Article 9 min read

KYC, Pending Withdrawal, Payout Rate & “Cuci”: The Withdrawal Glossary

Felix McCoy
Felix McCoy Senior iGaming Content Specialist & Casino Analyst
Updated: 12 Oct 2026

Researched with AI tools, checked against the sources linked on this page and approved by our editor before publishing. How we work.

KYC, pending withdrawal, payout rate and cuci explained for Malaysian players

Desk research. This glossary explains standard withdrawal terminology, publicly published operator terms, and Malaysian regulatory and police guidance verified on official sources. It does not describe first-hand deposit or withdrawal testing of any specific operator, and no payout timing on this page is our own measurement. How we work: our 6-step review process.

A withdrawal can involve identity checks, operator approval and payment processing. This glossary explains KYC, pending withdrawals, payout rates and the Malaysian term “cuci”, so you can distinguish a stated condition from an unexplained delay.

It also explains minimum deposit versus minimum withdrawal. This page defines each term in plain English, with the Bahasa Malaysia phrasing used in Malaysian lobbies, one concrete RM example each, and the specific thing to check before you assume a delay is normal. It is the withdrawal-side companion to our bonus terms glossary, RTP, house edge & volatility and the slot mechanics glossary.

Jump to a term:

The Four Terms at a Glance

TermBM / local usageWhat it actually isThe failure mode it causes
KYCPengesahan identiti, verifikasi akaunIdentity and source-of-funds checksCashout frozen until documents clear — or indefinitely
Pending withdrawalPengeluaran dalam proses, withdrawal pendingA request not yet completed; cancellation depends on the operatorYou cancel it yourself and play the money back
Payout rateKadar pembayaran, peratus pembayaranActual % returned to players across a periodMarketing figure mistaken for an audited one
“Cuci”Cuci, cuci pantas, syarikat cuciSlang for cashing out winningsTrust claim treated as evidence; mule-account exposure

Two of the four are operator mechanics. Two are numbers and words that look like evidence and usually are not.

Minimum Deposit vs Minimum Withdrawal

Minimum deposit (deposit minimum) is the smallest payment accepted through a given method. Check it alongside the bonus qualifying deposit and minimum withdrawal: all three can differ.

Illustration, not a named offer: a site accepts RM10 deposits but requires RM30 withdrawals. A RM20 withdrawable balance falls below that floor. Do not deposit or gamble more to reach it; check the account-closure and remaining-balance policy.

Also check withdrawal fees, per-payment and daily caps, identity requirements and bonus restrictions.

KYC (Pengesahan Identiti)

KYC — “Know Your Customer” — is the identity verification an operator runs before releasing funds. It is part of the anti-money-laundering (AML) checks licensed gambling operators are expected to run.

A KYC request typically asks for government photo ID (in Malaysia, usually the MyKad), proof of address such as a recent utility or bank statement in the same name, and proof of the payment method. Higher-value or higher-risk cashouts add source of funds — evidence of where the money came from. Under a risk-based approach, verification is not a one-time event; it continues through the account’s life.

Illustration: you deposit RM200 and later request RM2,000. The operator then asks for identity and payment documents. The timing alone does not prove stalling: checks can be triggered during an account’s life. Ask which documents are required, why previous submissions were rejected and when the next update is due.

What our ranked casinos state, as recorded in their reviews: BK8’s withdrawal FAQ says it may ask for photo ID and a bank statement showing the beneficiary’s name and account number; we88 pays out only by local bank transfer and refuses third-party bank accounts; Rizzy requires an identity check and an emailed one-time code before a withdrawal. Withdraw to an account in your own name.

Two Malaysia-specific cautions. First, verify the licence claim on the issuing regulator’s own register before uploading identity documents; our pre-registration checklist walks through it step by step. For Curaçao, the old master/sub-licence system ended under the new gaming law (the LOK), in force since 24 December 2024: an operator still citing a “master licence” in 2026 is citing something that no longer exists, and what counts is a direct licence on the Curaçao Gaming Authority’s licensee register. Second, an unlicensed operator that collects your MyKad and a selfie has your full identity set with no regulator to answer to.

Pending Withdrawal (Pengeluaran Dalam Proses)

A pending withdrawal is a request that has not completed. Some operators allow cancellation while it is pending; others do not. “Pending” and “reverse withdrawal” are not interchangeable terms.

Use the operator’s published timeframe rather than a market-wide estimate. Check when its clock starts and whether weekends or document checks affect it.

Approval checks and payment processing can cause delays. If cancellation is available, cancelling to play again puts the requested funds back at risk.

Illustration: you request RM800 and the site allows cancellation while pending. If you cancel and gamble that balance, it is no longer awaiting payout. Avoid cancelling a withdrawal just to continue playing.

Status labels vary. Ask what each one means at that operator:

  • Pending — waiting for a later step; cancellation may or may not be available.
  • Processing — ask whether funds have actually been sent and whether there is a payment reference.
  • “Under review” — ask what is being checked, what is outstanding and when an update is due.

The check to run before depositing: does the operator publish a specific pending period and withdrawal timeframe in its terms? “Withdrawals are processed as soon as possible” is not a timeframe. Where a site’s terms page and its FAQ give different numbers, treat both as published and neither as verified. See our e-wallet withdrawal-record checklist for how the rails themselves differ.

What to Ask Support About a Delay

Send the request date, amount, payment method and withdrawal reference. Ask: Is this waiting for documents, approval or payment? What is outstanding? Which published timeframe applies, and when will I receive the next update? Save the answer and supporting records. Do not share a wallet PIN, password or one-time code, and do not deposit more to release a withdrawal.

Payout Rate (Kadar Pembayaran)

A payout rate is the percentage of total money wagered that an operator actually returned to players over a period — a backward-looking measurement across all games combined. It is not the same thing as RTP, and the two are constantly conflated in Malaysian ads.

RTP is a single game’s theoretical long-run return, set by the provider and fixed in the game’s maths. Payout rate is an operator-level result over real play. Independent testing houses such as eCOGRA and iTech Labs certify RNGs and verify that a game’s actual return matches its stated RTP. Under eCOGRA’s eGAP programme, approved sites can additionally receive independently prepared monthly return-to-player reports for all categories of casino games — note that this is an option available to certified operators, not something every seal-carrying site publishes.

Concrete example. Players wager RM1,000,000 across a site in one month and RM940,000 is returned as winnings. The payout rate is 94.0%, and the operator’s gross gaming revenue is RM60,000. Note that the same site can be full of 96% RTP slots and still report 94% — because the reported figure blends game categories with different maths and reflects what players actually chose to play, not what the slots would return in theory.

So a “97% payout” badge is only meaningful with three attachments: which auditor, which month, and a link to the report. Without those, it is a design element. For what the underlying numbers mean game by game, see RTP, house edge & volatility.

“Cuci” (Slang Tempatan)

“Cuci” literally means “wash”, and in Malaysian online-casino slang it means to cash out your winnings. Cuci pantas = a fast payout. Syarikat cuci = an operator that pays. Tak cuci = it did not pay.

The word carries so much market weight that operators build brand names on it — 12cuci, 100cuci, easycuci, pscuci and others all put the payout promise straight into the domain. That is precisely why the word is worth nothing as evidence. Any site can register a name containing “cuci”; none of them are audited on it. Naming those brands here is an observation about a naming convention and nothing more — none of them appears on our blacklist, and no accusation is intended or implied.

Concrete example. Two sites both advertise cuci 24 jam. One publishes a withdrawal timeframe and a licence number you can find on the regulator’s register. The other publishes the slogan only. The slogan is identical; the verifiable content is not.

Keep it separate from “cuci duit”, which means money laundering — a criminal-law term, not a payout term. That distinction has a practical edge in Malaysia. Bank Negara Malaysia describes a mule account as one used by others to collect or transfer funds that could be stolen or laundered, and warns that such an account may be closed. In October 2025 the Finance Ministry told Parliament that BNM requires banks to give a written notice when they close an account on suspicion under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA), with the reason (short of tipping off an investigation) and the appeal channels, time period and process, as Bernama reported.

Two things a Malaysian player can do before money moves:

  • Check the counterpart account. PDRM’s CCID portal at semakmule.rmp.gov.my lets you check a bank account or phone number against police reports. No record found is not proof of safety — it only means nothing has been reported yet. A payout or deposit account in a personal name rather than a company name is a reason to stop and verify who receives the money.
  • Act fast if funds are already gone. Call your bank’s fraud line or the National Scam Response Centre on 997, then lodge a police report anyway, within 24 hours. The NFCC says that without a police report, follow-up action cannot be carried out. Its NSRC page gives 997’s hours as 8.00am to 8.00pm daily, while malaysia.gov.my lists 24 hours; banks’ fraud lines run around the clock. Have your IC, bank details, the counterpart account and phone number, transaction times and screenshots ready.

The legal position: an offshore licence is not a Malaysian one. Section 6(1) of the Common Gaming Houses Act 1953 and section 6(1) of the Betting Act 1953 penalise players, each with a fine up to RM5,000, up to six months in prison, or both, and in October 2023 the Court of Appeal upheld convictions for online gambling on laptops, as Bernama reported. No Malaysian regulator can order an offshore site to pay you. Our running record of operators is in the blacklist and Scam Watch.

18+ only. Understanding withdrawal terminology helps you avoid losing money to process and fine print — it does not make gambling profitable, and the house edge applies regardless. Play only with money you can afford to lose. If gambling is causing you or someone close to you harm, Befrienders KL offers emotional support on +603-7627 2929, 24 hours a day; see our responsible gambling page for more.

FAQ: Withdrawal Terms Explained

A withdrawal may trigger identity or source-of-funds checks, and that timing alone does not prove deliberate delay. Ask for a clear document list, reasons for rejected submissions and a review timeframe; keep the replies if requests become repetitive or unexplained.

“Cuci” bermaksud mengeluarkan kemenangan daripada akaun casino; cuci pantas bermaksud bayaran cepat. Ia hanyalah slanga pemasaran, bukan bukti bahawa sesebuah laman benar-benar membayar. Jangan kelirukan dengan “cuci duit”, iaitu pengubahan wang haram.

Only if the operator allows it at that stage. A “pending” label does not itself establish a right to cancel, and “processing” does not prove the money has been sent. Check the actual status definitions and avoid cancelling just to gamble the balance again.

They are not comparable. RTP is one game’s theoretical long-run return; payout rate is a whole site’s realised return across all games over a period. A payout rate is only meaningful if the auditor, the period and the report are all named.

Bergantung pada terma yang diterbitkan operator dan kaedah pembayaran. Semak sama ada operator menerbitkan tempoh yang spesifik dalam termanya. Masa yang kami petik ialah kenyataan operator, bukan ukuran kami.

Collect evidence first: account ID, transaction records, the operator’s published withdrawal terms and full chat transcripts. If its licence is on a regulator’s register, use that regulator’s complaints channel. If money went to a suspected mule account, call 997, then lodge a police report anyway, and check the account on semakmule.rmp.gov.my.

Felix McCoy

Editorial Note: Felix McCoy

Seasoned iGaming expert with 10+ years covering online casinos, slots, sports betting, and crypto gambling.

18+

Gambling can be addictive. Play responsibly. Gamblers Anonymous