GLI-33 Player Account Management (PAM) + KYC + AML + payments. PAM REQUIREMENTS: (a) account registration with identity verification + age verification (18+ or 21+ depending on state) + jurisdictional eligibility; (b) account funding via approved payment instruments (debit card + ACH + bank transfer + wire + e-wallet + cash kiosk + sometimes credit card depending on state); (c) account balance ledger + transaction history + audit log; (d) deposit/withdrawal limits + responsible-gaming limits + self-exclusion enforcement; (e) account closure + dormancy + reactivation procedures; (f) one-account-per-player enforcement + duplicate-account detection; (g) authorized-user-only access (no shared accounts); (h) cooling-off + temporary-exclusion + permanent-exclusion features. KYC: typically minimum (a) name + DOB + SSN-last-4 (US) or full national ID + address + email + phone + government-ID document upload + selfie liveness check; identity-verification through third-party KYC vendors (LexisNexis + Jumio + Onfido + IDology + Trulioo + Equifax + Experian + others); enhanced due diligence for high-rollers + PEPs + sanctions-screened. AML: customer-risk-rating + transaction monitoring + suspicious-activity-reports (SARs) to FinCEN if MSB threshold + jurisdiction-specific AML obligations + sanctions screening (OFAC + UN + EU + state lists) + record-keeping. PAYMENT PROCESSING: PCI DSS compliance for card-not-present transactions; tokenization + encryption; chargebacks + dispute handling; payment vendor risk management (often Worldpay + Stripe + Trustly + Nuvei + PaySafe + others); cryptocurrency-funded accounts increasingly addressed in 2024-2025.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.