Cookies on the Gambling Commission website

The Gambling Commission website uses cookies to make the site work better for you. Some of these cookies are essential to how the site functions and others are optional. Optional cookies help us remember your settings, measure your use of the site and personalise how we communicate with you. Any data collected is anonymised and we do not set optional cookies unless you consent.

Set cookie preferences

You've accepted all cookies. You can change your cookie settings at any time.

Skip to main content


The prevention of money laundering and combating the financing of terrorism

Gambling Commission guidance for remote and non-remote casinos: Fifth edition (Revision 3).

  1. Contents
  2. Part 7 - Record keeping
  3. 4 - Customer information

4 - Customer information

In relation to the evidence of a customer’s identity casino operators must keep a copy of any documents or information obtained to satisfy the CDD measures required under the Regulations.145

Good practice

A casino operator may often hold additional information beyond identity in respect of a customer for the purposes of wider CDD. As a matter of best practice, this information and any relevant documents should also be retained.

There is a separate requirement in the Regulations to ensure that documents, data or information held by casinos are kept up to date.146

A trigger event for refreshing and extending CDD may be if a customer returns to a casino after a period of non-attendance. Refreshing information about existing customers will ensure that matters such as change of address or a customer being appointed into a role which attracts PEP status, will be picked up.

Keeping information up to date

Keeping information up to date is also a requirement under the Data Protection Act (opens in a new tab). How these issues will be dealt with in practice should be covered in the casino’s policies, procedures and controls.

Where documents verifying the identity of a customer are held in one casino premises they do not also need to be held in duplicate form in another premises in the same group. For the purposes of compliance with the Regulations, the whole group forms part of the same 'relevant person'. The records need to be accessible to all premises that have contact with the customer, the nominated officer and law enforcement. The Regulations accept that casino operators may have more than one casino premises or more than one remote casino site. It is sufficient for the operator to undertake identification and verification provided the information is available to each premises or site.


145 Regulation 40(2).
146 Regulation 28(11).

Previous section
Other casino customers
Next section
Supporting records (non-remote casinos)
Is this page useful?
Back to top