Last reviewed: 2026-07-20

Which KYC Tools Do MyStake, BetWest, Betory, and KoalaBet Use?

A brand-by-brand audit of casino KYC vendors, Onfido evidence at BetWest, document checks, privacy, retention, and safety questions.

Reviewed by Jerry, Canada iGaming editor · Published 2026-07-20 · Updated 2026-07-20 · 9 min read

Quick answer

BetWest's current frontend contains an Onfido identity-verification integration. Onfido is now part of Entrust. MyStake and KoalaBet publish detailed KYC rules but did not name a specialist identity vendor in the public policies reviewed. No KYC vendor could be verified for Betory from current public material.

KYC means Know Your Customer. It is the process used to confirm that a player is an adult, is using their own identity and payment method, and is not creating an account for fraud or money laundering. A specialist tool can add document checks, facial comparison, database checks, workflow records, and fraud signals. That can be a real safety and compliance strength. It also means sensitive data may move to another company, so the vendor and privacy terms matter.

Brand-by-brand KYC tool audit

Partner brand	What is public	Named KYC vendor	Practical reading
MyStake	A public KYC/AML policy explains identity checks and says identification and transaction records are kept electronically for at least 10 years.	None found in the policy reviewed.	The process is documented, but the upload screen should identify any outside processor.
BetWest	The July 2026 frontend bundle contains Onfido integration code and a verification URL configuration.	Onfido, now part of Entrust, is the strongest vendor evidence found.	This supports specialist-tool use, but the live verification screen should confirm whether a particular player is routed through it.
Betory	No current public KYC vendor record could be verified during this review.	Not publicly verified.	Ask support for the processor name and privacy notice before uploading documents.
KoalaBet	Its policy describes identity, address, selfie, and source-of-funds levels plus KYC triggers.	None found in the public policy reviewed.	The rules are detailed, but the policy does not establish that an outside vendor holds the files.

An unnamed vendor is not evidence of a weak process. Some operators may handle checks internally or reveal the vendor only when verification starts. The honest marketing approach is to praise the documented control without attaching a company name that cannot be proved.

What Onfido or Entrust does

Entrust says its Onfido Identity Services help business customers verify users. Depending on the customer's setup, the service can collect identity documents, live photos or video, contact and device details, and results from trusted data providers. Entrust describes itself as a service provider or processor when performing these checks for a customer.

This can be valuable for a casino. Automated document checks can look for tampering. Facial comparison can help test whether the person presenting the document matches it. Workflow records can give a compliance team a repeatable process instead of relying on an unstructured email exchange.

Onfido was acquired by Entrust in April 2024, so current notices may use both names. BetWest's frontend evidence is a good technical signal, but it does not show which checks are enabled, how every jurisdiction is configured, or whether every account is sent to the same provider. The name shown on the live consent or upload screen remains the best account-specific evidence.

Simple graph

Casino asks for verification
            ↓
Player sees vendor name + privacy notice
            ↓
ID document and selfie may be captured
            ↓
KYC tool checks document + person + risk signals
            ↓
Tool sends a result to the casino
            ↓
Casino decides whether the account passes
            ↓
Retention and deletion rules still apply

Why third-party KYC can improve safety

A specialist identity company can spread the cost of security engineering across many business customers. It may have more experience with document formats, manipulated images, liveness checks, sanctions screening, and identity fraud than a small operator could build alone. A structured vendor also creates contracts, audit records, versioned privacy notices, incident processes, and defined service roles.

These controls can protect both the casino and genuine players. Age checks help keep minors out. Payment-ownership checks can reduce stolen-account use. Duplicate-account checks can enforce one-account rules. Source-of-funds reviews can support anti-money-laundering controls. A clear pass or review workflow may also reduce random document requests.

KYC is not a guarantee that a casino is licensed, that a withdrawal will be approved, or that data can never be breached. It is one control. The strongest public claim is specific: the operator uses a named tool for a named check under a named privacy notice.

Privacy questions before uploading ID

The Office of the Privacy Commissioner of Canada says an organization remains responsible for personal information transferred to a third party for processing. It should use trusted providers, tell customers about the outsourcing, and protect the information through contracts and other controls. Cross-border processing should be disclosed because information may be subject to laws in the country where it is handled.

Read what the casino and vendor say about the purpose, document types, facial or biometric processing, storage countries, subcontractors, retention, correction, deletion, and complaint contact. Entrust's Onfido product notice says the exact data depends on the customer's configuration and chosen checks. That means a vendor name alone does not answer every privacy question.

MyStake's public policy states that identity and transaction records are kept electronically for at least 10 years. That is a meaningful disclosure because it tells a player the files are not temporary. KoalaBet explains the documents and triggers in more detail but did not name an outside vendor in the version reviewed. Each style provides part of the picture; the best version would combine both.

What documents may be requested

Common KYC requests include a government-issued photo ID, a selfie or short live capture, proof of address, proof that a bank card or account belongs to the player, and source-of-funds evidence for higher-risk activity. KoalaBet's public policy describes identity, address, selfie, and source-of-funds levels. MyStake's policy gives the operator a broad right to request documents it considers necessary under its KYC and anti-money-laundering process.

Only upload through the official casino or named vendor page. Do not send an unrequested passport or selfie through social media or to a personal email address. Cover information only when the official instructions allow it; an altered or partly covered document may fail an authenticity check. Never include an online-banking password, PIN, one-time code, or crypto seed phrase.

Eight checks for a safer KYC session

Confirm the exact casino domain and open verification from the account menu.
Read why the check is required and which documents are accepted.
Record the KYC vendor name shown on the live screen.
Open the casino and vendor privacy notices before capture.
Check whether facial geometry or another biometric may be created.
Check storage location, retention period, subcontractors, and deletion or correction routes.
Use an updated personal device and a private connection.
Save the verification reference and contact official support if the process repeats or fails.

A repeated verification request can have an ordinary cause, such as a blurry image or mismatched address. It should still produce a clear explanation and support route.

Explained Like You're 12

Casinos are only for adults. In Ontario, players must be 19 or older. KYC is like a door guard checking an adult's ID. A specialist company may build the scanner while the casino decides who may enter. The scanner can help catch a fake card, but it also sees private information. An adult should know the scanner company's name, why it needs the information, and how long it keeps it.

Responsible gambling

KYC is a compliance and fraud control, not a promise of winnings. Do not deposit more because verification is pending, and do not open another account to avoid a check. Keep gambling inside a fixed entertainment budget and never use borrowed or essential money.

If gambling causes stress, debt, secrecy, or conflict, stop. ConnexOntario offers free and confidential support across Ontario 24/7 at 1-866-531-2600 or by texting connex to 247247.

FAQ

Does BetWest use Onfido?

BetWest's July 2026 frontend contains an Onfido integration. Confirm the name on the live verification screen because public code does not prove that every account uses the same route.

Does third-party KYC keep my information safe?

A specialist can add strong document and fraud controls, but it also processes sensitive data. Safety depends on the exact checks, contracts, security, retention, access, and privacy practices.

Which KYC company does KoalaBet use?

No specialist company was named in the public policy reviewed. KoalaBet describes its KYC levels and documents, but the live upload screen must be checked for a vendor name.

How long does MyStake keep KYC records?

The public policy reviewed says identification and transaction records are kept electronically for at least 10 years. Check the latest privacy notice for current details and rights.