Statute Details
- Title: Casino Control (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) Regulations 2009
- Act Code: CCA2006-S507-2009
- Type: Subsidiary legislation (Regulations)
- Authorising Act: Casino Control Act (Chapter 33A)
- Enacting authority: Casino Regulatory Authority of Singapore (with Minister for Home Affairs’ approval)
- Commencement: 21 October 2009
- Current version status: Current version as at 26 March 2026
- Key Parts (as reflected in the extract): Part I (Preliminary); Part II (Cash transactions); Part III (Customer due diligence and record-keeping); Part IV (Framework); Part V (Miscellaneous)
- Key provisions (high-level): Cash transaction reporting; customer due diligence (CDD) and beneficial ownership identification; ongoing monitoring; enhanced due diligence for higher-risk patrons; training; suspicious transaction reporting framework; independent audit; disciplinary action against casino operator
- Notable amendments shown in the timeline: S 63/2010; S 320/2015; S 412/2019; S 861/2024 (effective 14 Nov 2024)
What Is This Legislation About?
The Casino Control (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) Regulations 2009 (“ML/TF/PF Regulations”) set out mandatory anti-money laundering, counter-terrorism financing, and counter-proliferation financing controls for casino operators in Singapore. In plain terms, they require casinos to know their customers, monitor transactions, report certain cash and suspicious activities, and maintain records and internal governance structures designed to prevent criminals from using casino services to launder money, fund terrorism, or finance proliferation of weapons of mass destruction.
Because casinos are inherently cash-intensive and can involve complex customer funding flows (deposits, withdrawals, cheque cashing, credit lines, and other patron accounts), the Regulations impose a risk-based compliance framework. The approach mirrors international standards: identify and verify patrons and beneficial owners, apply enhanced measures for higher-risk patrons (including politically-exposed persons), and continuously monitor transactions to detect unusual or potentially illicit activity.
The Regulations operate as subsidiary legislation under the Casino Control Act. They translate the Act’s regulatory objectives into operational requirements for casino operators—covering both “front-end” customer onboarding and “back-end” reporting, audit, and disciplinary mechanisms. For practitioners, the Regulations are best understood as a detailed compliance blueprint: what information must be collected, when verification must occur, what thresholds trigger reporting, and what governance structures must be implemented.
What Are the Key Provisions?
Part II: Cash transactions in casinos—cash transaction reporting and offences. The Regulations begin with a specific reporting obligation for cash movements. Regulation 3 imposes a duty to file a cash transaction report for a “significant cash transaction” (as defined in regulation 2). While the extract truncates the detailed threshold mechanics in regulation 3(1), the structure indicates that reporting is triggered either by a single cash transaction or by multiple cash transactions aggregated within the relevant framework. This is a classic AML control: casinos must report large or otherwise significant cash activity to enable regulatory and law-enforcement analysis.
Part II also includes offences (regulation 5). Although the extract does not reproduce the offence wording, the presence of an offences provision signals that non-compliance with reporting and related requirements can attract criminal or regulatory liability. Practitioners should treat Part II as a “high-risk compliance area” because cash reporting failures are often viewed as fundamental AML breaches.
Part III: Customer due diligence (CDD), beneficial ownership, and record-keeping. Part III is the core of the Regulations. It prohibits anonymous accounts or fictitious names (regulation 7). This requirement is foundational: patron accounts must be opened using real identity information, and the casino operator must not allow accounts to be held under names that conceal the true identity of the customer.
The Regulations then require identification and verification at multiple stages:
- Opening of patron accounts: regulations 8 and 9 require identification measures and verification of identity when a patron account is opened.
- Beneficial owners: regulation 10 requires identification and verification of beneficial owners. The definition of “beneficial owner” in regulation 2 is broad and includes (i) individuals who ultimately own or control a body corporate or unincorporate, and (ii) persons on whose behalf the patron account is opened or transactions are conducted.
- Cash transactions and deposits at specified thresholds: regulations 11 and 12 require identification and verification of identity for cash transactions of $4,000 or more and for deposits of $4,000 or more. This threshold-based approach ensures that even where a patron account may already exist, certain cash-intensive activities trigger additional identity checks.
Ongoing monitoring and risk-based CDD: regulation 13 requires ongoing monitoring of transactions. This means the casino operator cannot treat AML controls as a one-time onboarding exercise; it must monitor patron activity to identify patterns inconsistent with the customer’s profile or with expected behaviour.
The Regulations also introduce a risk-based escalation mechanism. Regulation 13A (customer due diligence measures for existing customers) addresses the transition and continuing obligations for patrons already on the casino’s books. Regulation 14 requires enhanced customer due diligence (EDD) for higher-risk patrons. The definition of “higher-risk patron” includes patrons or beneficial owners who present higher risk of money laundering, terrorism financing, or proliferation financing, and also includes politically-exposed persons (PEPs). The definition of “politically-exposed person” is detailed and includes prominent public functions in Singapore or abroad, immediate family members, and close associates. Practitioners should expect EDD to involve deeper source-of-funds/source-of-wealth inquiries, more frequent monitoring, and senior oversight—although the precise EDD steps are typically specified in the Regulations or in the casino operator’s internal policies aligned with the Regulations.
Part IV: Governance framework—ML/TF/PF prevention, training, and suspicious transaction reporting. Regulation 17 requires a framework for prevention of money laundering, terrorism financing and proliferation financing. This is a governance requirement: casino operators must implement systems and controls designed to prevent and detect ML/TF/PF. In practice, this usually includes policies, procedures, internal controls, compliance roles, escalation pathways, and documentation.
Regulation 18 requires training. This ensures that relevant staff (including compliance and operational personnel) understand AML/CTF/PF risks, the casino’s obligations, and how to recognise and report suspicious activity. The definition of “authorised employee” in regulation 2 indicates that the operator may authorise employees to perform specific functions, which ties training to role-based compliance.
Regulation 19 establishes a suspicious transaction reporting framework. While the extract truncates the definition of “suspicious transaction report” and the full text of regulation 19, the concept is clear: when a transaction (or attempted transaction) is disclosed as suspicious—whether due to unusual patterns, lack of economic rationale, or other indicators—the casino operator must report it through the prescribed framework. For counsel advising casino operators, the practical question is not only whether a report is required, but also how the operator documents its decision-making, thresholds for escalation, and internal review process.
Part V: Independent audit and disciplinary action. Regulation 20 requires an independent audit. This is an internal assurance mechanism: the casino operator must have periodic, independent testing of AML/TF/PF controls to ensure they are effective and compliant. Regulation 21 provides for disciplinary action against the casino operator. This links compliance failures to regulatory consequences and underscores that the Regulations are enforceable and not merely best-practice guidance.
How Is This Legislation Structured?
The Regulations are structured into five Parts:
- Part I (Preliminary): sets out citation and commencement (regulation 1) and defines key terms (regulation 2), including “patron,” “patron account,” “beneficial owner,” “higher-risk patron,” “politically-exposed person,” “identifying information,” and “cash.”
- Part II (Cash transactions in casinos): includes the duty to file cash transaction reports (regulation 3), deleted provisions, and offences (regulation 5).
- Part III (Customer due diligence and record-keeping): contains prohibitions on anonymous/fictitious accounts (regulation 7), identification and verification requirements for patron accounts (regulations 8–9), beneficial owners (regulation 10), and threshold-based identity checks for cash transactions and deposits (regulations 11–12), plus ongoing monitoring (regulation 13), existing customer measures (regulation 13A), and enhanced due diligence for higher-risk patrons (regulation 14). Some provisions are deleted (regulations 6, 4, 15, 16 in the extract).
- Part IV (Framework for prevention of ML/TF/PF): requires a prevention framework (regulation 17), training (regulation 18), and a suspicious transaction reporting framework (regulation 19).
- Part V (Miscellaneous): includes independent audit (regulation 20) and disciplinary action against the casino operator (regulation 21).
Who Does This Legislation Apply To?
The Regulations apply to casino operators licensed under the Casino Control Act. The obligations are operationally directed at the operator, including how it opens and maintains patron accounts, processes deposits and withdrawals, and handles cash transactions within casino premises.
The Regulations also define concepts such as “branch office” (a place offering specified services relating to deposit account processing, credit line applications, receipt of deposits/payments, and withdrawal requests by cheque or electronic funds transfer). This indicates that compliance obligations may extend beyond the physical casino floor to certain operational locations where account-related services are performed. In addition, the concept of “authorised employee” shows that the operator’s staff—when authorised—perform functions that must align with the Regulations’ requirements.
Why Is This Legislation Important?
For practitioners, the ML/TF/PF Regulations are significant because they impose clear, enforceable compliance duties tailored to the casino environment. The combination of (i) threshold-based identity checks for cash transactions and deposits, (ii) beneficial ownership identification, (iii) ongoing monitoring, and (iv) enhanced due diligence for higher-risk patrons creates a layered defence against financial crime.
From an enforcement perspective, the presence of offences and a disciplinary action provision means that non-compliance can lead to serious regulatory consequences. Moreover, the independent audit requirement provides a mechanism for identifying control weaknesses early—often before they become enforcement issues.
Practically, the Regulations affect how casinos design onboarding workflows, customer data capture, verification processes, and transaction monitoring systems. They also influence legal risk management: counsel advising on compliance must ensure that internal policies, training materials, and reporting procedures are capable of demonstrating compliance with the Regulations’ specific thresholds and identity/beneficial ownership requirements.
Related Legislation
- Casino Control Act (Chapter 33A): the authorising Act under which these Regulations are made.
- Singapore AML/CFT/PF framework (general): while not listed in the extract, practitioners typically consider cross-cutting AML/CFT/PF obligations and guidance that apply to financial institutions and designated non-financial businesses, as well as any sector-specific requirements relevant to casinos.
Source Documents
This article provides an overview of the Casino Control (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) Regulations 2009 for legal research and educational purposes. It does not constitute legal advice. Readers should consult the official text for authoritative provisions.