KYC and AML

KYC Requirements for Online Casinos in New Jersey

What New Jersey’s internet gaming regulations require operators to collect and verify at registration, how authentication works, and the eligibility checks that follow.

4 min readPart of kyc and aml

On this page
  1. What data must New Jersey operators collect?
  2. How is identity authenticated?
  3. What does a New Jersey registration look like?
  4. How does New Jersey compare with Pennsylvania and Michigan?
  5. Worked example: a New Jersey registration
  6. What mistakes do operators commonly make?
  7. Checklist
  8. Frequently asked questions
  9. Sources
  10. More guides

Under N.J.A.C. 13:69O-1.3, New Jersey online casino operators must record a verified legal name, date of birth and residential address (not a PO box), the Social Security number or last four digits if voluntarily provided (or an equivalent for foreign patrons), and contact details. Identity is verified primarily through multi-source authentication with an additional method such as security questions or device checks. Patrons must be 21, not self-excluded or on the exclusion list, and may hold only one account per operator.

Key takeaways

  • Verified name, date of birth and residential address are required [1].
  • Multi-source authentication is the primary method, plus one more method [1].
  • Age 21 and exclusion list checks [1].
  • One account per patron per internet gaming intermediary; accounts are non-transferable [1].
  • Identity must be re-verified if there is reasonable suspicion it has been compromised [1].
21minimum age
1account per patron per operator
5consecutive failed deposits in 10 minutes trigger a block

What data must New Jersey operators collect?

[1]” tabindex=”0″>

N.J.A.C. 13:69O-1.3(b) data [1]
Field Rule
Legal name Verified
Date of birth Verified
Residential address Required; PO box not acceptable
SSN Full or last four digits if voluntarily provided, or an equivalent for foreign patrons
Email and phone Recorded
Verification method and date Recorded

How is identity authenticated?

Multi-source authentication is the primary method; manual checks must be logged. Verification must also include one more method: security questions answered within three attempts and five minutes, confirmation that the phone is tied to a device the patron uses, examination of credentials, or another approved method. Phones or devices with fraud associations fail and must be reported [1].

What does a New Jersey registration look like?

  1. Collect detailsName, address, date of birth and the Social Security number or last four digits, or an equivalent for foreign patrons [1].
  2. Authenticate identityElectronic verification against independent sources.
  3. Check age21 or over.
  4. Check exclusion listsThe state self-exclusion list.
  5. GeolocatePlay only within New Jersey.

How does New Jersey compare with Pennsylvania and Michigan?

US state comparison
Topic New Jersey Michigan Pennsylvania Source
Minimum age 21 21 21 [1] [3] [4]
Verification timing At registration Before account creation and any wager At registration [1] [3]
SSN Full or last four if provided SSN or last four (or equivalent) Per state rules [1] [5]

Worked example: a New Jersey registration

  1. Patron enters name, DOB, address, last four of SSN.
  2. Multi-source authentication matches records.
  3. Phone-to-device check passes.
  4. Self-exclusion and exclusion lists checked; geolocation confirms New Jersey.
  5. Account open.

What mistakes do operators commonly make?

Accepting PO boxes

A residential address is required [1].

Allowing multiple accounts

One account per patron per operator [1].

Not reverifying after compromise

Required on reasonable suspicion [1].

Checklist

  • Required data collected and verified.
  • Multi-source plus one additional method.
  • Age 21 and list checks.
  • One account per patron.
  • Encryption of SSN and financial data.
  • Reverification on suspicion.
  • Age 21 check.
  • Geolocation before play.

Frequently asked questions

What is the online casino age in New Jersey?

21.

Do I need to give my SSN?

Operators record the full SSN or last four digits if voluntarily provided, or an equivalent for foreign patrons.

Can I use a PO box?

No, a residential address is required.

Can I have two accounts at one casino?

No. One account per patron per operator.

Why was I asked security questions?

They are one of the additional verification methods allowed.

Do I need to be in New Jersey?

Yes, geolocation must confirm you are in the state.

Who regulates online casinos in New Jersey?

The Division of Gaming Enforcement.

What happens if my account is compromised?

The operator must re-verify your identity.

What is the minimum age for online casinos in New Jersey?

21.

Can I play from outside New Jersey?

No. Real-money play requires being located in the state.

Sources

  1. N.J.A.C. 13:69O-1.3 (Justia)
  2. New Jersey DGE: online responsible gaming rule adoption (October 2026)
  3. Mich. Admin. Code R. 432.651a (Cornell LII)
  4. Pennsylvania Gaming Control Board
  5. Mich. Admin. Code R. 432.655 (Cornell LII)

KYC rules by market

When identity and age must be verified in eight regulated markets, and which registers apply.

Casino withdrawals in New Jersey

N.J.A.C. 13:69O rules on refunds to cards, cage cash-outs, cancellation and dormant funds.

New Jersey

Payments, KYC, responsible gambling and marketing rules in New Jersey.

Markers of harm

The behaviour and payment signals regulators expect operators to monitor and act on.

Multi-accounting detection

How operators link duplicate accounts using identity, payment, device and behaviour signals.

Further reading elsewhere