Safety of iDIN verification via Trustly at casinos: A complete guide

The safety of iDIN verification via Trustly at casinos rests on strict PSD2 protocols and supervision by the Kansspelautoriteit. iDIN only shares necessary data such as age and name, without passwords being exchanged. Trustly encrypts the transactions. This combination prevents fraud, guarantees privacy under the GDPR, and ensures immediate CRUKS checks at legal Dutch providers.

Technical architecture: Separation of identity and payment

Security stems from the strict separation between identity checks and financial flows. iDIN verifies your identity directly via your bank. Trustly handles the payment. As a result, the casino does not gain access to your bank balance, but knows for sure that you meet the legal age requirements. Splitting tasks minimizes risk: the casino knows who you are, but not what you own. The payment provider knows that you pay, but does not store profile data for marketing purposes.

The role of PSD2 and Strong Customer Authentication

iDIN and Trustly operate within the framework of the European PSD2 directive. This law obliges financial institutions to apply Strong Customer Authentication (SCA) for every transaction or data exchange. SCA requires at least two independent factors: something you know (password), something you have (phone), or something you are (biometrics).

In practice, this means Two-Factor Authentication (2FA). When logging in via iDIN or paying with Trustly, you must complete a second step in your banking app. Think of scanning your fingerprint or entering a code. This extra layer makes it virtually impossible for third parties to gain access to your account, even with your password. The security is equal to that of online banking. The systems also comply with PCI DSS standards for the secure processing of payment data, which guarantees the integrity of transaction data.

Difference between iDIN identification and Trustly payment

Both services run through your bank, but their function differs. iDIN is a verification tool. It only shares name, address, and city (NAW) details and age status with the casino, after your explicit consent. The casino sees who you are, but has no insight into your finances. Trustly is a payment method that transfers money without exchanging personal data for identification.

This separation protects your privacy. Organizations do not gain access to balances or payment history via iDIN. Trustly handles the financial flow, but does not know your identity separate from the bank transaction. Your data remains protected, and only what is strictly necessary for compliance is shared.

Why bank login is safer than passwords

Traditional registrations ask for new passwords. This brings risks of phishing and 'credential stuffing'. iDIN eliminates this by using OAuth 2.0 protocols. You log in to the secure environment of your own bank, such as ING, Rabobank, or ABN AMRO.

The casino never receives your bank login details. Instead, an encrypted token is exchanged that confirms you are who you say you are. This prevents Man-in-the-Middle Attacks because authentication takes place entirely within the bank's infrastructure. You don't have to create a new, weak password for each casino. This benefits overall digital safety.

Regulatory safeguards: Ksa, Wet KOA, and CRUKS

Compliance with the Remote Gambling Act (Wet KOA) forms the legal basis for safe online gambling in the Netherlands. This law obliges operators with a license from the Kansspelautoriteit to identify every player before participation is possible. iDIN acts as the most efficient bridge between banking data and the statutory Know Your Customer (KYC) duty. This effectively blocks identity fraud and access by excluded individuals.

Mandatory age and identity verification

Under the Remote Gambling Act (Wet KOA), strict Know Your Customer (KYC) verification is an absolute prerequisite for legal operation. The Kansspelautoriteit enforces these rules to guarantee that only players aged 18 or older gain access. iDIN retrieves data directly from the Personal Records Database (BRP) via the user's bank. This is safer than manually uploading documents, as the risk of manipulation is smaller.

iDIN offers the highest degree of certainty regarding legality and security. A casino with a valid license must demonstrate that it knows its customers. With iDIN, operators seamlessly comply with the Know Your Customer (KYC) requirements. The bank acts as a trusted third party that confirms identity without sensitive documents needing to go to the casino itself.

Automatic link with CRUKS

Integration with the Central Register for Exclusion of Gambling (CRUKS) is crucial for Dutch regulation. During iDIN verification, a real-time check is performed to see if a player is in this register. Is a person registered here due to gambling problems? Then registration is immediately blocked. This automatic link enforces addiction prevention through the technical infrastructure prescribed by the Kansspelautoriteit.

Players who attempt to register at a legal casino while listed in CRUKS will notice that the process fails. This is not a malfunction, but a security feature that complies with the operator's duty of care. Foreign casinos without this link do not offer this protection. For help with gambling addiction, players can contact Loket Kansspel.

Prevention of money laundering and fraud

Casinos must also comply with the Anti-Money Laundering Act (Wwft). This law demands traceable financial transactions and reporting of suspicious patterns to the Financial Intelligence Unit (FIU-Nederland). The combination of iDIN and Trustly supports this compliance because both services are linked to verified bank accounts. Anonymous deposits or withdrawals are therefore virtually impossible, which makes money laundering via online channels more difficult.

Due to the transparency of Trustly transactions, combined with the fixed identity from iDIN, casinos quickly detect anomalies. Failure to comply with the Anti-Money Laundering Act (Wwft) can lead to heavy fines or revocation of the license by the Kansspelautoriteit. For the player, this means an environment that is not only safe from fraud, but also legally robust.

Privacy and data protection for the player

iDIN, managed by the Dutch Banking Association (NVB), only shares necessary personal data after explicit consent. Trustly processes transactions without the casino seeing your balance. This architecture complies with the General Data Protection Regulation (GDPR) and ensures that player data is not commercially abused.

Which data exactly does your bank share?

During verification, iDIN applies the 'minimal data principle'. The bank requests your explicit approval for each specific piece of data – such as name, address, date of birth, and age validation – before information is sent to the casino. What is not shared is important: Trustly or the online platform does not gain insight into your bank balance, savings, or other transaction history outside of the specific deposit. Through this method, organizations only receive personal data necessary for KYC purposes, as required by the anti-money laundering law. Financial details remain within the secure environment of your own banking app, leaving the privacy of your wealth intact.

Protection against phishing and identity theft

iDIN offers protection against phishing by allowing authentication to take place within the trusted interface of your own banking app, rather than on an external website. You log in via an environment you know, which reduces the chance of fake sites. The Dutch Banking Association (NVB) ensures technical standards and certification via ID.nl. Identification is just as reliable as online banking. Do you doubt the authenticity of a site? Check it via veiligbankieren.nl. Because data is sent encrypted and the bank does not sell data for commercial purposes, identity fraud via this channel is virtually excluded.

Rights under the GDPR

Players enjoy strong rights under the General Data Protection Regulation (GDPR). Casinos may not share personal data with third parties and must store it encrypted in accordance with European regulations. The Autoriteit Persoonsgegevens (AP - Dutch Data Protection Authority) strictly supervises compliance with this privacy legislation in the Netherlands. You have the right to request access to your data or demand deletion (right to be forgotten), provided there is no legal retention obligation on the data due to anti-money laundering rules or CRUKS. The Autoriteit Persoonsgegevens (AP) can take action if an operator violates these rights. Although Trustly falls under PSD2, the storage of profile data at the casino remains subject to the supervision of the AP and the frameworks of the GDPR.

Practical risks and common concerns

The technology is robust, but user errors and technical limitations remain risk factors. Players must understand that iDIN only shares personal data after explicit consent, while Trustly acts solely as a payment channel within the Dutch legal framework.

Is Trustly a reliable party for checks?

Trustly is an open-banking payment service with high security standards, including certifications such as ISO/IEC 27001 for information security. Trustly works closely with major Dutch financial institutions. ABN AMRO and ING Bank seamlessly support Trustly's infrastructure, ensuring direct and encrypted transactions without intermediaries.

In the Netherlands, Trustly does not serve as a replacement for KYC verification. Unlike foreign 'Pay N Play' casinos, where Trustly often handles both payment and identity checks, the Wet KOA dictates that these tasks remain separate. Trustly facilitates the financial flow, but the safety check of your identity must run through iDIN. This dichotomy prevents anonymous gambling, which is essential for enforcing anti-money laundering rules.

Disadvantages and limitations of iDIN verification

iDIN has practical disadvantages despite its high security. The most common frustration is dependence on the banking app. If it crashes or times out, the registration fails. Not every bank supports iDIN uniformly. Rabobank and ABN AMRO customers generally experience a smooth linking procedure, but users of smaller banks may run into compatibility issues.

Another disadvantage is the lack of anonymity. Because iDIN directly shares your name, date of birth, and address with the casino, there is no room for privacy protection during registration. The customer service of Trustly itself can also be a stumbling block: the help function is often only available in English, which creates barriers for players who do not feel comfortable in that language. Finally, iDIN requires you to actively give permission for data sharing every time. This is secure, but some users find it cumbersome compared to a one-time document upload.

Alternatives: Pay N Play and Brite

Many players wonder how Pay N Play compares to iDIN. Pay N Play is a concept linked to Trustly and competitor Brite, where registration and deposit coincide. In markets like Sweden this is sufficient, but in the Netherlands, Pay N Play via Trustly or Brite is legally impossible because a separate, verified account is mandatory.

Brite is an alternative open banking provider that also offers fast bank transfers. However, even with Brite, the iDIN check remains necessary for legal access to Dutch casinos. The security of these alternatives is high, but they offer no escape from the Dutch identification requirement. For players who want more privacy, prepaid options like Paysafecard remain an alternative, although they lack the direct link to bank details for fast payouts. Always choose a Ksa-licensed operator to be sure of correct data processing.

About This Article - Editorial Standards

Sarah Weber (Casino Tester & Bonus Analyst)
Factually reviewed by:
Dr. Markus Hoffmann (Senior iGaming Compliance Analyst)
Last updated: 2026-08-11.

This article on "safety of idin verification via trustly at casinos" was written by Sarah Weber and factually reviewed by Dr. Markus Hoffmann. Both regularly update the content for changes in regulation, licensing and bonus terms. All references to licences, regulators and statutes link to public sources (the local gambling regulator, the applicable local gambling statute).

About the Author

8+ years reviewing casinos, 200+ personally tested platforms across the EU and globally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialty: wagering requirements, withdrawal workflows, customer-support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators across multiple regulated markets. PhD in Economic Mathematics. Focus areas: bonus mathematics, wagering analysis, and player-protection systems.

Responsible Gambling

Gambling can be addictive. If you feel you are losing control of your play, please reach out to the relevant problem-gambling helpline or use the national self-exclusion register (the relevant national self-exclusion register). Set personal deposit and loss limits BEFORE you play with real money. Operator pauses and cooldown tools exist to keep play sustainable.

Legal Notice

The information in this article is provided for editorial and comparison purposes only and does not constitute legal advice. Players are responsible for compliance with local regulations.