A fountain pen lying on top of a pile of printed papers

Analysis · Crypto casinos

Crypto casino terms report 2026: what the binding terms of 24 crypto casinos commit to on withdrawals, KYC, confiscation and licences

Published 2026-10-27By the CryptoGuardz Register Desk8 min read19 sources

Photo: Andres Vera / Unsplash

In short, from the documents

Crypto casino terms report 2026: 24 operators read

Of 24 crypto casinos on the CryptoGuardz register, 5 put a withdrawal time in their binding terms, 9 require KYC before any withdrawal, 14 reserve the right to confiscate the balance or deposit, 18 licences were found in the issuing register, and the register records 112 contradictions between what operators say and what their own documents or regulators show.

Piece published 2026-10-27Reviewed by CryptoGuardz Register Desk, editorial desk

Five of 24 crypto casinos commit to a withdrawal time in their binding terms, according to the CryptoGuardz register, with documents retrieved between 2 September and 2 October 2026. Nine require KYC before any withdrawal, 14 reserve the right to confiscate the balance or the deposit, and 6 of the 24 licences could not be found in the issuing register.

The register holds one file per operator, and every field in it carries the URL of the document it was read from and the date it was read. Nothing below was re-scraped for this report. Each count was produced by a script reading those files, and each one names the operators behind it, so any figure can be checked against the casino register.

Key findings at a glance

Finding	Count of 24	Operators
Withdrawal time committed in binding terms	5	BetFury, Flush, Rakebit, Sportsbet.io, Thunderpick
KYC required before any withdrawal	9	Flush, Jackbit, Lucky Block, Rakebit, Roobet, Shuffle, Sportsbet.io, Thunderpick, Winz.io
KYC left to operator discretion	13	BC.GAME, BetFury, Bets.io, Bitcasino, Duelbits, FortuneJack, Gamdom, mBit, Metaspins, Rollbit, Stake, Vave, Wild.io
KYC tied to a published threshold	1	Cloudbet
Right to confiscate balance or deposit	14	Bets.io, Bitcasino, Cloudbet, Flush, FortuneJack, Lucky Block, mBit, Rollbit, Shuffle, Sportsbet.io, Stake, Thunderpick, Wild.io, Winz.io
Licence found in the issuing register	18	all except the 6 below
Licence asserted, not found in a register	6	Flush, Gamdom, Lucky Block, Vave, Wild.io, Winz.io
Documented contradictions	112	23 operators, all except Coins.game

Bar chart of 24 crypto casinos: 5 commit to a withdrawal time, 9 require KYC before any withdrawal, 14 reserve the right to confiscate, and 18 licences were found in the issuing register. — Each count names the operators behind it in the table below. Graphic: CryptoGuardz, from the sources cited below, CC BY 4.0

How many crypto casinos commit to a withdrawal time?

Five of 24. BetFury, Flush, Rakebit, Sportsbet.io and Thunderpick put a processing time into a document that binds them. The other 19 do not, and 7 of those 19 (BC.GAME, Cloudbet, Coins.game, Duelbits, mBit, Stake and Wild.io) publish a time only in a help article, blog post, payments page or homepage line, which the operator can edit and no dispute is decided on.

The committed numbers are not short. BetFury's terms allow up to seven days and more if needed, Rakebit's payment policy allows two days and seven or more where further procedures apply, and Flush's clock starts only once verification is complete. Winz.io was counted as committing in September; the register now records its wording, that it will "endeavour" to pay, as no commitment. The full breakdown is in the instant withdrawal piece.

How many require KYC before a withdrawal?

Nine require it outright, 13 leave it to their own discretion, 1 publishes a threshold, and 1 could not be read. The classification comes from the `kyc.withdrawal_required` field, set by hand from each operator's own clause.

Cloudbet is the only operator whose terms make verification compulsory at a stated figure: cumulative deposits of 2,200 US dollars. Four others print a number but keep the right to check below it. Bitcasino and Sportsbet.io name 2,500 euros, mBit names 1 BTC, and Stake's AML policy refers to a withdrawal threshold it does not publish. Bitcasino's clause 6.6 shows how those numbers are built:

and further reserves the right to carry out such verification procedures in case of smaller withdrawals

Bitcasino terms and conditions, clause 6.6, retrieved 2 October 2026

Coins.game is marked not verified: its terms sit behind a Cloudflare check that the register does not get around. The KYC-on-withdrawal page carries each clause in full.

How many reserve the right to confiscate the balance?

Fourteen of 24 reserve the right to take the balance, the deposit or both. Twelve do it in the clause on restricted territories and VPNs, and five in the verification clause itself (FortuneJack, mBit, Thunderpick, Wild.io and Winz.io, with mBit, Thunderpick and Winz.io in both). Wild.io's verification clause was confirmed by re-reading the source:

Failure or denial to pass the identity check will result in confiscation of the entire balance.

Quote from Wild.io terms clause 13.1: failure or denial to pass the identity check will result in confiscation of the entire balance. — Five operators put confiscation in the verification clause itself; Wild.io is one. Graphic: CryptoGuardz, from the sources cited below, CC BY 4.0

Wild.io terms, clause 13.1, re-read 27 October 2026

Four operators (Bets.io, Flush, Lucky Block and Winz.io) name the deposit as well as winnings in the territory clause. Metaspins and Vave reserve only the winnings, in their verification clauses. BetFury, Gamdom, Jackbit and Rakebit state no forfeiture in the clauses read. For BC.GAME, Coins.game, Duelbits and Roobet the territory clause could not be retrieved, recorded as no data. Clause by clause, the consequences are in the VPN clause watch and the failed KYC piece.

How many licences are confirmed in the register?

Eighteen of 24 licence numbers were found in the issuing authority's own register: 12 in Curacao's and 6 in Anjouan's. The other 6 are asserted by the operator only. Flush, Wild.io and Winz.io publish an Anjouan number that was not confirmed against the register. Gamdom, Lucky Block and Vave have no licence number on record, and Vave's named companies were looked up and not found in the Curacao register of 16 September 2026.

Found is not the same as current. Of the 18, the Curacao register lists 6 as "Assessment in progress" with a term already past (BetFury, Cloudbet, Duelbits, Jackbit, Stake and Thunderpick) and 1, Rollbit, as "Expired". In Anjouan's register, Bets.io's term ended on 17 October 2026 and Coins.game's on 27 October 2026; renewal of either is not verified. The Curacao licence status page tracks those entries.

How many contradictions did the register record?

The register holds 112 documented contradictions across 23 operators: 38 rated high severity, 51 medium and 23 low. Each pairs a claim with the document that contradicts it, both with URLs. Nineteen operators carry at least one high-severity item. Typical pairs: a homepage promising instant payouts against terms that set no time (Roobet, Shuffle, Jackbit), a "no KYC" page against the operator's own KYC clause (Rakebit, Sportsbet.io, Vave), and a licence shown as current against a register that says otherwise (Stake, Cloudbet, Rollbit). Coins.game has none because its terms could not be read, not because it was cleared.

Every operator, alphabetically

Not a ranking. The order is alphabetical and the columns are the five fields above.

Operator	Time in terms	KYC before withdrawal	Balance or deposit confiscation	Licence in register	Contradictions
BC.GAME	no	discretionary	no data	yes (Valid)	5
BetFury	yes	discretionary	none stated	yes (Assessment in progress)	8
Bets.io	no	discretionary	yes, territory clause	yes (Valid)	5
Bitcasino	no	discretionary	yes, territory clause	yes (Indefinite)	5
Cloudbet	no	threshold	yes, territory clause	yes (Assessment in progress)	3
Coins.game	no	not verified	no data	yes (Valid)	0
Duelbits	no	discretionary	no data	yes (Assessment in progress)	2
Flush	yes	required	yes, territory clause	no, asserted	2
FortuneJack	no	discretionary	yes, KYC clause	yes (Valid)	5
Gamdom	no	discretionary	none stated	no, asserted	6
Jackbit	no	required	none stated	yes (Assessment in progress)	7
Lucky Block	no	required	yes, territory clause	no, asserted	6
mBit	no	discretionary	yes, territory and KYC clauses	yes (Indefinite)	4
Metaspins	no	discretionary	winnings only	yes (Valid)	3
Rakebit	yes	required	none stated	yes (Valid)	4
Rollbit	no	discretionary	yes, territory clause	yes (Expired)	3
Roobet	no	required	no data	yes (Indefinite)	6
Shuffle	no	required	yes, territory clause	yes (Indefinite)	6
Sportsbet.io	yes	required	yes, territory clause	yes (Active)	6
Stake	no	discretionary	yes, territory clause	yes (Assessment in progress)	5
Thunderpick	yes	required	yes, territory and KYC clauses	yes (Assessment in progress)	2
Vave	no	discretionary	winnings only	no, asserted	6
Wild.io	no	discretionary	yes, KYC clause	no, asserted	5
Winz.io	no	required	yes, territory and KYC clauses	no, asserted	8

No operator on the register has a commercial relationship with CryptoGuardz, as the disclosure page records. Every file was classified under the same rules.

Methodology

The population is every operator file in the register on 26 October 2026: 24 crypto casinos. Documents were read between 2 September and 2 October 2026; territory clauses on 22 September and 2 October 2026. Where a live page served a bot check, the register used a search-index copy of the same URL and says so in the file, or recorded no data. Fields and rules:

Withdrawal time: `payouts.commits_to_timeframe` is true only where a binding document (terms, payment policy) states a time. Help pages, blogs and an "endeavour" do not count.
KYC: `kyc.withdrawal_required`, one of required, discretionary or threshold, classified by hand from the clause, never by keyword match.
Confiscation: counted where the territory clause penalty includes balance-forfeiture or deposit-forfeiture (`data/vpn-clauses.json`), or the verification clause in the operator file states forfeiture or confiscation of the balance or funds. Wild.io's clause 13.1 is recorded on its site page but not in its file, so it was re-read at the source URL. Winnings-only confiscation is listed separately.
Licence: `licence.verified_against_register`, true only where the number was found in the issuing authority's own register.
Contradictions: every entry in `conflicts`, with its severity as filed.

The method page sets out how each field is collected.

Use this data

The operator table and the VPN clause sweep are downloadable as CSV from the payout index, generated from the same files as this report. The KYC classification is not a CSV column; it is on each operator's register page. The data is published under CC BY 4.0, the licence stated on the updates page: reuse it with attribution and a link. Changes to any operator file are logged there with a date.

Cite this report

CryptoGuardz, "Crypto casino terms report 2026: 24 operators read", published 27 October 2026, https://cryptoguardz.com/blog/crypto-casino-terms-report-2026/. Data CC BY 4.0. Name the operator and the document when quoting a single figure, and link the operator's register page.

Gambling is not a way to make money. If it has stopped being fun, the responsible gambling page lists helplines by country.

Quick answers

How many crypto casinos guarantee a withdrawal time?

Five of 24 put one in their binding terms: BetFury, Flush, Rakebit, Sportsbet.io and Thunderpick. The register has each clause.

Do crypto casinos require KYC before withdrawing?

Nine of 24 require it before any withdrawal, 13 reserve it at their discretion, and only Cloudbet ties it to a published figure, 2,200 US dollars in deposits. See KYC on withdrawal.

Can a crypto casino keep my balance?

Fourteen of 24 terms reserve the right to confiscate the balance or the deposit, mostly for a VPN or restricted-territory breach. The VPN clause watch quotes each clause.

Are crypto casino licences real?

Eighteen of 24 licence numbers were found in the issuer's register, and 7 of those were listed as "Assessment in progress" or "Expired". Six were asserted only. See the licences page.

More analysis

2026-09-28What the operators' own terms say about a no KYC casino for the USAThirteen of fourteen operators on the register exclude the United States in their own binding terms, none names an individual state, and six reserve the right to keep the entire balance of an account found to be playing from there.2026-09-28MetaMask and crypto casinos: what MetaMask's own terms sayMetaMask's terms of use name no gambling rule. They do let MetaMask suspend access on enumerated grounds, disclose that its own stablecoin can be frozen by third parties, and cap liability at fees paid or 25,000 dollars if none were.2026-09-28Gambling KYC under five regulators, and which of them licenses the fourteen crypto casinos on the registerThree of five regulators publish a hard rule on when gambling KYC must happen: before play in Great Britain, within 30 days of 2,000 euros in deposits in Malta, before any payout in Kahnawake. Anjouan publishes no timing and Curacao's rule pages could not be retrieved, and those two license all fourteen operators on the register.2026-09-28What fourteen crypto casinos' terms say happens to your balance when verification fails or a VPN is detectedSix of the twelve operators whose terms could be read reserve the deposit as well as the winnings when a restricted-territory or VPN breach is found. One writes that the deposit is returned, one says it may be, and two write balance forfeiture into the verification clause itself.2026-09-28What the terms say about crypto casinos in Canada, and why Ontario is the clause to readOntario's regulated market verifies identity before an account is created, and no operator on this register is part of it. Three of the fourteen name Ontario in their own restricted list, and the consequence for playing from a restricted place is written into the contract.2026-09-28Crypto cards and gambling: what each card's own terms say about casinosTwo of fourteen cards prohibit gambling in a document the issuer publishes, one treats it as a cash advance, and Revolut's block works on merchant codes it admits can be dodged. RedotPay's terms name no gambling rule.

Sources

About this piece

Compiled by the CryptoGuardz register team from the sources listed above. Research and drafting are AI-assisted and reviewed by a named editor before publication. Nothing here is a recommendation to gamble. If a figure or a reading is wrong, tell us and the correction is logged in public.

Add CryptoGuardz as a preferred source on Google to see our pieces more often in Top Stories.