KYC Policy · Spinatoshi

Last updated: 17 October 2026

✅ No KYC for crypto players

At Spinatoshi, players who deposit and withdraw only in cryptocurrency are not required to complete identity verification (KYC) to register, deposit, play or withdraw.

Just sign up with your email, confirm it, and start playing. Verification may only be requested in the specific cases described in Section 4 of this policy.

Spinatoshi (www.spinatoshi.com) is operated by Spin Reels S.R.L, registration number 455754, with its registered address at San José, Costa Rica. Spin Reels S.R.L is licensed and regulated under licence CRG / 117 / 15.10.2026 – 15.10.2027, issued in Costa Rica (the “Company”, “we”, “us”).

This policy explains when and how we may verify the identity of our players. It forms part of our Terms and Conditions and should be read together with our AML Policy, Privacy Policy and Payments & Refund Policy.

Why KYC exists

“Know Your Customer” (KYC) is the process of verifying a player’s identity, age and address. Even though most players at Spinatoshi never need to go through it, we keep a KYC procedure in place to:

protect minors from gambling; protect players from fraud, identity theft and account takeover; prevent money laundering, terrorist financing and other financial crime; meet our obligations under our licence and applicable law.

Registration without documents

To open a Spinatoshi account, you only need to provide:

a valid email address (which you will confirm with a code); a username and password; your country of residence and date of birth.

By registering, you confirm that:

you are at least 18 years old, or the legal age for gambling in your country, whichever is higher; you are not resident in a restricted jurisdiction; you are using your own account, for yourself, and with your own funds; the information you provide is true and correct.

Only one account is allowed per person, household, device and shared environment.

Crypto-only players: no verification needed

If you deposit and withdraw only in cryptocurrency, you can:

✅ register without uploading documents; ✅ deposit in any supported cryptocurrency; ✅ play all games; ✅ withdraw your winnings to your own crypto wallet;

without completing KYC, as long as none of the cases in Section 4 apply.

Please make sure that every withdrawal goes to a wallet you own and control, on the correct network.

When we may request verification

Even for crypto-only players, we may ask you to verify your identity in the following cases:

Withdrawal thresholds: when your cumulative withdrawals reach €2,000 or the equivalent in cryptocurrency, or when a single withdrawal is unusually large compared to your play. Suspected underage play: if there is any reason to believe a player may be under 18. Security concerns: suspected account takeover, use of someone else’s account, or login attempts that look unusual. Suspected multiple accounts or collusion: more than one account per person or household, or players working together. Fraud or bonus abuse: irregular play, abuse of promotions, or any attempt to manipulate our systems. AML alerts: transactions that may be linked to money laundering, terrorist financing, sanctions, or funds from illegal sources, including deposits from high-risk or sanctioned wallets. Politically Exposed Persons (PEPs): if a player is, or is suspected to be, a PEP or closely related to one. Use of fiat payment methods: if you deposit or withdraw using a non-crypto payment method, where available. Legal or regulatory requests: when requested by our licensing authority, a court, law enforcement, or any other competent authority. Responsible gaming: where needed to apply a self-exclusion or protect a vulnerable player.

If verification is requested, we will tell you clearly what we need and why.

Documents we may request

5.1 Standard verification Proof of identity: a valid passport, national identity card or driving licence (front and back), in colour and with all four corners visible. Selfie: a photo of you holding the same identity document next to your face. Proof of address: a utility bill, bank statement or official letter showing your name and address, not older than three (3) months. 5.2 Enhanced verification

In higher-risk cases, we may also request:

proof of wallet ownership, for example a signed message from your wallet, or a screenshot from your exchange account showing the wallet address and your name; source of funds, for example exchange statements, payslips or evidence showing where the deposited crypto came from; source of wealth, in exceptional cases; a short video call to confirm your identity. 5.3 Document requirements clear, readable photos or PDF scans, maximum 8 MB each; documents must be valid (not expired) and must not be edited in any way; names and details must match your Spinatoshi account.

How to upload your documents

Log in to your account. Open Account → Verification. Choose the document type and upload the files requested. Press Send for review.

You will be notified by email and in your account notifications when your documents are approved, or if we need anything else.

Review time

We aim to review documents within 24–48 hours. Complex cases, or periods of high volume, may take longer. While verification is pending, withdrawals or certain account features may be temporarily on hold.

If verification is not completed

If you do not provide the requested documents within 30 days, or if the documents are false, forged, unclear or do not belong to you, we may:

keep your withdrawals on hold; restrict or suspend your account; close your account and void winnings obtained in breach of our Terms and Conditions; report the case to the competent authorities, where required by law.

How we protect your data

Documents are uploaded over an encrypted connection and stored encrypted. Only authorised compliance staff can view them, and every view is recorded. Documents are used only for verification, security and legal compliance, and are never sold or shared for marketing. We keep verification records for as long as required by law (at least five (5) years after the end of our relationship), and then delete them securely.