Little data at sign-up, more at payout
Dukat.bet sign-up is brief: email, password and a single tick box for the T&C, privacy policy and being over 18. Under T&C section 9, they may later ask for your name, date of birth, passport details and phone number.
AML/KYC policy section 2 is more specific: name, birth date, citizenship, home address and a government-issued ID are collected and checked.
xcasino.hu needs a Hungarian IP and adult age; its land-based casino membership card also works for sign-up.
The KYC rules point by point
| Criterion | Dukat.bet | xcasino.hu | Where we saw it |
|---|---|---|---|
| When ID is required | mandatory above a threshold; before the first withdrawal at the latest; may be requested at any time | at registration: Hungarian IP and 18+ | Dukat.bet AML section 2, responsible gambling policy section 4, T&C section 9; xcasino.hu FAQ, chapter A |
| Document script | Latin or Cyrillic; if you have neither, video verification may be requested | not detailed in our sources | Dukat.bet T&C section 10 |
| Other verification methods | phone call, video call, documents sent by post | not detailed in our sources | Dukat.bet T&C sections 9 and 12 |
| Deadline | account locked if you are unreachable for two weeks after requesting a payout | – | Dukat.bet T&C section 9 |
| Number of accounts | one personal account; extra accounts mean closure and a frozen balance | – | Dukat.bet T&C section 9 |
| Source of funds | you may only deposit from cards and accounts held in your name | payouts only by transfer to a Hungarian bank account | Dukat.bet T&C section 11; xcasino.hu FAQ, chapter D |
| Document retention | AML documents for at least 5 years; personal data for a further 3 years after the relationship ends | – | Dukat.bet AML section 2, privacy policy section 7 |
| VPN | banned for bypassing blocks; risks closure and confiscated winnings | works only from a Hungarian IP | Dukat.bet T&C section 4; xcasino.hu FAQ, chapter A |
Note T&C section 12: a withdrawal may be held back while checks run.
Where the rules stay vague
Dukat.bet’s three documents disagree on when verification happens: a threshold (in its own currency) per the AML policy, the first withdrawal per the responsible gambling policy, any time per the T&C. The contradiction is in the documents, not our reading.
No document gives the review time in days. The FAQ says no data ever goes to outside parties, yet the privacy policy mentions transfers to affiliates and partners, plus Facebook, Google and Reddit pixels. Encryption type goes unnamed too.
AML section 6 says customers are not informed of an investigation or freeze – a possible reason for a stalled payout.
What you can do to protect your account
- Email address: per the Dukat.bet FAQ it is fixed once confirmed, so choose one you will keep for years.
- Documents in advance: ID and a recent utility bill in Latin script, ready before payout time.
- Your own card, your own account: using a payment method in someone else’s name breaks the Dukat.bet rules.
- Official channels only: send documents solely to support@dukat.bet or from within your account, and data protection questions to dpo@dukat.bet.
Payments are covered in our payments guide, data handling on the privacy page.
Regulatory oversight or detailed house rules – which matters more to you
xcasino.hu has a licence from Hungary’s gambling regulator, SZTFH: Hungarian oversight, a Hungarian-language complaint route and the authority’s details in the footer. Publicly, though, its KYC details are sparser than Dukat.bet’s.
As of 14 October 2026, Dukat.bet is not among SZTFH’s online casino licensees (more in the licence check). In return, its rules spell out which documents, in what script and when. T&C section 3 lists countries restricted for licensing reasons – check before signing up whether your country of residence is on it.
The original text is on the Dukat.bet security and KYC page.