WebTech Kenya

GRA toll-free 0800-723-770

18+

Selfie with ID at betting registration: what it checks and why

The gambling law does not mention selfies. It requires proof of age before registration (Gambling Control Act, 2025, s.72(3)) and an identity check using official identification documents (Operations Regulations, r.85). A selfie with ID is one way an operator may carry out that check, and it is the operator's own design choice.

Short answer

A selfie with ID is a way for an operator to compare the face of the person registering with the photograph on an identity document. The law behind it is general: an operator must require proof of age of majority before registering every player (s.72(3) of the Gambling Control Act, 2025). The full legal sequence is set out in the guide on proof of age and identity checks.

The statute and regulations read for this guide say nothing about selfies, photographs or liveness tests. That silence matters, because it means the screen you see is the operator's design, not a fixed national procedure. Gambling is addictive, and online gambling is open only to adults aged 18 and over.

What the law requires and what it leaves open

QuestionWhat the sources sayProvision
Must proof of age be shown?Yes, before registration of every playerAct s.72(3)
Must identity be checked?Yes, with location verification and an age assurance check, before anyone participates onlineOps Regs r.85(1)
Which data are used?Reliable, independent and electronically verifiable data sources, before account activation and before any wagering depositOps Regs r.85(2)
Which documents?Verification includes official identification documents, and confirms the person is not self-excluded and is legally eligibleOps Regs r.85(4)
Is a selfie required?Not mentioned in the texts readNone found
Is a liveness test required?Not mentioned in the texts readNone found
Is anonymous play allowed?Prohibited unless the Authority approves it in consultation with the National TreasuryOps Regs r.86

What a selfie check compares

The legal duty is to establish who you are and that you are an adult. A selfie step is one practical tool for the first part. This section describes the general idea, not any particular operator's software, because the sources do not describe one.

  1. The document

    You present an official identification document. Regulation 85(4) says verification "shall include official identification documents", so the document is the anchor of the whole check.

  2. The face

    A photograph of you, usually taken live in the app or browser, is compared with the portrait on the document. The aim is to link the person at the screen to the person the document describes.

  3. The record

    The details on the document, such as name, number and date of birth, are checked against data sources the operator does not control (r.85(2)). This is the step that actually establishes age.

  4. The status checks

    The operator confirms that you are not a self-excluded person and are legally eligible to gamble (r.85(4)).

A live photograph, as opposed to an uploaded picture, makes it harder to use a stranger's document photo. That reasoning is an explanation of purpose; no provision read for this guide states it.

Why operators may ask for it

Three duties push an operator towards a strong identity step. Section 72(2) requires mechanisms to ensure that a child is not registered. Regulation 98(2) makes it mandatory to verify the identity of all punters in line with know-your-customer requirements under the Proceeds of Crime and Anti-Money Laundering Act. Regulation 85(3) requires identity to be verified again for any winner before winnings are paid, and s.70(6) requires proof of age before a prize is remitted.

A face match at registration gives the operator a reference to compare with later. Whether an operator keeps such a reference is not stated in the sources, so check its privacy terms.

What happens to your face image and ID details

Regulation 96(1) says the collection and processing of data during gambling operations shall comply with the Data Protection Act. The Operations Regulations then add duties of their own.

Duty on the operatorWording in the sourcesProvision
EncryptionAll personal and financial data of a player encrypted in transit and at restOps Regs r.42(1)
Location of storageStorage and processing of player data on servers in Kenya unless the Authority grants prior written exemption or authorizationOps Regs r.42(2)
Purpose limitCollect and process data only for purposes directly related to administering the gambling operationOps Regs r.96(2)
MarketingNo use of personal data for marketing without the participant's prior consentOps Regs r.96(3)
Terms to readTerms must cover registration and player accounts, and data collection and privacy statementsOps Regs r.4(2)

The Office of the Data Protection Commissioner (ODPC) regulates personal data processing under the Data Protection Act, 2019. If an operator misuses your images or documents, the guide on reporting betting data misuse to the ODPC explains the route. This guide does not state how the Data Protection Act classifies face images, because the text of the Act could not be retrieved in this run. Check the Act or the ODPC directly for that point.

Safe handling before you take the photo

  • Confirm that the site or app belongs to a licensed operator before you submit any document. The guide on spotting fake betting apps shows how to compare a domain with the regulator's list.
  • Do not follow a link in an unexpected message to upload identity images. See how to recognise betting phishing SMS.
  • Read the privacy statement for how long the images are kept and who receives them. The glossary of personal data terms for gambling accounts explains the rights you can use.
  • Photograph your own document only. Using another person's document is false information, and s.72(5) requires the operator to refuse or cancel the registration.

When the check does not pass

A failed selfie match does not mean you did anything wrong. Poor light, a worn document photo or a changed appearance can all cause a mismatch. The regulations set the duty to verify but say nothing about retries, manual review or response times, so these are matters for the operator's terms and customer care.

A different kind of mismatch, where names differ between the account and the document, is covered in the guide on a betting account name that does not match your ID or SIM. Non-citizens face a separate question about which documents count, discussed in whether non-Kenyans can register a betting account.

Illustrative example

Illustrative example: a player is asked for a selfie holding an ID. The photo is blurred, so the face match fails. The player retakes it in daylight and the portrait matches. The date of birth printed on the document is then checked against an official data source (r.85(2)), and registration proceeds only if age and eligibility are confirmed (r.85(4)). No amount of money is involved at this stage, because verification comes before any wagering deposit is received.

This guide explains rules and is not legal advice. It does not describe ways to avoid age, identity or location checks. If you are under 18, online gambling is not open to you.

Questions and answers

Is a selfie with my ID required by law in Kenya?

Not in the texts read for this guide. The Gambling Control Act, 2025 and the Operations Regulations require proof of age, an identity check and verification that includes official identification documents (Act s.72(3), Regulations r.85). Neither names a selfie, a photograph or a liveness test, so the method is the operator's choice.

Does the selfie prove my age?

Not by itself. A face image can show that the person holding the document is likely the person on it. The age comes from the date of birth on the official identification document, checked against electronically verifiable data sources (Operations Regulations, r.85(2) and r.85(4)).

What if the check rejects me although I am the person on the ID?

The regulations set the duty to verify but not the screens, the retry rules or the response time. Read the operator's terms, which must cover registration and player accounts (Operations Regulations, r.4(2)), and contact its customer care in writing.

Can the operator use my selfie and ID for marketing?

Regulation 96(3) of the Operations Regulations says personal data collected shall not be used for any form of marketing without the prior consent of the participant. Regulation 96(2) limits collection to purposes directly related to administering the gambling operation.

Should I send a selfie with my ID to a link I received by SMS?

No. Confirm first that the site or app belongs to a licensed operator. Identity images sent to a copied site can be misused, and the guide on phishing SMS shows how to compare a link with a genuine one.

Sources

  1. Gambling Control Act, 2025 (No. 14 of 2025), ss.68, 70, 72, accessed 2026-10-24
  2. Gambling Control (Conduct of Gambling Operations) Regulations, 2026, rr.4, 41, 42, 49, 85, 86, 96, 98, accessed 2026-10-24
  3. Office of the Data Protection Commissioner (ODPC), Kenya, accessed 2026-10-24