When an online gaming site rejects your Know Your Customer or KYC verification and blocks your withdrawal, the most important thing is to determine whether you are dealing with a legitimate compliance review, an unfair account restriction, or an outright scam. Do not keep depositing money, do not pay an “unlocking fee,” and do not repeatedly upload identity documents through unofficial channels. Preserve your evidence, verify the operator’s licence, demand a specific written explanation, and escalate the dispute to the correct Philippine agency.

Why Online Gaming Sites Require KYC Before Withdrawal

KYC is the process of confirming a player’s identity, age, address, payment ownership, and—in higher-risk cases—the source of the player’s funds. Legitimate gaming operators use KYC to prevent:

Minors and excluded persons from gambling
Identity theft and account takeovers
Multiple-account and bonus abuse
Use of another person’s bank account or e-wallet
Money laundering and movement of criminal proceeds
Transactions involving forged or stolen documents

Under Republic Act No. 10927 of 2017, casinos became covered persons under the Anti-Money Laundering Act. Regulated casinos must therefore perform customer due diligence, which includes identifying customers and assessing suspicious or unusually large transactions.

For platforms covered by PAGCOR’s Revised Regulatory Framework for the Remote Gaming Platform, full KYC and identity verification must be completed before the first withdrawal or within seven days from registration, whichever comes first. Verification may involve ID scanning, a selfie with the ID, biometric checks, liveness detection, or a video call. The framework also limits participation to qualified players who are at least 21 years old and not included in PAGCOR’s restricted-person database.

A temporary KYC hold is therefore not automatically illegal. The problem arises when the site:

Keeps asking for documents already accepted
Rejects documents without identifying the mismatch
Changes its requirements after you win
Allows deposits and gambling but raises KYC only when you withdraw
Refuses to provide any review timeline
Confiscates both winnings and deposited funds without a clear contractual basis
Demands another deposit, “tax,” “AML certificate,” or cryptocurrency payment before releasing the balance

First Determine What Kind of Gaming Site You Used

Your practical remedies depend heavily on the operator’s legal status.

Type of site	What it means	Best initial route
PAGCOR-licensed local platform	The operator or associated gaming venue appears on PAGCOR’s official records, including the exact brand and domain	Internal complaint, then PAGCOR regulatory complaint
Foreign-licensed platform	It claims a licence from another country but has no PAGCOR authorisation	Operator’s complaint process and foreign regulator or alternative dispute body
Unlicensed or fake site	No verifiable licence, false PAGCOR seal, copied company details, or changing website domains	Payment-provider complaint and cybercrime report
Former POGO or “offshore PAGCOR” site	It relies on an old Philippine offshore gaming licence	Treat the claim as a serious red flag

PAGCOR’s Electronic Gaming Licensing Department regulates specified local operations such as eCasino games, sports betting, electronic bingo, online poker, specialty games, and numeric games, including approved online platforms connected with licensed gaming operations. PAGCOR publishes lists of registered brands, domains, licensees, and accredited providers on its Electronic Gaming Licensing Department page. Check the exact website address—not merely a similar brand name or logo. (PAGCOR)

A certificate or screenshot sent through chat is not enough. Scam sites frequently copy PAGCOR logos, licence numbers, and company names. Verify the domain independently through PAGCOR’s official website.

The Anti-POGO Act of 2025, Republic Act No. 12312, banned offshore gaming operations conducted in the Philippines for offshore players and permanently revoked POGO-related licences. A site that still claims to hold a valid Philippine Offshore Gaming Operator licence may be using outdated or fraudulent credentials. The law does not, however, abolish every form of locally regulated electronic gaming for Philippine players. (Lawphil)

Common Reasons KYC Is Rejected

The name does not exactly match

A missing middle name, married surname, suffix such as “Jr.,” or reversal of first and last names can trigger automated rejection.

For example, the gaming account may say “Maria Santos,” while the ID says “Maria Cruz Santos” and the e-wallet is registered as “Maria C. Dela Cruz-Santos.” Even when all three refer to the same person, the system may treat them as different identities.

Submit the relevant supporting record, such as:

Marriage certificate
Birth certificate
Court order or annotated civil registry record
Affidavit explaining a minor discrepancy
Written confirmation from the bank or e-wallet provider

A routine KYC correction usually does not require an apostilled document if the Philippine-issued original is already accepted. Foreign civil documents may require a certified translation or apostille when the operator reasonably needs to verify their authenticity.

The ID is expired, blurred, cropped, or altered

The image should normally show:

All four corners of the document
The photograph and signature
Full name and birth date
ID number and expiry date
Security features that the verification system needs to scan

Avoid filters, screenshots of photocopies, or heavily compressed images. A watermark such as “For KYC of [operator] only” may reduce misuse risk, but do not cover the face, ID number, barcode, QR code, or security features. Some automated systems reject any alteration.

The address cannot be verified

The operator may request a recent utility bill, bank statement, government correspondence, lease document, or other proof of residence. Problems commonly arise among:

OFWs whose permanent Philippine address differs from their current address abroad
Foreign residents whose passport has no Philippine address
People living with parents or relatives who do not have bills in their own name
Condominium tenants whose utilities remain under the owner’s name

Explain the living arrangement and submit a lease, barangay certificate, bank statement, or host declaration if the operator accepts it.

The deposit came from another person

Using a spouse’s bank account, a friend’s GCash account, or a company card is a common reason for a withdrawal hold. The operator may view this as third-party funding or possible account sharing.

Provide proof of the relationship and source of funds, but understand that some operators prohibit third-party deposits altogether. They may return the original deposit to the funding source rather than pay the balance through a different account.

The player created multiple accounts

PAGCOR’s remote-gaming framework generally permits one player account per platform. Multiple accounts may result from forgotten registrations, recycled mobile numbers, duplicate social logins, or deliberate attempts to claim repeated promotions.

Ask the operator to identify the duplicate account and explain whether it can be closed or merged. Do not create another account to bypass the restriction; doing so normally makes the dispute worse.

The site alleges bonus abuse or prohibited play

A displayed balance is not always fully withdrawable. Part of it may be:

A promotional bonus
Winnings subject to wagering requirements
A voided wager
Funds associated with an excluded game
A duplicated or reversed transaction

Request a transaction-by-transaction computation showing the cash deposit, bonus amount, qualifying wagers, deductions, and final withdrawable balance. Save the promotion rules that applied when you accepted the bonus because websites may later revise them.

Your Rights and the Operator’s Obligations

KYC rules must be applied consistently and in good faith

The operator may verify identity, investigate suspicious activity, and enforce valid account rules. It may also suspend or close an account where the player violated lawful terms. PAGCOR’s remote-gaming framework recognises that serious Terms of Use violations may support account cancellation and, in applicable cases, forfeiture of funds.

That authority is not unlimited. Under the Civil Code of the Philippines:

Article 1159 provides that contractual obligations must be complied with in good faith.
Article 1306 allows parties to set contractual conditions only when they are not contrary to law, morals, public order, or public policy.
Article 1308 states that a contract’s validity or compliance cannot be left solely to the will of one party.
Article 1377 provides that an obscure contractual provision should not be interpreted in favour of the party that caused the obscurity.
Articles 19, 20, and 21 impose duties to act with justice and good faith and may support damages where unlawful or bad-faith conduct causes injury.

An operator should therefore be able to identify the relevant rule, the nature of the alleged violation, and the consequence being imposed. It may withhold confidential fraud-detection methods or legally protected anti-money-laundering information, but “security reasons” should not become an excuse for endless silence.

Whether the gaming activity was legal matters

Article 2014 of the Civil Code states that a winner cannot maintain an action to collect winnings from a game of chance. The Supreme Court clarified in Yun Kwan Byung v. Philippine Amusement and Gaming Corporation, G.R. No. 163553, December 11, 2009, that this rule concerns illegal gambling. The Court refused recovery because the particular junket arrangement violated PAGCOR’s charter and was therefore illegal and unenforceable. (Supreme Court E-Library)

This distinction is crucial. A claim is substantially stronger when:

The operator and exact domain were lawfully authorised
The player was eligible to play
The account and payment method belonged to the player
The wagers complied with the applicable rules
KYC was completed or the remaining issue is a correctable discrepancy
The amount claimed is supported by transaction records

A Philippine court is unlikely to assist in collecting winnings from an illegal gambling arrangement. Verification of the operator’s licence is therefore one of the first steps, not a minor technicality.

You have rights over your personal information

Under the Data Privacy Act of 2012, Republic Act No. 10173, a player whose identity documents are collected is a data subject. Relevant rights include the rights to be informed, access personal data, correct inaccurate information, object in appropriate circumstances, and complain about unlawful processing. (National Privacy Commission)

You may ask the operator:

What personal information did not match
How you can correct inaccurate account information
What categories of documents are still required
The purpose and legal basis for processing your ID
How long the documents will be retained
The contact details of its Data Protection Officer
Whether your documents were shared with a verification provider

These rights do not necessarily entitle you to the operator’s complete fraud model, internal risk score, suspicious transaction report, or confidential law-enforcement information.

What to Do Step by Step

1. Stop depositing money

Do not deposit more merely because customer support says it will “activate,” “upgrade,” or “verify” the account. A legitimate KYC review ordinarily requires documents or clarification—not another wager or payment.

Treat the following as major scam indicators:

“Withdrawal tax” payable to a personal account
“AML clearance fee”
“Security deposit” before funds can be released
Payment through cryptocurrency or an unrelated e-wallet
A request for your OTP, PIN, password, or remote access to your phone
Threats that the entire balance will disappear within hours unless you pay

2. Preserve a complete evidence file

Collect evidence before the site closes the account, deletes the chat, or changes its terms.

Save:

Exact website domain and app download source
Operator’s legal name, company number, address, and claimed licence
Account username, registered mobile number, and player ID
Date and amount of every deposit and withdrawal request
Bank, card, or e-wallet transaction references
KYC documents submitted and submission dates
Rejection messages and stated reasons
Full customer-support conversations
Account balance and betting history
Bonus terms and wagering requirements
Terms of Use and privacy notice
Emails, text messages, and push notifications
Screenshots of the licence claim and responsible-gaming footer

Whenever possible, export emails and chats in their original format. Take a screen recording showing the domain, account page, withdrawal status, and balance. Retain the original device and files because cropped screenshots alone may be challenged as incomplete or altered.

3. Verify the exact operator and domain

Search the operator through PAGCOR’s official electronic gaming records. Confirm all of the following:

The legal operator or gaming-system administrator
The registered brand
The exact domain name or URL
The relevant licence category
The physical or registered Philippine address

A company’s Securities and Exchange Commission registration does not, by itself, authorise gambling. Likewise, the fact that a game provider appears on PAGCOR’s approved-content list does not necessarily mean that every website carrying that game is licensed.

4. Make one organised KYC resubmission

Do not send random documents one at a time. Prepare a single indexed submission containing:

Government-issued photo ID
Selfie or liveness verification, if required
Proof of address
Proof that the withdrawal account belongs to you
Explanation and supporting records for any name or address discrepancy
Source-of-funds document, if reasonably requested
List of previous submission dates and reference numbers

Upload documents only through the verified operator’s secure portal or official compliance email. Do not send IDs through Telegram, Facebook Messenger, or a customer-support agent’s personal address.

5. Send a formal written demand

A phone call is difficult to prove. Send a written demand through the operator’s official complaints, compliance, and privacy channels. Give a reasonable response period, commonly five to ten business days, while recognising that this is a deadline you are setting—not a universal statutory payout period.

Your message may state:

I am the registered holder of account [player ID]. I requested withdrawal of ₱[amount] on [date], under transaction reference [number]. I submitted the requested KYC documents on [dates], but my withdrawal remains blocked.

Please provide in writing:

The specific KYC item that failed or remains incomplete;

The applicable provision of your Terms of Use;

The documents or corrective action still required;

Whether the restriction affects my deposited funds, winnings, or both;

The itemised computation of any amount proposed for forfeiture or refund; and

The expected date of the final review and payment.

Please also correct any inaccurate personal information identified in my account and preserve all KYC, login, transaction, game, payment, and customer-support records relating to this dispute.

Kindly provide your final written response within [five or ten] business days.

A demand letter ordinarily does not need notarisation. Notarisation may help establish the identity of the sender, but it does not transform an invalid claim into a valid one.

6. Escalate to PAGCOR if the site is licensed

Send PAGCOR:

Your complaint summary
Exact brand and domain
Operator or licensee name
Player ID
Withdrawal amount and date
KYC documents requested
Operator’s final response or failure to respond
Screenshots and transaction records
The remedy you are requesting

Use PAGCOR’s official regulatory contact page to reach the Electronic Gaming Licensing Department or the regulatory unit responsible for the operator. Keep the acknowledgment email and reference number. PAGCOR’s regulatory page currently lists the relevant departments, official contact channels, address, and trunk lines. (PAGCOR)

PAGCOR may require the licensee to explain its actions or comply with regulatory requirements. It does not automatically guarantee payment, especially where the operator alleges identity fraud, prohibited play, third-party funding, or illegal activity.

7. Complain to the payment provider when the problem involves the transfer

Contact the bank, card issuer, or e-wallet when:

Your account was debited but the gaming balance was not credited
The operator claims it paid, but no withdrawal arrived
An unauthorised transaction occurred
The payment provider froze or reversed the transfer
The recipient account appears fraudulent

First use the financial institution’s internal complaint process. If the issue remains unresolved and the institution is supervised by the Bangko Sentral ng Pilipinas, escalate through the BSP Consumer Assistance Channels, including the BSP Online Buddy or the Complaints, Inquiries and Requests form. Include the complaint previously sent to the institution, its reply, and your supporting records. (Bangko Sentral ng Pilipinas)

The BSP can address the conduct of a supervised bank, e-wallet, or payment service. It generally cannot decide whether the gaming operator’s wagers or winnings were valid.

8. Use the National Privacy Commission for a data-privacy issue

The National Privacy Commission is appropriate where the operator:

Refuses to correct an obvious identity error
Misuses or discloses your ID
Collects excessive information without explanation
Sends your documents to unknown parties
Ignores a legitimate access or privacy request
Suffers a personal-data breach
Continues retaining documents without a lawful purpose

The NPC does not ordinarily decide whether gaming winnings must be paid. Its role concerns the handling of personal data.

A formal NPC complaint uses the Commission’s prescribed form, must be notarised, and may be submitted personally, by courier, or as a scanned copy through the channel shown on the NPC filing page. Attach your correspondence with the operator and the documents supporting the alleged privacy violation. (National Privacy Commission)

9. Report apparent fraud or identity theft

Consider a cybercrime report where the evidence indicates that the “gaming site” was created mainly to collect deposits or identity documents. Warning signs include:

A fake or unverifiable PAGCOR licence
Constantly changing domains
No identifiable legal entity
Support available only through private chat
Fabricated tax or government certificates
Demands for repeated release payments
Remote-access software requests
Use of personal bank or e-wallet accounts as deposit channels
Immediate disappearance after payment

Preserve the URL, IP-related information available to you, payment destination, recipient name, wallet address, telephone numbers, chats, advertisements, and social-media profiles. Reports may be filed with the Philippine National Police Anti-Cybercrime Group through its official eComplaint channel, the National Bureau of Investigation’s cybercrime unit, or the Department of Justice Office of Cybercrime.

Do not publicly post unredacted IDs, bank statements, account numbers, or chat records while seeking help. Doing so can create a second identity-theft problem.

10. Assess whether a civil case is practical

Court action may be considered when the operator is licensed or the underlying transaction is otherwise legally enforceable, the defendant’s correct legal identity is known, and there is a Philippine address where summons can be served.

A straightforward money claim not exceeding ₱1,000,000 may potentially qualify for small claims treatment if it falls within the covered contractual money claims. Small claims are handled by first-level courts, use simplified forms, and generally involve one hearing, with the resulting judgment final and unappealable. Coverage ultimately depends on the legal basis of the claim—not merely the amount shown in the account. (Supreme Court of the Philippines)

Practical obstacles include:

The defendant is an unidentified website rather than a registered entity
The terms select a foreign court or arbitration forum
The operator has no Philippine office or assets
The website was unlicensed
The balance consists primarily of bonuses
The operator alleges fraud or account sharing
Serving summons abroad is required
Enforcement would cost more than the amount being claimed

For claims above the small-claims limit or those requiring damages, injunctions, extensive evidence, or foreign service, ordinary civil procedure may apply.

Documents to Prepare

Document	Why it matters
Government-issued ID	Establishes identity, age, and account ownership
Proof of address	Resolves residence and jurisdiction issues
Bank or e-wallet statement	Shows deposits, withdrawal destination, and payment ownership
Withdrawal confirmation	Proves the amount and date requested
Betting and account history	Distinguishes deposits, winnings, bonuses, and reversals
KYC submission records	Shows compliance and repeated requests
Full support conversations	Proves explanations, admissions, delays, or changing requirements
Terms of Use and bonus rules	Identifies the contractual basis claimed by the operator
PAGCOR licence or domain verification	Establishes whether the operation was authorised
Formal demand and delivery proof	Shows that payment or explanation was requested
Privacy request and response	Supports an NPC complaint
Payment-provider complaint	Supports a BSP escalation
Scam advertisements and recipient details	Supports a cybercrime investigation

Special Issues for OFWs and Foreign Players

An OFW should disclose both the permanent Philippine address and actual overseas residence where required. Submit a passport, residence permit, overseas proof of address, and evidence that the bank or e-wallet account belongs to the same person.

A foreign player should check whether the platform accepts non-Filipino residents and whether the person was physically located in an allowed territory while playing. A Philippine-authorised platform may apply geolocation, residency, age, and restricted-person rules.

Foreign-language documents may need an English translation. An apostille is usually relevant when a Philippine authority or the operator requires authentication of a foreign notarised or civil-status document. It should not automatically be required merely to prove an ordinary passport’s authenticity.

Using a VPN can create a serious problem even when it was used for privacy rather than to evade location restrictions. The operator may see logins from prohibited territories or impossible travel patterns. Request the relevant login dates and locations, then explain the legitimate reason and provide travel records if necessary.

Frequently Asked Questions

Can a gaming site legally hold my withdrawal while checking KYC?

Yes, a regulated operator may temporarily hold a withdrawal while completing identity, anti-fraud, and anti-money-laundering checks. The review should be tied to a genuine requirement and should not become an indefinite or constantly changing process.

Can the site confiscate all my money because KYC failed?

Not automatically. The answer depends on why KYC failed, the applicable terms, the legality of the gaming activity, and whether the money represents deposits, bonuses, or winnings. Ask for the precise contractual provision and an itemised computation. Returning verified deposits may be different from paying disputed winnings.

Why did the site accept my deposits but reject me only when I withdrew?

PAGCOR’s remote-gaming framework specifically requires full KYC before the first withdrawal or within seven days from signup, whichever comes first. A withdrawal-stage review is therefore possible. However, an operator’s failure to perform timely checks may be relevant when assessing whether it acted fairly or negligently.

Should I send my ID again?

Resubmit only through a verified secure portal or official compliance channel and only after the operator identifies what was wrong with the previous submission. Do not send documents repeatedly to personal email addresses or messaging accounts.

Can a site require proof of source of funds?

Yes, particularly for large, unusual, or higher-risk transactions. Appropriate documents may include bank statements, payslips, business records, remittance receipts, or evidence of a legitimate asset sale. The request should be proportionate and handled securely.

Is a foreign gambling licence valid in the Philippines?

A foreign licence may authorise the operator in the issuing jurisdiction, but it is not the same as PAGCOR authorisation. PAGCOR may have little or no regulatory power over a foreign operator with no Philippine licence or presence.

Can PAGCOR order the site to release my money?

PAGCOR can investigate operators under its jurisdiction and require regulatory explanations or compliance. Whether payment is ordered or made will depend on the licence, account records, KYC findings, applicable rules, and evidence. PAGCOR cannot effectively regulate every offshore or fraudulent website merely claiming to serve Philippine players.

Can I file a small claims case for blocked online gaming winnings?

Possibly, but only where the claim is an enforceable contractual money claim, the defendant can be properly identified and served, and the amount does not exceed the applicable ₱1,000,000 threshold. Courts will not enforce claims arising from illegal gambling arrangements.

Should I dispute the original deposit with my bank?

Report an unauthorised or fraudulent transaction immediately. Do not falsely describe a deposit you knowingly authorised as unauthorised merely because you later lost or faced a withdrawal dispute. A false chargeback claim may expose you to account closure or legal consequences.

Is an “AML fee” required to release winnings?

A demand to pay a separate “AML fee,” “clearance certificate,” “verification tax,” or refundable security deposit to a personal account is a strong scam indicator. Legitimate compliance checks generally require information and documents, not secret release payments.

Key Takeaways

Stop depositing and never pay an extra “unlocking,” “tax,” or “AML clearance” fee.
Verify the exact brand and domain through PAGCOR’s official records.
A legitimate operator may conduct KYC, but it should identify the unresolved requirement and apply its rules consistently.
Preserve the account history, withdrawal record, KYC submissions, payment references, terms, and complete support conversations.
Send a formal written demand requesting the precise reason, applicable rule, required correction, itemised balance, and review deadline.
Escalate licensed-platform complaints to PAGCOR, payment-service problems to the provider and BSP, and personal-data violations to the NPC.
Report fake licences, identity-document harvesting, and release-fee schemes to Philippine cybercrime authorities.
Court recovery depends on whether the gaming activity was lawful, the claim is enforceable, and the operator can be identified and served.