KYC and AML

KYC Requirements for Online Gambling in Ontario

What regulated Ontario operators must verify before play, the FINTRAC identification and PEP rules that apply, and how BetGuard fits in.

4 min readPart of kyc and aml

On this page
  1. What must Ontario operators verify?
  2. What FINTRAC duties apply?
  3. What does an Ontario verification process look like?
  4. What does the NorthStar case show about Ontario KYC?
  5. How does Ontario compare with New Jersey?
  6. Worked example: an Ontario sign-up
  7. What mistakes do operators commonly make?
  8. Checklist
  9. Frequently asked questions
  10. Sources
  11. More guides

Regulated Ontario operators must verify that a player is 19 or older and who they say they are before play, and geolocate them inside Ontario, under the AGCO’s Registrar’s Standards for Internet Gaming. Federal AML rules administered by FINTRAC add identification for reportable transactions, PEP determinations at account opening and for receipts of $100,000 or more, and five-year record keeping. Operators must also check BetGuard, the centralized self-exclusion program.

Key takeaways

  • Minimum age is 19.
  • Players are verified and geolocated in Ontario before play [1].
  • FINTRAC requires PEP determinations at account opening and for cash or virtual currency receipts of $100,000 or more [2].
  • Threshold reports at CA$10,000 include large cash, large virtual currency and casino disbursements [3].
  • BetGuard centralized self-exclusion launched on 14 May 2026, with new AGCO standard 2.14.1 [4].
19minimum age
CA$10,000report threshold
$100,000PEP determination for receipts
2.14.1AGCO CSE standard

What must Ontario operators verify?

Ontario verification
Item Requirement Source
Age 19+ Before play [1]
Identity Before play [1]
Location Geolocation inside Ontario [1]
BetGuard Centralized self-exclusion check [4]
PEP status At account opening and periodically [2]

What FINTRAC duties apply?

FINTRAC duties for casinos
Duty Detail Source
Threshold reports Large cash, large virtual currency and casino disbursements of CA$10,000 or more [3]
24-hour rule Aggregate transactions by the same person within 24 hours [5]
PEP determination Account opening, periodic monitoring, and receipts of $100,000 or more; measures within 30 days [2]
Records Keep at least five years [2]

What does an Ontario verification process look like?

  1. GeolocateConfirm the player is in Ontario.
  2. Verify identity and ageAge 19 or over.
  3. Check self-exclusionCheck the centralized self-exclusion programme [4].
  4. Screen PEPs and HIOsFINTRAC requires determining politically exposed persons and heads of international organizations [2].
  5. Monitor and reportLarge disbursements and suspicious transactions reported to FINTRAC [3].

What does the NorthStar case show about Ontario KYC?

The AGCO’s penalty against NorthStar Gaming [6] is a reminder that Ontario regulators expect controls to work in practice, not only on paper. Operators should test their KYC and monitoring controls regularly and keep evidence of each test.

How does Ontario compare with New Jersey?

Ontario compared
Topic Ontario New Jersey Source
Minimum age 19 21 [1] [7]
Geolocation Inside Ontario Inside New Jersey [1] [7]
Federal AML FINTRAC FinCEN [3] [8]

Worked example: an Ontario sign-up

  1. Player enters details; geolocation confirms Ontario.
  2. Identity and age 19+ verified electronically.
  3. BetGuard and PEP checks; no match.
  4. Account opened; deposit by Interac.

What mistakes do operators commonly make?

Allowing play outside Ontario

Geolocation is required.

Missing PEP determination at opening

FINTRAC requires reasonable measures [2].

Not wiring EDD triggers

The NorthStar failure [6].

Checklist

  • Age 19+ and identity verified before play.
  • Geolocation every session.
  • BetGuard check.
  • PEP determination at opening.
  • CA$10,000 reports with 24-hour aggregation.
  • Records for five years.
  • PEP and HIO determination.
  • Control testing with evidence.

Frequently asked questions

What is the gambling age in Ontario?

19.

Do I need to be in Ontario to play?

Yes, geolocation must confirm you are in Ontario.

What is BetGuard?

Ontario’s centralized self-exclusion program, launched on 14 May 2026.

Do Ontario casinos check PEP status?

Yes, at account opening and periodically under FINTRAC rules.

What does FINTRAC require?

Identification, threshold reports at CA$10,000 and suspicious transaction reporting.

How long are records kept?

At least five years.

Who regulates Ontario iGaming?

The AGCO, with iGaming Ontario managing the market.

Can I play before verification?

No.

What is the minimum age in Ontario?

19.

What is an HIO?

A head of an international organization, which FINTRAC treats similarly to a politically exposed person.

Sources

  1. AGCO: Registrar’s Standards for Internet Gaming
  2. FINTRAC: PEP and HIO guidance
  3. FINTRAC: casinos
  4. AGCO: centralized self-exclusion standards in effect
  5. FINTRAC: the 24-hour rule
  6. Gaming Intelligence: AGCO penalty on NorthStar Gaming
  7. N.J.A.C. 13:69O-1.3 (Justia)
  8. eCFR: 31 CFR Part 1021

KYC rules by market

When identity and age must be verified in eight regulated markets, and which registers apply.

Casino withdrawals in Ontario

AGCO payout standards, FINTRAC disbursement reports, Interac payouts and BetGuard.

Ontario

Payments, KYC, responsible gambling and marketing rules in Ontario.

PEP and sanctions screening

Screening players against PEP and sanctions lists: when, which lists, and how to handle matches.

Interac for iGaming in Canada

Interac e-Transfer for Ontario operators: how it works, payouts, limits and common issues.

Further reading elsewhere