Gambling Compliance in the Philippines: PAGCOR, Age Verification, and the 2026 Crackdown
The Philippines is cracking down on offshore gambling operators. Here's what PAGCOR requires for KYC, age verification, and AML compliance in 2026.

The Philippines is undergoing a dramatic transformation in gambling regulation. What was once one of the most permissive gambling jurisdictions in Asia — home to hundreds of offshore operators with minimal oversight — is now the site of the region's most aggressive enforcement campaign.
The crackdown on Philippine Offshore Gaming Operators (POGOs) has exposed systemic failures in identity verification, age assurance, and anti-money laundering controls. Operations that were nominally licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) were found to be fronts for fraud, human trafficking, and money laundering.
For legitimate operators, the regulatory environment has changed permanently. PAGCOR's new licensing framework introduces stricter requirements across every compliance dimension. Understanding these requirements is essential for any operator targeting the Philippine market or serving Filipino users.
The POGO Crackdown
What Happened
POGOs were licensed by PAGCOR to serve offshore markets — primarily Chinese customers betting from the Philippines on platforms accessible from mainland China. At peak, over 300 POGO licenses were active, generating significant tax revenue and employment.
The crackdown accelerated in 2024-2025 when Philippine law enforcement, working with international partners, discovered that many POGO operations were involved in activities far beyond gambling: investment fraud, cryptocurrency scams, identity theft, and most troublingly, forced labor and human trafficking. Workers — many recruited from other Asian countries under false pretenses — were confined to POGO compounds and compelled to conduct fraud operations.
President Ferdinand Marcos Jr. ordered a full ban on POGOs, with all operations required to wind down or transition to domestic-serving licenses under the new regulatory framework. The transition exposed the extent of compliance failures: many operators had conducted minimal or no KYC on their users, had no effective AML monitoring, and had not implemented any age verification.
What It Means for Legitimate Operators
The POGO scandal has made Philippine regulators intensely focused on compliance. Any operator seeking a license — or renewing an existing one — faces significantly higher scrutiny. The regulatory posture has shifted from facilitative to skeptical: operators must demonstrate compliance rather than assert it.
PAGCOR's New Licensing Framework
License Categories
PAGCOR's updated framework distinguishes between domestic operators (serving Philippine residents) and offshore operators (serving non-Philippine markets under what are now called Internet Gaming Licenses or IGLs). The requirements differ by category, but both face stricter standards than under the previous regime.
Domestic operators face the full weight of Philippine gambling law, including the minimum gambling age of 21 (one of the highest in Asia), mandatory responsible gambling measures, and compliance with the Anti-Money Laundering Act of 2001 as amended.
KYC Requirements
PAGCOR now requires biometric verification at registration for all online gambling accounts. This means a selfie-to-document comparison, not just document upload. The accepted identity documents for Philippine residents include the Philippine passport, Philippine Identification System (PhilSys) national ID, UMID (Unified Multi-Purpose ID), driver's license, and voter's ID.
The PhilSys national ID — the Philippines' new biometric national identity card — is increasingly the preferred document. It includes the holder's photograph, fingerprint data, and a unique PhilSys Number (PSN) that can be validated against the Philippine Statistics Authority database.
For non-Philippine users (under IGL licenses), passport verification is required, with enhanced due diligence for users from jurisdictions designated as higher risk by the AMLC.
Age Verification
The minimum gambling age in the Philippines is 21 for casinos and casino-style online games. Sports betting and some online formats may have different age thresholds depending on the specific license conditions.
Age verification must occur at registration through identity document verification that confirms the user's date of birth. Self-declaration is not sufficient. The biometric verification requirement — comparing the user's selfie against their identity document — also serves as a secondary age assurance mechanism, as facial age estimation can flag significant discrepancies between the user's apparent age and their claimed date of birth.
AML Compliance
The Anti-Money Laundering Council (AMLC) oversees AML compliance for gambling operators under the Anti-Money Laundering Act (AMLA) as amended. Casino operators are designated "covered persons" under AMLA and must implement customer due diligence, maintain transaction records, and file Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) with the AMLC.
CTRs are required for all transactions exceeding PHP 5 million (approximately $88,000) or its equivalent in other currencies. STRs must be filed within five working days of determining that a transaction is suspicious.
The Broader APAC Context
The Philippines' regulatory transformation fits into a broader APAC trend toward stricter gambling oversight. Japan is developing its Integrated Resort framework with stringent KYC and responsible gambling requirements. Macau's revised gaming law tightened operator obligations and reduced license terms. Singapore's Casino Regulatory Authority maintains one of the strictest oversight regimes in the world.
For operators serving multiple APAC markets, the compliance challenge is cumulative. Each jurisdiction has its own document types, age thresholds, AML frameworks, and enforcement postures. A verification infrastructure that handles Philippine PhilSys IDs, Japanese My Number Cards, Singaporean NRICs, and Macau BIR documents through a single integration dramatically simplifies multi-market operations.
Philippines Gambling Compliance FAQ
- What is the minimum gambling age in the Philippines?
- 21 for casino and casino-style online gambling — one of the highest age thresholds in Asia. Some online formats may have different thresholds depending on specific license conditions.
- What identity documents does PAGCOR accept?
- Philippine passport, PhilSys national ID, UMID, driver's license, and voter's ID for Philippine residents. Passport verification for non-Philippine users under IGL licenses.
- What happened with POGOs?
- Philippine Offshore Gaming Operators were found to be involved in fraud, money laundering, and human trafficking. President Marcos ordered a full ban, with all operations required to wind down or transition to domestic-serving licenses under stricter regulatory standards.
- What AML obligations apply to Philippine gambling operators?
- Operators are "covered persons" under the Anti-Money Laundering Act. They must implement CDD, maintain transaction records, and file CTRs for transactions exceeding PHP 5 million and STRs within five working days of identifying suspicious activity.
- Is biometric verification mandatory?
- Yes. PAGCOR's new framework requires biometric verification (selfie-to-document comparison) at registration for all online gambling accounts. Document upload alone is not sufficient.
Relevant Articles
Identity Fraud in Southeast Asia: The Maldives Surge
APAC-wide fraud patterns.
Apr 24, 2026
How Online Casinos Stop Bonus Abuse and Multi-Accounting
Detection techniques for operators.
Apr 18, 2026
Age Verification in Australia
Comparing age verification approaches.
Apr 20, 2026
KYC for iGaming in Latin America
How other regions approach gambling compliance.
Apr 26, 2026
What is deepidv?
Not everyone loves compliance — but we do. deepidv is the AI-native verification engine and agentic compliance suite built from scratch. No third-party APIs, no legacy stack. We verify users across 211+ countries in under 150 milliseconds, catch deepfakes that liveness checks miss, and let honest users through while keeping bad actors out.
Learn More
