The sector in brief
The UAE has created a federal regulator for commercial gaming, the General Commercial Gaming Regulatory Authority, which licenses and supervises operators. Gaming is a sector with a long international history of AML problems, so operators entering the market are expected to design strong controls from the start.
Gaming lets someone turn money into chips, credits or bets, play for a short time and cash out as winnings or refunds. A player who deposits a large sum, plays little and withdraws can convert illicit cash into something that looks like a lawful payout. Even real winnings can be a cover for funds that came from elsewhere.
The channels matter as well. Online operators deal with players they never meet, in many countries, and with many payment methods. Physical venues deal with cash, chips and large numbers of walk-in players. Each setting needs its own controls.
Where the risk sits
Low-play, high-deposit behaviour
A player who deposits a large amount, plays little and withdraws is using the operator to move money and not to gamble.
Cash and chips
Large cash buy-ins, passing chips to others and cashing out chips bought with someone else's money obscure the origin of funds.
Online accounts and mules
Accounts opened under false or borrowed identities, or controlled by someone other than the named player, are a feature of online laundering.
Collusion between players
Players who deliberately lose to each other, or deliberately pass money through games, can move value between them.
High rollers and politically exposed persons
Big-spending players may include people whose wealth needs a clear explanation, including public officials.
Payment methods
Prepaid cards, virtual assets and third-party payments make it harder to link money to a verified player.
Who supervises you
Licensed commercial gaming operators in the UAE are supervised by the General Commercial Gaming Regulatory Authority. The conditions attached to your licence set out many of your duties, so read them alongside the AML framework, and ask the regulator if anything is unclear.
The supervisor decides the detailed rules for your licence category, so always read its current guidance alongside this page.
What supervisors expect
- A Compliance Officer or MLRO with real authority, and board-level ownership of the AML programme.
- A business risk assessment covering players, products, channels, payment methods and countries.
- Player due diligence at the points your licence conditions require, with stronger checks for large deposits, high spend and higher-risk players.
- Source of funds checks for higher-risk players, and a refusal to pay out where the source is not understood.
- Sanctions and politically exposed person screening, with documented review of matches.
- Monitoring of deposits, play and withdrawals for unusual patterns, with alerts reviewed and recorded.
- Reporting through goAML, staff training, record keeping and independent testing of the programme.
Red flags to watch
- A player who deposits and withdraws with little or no play.
- Deposits from accounts or cards in someone else's name.
- Several accounts that share a device, address or payment method.
- Chips passed between players or cashed out by someone other than the buyer.
- A player who becomes upset when asked about the source of funds.
- Betting that seems designed to lose, such as bets on opposing sides.
A worked example
A large deposit, a few bets and a request to withdraw
A new online player deposits a large sum by card, places a handful of low-risk bets and then asks to withdraw the whole balance to a different payment method. The operator's rules flag the pattern. An analyst checks that the card belongs to the player, asks about the source of funds and the reason for the withdrawal method, and holds the payout until the answers are reviewed. If the player cannot explain, the operator refuses to pay out to the new method, and the Compliance Officer considers a report.
How Adventant helps
Questions answered
Which regulator supervises gaming in the UAE?
Licensed commercial gaming operators are supervised by the General Commercial Gaming Regulatory Authority. The authority's licence conditions and guidance set many of the specific duties.
When must we identify a player?
At the points set by your licence conditions and the AML rules, which can depend on the channel and the amounts involved. Many operators identify at registration and apply more checks as deposits or play increase.
Can we pay winnings to a different account?
Supervisors generally expect payouts to go back to the player through a verified method, and treat payment to a third party or a new method as high risk. If you ever allow an exception, record why and apply extra checks.
How do we handle problem gambling and AML together?
They are separate duties but can use the same signals. Unusual deposits or behaviour may indicate either. Make sure the teams share information within the limits of privacy rules.
Do virtual assets create special problems?
Yes, because the funds are harder to link to a verified person. If the operator allows them, it needs additional controls such as wallet screening and strict identity checks. Follow the regulator's guidance on what is permitted.
