Verify, set a limit, then play
Most new players' first mistake is depositing before verifying. They see a bonus code, they sign up, they deposit, and only when they try to withdraw do they realise KYC was never completed. The order is the reverse — verify first, set a limit, then play. The five rails below cover identity verification, RNG certification, data handling, payment rails, and the dispute path.
What KYC actually checks
KYC is regulated under the Prevention of Money Laundering Act framework. Each row is a check the platform is required to complete before any withdrawal can be processed.
| Check | What it verifies | Typical time | Failure consequence |
|---|---|---|---|
| PANPermanent Account Number | Identity & tax status match | 5–15 minutes | Withdrawal blocked |
| Aadhaar (masked)Last 4 digits + OTP | Address verification | 5–30 minutes | Re-upload requested |
| Bank proofCancelled cheque or statement | Account holder match | 30 min – 24 h | Re-upload + name match |
| UPI handleVPA verification | Real-time bank link | 1–5 minutes | Switch to bank transfer |
| Photo matchSelfie vs PAN | Liveness & identity | 2–10 minutes | Manual review queue |
RNG certification
Independent labs (iTech Labs, GLI, BMM Testlabs) audit the platform's random number generator annually. The audit confirms card distribution is genuinely random within statistical tolerances. The platform's footer or About page should name the lab and the certification date. The lab's website should list the platform as a current licensee.
If you cannot find either, the platform has not earned your trust. Move on.
Data handling
Your PAN, Aadhaar, bank proof and photo are sensitive. The platform must store them encrypted at rest, transmit them over TLS, retain them only for the legally required window, and never share them with third parties for marketing. The privacy policy should be a real document — not a paragraph of legal boilerplate — and should describe retention period, encryption, breach policy and your right to deletion.
You can request deletion of your account data after withdrawal of all funds. The platform must comply within 30 days under most data-protection regimes.
Withdrawal verification
Once KYC is complete, withdrawal is processed on the rail you registered (UPI or bank transfer). Typical windows: UPI T+0 to T+24 h, bank transfer T+24 to T+72 h. Anything beyond T+72 h without an explanation is a red flag. The platform should publish its withdrawal processing schedule; if it does not, ask customer care before depositing.
Dispute path
If a withdrawal is delayed beyond the published window, or a bonus code is not honoured, the dispute path is: customer-care ticket first, internal escalation second, regulator complaint third. The platform should expose a customer-care email or chat, a ticket reference number for every contact, and a published escalation timeline. If any of those are missing, treat it as a sign the platform does not expect to be held accountable.
Regulator-aligned dispute: under the Public Gaming Act framework, complaints can be filed with the state's gaming regulator. The contact details for your state regulator should be on the platform's responsible-play page.
Account deletion
You can request account deletion from your account settings or by writing to customer care. The platform should confirm within 7 days, complete withdrawal of any balance, and delete personal data within 30 days. Read the deletion page for the step-by-step.
Suspicious-activity reporting
If you see an account using a bot, a chip-dumping pattern, or collusion across multiple accounts, report it. The platform's customer-care page should expose a "report player" link tied to a hand history. Anonymous reports are usually accepted. Confirmed violations result in account suspension and chip forfeiture under most platform policies.
Frequently asked, calmly answered
Click any row to expand.
How long does KYC take?
PAN 5–15 minutes, Aadhaar 5–30 minutes, bank proof 30 min – 24 hours, UPI handle 1–5 minutes. Withdrawal remains locked until full KYC.
What is RNG certification?
Independent lab audit of the platform's random number generator, renewed annually. The lab name and renewal date should appear on the platform's About page.
Can I delete my account?
Yes. Account deletion is available in account settings or via customer care. The platform should complete withdrawal and delete personal data within 30 days.
How do I dispute a delayed withdrawal?
Open a customer-care ticket first. Reference the published withdrawal window. If the platform does not respond within the stated timeline, escalate to the state gaming regulator.
How is my data stored?
Encrypted at rest, transmitted over TLS, retained only for the legally required window, and never shared with third parties for marketing. You can request a copy of your data and its deletion.