Gaming regulators often approve not only the company, but also the individuals who control it. These individuals are commonly called key persons. Key person approvals are a frequent “hidden timeline” risk because they require background checks, declarations, and documentation that can take time—especially when individuals have international histories or complex corporate roles.
This guide explains who typically counts as a key person, what fit-and-proper checks involve, and how to prepare a clean, consistent submission for directors and officers.
What regulators mean by “key persons”
Titles differ by jurisdiction, but key persons typically include people who can influence:
- Strategy and operational control
- Financial decisions and handling of player funds
- AML compliance (including reporting decisions)
- Responsible gaming and marketing practices
- Technology/security decisions affecting integrity and auditability
Common key person roles in online casino operations
- Directors and senior officers
- CEO/General Manager
- Compliance Officer and/or MLRO
- Finance lead responsible for reconciliation and reporting
- Operations lead responsible for customer support and withdrawals
- Technical lead responsible for platform integrity and security
Fit-and-proper checks: what gets examined
Regulators commonly assess:
- Identity: verified IDs, proof of address, and consistency across records.
- Competence: relevant experience and capability to perform the role.
- Integrity: criminal records, regulatory actions, bankruptcies, litigation history.
- Financial soundness: conflicts of interest, undisclosed liabilities, problematic funding.
Even when someone is not “bad,” unclear disclosures can still cause delays.
Key person document pack (practical checklist)
- Passport/ID + proof of address
- CV with clear dates and responsibilities
- Role description and reporting line
- Declarations (criminal, civil, regulatory history)
- Police clearance certificates (where required)
- Reference letters (some regimes)
Tip: standardize date formats and ensure there are no unexplained gaps in the CV.
How to handle “issues” (be honest, be structured)
If a key person has a past issue (e.g., minor civil dispute, historic bankruptcy), regulators often care most about:
- Whether it is disclosed proactively
- Whether it is explained with evidence (documents, outcomes)
- Whether it is relevant to gaming integrity today
Non-disclosure is usually worse than the underlying event.
Operational reality: approvals must match real accountability
Regulators may ask: who really controls withdrawals? who can override KYC? who approves bonuses? If your org chart says one thing and your platform permissions show another, you will get questions.
Preparation plan (fast and defensible)
- Create a standard key person template pack.
- Collect documents early and validate consistency.
- Map each role to platform permissions and operational approvals.
- Maintain a “disclosures register” so nothing is forgotten.
Bottom line: Key person approvals are about trust and capability. Build consistent packs, map real responsibilities, and disclose issues transparently to avoid delays.

