority;
foreign regulator;
legal counsel for demand letter or court action.

The “reasonable” waiting period depends on the site’s stated withdrawal timeline, KYC requirements, amount involved, and whether there are legitimate red flags.

XXII. Sample Internal Complaint Letter

Subject: Formal Complaint Regarding Withheld Withdrawal – Account [Username/ID]

Dear [Operator/Support Team],

I am filing this formal complaint regarding my pending/withheld withdrawal from my account with username/account ID [insert details].

On [date], I requested a withdrawal in the amount of PHP [amount]. As of today, the withdrawal has not been released. I have already submitted the requested verification documents, including [list documents], on [dates].

Please provide a written explanation of the following:

the exact reason my withdrawal remains unpaid;
the specific term or rule being relied upon;
the evidence supporting any alleged violation;
the remaining documents or steps required from me, if any;
the expected date when the withdrawal will be processed.

If there is no valid contractual or regulatory basis to withhold the funds, I demand that the withdrawal be released promptly to my verified payment account.

Please treat this as a formal complaint and provide a written response within [reasonable deadline].

Sincerely, [Full Name] [Account ID] [Registered Email] [Contact Number]

XXIII. Sample Regulator Complaint Format

Subject: Complaint Against Online Gambling Operator for Withheld Withdrawal

I respectfully request assistance regarding an online gambling operator that has withheld my withdrawal without adequate explanation.

Player details: Name: [Full Name] Account ID/Username: [Account ID] Registered Email: [Email]

Operator details: Website: [URL] Operator name: [Name, if known] Claimed license number: [License, if shown] Customer support email: [Email]

Transaction details: Deposit amount/s: PHP [amount] Withdrawal amount: PHP [amount] Withdrawal request date: [date] Payment method: [bank/e-wallet/card]

Summary of complaint: I requested withdrawal of PHP [amount] on [date]. The operator has failed/refused to release the funds. I have submitted the requested verification documents. The operator has not provided a clear basis under its terms and conditions for withholding the withdrawal, or has relied on an unsupported allegation.

Relief requested: I respectfully request that your office verify the operator’s license status, require the operator to explain the withholding, and assist in resolving the unpaid withdrawal if the withholding is unjustified.

Attached are screenshots, deposit receipts, withdrawal records, KYC submission proof, and communication logs.

Respectfully, [Full Name]

XXIV. Legal Risks for the Player

The player should also be aware of personal legal and practical risks.

1. Use of illegal gambling sites

If the player used an unlicensed or prohibited gambling platform, the matter may involve illegal gambling issues. This can complicate recovery and should be handled carefully.

2. False information during registration

Using fake names, another person’s ID, another person’s payment account, or false address information can undermine the claim and may create legal exposure.

3. Multiple accounts

Many sites prohibit duplicate accounts. If the player created multiple accounts to claim bonuses, the operator may have a stronger basis to withhold winnings.

4. Third-party payment accounts

Deposits or withdrawals through another person’s e-wallet or bank account may trigger KYC, fraud, or AML concerns.

5. Chargeback misuse

Filing a false bank dispute can create problems. The player should distinguish between an authorized but disputed transaction and a truly unauthorized transaction.

6. Public accusations

Posting accusations online may lead to defamation issues if the statements are false or unsupported. Public reviews should be factual and evidence-based.

XXV. What Relief Can the Player Seek?

Depending on the circumstances, the player may seek:

release of the full withdrawal;
refund of deposit;
payment of legitimate winnings;
written explanation of account action;
reopening of account;
correction of account records;
deletion or protection of personal data;
regulatory investigation;
sanctions against the operator;
damages, in a court action;
criminal investigation, if fraud is involved.

The most realistic remedy in many cases is release of the withdrawal or refund of the original deposit.

XXVI. Strong vs. Weak Complaints

Strong complaint

A complaint is stronger when:

the operator is licensed;
the player used accurate identity details;
the player complied with KYC;
the withdrawal relates to cash balance or valid winnings;
no bonus rules were violated;
the operator gave no clear reason;
records are complete;
communications show unreasonable delay;
the amount and timeline are documented.

Weak complaint

A complaint is weaker when:

the site is unlicensed and offshore;
the player used fake or inconsistent identity details;
the player used another person’s payment account;
the player violated bonus terms;
the player refused KYC;
the player used multiple accounts;
screenshots are incomplete;
the player cannot identify the operator;
the player seeks recovery of ordinary gambling losses rather than withheld funds.

XXVII. Special Issue: Original Deposit vs. Winnings

A key distinction is whether the operator is withholding:

the player’s original deposit;
bonus money;
winnings from bonus play;
winnings from cash play;
the entire account balance.

Even where an operator alleges a bonus violation, it may not always be justified in confiscating the original deposit. The player should specifically demand clarification on whether the original deposit will be returned.

A useful complaint point is:

“Even assuming, without admitting, that bonus-related winnings are disputed, please explain the basis for withholding my original cash deposit.”

XXVIII. Special Issue: “Security Review” Delays

Operators often rely on “security review” as a generic explanation. A reasonable security review may be valid, especially for large withdrawals or unusual account activity. But indefinite review without details can be abusive.

The player should ask:

when the review started;
what triggered it;
what documents are needed;
who is conducting the review;
whether any rule violation is alleged;
when the review will end.

A security review should not become an indefinite excuse to avoid payment.

XXIX. Special Issue: Site Blocks Access After Withdrawal Request

If the site blocks account access after a withdrawal request, the player should immediately preserve:

login error screenshots;
email notices;
balance screenshots taken earlier;
browser history showing URL;
payment records;
prior support communications.

The complaint should state that the operator prevented access to evidence after the withdrawal request. This fact may be important in a regulatory or fraud complaint.

XXX. Practical Strategy

The best strategy is usually staged escalation:

Document everything.
Complete reasonable KYC.
Request a written explanation.
Send a formal internal complaint.
Identify the operator and license.
Complain to the regulator if licensed.
Complain to payment providers if payment abuse or fraud is involved.
Send a demand letter for significant amounts.
Report fraud or illegal gambling indicators to authorities.
Consider civil action only if the amount justifies the cost and the operator can be reached.

XXXI. Preventive Measures Before Using Any Online Gambling Site

Players can reduce risk by checking:

whether the site is licensed by a reputable regulator;
whether it is legally allowed to accept Philippine players;
whether the corporate entity is disclosed;
whether withdrawal limits are reasonable;
whether KYC requirements are clear;
whether bonus terms are understandable;
whether reviews mention unpaid withdrawals;
whether the payment methods are legitimate;
whether customer support responds clearly;
whether the site uses suspicious mirror domains;
whether the site asks for payments to release withdrawals.

Players should be especially cautious of sites that advertise guaranteed winnings, very high bonuses, instant withdrawals with no verification, or customer-service agents who move conversations to private messaging apps.

XXXII. Conclusion

A withheld withdrawal from an online gambling site in the Philippines should be handled as a structured evidence-based complaint, not merely a support dispute. The player’s strongest position comes from clear records, compliance with legitimate verification requirements, and a precise demand for the operator to identify the contractual or regulatory basis for withholding funds.

The most important factor is whether the site is licensed and subject to an effective regulator. If the operator is Philippine-licensed or otherwise legally accountable, a regulatory complaint may be effective. If the operator is offshore, unlicensed, or fraudulent, recovery becomes more difficult, and the player may need to pursue payment-provider remedies, fraud reports, foreign regulator complaints, or legal action where practical.

The core principle is simple: an online gambling operator may conduct reasonable verification and enforce clear rules, but it should not indefinitely withhold legitimate withdrawals without a specific, documented, and lawful basis.