Enhanced due diligence (EDD) thresholds are no longer a box-ticking exercise for iGaming operators. Regulators across Europe, the UK and emerging markets are tightening scrutiny of high-value and high-risk players, and the cost of non-compliance now routinely reaches seven figures in penalties. Operators who treat EDD as an operational system, rather than an occasional manual review, gain both a compliance advantage and a cleaner, more sustainable player base.
What Enhanced Due Diligence Means for iGaming Operators
EDD is the deeper layer of customer due diligence applied when a player presents elevated money-laundering or fraud risk. In iGaming, the trigger points typically include deposit volumes above a defined threshold, unusual withdrawal patterns, politically exposed person (PEP) status, high-risk source-of-funds indicators, or residency in a jurisdiction flagged on your internal risk matrix. Unlike standard CDD, EDD requires verified documentation of wealth origin, ongoing transaction monitoring, and in many cases a senior sign-off before a player can continue wagering above a set limit.
The challenge is that no single regulator specifies a universal monetary trigger. The UK Gambling Commission, the Malta Gaming Authority and Dutch KSA all approach thresholds differently, meaning operators holding multiple licences must maintain a layered policy that satisfies the most demanding standard applicable to each player segment.
Why a 90-Day Window Is Realistic and Necessary
Ninety days provides enough time to audit existing gaps, procure or configure tooling, train staff and run a parallel-testing period before full rollout. Attempting to compress this into four weeks typically results in threshold settings that are either too aggressive, causing unnecessary friction for legitimate players, or too permissive, exposing the operator to regulatory action. Stretching it beyond three months, on the other hand, risks drifting compliance obligations while your monitoring queue accumulates unreviewed cases.
The Roadmap: Month One, Foundations
Weeks 1 to 2: Gap Analysis and Risk Appetite Statement
Begin with a structured audit of your current CDD policy. Map every point where a player's risk score could cross into EDD territory and identify whether a documented procedure exists for each scenario. Your MLRO should produce a written risk appetite statement that defines acceptable thresholds in numerical terms: deposit limits, session velocity, net deposits over rolling periods such as 30 and 90 days.
Weeks 3 to 4: Threshold Calibration
Using at least six months of transaction history, run a retrospective analysis to determine where EDD triggers would have fired under your proposed thresholds. The goal is to size the expected case volume so your compliance team is resourced appropriately. If the modelled volume exceeds team capacity, either the thresholds need adjustment or additional resource, whether in-house or outsourced, must be confirmed before month two.
The Roadmap: Month Two, Systems and Workflows
Weeks 5 to 6: Technology Configuration
Configure your transaction monitoring system to flag players who breach the agreed thresholds automatically. Key rules to implement include:
- Single-session deposit alerts above the defined value
- Rolling 30-day net deposit accumulation reaching a secondary threshold
- Rapid deposit-then-withdrawal sequences within a defined time window
- PEP and sanctions list matches triggering immediate manual review
- Jurisdiction-based risk scoring that escalates players from high-risk countries automatically
Weeks 7 to 8: Document Request Framework and Staff Training
Standardise the documents you will request at EDD stage: proof of income, bank statements, employment records or business ownership documentation. Create templated player-facing communications that are clear, professional and legally reviewed. Run scenario-based training for your compliance and customer-facing teams so they can handle player objections and escalate edge cases consistently.
The Roadmap: Month Three, Testing and Go-Live
Weeks 9 to 10: Parallel Run
Operate your new EDD framework alongside existing processes for two weeks. Log every case the new system flags, review outcomes and compare with how those cases were handled previously. Use discrepancies to refine thresholds and workflows before cutover.
Weeks 11 to 12: Full Deployment and Board Sign-Off
Switch fully to the new framework and present a summary compliance report to senior management or the board. Document approval formally; regulators expect evidence that EDD policy changes have received appropriate governance. Schedule a 30-day post-implementation review to catch emerging issues before they accumulate.
Operational Implications Operators Often Underestimate
EDD triggers a customer communication moment that directly affects retention. Players who receive a poorly worded source-of-funds request frequently churn, even when they are fully legitimate. Investing in tone, timing and channel selection for these requests, such as phone-first for VIP segments, is not a compliance matter; it is a revenue-protection decision. Equally, keeping EDD cases moving through review within a defined SLA, such as 48 or 72 hours, prevents complaint escalations and reduces regulatory exposure from delayed action.
A well-calibrated EDD framework does two things simultaneously: it satisfies regulators that you know your high-risk players, and it gives compliance teams the structure to process cases efficiently rather than reactively.
How OnlineShine Supports EDD Implementation
OnlineShine's MLRO and compliance managed-service team works with operators to design threshold frameworks, configure monitoring rules and provide ongoing case-review capacity. Whether you need a full 90-day implementation programme or targeted support for a specific licence jurisdiction, our practitioners bring hands-on iGaming compliance experience to accelerate delivery without compromising accuracy.
