Online casino multiple accounts: how licence standards and site terms define one person, one account, and what happens to duplicates and shared logins
2026-10-29
EUR 128,796. That is the penalty Malta's Financial Intelligence Analysis Unit (FIAU) imposed on a remote gaming operator on 23 March 2023. The first reason listed was that accounts one customer held across several brands were not added up as one person.
Search for online casino multiple accounts and the top results are mostly operator pages on how their systems link related accounts. This post puts the documents themselves side by side: a regulator's standard, a real operator's terms and two regulators' statements on account count and account sharing. Nothing here explains how to get around any of it.
1.Where one person, one account is written down
Duplicate account: a further account the same person opens at one site. One operator's terms call it any extra account.
The rule lives on two levels. A licensing body sets standards for the operator; the operator then writes terms for the customer.
Standard 3.09 of the Alcohol and Gaming Commission of Ontario (AGCO) internet gaming standards is a single sentence: players may have only one player account per gaming site (AGCO internet gaming standards). Standard 3.08, just before it, says every player account must be uniquely identifiable, and 3.16 says every account transaction must be traceable to one unique individual player account.
If a player holds two accounts, it is the operator that is out of line with its licence standard. That is why operators copy the same rule into their terms as a duty on the customer.
2.Document by document: account count and sharing
The regulator: one per site, no third-party access
AGCO standard 3.12 requires players to be authenticated before they access their account and are allowed to gamble, and the same standard says third parties are not permitted to access a player's account. Account count sits under 3.09; someone else using the account sits under 3.12.
The terms: duplicates are closed, deliberate ones are a prohibited event
The example is the PokerStars general terms, version 1.5, in force since 27 July 2026, with a Malta licence shown in the site footer (general terms). Their opening summary says one account per person, and Part B clause 3.1 says you may register one account only and must use the services only with that account.
Part B clause 3.2 says that if duplicate accounts are found they are closed, leaving a single account. The exception is accounts opened deliberately or fraudulently. Those appear separately in the list of prohibited events, at Part B clause 14.1.4.
The centre of this comparison is that an accidental second account and a deliberate one are handled under different clauses.
Letting family or friends use the account
Part A clause 6.1.5 says the account must be registered in your own name and used solely for your own personal use, entertainment and benefit, not on behalf of or at the direction of anyone else. Part A clause 6.3 bans selling or transferring an account to anyone, or acquiring one from anyone, and calls that a serious breach and a prohibited event.
Part B clause 2.1 says login credentials must not be disclosed to anyone, and that you are solely responsible for all use of the services under those credentials, whether or not you authorised it. Whatever a relative does after borrowing the login is, under the terms, the account holder's doing.
What follows once a prohibited event is found
Part A clause 14.1.1 says that when a prohibited event is found, the operator voids transactions including bets and confiscates all or part of the balance and winnings. Clause 14.1.2 says that, if asked, you must repay any such balance, winnings or funds already received.
Part B clause 17.2 says that if the investigation finds you were involved in a prohibited event, use of the services and the account is permanently restricted or closed. The summary also says a withdrawal is not processed until the investigation is resolved.
Masked locations (clause 9.2) reach the same clauses by another route; that is covered in online casino VPN. Identity-check timing and dormant accounts have their own post, baccarat site account suspension.
3.When one operator runs several brands: the duty to add up
Back to the penalty. According to the FIAU notice, the operator ran five domains and players could hold accounts on different brands (FIAU publication notice). Anti-money-laundering rules require customer due diligence once transactions reach EUR 2,000, but the company's checks only flagged duplicates opened within the same brand.
Four of the players reviewed held several accounts, and the date they reached the threshold had been worked out brand by brand. The regulator wrote that linking multiple accounts so one person's activity can be monitored is a requirement.
The UK points the same way. Social responsibility code provision 3.9.1 of the Gambling Commission's licence conditions requires procedures to identify separate accounts held by the same individual (Gambling Commission provision 3.9.1).
Where more than one account is allowed, the operator must relate them to each other so that self-exclusion, monitoring, credit limits and financial limits apply across all of them. Accounts with group companies count too.
What looks like a different site to the customer is, in the operator's books, meant to be tied back to one person.
4.Where Korean law stands
In Korea, the number of accounts is beside the point. Article 246 of the Criminal Act sets a fine of up to 10 million won for gambling, excepting only temporary amusement, and up to three years in prison or 20 million won when habitual (Criminal Act Article 246).
The documents above are the rules of overseas-licensed sites; this article looks at the act itself. The Korea Center on Gambling Problems takes calls on 1336.
Q.I opened a second account but never used it. What happens?
A.The terms used as the example close duplicate accounts and leave one. If the operator decides it was opened deliberately or fraudulently, it becomes a prohibited event.
Q.If a family member bets on my account, who is responsible?
A.The terms say all use under your login credentials is your responsibility whether or not you authorised it, and use on behalf of someone else breaches the account requirements.
Q.Does a second account at another brand of the same company count separately?
A.The Malta notice and UK provision 3.9.1 both require accounts across brands to be linked and monitored as one person.
Q.What about money already withdrawn before the confiscation?
A.Clause 14.1.2 of the example terms says it must be repaid if the operator asks.
Hiddenpick is a Windows program that keeps on its server the betting rules that pick owners do not make public, and runs them as they are on the PC of the person who received them through a referral code. It currently runs on Evolution live baccarat at Stake (stake.com). The program works inside the single account its user has logged into; its scope is described on the baccarat betting program page.
We are recruiting national pickster representatives, and those selected receive benefits worth $12,000, a one-year pass. Apply: https://hiddenpick.my/pickster
- 25,000+ real shoes collected and analysed since September 2026
- 90+ baccarat tables from the lobby on one screen · refreshed every 0.35s · seated 2 to 4 seconds after a click
- Stops by itself at your take-profit and stop-loss · tie several PCs into one team and stop on the total
- No browser extension · your money stays in your own Stake account · 12 languages