Singapore Casino AML Regulations 2026: Key Changes

 

Regulation Name: Casino Control (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) (Amendment) Regulations 2026
Date of Enforcement: 21 Sep 2026
Region: Singapore
Agency: Government of Singapore

Singapore has introduced amendments to its casino regulatory framework to strengthen the prevention of money laundering (ML), terrorism financing (TF) and proliferation financing (PF). The Casino Control (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) (Amendment) Regulations 2026, issued as S 649/2026, were published in the Government Gazette on 18 September 2026 and came into operation on 21 September 2026.

Made by the Gambling Regulatory Authority of Singapore (GRA), with the approval of the Minister for Home Affairs, the amendments modify the Casino Control (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) Regulations 2009.

The changes address several important aspects of casino financial crime compliance. These include the identification and verification of patrons, the treatment of transactions involving S$4,000 or more, enhanced due diligence for higher-risk patrons, senior management approval requirements, ongoing monitoring and the formal handling of risk information received under the Casino Control Act 2006.

For casino operators, the amendments have implications beyond customer onboarding. They affect how customer relationships are approved, how changes in risk profiles are escalated, how transaction activity is classified and how intelligence about potentially higher-risk individuals is incorporated into compliance decisions.

Understanding these changes is essential for operators seeking to maintain effective, risk-based AML/CFT/PF controls in Singapore’s casino sector.

1. Overview of Singapore’s Casino AML Amendments 2026

The 2026 regulations amend the existing regulatory framework rather than replace it entirely. They introduce revised definitions, replace selected provisions governing customer identification and verification, expand the requirements for managing higher-risk patrons, and establish a new part addressing the disclosure and assessment of risk information.

The principal changes can be summarised as follows.

Regulatory area	Key amendment	Compliance implication
Regulatory definitions	Revised definitions of cash, identifying information and related terms, with references to the Casino Control Act 2006	Policies and systems must use the applicable statutory definitions
Cash transaction classification	Revised definitions of cash in, cash out and operational gaming day	Transaction capture and reporting logic may require reassessment
Patron account opening	Identity verification using reliable and independent sources, with specific conditions for non-face-to-face onboarding	Account-opening controls must reflect the prescribed verification requirements
Transactions of S$4,000 or more	Revised identification and verification provisions for specified payment and receipt circumstances	Transaction-triggered due diligence must align with the relevant statutory provisions
Higher-risk patrons	Source of wealth and source of funds verification, senior approval and ongoing monitoring	Higher-risk relationships require documented risk assessment and governance
Politically exposed persons (PEPs)	Risk-based flexibility for specified PEP categories, subject to a high-risk exception	PEP procedures must distinguish between risk categories and applicable exceptions
Deferred verification	Conditional permission to establish or continue certain higher-risk relationships before verification is complete	Deferral requires safeguards, senior approval and completion within the applicable timeframe
Risk information	New procedures for assessing and retaining information received under section 139A	Operators need documented processes for evaluating and recording risk intelligence

These amendments are particularly relevant to compliance teams responsible for customer due diligence (CDD), enhanced due diligence (EDD), transaction monitoring, regulatory reporting and internal control governance.

2. Revised Definitions and Expanded Transaction Coverage

One of the foundational changes concerns the definitions used throughout the regulations. These amendments matter because operational systems, internal policies and reporting processes depend on consistent interpretations of regulated activities.

2.1 Revised definitions and statutory references

The amendments update the definitions of “cash” and “identifying information” by referring to the meanings given in sections 139(5) and 139A(13), respectively, of the Casino Control Act 2006. They also remove the separate definitions of “patron”, “patron account” and “suspicious transaction report” from the subsidiary regulations, referring instead to the Act for their meanings.

The regulations additionally introduce a definition of “Code”, referring to the Internal Controls Code for Casino Operators issued by the GRA, as amended from time to time, subject to modifications or waivers allowed by the Authority.

This is significant for compliance governance because the amendments expressly refer to the Code in several operational contexts, including account-opening controls and the timeframe for completing deferred verification.

What operators should do: Review internal policies, standard operating procedures, technology specifications and compliance documentation to ensure that definitions and cross-references remain consistent with the amended regulations and the applicable version of the Code.

2.2 A broader view of cash-in and cash-out activity

The amendments revise the definitions of cash in and cash out under regulation 3.

The revised definition of cash in includes:

• Cash received by a casino operator in exchange for casino chips.

• Cash deposited into a patron account, whether at or outside the casino, including at a branch office.

• Cash received in settlement of a debt owed by a patron or for the redemption of a cheque held by the casino operator.

The revised definition of cash out includes:

• Cash paid by the casino operator to redeem casino chips.

• Cash paid following a withdrawal from a patron account, whether at or outside the casino, including at a branch office.

• Cash paid by the casino operator as a complimentary item.

These provisions make it important for operators to examine how transactions are classified across different service channels and operational locations.

For example, a cash deposit made at a branch office outside the casino premises may fall within the revised cash-in definition. Similarly, a cash withdrawal from a patron account processed outside the casino premises may fall within the revised cash-out definition.

The practical compliance question is whether the operator’s transaction capture, classification and reporting arrangements correctly reflect the amended definitions.

2.3 Introduction of the operational gaming day

The amendments replace the definition of “gaming day” with “operational gaming day”.

An operational gaming day is a period fixed by the casino operator for tracking and reporting all cash-in and cash-out transactions for a particular day. The definition expressly includes transactions involving gaming machines, cage transactions and gaming-table transactions.

Importantly, different transaction types may have different operational periods, with different start and end times.

This distinction has practical implications for transaction aggregation and reporting. If different transaction categories operate on different reporting periods, a compliance team must understand how those periods are configured and applied to the relevant reporting obligations.

Operators should review the configuration of transaction-processing systems, reconciliation procedures and reporting workflows to ensure that cash activity is captured against the appropriate operational gaming day.

The regulations define the operational gaming day but do not, in the provisions examined here, prescribe a single universal start and end time for every casino transaction category.

3. Patron Account Opening and Identity Verification

The amendments replace regulation 9 and modify regulation 8, strengthening the explicit requirements governing the opening of patron accounts and verification of identity.

3.1 Identification information at account opening

Under the amended regulation 8(2), a casino operator must obtain and record a patron’s identifying information when opening a patron account.

This establishes an explicit account-opening requirement for capturing the relevant information. It also highlights the importance of maintaining complete and reliable customer records.

For compliance teams, account-opening procedures should clearly specify:

• The identifying information that must be collected under the applicable statutory framework.

• How the information is recorded and associated with the correct patron.

• How incomplete or inconsistent information is handled.

• How records are maintained for subsequent monitoring and review.

These are implementation considerations intended to support compliance with the legal requirement to obtain and record identifying information.

3.2 Face-to-face and non-face-to-face account opening

The amended regulation 9 provides two routes for opening a patron account:

1. Through face-to-face contact with the patron.

2. Without face-to-face contact, in accordance with the Code.

Regardless of the account-opening method, the operator must verify the identity of the patron and, where applicable, the persons referred to in regulation 8(3), using reliable and independent sources.

The distinction between account-opening channels is important. Non-face-to-face account opening is not prohibited outright; it must be conducted in accordance with the Code.

Where an account is opened through face-to-face contact, an additional restriction applies. The operator must not permit a transaction through that patron account until a licensed special employee has, on at least one prior occasion, met the patron face-to-face at the casino premises and verified the patron’s identity.

This means that completing the initial account-opening process does not, by itself, satisfy every condition for allowing transactions through an account opened face-to-face.

Compliance takeaway: Operators should distinguish between account creation, identity verification and authorisation to transact. These should be represented as separate control points wherever necessary to ensure the amended conditions are met.

4. Identification and Verification for Transactions of S$4,000 or More

The amendments replace regulations 11 and 12 and introduce regulation 12A. These provisions establish identification and verification requirements in specified circumstances under section 139(1) of the Casino Control Act 2006.

4.1 Payments of S$4,000 or more

Under the replacement regulation 11, in the circumstances described in section 139(1)(b) of the Act, a casino operator must:

• Establish the identity of the patron and any person acting on the patron’s behalf.

• Record their identifying information.

• Where the transaction is carried out in person, verify their identities using reliable and independent sources.

4.2 Receipts of S$4,000 or more

Under the replacement regulation 12, corresponding requirements apply in the circumstances described in section 139(1)(c).

The operator must establish the identity of the patron and any person acting on the patron’s behalf, record the identifying information and, where the transaction is carried out in person, verify their identities using reliable and independent sources.

4.3 Other specified circumstances

New regulation 12A addresses circumstances described in section 139(1)(d) or (e) of the Act.

In these circumstances, the operator must establish and record the identifying information of the patron and any person acting on the patron’s behalf. Where the circumstances arise in connection with an in-person transaction, the operator must also verify their identities using reliable and independent sources.

A critical distinction is that the amended regulations link these obligations to the specific circumstances set out in the Act. They should not be interpreted as imposing an identical S$4,000 threshold on every transaction or as establishing a universal requirement to verify identity in precisely the same manner for every payment channel.

What this means for operators: Transaction-triggered identification controls should be mapped to the relevant statutory circumstances, transaction direction, payment channel and involvement of representatives. Systems should distinguish between establishing identity, recording identifying information and verifying identity, rather than treating these as interchangeable actions.

5. Ongoing Monitoring and Enhanced Due Diligence

The amendments change the heading of regulation 13 to “Ongoing monitoring” and remove the words “income and” from paragraph 13(1).

They also amend regulation 14, introducing more explicit requirements for managing higher-risk patrons and certain politically exposed persons.

5.1 Source of wealth and source of funds verification

Under amended regulation 14(1A)(a), casino operators must establish by reasonable means, and verify using reliable and independent sources, the source of wealth and source of funds of a higher-risk patron.

These concepts address related but distinct questions:

• Source of wealth (SoW): How the patron accumulated their overall wealth.

• Source of funds (SoF): Where the money or assets associated with the relevant dealings originate.

For example, a patron may have accumulated wealth through a business sale, inheritance or long-term investments. However, the operator may still need to establish and verify the origin of the specific funds used in the casino relationship.

The amendment expressly requires both the establishment and verification of these sources for higher-risk patrons.

From an operational perspective, a casino’s EDD framework should identify the evidence needed to substantiate the customer’s wealth and the origin of the funds involved. The evidence should be evaluated in the context of the patron’s risk profile rather than accepted solely because information has been provided.

5.2 Senior management approval

Amended regulation 14(1A)(b) requires prior approval from an employee holding a senior managerial or executive position before:

• Establishing dealings with a higher-risk patron.

• Continuing dealings with a patron who subsequently becomes higher risk.

• Continuing dealings with a beneficial owner of a patron account who subsequently becomes higher risk.

The approval must be based on the information concerning the source of wealth and source of funds described in regulation 14(1A)(a).

This creates a clear governance requirement: higher-risk relationships cannot be managed solely through routine onboarding or frontline operational decisions.

Operators should ensure that approval workflows capture the decision-maker, the evidence reviewed, the risk assessment and the rationale for approval. Such documentation is a practical way to demonstrate that the approval process is substantive and informed.

5.3 Ongoing monitoring and reassessment of approval

The amended regulation 14(1A)(ba) requires ongoing monitoring of higher-risk patrons. Where a change in the patron’s risk profile exceeds the materiality and risk thresholds established under regulation 17(4)(a), the operator must reassess the approval previously obtained and update the relevant patron records.

This provision connects ongoing monitoring directly to governance.

A patron’s risk profile is not necessarily static. New information, changes in transaction behaviour or developments affecting the patron may warrant reassessment under the operator’s applicable risk framework.

The regulatory requirement is not simply to monitor activity. It also requires the operator to respond to qualifying changes in risk by reassessing the relevant approval and updating records.

Practical implication: Monitoring systems and compliance procedures should be connected to escalation and approval workflows. Alerts that indicate a material change in a higher-risk patron’s profile should be capable of triggering documented review rather than ending with alert closure.

6. A Risk-Based Approach to Politically Exposed Persons

The amendments introduce regulation 14(3) to permit a risk-based approach when determining whether to perform the specified enhanced due diligence measures, or the extent of those measures, for certain politically exposed persons (PEPs).

The provision covers three categories:

1. PEPs in Singapore: Individuals entrusted with a prominent public function in Singapore, together with their immediate family members and close associates in a personal or professional capacity.

2. PEPs associated with international organisations: Individuals entrusted with a prominent public function by an international organisation, together with their immediate family members and close associates.

3. Former PEPs: Individuals who have stepped down from prominent public functions, with consideration given to the level of influence they may continue to exercise, together with their immediate family members and close associates.

The amendments also introduce a definition of “international organisation”. It refers to an entity established by formal political agreements between member countries or territories that have the status of international treaties, whose existence is recognised by law in those countries or territories, and which is not treated as a resident institutional unit of the country or territory in which it is located.

6.1 Risk-based flexibility is not an unrestricted exemption

Regulation 14(4) expressly provides that the risk-based flexibility in paragraph (3) does not apply where a PEP’s dealings or transactions with the casino operator present a high risk of money laundering, terrorism financing or proliferation financing.

This qualification is essential when interpreting the amendment.

The regulations permit operators to determine whether and to what extent the specified EDD measures should be applied to the PEP categories covered by regulation 14(3). However, that flexibility cannot be used where the PEP’s dealings or transactions present a high ML/TF/PF risk.

Operators should therefore distinguish between identifying a person as a PEP and assessing the risk presented by that person’s dealings or transactions.

A PEP classification is an important risk factor, but the amended provision calls for a risk-based assessment within defined legal boundaries. The continued influence of former officeholders, relevant relationships and the circumstances of their transactions may all be pertinent to that assessment.

Compliance takeaway: PEP screening should feed into risk assessment and EDD decision-making. Procedures should document why a particular level of due diligence is appropriate and identify when the high-risk exception prevents reliance on the flexibility provided by regulation 14(3).

7. Deferred Verification for Higher-Risk Patrons: Conditions and Safeguards

One of the most operationally significant additions is the introduction of regulation 14(5)–(8), which addresses situations in which a casino operator may establish or continue dealings with a higher-risk patron before completing source-of-wealth and source-of-funds verification.

This is a conditional permission, not a general exemption from verification.

7.1 When may verification be deferred?

Under regulation 14(5), a casino operator may establish dealings with a higher-risk patron, or continue dealings with a patron or beneficial owner of a patron account who subsequently becomes higher risk, before completing the verification required by regulation 14(1A)(a), but only where all the specified conditions are met.

These conditions are:

• Business necessity: Deferring verification must be essential to avoid interrupting the normal conduct of business operations.

• Effective risk management: The risks of money laundering, terrorism financing and proliferation financing must be capable of being effectively managed by the operator.

• Prior senior approval: Approval must be obtained from an employee holding a senior managerial or executive position before the operator establishes or continues the dealings without completed verification.

The provision therefore requires operators to justify the deferral, demonstrate that the associated risks can be managed and obtain approval before proceeding.

7.2 Internal policies and completion deadlines

Where deferred verification is used, regulation 14(6) requires the operator to adopt internal risk management policies and procedures specifying the conditions under which dealings may be established or continued before verification is complete.

The operator must also complete verification within the applicable timeframe specified in the Code, subject to the provisions of the regulation.

If verification cannot be completed within that timeframe, regulation 14(7) requires the operator to stop dealings with the higher-risk patron after the deadline until verification is completed.

This creates a firm operational consequence for missed verification deadlines.

7.3 Approval is required after verification as well

Regulation 14(8) introduces an additional safeguard. After verification has been completed under the relevant provisions, the operator must not continue or resume dealings with the higher-risk patron unless senior managerial or executive approval has been obtained, taking into account the verified source of wealth and source of funds.

Consequently, the process is not complete merely because the outstanding documents or verification checks have been obtained.

The verified information must inform a subsequent approval decision before dealings continue or resume.

7.4 An operational workflow for deferred verification

Casino operators can translate these requirements into a controlled workflow:

1. Identify the higher-risk patron and the outstanding source-of-wealth or source-of-funds verification.

2. Document why deferral is essential to avoid interrupting normal business operations.

3. Assess whether ML/TF/PF risks can be effectively managed during the deferral period.

4. Obtain the required senior managerial or executive approval before establishing or continuing dealings.

5. Track the verification deadline specified in the Code and complete verification within the applicable timeframe.

6. Stop dealings if verification remains incomplete after the applicable deadline.

7. Once verification is complete, obtain the required approval based on the verified source of wealth and source of funds before continuing or resuming dealings.

This workflow reflects the conditions and sequence set out in regulation 14(5)–(8). Operators should confirm the applicable deadline against the Code rather than assume a universal number of days from the amendment itself.

8. New Requirements for Handling Risk Information

The amendments insert a new Part IIIA, titled “Disclosure of Risk Information”, into the principal regulations.

This part establishes requirements for persons to whom risk information may be disclosed and the procedures operators must follow when receiving or accessing such information under section 139A of the Casino Control Act 2006.

8.1 Who may receive risk information?

Under new regulation 15, the prescribed persons to whom a casino operator may disclose risk information under section 139A(7) of the Act are:

• An auditor.

• A lawyer.

• A consultant.

The individual must have been appointed or engaged by the casino operator under a contract for service.

The provision identifies these categories of recipients for the purposes of the statutory disclosure framework. It should not be read as a general permission to share risk information without regard to the conditions and requirements of section 139A.

For operators, the practical priority is to establish appropriate governance around any disclosure, including the recipient’s role and the contractual engagement.

8.2 Assessing risk information received under a written notice

New regulation 16 sets out what a casino operator must do after receiving or accessing risk information about a person pursuant to a written notice under section 139A.

The operator must first determine whether the person is a relevant party in relation to the casino operator.

If the person is a relevant party, the operator must:

1. Assess the risks of money laundering, terrorism financing and proliferation financing presented by that person, taking into account both the risk information and information already in the operator’s possession.

2. Keep a written record of the risk assessment and all decisions relating to it, including whether the person is to be considered a higher-risk patron.

If the person is not a relevant party at that time, the operator must retain the risk information so that it can be used to assess the person’s ML/TF/PF risks if the person subsequently becomes a relevant party.

This is an important distinction between the immediate assessment of a relevant party and the retention of information about someone who may become relevant later.

8.3 Connecting risk intelligence to customer due diligence

The new provisions establish a structured process for incorporating risk information into casino compliance decisions.

Receiving information is only the first step. Operators must determine the person’s relevance, assess the risks where applicable, document the assessment and retain information for potential future relevance.

This has practical implications for customer records and risk management systems. Operators should be able to associate relevant information with the appropriate person, preserve the written assessment and its decisions, and make retained information available for reassessment if the person’s relationship with the casino changes.

A documented process also helps establish an audit trail explaining how risk intelligence influenced the classification and treatment of a patron.

The regulations do not prescribe a particular software platform or data architecture. However, a centralised and appropriately controlled process for retaining and assessing relevant information may help operators meet these obligations consistently.

9. Changes to Risk Assessment, Internal Controls and Reporting

The amendments also modify regulations 17, 19 and 21 of the principal regulations.

9.1 Risk assessment includes persons acting on behalf of patrons

The amendment to regulation 17(4)(d)(i) and (ii) expands the relevant wording from “individual patrons or categories of patrons” to “individual patrons, categories of patrons or persons acting on behalf of individual patrons”.

This change expressly brings persons acting on behalf of individual patrons into the specified provisions concerning risk assessment.

For compliance teams, this reinforces the importance of identifying representatives and considering their relevance within the applicable risk assessment framework, rather than focusing exclusively on the named patron.

Operators should review whether their procedures and records adequately capture persons acting on behalf of patrons wherever required.

9.2 Updates to internal control and disclosure-related provisions

The amendments also make targeted changes to the principal regulations’ internal control and disclosure framework.

Regulation 8 is amended to replace the reference to an operator’s “system of internal controls” with “the Code”. Regulation 19(3)(a) is amended by deleting the words referring to disclosures under the Terrorism (Suppression of Financing) Act 2002. Regulation 21(a) is amended to include references to new regulation 16(a), (b) and (c).

These changes should be considered alongside the wider amendments rather than in isolation. In particular, operators should review their policies, control documentation and reporting arrangements against the amended legal text and the applicable Code.

The deletion of a reference in regulation 19 should not, by itself, be interpreted as eliminating obligations imposed elsewhere under the relevant legislation. The scope of any continuing disclosure obligation must be determined by reference to the applicable statutory provisions.

10. What Casino Operators Should Prioritise

The amendments have implications across compliance, operations, technology, risk management and senior management oversight. Operators should prioritise a structured review of their current control environment.

10.1 Review customer due diligence procedures

Account-opening and transaction-related procedures should be checked against amended regulations 8, 9, 11, 12 and 12A.

The review should distinguish between the collection and recording of identifying information, establishing identity, and verifying identity using reliable and independent sources.

It should also account for the separate conditions applying to face-to-face and non-face-to-face account opening.

10.2 Reassess transaction classification and reporting logic

The revised definitions of cash in, cash out and operational gaming day may affect the way transaction activity is captured and grouped.

Operators should review their systems for:

• Cash deposits and withdrawals conducted outside the casino premises.

• Transactions processed through branch offices.

• Cash received in debt settlement or cheque redemption.

• Cash paid as complimentary items.

• Reporting periods applicable to different categories of casino transactions.

Any system changes should be validated against the amended definitions and the operator’s applicable reporting obligations.

10.3 Strengthen higher-risk patron governance

The revised regulation 14 establishes a clear relationship between enhanced due diligence, source-of-wealth and source-of-funds verification, senior approval and ongoing monitoring.

Operators should ensure that their procedures specify who can approve higher-risk relationships, what evidence must be reviewed, how approval decisions are recorded and when a change in risk profile requires reassessment.

10.4 Implement controlled verification deferral

Where an operator intends to use the deferral provisions, its internal policies must define the circumstances in which deferral is permitted and how risks will be managed.

The process should include prior approval, deadline tracking, escalation for incomplete verification and a restriction on dealings where the applicable deadline has passed without completion.

The operator must also ensure that the required approval is obtained after verification before dealings with the higher-risk patron continue or resume.

10.5 Review PEP risk assessment procedures

PEP procedures should reflect the categories and qualifications in amended regulation 14.

Operators should distinguish between individuals holding prominent public functions in Singapore, individuals entrusted with such functions by international organisations, and former officeholders. Relevant family members and close associates should also be addressed.

The procedures should account for the continuing influence of former officeholders and the exception for dealings or transactions presenting high ML/TF/PF risk.

10.6 Establish a documented risk-information process

Operators should develop or review procedures for receiving, assessing, recording and retaining risk information under section 139A.

These procedures should identify how relevance is determined, how assessments and decisions are documented, and how information is retained for future use when a person subsequently becomes a relevant party.

10.7 Test the effectiveness of the amended controls

Updating written policies is only one part of implementation. Operators should also test whether the amended requirements are reflected in actual workflows.

Testing may include reviewing account-opening files, sampling transactions around applicable thresholds, examining higher-risk patron approvals, checking overdue verification cases and confirming that relevant risk assessments are documented.

Such testing is an implementation recommendation, not a separate testing methodology prescribed by S 649/2026.

11. How Technology Can Support Casino AML Compliance

The amendments create several practical use cases for technology-enabled compliance processes. Technology can help casino operators apply consistent rules, maintain records and connect customer risk assessments with operational decisions.

However, technology does not replace the operator’s legal obligations, the need for reliable evidence or the requirement for appropriate senior approval.

11.1 Identity screening and customer risk assessment

Identity and screening solutions can support the identification of patrons and persons acting on their behalf, subject to the applicable legal requirements and the quality of available data.

Screening against relevant sanctions lists, PEP records and adverse media can contribute to risk assessment, where appropriate. Screening results must still be reviewed in context, with appropriate handling of false positives and unresolved matches.

11.2 Customer due diligence and evidence management

Digital CDD workflows can help collect identifying information, organise supporting evidence and maintain records associated with a patron’s risk classification.

For higher-risk patrons, evidence management processes can support the review of source-of-wealth and source-of-funds information, while approval workflows can document the basis for senior management decisions.

11.3 Transaction monitoring and risk-based escalation

Transaction monitoring systems can help identify activity requiring further investigation under the operator’s risk framework.

The amendments make it especially important to connect relevant monitoring outcomes with customer risk profiles and governance processes. Where a qualifying change in risk profile is detected, the operator must reassess the relevant approval and update patron records as required by regulation 14(1A)(ba).

Monitoring alerts should therefore be integrated with documented review and escalation processes rather than treated solely as isolated transaction events.

11.4 Risk intelligence and audit trails

Information management systems can support the controlled retention and assessment of risk information received under section 139A.

Useful capabilities may include person-level record matching, secure information retention, written assessment records, decision histories and mechanisms for reassessing information when a person becomes relevant to the operator.

The objective is not simply to store more data. It is to ensure that relevant information can inform defensible, documented compliance decisions.

For a RegTech provider such as ZIGRAM, these regulatory developments illustrate the value of combining reliable data, screening, risk assessment and workflow capabilities in a coherent compliance environment.

Any technology deployment should nevertheless be mapped to the operator’s specific obligations and should not be presented as a substitute for legal interpretation or regulatory approval.

12. Conclusion: From Regulatory Change to Operational Readiness

Singapore’s Casino Control (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) (Amendment) Regulations 2026 introduce targeted but consequential changes to the casino AML/CFT/PF framework.

Effective from 21 September 2026, the amendments address the identification and verification of patrons, transaction classification, ongoing monitoring, higher-risk patron management, PEP due diligence, conditional verification deferral and the assessment and retention of risk information.

Their wider operational significance lies in the links between these controls. Identity verification must align with account-opening and transaction requirements. Higher-risk patron relationships require substantiated source-of-wealth and source-of-funds checks, senior approval and ongoing monitoring. Where verification is deferred, strict conditions and subsequent approval requirements apply. Risk information must be assessed and documented in accordance with the new provisions.

For casino operators, the priority is to translate these legal requirements into clear procedures, reliable data capture, effective escalation mechanisms and auditable decisions.

A compliance framework that connects customer due diligence, transaction monitoring, risk intelligence and management oversight will be better positioned to implement the amendments consistently and demonstrate how customer and transaction risks are assessed and managed.

Regulatory source: Singapore Government Gazette, Casino Control (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) (Amendment) Regulations 2026, S 649/2026, published 18 September 2026; effective 21 September 2026.

Read about the laws; click here.

Read about the product: Transact Comply

Empower your organization with ZIGRAM’s integrated RegTech solutions – Book a Demo