KYC & AML Policy

Thrill applies KYC and AML procedures to confirm user identities, prevent fraud, and uphold its reporting obligations under applicable laws. These measures serve the following core principles:

• Fair play: ensuring all users operate under equal and verified conditions;
• User safety: protecting account holders from identity theft and unauthorized access;
• Transparency: maintaining open and honest processes that users can rely on;
• Regulatory compliance: fulfilling all obligations set by the relevant licensing and financial authorities.

Every new user registered on the platform is required to complete ID verification before accessing full account features, including deposits, withdrawals, and wagering. The following categories of documentation may be requested during the identity check process:

• Government-issued photo identification: such as a national ID card, passport, or driver’s licence confirming the account holder’s identity;
• Proof of address: a recent utility bill, bank statement, or official correspondence confirming the user’s residential address;
• Payment method ownership confirmation: documentation or verification demonstrating that the payment instrument used belongs solely to the registered account holder;
• Additional supporting documentation: in certain cases, further personal data may be requested to complete enhanced due diligence in line with regulatory requirements.

Thrill maintains a structured framework of security measures to detect and prevent money laundering, terrorism financing, and other financial crimes on its platform. The following controls are actively applied:

• Ongoing transaction monitoring: all deposit, withdrawal, and wagering activity is reviewed against established risk thresholds;
• Automated detection rules: system-level tools flag unusual patterns, high-frequency transfers, and inconsistent account behavior for further review;
• Enhanced due diligence for high-risk events: accounts involved in elevated-risk transactions undergo additional identity check and documentation procedures;
• Review of large or unusual transfers: significant or atypical fund movements are subject to manual assessment by the compliance team;
• Risk scoring: each account holder is assigned a risk profile that is updated continuously based on behavior and transaction history;
• Sanctions and PEP screening: all users are cross-referenced against international sanctions lists and Politically Exposed Persons (PEP) databases;
• Reporting to competent authorities: where suspicious activity is identified and meets the threshold for mandatory disclosure, reports are submitted to the relevant regulatory and law enforcement bodies in accordance with reporting obligations.

• Operating multiple accounts: registering or maintaining more than one account under the same or different identities is not permitted;
• Submitting forged or stolen documents: providing falsified, altered, or fraudulently obtained documents during document submission or at any subsequent stage;
• Laundering attempts: using the platform to place, layer, or integrate funds derived from illegal activity;
• System manipulation: exploiting technical vulnerabilities, automated tools, or fraudulent strategies to gain an unfair advantage;
• Sharing or selling account access: transferring, selling, or otherwise granting third parties the ability to operate an account;
• Using third-party payment instruments: depositing or withdrawing funds through payment methods not registered in the account holder’s own name;
• Identity misrepresentation: providing false personal data, including name, date of birth, address, or any other information required for ID verification.

Any breach of the KYC or AML policy constitutes a violation of the platform’s terms and triggers immediate enforcement action. Depending on the nature and severity of the violation, measures may include temporary or permanent account suspension, freezing or confiscation of funds linked to suspicious activity, cancellation of bets or winnings connected to the breach, and reporting to competent authorities where applicable under mandatory reporting obligations.

Every account holder on the platform is responsible for providing accurate, complete, and current personal data at the time of registration and throughout the lifespan of their account. Users must complete the ID verification process within the timeframes requested by the compliance team, and failure to do so may result in restricted account access. When the platform requests additional documentation for document submission or enhanced review, users are expected to respond promptly and supply the materials required. All payment methods used for deposits and withdrawals must belong exclusively to the registered account holder; use of third-party instruments is a breach of policy. In addition, users are encouraged to report any suspicious activity they become aware of, including unauthorized access attempts or irregular transactions on their account.