Incaspin’s casino Anti Money Laundering Policy for Spain

Incaspin Casino operates an Anti Money Laundering program built to meet both Spanish legal standards and the international standards defined by the Financial Action Task Force https://incaspin-casino.com.es/legal-and-affiliates/. This policy sits in the casino’s legal and affiliates section and explains the compliance steps covering every financial touchpoint — from player registration and deposits to bringing on affiliate partners and settling commissions. Management views the prevention of money laundering and terrorist financing as a fundamental part of operating with integrity. All employees, contractors and affiliate partners must adhere to the procedures described here, so that Incaspin Casino remains a trusted, legally sound place to play. That commitment goes beyond ticking regulatory boxes. It involves building a risk‑aware culture that protects the Spanish gaming community and the wider financial system from illegal activity.

Extent and Dedication to AML Adherence

This Anti Money Laundering Framework covers every product line, customer group and promotional channel Incaspin Casino runs under its Spanish licence. That encompasses real‑money casino games, live dealer experiences, sports betting integrations and any future gambling services. Compliance obligations reach vertically through the whole value chain, from the first customer onboarding check through ongoing transaction monitoring, periodic reviews and, where necessary, ending business relationships. The policy also extends to the affiliate network, requiring every partner to operate in a way that does not help or conceal the movement of dirty money. By integrating AML controls into daily operations, Incaspin Casino detects risk indicators at the earliest possible stage. The leadership team reviews the policy’s scope every year, refreshing it to align with changes in Spanish law, guidance from the Dirección General de Ordenación del Juego and new financial crime patterns. That keeps the document relevant and responsive to the threats we encounter.

Heightened Due Diligence for Elevated-Risk Profiles

Incaspin Casino’s risk categorisation engine automatically flags accounts that meet established high‑risk criteria for money laundering, sending them into a more comprehensive due diligence workflow. Politically exposed persons, their family members and close associates are recognized through regular screening against global PEP lists and must get senior management approval before any business relationship starts or continues. The same strict standard applies to legal persons, trusts and other structures where the real beneficial owner cannot be easily identified or where ownership chains involve places with weak transparency registers. Enhanced due diligence means gathering extra information about the purpose and expected nature of the business relationship, examining the source of wealth more forensically, and monitoring transactions more often than the baseline risk profile requires. Each enhanced review produces a detailed internal report that documents the reason for accepting or rejecting the account, the verifying evidence collected and the approval chain. If information gaps persist after reasonable effort, the casino reserves the right to refuse service and, where there is a suspicion of money laundering, to file a report with SEPBLAC without telling the customer, strictly following the tipping‑off prohibition.

Disclosure Requirements to SEPBLAC

Under Spanish law, Incaspin Casino is an obliged entity and therefore has a legal duty to send suspicious activity reports to the Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offences, known as SEPBLAC. The reporting system triggers whenever the compliance team has valid reasons to believe that a transaction or a linked chain of transactions is associated to money laundering or terrorist financing, without regard to the amount. In those situations, the designated compliance officer drafts a confidential report through SEPBLAC’s secure electronic channels, detailing the subject’s particulars, the type of the suspicious behavior, the financial record and any supporting information collected during the internal investigation. The report is sent within the legal deadlines and the casino delays executing the transaction until a answer comes back, unless postponing it is impossible or would hinder the probe. All employees are under a rigorous requirement to keep the reporting itself and the content of any report absolutely confidential. Informing the customer or an unauthorized third party is a criminal violation under Spanish anti‑money laundering law. Incaspin Casino records the result of each submission, using judicial input and typology revisions to enhance its internal monitoring rules.

Transaction Oversight and Suspicious Behavior Detection

Incaspin Casino employs an automated transaction monitoring system that runs continuously, scanning every deposit, withdrawal and platform transfer for patterns that stray from expected behaviour. The system integrates rule‑based scenarios written by compliance analysts, machine learning models trained on historical data and real‑time sanctions screening at the moment of each financial event. When a transaction generates an alert, a compliance operations team member examines the context, assessing the customer profile, game history and the nature of the alert before concluding if it is legitimate. The investigation is timestamped and stored in the case management module, creating a defensible audit trail that can be shown to Spanish regulators on request. The casino holds a library of suspicious activity indicators that is constantly refined through feedback loops and typology reports published by SEPBLAC and international partners. Some of the indicators that often trigger closer scrutiny include:

• Structuring activity, where a player deliberately breaks a large transaction into several smaller amounts to avoid reporting thresholds or evade internal alarms.
• Rapid fund movement, with withdrawal requests immediately following a deposit and minimal play, implying the casino is being used as a quasi-banking channel.
• Multiple accounts operating from a single device, IP cluster or financial instrument, especially when money moves between accounts in a way that layers the origin of funds.
• Mismatches between stated occupation, income and betting volumes — for example, a student profile generating six‑figure monthly turnover without a clear explanation.
• Frequent changes to personal details like email, phone number and residential address within short periods, which can signal efforts to mask identity and bypass monitoring cycles.

Record-Keeping and Privacy Safeguards

The evidentiary foundation of Incaspin Casino’s AML programme depends on careful record‑keeping that fulfils both the data retention rules of Spanish money laundering law and the data protection principles of the General Data Protection Regulation, as implemented by Organic Law 3/2018 in Spain. The casino maintains all due diligence documentation, transaction logs, business correspondence about account activity and internal investigation files for ten years after the business relationship ends or an occasional transaction is carried out. This retention window makes sure records stay available for later inspection by the DGOJ, SEPBLAC or law enforcement bodies looking into historical matters. Data is stored in encrypted repositories with access controls limited to authorised compliance staff, and a strict deletion protocol guarantees materials securely destroyed once the statutory period runs out. Regular audits verify that the storage infrastructure meets security standards and that no unauthorised copies exist. The records kept for AML purposes belong to these categories:

• Proof of identity and the results of electronic identity checks, including any discrepancies flagged during onboarding and how they were resolved.
• Full sequential records of every financial transaction, showing the date, amount, currency, payment instrument, IP address, device fingerprint and geolocation data when available.
• Alert filings, internal investigation notes and the evidence that supported the choice to file or not file a report with the financial intelligence unit.
• Correspondence between the casino and the player about account queries, source of funds requests or clarifications tied to enhanced due diligence steps.

Spanish Legal System and Licence Requirements

Incaspin Casino holds a permit from Spain’s gambling authority, which enforces strict anti‑money laundering terms grounded in Law 13/2011 on gambling control and the more detailed Law 10/2010 on preventing money laundering and terrorist funding. The regulatory landscape is strengthened by Royal Decree 304/2014 and the binding guidelines released by SEPBLAC, Spain’s financial intelligence unit housed within the Bank of Spain. Complying with these laws requires Incaspin Casino must run a fully documented AML programme covering customer due diligence, ongoing oversight, suspicious transaction notification and record retention. The licensing stipulations also require a appointed compliance officer who reports directly to the board on financial crime prevention. Punishments for failing to conform can include significant penalties, licence withdrawal and severe reputational harm, which is why the casino’s internal measures are structured to exceed minimum legal thresholds. Basing the policy in this Spanish legal structure reflects a legally defensible position that meets supervisory standards and offers players a secure setting for their wagers.

Identity Verification and Verification Measures

No user gets a account setup with Incaspin Casino until thorough customer due diligence is finished. The identification process follows the “know your customer” rule Spanish law demands, requiring every person to provide valid information that gets checked against official papers or electronic databases. The compliance team runs real‑time checks against official blacklists, politically exposed persons databases and watch lists held by European and international agencies. If a potential match turns up, the account is suspended immediately while a manual investigation runs, and a report is sent to SEPBLAC if necessary. Verification is not a one‑time door‑check. It stays active through the whole relationship, with periodic reviews initiated by changes in account behaviour, large withdrawals or when official documents become invalid. Incaspin Casino presents the documents needed in a structured format so players know exactly what to provide to enable and keep their accounts. The standard documents asked for over the life of a player account include:

• A valid government‑issued identity document — passport, national ID card or Spanish residence permit — showing a visible photo and a valid ID number.
• A recent utility bill, bank statement or tax form that verifies the player’s registered residential address and is no older than three months.
• Evidence of control of the payment method used, which may be a redacted screenshot of an e‑wallet profile, a photo of the physical payment card showing the first six and last four digits, or a bank certificate.
• When cumulative deposits exceed a set threshold, a source of funds declaration backed by salary slips, tax returns or investment account statements.

Risk-Based Approach and In-House Safeguards

Every AML measure at Incaspin Casino is calibrated through a evolving risk‑based strategy, aligning with the methodology recommended by the European Banking Authority and Spanish supervisory agencies. The compliance team performs a extensive, enterprise‑wide risk analysis at least once a twelve-month period, looking at product vulnerabilities, delivery channels, customer profiles and where player accounts are situated. What they find determines the degree of due scrutiny, transaction monitoring trigger thresholds and where compliance resources are allocated. Internal controls comply with a recorded policy system that includes clear escalation routes, segregated duties and independent audit reviews. A risk appetite document endorsed by senior management establishes the limits the casino is ready to work inside, so that higher‑risk situations always receive more attention. The list below presents the main risk categories that affect how strictly controls are implemented to individual accounts and affiliates:

• Regional risk: susceptibility to countries Spanish authorities flag as having weak AML frameworks or high dishonesty.
• Game risk: games or payment methods that enable fast money transfers, high‑stakes privacy or person‑to‑person transactions.
• Customer risk: profiles including non‑resident individuals, complex corporate arrangements or jobs that often manage lots of funds.
• Payment risk: behaviors like frequent small credits, immediate withdrawals with little activity, or funding from third sources.
• Referral risk: partners working in unregulated referral areas or using marketing that generates anonymous, unverified users.

Staff Training and Regulatory Culture

Incaspin Casino recognizes that even the strongest technical controls can prove inadequate if the people running them are not fluent in financial crime prevention. So the casino puts money into ongoing training that gives every staff member the understanding to detect red flags, grasp their reporting duties and grasp the legal fallout of failing to comply. New employees undergo a mandatory induction covering the basics of Spanish AML law, the internal reporting chain and the confidentiality principle, while current staff take annual refresher courses that fold in recent regulatory changes and genuine, anonymised case studies from the industry. The training is categorized by role: customer‑facing agents receive scenarios centered on player interactions and verbal cues, while compliance analysts delve deeper into transaction pattern analysis and report writing. Board‑level executives are informed about strategic risk shifts and the consequences of enforcement actions observed across the European gambling sector. A solid whistleblowing channel lets any employee voice worries anonymously through an independent route, bolstering a culture where the platform’s integrity belongs to everyone, not just one department.

Partner Program AML Requirements and Affiliate Vetting

The Incaspin Casino affiliate programme stays clean through a due diligence process that extends AML expectations beyond the operator itself. Before any partnership deal is activated, prospective affiliates undergo screening that checks their business registration, tax standing, beneficial ownership and the reputation of their digital properties. Partners agree to a contract obligating them to promote the casino in a way that does not pull in anonymous, high‑risk traffic, and they must not publish content that might be interpreted as enabling money laundering or structuring financial flows. The affiliate agreement provides Incaspin Casino the right to audit the partner’s referral practices and to suspend commissions on the spot if suspicious patterns show up, such as a cluster of low‑activity accounts generating unusually high commission volumes. Affiliates also are required to run their own basic know‑your‑customer checks on sub‑affiliates and report any concerns to the casino’s compliance department without delay. By linking the marketing ecosystem that supplies the Spanish platform into the same vigilance that drives internal AML controls, Incaspin Casino creates a full shield against financial crime — from the first promotional click right through to the final withdrawal settlement.