What Is Ongoing Customer Due Diligence in Gaming Venues?
How ongoing customer due diligence helps gaming venues keep AML/CTF patron risk profiles current after onboarding.
Disclaimer: This article provides general information only and does not constitute legal advice. AML/CTF obligations can vary depending on the reporting entity, designated services, risk profile, systems and procedures. Gaming venues should consider AUSTRAC guidance, the AML/CTF Act and Rules, and seek independent professional advice where required.
Ongoing customer due diligence in gaming venues is the process of keeping a patron’s AML/CTF risk profile current after onboarding.
It involves monitoring relevant activity, updating customer information and identifying changes that may affect the venue’s understanding of patron risk.
Customer due diligence should not be treated as a once-only compliance task. A patron’s risk profile can change over time as their activity, behaviour, information and interactions with the venue evolve.
Without ongoing review, a venue may continue relying on information that was accurate at onboarding but no longer reflects the patron’s current behaviour or activity.
Why Ongoing CDD Matters for Gaming Venues
Gaming venues operate in environments where patron activity can be frequent, varied and difficult to assess through isolated events.
A patron may interact with the venue across different shifts, transactions, staff members and operational touchpoints. If the venue relies only on initial customer due diligence, it may miss changes that occur later.
Changes that may affect patron risk include
- Transaction activity becoming inconsistent with the existing profile
- Changes in cash or payout behaviour
- New or updated customer information
- Repeated frontline staff concerns
- Unusual patron behaviour
- Previous escalations or review outcomes
- Activity occurring across multiple venues
Ongoing CDD gives the venue a process for capturing these changes, reviewing them in context and connecting them to the patron’s broader AML/CTF risk profile.
For the broader lifecycle, see How Gaming Venues Should Manage Patron Risk, CDD and Ongoing Monitoring.
Ongoing CDD Is Part of Patron Risk Management
Ongoing CDD is one part of the wider patron risk management lifecycle.
The initial customer due diligence process establishes the starting point. It helps the venue understand who the patron is, what information has been collected and how the patron is initially assessed from an AML/CTF risk perspective.
Initial CDD establishes
- The patron’s identity and verified information
- The initial customer relationship context
- The starting AML/CTF risk profile
- The information that may need to be monitored over time
It helps the venue identify whether later activity, behaviour or information remains consistent with what was understood at onboarding.
What Ongoing CDD Should Monitor
Ongoing CDD should help gaming venues monitor information and activity that may affect the patron’s AML/CTF risk profile.
The purpose is not to treat every piece of information as an isolated compliance task. The purpose is to connect relevant signals so the venue can understand whether its current risk view remains appropriate.
Relevant ongoing CDD inputs may include
- Changes in customer information
- Transaction and payout activity
- Staff observations and venue interactions
- Previous escalation history
- Earlier review outcomes
- Changes in behaviour over time
- Risk indicators appearing across multiple interactions
A single observation may not change the risk profile. A single transaction may not justify deeper review. Where several signals begin to align, however, the venue may need to examine whether the existing patron risk profile still makes sense.
How Transaction Monitoring Supports Ongoing CDD
Transaction monitoring is one of the most important inputs into ongoing customer due diligence.
Monitoring becomes more useful when transaction activity can be reviewed alongside the patron’s history, risk rating, staff observations and previous decisions.
A transaction should be assessed against
- The patron’s current AML/CTF risk rating
- Previous transaction patterns
- Known customer information
- Earlier staff observations
- Prior escalations or review outcomes
- Relevant activity at other venues
It should help the venue decide whether activity confirms the existing patron risk view or challenges it.
For more detail, see Why Transaction Monitoring Needs a Single Patron View.
Ongoing CDD Is Not the Same as Patron Risk Reassessment
Ongoing customer due diligence and patron risk reassessment are closely connected, but they serve different purposes.
Ongoing CDD
The broader process of keeping patron information and risk understanding current. It helps the venue notice and monitor meaningful changes over time.
Risk Reassessment
A specific review that may be triggered when new information, activity or behaviour suggests the current patron risk profile may no longer be accurate.
Not every update requires a new risk rating, but meaningful changes should be capable of triggering a structured review.
For the specific triggers that may require reassessment, see When Should a Gaming Venue Reassess a Patron’s AML/CTF Risk?
How Staff Observations Support Ongoing CDD
Staff observations are an important input because venue teams may notice behaviour that is not visible in customer records or transaction data alone.
A staff member may observe unusual interactions, repeated patterns, inconsistent explanations or behaviour that differs from previous visits.
Relevant observations should be
- Recorded factually and consistently
- Linked to the correct patron
- Reviewed alongside transaction activity
- Escalated where required
- Connected to the patron’s wider risk history
- Included in later reassessment where relevant
These observations do not automatically make the patron high risk. They may, however, provide context that changes how other information should be interpreted.
For more detail, see How Gaming Venues Should Respond to Unusual Patron Behaviour.
Ongoing CDD Needs Connected Information
Ongoing CDD becomes difficult when customer information, monitoring activity and operational observations are stored in disconnected places.
Fragmentation commonly occurs when
- Customer information sits in one system
- Transaction monitoring outcomes sit somewhere else
- Staff observations remain in shift notes or emails
- Previous decisions are stored in spreadsheets
- Supporting evidence is kept in separate folders
When information is fragmented, the venue may struggle to determine whether the patron’s current risk profile still reflects the full picture.
It is about maintaining enough connected visibility to recognise when several smaller changes have altered the patron risk context.
For more detail on fragmented compliance records, see How Patron Risk Breaks Down When Venues Rely on Spreadsheets.
What Good Ongoing CDD Looks Like in Practice
A strong ongoing CDD process should be structured, consistent and reviewable.
A gaming venue should be able to answer
- Is the patron information still current?
- Does recent activity align with the existing risk profile?
- Have staff raised relevant concerns?
- Has transaction monitoring identified a meaningful pattern?
- Have earlier reviews and escalations been considered?
- Is there enough evidence to explain the decision?
Good ongoing CDD does not require every change to be escalated. It requires the venue to identify relevant information, review it in context and decide what should happen next.
Evidence Matters in Ongoing CDD
Ongoing CDD should leave a clear evidence trail.
If a venue updates patron information, reviews transaction activity, considers a staff observation or decides that no further action is required, the reasoning should remain clear enough to review later.
The evidence trail should connect
- The information or activity that prompted review
- The patron’s existing risk profile
- The checks or contextual review completed
- The person responsible for the decision
- The outcome reached
- The action or monitoring that followed
If the venue decides that the existing profile remains appropriate, it should still be able to explain what was reviewed and why no change was required.
See How Gaming Venues Should Evidence Patron Risk Decisions for AML/CTF.
Where Ongoing CDD Commonly Breaks Down
Ongoing customer due diligence usually fails in the gaps between systems, teams and workflows.
Common operational weaknesses include
- Patron profiles becoming stale after onboarding
- Transaction alerts being reviewed without wider context
- Staff observations not reaching compliance
- Risk ratings not being reconsidered when activity changes
- Similar situations being handled differently across venues
- Decisions being reconstructed only when an audit begins
These weaknesses do not necessarily mean the venue failed to identify relevant information. They may mean the venue could not connect that information into a consistent ongoing CDD process.
How Ongoing CDD May Be Tested During a Review
Ongoing CDD becomes visible when an auditor, board member or regulator asks how the venue kept a patron risk profile current.
A reviewer may ask
- Why did the patron’s risk rating remain unchanged?
- Were staff observations connected to the patron record?
- How were transaction alerts assessed in context?
- What information triggered further review?
- Why was reassessment or enhanced CDD not required?
- Can the decision history be produced quickly?
A strong ongoing CDD process should make the movement from new information to review and decision visible without requiring post-event reconstruction.
Where ComplyIQ Fits in Ongoing CDD
ComplyIQ helps gaming venues turn ongoing customer due diligence into a connected operational process.
Relevant customer information, transaction monitoring outcomes, staff observations, risk reviews and supporting evidence can be managed within one governed environment.
ComplyIQ helps connect
- Initial customer due diligence and patron risk profiles
- Transaction activity and monitoring outcomes
- Frontline observations and compliance review
- Risk changes and reassessment workflows
- Enhanced CDD and escalation decisions
- Decision reasoning and supporting evidence
Ongoing monitoring becomes a structured and traceable patron risk process rather than a series of disconnected updates.
Related Reading on Ongoing CDD and Patron Risk
Explore the patron risk cluster
- How Gaming Venues Should Manage Patron Risk, CDD and Ongoing Monitoring
- Why Transaction Monitoring Needs a Single Patron View
- How Gaming Venues Should Respond to Unusual Patron Behaviour
- When Should a Gaming Venue Reassess a Patron’s AML/CTF Risk?
- How Gaming Venues Should Evidence Patron Risk Decisions for AML/CTF
- Customer Due Diligence vs Enhanced Customer Due Diligence for Gaming Venues
FAQs About Ongoing CDD in Gaming Venues
What does ongoing CDD mean for gaming venues?
Ongoing CDD means keeping a patron’s AML/CTF information and risk profile current after initial onboarding. It involves monitoring relevant activity, reviewing new information and identifying changes that may affect the venue’s understanding of risk.
Is ongoing CDD the same as reassessing patron risk?
No. Ongoing CDD is the broader process of maintaining current information and risk awareness. Reassessment is a specific review that may occur when new information suggests the current risk profile may need to change.
What information can support ongoing CDD?
Ongoing CDD can draw on customer information, transaction activity, staff observations, venue interactions, previous escalations and earlier patron risk decisions.
Does every change require escalation?
No. Relevant changes should be reviewed in context. Some may require no further action, while others may justify risk reassessment, closer monitoring, enhanced CDD or internal escalation.
Why should ongoing CDD decisions be documented?
Documenting the review and outcome helps the venue demonstrate what information was considered, whether the patron risk profile remained appropriate and why further action was or was not required.
Keep Patron Risk Current After Onboarding
ComplyIQ helps gaming venues connect customer information, transaction monitoring, staff observations, risk reviews and evidence across the ongoing CDD lifecycle.