3582 California hotel and casino

Introduction

• What it is: This MCC covers businesses providing hotel and casino services.
• Risk level: High — Due to the nature of gambling activities and financial transactions involved.
• Acceptance difficulty: Medium — Certain PSPs may have specific restrictions for casino-related transactions.
• Typical business models: casinos; hotel resorts with gaming facilities; gaming lodges; integrated casino hotels.
• For merchants: Higher MDRs may apply; potential reserve requirements; thorough vetting processes can lead to longer onboarding times.
• What PSPs expect: Comprehensive documentation of business operations; proof of regulatory compliance; detailed descriptions of gaming services offered.

Payment Insights & Benchmarks

Merchants in this MCC should plan for higher payment friction compared to standard e-commerce. Acceptance often depends on method mix, fraud controls, and PSP risk appetite.

Payment methods

Cards: commonly accepted but may face higher scrutiny based on transaction volume and guest profiles.

• E-wallets: increasingly favored for speed and convenience, especially among younger customers.
• Cash: still prevalent, particularly for on-site transactions, though not ideal for online bookings.
• Loyalty points and reward programs: utilized for payments, but acceptance varies by platform.

Authentication & security

Strong customer authentication (SCA) is frequently required, impacting customer checkout experiences.

• These security measures can help mitigate fraud but may lead to higher transaction declines.
• Merchants should monitor fraud trends, as gaming and hospitality are attractive targets for fraudsters.

Benchmarks (indicative, not guaranteed)

MDR: generally higher than standard e-commerce rates.

• Rolling reserves: often implemented, particularly for high-risk transactions, sometimes reaching double digits.
• Settlement cycles: typically longer, with some processors taking up to 10 days.
• Chargeback ratios: can be above retail benchmarks, especially for disputes over services.
• Card approval rates: generally lower compared to other sectors; transactions through e-wallets tend to perform better.

Key metrics to monitor

Transaction approval and decline rates categorized by method and guest demographics.

• Chargeback reasons split to identify patterns related to service disputes or unauthorized use.
• Changes in average booking values and frequency to assess potential fraud risks.
• Customer payment preferences and shifts, especially with emerging payment methods like crypto.

Risk & Compliance

Merchants under the California Hotel and Casino MCC face significant scrutiny due to the high risks associated with gambling-related activities and financial transactions. PSPs and acquirers apply stricter controls, emphasizing the need for merchants to proactively manage fraud, chargebacks, and comply with AML/KYC regulations.

Chargebacks & fraud

Common fraud types include friendly fraud, where customers deny authorized transactions, and bonus abuse through exploiting promotional offers.

• Patterns of multi-accounting and rapid deposits/withdrawals are prevalent in the gambling sector.
• Mitigation tools may include behavioral analytics for detecting unusual betting patterns, velocity checks to limit the frequency of bets, and deposit/withdrawal limits to control transaction amounts.

AML/KYC expectations

Strong customer identity verification is mandatory, including comprehensive ID checks and sanctions/PEP list screenings.

• Merchants must monitor source-of-funds to ensure legitimacy, especially with large or unusual transactions.
• Triggers for manual review can include high-frequency betting patterns, unexpected payment methods, or the use of anonymizing tools like VPNs.

Operational red flags

Lack of transparency regarding ownership structures in white-label operations can alarm PSPs.

• Traffic from high-risk jurisdictions or unverified affiliate marketing sources raises concerns for acquirers.
• Absence of responsible gaming policies, such as self-exclusion options and player support resources, can indicate operational deficiencies.
• Unclear refund or return policies may deter customers and raise compliance flags.

Onboarding Checklist

Merchants under the MCC 3582 (California Hotel and Casino) should prepare a complete onboarding package before approaching PSPs or acquirers. A well-structured submission improves approval chances and shortens review times.

Legal & corporate documents

company registration and incorporation documents

• disclosure of beneficial owners (UBO) and corporate structure
• valid licenses for the relevant business activities
• policies: Terms of Service, Privacy, AML/KYC, Refund Policy, Responsible Gaming (if applicable)

Financials & risk management

recent financial statements and cashflow forecasts

• liquidity or reserve model for payouts
• description of antifraud setup and monitoring tools

Product & marketing

demo access or screenshots of the live platform

• marketing plan and traffic source overview (affiliates, SEO, PPC)
• geographic targeting information
• KYC flow details, including IDV providers and thresholds

Technical integration & security

payment architecture overview with supported methods/providers

• description of SCA/3DS flows, retry logic, and tokenization
• PCI DSS compliance status and data storage policy

Operations

customer support coverage (languages, 24/7 if available)

• SLA for dispute handling and chargeback response
• deposit, bet, and payout limits; self-exclusion mechanisms
• internal process for chargeback investigation and documentation

Regulation & Licensing

Licensing and certification are critical for merchants in the California hotel and casino sector, as payment service providers (PSPs) and acquirers require proof of compliance before onboarding. Recognition of licenses depends heavily on the merchant’s jurisdiction and the markets they target.

Operator licenses

California Department of Justice — oversees the licensing of gaming establishments in California, ensuring compliance with state regulations.

• California Gambling Control Commission (CGCC) — focuses on the regulation of casino licenses and supports responsible gaming initiatives.
• Tribal Gaming Commissions — required for tribal casinos, which operate under federal law but enforce their licensing standards.
• City or County business licenses — many local jurisdictions require additional licenses to operate hotels and casinos.

Geo-restrictions

States with gambling bans → transactions typically blocked or PSPs refuse onboarding.

• California imposes specific regulations that differ from neighboring states; operators must comply with state law.
• Many PSPs restrict traffic from unlicensed or grey markets.

Certifications & audits

PCI DSS compliance for card data handling and storage.

• Random Number Generator (RNG) audits for game integrity.
• Annual AML/KYC compliance reports and reviews.
• Responsible Gaming policy audits to ensure adherence to state regulations and ethical standards.

Official Definitions & Network Comparisons

This section shows how major card networks define this MCC and highlights practical differences that affect merchant onboarding.

Explanation:

While the definitions across networks emphasize similar services, variations such as "casino services" and "gaming activities" highlight important distinctions that can affect classification and acceptance. Some networks require separate merchant identification numbers (MIDs) depending on the type of service offered (e.g., gambling vs. lodging). Common denial reasons include insufficient licensing for the gambling services provided and high-risk geographical locations.

Alternative MCC Codes

Merchants often confuse this MCC with other categories. The table below shows which codes are related, why they are confused, and what risks misclassification brings.

Rule of thumb for merchants:

If your business primarily includes gambling, gaming, or similar activities within a hotel context, use MCC 3582 to ensure proper classification. Avoid confusing your operations with unrelated services, as this can lead to compliance issues and account penalties.

Best Practices for Merchants

Merchants operating under the California Hotel and Casino MCC must actively manage their payment processes, risks, and operational standards to foster trust and minimize disputes. The following best practices provide actionable strategies to enhance acceptance and maintain a strong relationship with payment service providers.

Classification & transparency

always ensure the correct MCC is used to avoid potential account issues and misunderstandings

• transparently display your licenses, terms of service, and responsible gaming policies on your website
• maintain clarity in your business model and payment descriptors to give customers a clear understanding of your services

Fraud & chargeback reduction

leverage 3DS or step-up authentication for transactions flagged as high-risk (based on amount, location, device, or transaction frequency)

• provide clear billing descriptors along with instant transaction confirmations via SMS or email to reduce customer confusion
• maintain detailed logs of all transactions and gaming events to support your case during dispute representments

Payment acceptance optimization

support various payment methods, including cards, e-wallets, and local payments, to attract a broader audience and reduce reliance on a single option

• implement intelligent routing for transactions by geography or payment method, regularly testing different providers for performance and reliability
• create separate Merchant IDs (MIDs) for different gaming services or geographical regions to comply with various scheme requirements and manage risks effectively

Operational discipline

establish clear key performance indicators (KPIs) that monitor authorisation rates, chargeback ratios, and customer lifetime value (LTV)

• conduct regular compliance audits, refresh internal policies, and perform test transactions to ensure your systems remain effective
• designate a specific team or individual responsible for dispute resolutions, ensuring they adhere to predefined response times and service level agreements (SLAs)

Payouts & liquidity

prepare liquidity buffers to manage rolling reserves and support longer payout periods without impacting operational cash flow

• implement automated anti-money laundering (AML) checks for withdrawals, especially for larger amounts that may raise red flags
• closely monitor payout patterns and investigate any suspicious withdrawal activities to minimize risk and ensure compliance

Business Scope & Examples

This MCC covers businesses that provide hotel and casino services, typically integrated into a single venue. Merchants classified under this category facilitate real-money gambling activities combined with hospitality services, creating a unique entertainment experience for guests.

Models

Full-service casinos with hotel accommodations

• Casino resorts offering entertainment and dining options
• Combination of gambling facilities (e.g., slot machines, table games) and lodging
• Integrated venues with event spaces and nightlife offerings

Borderline cases

Standalone hotels — establishments primarily focused on lodging without significant gambling services; should not be classified under this MCC.

• Casino-cruise ships — ships that provide gambling as part of the cruise experience; often categorized separately due to their unique operational model.

Signals for correct classification

business includes both casino gambling and hotel lodging under the same management

• customers can place bets and stay overnight at the same location
• presence of gaming facilities that operate alongside hospitality services