1win account verification in Tanzania: prepare a clean KYC file

01

What “KYC” means for a Tanzania player

KYC means “know your customer”. In practical terms, it is the process used to connect the person operating an account with reliable identity information. For gaming, the check supports age controls, one-account rules, payment ownership, account security and anti-money-laundering monitoring. It is not a test of whether someone is likely to win.

Tanzania's Financial Intelligence Unit explains that reporting persons must identify customers, validate personal data against independent sources, maintain records and report suspicious transactions. Its list of reporting persons includes operators of gaming activities. GBT's internet-gaming rules then give more specific player-facing requirements: identity must be proved and authenticated, registration information must be complete, and the player must nominate an account for movement of funds.

That legal purpose helps explain why a check may appear near registration, payment or withdrawal. It does not let an affiliate author guess the exact workflow used by 1win today. The operator may use a document upload, camera capture, database check, manual review or a combination. The player should follow only the instructions actually displayed in the authenticated account.

The safest mindset is: prove the minimum requested fact through the proper channel, preserve the submission record and protect every secret that is not needed for identity. A KYC team may need a document image; it does not need your mobile-money PIN, one-time code, email password or remote access to your phone.

02

The confirmed legal baseline in GBT's 2022 Regulations

Regulation 13 says a player intending to participate must prove identity by submitting a passport, national identity card or another identity/document that GBT may approve. It also says the licensee must not accept a wager until the player's identity has been authenticated in accordance with approved control systems.

Regulation 14 lists information for player registration: full name, gender, a copy of an identity card or an identification number, passport number or another approved proof; physical and postal address; email; telephone number; age; and the player's nominated account. This list is valuable because it is primary, local evidence. It should not be inflated. For example, the rule requires address information, but the passage does not say that every player must always upload a utility bill. Only the live request can establish what evidence the operator needs for a particular address check.

Regulation 16 says a player must nominate an account with an authorized bank, financial institution or mobile-network operator for moving funds, and limits the player to one account with the licensee. Regulations 37 and 38 require controls to know players and detect or report suspicious deposit and withdrawal activity. Regulation 39 requires systems that prevent participation by people below 18.

These are reasons to use accurate data from the beginning. A borrowed wallet, nickname, duplicate gaming profile or false date of birth can create a conflict that a photo cannot cure.

03

What is verified about 1win—and what only 1win can confirm

The official GBT online sports-betting register reviewed on 1 September 2026 lists Interactive Sports Entertainment Company Limited with the trade name 1Win. That supports the Tanzania sports context for this guide. Product categories should still be checked separately; a sports entry should not be presented as proof for every casino product.

Publicly indexed 1win material gives only limited KYC detail. In a January 2026 forum discussion, a 1win administrator said verification is requested selectively by the security team and is not required in other cases; if requested, the player must follow the instructions in the email. The forum also states that it is not an account-support channel. We can report that observation with its date, but not turn it into a permanent guarantee.

Only the current 1win interface or a message confirmed through its authenticated Support panel can answer these case-specific questions: which document is accepted; whether one or both sides are required; whether a selfie or liveness step is used; which formats and file sizes work; whether proof of address or payment ownership is needed; and how the review status is communicated.

Any page claiming a universal “1win KYC takes exactly X hours” without a current operator source is guessing. So is a page promising that verification automatically releases a withdrawal. Verification may remove one hold, but a transaction can have separate payment, risk or technical checks.

04

When a verification request may appear

The local framework supports checks at registration and before wagering because identity authentication is required. Additional review can also be understandable when key details change, a device or login looks unfamiliar, a nominated payment account does not match, the operator's monitoring flags unusual activity, or a withdrawal requires ownership confirmation. These are general risk scenarios, not a published list of 1win triggers.

Do not assume that a request means the account is accused of wrongdoing. Customer due diligence is a routine control. At the same time, do not ignore it or try to work around it. Read the status word for word: “verification required”, “under review”, “additional document needed” and “rejected” describe different stages.

Save the notice, time and route through which it arrived. If it came by email, do not click immediately. Sign in independently and see whether the same request appears in the account or confirm it with Support. A genuine request should be traceable to the operator; a fake agent often creates urgency and moves the player to a different app.

If no request is shown, do not send identity files “in advance” to an address from a blog. More copies in more inboxes do not make verification safer or faster.

05

Documents: confirmed categories versus possible extra evidence

The confirmed GBT categories are a passport, national identity card or another proof approved by the Board. The operator must tell the player whether a particular document is accepted in its current workflow. This guide should not state that a driving licence, voter card or student ID will work unless the current official request says so.

Registration also involves an address, contact details, age and a nominated payment account. Depending on the unresolved fact, an operator may ask for extra evidence such as an address record, payment statement or ownership screenshot. That is common KYC practice, but it is not proven here as a universal 1win requirement. Use conditional language: if requested.

For payment evidence, show the account holder, provider, relevant reference and requested period while redacting unrelated transactions when allowed. Never expose a PIN, OTP, full card security code or crypto private key. A transaction receipt can prove that a transfer occurred; it does not require the secret used to authorize it.

For a document image, use the original. Screenshots of a photo, scans passed through messaging compression, photocopies and heavily watermarked images may lose detail. If the workflow gives image rules, those rules take priority over this general checklist.

06

Make the account data match before taking a photo

Compare the account's full name with the document, including order, spacing and transliteration. Check date of birth, registered phone number, email and country. Then compare the nominated mobile-money or bank account holder. A mismatch is easier to explain before submission than after multiple rejections.

Do not change accurate identity data simply to imitate a spelling used elsewhere. If the document and account differ because of a genuine name change, replacement SIM or registration mistake, open Support and ask what evidence is needed. Keep the explanation short and factual.

Use your own contact and payment route. Regulation 16 ties participation to a nominated account at a bank, financial institution or mobile-network operator and limits the player to one gaming account with the licensee. A wallet registered to another person can therefore create both ownership and compliance questions.

Do not open a second 1win account to “start clean”. It creates another identity record rather than fixing the first one. Do not ask a relative to verify your profile. The objective is one real adult, one gaming account and a payment route that can be linked lawfully to that player.

Write down any mismatch you cannot correct yourself and include it in the same support case. Honest context is more useful than edited evidence.

07

Photograph an identity document so it can be reviewed

Clean the camera lens and place the document on a plain, contrasting surface. Use bright, even light without flash glare. Hold the camera parallel to the document so text and security features are not distorted. Include all four edges unless the operator's capture tool provides a frame.

Review the image at full size. The name, date of birth, document number, expiry date and photograph should be readable if those fields are present and requested. Avoid fingers over corners, shadows, reflections, blur and extreme JPEG compression. If both sides are requested, capture each side separately and label them correctly.

Do not use filters, “beauty” mode, AI enhancement or an editor that replaces pixels. Cropping to remove the edge or masking a required field can make an authentic document look altered. Conversely, do not send extra pages or unrelated documents. Data minimization means sending what the verified request needs, no more.

Check validity. An expired or damaged document may be rejected, but the exact acceptance policy is operator-specific. If the only available document is expired, ask Support what current alternative is accepted rather than altering the date.

Store the image in a protected folder, not a public cloud link. Delete duplicate copies from shared devices and chat apps after the verified submission is complete, subject to your need to retain evidence.

08

Selfie and liveness checks: only if the live workflow asks

GBT's cited player-identification passage does not prescribe a selfie or video for every player. Some online verification systems use a selfie or liveness capture to compare the person with the identity document, but this page must describe it conditionally.

If 1win's protected workflow requests it, follow the on-screen prompts. Use natural light, remove items that hide the face when the prompt requires it, keep the camera steady and allow the site to access the camera only for the session. Do not send a reusable selfie holding an ID to a stranger in a messenger.

A legitimate liveness flow may ask the user to turn the head, blink or center the face. It should not require a mobile-money PIN, bank password or screen-sharing session. If the camera permission appears on a domain you did not intend to open, deny it and return to the verified platform.

Avoid pre-recorded videos, filters or another person's face. If accessibility, injury, religious clothing or device limitations prevent completion, contact Support and ask for an alternative review. Do not repeatedly fail the capture in poor conditions; fix lighting, connection and camera permissions first.

09

Submit through a channel you can authenticate

The strongest route is the verification control inside the signed-in account. If the operator instructs you to use email, confirm that address in the live Support panel because indexed 1win sources show contact-domain changes over time. Do not rely on a static address copied from an affiliate page.

Before upload, check the domain character by character and confirm HTTPS. Close unsolicited chat links and navigate independently. Use your own device and a trusted connection; avoid public computers that may retain files or browser sessions. Keep Google Play Protect enabled on Android and do not install a separate “KYC APK”.

Submit once, then save the confirmation screen, case number, filenames and timestamp in EAT. If the page errors, record the error before retrying. Repeated partial uploads can make it unclear which file is current.

This affiliate guide must not provide an upload box. Its CTA should go to the operator route, not collect personal data as a lead form. Marketing analytics should never capture document numbers, image URLs or support narratives.

After submission, sign out on a shared device and remove the local files from public folders. Keep the originals securely offline until the case is closed and any appeal period has passed.

10

Payment ownership and the nominated-account rule

Tanzania's Internet Gaming Regulations define a nominated account as the player's bank, financial-institution or mobile-network account used for gaming funds. The participation-account rules say this account is nominated at registration and the gaming account is established in the player's name.

This makes name consistency important for mobile money. If the SIM or wallet is registered to someone else, the operator may not be able to connect the transaction to the player cleanly. Do not borrow a wallet to bypass a limit or verification request. If ownership changed after a SIM replacement or legal name update, document the change and ask for the approved correction process.

A payment screenshot should show the information needed for the case: provider, account holder when displayed, transaction reference, date, amount and status. Redact unrelated balances and transactions when the operator allows it. Never include the mobile-money PIN; Vodacom's M-Pesa guidance states that a PIN should not be revealed even to agents or customer-service representatives.

If a payment was sent from the wrong account, say so. Hiding the origin makes the review harder. Support may need a refund or source-of-funds route rather than ordinary verification. Only the operator and payment provider can decide the operational remedy.

11

Common reasons a submission cannot be accepted

Many failures are mundane: blur, glare, missing edges, unreadable text, wrong side, unsupported format, expired document, name mismatch or a screenshot where an original capture was required. Others relate to the request itself: the player sent proof of identity when proof of payment was requested, or supplied a statement that omits the relevant reference.

A “rejected” status should ideally have a reason. Copy it exactly. Correct one issue at a time. If the reason is image quality, take a new image under better light. If it is mismatch, do not edit the document; ask how to correct the account. If it is unsupported document type, ask which locally approved alternative the current workflow accepts.

Do not repeatedly submit the same failed file under different names. Do not compress it through social media. Do not buy a template, generated statement or edited identity image. False material can turn a fixable quality problem into a security and compliance problem.

If the error is technical, capture the URL, time, device, browser, file type and exact message. Try the current browser or app version, a stable connection and the permitted file format. Then give Support enough detail to reproduce the failure.

12

What to do when verification is pending

“Pending” means the review has not reached a final state; it does not tell you why or how long remains. Save the submission receipt and check whether the account shows a request for more information. Review spam or filtered mail cautiously, but verify any new link by signing in independently.

Avoid flooding multiple channels. Keep the same case number and send one concise status request after the timeframe shown by the operator has passed. Ask: which stage is pending, whether another document is required, whether withdrawals are restricted during review and how the final decision will be communicated.

Public 1win forum content should not be treated as a guaranteed timetable. A staff comment about selective verification is evidence of an operator practice at that date, not a service-level promise. The forum cannot inspect your queue.

If verification is tied to a formal complaint, Tanzania's Regulations require the licensee to communicate a complaint decision within 14 days. That rule is not necessarily the same as a universal KYC processing deadline. Frame the case correctly and save proof of the complaint date.

Do not deposit more money while access, identity or withdrawal status is uncertain. A verification hold is solved with accurate evidence and process, not additional wagering.

13

Fix a rejection without creating a second problem

Start from the written rejection reason. Make a two-column note: what the operator expected and what the submitted file actually showed. Replace only the defective evidence. Keep the original and the rejected-file receipt so the timeline remains clear.

For a data error, ask Support to correct the account before uploading a new document. For a payment-name mismatch, explain who owns the source wallet and why it was used. For a lost or renewed ID, provide the current accepted document and any requested linkage evidence. Do not conceal a duplicate profile; disclose it and ask which account should remain.

If the operator's explanation is too vague, request a specific category: image quality, document validity, data mismatch, payment ownership, duplicate account or additional review. Support may not disclose internal risk logic, but it can usually identify what the player must do next.

If a formal complaint is unresolved, use the support and GBT escalation guide. The GLICA form accepts evidence and respondent details. Keep identity attachments proportionate and submit them only through the official .go.tz route when requested.

14

Protect personal data before, during and after KYC

An identity document is high-impact data. Minimize copies, use a protected folder, lock the device and avoid public Wi-Fi or shared computers. Check that the upload page is the intended operator page. Do not leave document images in a messaging app's media folder or a public download directory.

Use a unique account password and protect the associated email. Review unknown sessions after a suspicious request. Never disclose a one-time code to a caller. If someone sends an app for “faster verification”, do not install it. Google says Play Protect checks apps for harmful behavior, can warn, disable or remove harmful apps, and recommends keeping scanning on.

Tanzania's Personal Data Protection Commission lists rights including being informed, access, rectification, erasure/destruction where applicable, restriction, objection, complaint and withdrawal of consent. AML and gaming record duties may limit some requests, so do not promise automatic deletion of every KYC record. A player can still ask the data controller what is collected, why, how it is protected and how rights can be exercised.

If personal data appears to have been misused, preserve the evidence and complain first through the relevant controller route. PDPC says a person who believes data-protection principles were violated, or is dissatisfied with the controller's decision, may submit a complaint to the Commission.

15

Fake verification agents and malicious apps

Scammers exploit urgency: “your withdrawal expires in ten minutes”, “pay a verification fee” or “install this checker”. Stop when the request leaves the verified platform, demands a secret or asks for money to a personal number. A legitimate identity review does not need your wallet PIN.

Google advises users not to install unknown apps or apps from unknown sources and says unverified-developer protections help defend against scams and malware. TZ-CERT warns that information-stealer campaigns can spread through phishing messages, malicious search results, malvertising and software disguised as legitimate content. A KYC-branded APK can therefore be an attack, not a shortcut.

If you installed one, disconnect from sensitive sessions, uninstall it, run Play Protect, review permissions and change important passwords from a clean device. Contact the mobile-money provider if financial credentials may be exposed. TZ-CERT accepts phishing and malware reports; TCRA directs victims of telecom fraud to Police and provides the UTAPELI 15040 reporting route for involved numbers.

16

Escalate a verification dispute with evidence

First ask 1win for a written explanation and case number. State the request, submission dates, file types, status, correction attempt and remedy you want. Do not attach unnecessary identity files to every reply; refer to the protected submission where possible.

GBT's 2022 Regulations require a free licensee complaint mechanism, investigation and a decision communicated within 14 days. A player aggrieved by the operator's decision may complain to the Board within 14 days from that decision. The official GLICA form asks for contact details, the mobile number used, ticket or bet-slip number, respondent, evidence and complaint particulars.

Use the current GBT respondent listing and official form. The GBT sports register pairs Interactive Sports Entertainment Company Limited with 1Win. Do not call the GBT number “1win support”; it is a regulator contact.

Describe the process failure, not the hidden risk model you cannot see. For example: “The operator requested a passport on [date]; I submitted it through [protected route], received [status], corrected [issue], and received the final decision on [date]. I request review of [specific outcome].”

17

After successful verification: keep control of the account and play

When the status changes to verified, save the confirmation and check that personal data and the nominated payment method are correct. Remove duplicate document copies from unsafe folders. Verification is not a promise that every future transaction will be instant, and it does not change the probability of any bet.

If you choose to continue, use the product category confirmed by the current regulator register, read the operator terms and set a deposit or wager limit first. GBT's Regulations require limit tools and self-exclusion. Use money reserved for entertainment, never rent, food, transport, school costs or debt payments.

Do not gamble to recover time lost in verification or a disputed transaction. If the process created financial stress, take a break. A responsible CTA should appear only after the safety and status questions are resolved.