Safety of iDIN verification via Trustly at casinos: A complete guide

The safety of iDIN verification via Trustly at casinos rests on strict PSD2 protocols and supervision by the Kansspelautoriteit (Gambling Authority). iDIN only shares necessary data such as age and name, without exchanging passwords. Trustly encrypts the transactions. This combination prevents fraud, safeguards privacy under the GDPR, and ensures an immediate CRUKS check at legal Dutch providers.

Technical architecture: Separation of identity and payment

Security stems from the strict separation between identity checks and financial flows. iDIN verifies your identity directly through your bank. Trustly handles the payment. As a result, the casino does not gain access to your bank balance, but it does know for sure that you meet the legal age requirements. By splitting tasks, you minimize risk: the casino knows who you are, but not what you own. The payment provider knows that you are paying, but does not store profile data for marketing.

The role of PSD2 and Strong Customer Authentication

iDIN and Trustly operate within the framework of the European PSD2 directive. This law requires financial institutions to use Strong Customer Authentication (SCA) for every transaction or data exchange. SCA requires at least two independent factors: something you know (password), something you have (phone), or something you are (biometrics).

In practice, this means Two-Factor Authentication (2FA). When logging in via iDIN or paying with Trustly, you must complete a second step in your banking app. Think of scanning your fingerprint or entering a code. This extra layer makes it virtually impossible for third parties to access your account, even with your password. The security is equivalent to that of online banking. The systems also comply with PCI DSS standards for the secure processing of payment data, which guarantees the integrity of transaction data.

Difference between iDIN identification and Trustly payment

Both services run through your bank, but their function differs. iDIN is a verification method. It only shares name, address, and city details alongside age status with the casino, after your explicit consent. The casino sees who you are, but has no insight into your finances. Trustly is a payment method that transfers money without exchanging personal data for identification.

This separation protects your privacy. Organizations do not gain access to balances or payment history via iDIN. Trustly handles the cash flow, but does not know your identity separate from the bank transaction. Your data remains protected, and only what is strictly necessary for compliance is shared.

Why banking login is safer than passwords

Traditional registrations require new passwords. This brings risks of phishing and 'credential stuffing'. iDIN eliminates this by using OAuth 2.0 protocols. You log in to the secure environment of your own bank, such as ING, Rabobank, or ABN AMRO.

The casino never receives your bank login details. Instead, an encrypted token is exchanged that confirms you are who you say you are. This prevents Man-in-the-Middle attacks, as authentication takes place entirely within the bank's infrastructure. You do not have to create a new, weak password for each casino. This benefits overall digital security.

Regulatory safeguards: Ksa, KOA Act, and CRUKS

Compliance with the Remote Gambling Act (Wet KOA) forms the legal basis for safe online gambling in the Netherlands. This law obliges providers with a license from the Kansspelautoriteit to identify every player before participation is allowed. iDIN acts as the most efficient bridge between banking data and the statutory Know Your Customer (KYC) obligation. This effectively blocks identity fraud and access by excluded individuals.

Mandatory age and identity verification

Under the Remote Gambling Act (Wet KOA), strict Know Your Customer (KYC) verification is an absolute prerequisite for legal operation. The Kansspelautoriteit enforces these rules to guarantee that only players aged 18 or older gain access. iDIN retrieves data directly from the Personal Records Database (BRP) via the user's bank. This is more secure than manually uploading documents, as the risk of manipulation is lower.

iDIN offers the highest level of certainty regarding legality and security. A casino with a valid license must prove that it knows its customers. With iDIN, operators seamlessly meet the Know Your Customer (KYC) requirements. The bank acts as a trusted third party confirming the identity, without the need for sensitive documents to be sent to the casino itself.

Automatic link with CRUKS

Integration with the Central Register for Exclusion from Games of Chance (CRUKS) is crucial for Dutch regulation. During iDIN verification, a real-time check is performed to see if a player is in this register. Is a person registered here due to gambling problems? Then the registration is blocked immediately. This automatic connection enforces addiction prevention through the technical infrastructure prescribed by the Kansspelautoriteit.

Players who try to register at a legal casino while listed in CRUKS will notice that the process fails. This is not a glitch, but a security feature that complies with the operator's duty of care. Foreign casinos without this connection do not offer this protection. For help with gambling addiction, players can contact Loket Kansspel.

Prevention of money laundering and fraud

Casinos must also comply with the Anti-Money Laundering and Anti-Terrorist Financing Act (Wwft). This law requires traceable financial transactions and the reporting of suspicious patterns to the Financial Intelligence Unit (FIU-the Netherlands). The combination of iDIN and Trustly supports this compliance, as both services are linked to verified bank accounts. Depositing or withdrawing money anonymously is therefore virtually impossible, which makes money laundering via online channels difficult.

Due to the transparency of Trustly transactions, linked to the fixed identity from iDIN, casinos quickly signal anomalies. Failure to comply with the Anti-Money Laundering Act (Wwft) can lead to heavy fines or revocation of the license by the Kansspelautoriteit. For the player, this means an environment that is not only safe from fraud, but also legally robust.

Privacy and data protection for the player

iDIN, managed by the Dutch Banking Association (NVB), only shares necessary personal data after explicit consent. Trustly handles transactions without giving the casino insight into your balance. This architecture complies with the General Data Protection Regulation (GDPR) and ensures that players' data is not commercially exploited.

Exactly what data does your bank share?

During verification, iDIN applies the 'minimal data principle'. For each specific piece of data - such as name, address, date of birth, and age validation - the bank asks for your explicit approval before information is sent to the casino. What is not shared is crucial: Trustly or the online platform does not gain insight into your bank balance, savings, or other transaction history outside of the specific deposit. Through this method, organizations only receive personal data necessary for KYC purposes, as required by anti-money laundering legislation. Financial details remain within the secure environment of your own banking app, leaving the privacy of your wealth intact.

Protection against phishing and identity theft

iDIN offers protection against phishing by allowing authentication to take place within the trusted interface of your own banking app, instead of on an external website. You log in via an environment you know, which reduces the chance of fake sites. The Dutch Banking Association (NVB) ensures technical standards and certification via ID.nl. Identification is as reliable as online banking. Do you doubt the authenticity of a site? Check it via veiligbankieren.nl. Because data is sent encrypted and the bank does not sell data for commercial purposes, identity fraud via this channel is virtually excluded.

Rights under the AVG and GDPR

Players enjoy strong rights under the General Data Protection Regulation (GDPR). Casinos are not allowed to share personal data with third parties and must store it encrypted in accordance with European regulations. The Dutch Data Protection Authority (AP) strictly monitors compliance with this privacy legislation in the Netherlands. You have the right to request access to your data or demand deletion (right to be forgotten), provided there is no statutory retention obligation on the data due to anti-money laundering rules or CRUKS. The Dutch Data Protection Authority (AP) can take action if an operator violates these rights. Although Trustly falls under PSD2, storage of profile data at the casino remains subject to the supervision of the AP and frameworks of the GDPR.

Practical risks and common concerns

The technology is robust, but user errors and technical limitations remain risk factors. Players must understand that iDIN only shares personal data after explicit consent, while Trustly operates solely as a payment channel within the Dutch regulatory framework.

Is Trustly a reliable party for checks?

Trustly is an open-banking payment service with high security standards, including certifications such as ISO/IEC 27001 for information security. Trustly works closely with major Dutch financial institutions. ABN AMRO and ING Bank seamlessly support Trustly's infrastructure, ensuring direct and encrypted transactions without intermediaries.

Trustly does not serve as a replacement for KYC verification in the Netherlands. Unlike foreign 'Pay N Play' casinos, where Trustly often handles both the payment and the identity check, the KOA Act prescribes that these tasks must remain separate. Trustly facilitates the flow of funds, but the security check of your identity is mandatory via iDIN. This dichotomy prevents anonymous gambling, which is essential for enforcing anti-money laundering rules.

Disadvantages and limitations of iDIN verification

iDIN has practical disadvantages despite its high security. The most common frustration is dependency on the banking app. If it crashes or times out, the registration fails. Not every bank supports iDIN in a uniform manner. Rabobank and ABN AMRO customers generally experience a smooth pairing procedure, but users of smaller banks may run into compatibility issues.

Another disadvantage is the lack of anonymity. Because iDIN shares your name, date of birth, and address directly with the casino, there is no room for privacy shielding during registration. The customer service of Trustly itself can also be a stumbling block: the help function is often only available in English, which poses barriers for players who do not feel comfortable in that language. Finally, iDIN requires you to actively give permission for data sharing every time. This is secure, but some users find it cumbersome compared to a one-time document upload.

Alternatives: Pay N Play and Brite

Many players wonder how Pay N Play compares to iDIN. Pay N Play is a concept linked to Trustly and competitor Brite, where registration and deposit coincide. In markets like Sweden this is sufficient, but in the Netherlands, Pay N Play via Trustly or Brite is legally impossible because a separate, verified account is mandatory.

Brite is an alternative open banking provider that also offers fast bank transfers. However, even with Brite, the iDIN check remains necessary for legal access to Dutch casinos. The security of these alternatives is high, but they offer no escape from the Dutch identification requirement. For players who want more privacy, prepaid options such as Paysafecard remain an alternative, although they lack the direct link to bank details for fast payouts. Always choose a Ksa-licensed provider to be sure of correct data processing.

About this article - Editorial standards

Sarah Weber (Casino Tester & Bonus Analyst)
Fact-checked by:
Dr. Markus Hoffmann (Senior iGaming Compliance Analyst)
Last updated: 2026-08-11.

This article about "safety of idin verification via trustly at casinos" was written by Sarah Weber and fact-checked by Dr. Markus Hoffmann. Both regularly update the content in response to changes in regulations, licenses, and bonus terms. All references to licenses, regulators, and legislation link to public sources (the local gambling authority, the applicable local gambling legislation).

About the author

8+ years of experience reviewing casinos, 200+ personally tested platforms within the EU and worldwide. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout processes, and customer service evaluation.

About the reviewer

More than 12 years of experience in the iGaming industry, including 5 years as a compliance consultant for licensees in multiple regulated markets. PhD in economic mathematics. Focus areas: bonus mathematics, wagering analysis, and player protection systems.

Responsible gambling

Gambling can be addictive. If you feel like you are losing control of your play, please contact the relevant helpline for gambling problems or use the national self-exclusion register (the relevant national self-exclusion register). Set personal deposit and loss limits BEFORE playing with real money. Breaks and cool-down tools from the provider are there to keep gaming manageable.

Legal notice

The information in this article is for editorial and comparative purposes only and does not constitute legal advice. Players themselves are responsible for complying with local regulations.