The Incaspin casino Anti Money Laundering Policy for Spain

incaspincasino asociación afiliada operates an Anti Money Laundering programme built to match both Spanish legal standards and the international standards established by the Financial Action Task Force. This policy appears in the casino’s legal and affiliates section and describes the compliance steps addressing every financial touchpoint — from player registration and deposits to integrating affiliate partners and processing commissions. Management considers the prevention of money laundering and terrorist financing as a fundamental part of operating with integrity. All employees, contractors and affiliate partners must adhere to the procedures set forth here, so that Incaspin Casino stays a trusted, legally sound place to play. That commitment extends beyond ticking regulatory boxes. It involves building a risk‑aware culture that defends the Spanish gaming community and the wider financial system from illegal activity.

Scope and Obligation to AML Compliance

This Anti Money Laundering Framework encompasses every product line, customer group and promotional channel Incaspin Casino operates under its Spanish licence. That comprises real‑money casino games, live dealer experiences, sports betting integrations and any future gambling services. Compliance obligations reach vertically through the whole value chain, from the first customer onboarding check through ongoing transaction monitoring, periodic reviews and, where necessary, ending business relationships. The policy also covers the affiliate network, requiring every partner to operate in a way that does not assist or obscure the movement of dirty money. By integrating AML controls into daily operations, Incaspin Casino spots risk indicators at the earliest possible stage. The leadership team reviews the policy’s scope every year, refreshing it to incorporate changes in Spanish law, guidance from the Dirección General de Ordenación del Juego and new financial crime patterns. That ensures the document current and reactive to the threats we encounter.

Risk-Focused Methodology and Internal Controls

Every AML measure at Incaspin Casino is adjusted through a living risk‑based strategy, following the methodology endorsed by the European Banking Authority and Spanish supervisory bodies. The compliance team conducts a broad, enterprise‑wide risk analysis at least once a twelve-month period, examining product weaknesses, delivery methods, customer profiles and where player accounts are based. What they discover determines the intensity of due investigation, transaction monitoring trigger points and where compliance resources are allocated. Internal controls comply with a documented policy system that contains clear escalation routes, separated duties and independent audit checks. A risk appetite declaration endorsed by senior management establishes the parameters the casino is ready to work inside, so that higher‑risk situations always get more scrutiny. The list below shows the main risk types that affect how tightly controls are enforced to individual accounts and associates:

• Regional risk: exposure to countries Spanish authorities identify as having weak AML frameworks or high dishonesty.
• Service risk: games or payment methods that permit fast money transfers, high‑stakes privacy or person‑to‑person transactions.
• Customer risk: profiles featuring non‑resident persons, complex corporate setups or jobs that often handle lots of money.
• Deal risk: trends like frequent small credits, immediate cashouts with little gaming, or financing from third parties.
• Partner risk: partners working in unregulated referral markets or using marketing that attracts anonymous, unverified users.

Transaction Surveillance and Suspicious Transaction Detection

Incaspin Casino operates an automated transaction monitoring system that runs continuously, reviewing every deposit, withdrawal and platform transfer for patterns that stray from expected behaviour. The system integrates rule‑based scenarios written by compliance analysts, machine learning models trained on historical data and real‑time sanctions screening at the moment of each financial event. When a transaction activates an alert, a compliance operations team member analyzes the context, assessing the customer profile, game history and the nature of the alert before determining if it is legitimate. The investigation is timestamped and stored in the case management module, establishing a defensible audit trail that can be demonstrated to Spanish regulators on request. The casino holds a library of suspicious activity indicators that is constantly refined through feedback loops and typology reports released by SEPBLAC and international partners. Some of the indicators that often trigger closer scrutiny include:

• Structuring activity, where a player deliberately divides a large transaction into several smaller amounts to avoid reporting thresholds or evade internal alarms.
• Rapid fund movement, with withdrawal requests immediately following a deposit and hardly any play, implying the casino is being used as a pseudo‑banking channel.
• Numerous accounts operating from a single device, IP cluster or financial instrument, especially when money flows between accounts in a way that layers the origin of funds.
• Mismatches between stated occupation, income and betting volumes — for example, a student profile running six‑figure monthly turnover without a clear explanation.
• Frequent changes to personal details like email, phone number and residential address within short periods, which can suggest efforts to mask identity and reset monitoring cycles.

Spanish regulatory Legal System and Licence Requirements

Incaspin Casino possesses a licence from Spain’s gambling authority, which imposes stringent anti‑money laundering requirements grounded in Law 13/2011 on gambling control and the more detailed Law 10/2010 on preventing money laundering and terrorist funding. The regulatory landscape is reinforced by Royal Decree 304/2014 and the compulsory rules released by SEPBLAC, Spain’s financial intelligence unit located within the Bank of Spain. Meeting these laws requires Incaspin Casino must operate a fully recorded AML programme encompassing customer due diligence, ongoing oversight, suspicious transaction notification and record keeping. The licensing demands also mandate a appointed compliance officer who reports directly directly to the board on financial crime prevention. Punishments for failing to comply can encompass significant fines, licence revocation and major reputational harm, which is why the casino’s internal safeguards are structured to go beyond minimum legal thresholds. Basing the policy in this Spanish legal structure reflects a legally defensible stance that satisfies supervisory expectations and offers players a safe atmosphere for their wagers.

Data Storage and Privacy Safeguards

The evidentiary foundation of Incaspin Casino’s AML programme relies on careful record‑keeping that satisfies both the data retention rules of Spanish money laundering law and the data protection principles of the General Data Protection Regulation, as put into practice by Organic Law 3/2018 in Spain. The casino stores all due diligence documentation, transaction logs, business correspondence about account activity and internal investigation files for ten years after the business relationship ends or an occasional transaction is carried out. This retention window guarantees records stay available for later inspection by the DGOJ, SEPBLAC or law enforcement bodies examining historical matters. Data is stored in encrypted repositories with access controls limited to authorised compliance staff, and a strict deletion protocol guarantees materials securely destroyed once the statutory period runs out. Regular audits check that the storage infrastructure meets security standards and that no unauthorised copies exist. The records kept for AML purposes are divided into these categories:

• Proof of identity and the results of electronic identity checks, including any discrepancies flagged during onboarding and how they were resolved.
• Detailed time-ordered registers of every financial transaction, showing the date, amount, currency, payment instrument, IP address, device fingerprint and geolocation data when available.
• Suspicious activity reports, internal investigation notes and the evidence that supported the choice to file or not file a report with the financial intelligence unit.
• Written messages between the casino and the player about account queries, source of funds requests or clarifications tied to enhanced due diligence steps.

Extended Due Diligence for High-Risk Profiles

Incaspin Casino’s risk categorisation engine routinely flags accounts that meet predefined high‑risk criteria for money laundering, sending them into a more comprehensive due diligence workflow. Politically exposed persons, their family members and close associates are detected through regular screening against global PEP lists and must get senior management approval before any business relationship begins or continues. The same strict standard is enforced to legal persons, trusts and other structures where the real beneficial owner cannot be readily identified or where ownership chains involve places with weak transparency registers. Enhanced due diligence means collecting extra information about the purpose and expected nature of the business relationship, scrutinizing the source of wealth more forensically, and reviewing transactions more often than the baseline risk profile requires. Each enhanced review produces a detailed internal report that records the reason for accepting or rejecting the account, the verifying evidence collected and the approval chain. If information gaps persist after reasonable effort, the casino reserves the right to refuse service and, where there is a suspicion of money laundering, to file a report with SEPBLAC without telling the customer, strictly adhering to the tipping‑off prohibition.

Reporting Duties to SEPBLAC

Under Spanish law, Incaspin Casino is an obligated entity and therefore has a statutory duty to send suspicious transaction reports to the Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offences, known as SEPBLAC. The reporting system kicks in whenever the compliance team has justifiable grounds to suspect that a operation or a linked chain of transactions is linked to money laundering or terrorist financing, without regard to the amount. In those instances, the assigned compliance officer prepares a restricted report through SEPBLAC’s safe electronic channels, specifying the subject’s particulars, the nature of the suspicious conduct, the financial trail and any supporting information gathered during the internal probe. The report is sent within the regulatory deadlines and the casino holds off executing the transaction until a answer is received, unless postponing it is not feasible or would hinder the inquiry. All employees are under a rigorous requirement to keep the fact of reporting and the details of any report strictly confidential. Informing the customer or an unapproved third party is a criminal offense under Spanish anti‑money laundering law. Incaspin Casino monitors the resolution of each filing, using judicial feedback and typology changes to strengthen its internal monitoring protocols.

Identity Verification and Screening Procedures

No customer gets a business connection with Incaspin Casino until complete identity verification is complete. The verification procedure follows the “know your customer” rule Spanish law mandates, obliging every person to submit correct personal details that gets checked against official papers or electronic databases. The compliance team performs real‑time checks against official blacklists, politically exposed persons databases and watch lists kept by European and international agencies. If a potential match turns up, the account is blocked immediately while a manual investigation is conducted, and a report is sent to SEPBLAC if necessary. Verification is not a one‑time door‑check. It remains ongoing through the whole relationship, with periodic reviews activated by changes in account behaviour, large withdrawals or when official documents become invalid. Incaspin Casino lists the documents needed in a structured format so players are aware of what to provide to enable and retain their accounts. The standard documents asked for over the life of a player account include:

• A valid government‑issued identity document — passport, national ID card or Spanish residence permit — showing a visible photo and a valid ID number.
• A recent utility bill, bank statement or tax form that proves the player’s registered residential address and is no older than three months.
• Proof of ownership of the payment method used, which may be a redacted screenshot of an e‑wallet profile, a photo of the physical payment card showing the first six and last four digits, or a bank certificate.
• When cumulative deposits reach a set threshold, a source of funds declaration backed by salary slips, tax returns or investment account statements.

Workforce Development and Regulatory Culture

Incaspin Casino recognizes that even the strongest technical controls can fall short if the people running them are not fluent in financial crime prevention. So the casino invests in ongoing training that gives every staff member the expertise to spot red flags, comprehend their reporting duties and grasp the legal fallout of non-compliance. New employees go through a mandatory induction focusing on the basics of Spanish AML law, the internal reporting chain and the confidentiality principle, while current staff undergo annual refresher courses that integrate recent regulatory changes and genuine, anonymised case studies from the industry. The training is divided by role: customer‑facing agents get scenarios centered on player interactions and verbal cues, while compliance analysts go deeper into transaction pattern analysis and report writing. Board‑level executives are updated on strategic risk shifts and the consequences of enforcement actions witnessed across the European gambling sector. A solid whistleblowing channel lets any employee report issues anonymously through an independent route, strengthening a culture where the platform’s integrity is the responsibility of everyone, not just one department.

Affiliate Programme AML Requirements and Due Diligence for Partners

The Incaspin Casino affiliate programme operates cleanly through a due diligence process that extends AML expectations beyond the operator itself. Before any partnership deal launches, prospective affiliates undergo screening that checks their business registration, tax standing, beneficial ownership and the reputation of their digital properties. Partners enter into a contract requiring them to promote the casino in a way that avoids attracting anonymous, high‑risk traffic, and they must not publish content that could be considered enabling money laundering or structuring financial flows. The affiliate agreement gives Incaspin Casino the right to audit the partner’s referral practices and to suspend commissions on the spot if suspicious patterns emerge, such as a cluster of low‑activity accounts generating unusually high commission volumes. Affiliates also are required to run their own basic know‑your‑customer checks on sub‑affiliates and report any concerns to the casino’s compliance department without delay. By linking the marketing ecosystem that feeds the Spanish platform into the same vigilance that drives internal AML controls, Incaspin Casino creates a full shield against financial crime — from the first promotional click right through to the final withdrawal settlement.