AML Policy
Onsight is a real-money platform funded in USDC and paid out in USDC. This page sets out the controls we apply so that the platform is not used to move money that did not come from play. It also sets out, plainly, the controls we do not apply today, because a policy that describes checks we are not running would be worse than no policy at all.
What we do not do today
We do not check your age beyond asking. You confirm you are 18 or older with a checkbox at signup.
We do not screen wallet addresses against sanctions or risk lists. Deposits and cash outs are not checked against any sanctions list, and no address is scored for links to illicit activity. The machinery to do this is built and sits behind a configuration switch that is off.
These are deliberate, recorded decisions rather than oversights, and each is a config change away from being switched on. When any of them changes, this page changes with it.
Play-through
This is the principal control the platform runs today. Deposits must be played once before they can be cashed out. Winnings can always be cashed out. A match that is cancelled, refunded or ends in a push does not count toward it. Cash Out shows the amount actually available to you, and a request above that is refused with the reason. The effect is that money cannot be deposited and immediately withdrawn without passing through play.
Where funds can go
You add funds by sending USDC to an address we create for your account, and you cash out only to an address on your withdrawal whitelist. The wallet you sign up with is whitelisted immediately, because signing proves you control it and there is no earlier session to steal. A wallet proven this way can receive on Base, Ethereum, Polygon and Arbitrum, which share one address for the same key; an address added by hand is good only on the network it was added for. A wallet you link to an account you already have, and any address you add by hand, cannot receive funds for 24 hours; linking one emails your current and recent previous address, and linking or adding one signs out every session. This is what stops a stolen session from adding a destination and draining an account in one sitting.
Every cash out requires a two-factor code, every time. An account with no authenticator enrolled cannot withdraw at all.
Limits on cashing out
There is no maximum on a single cash out. Larger cash outs, and cash outs past a daily or monthly amount for an account or a daily amount across the platform, are held for a person to review before they are sent. Nothing is refused for its size. These amounts are operational settings we can change, and we do not publish them; the review is not optional.
The ledger
Every deposit, stake, settlement, rake, fee and cash out is a double-entry transaction whose legs sum to zero, posted atomically. Those entries are the only balance store on the platform. A job compares what the chain holds against what the ledger says every few minutes; if the two disagree, withdrawals are paused automatically and stay paused until a person has looked. Nothing adjusts a balance to make a reconciliation pass.
Play between related accounts
Accounts sharing a network address are refused seats together at a public table before any stake is locked, and the refusal itself is recorded. Heads-up matches and private rooms between them are allowed: each one is recorded, and money that moves one way between them is reviewed by our team. Weaker signals of shared control do not block the match; they are recorded against it.
Holds and refusals
We may hold a cash out, or refuse it, while a review is open, and we may suspend an account pending that review. A held request is set aside from your balance while it waits, and a refused request returns to it. We will tell you the reason where doing so does not defeat the purpose of the review.
Records
Ledger entries, match records, audit rows and withdrawal history are kept for the life of the platform. Nothing deletes them on a schedule, and we operate no automatic retention window. We have no mechanism today for deleting an individual's records on request; see the Privacy Policy.
Contact
Questions about a held or refused cash out go to [email protected]. Include the account email and, for a cash out, the amount and the destination address.