GUIDE · KYC & PRIVACY

Can a casino freeze your crypto? Source-of-funds checks explained

Yes, by contract. The verification, breach and dormancy clauses that let operators hold, void or zero a balance, quoted from their terms; the difference between a hold and a confiscation; what a source-of-funds request wants; and what to do when it happens.

Cover image

Yes. Once you deposit, your coins sit in the casino’s wallet and what you hold is a balance in its books, governed by its terms. Every set of terms I have read lets the operator hold a withdrawal while it verifies you, and most let it close the account and keep some or all of the balance if it decides you broke a rule: a restricted country, a VPN, a second account, bonus abuse or a missed document deadline. Several also zero dormant balances. This guide quotes those clauses from the operators’ own terms, separates a hold from a confiscation, explains what a source-of-funds request wants, and lists what to do when it happens to you.

Your coins are a balance, not a wallet

When you send crypto to a casino deposit address, the transaction is final and the coins belong to the operator’s wallet. The casino credits you a balance. From then on your money is a claim on a company, and the chain cannot help you collect it: a transaction hash proves you deposited, not that you are owed a withdrawal on your terms.

Compare a non-custodial exchange. Polymarket’s help centre says “we never take possession of your USDC” and lets you export your private key. A casino cannot work that way, because the house has to be able to pay and collect bets. That is why the terms matter more than the coin. The licence behind them matters less than people think: the licence guide quotes Curaçao’s authority saying it “is not a civil court and cannot order gaming operators to compensate players”.

Four kinds of freeze

“My account is frozen” can mean four different things, and each has a different exit.

Type What triggers it What happens to the money Your lever
Verification hold A KYC, AML or source-of-funds request Locked until you are verified Send exactly what was asked, fast
Deadline forfeiture Documents not sent within the terms’ deadline Account closed, winnings or balance kept Never miss the deadline; ask for an extension in writing
Breach confiscation Restricted country, VPN, second account, bonus or “non-recreational” play Winnings voided, sometimes deposits too Evidence that you did not breach; a complaint
Dormancy No activity for 6 months or more, depending on the operator Fees, or the balance zeroed Withdraw before you stop playing

Most “frozen after a win” stories start as the first type. They become the second or third when a deadline is missed or the operator finds, or claims to find, a breach.

Verification holds: “at any time”

Almost every operator reserves the right to ask for documents whenever it likes, and to stop withdrawals until it gets them. The wording is close to identical across licences.

  • Rainbet (§8.3): “We reserve the right to request photo ID, address confirmation or perform additional verification procedures … prior to granting any withdrawals”, and “at any time”. No threshold is published.
  • Roobet: it may ask for KYC documents “at any time” and “restrict the Services, such as deposit and withdrawal functions until you have completed the identification process”.
  • BC.Game (ToS 6): verification “before, during or after Your use of the Services”, including source of funds or wealth and tax residency.
  • Stake: “Stake’s compliance team reserves the right to request any documentation at any given time.”
  • Shuffle (ToS 5.1–5.2): an ID check “on your reaching a threshold we set from time to time and in any event before your first withdrawal”.
  • Cloudbet (21.1.5): verification required at USD 2,200 of cumulative deposits, documents at any time, and funds that may be locked pending verification.

A published threshold, like Cloudbet’s, is the better deal: you know the hold is coming and can verify before you win. “At any time” means the request can arrive with your first large withdrawal. The no-KYC list marks which sites publish a trigger.

Deadlines that turn a hold into a loss

The hold is a delay. The deadline is where the money goes.

Operator Deadline Consequence, per the terms
Monkey Tilt 5 days (28.2) Account may be closed and funds withheld
20Bet 2 weeks (§15) Account closed permanently and winnings confiscated
Thunderpick 30 days Closure and “loss of Winnings”
WinSpirit 1 calendar month (§12.15) “Seize the User’s account balance and close the User’s account”
Shuffle None stated (5.6) Account may be closed if identity cannot be verified; winnings may be forfeited
Bovada None stated (§3.5–3.6) Failure to provide documents can void the account and winnings

Read the WinSpirit row twice: the clause says balance, not winnings. Five days at Monkey Tilt is not long if your proof of address is a paper bill in a drawer.

Source-of-funds checks

A KYC check asks who you are. A source-of-funds check asks where the money came from, and it is the request that surprises crypto players most.

Rainbet’s AML policy describes how it gets there: “three-tiered transaction monitoring”, with AI alerts, then an employee review, then a manual audit, and source-of-funds documents “on request”. Stake’s help centre lists what it accepts as proof of source of income: bank statements, payslips, tax returns and similar documents. Duelbits says it asks high-volume players for source of funds, and that enhanced verification generally starts around EUR 2,000 of cumulative deposits or withdrawals. Shuffle (5.4) and WinSpirit (§18.6) reserve the same right. Even Kalshi, a regulated US exchange, says additional documents such as source of funds may be required.

No operator I have read publishes what counts as sufficient for crypto specifically. My practical reading: they want a paper trail from earned money to the coins you deposited. For coins bought on an exchange, that is the exchange’s purchase history plus the withdrawal to your wallet. BC.Game lists payment and wallet ownership among the documents it can ask for, so be ready to show the deposit wallet is yours. Coins you cannot trace to a statement are the hard case, and a casino deposit is the wrong place to find that out.

Breach clauses: where a hold becomes a confiscation

These are the clauses that let an operator keep money, not just delay it. They cluster in four groups.

  • Location. Bovada (§2.2–2.3) says a balance accessed from a restricted state “may be considered void”, and Ignition and Thunderpick use the same words. Rainbet (§8.6) may refuse withdrawals after a restricted-territory breach.
  • VPNs. Bovada (§6.2) treats a VPN that masks your location as fraud: the account is terminated and all balances, deposits included, are forfeited. Ignition uses the same clause. BitStarz (4.3) says using a VPN to bypass a provider’s block “is strictly prohibited and may lead to confiscation of winnings”. 20Bet forbids picking another country at registration, on pain of confiscation and closure. The VPN guide covers the rest.
  • Second accounts. Rainbet (§9.8) says accounts on the same IP may be classed as abusive, with funds confiscated. Cloudbet (7.1.12) allows one account per customer, IP, household and phone.
  • Bonus and “recreational” clauses. Bovada (§6.8) may void wagers and revoke bonuses for players it considers, “in our sole discretion”, to be abusing bonuses or limits. BetUS (2.7) prohibits “crypto-to-cash conversion, withdrawals without meaningful gameplay” and may void wagers and confiscate winnings on suspicion of advantage play. Stake calls a deposit withdrawn without betting “coin mixing” and treats the withdrawal as invalid.

Two things follow. A deposit you wager properly, from where you actually live, on one account and without a bonus, leaves very little for these clauses to bite on. And the clauses are written so the operator decides whether you breached them. Evidence then matters more than outrage.

Dormancy: the slow freeze

Leaving a balance on account is a bet on the dormancy clause.

Operator Inactivity What happens
Roobet 6 months without login May close inactive accounts with a zero balance
Duelbits (ToS 10.2) 12 months “Any remaining balance is forfeited”, not reversible
Thunderpick (5.3) 12 months Email at month 11, then balances “zeroed out”
Wolf.bet (ToS 12) 12 months Account may be shut down “and retain any associated Cryptocurrency”
BetOnline 12 months Balance zeroed, reinstated on request to support
Cloudbet (7.1.11) 12 months USD 5 monthly fee; funds not forfeited
Bovada (§3.8) 18 months Balance set to zero, email warning at 17 months
Shuffle (11.6) 24 months plus 3 May close and deal with the balance “in accordance with applicable law”

The fix costs nothing: withdraw when you stop playing, not when you remember.

What it looks like when it goes wrong

The three sites currently on my Shit List show the pattern, from complaints closed unresolved at Casino Guru’s complaint centre.

  • Rollbit. A Finnish player completed KYC level 4; a $2,200 withdrawal stayed at “Pending – Contact Support” and the account was disabled. Support later wrote “Your funds have been forfeit due to this breach”. Another player had 2,180 USDT blocked after three KYC levels and a multiple-account accusation. Rollbit’s help centre says only that you “might be required to complete up to level 5 verification”.
  • Linebet. An Indian player’s withdrawal of about 20 lakh rupees stayed in “security verification” after the documents were sent. A Bangladeshi player’s balance of 68,333 BDT was reduced to zero without explanation.
  • Winnita. €12,000 of winnings confiscated after a sudden ban, with no evidence supplied by the casino; €3,825 withheld for alleged multiple accounts, again without records.

The shape repeats: a verification loop, then an accusation of a breach, then no evidence and no reply to the mediator. A real verification hold ends with a decision you can read. A confiscation dressed as verification never ends.

What to do when your balance is frozen

  1. Get the reason in writing. Ask support which clause applies, by number, and what exactly they need. “Under review” is not a reason.
  2. Answer the exact request, once, completely. Same format, same names as on the account. Keep copies with dates and ask for confirmation of receipt.
  3. Watch the deadline. If the terms give five days or a month, meet it or ask for an extension in writing before it expires.
  4. Do not make it worse. No second account, no VPN, no chargeback on a card while the review runs; each is a breach clause of its own.
  5. Keep the evidence. Transcripts, request IDs, deposit and withdrawal hashes, screenshots of the balance and status. The pending withdrawal guide has a support template and tells a hold from a chain delay.
  6. Escalate by licence. Anjouan’s authority says it “does not handle, mediate, or adjudicate player complaints”: you complain to the operator, which has 30 days, then to one of four approved ADR bodies, at the operator’s cost. Curaçao’s authority accepts reports of regulatory violations but does not handle individual complaints. The licence guide has the routes.
  7. Use a mediator and tell me. Casino Guru’s complaint centre is where the cases above are documented. Three independent documented cases of withheld or confiscated withdrawals in twelve months, or a revoked or fake licence, put a site on the Shit List.

How to make a freeze less likely

  • Find the KYC trigger in the terms before you deposit, and verify early if a large win is possible.
  • Make a small withdrawal soon after the first deposit. It tests the cashier and the verification while little is at stake.
  • Play from where you live, on one account, without a VPN.
  • Skip bonuses if you want a clean exit: the “recreational” and abuse clauses mostly attach to them.
  • Keep the paper trail for your coins: exchange statements and the withdrawal to your own wallet.
  • Do not store money on a casino. Dormancy clauses run from 6 to 27 months.

The short version

A casino can freeze your crypto because, after the deposit, it is not your crypto any more: it is a balance under the operator’s terms. A verification hold is a delay you end by sending documents before the deadline. A breach clause for location, VPN, second accounts or bonus play is how a hold becomes a confiscation, and dormancy clauses do the same thing slowly. Read the KYC trigger and the breach clauses before you deposit, withdraw early and often, and if a freeze turns into silence, document it and send it to the Shit List.

Sources

Pages I read for this guide, in the state they were on the last-reviewed date. Operators change terms without notice; if a link disagrees with the text above, the link wins and I owe you a correction.

  1. Terms and conditions (§8.3, §8.6, §9.8) — Rainbet rainbet.com
  2. AML policy (three-tier monitoring, source of funds) — Rainbet rainbet.com
  3. Terms and conditions (KYC restrictions, inactive accounts) — Roobet roobet.com
  4. Terms of service (§2.2–2.3, §3.5–3.8, §6.2, §6.8) — Bovada www.bovada.lv
  5. KYC policies — Bovada www.bovada.lv
  6. Terms of service (§2.3, §6.2) — Ignition www.ignitioncasino.eu
  7. Terms of service (6, 11) — BC.Game bc.game
  8. Proof of source of income: acceptable documentation — Stake help help.stake.com
  9. Proof of identity: acceptable documentation — Stake help help.stake.com
  10. Help with withdrawals (coin mixing) — Stake help help.stake.com
  11. Terms of service (5.1–5.6, 11.6) — Shuffle shuffle.com
  12. Terms (7.1.11, 7.1.12, 21.1.5) — Cloudbet www.cloudbet.com
  13. Terms and conditions (28.2) — Monkey Tilt monkeytilt.com
  14. Terms and conditions (§15 KYC) — 20Bet 20bet.com
  15. Terms and conditions (§12.15, §18.6) — WinSpirit winspirit.com
  16. Terms (KYC deadline, 3.2, 5.3) — Thunderpick thunderpick.io
  17. Is Duelbits legit (verification around EUR 2,000, source of funds) — Duelbits help help.duelbits.com
  18. What happens to inactive accounts — Duelbits help help.duelbits.com
  19. Terms (4.3 VPN) — BitStarz www.bitstarz.com
  20. Terms and conditions (2.7) — BetUS www.betus.com.pa
  21. Terms of service (ToS 12 dormancy) — Wolf.bet wolfbet.com
  22. BetOnline rules (dormant accounts) — BetOnline help help.betonline.ag
  23. What information is required to verify my Kalshi account — Kalshi help help.kalshi.com
  24. Is my money safe (non-custodial wallets) — Polymarket help help.polymarket.com
  25. How do I complete KYC — Rollbit help help.rollbit.com
  26. Rollbit complaint: account closed after KYC level 4 — Casino Guru casino.guru
  27. Rollbit complaint: withdrawal blocked after three KYC levels — Casino Guru casino.guru
  28. Rollbit reviews ("Your funds have been forfeit") — Trustpilot www.trustpilot.com
  29. Linebet complaint: withdrawal held in security verification — Casino Guru casino.guru
  30. Linebet complaint: account balance confiscated — Casino Guru casino.guru
  31. Winnita complaint: €12,000 confiscated after account ban — Casino Guru casino.guru
  32. Winnita complaint: €3,825 withheld for multiple accounts — Casino Guru casino.guru
  33. Online gaming (complaints, not a civil court) — Curaçao Gaming Authority www.cga.cw
  34. Third-party complaint policy — Anjouan Gaming anjouangaming.com
  35. Authorized ADR providers — Anjouan Gaming anjouangaming.com

Questions people ask

Can a crypto casino keep my winnings?

The terms I have read allow it in defined cases: documents not sent before a deadline, play from a restricted territory or through a VPN, duplicate accounts and bonus abuse. Bovada says a balance accessed from a restricted state may be considered void; WinSpirit may seize the balance if documents are not provided within a month. Outside those clauses a refusal to pay is a dispute.

What is a source of funds check at a casino?

A request to show where the money you deposited came from. Rainbet's AML policy asks for it after its transaction monitoring flags an account; Stake lists bank statements, payslips and tax returns as proof of source of income. For crypto, the exchange purchase history and the withdrawal to your own wallet are the paper trail.

How long can a casino hold my withdrawal?

None of the operators I have read publishes a maximum for a verification hold. What they publish is your deadline: 5 days at Monkey Tilt, two weeks at 20Bet, 30 days at Thunderpick, one month at WinSpirit. Send documents the day they are requested and get the status in writing.

Why was my casino account closed after a win?

The usual stated reasons are a verification failure, a second account, a VPN or restricted location, or bonus and "non-recreational" play clauses. Ask support which clause applies, by number, and for the evidence. Shit List cases share one pattern: an accusation, no evidence and no reply to the mediator.

Does an inactive casino account lose its balance?

Often, yes. Duelbits forfeits balances after 12 months, Thunderpick zeroes them after 12 months with an email at month 11, and Bovada after 18 months with a warning at 17. Cloudbet charges USD 5 a month after 12 months instead. Withdraw before you stop playing.

Sites mentioned in this guide

Changelog

  • First full version: verification, deadline, breach and dormancy clauses from 17 operators' terms, source-of-funds section, Shit List cases, escalation steps.
  • Outline and brief.

Affiliate disclosure: some links to operators are affiliate links and may earn me a commission. They never change what a guide says. Details Nothing here is legal or financial advice.