Carat Casino Starts Source-of-Wealth Checks When Deposits Pass 45% of a Player's Gross Income
Worse for players
Slightly NegativeCarat Casino's KYC policy, issued under the name Leopard B.V., makes due diligence mandatory once deposits reach XCG 4,000 in a 365-day period, and puts a player into enhanced due diligence when they try to deposit more than 45% of their gross income or reach 15,000 euro of deposits in a year. At that level the player must prove the source of wealth with documents, such as three months of bank statements for a salary or a copy of the deceased's will for an inheritance. If an automatic request goes unanswered, withdrawals are blocked for 30 days and the account is hard-blocked after, and the funds are to be sent back. On a closed account, deposited funds go back to the deposit method where possible, less transmission charges. The threshold that matters most is set by the player's own income, and the policy states it as a percentage, not an amount.
The record
-
Terms captured29 Aug 2026
-
Terms assessed29 Aug 2026
-
Human reviewed14 Oct 2026
-
Published19 Oct 2026
We capture tracked terms pages on a fixed schedule. Every assessment is scored for player impact and human-reviewed before it joins the public record.
Watch Carat Casino
Get an email when Carat Casino changes its terms. The clause, the date, the record. Nothing else.
Alerts go to your account email. Stop them any time.
You're watching Carat Casino.
What this means for players
The Carat Casino KYC policy captured on 29 August 2026 is headed "Know Your Customer Policy" and "LEOPARD B.V", and does not mention Carat Casino by name. It reads as the operator's internal compliance manual: it refers to "the Risk Assessment excel file" and keeps a drafting note beside one declaration ("we draft it, and customer accepts it"). Suspicious activity is reported to the Curaçao FIU, and screening runs through a provider called iDenfy.
- Three levels, and a threshold in XCG. Level 1 at sign-up asks for name, date of birth, address, email, an identity document and a selfie or 3D liveness check. Level 2 becomes mandatory when deposits reach XCG 4,000, counted over a 365-day period from the first deposit, and adds employment status, proof of income, gross annual income and proof of address. The figure appears only as XCG, a currency code the document never names or converts.
- The policy contradicts itself on XCG 4,000. The level table sends a player who reaches XCG 4,000 to Level 2. Section 15.5 says: "The threshold has been devised so no customer will exceed XCG 4000 or equivalent without prompting Level 3 due diligence." A player cannot tell from the document which level XCG 4,000 triggers.
- 45% of gross income. Enhanced due diligence is mandatory when "The Client attempts to deposit more than the allowed 45% threshold based on the users Gross Income". The level table also lists 15,000 euro of deposits in one year as a Level 3 trigger. Once the source of wealth is verified, the 45% is recalculated on the verified amount. How much a player can deposit before the documents are due depends on an income the casino has to see first.
- What counts as proof. A salary needs three months of bank statements showing it paid in. An inheritance needs a copy of the deceased's will, a gift needs a letter and certified identity documents from the donor, crypto mining needs a ledger and the wallet address and transaction hash, and gambling winnings need a receipt of winnings plus proof of where the original deposit came from. Corporate crypto wallets are not accepted as a source of funding. A gift brings a second person's identity documents into the player's file.
- 30 days, then a hard block. When an automatic request goes unanswered, the account is blocked for withdrawals within those 30 days and hard-blocked after, and the funds are to be sent back. A manually prompted request left unanswered for 30 days is escalated and may lead to a suspicious transaction report. Elsewhere the policy says an account may be restricted while due diligence is pending. The money stays in the account while the clock runs, and the withdrawal is what stops first.
- What comes back on a closed account. "Unless a STR has been raised and an appropriate period has passed in which the customer has still not completed CDD, the account may be closed, and deposited funds still present on the customer’s account will be returned to the deposit method, where possible, less any charges incurred by the business for transmission to this destination." The sentence names deposited funds and transmission charges, and says nothing about winnings.
- Screening goes past convictions. Every player is screened by iDenfy at the first deposit and the client list is rescanned weekly, with sanctions lists checked daily. Negative media screening covers people under investigation and allegations as well as convictions, and verification may draw on social media. An allegation in the press is enough to open an evaluation.
- Proof does not last. Accounts are reviewed every 12 months at high risk, 24 months at medium risk and 30 months at low risk, and source of wealth is re-verified every 12 months for high-risk players and every 24 months for medium-risk ones. Documents accepted once can be asked for again.
Most of the document is anti-money-laundering procedure written out at length. What reaches the player is two thresholds and a clock: XCG 4,000, 45% of gross income, and 30 days before a withdrawal block becomes a hard block.
Evidence — full-page captures
Each exhibit is the full terms page exactly as it stood at that moment, archived by us. The originals are large images and open in a new tab.
Carat Casino's Welcome Bonus Vault lets a new player choose one of three options on each of the first three qualifying deposits: Easy at 5x wagering (50% up to $100), Balanced at 20x (100% up to $500 on the first deposit) or Boost at 40x (150% up to $750 on the first deposit). Taking Boost three times gives up to $2,250 and 150 Free Spins. The page never says whether the multiple is counted on the bonus alone or on deposit plus bonus, and on the largest first-deposit Boost that is the difference between $30,000 and $50,000 of bets. Maximum bet, game contribution and expiry are not on the page either. The player chooses before depositing, and the one fact that would make the three options comparable is the one left out.
Under the Carat Casino privacy policy, accepting any contest prize or winnings counts as consent to the use of the player's name or nickname for advertising, without additional compensation, unless otherwise agreed or prohibited by law. The data controller is given as www.caratcasino.com, a web address, and no company name, postal address or licence number appears anywhere in the policy. Player data is kept for a minimum of five years from the last transaction or account closure under anti-money-laundering rules, and erasure requests before then are refused. The policy says a data protection officer has been appointed, cites Article 77 of the GDPR and offers optional two-factor authentication. It points a player to a supervisory authority without naming the company a complaint would be about.
Carat Casino's general terms oblige the player to log in at least once a month to keep up with changes to the terms and conditions, and Carat Casino reserves the right to edit and update them with no notice period stated. Payout limits are not written in the document. They are shown in the player's account, set by Carat Casino's own standards, and Carat Casino has the right at any time to raise or lower them and to set additional limits on specific players without explanation. A claim about the account statement or balance must be raised within 14 days of the event, or the player is treated as agreeing with it. The rules can change with no notice promised and the limits carry no figure, and the work of noticing either falls on the player.