Indonesia-facing operations follow a dual framework that couples anti-money-laundering (AML) procedures with “Know Your Customer” (KYC) identity checks. These controls keep financial flows transparent and ensure only verified players transact on the platform.
AML refers to the rules and monitoring tools that detect, report, and block funds tied to crime or terrorist financing. KYC is the process of collecting and validating customer data—name, date of birth, address, and funding source—before granting full wallet access. Together they form an integrated compliance layer known internally as the 1xBet AML protocol.
What Information We May Request
To satisfy regulatory transaction-monitoring duties, the compliance team may ask for one or more of the documents listed below. Requests are issued through the secure profile inbox and processed by encrypted channels only.
- Government-issued ID — passport, national ID card, or driver’s licence used to verify legal age and match the name on the payment instrument.
- Proof of address — recent utility bill or bank statement (≤ 3 months old) confirming residency in the declared jurisdiction.
- Source-of-funds evidence — payslip, business invoice, or tax return that demonstrates the lawful origin of large or unusual deposits.
- Enhanced due-diligence form — short questionnaire covering occupation, expected turnover, and gaming budget, activated when volume exceeds internal risk thresholds.
- Payment-method screenshot — masked card or e-wallet interface showing the first and last digits plus account holder name, preventing third-party top-ups.
- Selfie with ID — live photo matching the identity document to the account owner, mitigating synthetic-identity fraud.
- Additional K-files — on request, the platform may consult external watchlists to validate sanctions status as part of the broader 1xBet KYC workflow.
When and Why Verification Is Required
Identity checks activate at specific trigger points to verify a 1xBet user’s legitimacy and ensure each transaction complies with Indonesian AML thresholds.

- First withdrawal request—confirms ownership of the funding source and blocks third-party cash-outs.
- Cumulative deposits exceeding USD 2 000—aligns with FATF guidance for heightened due diligence.
- Card or e-wallet change—prevents stolen payment instruments from entering the system.
- Inconsistent IP or device pattern—flags possible account takeover; selfie and ID comparison restore access.
- Unusual betting velocity—source-of-funds proof required to validate large, rapid deposits.
- Regulatory audit request—additional documents supplied if authorities demand player-level clarification.
How We Keep Your Documents Safe
Uploaded identification files and payment proofs move through a hardened pipeline designed for continuous confidentiality and integrity on this betting site.
- AES-256 encryption at rest protects every PDF, image, and data field inside an isolated storage vault.
- TLS 1.3 transport secures the path from browser to server, preventing interception during upload or download.
- Role-based access control allows only compliance officers to view full documents; support agents see masked records.
- Separate key management stores decryption keys in a dedicated hardware module, eliminating single-point compromise.
- Annual SOC 2 and ISO 27001 audits validate that controls align with international security frameworks.
- Time-bound retention purges KYC files five years after account closure unless local law stipulates longer storage.
- Verified deletion requests execute a cryptographic wipe, ensuring no recoverable fragments remain on retired media.
- Real-time integrity checks compute SHA-256 hashes on upload and compare them to scheduled scans to detect tampering.

Legal Compliance and User Cooperation
Adherence to Indonesian financial regulations requires coordinated effort between platform operators and account holders. The points below clarify mutual responsibilities and answer the recurring question, is 1xBet legal for local participants.
- Regulatory licences — the service operates under an international gaming permit and follows Bank Indonesia guidelines on cross-border payments.
- Customer obligations — users must provide authentic ID, keep contact details current, and avoid third-party top-ups; failure leads to account suspension.
- Transaction caps — daily and monthly deposit limits align with anti-money-laundering thresholds, triggering enhanced diligence when exceeded.
- Suspicious-activity reporting — any deposit or withdrawal flagged by monitoring tools is logged and, if required, forwarded to the Financial Transaction Reports and Analysis Center (PPATK).
- Data-sharing protocols — information released to authorities contains only fields mandated by law, preserving privacy beyond statutory scope.
- Dispute escalation — unresolved verification issues move to an independent arbitration channel recognised by Indonesian consumer-protection statutes.