KYC for iGaming in Latin America: Brazil, Colombia, Argentina, and Mexico
Latin America's iGaming market is booming with new regulation across Brazil, Colombia, Argentina, and Mexico. Here's the KYC compliance landscape for each country.
Latin America is the fastest-growing iGaming market in the world. Brazil alone represents a potential addressable market of over 200 million people, with legalized sports betting and online gambling regulation now in force. Colombia has operated a regulated framework since 2016 through Coljuegos. Argentina's provincial licensing system is expanding. And Mexico's regulatory framework, while still maturing, is attracting operators who see a market of 130 million people with rising smartphone penetration and a cultural affinity for sports betting.
For operators expanding into LATAM, the opportunity is enormous — but the compliance landscape is a patchwork. Each country has its own regulatory authority, its own identity document types, its own age verification mandates, and its own AML obligations. An operator compliant in Colombia may not be compliant in Brazil. The documents accepted in Mexico differ from those accepted in Argentina. And the enforcement posture varies dramatically by jurisdiction.
This guide breaks down the KYC requirements for each of the four major LATAM iGaming markets.
Brazil
The Regulatory Framework
Brazil's gambling regulation underwent a historic transformation with Lei 14.790/2023, which legalized sports betting and authorized online gambling. The implementing regulations, issued by the Secretaria de Prêmios e Apostas (SPA) under the Ministry of Finance, establish detailed KYC, AML, and operational requirements for licensed operators.
Brazil is not a light-touch regulator. The SPA has demonstrated willingness to enforce compliance through license suspensions, fines, and operational restrictions. Operators that treat Brazilian regulation as a formality will discover otherwise.
KYC Requirements
All users must be verified before placing any wager. The minimum KYC requirements include full legal name (matching CPF registration), CPF number validated against the Receita Federal, date of birth (minimum age 18), residential address, and government-issued photo identification.
Accepted documents include the CPF card, RG (Registro Geral — varying by state), CNH (Carteira Nacional de Habilitação), the new CIN (Carteira de Identidade Nacional), and passport. The RG document challenge is significant — as detailed in our Brazil crypto KYC guide — because each of Brazil's 26 states issues RGs with different formats and security features.
Biometric verification is strongly recommended though not explicitly mandated for all operators. However, the SPA's responsible gambling requirements include measures to prevent multi-accounting — and biometric deduplication is the most effective method available.
Age Verification
The minimum gambling age in Brazil is 18. Operators must verify age at registration, not merely collect a self-declaration. The Digital ECA (Estatuto Digital da Criança e do Adolescente), effective March 17, 2026, adds a biometric age verification mandate for digital platforms interacting with minors — reinforcing the requirement for technology-based age confirmation.
AML Obligations
Operators must implement transaction monitoring, report suspicious activities to COAF (Brazil's financial intelligence unit), screen against sanctions and PEP lists, and maintain records for a minimum of five years. Enhanced due diligence applies to high-value depositors and users with unusual transaction patterns.
Colombia
The Regulatory Framework
Colombia was the first LATAM country to regulate online gambling, launching the Coljuegos framework in 2016. The regulatory maturity shows — Colombia's framework is the most established in the region, with clear licensing requirements, enforcement precedent, and a track record of operator oversight.
Coljuegos issues licenses for online sports betting, casino games, and other gambling activities. Operators must be registered in Colombia or have a legal representative in the country. The license application requires detailed documentation of technical systems, responsible gambling measures, and AML/CFT compliance programs.
KYC Requirements
Colombian operators must verify identity using the cédula de ciudadanía (national identity card) for Colombian citizens, the cédula de extranjería for foreign residents, or a passport for non-residents. The cédula is a nationally standardized document with biometric data, making it more straightforward to verify than Brazil's fragmented RG system.
The Registraduría Nacional del Estado Civil maintains the national identity database against which cédula numbers can be validated. Operators with database access can verify identity in real time — confirming that the cédula number, name, and photo match an active record.
Age verification is mandatory (minimum age 18), and Coljuegos requires operators to implement technical measures to prevent minors from accessing gambling services.
AML Obligations
Colombian AML obligations are governed by the Superintendencia Financiera and Law 1762 of 2015. Operators must implement customer due diligence, transaction monitoring, and suspicious activity reporting to the UIAF (Unidad de Información y Análisis Financiero). Colombia's proximity to narcotics trafficking routes means AML enforcement is particularly rigorous — operators must demonstrate robust monitoring for money laundering through gambling platforms.
Argentina
The Regulatory Framework
Argentina's iGaming regulation operates at the provincial level rather than the federal level. Each province has authority to regulate gambling within its borders, resulting in a fragmented landscape where licensing requirements, tax rates, and operational rules vary by jurisdiction.
The province of Buenos Aires and the City of Buenos Aires (CABA) are the largest markets. LOTBA (Lotería de la Ciudad de Buenos Aires) regulates online gambling in CABA, while the Province of Buenos Aires has its own licensing framework. Other provinces including Mendoza, Córdoba, and Misiones have also established or are developing online gambling regulations.
This provincial fragmentation means operators targeting the Argentine market may need multiple licenses — one for each province where they operate. The compliance burden is significant, and the document types, verification requirements, and reporting obligations can differ between provinces.
KYC Requirements
The DNI (Documento Nacional de Identidad) is the primary identity document in Argentina. The DNI is nationally standardized — unlike Brazil's RG — and includes biometric data. DNI verification can be performed against the RENAPER (Registro Nacional de las Personas) database.
Additional accepted documents include the passport and, for foreign residents, the DNI for foreigners (DNI Extranjeros). Age verification (minimum 18) is mandatory at registration.
Argentina's economic volatility adds a layer of complexity. The country's currency controls and parallel exchange rates mean operators must implement transaction monitoring that accounts for the unique financial patterns of the Argentine market — including the common practice of using crypto to circumvent capital controls.
AML Obligations
The UIF (Unidad de Información Financiera) oversees AML compliance for gambling operators. Requirements include customer due diligence, transaction monitoring, suspicious activity reporting, and enhanced measures for PEPs and high-risk customers. The UIF has increased enforcement activity in recent years, particularly targeting gambling platforms used for money laundering.
Mexico
The Regulatory Framework
Mexico regulates gambling through the Dirección General de Juegos y Sorteos (DGJS) under the Secretaría de Gobernación (SEGOB). The country's regulatory framework is older and less specific to online gambling than Colombia's or Brazil's new frameworks — much of Mexico's gambling regulation was written before online gambling existed at meaningful scale.
The regulatory gap is narrowing. SEGOB has been developing updated regulations specific to online gambling, and legislative proposals for a comprehensive online gambling framework have been introduced in Congress. In the interim, operators must navigate the existing permit system, which requires a federal permit from DGJS for any gambling activity.
KYC Requirements
Mexican identity verification relies on two primary documents: the CURP (Clave Única de Registro de Población), a unique population registration number assigned to every Mexican citizen and resident, and the INE (Instituto Nacional Electoral) voter ID card, which serves as the de facto national identity document.
The INE card is widely accepted, nationally standardized, includes a photograph and biometric data, and is the most commonly used identity document in Mexico. CURP numbers can be validated against the RENAPO (Registro Nacional de Población) database.
Additional accepted documents include the passport, professional ID (cédula profesional), and military service card (cartilla militar). Age verification is mandatory (minimum age 18 for most gambling activities).
AML Obligations
Mexico's AML framework is governed by the Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (Anti-Money Laundering Law). Gambling operators are "vulnerable activities" under this law and must report transactions above specified thresholds, implement customer identification procedures, and maintain records for regulatory inspection.
The UIF (Unidad de Inteligencia Financiera) receives suspicious activity reports and oversees AML compliance. Mexico's AML enforcement in the gambling sector has been inconsistent but is tightening — particularly as online gambling volumes grow and regulatory attention increases.
The Cross-Border Operator Challenge
Operators targeting multiple LATAM markets face a compliance multiplication problem. Four countries means four regulatory authorities, four document ecosystems, four AML frameworks, and four enforcement postures. An operator expanding from Colombia to Brazil cannot simply extend their existing compliance program — they must build a Brazil-specific program from scratch.
Verification infrastructure that handles the full range of LATAM documents — CPF, RG, CIN, CNH in Brazil; cédula in Colombia; DNI in Argentina; CURP and INE in Mexico — through a single integration dramatically reduces this complexity. The alternative — building separate verification integrations for each country — creates technical debt that compounds with every new market.
LATAM iGaming KYC FAQ
- Which LATAM country has the most mature iGaming regulation?
- Colombia, which launched the Coljuegos framework in 2016. It has the longest enforcement track record, clearest licensing requirements, and most established operator oversight in the region.
- What is the minimum gambling age across LATAM?
- 18 in all four major markets (Brazil, Colombia, Argentina, Mexico). Age verification at registration is mandatory — self-declaration alone does not satisfy regulatory requirements.
- Why is Argentina's regulation fragmented?
- Gambling regulation in Argentina operates at the provincial level. Each province has authority to regulate within its borders, resulting in different licensing requirements, tax rates, and operational rules across jurisdictions. Operators may need multiple provincial licenses.
- What documents are required for KYC in Brazil's iGaming market?
- CPF (validated against Receita Federal), government-issued photo ID (RG, CIN, CNH, or passport), date of birth, and residential address. The RG varies by state, creating document verification complexity.
- What AML obligations apply to LATAM gambling operators?
- All four countries require customer due diligence, transaction monitoring, suspicious activity reporting to their respective financial intelligence units, and sanctions/PEP screening. Colombia and Mexico classify gambling operators as "vulnerable activities" with specific reporting thresholds.
Relevant Articles
Crypto KYC in Brazil: The Virtual Asset Framework
Brazil's broader compliance landscape.
Apr 17, 2026
How Online Casinos Stop Bonus Abuse and Multi-Accounting
Detection techniques for LATAM operators.
Apr 18, 2026
MiCA Compliance Checklist
How EU crypto regulation compares.
Apr 23, 2026
Identity Fraud in Southeast Asia: The Maldives Surge
How emerging markets handle fraud surges.
Apr 24, 2026
What is deepidv?
Not everyone loves compliance — but we do. deepidv is the AI-native verification engine and agentic compliance suite built from scratch. No third-party APIs, no legacy stack. We verify users across 211+ countries in under 150 milliseconds, catch deepfakes that liveness checks miss, and let honest users through while keeping bad actors out.
Learn More