Customer Due Diligence vs Enhanced Customer Due Diligence for Gaming Venues
How gaming venues can distinguish between standard customer due diligence and enhanced customer due diligence, including when deeper AML/CTF review may be appropriate.
Disclaimer: This article provides general information only and does not constitute legal advice. AML/CTF obligations can vary depending on the reporting entity, designated services, risk profile, systems and procedures. Gaming venues should consider AUSTRAC guidance, the AML/CTF Act and Rules, and seek independent professional advice where required.
Customer due diligence is the standard process used to identify, verify and understand a patron’s AML/CTF risk profile. Enhanced customer due diligence is a deeper level of review that may be required when the patron, activity, behaviour or wider risk context requires closer scrutiny.
For gaming venues, the difference is not simply technical. It influences how the venue understands patron risk, decides whether standard checks remain sufficient and records the reasoning behind a deeper review.
CDD creates the starting point. Enhanced CDD may become appropriate when the risk context suggests that the starting profile no longer provides enough information.
Standard CDD establishes and maintains the patron’s baseline risk profile. Enhanced CDD applies additional scrutiny where the available information suggests that standard due diligence may not be enough.
Why the Difference Between CDD and Enhanced CDD Matters
Gaming venues manage patron risk in environments where behaviour, transaction activity and venue interactions can change over time.
A patron may initially fit a standard risk profile, but later information or activity may create a need for closer review. This is why not every patron should receive the same level of due diligence.
Standard CDD
Standard customer due diligence helps the venue identify and verify the patron, understand the customer relationship and establish an initial risk profile that can be monitored over time.
Enhanced CDD
Enhanced customer due diligence applies deeper scrutiny where higher risk indicators, unusual activity, inconsistent information or other concerns suggest that standard review may not be sufficient.
The venue should be able to explain why standard CDD was appropriate in one case and why enhanced CDD was considered necessary in another.
CDD vs Enhanced CDD: Key Differences for Gaming Venues
Customer Due Diligence
- Purpose: Establish and understand the patron’s baseline risk profile
- When it applies: During onboarding and as part of standard AML/CTF controls
- Level of review: Standard identification, verification and risk understanding
- Risk connection: Creates the starting point for patron risk management
- Evidence: Records showing required checks were completed
Enhanced Customer Due Diligence
- Purpose: Apply closer scrutiny where risk requires deeper review
- When it applies: Where higher risk indicators or concerns justify additional assessment
- Level of review: More detailed review of information, activity or risk factors
- Risk connection: Helps reassess or manage risk where the standard profile may not be enough
- Evidence: Records showing why enhanced review was applied and what informed the outcome
The correct level of due diligence is the level that is proportionate to the patron’s current AML/CTF risk context.
What Customer Due Diligence Does
Customer due diligence helps a gaming venue establish its initial understanding of a patron from an AML/CTF perspective.
This may involve collecting and verifying relevant information, understanding the customer relationship and forming a risk view that can be monitored over time.
A strong CDD process should help answer
- Who is the patron?
- What information has been collected and verified?
- What is the initial AML/CTF risk profile?
- What information or activity should be monitored over time?
- What could make the venue question whether the profile remains accurate?
CDD should not sit separately from the venue’s wider patron risk process. It creates the baseline against which later activity, staff observations and monitoring outcomes can be assessed.
For the broader patron risk framework, see How Gaming Venues Should Manage Patron Risk, CDD and Ongoing Monitoring.
What Enhanced Customer Due Diligence Adds
Enhanced customer due diligence adds a deeper level of scrutiny where the risk context requires it.
This may involve reviewing additional information, assessing patron activity more closely, considering source of funds context, examining unusual behaviour or documenting why further review became appropriate.
Enhanced CDD should connect to the reason it was triggered
If the concern relates to transaction activity, the review should address that activity. If it relates to inconsistent information, the review should examine the inconsistency. If repeated staff observations prompted concern, those observations should be considered alongside the wider patron profile.
Enhanced CDD should not become a generic exercise in collecting more documents. The purpose is to apply scrutiny that is proportionate and relevant to the identified risk.
When Enhanced CDD May Become Relevant
Enhanced CDD may become appropriate where a gaming venue identifies information suggesting that standard due diligence may no longer be enough.
This does not mean that every unusual event automatically requires enhanced review. The patron, activity, behaviour and wider context should be assessed together.
Enhanced CDD may be considered where there is
- Repeated or escalating staff concerns
- Unusual transaction activity
- Information that is inconsistent or difficult to verify
- Unclear source of funds context
- Prior escalation or reassessment
- Several risk indicators appearing together
The venue should ask whether the available information changes its understanding of the patron’s AML/CTF risk.
For more detail on possible indicators, see What Makes a Patron High Risk in a Gaming Venue?
CDD and Enhanced CDD Should Not Be Static
A patron may not require enhanced CDD at onboarding. That does not mean enhanced CDD can never become relevant later.
Gaming venues should be able to reconsider the level of due diligence when new information, transaction activity or observed behaviour changes the risk picture.
Example of a changing risk context
A patron may initially appear consistent with a standard risk profile. Later transaction patterns, repeated staff observations or conflicting information may create a need to reassess whether standard CDD remains appropriate.
This is where the distinction between CDD and enhanced CDD connects with patron risk reassessment.
See When Should a Gaming Venue Reassess a Patron’s AML/CTF Risk?
The Risk of Treating Enhanced CDD as a Checklist
Enhanced CDD becomes weaker when every review follows the same generic process regardless of the concern that triggered it.
A source of funds concern, repeated unusual behaviour and inconsistent customer information may each require different review steps.
It should mean a deeper and more targeted review that responds directly to the risk factors present in the case.
A stronger enhanced CDD process should
- Identify the concern that prompted deeper review
- Review the relevant information connected to that concern
- Decide what additional scrutiny is proportionate
- Record the reasoning and outcome clearly
- Define any follow-up action required after the review
This helps venues avoid both over-escalation and under-escalation.
Over-Escalation and Under-Escalation
Over-Escalation
Enhanced CDD is applied without a clear risk-based reason, creating unnecessary administration and making it harder to distinguish genuinely higher risk cases.
Under-Escalation
Standard CDD continues even though the available information suggests that closer review may be required.
Both outcomes weaken the venue’s AML/CTF control environment. The aim is not to apply enhanced CDD as often as possible. The aim is to apply it when the risk context justifies it.
Evidence Matters When Applying Enhanced CDD
Where enhanced CDD is applied, the gaming venue should be able to explain why.
A record showing that enhanced CDD occurred may not be enough if the reasoning behind the decision is unclear.
The evidence should show
- What triggered consideration of enhanced CDD
- What information or activity was reviewed
- Who completed or approved the review
- What conclusion was reached
- Why that conclusion was considered proportionate
- What action or monitoring followed
A clear evidence trail supports governance oversight and helps demonstrate that the venue’s approach was risk-based rather than arbitrary.
For more detail, see How Should Gaming Venues Evidence Patron Risk Decisions?
Where ComplyIQ Fits in CDD and Enhanced CDD
The distinction between CDD and enhanced CDD only becomes useful when a venue can apply it consistently.
This requires visibility of the patron’s risk context, clear triggers for closer scrutiny and evidence showing why a particular level of review was selected.
ComplyIQ helps connect
- Customer identification and verification information
- Patron risk profiles and risk indicators
- Transaction monitoring and staff observations
- Reassessment and enhanced review workflows
- Decisions, approvals and supporting evidence
This gives compliance teams a clearer basis for deciding when standard CDD remains sufficient and when enhanced customer due diligence may be appropriate.
Related Reading on CDD, Risk and Escalation
Explore the patron risk cluster
FAQs About CDD and Enhanced CDD for Gaming Venues
What is the difference between CDD and enhanced CDD?
CDD is the standard process used to identify, verify and understand a patron’s risk profile. Enhanced CDD is a deeper level of review that may be required when the patron, activity, behaviour or wider risk context requires closer scrutiny.
When might a gaming venue need enhanced CDD?
A gaming venue may need to consider enhanced CDD where unusual activity, inconsistent information, higher risk indicators or other concerns suggest that standard due diligence may not provide enough information.
Does every high risk patron require the same enhanced CDD process?
No. The depth and focus of enhanced CDD should reflect the nature of the risk, the patron’s activity, the available information and the venue’s risk-based procedures.
Can enhanced CDD become necessary after onboarding?
Yes. A patron may begin with a standard risk profile, but later behaviour, transaction activity, staff observations or new information may justify reassessment and closer review.
What evidence should a venue retain for enhanced CDD?
The venue should retain evidence showing what triggered the review, what information was considered, who reviewed it, what decision was made and what action followed.
Apply the Right Level of Due Diligence at the Right Time
ComplyIQ helps gaming venues connect patron risk, CDD, enhanced review and decision evidence within one structured AML/CTF workflow.