3728 Bally's hotel and casino

Introduction

• What it is: This MCC covers establishments that operate as hotels and casinos, providing hospitality and gaming services.
• Risk level: High — The combination of gambling and hospitality can lead to increased risk exposure.
• Acceptance difficulty: Medium — PSPs may impose stricter requirements due to the nature of gambling transactions.
• Typical business models: casinos; resorts with gaming facilities; entertainment complexes; hotel-casinos.
• For merchants: Expect higher Merchant Discount Rates (MDR); potential for reserve requirements; thorough approval processes.
• What PSPs expect: Detailed business plans; verification of gaming licenses; risk assessments on financial practices.

Payment Insights & Benchmarks

Merchants in this MCC should plan for higher payment friction compared to standard e-commerce. Acceptance often depends on method mix, fraud controls, and PSP risk appetite.

Payment methods

Cards: often filtered by geo and traffic source, with lower approval rates.

• E-wallets and A2A: commonly used for deposits and withdrawals due to convenience.
• Vouchers and prepaid: popular for customer privacy and mitigating chargeback risks.
• Cash alternatives: cash payments may be encouraged, impacting overall card usage.

Authentication & security

Strong authentication (3DS, SCA) is frequently enforced to combat fraud.

• These tools can help reduce unauthorized transactions but may lead to increased friction.
• Continuous fraud monitoring is essential, focusing on transaction trends and behavioral patterns.

Benchmarks (indicative, not guaranteed)

MDR: typically higher than standard e-commerce due to risk factors.

• Rolling reserves: often substantial to mitigate potential chargebacks.
• Settlement cycles: generally longer (7+ days) than traditional retail.
• Chargeback ratios: usually elevated, as gambling-related transactions can attract disputes.
• Card approval rates: lower; alternative payment methods may see higher acceptance.

Key metrics to monitor

Authorization rates segmented by payment method and customer source.

• Reasons for declines analyzed by merchant category and risk profile.
• Chargeback and dispute categorization by type (fraudulent vs. service-related).
• Average transaction values and patterns that may indicate risk behavior.

Risk & Compliance

Merchants under this MCC are closely scrutinized due to elevated financial and reputational risks. PSPs and acquirers typically apply stricter controls, expecting merchants to proactively address fraud, chargebacks, and AML/KYC compliance.

Chargebacks & fraud

High incidence of friendly fraud (“I didn’t authorize this transaction”), bonus abuse, and use of stolen cards.

• Multi-accounting and rapid bet velocity are common abuse patterns.
• Mitigation tools include behavioral analytics, velocity rules, device fingerprinting, deposit/withdrawal limits, and geo-blocking.

AML/KYC expectations

Strong customer identity verification (IDV) with sanctions/PEP checks.

• Source-of-funds checks at thresholds or on unusual patterns.
• Manual review triggers include large/frequent deposits, atypical payment routes, or use of VPN/proxy services.

Operational red flags

White-label setups without clear operator/beneficial ownership transparency.

• Traffic funneling from restricted geographies or unverified affiliates.
• Lack of responsible gaming controls (self-exclusion, betting limits, cooling-off periods).
• No clear refund/return policies communicated to players.

Onboarding Checklist

Merchants operating under the MCC 3728 should prepare a complete onboarding package before approaching PSPs or acquirers. A well-structured submission improves approval chances and shortens review times.

Legal & corporate documents

company registration and incorporation documents

• disclosure of beneficial owners (UBO) and corporate structure
• valid licenses for the relevant business activities
• policies: Terms of Service, Privacy, AML/KYC, Refund Policy, Responsible Gaming (if applicable)

Financials & risk management

recent financial statements and cashflow forecasts

• liquidity or reserve model for payouts
• description of antifraud setup and monitoring tools

Product & marketing

demo access or screenshots of the live platform

• marketing plan and traffic source overview (affiliates, SEO, PPC)
• geographic targeting information
• KYC flow details, including IDV providers and thresholds

Technical integration & security

payment architecture overview with supported methods/providers

• description of SCA/3DS flows, retry logic, and tokenization
• PCI DSS compliance status and data storage policy

Operations

customer support coverage (languages, 24/7 if available)

• SLA for dispute handling and chargeback response
• deposit, bet, and payout limits; self-exclusion mechanisms
• internal process for chargeback investigation and documentation

Regulation & Licensing

Licensing and certification are critical for merchants in this MCC, as PSPs and acquirers will require proof of compliance before onboarding. Recognition of licenses depends heavily on the merchant’s jurisdiction and the markets they target.

Operator licenses

UK Gambling Commission (UKGC) — highly recognized, required for UK-facing operators to ensure fair gaming.

• Nevada Gaming Control Board — essential for casinos and gaming establishments operating in Nevada, home to Las Vegas.
• New Jersey Division of Gaming Enforcement — required for casinos in New Jersey and recognized across various platforms.
• Isle of Man and Gibraltar licenses — respected for international operators but may require additional jurisdictional compliance.
• Certain regions may mandate specific licenses for different gaming types, such as table games or slots.

Geo-restrictions

Countries with strict gambling bans → transactions typically blocked or PSPs refuse onboarding.

• In the US, regulations vary by state, and each state requires separate authorization for gaming operations.
• Many PSPs will not process payments from jurisdictions perceived as grey markets or with lax regulations.

Certifications & audits

PCI DSS compliance is essential for safeguarding payment card data.

• RNG (Random Number Generator) audits are crucial for ensuring fairness in gaming operations.
• Annual AML (Anti-Money Laundering) and KYC (Know Your Customer) compliance reports are typically required.
• Responsible Gaming audits and evaluations to ensure compliance with regulated standards.

Official Definitions & Network Comparisons

This section shows how major card networks define this MCC and highlights practical differences that affect merchant onboarding.

Explanation:

While there is overlap in definitions, variations, such as "related services" and "occupancy charges," reflect differing focuses among networks. Specific policies, like separate MIDs, are often in place to manage various risk factors. Common denial reasons include inadequate licensing, operating in high-risk regions, and difficulties in verifying the legitimacy of traffic or customers.

Alternative MCC Codes

Merchants often confuse this MCC with other categories. The table below shows which codes are related, why they are confused, and what risks misclassification brings.

Rule of thumb for merchants:

If your establishment primarily engages in gaming activities alongside accommodations, you should classify it under MCC 3728. Avoid misclassifying as lodging or entertainment without gaming features, as this poses compliance risks that could result in penalties or account closure.

Best Practices for Merchants

Merchants under the MCC 3728, which represents establishments like Bally's Hotel and Casino, are subject to unique operational challenges and risks. Following the best practices outlined below is crucial to ensure regulatory compliance, enhance customer trust, and streamline payment processes in a hospitality and gaming environment.

Classification & transparency

always use the correct MCC; inaccurate classification can trigger account scrutiny and potential closure

• clearly disclose gaming licenses, operational jurisdictions, and responsible gaming policies on the website
• ensure transparent communication regarding terms, conditions, and any promotional activities

Fraud & chargeback reduction

implement 3DS or step-up authentication for transactions flagged with high-risk signals (large amounts, unusual geolocation, etc.)

• provide clear billing descriptors, confirmation receipts, and maintain responsive customer support to address concerns promptly
• log transaction data and gaming events to substantiate evidence for any potential dispute representments

Payment acceptance optimization

offer multiple payment methods (credit cards, digital wallets, cash equivalents) to cater to diverse customer preferences

• route payments by customer location or payment type and routinely evaluate performance across different PSPs
• consider using separate MIDs for different services or geographic locations to comply with various scheme requirements

Operational discipline

track essential KPIs such as authorization rates, chargeback ratios, and average revenue per user (ARPU) to identify trends

• conduct periodic compliance audits and update internal policies to align with industry standards and best practices
• establish a dedicated team or individual for dispute resolution, ensuring timely responses to customer inquiries

Payouts & liquidity

maintain a liquidity buffer to accommodate rolling reserves and ensure consistent payout capabilities

• automate anti-money laundering (AML) checks for withdrawal transactions to prevent illicit activities
• monitor trends in payout requests and quickly address any unusual behavior or attempts at fraud

Business Scope & Examples

This MCC covers businesses directly engaged in the operation of casinos, including hotel and entertainment facilities that provide gambling services. Merchants classified under this category usually provide services or platforms where customers make payments for access to gambling activities and associated amenities. The scope is narrow and focuses on businesses with real-money transactions linked to casino gaming.

Models

casino operations (slots, roulette, table games)

• hotel casinos offering complementary lodging and entertainment
• integrated resorts with gaming, dining, and entertainment options
• high-stakes gaming clubs and VIP lounges
• mobile casino platforms that allow for real-money wagering

Borderline cases

Skill gaming — games that depend primarily on player skill rather than chance; generally require separate review for classification.

• Social casinos — apps that offer virtual currencies for gaming; considered separate unless they involve a real-money component that can affect classification.

Signals for correct classification

customer deposits real money to play casino games

• the establishment offers a variety of gaming options alongside traditional hospitality services
• revenue is generated through player losses rather than other service fees