Two acronyms that South Africans hear constantly and almost nobody can distinguish. Only one of them is why your casino wants a utility bill.
Open a casino account and within a day or two you will be asked for an identity document, a
proof of address and quite possibly a bank statement. The support agent may tell you this is
“for FICA and RICA”. One of those is right.
FICA is the one that applies
FICA is the Financial Intelligence Centre Act, 38 of 2001. It is South Africa’s
anti-money-laundering framework, and it requires accountable institutions to know who their
customers are, to keep records, and to report suspicious and unusually large transactions to the
Financial Intelligence Centre. Casinos are accountable institutions under that Act. So are banks,
attorneys, estate agents and life insurers, which is why the acronym follows South Africans
everywhere.
Since the Financial Intelligence Centre Amendment Act of 2017 the approach is risk-based rather
than a fixed checklist. In plain terms: a casino is expected to apply more scrutiny to a customer
or a transaction that looks higher-risk, and less to one that does not. That is why the documents
asked of you may differ from the documents asked of a friend at the same operator, and why a
request can arrive months after registration when your play pattern changes.
RICA is not about your casino account
RICA is the Regulation of Interception of Communications and Provision of
Communication-Related Information Act, 70 of 2002. It governs the interception of communications
and, for most people, it is the reason you have to register a SIM card with your identity document
and address. It has nothing to do with opening a gambling account. If an operator tells you it
needs documents “for RICA”, it means FICA and is repeating a phrase. The only real
overlap is indirect: your RICA-registered phone number is what receives the one-time PIN that
protects the account.
What a casino will ask for
Wide table — drag it sideways to see every column.
The mismatches that cause most delays
Verification fails on trivia far more often than on substance. In order of how often we have seen
it:
- The name does not match exactly. Your ID says Thandiwe Nomsa Dlamini, the casino account
says Thandi Dlamini, the bank account says T N Dlamini. Every one of those is a flag. Register with
your full legal name exactly as it appears on the ID, every time.
- Proof of address in someone else’s name. Extremely common where you live with
family or rent informally. Most operators will accept an affidavit plus the bill holder’s
document, or a bank statement in your own name showing the same address. Ask support what they
accept before uploading something that will be rejected.
- A statement that is a screenshot. Some compliance teams will not accept a photograph of
a phone screen. Download the PDF from your banking app.
- Redaction. Blacking out your balance is usually fine. Blacking out your account number
is usually not, because the account number is the thing being verified.
Do it at registration, not at withdrawal
This is the whole practical lesson of the page. The documents are identical whether you upload
them on day one or on the day you try to take R8 000 out. But on day one you are in a routine queue
with no pressure; on withdrawal day you are in the same queue with money you want, and every
rejected document costs another cycle. Most of the horror stories about casinos “refusing to
pay” begin with verification that was never completed.
What they may not do
An operator asking for reasonable identity documents is complying with the law. An operator that
invents a new document requirement each time you satisfy the last one is stalling, and that is a
different problem — see
why withdrawals take
three days for the difference and
how to complain for what
comes next. Nor may a legitimate operator ask you to email a photograph of your card with the CVV
visible, or to send documents over WhatsApp to a personal number. Upload through the account
portal, always.
Your data afterwards
The documents you hand over are personal information, protected under POPIA, and a casino has to
tell you what it does with them and keep them secure. It also has to retain them: FICA record
keeping runs for years after the relationship ends, so “delete my ID” is not a request
an operator can generally grant while the retention period runs. That is a reason to be selective
about how many casinos you register with, rather than a reason to avoid verification.