How a mobile-money deposit reaches a gambling account in Kenya

You pay the operator's Paybill or short code from your wallet, the telco confirms the payment, and the operator credits your player account. The Gambling Control Act, 2025 lists mobile money as an accepted funding method (s.73(4)) and bars deposits on credit. Wallet limits and charges are set by the telco, not by the operator.

By WebTech Kenya Editorial (prepared with AI tools under our editorial policy) · Last updated 2026-10-04

The short version

A deposit is an ordinary mobile-money payment to a business number. What makes it a gambling transaction is what the operator does next: it must credit the money to an account that is registered in your name, and from that moment a set of rules in the Gambling Control Act, 2025 applies to it. If you have not yet opened an account, start with the guide on identity and proof-of-age checks at registration, because no deposit may be accepted before those checks are done.

Section 69 of the Act defines the whole cycle in one sentence: an online gambling transaction starts when a player deposits money into the gaming account and ends when the player withdraws money from it.

Who is involved in one deposit

Three parties handle the money. Knowing which one does what tells you whom to contact when something goes wrong.

The deposit, step by step

1. You start a payment to the operator's business number

   This is either a Paybill payment that you key in yourself (business number plus the account reference that the operator specifies) or a payment request that the operator's site or app sends to your handset. In both cases the business number should be the one printed in the operator's terms and conditions, which the regulations require to list "paybill numbers, Shortcodes, USSD numbers for operations" (r.4(2)(e)).

2. The wallet asks for your PIN

   The PIN prompt comes from the mobile-money service on your own phone. An operator has no reason to know your wallet PIN, and you should never type it into a web page or tell it to anyone on a call. The guide on SIM swap and PIN safety covers this in detail.

3. The provider confirms the payment

   You receive a confirmation message from the wallet service with a transaction code. On M-PESA, the Hakikisha feature shows the recipient's name before the payment completes, which is the moment to stop if the name is not the operator you expected.

4. The operator credits your player account

   Under s.73(2) the licensee must credit to your account all funds received from you or on your behalf. Keep the confirmation message until the balance shows the deposit: the transaction code is what customer care will ask for.

5. Duty is accounted for

   Excise duty of five per cent applies to the amount deposited into a betting or gaming wallet. The separate guide on tax on deposits and withdrawals quotes the provisions.

What the Act says about your money once it is deposited

The deposit does not become the operator's money. Section 75 lists the only things a licensee may do with the balance on a player's account: debit a wager that the player has made or directed, remit funds at the player's request, and pay bank charges for deposits received and funds withdrawn.

Section 73(3) adds that a wager cannot be accepted unless the account holds enough to cover it and the player has approved the amount. Section 76(2) requires the money held for players to be at least equal at any time to the total standing to the credit of players' accounts, and gives the licensee thirty days from the end of the month to make good any shortfall from its own money.

On the technical side, r.41(e) of the Conduct of Gambling Operations Regulations requires an online platform to keep player funds apart from operational funds in separately maintained accounts. Regulation 88(1) requires financial transactions to pass through a secure payment gateway that complies with the payment card industry data security standard or an equivalent approved by the Authority.

Funding methods the law allows, and those it rules out

Section 73(4) names the channels a licensee may use to receive funds: a debit card, an electronic funds transfer, a mobile money transfer, cash deposits, or another method approved by the Authority. Credit is excluded twice over. Section 72(7) bars a licensee from facilitating a bet "by advancing credits, the use of credit cards or meeting third party costs incurred by a player", and s.74(1)(a) makes providing credit to a player an offence.

Regulation 86 goes further for anonymous value: anonymous gambling, and the use of virtual assets for gambling or withdrawal, is prohibited unless the Authority approves it in consultation with the National Treasury. In practice this means a deposit should always come from a wallet or account that is in your own name.

Limits and charges: who sets what

Two different sets of limits apply to a deposit, and they are published in different places.

• Wallet limits. Safaricom's consumer tariffs page (last updated 4 August 2026) states a maximum of KES 250,000 per transaction, a maximum daily transaction limit of KES 500,000 and a maximum M-PESA account balance of KES 500,000. Other wallets publish their own limits on their own sites.
• Wallet charges. The charge for paying a business number depends on the amount band and on the tariff the business has chosen. The current table is on the same Safaricom page. This guide does not copy it because the bands change.
• The legal minimum bet. Section 71(1) of the Act sets a floor for an online bet: not less than twenty shillings.
• Your own limits. Regulation 87 requires licensees to give players tools for setting deposit limits on a daily, weekly and monthly basis, plus loss, session and expenditure limits. Setting these before the first deposit is a practical way to keep spending inside a budget you can afford.

When a deposit does not arrive

1. Check the confirmation message

   Confirm the business number, the account reference and the amount. A wrong account reference can leave a payment unallocated on the operator's side.

2. Contact the operator's customer care with the transaction code

   Regulation 9 says the customer care centre exists to handle matters arising from the licensee's gambling activities and to resolve complaints before they are reported to the Authority.

3. Contact the wallet provider if the money went to the wrong recipient

   Safaricom's self-service reversal, started by forwarding the confirmation message to 456, is described for person-to-person transfers within 24 hours. For a business payment, call the provider and the business.

4. Escalate an unresolved matter

   Regulation 9(2)(e) requires the licensee to refer an unresolved complaint to the Authority. You can also contact the regulator directly; the guide to prize payment and withdrawal timelines explains the complaint route.

Safety checks before you send money

A deposit sent to an unlicensed site has none of the protections above. Before the first payment, compare the domain you are on with the regulator's published list, as described in the guide on fake apps and copied sites. Then confirm the recipient name on the payment prompt before you enter your PIN.

A deposit is spending, not saving. Money moved into a player account should be money you have already decided you can afford to lose.