1. Anti-money laundering and counter-terrorist financing
The holder appoints a compliance officer, runs a written risk assessment of its business and reviews it every year.
Players are identified before their first withdrawal and in any case when deposits reach 2,000 EUR or equivalent in 30 days. Enhanced due diligence applies to politically exposed persons and high-risk countries.
Transactions are monitored; suspicious activity is reported to the competent authority and to Porto iGaming. Records are kept for five years after the relationship ends.
2. Responsible gaming and protection of minors
The holder offers deposit limits, session reminders, time-out and self-exclusion, shows the age limit on every page, and refuses players under 18.
Marketing does not target minors or self-excluded players and does not present gambling as a source of income.
3. Fair gaming
Games use random number generators certified by an independent testing laboratory. Game rules and return-to-player figures are published.
Live games are streamed from studios with recorded rounds; voided rounds are refunded.
4. Player terms, funds and complaints
Player terms are clear, published and not changed retroactively. Bonus terms state the wagering, eligible games, maximum bet and expiry in one place.
Withdrawals are processed within the time the terms promise. Player balances are kept separate from operating funds.
A complaint procedure is published. Complaints forwarded by Porto iGaming are answered within 10 business days.
5. Domains, mirror domains and the validation seal
The brand is served only on domains listed on the certificate, each verified by DNS TXT record at _portoigaming.<domain>. A new domain is added in the panel before it is used.
Mirror domains found by our search are either added to the certificate or taken down. A domain that keeps serving the brand outside the certificate is published on the uncertified-sites list.
The validation seal is shown, unaltered, on every certified domain, and is never presented as a government licence.
6. Notifications
Changes of ownership, directors, key persons, registered address, game or payment providers are notified within 14 days; changes of beneficial ownership need prior approval.
Security incidents affecting player data or funds are notified within 72 hours.
7. Monitoring and sanctions
Certified sites are scanned on a schedule. Repeated failures open a compliance review in which the holder is heard.
Depending on the breach Porto iGaming may issue a warning, require remediation within a deadline, suspend or withdraw the certificate. Suspension and withdrawal are shown on the register and the validator.