PAGCOR’s Online Casino Rules for Players: KYC, Betting Limits, RTP and Payments

We at CasinoHub checked this guide against the linked primary documents on 13 November 2026. Independent information, not legal advice.

Many PAGCOR-regulated online casinos use Gaming System Administrators (GSAs). These are companies PAGCOR accredits to supply the gaming system and online platform for a licensed gaming venue. Their obligations are set out in PAGCOR’s Regulatory Framework for the Accreditation of Gaming System Administrators, Revision 0, effective 2 October 2025, and in later annexes. The documents are written for operators, but many of the rules directly affect what you see as a player. Here they are in plain language.

1. Who may open an account

• Only people 21 and over who are not barred may register.
• When you sign up online, the platform must ask you to confirm that you are 21 or older and that you are not a barred government official or employee, an AFP or PNP member, or a holder of a Gaming Employment License (GEL).
• Platforms must check new and existing players against PAGCOR’s National Database of Restricted Persons (NDRP), which holds self-, family- and casino-initiated exclusions. They must connect to it through PAGCOR’s API.
• One account per player per platform, used on one device at a time.
• The platform must not register players or accept bets from outside the Philippines.

For the full list of who may not gamble, and one point where PAGCOR’s documents differ, see Who is not allowed to gamble in the Philippines.

2. The 3-day KYC rule

At sign-up you provide your full name, date of birth, contact details, an accepted photo ID plus a matching selfie (or another identification method that PAGCOR accepts). The framework then requires full KYC (know-your-customer) verification before your first withdrawal or within three days of registering, whichever comes first. The platform has to explain that deadline to you.

If KYC is not completed in time, the account is suspended until it is. If you decide not to continue, you can ask for your funds back, less bets placed and winnings, with a written request and waiver. PAGCOR’s compliance and licensing units review the request.

Why it matters: finish verification early. Many withdrawal complaints come from incomplete KYC.

3. If you are not eligible, you can lose your balance

The framework says that playing while ineligible, for example while excluded or while in a barred group, may mean forfeiture of your remaining funds to the National Government. For someone listed in the NDRP, the forfeiture covers deposits and winnings made while they were listed. A jackpot won by an ineligible player is treated as the result of illegal play and forfeited. For a disputed jackpot, the framework gives the operator 45 days from the hit to establish whether the winner is eligible; this is not a general withdrawal deadline.

PAGCOR’s self-exclusion portal repeats this warning. It adds that some platforms only run a full identity check when you try to withdraw, so an excluded person might be able to deposit and play and only be caught at cash-out. Our self-exclusion guide has the details.

4. Betting limits must be available

Every PAGCOR-approved online platform must let you set your own daily, weekly and/or monthly betting limits. If you cannot find this setting, ask the operator’s support team. PAGCOR reiterated the need for limit-setting and exclusion tools in its December 2025 release.

5. RTP: the ranges PAGCOR sets

RTP (return to player) is the long-run theoretical share of stakes a game pays back. It is not a promise for any one session. PAGCOR’s framework sets these ranges:

Game type	PAGCOR-prescribed RTP
Slot-type electronic games	90% up to (not including) 97%
Electronic bingo	88% up to (not including) 97%
Traditional bingo	60% to 97%
RNG-based specialty or numeric games	60% to 97%
Arcade-type or skill games	Below 99%
Electronic casino, specialty and numeric games (RNG or live-streamed)	Odds, payouts and house edge similar to the equivalent live game

Operators must give PAGCOR’s compliance department at least one business day’s notice before changing a game’s settings. The games themselves must be on PAGCOR’s approved lists, which EGLD publishes by game studio on its Electronic Gaming page. See also our games and RTP page and our accredited game studios page. Studios often publish one RTP worldwide, but under these rules the version of a slot-type game offered on a PAGCOR-regulated platform should be below 97%. Check the game’s own info screen on the site you play.

6. Deposits and withdrawals

• Funding and withdrawals must use AMLC-compliant channels registered with or approved by the Bangko Sentral ng Pilipinas (BSP), such as over-the-counter and online banking, BSP-registered payment or e-wallet services, and other legitimate money-transfer services.
• Payment gateways may not use credit cards or cryptocurrency for funding or withdrawals. PAGCOR’s December 2025 statement describes this as a ban on credit cards and crypto for betting, meant to limit over-borrowing and impulsive play.
• Moving money to or from any account that is not the player’s registered account is prohibited.
• “Pasaload” (fund sharing between players) is prohibited.
• The platform’s Terms of Use must say how long withdrawals take to process.

E-wallets changed in 2025. For how the BSP order affected GCash, Maya and others, see E-wallets and online casinos and our payments guide.

7. Read the rules behind a rebate

PAGCOR’s Annex D-1, effective 7 May 2026, distinguishes turnover-based rebates from loss-based cashback. Approval and rate ceilings apply; neither label means free money. Our bonus rules page covers those ceilings without repeating them here. Promotions and payouts remain typical · not guaranteed; use the operator’s current terms, not an advertisement, when calculating a turnover target.

8. If the operator shuts down

PAGCOR’s Annex F (approved 10 July 2026) says that when a GSA’s accreditation is cancelled, voluntarily or otherwise, its platform must stay accessible for withdrawals only, for up to 60 days, and must then be fully deactivated. The operator remains responsible for unsettled player funds.

Where to raise a problem

PAGCOR’s Responsible Gaming page links to an Online Gaming Platform Helpdesk form for concerns about withdrawals, account access, account verification, transactions and other account matters.