iGaming

Age and identity verification for online gambling

Settle player age and identity in one wallet step, before the first deposit.

Use case
Age verification
Wallet data
PID
Authbound capability
Identity Verification
Flow
Verify
What changes

Before and after the wallet

Today

  1. Upload ID
  2. Selfie and liveness
  3. Manual review
  4. Deposit limits and your licence checks

With the EUDI Wallet

  1. Approve in wallet
  2. Authbound verifies
  3. age_over_18 and identity
  4. Deposit limits and your licence checks

The wallet changes how the evidence is collected. The step at the end stays yours.

The problem

Why this is worth changing

For the business
Players drop out between registration and first deposit, which is the most expensive place to lose them.
For the user
Uploading an ID and taking a selfie just to place a bet feels out of proportion.
For operations
The operator ends up storing passport images and running a manual review queue.

Why the wallet helps

Ask for the attributes your licence names, and ask for age as a signed boolean rather than a birth date where the rules allow it. You get proof the player is an adult without learning when they were born. Screenshots do not work, because the credential is tied to the holder’s device.

  • Age and identity settled in one step, not an upload and a wait
  • Borrowed documents and screenshots fail on device binding
  • You store a boolean instead of a birth date
User journey

What actually happens

  1. 01

    You request specific attributes

  2. 02

    The user gets the request by QR or deep link

  3. 03

    The wallet shows exactly what is asked

  4. 04

    The user approves on their device

  5. 05

    The wallet presents the signed credential

  6. 06

    Authbound verifies the presentation

  7. 07

    Your backend receives a structured result

  8. 08

    Your existing workflow continues

How it works

Three steps with Authbound

  1. Step 01

    Verify at registration

    The player hits the identity step and the flow opens in place, as a QR code or a deep link.

  2. Step 02

    Request what the licence names

    Usually name, nationality and age_over_18. Age comes back as a proof, not a date, wherever your regulator permits it.

  3. Step 03

    Unlock the account

    A verified result lifts deposit and withdrawal limits and leaves you a signed record for the regulator.

Technical flow

  1. Your application
  2. Authbound API
  3. Wallet request
  4. Presentation
  5. Trust and revocation checks
  6. Your backend
Technical details
const verification = await authbound.verifications.create({
  policyId: 'pol_…',      // the claims this flow requests
  customerUserRef: user.id,
});

// Your webhook then receives verification.completed
// with the verified result and its audit record.
  • Request: an OpenID4VP presentation request built from your policy.
  • Hand-off: QR code on desktop, deep link on mobile.
  • Checks: issuer against the EU trust lists, status list revocation, device binding.
  • Result: structured claims plus an audit record, delivered by webhook.
Who does what

What Authbound handles, what you handle

Authbound handles

  • The wallet request, with QR on desktop and a deep link on mobile
  • Verifying the presentation the wallet returns
  • Checking the issuer against the EU trust lists
  • Revocation and device binding checks
  • A structured result delivered to your backend
  • An audit record of every verification

Your application handles

  • Choosing which attributes the flow requests
  • Your business logic and account creation
  • Deposit limits and your licence checks
  • Risk and fraud decisions
  • How long you keep the result
  • A path for users without a wallet
What's involved

Credentials, standards and rules

Wallet presents

  • PID

Regulatory context

National gambling licence conditions, eIDAS 2.0, GDPR data minimisation

Age and identity requirements come from your national gambling licence, not from eIDAS. eIDAS 2.0 gives you a high-assurance way to meet them, and GDPR data minimisation favours asking for age_over_18 rather than a birth date. Affordability, source of funds, AML and self-exclusion checks remain your responsibility.

Aurora Bet demo
Live demo

See the complete flow in Aurora Bet

Casino onboarding with age and identity verification in one wallet scan.

What it asks the wallet for

  • given_name
  • family_name
  • age_over_18
  • nationality

What the business gets back

Welcome bonus
100€ + 25 spins
Identity status
Verified
Daily withdrawal limit
5,000€
Open the Aurora Bet demo

Aurora Bet is a fictional company built by Authbound. The wallet integration in it uses the real Authbound SDK.

Questions

What buyers ask

Can we check age without seeing a date of birth?

Yes. Selective disclosure lets the wallet answer age_over_18 as a signed boolean. Whether that alone is enough depends on your licence, since some regimes still want full identification before payouts.

How does this stop a minor using a parent’s ID?

The credential is bound to the holder’s device and needs their device unlock to present. That is a lot harder to get around than photographing somebody else’s passport, which is the standard failure mode of upload-based checks.

Does it work for players from other EU countries?

Yes. Every member state wallet presents over the same protocol and validates against the same trust list, so a cross-border player is not a separate code path.

Can we keep our existing KYC vendor?

Yes. Run the wallet as the fast lane and keep your current vendor for players without a wallet. You decide which players see which option.

What does our backend receive?

The attributes your licence requires, such as name and nationality, plus age_over_18 as a signed true or false. The webhook also carries the verification ID and your player reference for the audit trail.

Does this replace affordability and source-of-funds checks?

No. The wallet proves identity and age. Responsible gambling, affordability, AML and source-of-funds checks stay in your existing process.

Does it help with self-excluded players and multi-accounting?

It gives you verified identity attributes to match against your player base and the national self-exclusion register. The matching itself stays in your systems.

What about players without a wallet?

They use your current verification flow. Wallets roll out from the end of 2026 and uptake will grow gradually, so treat the wallet as an additional lane during the transition.

When will most players have a wallet?

Every member state has to offer a wallet by 24 December 2026. Private services that are legally or contractually required to use strong user authentication have to accept it from December 2027 when the user asks. Adoption will vary by country, so plan to run both paths for a while.

What happens if verification fails?

You get a failed result with a reason, such as a revoked credential or an untrusted issuer, and route the player to your fallback instead of leaving the account in limbo.

Next step

Have a different wallet use case in mind?

Tell us what you are trying to build. We will map the user journey, the credentials and the wallet interaction to an implementation.