3597 Riverside resort hotel and casino

Introduction

• What it is: This MCC covers establishments offering gaming and accommodation services, typically found in casino resorts.
• Risk level: High — Due to involvement in gambling activities, which can attract regulatory scrutiny.
• Acceptance difficulty: Medium — Payment processors often have heightened due diligence due to the associated risks.
• Typical business models: casino resorts; riverboat casinos; gaming hotels; establishments with poker rooms.
• For merchants: Expect higher Merchant Discount Rates (MDR); potential for larger reserves; thorough approval processes are common.
• What PSPs expect: Business verification documents; a clear description of gaming activities; compliance with gaming regulations where applicable.

Payment Insights & Benchmarks

Merchants in this MCC should plan for higher payment friction compared to standard e-commerce. Acceptance often depends on method mix, fraud controls, and PSP risk appetite.

Payment methods

Cards: often filtered by geo and traffic source, with lower approval rates.

• E-wallets: increasing use for deposits and withdrawals, but availability can vary.
• Loyalty and rewards programs: common in hospitality, tied to bookings and promo offers.
• Cash alternatives: popular for privacy and chargeback avoidance in on-site transactions.

Authentication & security

Strong authentication (3DS, SCA) is commonly enforced to combat fraud.

• These measures help reduce unauthorized transactions but may impact the customer experience.
• Continuous fraud monitoring should consider transaction patterns and customer behavior.

Benchmarks (indicative, not guaranteed)

MDR: typically higher than standard e-commerce due to risk factors.

• Rolling reserves: often in double digits, reflecting the higher chargeback risk.
• Settlement cycles: usually longer (7+ days), influenced by the nature of transactions.
• Chargeback ratios: significantly above retail averages, especially for disputed services.
• Card approval rates: generally lower; wallet and on-site cash alternatives may perform better.

Key metrics to monitor

Authorization rates segmented by card type, method, and provider.

• Decline reason codes analyzed to identify issues with specific payment methods.
• Chargeback reasons categorized by fraud vs. legitimate disputes.
• Average transaction values and frequency of high-value bets for risk assessment.

Risk & Compliance

Merchants under this MCC are closely scrutinized due to elevated financial and reputational risks. PSPs and acquirers typically apply stricter controls, expecting merchants to proactively address fraud, chargebacks, and AML/KYC compliance.

Chargebacks & fraud

High incidence of friendly fraud (“I didn’t authorize this transaction”), bonus abuse, and use of stolen cards.

• Multi-accounting and rapid bet velocity are common abuse patterns.
• Mitigation tools include behavioral analytics, velocity rules, device fingerprinting, and deposit/withdrawal limits.

AML/KYC expectations

Strong customer identity verification (IDV) with sanctions/PEP checks.

• Source-of-funds checks at thresholds or on unusual patterns.
• Manual review triggers include large/frequent deposits, atypical payment routes, or use of VPN/proxy services.

Operational red flags

White-label setups without clear operator/beneficial ownership transparency.

• Traffic funneling from restricted geographies or unverified affiliates.
• Lack of responsible gaming controls (self-exclusion, betting limits, cooling-off periods).
• No clear refund/return policies communicated to players.

Onboarding Checklist

Merchants under this MCC should prepare a complete onboarding package before approaching PSPs or acquirers. A well-structured submission improves approval chances and shortens review times.

Legal & corporate documents

company registration and incorporation documents

• disclosure of beneficial owners (UBO) and corporate structure
• valid licenses for the relevant business activities
• policies: Terms of Service, Privacy, AML/KYC, Refund Policy, Responsible Gaming (if applicable)

Financials & risk management

recent financial statements and cashflow forecasts

• liquidity or reserve model for payouts
• description of antifraud setup and monitoring tools

Product & marketing

demo access or screenshots of the live platform

• marketing plan and traffic source overview (affiliates, SEO, PPC)
• geographic targeting information
• KYC flow details, including IDV providers and thresholds

Technical integration & security

payment architecture overview with supported methods/providers

• description of SCA/3DS flows, retry logic, and tokenization
• PCI DSS compliance status and data storage policy

Operations

customer support coverage (languages, 24/7 if available)

• SLA for dispute handling and chargeback response
• deposit, bet, and payout limits; self-exclusion mechanisms
• internal process for chargeback investigation and documentation

Regulation & Licensing

Licensing and certification are critical for merchants in this MCC, as PSPs and acquirers will require proof of compliance before onboarding. Recognition of licenses depends heavily on the merchant’s jurisdiction and the markets they target.

Operator licenses

UK Gambling Commission (UKGC) — highly recognized, required for UK-facing operators.

• Malta Gaming Authority (MGA) — widely accepted within the EU.
• Isle of Man and Gibraltar licenses — respected for international operations.
• Various state gaming commissions in the US — necessary for compliance in the respective states hosting the casino or hotel operations.
• Local business licenses may also be required depending on specific state or city regulations.

Geo-restrictions

Countries with gambling bans → transactions typically blocked or PSPs refuse onboarding.

• In the US, regulation is state-based; casinos must comply with state-level authorization requirements.
• Many PSPs restrict traffic from unlicensed or grey markets.
• Jurisdictions with strict gambling laws may limit cross-border operations for online gaming elements of the business.

Certifications & audits

PCI DSS compliance for card data handling or tokenization.

• RNG (Random Number Generator) audits for gaming platforms.
• Annual AML/KYC compliance reports and reviews.
• Responsible Gaming policy audits and ongoing monitoring.

Official Definitions & Network Comparisons

This section shows how major card networks define this MCC and highlights practical differences that affect merchant onboarding.

Explanation:

Though similar, the terminology varies slightly across networks (e.g., "lodging" vs "accommodations"), impacting how merchants are categorized. Some networks might require separate merchant IDs for distinct gaming and non-gaming operations. Frequent denial reasons include failure to provide a legitimate gaming license, operating in high-risk geographic locations, and concerns about customer acquisition and traffic sources.

Alternative MCC Codes

Merchants often confuse this MCC with other categories. The table below shows which codes are related, why they are confused, and what risks misclassification brings.

Rule of thumb for merchants:

If your business is centered around gambling activities, it should be classified under MCC 3597. Misclassifying these activities to other MCCs can lead to compliance issues, account rejections, or even closure. Always ensure that your primary activities align with the chosen MCC to mitigate risks.

Best Practices for Merchants

Merchants operating under the MCC for Riverside Resort Hotel and Casino must focus on effective payment management, risk reduction, and transparent operations. The following best practices are essential to ensure sustainable acceptance and minimize disputes.

Classification & transparency

always use the correct MCC; attempts to bypass classification can lead to account closure

• clearly display licenses, geographic restrictions, and responsible gaming policies on the website
• maintain transparent business models and billing descriptors to build trust with customers

Fraud & chargeback reduction

implement 3DS or step-up authentication for high-risk transactions, such as large bets or unusual gaming patterns

• utilize clear billing descriptors, provide instant confirmation emails or SMS, and ensure responsive customer support to clarify charges
• log transaction events, including gaming activity, to create a robust defense for any disputes that may arise

Payment acceptance optimization

support multiple payment methods (credit cards, debit cards, digital wallets) to cater to customer preferences and reduce dependency on a single source

• route transactions based on customer geography or issuing bank to optimize authorization rates and minimize declines
• consider using separate MIDs for different services (e.g., hotel bookings vs. gaming) to meet specific scheme requirements and manage risk

Operational discipline

establish and monitor KPIs such as authorization rates, chargeback ratios, and average revenue per user (ARPU)

• conduct regular compliance audits, review internal policies, and carry out test transactions to ensure processes are functioning correctly
• designate a dedicated team or individual to manage disputes with clear service level agreements (SLAs) for response times

Payouts & liquidity

maintain liquidity buffers to accommodate potential rolling reserves and ensure there are funds during extended settlement periods

• automate anti-money laundering (AML) checks for withdrawals, especially those that exceed threshold amounts, to prevent fraudulent activities
• continuously monitor payout processes to ensure timely, secure transactions and identify any suspicious withdrawal patterns

Business Scope & Examples

This MCC covers businesses directly engaged in gaming and casino operations. Merchants classified under this category usually provide services where customers make payments for gambling-related activities. The scope is narrow and focuses on businesses with real-money transactions linked to gaming.

Models

casino operations (slots, roulette, table games)

• sportsbook platforms (pre-match and live betting)
• online poker rooms and tournaments
• lotteries and bingo services
• fantasy sports platforms

Borderline cases

Skill gaming — real-money competitions based primarily on player skill (e.g., chess, esports); often requires separate review.

• Esports betting — wagering on esports matches; usually treated as part of this MCC.
• Social casino — apps with virtual chips that can be monetized; sometimes considered gambling if real-value exchange exists.

Signals for correct classification

customer deposits real money to participate in games

• platform operates with a house edge or bookmaker margin
• rules set limits for wagers, winnings, and responsible play