Incaspin’s casino Anti Money Laundering Policy for Spain

Incaspin Casino maintains an Anti Money Laundering framework designed to meet both Spanish legal requirements and the international standards established by the Financial Action Task Force incaspin-casino.com.es. This policy sits in the casino’s legal and affiliates section and outlines the compliance steps encompassing every financial touchpoint — from player registration and deposits to onboarding affiliate partners and settling commissions. Management considers the prevention of money laundering and terrorist financing as a fundamental part of operating with integrity. All employees, contractors and affiliate partners must follow the procedures set forth here, so that Incaspin Casino remains a trusted, legally sound place to play. That commitment goes beyond ticking regulatory boxes. It means building a risk‑aware culture that safeguards the Spanish gaming community and the wider financial system from illegal activity.

Documentation and Data Protection Safeguards

The factual underpinning of Incaspin Casino’s AML programme depends on careful record‑keeping that meets both the data retention rules of Spanish money laundering law and the data protection principles of the General Data Protection Regulation, as applied by Organic Law 3/2018 in Spain. The casino keeps all due diligence documentation, transaction logs, business correspondence about account activity and internal investigation files for ten years after the business relationship ends or an occasional transaction is carried out. This retention window guarantees records stay available for later inspection by the DGOJ, SEPBLAC or law enforcement bodies looking into historical matters. Data is stored in encrypted repositories with access controls limited to authorised compliance staff, and a strict deletion protocol ensures materials securely destroyed once the statutory period runs out. Regular audits confirm that the storage infrastructure meets security standards and that no unauthorised copies exist. The records kept for AML purposes are divided into these categories:

• Identity verification documents and the results of electronic identity checks, including any discrepancies flagged during onboarding and how they were resolved.
• Detailed time-ordered registers of every financial transaction, showing the date, amount, currency, payment instrument, IP address, device fingerprint and geolocation data when available.
• Unusual transaction reports, internal investigation notes and the evidence that supported the choice to file or not file a report with the financial intelligence unit.
• Communications between the casino and the player about account queries, source of funds requests or clarifications tied to enhanced due diligence steps.

Extended Due Diligence for Elevated-Risk Profiles

Incaspin Casino’s risk categorisation engine automatically flags accounts that meet predetermined high‑risk criteria for money laundering, directing them into a deeper due diligence workflow. Politically exposed persons, their family members and close associates are recognized through regular screening against global PEP lists and must get senior management approval before any business relationship starts or continues. The same strict standard applies to legal persons, trusts and other structures where the real beneficial owner cannot be easily identified or where ownership chains involve places with weak transparency registers. Enhanced due diligence means collecting extra information about the purpose and expected nature of the business relationship, checking the source of wealth more forensically, and tracking transactions more often than the baseline risk profile requires. Each enhanced review creates a detailed internal report that documents the reason for accepting or rejecting the account, the verifying evidence collected and the approval chain. If information gaps persist after reasonable effort, the casino maintains the right to refuse service and, where there is a suspicion of money laundering, to file a report with SEPBLAC without telling the customer, strictly following the tipping‑off prohibition.

Spanish regulatory Legal Framework and Licensing Duties

Incaspin Casino possesses a permit from Spain’s gambling watchdog, which applies stringent anti‑money laundering terms rooted in Law 13/2011 on gambling control and the more detailed Law 10/2010 on preventing money laundering and terrorist financing. The regulatory landscape is reinforced by Royal Decree 304/2014 and the compulsory directives issued by SEPBLAC, Spain’s financial intelligence unit located within the Bank of Spain. Complying with these laws entails Incaspin Casino must run a fully documented AML programme encompassing customer due diligence, ongoing oversight, suspicious transaction reporting and record retention. The licensing stipulations also demand a assigned compliance officer who reports directly directly to the board on financial crime deterrence. Penalties for failing to comply can include substantial monetary penalties, licence suspension and major reputational injury, which is why the casino’s internal measures are designed to surpass minimum legal standards. Grounding the policy in this Spanish legal structure shows a legally justifiable approach that meets supervisory standards and offers players a protected setting for their bets.

Partner Program AML Requirements and Partner Due Diligence

The Incaspin Casino affiliate programme operates cleanly through a due diligence process that pushes AML expectations beyond the operator itself. Before any partnership deal goes live, prospective affiliates are subjected to screening that checks their business registration, tax standing, beneficial ownership and the reputation of their digital properties. Partners enter into a contract obligating them to promote the casino in a way that prevents drawing anonymous, high‑risk traffic, and they must not publish content that might be interpreted as enabling money laundering or structuring financial flows. The affiliate agreement provides Incaspin Casino the right to audit the partner’s referral practices and to suspend commissions on the spot if suspicious patterns emerge, such as a cluster of low‑activity accounts generating unusually high commission volumes. Affiliates also must run their own basic know‑your‑customer checks on sub‑affiliates and report any concerns to the casino’s compliance department without delay. By connecting the marketing ecosystem that serves the Spanish platform into the same vigilance that drives internal AML controls, Incaspin Casino creates a full shield against financial crime — from the first promotional click right through to the final withdrawal settlement.

Scope and Commitment to AML Conformity

This Anti Money Laundering Guideline covers every product line, customer group and promotional channel Incaspin Casino operates under its Spanish licence. That encompasses real‑money casino games, live dealer experiences, sports betting integrations and any future gambling services. Compliance obligations apply vertically through the whole value chain, from the first customer onboarding check through ongoing transaction monitoring, periodic reviews and, where necessary, ending business relationships. The policy also covers the affiliate network, requiring every partner to operate in a way that does not facilitate or conceal the movement of dirty money. By integrating AML controls into daily operations, Incaspin Casino detects risk indicators at the earliest possible stage. The leadership team evaluates the policy’s scope every year, revising it to reflect changes in Spanish law, guidance from the Dirección General de Ordenación del Juego and new financial crime patterns. That ensures the document alive and responsive to the threats we confront.

Staff Training and Regulatory Culture

Incaspin Casino understands that even the finest technical controls can fall short if the people managing them are not proficient in financial crime prevention. So the casino allocates resources to ongoing training that equips every staff member the expertise to spot red flags, understand their reporting duties and comprehend the legal fallout of non-compliance. New employees go through a mandatory induction covering the basics of Spanish AML law, the internal reporting chain and the confidentiality principle, while current staff undergo annual refresher courses that integrate recent regulatory changes and real, anonymised case studies from the industry. The training is split by role: customer‑facing agents receive scenarios concentrated on player interactions and verbal cues, while compliance analysts go deeper into transaction pattern analysis and report writing. Board‑level executives are briefed on strategic risk shifts and the consequences of enforcement actions observed across the European gambling sector. A robust whistleblowing channel enables any employee raise concerns anonymously through an independent route, reinforcing a culture where the platform’s integrity belongs to everyone, not just one department.

Risk-Focused Methodology and Internal Controls

Every AML measure at Incaspin Casino is adjusted through a dynamic risk‑based methodology, following the methodology endorsed by the European Banking Authority and Spanish supervisory authorities. The compliance team runs a broad, enterprise‑wide risk assessment at least once a twelve-month period, looking at product vulnerabilities, delivery channels, customer demographics and where player accounts are situated. What they discover defines the intensity of due diligence, transaction monitoring trigger levels and where compliance resources are focused. Internal controls comply with a recorded policy framework that contains clear escalation routes, segregated duties and independent audit reviews. A risk appetite statement endorsed by senior management defines the limits the casino is prepared to work under, so that higher‑risk situations always receive more examination. The list below presents the main risk categories that affect how closely controls are applied to individual accounts and partners:

• Regional risk: susceptibility to countries Spanish authorities mark as having weak AML frameworks or high dishonesty.
• Game risk: games or payment methods that permit fast money movement, high‑stakes anonymity or person‑to‑person transfers.
• Client risk: profiles featuring non‑resident individuals, complex corporate setups or jobs that often process lots of cash.
• Deal risk: patterns like frequent small payments, immediate cashouts with little activity, or financing from third parties.
• Affiliate risk: partners working in unregulated referral areas or using marketing that attracts anonymous, unverified visitors.

Reporting Obligations to SEPBLAC

Under Spanish law, Incaspin Casino is an obliged entity and therefore has a legal duty to send suspicious transaction filings to the Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offences, known as SEPBLAC. The reporting process activates whenever the compliance team has reasonable grounds to infer that a transaction or a connected series of transactions is connected to money laundering or terrorist financing, regardless of the amount. In those situations, the appointed compliance officer prepares a restricted report through SEPBLAC’s protected electronic channels, specifying the subject’s identity, the character of the suspicious activity, the financial trail and any confirming information obtained during the internal investigation. The report is submitted within the statutory deadlines and the casino refrains from completing the transaction until a reply comes back, unless postponing it is not feasible or would hinder the investigation. All employees are under a rigorous requirement to keep the fact of reporting and the content of any report absolutely confidential. Telling the customer or an unauthorised third party is a criminal violation under Spanish anti‑money laundering law. Incaspin Casino tracks the outcome of each report, using judicial input and typology revisions to strengthen its internal monitoring procedures.

Transaction Oversight and Suspicious Activity Detection

Incaspin Casino operates an automated transaction monitoring system that operates nonstop, examining every deposit, withdrawal and platform transfer for patterns that stray from expected behaviour. The system integrates rule‑based scenarios written by compliance analysts, machine learning models trained on historical data and real‑time sanctions screening at the moment of each financial event. When a transaction activates an alert, a compliance operations team member examines the context, evaluating the customer profile, game history and the nature of the alert before deciding if it is legitimate. The investigation is time-stamped and stored in the case management module, creating a defensible audit trail that can be shown to Spanish regulators on request. The casino maintains a library of suspicious activity indicators that is constantly sharpened through feedback loops and typology reports published by SEPBLAC and international partners. Some of the indicators that often trigger closer scrutiny include:

• Structuring activity, where a player deliberately divides a large transaction into several smaller amounts to stay under reporting thresholds or evade internal alarms.
• Quick money cycling, with withdrawal requests shortly after a deposit and minimal play, implying the casino is being used as a banking substitute.
• Several accounts operating from a single device, IP cluster or financial instrument, especially when money moves between accounts in a way that conceals the origin of funds.
• Discrepancies between stated occupation, income and betting volumes — for example, a student profile generating six‑figure monthly turnover without a clear explanation.
• Regular modifications to personal details like email, phone number and residential address within short periods, which can signal efforts to hide identity and restart monitoring cycles.

Identity Verification and Verification Measures

No user gets a business connection with Incaspin Casino until thorough customer due diligence is complete. The identification process follows the “know your customer” rule Spanish law demands, obliging every person to submit valid information that gets validated against reliable documents or electronic databases. The compliance team runs real‑time checks against required watch lists, politically exposed persons databases and watch lists kept by European and international agencies. If a potential match is found, the account is frozen immediately while a manual investigation takes place, and a report is sent to SEPBLAC if necessary. Verification is not a one‑time door‑check. It stays active through the whole relationship, with periodic reviews initiated by changes in account behaviour, large withdrawals or when official documents expire. Incaspin Casino presents the documents needed in a clear order so players are aware of what to provide to activate and keep their accounts. The standard documents asked for over the life of a player account include:

• A valid government‑issued identity document — passport, national ID card or Spanish residence permit — showing a clear photograph and a traceable reference.
• A recent utility bill, bank statement or tax form that confirms the player’s registered residential address and is no older than three months.
• Ownership verification of the payment method used, which may be a redacted screenshot of an e‑wallet profile, a photo of the physical payment card showing the first six and last four digits, or a bank certificate.
• When cumulative deposits reach a set threshold, a source of funds declaration backed by salary slips, tax returns or investment account statements.