Business flows and player flows are separate problems
Every online gambling business has two money cycles. The first is the player cycle: deposits come in by card, bank transfer, e-wallet or local payment method, and withdrawals go back out. The second is the business cycle: the operator receives settlements from its processors, pays its platform and game suppliers, pays affiliates, settles licence fees and gaming taxes, and funds payroll and hosting.
These cycles involve different counterparties, different risks and usually different providers. Player funds normally move through specialist payment processors that hold the merchant relationships, run fraud tools and manage chargebacks. A treasury or FX provider sits further downstream. It receives money that has already been through a processor's controls and moves it between the operator's own accounts and its commercial counterparties.
Mixing the two in an application causes confusion. If you approach a business-to-business provider and describe player deposit volumes as the activity you want to run through the account, the reviewer will assume you are looking for consumer collection, and the file may be closed on that basis alone. Be explicit from the first email: state which flows you want to move, who sends the money, who receives it, and in which currencies.
Licences and the markets you actually serve
The licence is the first document any reviewer opens. They want to see the licensing authority, the licensed entity, the licence type, the expiry or renewal date, and the scope of activity it covers. Common licensing authorities include the Malta Gaming Authority, the Isle of Man Gambling Supervision Commission, the Curaçao Gaming Authority, the Kahnawake Gaming Commission and national regulators such as the UK Gambling Commission or the Ontario regime run by iGaming Ontario and the AGCO.
A single licence is rarely the whole picture. A reviewer will compare the licence against the markets where you take players. If your traffic reports show material revenue from a country that runs its own licensing system, the provider will ask for that local licence or for evidence that you block the market. A Curaçao or Malta licence does not, by itself, authorise an operator to take players in a country with a closed or locally licensed regime.
Prepare a short market table: each country you serve, the licence that covers it, and the share of gross gaming revenue it contributed over the last twelve months. Then list the countries you exclude and how you exclude them. This one page answers a large share of the questions a compliance analyst would otherwise send back in writing. Our separate guide to geo-blocking and market licensing covers the evidence side in more depth.
Group structures and who the customer really is
Most established operators run through several companies. A typical arrangement might include a licensed operating entity in Malta or the Isle of Man, a Curaçao entity for other markets, a Cyprus or BVI holding company, a marketing services company and an intellectual property company that owns the brands and platform rights. Each company has its own bank accounts, contracts and tax position.
A provider needs to know which entity will be its customer and how that entity fits into the group. Expect to supply a structure chart showing every company between the applicant and the ultimate beneficial owners, with percentages and jurisdictions. Anyone holding 25 per cent or more is usually treated as a beneficial owner, and many providers apply a lower threshold for higher-risk sectors, so be ready to identify people holding 10 per cent or more.
The flows also need to make sense against the structure. If the licensed operator in Malta receives processor settlements and then pays a Cyprus company a large monthly service fee, the reviewer will want the intercompany agreement and an explanation of what the Cyprus company does. Flows that move value around a group with no clear commercial reason are a common reason for extra questions. A clean chart and a set of signed intercompany agreements remove most of that friction.
Affiliates and marketing payments
Affiliate payouts are one of the largest outgoing business flows for many operators, and they draw close attention. An operator might pay hundreds of affiliates each month across many countries, in amounts ranging from small sums to large revenue share payments. Each payment goes to a third party that the provider has never met.
Reviewers want to see that you run your own due diligence on affiliates. That means a written onboarding process, identity and company checks, sanctions screening, signed terms that prohibit misleading advertising and marketing to excluded markets, and a way to terminate partners who break the rules. They will also look at the payout file itself: a batch with clear references, invoice numbers and amounts that tie back to your affiliate platform reports.
Expect questions about concentration. If a single affiliate receives a very large share of the monthly budget, the provider may ask who sits behind that affiliate and whether it is connected to the operator's owners. Related-party affiliates are not prohibited, but they need to be disclosed. Our guide to affiliate payments compliance goes through the controls in detail.
AML and responsible gambling policies
A payment provider is not your regulator, but it relies on your controls. Its own anti-money laundering obligations require it to understand how you prevent criminal funds entering the business. So the policies you submit to your licensing authority are also the policies a provider wants to read.
The AML policy should cover customer due diligence for players, enhanced checks for high-value or high-risk players, source of funds and source of wealth thresholds, transaction monitoring rules, sanctions and politically exposed person screening, suspicious activity reporting and record keeping. Name the money laundering reporting officer and show that the role sits with a real person who has the authority to act.
The responsible gambling policy should cover deposit limits, cooling-off and self-exclusion, participation in any national self-exclusion schemes that apply in your markets, affordability or risk indicators, and how staff are trained to intervene. A reviewer is looking for policies that match the business. A thin generic document that refers to a market you do not serve, or omits a market you do, suggests the controls exist on paper only.
Processing statements and what they show
Processing statements are the closest thing a provider has to an independent view of your trading. They come from the processors who handle your player payments and show volumes, refunds, chargebacks, fees and net settlements. Most providers ask for three to six months of statements, and sometimes more for a new relationship.
Reviewers read these statements for several things. They check that the merchant name matches the licensed entity. They compare volumes with the figures in your application and your financial statements. They look at chargeback ratios, because a high ratio can indicate fraud problems, weak player verification or a processor relationship at risk of termination. They also look at the settlement pattern, since that is the money that will arrive in your treasury account and be converted or paid onward.
If your statements show a reserve or rolling reserve, explain it. If a processor relationship ended recently, explain why. Gaps and surprises are what slow a file down, and a short covering note answering the obvious questions before they are asked will save a round of correspondence. Our guide to processor settlement reconciliation explains how those statements tie into treasury.
What gets declined
Some applications cannot be approved however well they are presented. The most common reasons are predictable.
- No licence, or a licence that does not cover the activity. An application from a business that is waiting for a licence, or that relies on a licence held by an unrelated company, will not progress.
- Players in markets without local authorisation. Material revenue from a country where the operator needs a local licence and does not have one is usually decisive.
- Requests to handle player money. A business-to-business provider will decline a request to collect player deposits or pay withdrawals, even if the operator is fully licensed.
- Opaque ownership. Nominee shareholders with no disclosed principal, or trusts and foundations where the settlor and beneficiaries are not identified, stop a file.
- Unexplained flows. Payments to parties with no contract, or round sums moving between unrelated companies, raise questions that many applicants cannot answer.
- Adverse information. Regulatory sanctions, criminal proceedings or credible press reports about the owners or the brand will be weighed carefully and can lead to a decline.
None of this is unusual. These are the same tests your bank, your processors and your licensing authority apply. Passing them once makes every later application easier.
The document pack
The list below is typical for a business-to-business treasury and payments relationship. Individual providers vary, and a regulated group with a long trading history may be asked for less than a newer business.
| Document | What the reviewer checks |
|---|---|
| Gaming licence for each licensed entity | Licensed entity name, authority, licence type, validity and scope |
| Market table with GGR by country | That every market served is covered by a licence or is legally open |
| Corporate documents and registers | Incorporation, directors, shareholders and good standing |
| Group structure chart | Every entity up to the ultimate beneficial owners, with percentages |
| Identity and address documents for owners and directors | Who controls the business and whether any are politically exposed |
| AML and responsible gambling policies | That controls match the markets and products |
| Processing statements, three to six months | Volumes, chargebacks, reserves and settlement pattern |
| Latest financial statements or management accounts | Scale, profitability and consistency with stated volumes |
| Key supplier and affiliate agreements | Commercial basis for the payments you plan to make |
| Intercompany agreements | Reason for flows between group companies |
| Expected flow summary | Currencies, monthly volumes, counterparties and countries |
How to prepare before you apply
Good preparation shortens any review. Start by writing a one-page business summary in plain language: what you operate, which brands, under which licences, in which markets, and what you need the provider to do. Avoid marketing language. A compliance analyst wants facts they can verify.
Then build an expected flow summary. As an illustrative example only, it might read: incoming processor settlements in EUR, GBP and CAD of roughly a stated amount each month; outgoing supplier payments in EUR and USD to named platform and game providers; affiliate batches twice a month in EUR and USD; quarterly licence fees and gaming tax payments to named authorities. This lets the provider size the relationship and spot anything that does not fit.
Check that names match everywhere. The licensed entity on the licence, the merchant name on processing statements, the account holder name on bank statements and the contracting party on supplier agreements should line up. Mismatches are a common source of delay, and they are easy to fix in advance.
Finally, appoint one person to handle the application. Questions answered quickly and consistently by someone who understands both the business and its compliance framework will move a file faster than any other single step.
General information, not legal advice
This article is general information about how payment and FX providers tend to assess licensed iGaming businesses. It is not legal advice, and requirements differ between providers, licensing authorities and markets. Take advice from qualified gaming lawyers on your licensing position.
CCYFX provides Foreign exchange, International payments, and Collections and payouts to businesses. It does not handle player deposits or withdrawals. Our iGaming industry page sets out what an application involves.
