Document re-use: why Legitimuz delivers Brazil’s highest-converting KYC

Brazil’s regulated betting market faces challenges that KYC solutions built for Europe or the US simply cannot solve. They were just not designed for this context.

Connectivity in Brazil is unstable, devices vary significantly, identity documents change format from state to state and names often have complex structures that international databases do not recognise. As a result, systems adapted from other markets treat these realities as technical-edge cases rather than local norms. They try to impose international standards in an environment that works differently, with different user behaviours.

But there is an even bigger bottleneck that directly impacts conversion and operators’ customer acquisition costs (CAC): asking the user to do the same thing more than once. No user likes unnecessary friction, and in Brazil that resistance is even stronger.

A bettor registers on one platform, uploads an identification document (RG or CNH in Brazil), takes a selfie and gets validated. Two weeks later, they decide to try another platform and have to repeat everything – identification document, selfie, waiting. Same data, same process – zero optimisation of their time. This cycle frustrates users, wears them down and creates impatience. Every extra second during sign-up increases the likelihood of abandonment. Every additional click burns operators’ money. The user has already proved who they are but must do it all again as if it were the first time.

Legitimuz has built a solution based on document re-use across platforms. With more than 22 million verified users and a presence in 67% of the regulated market, the company has constructed the largest repository of verified documents in Brazil’s igaming sector. Our figures show that eight in 10 users who register on a new platform already have an approved document in the repository. There is no need to upload anything again: the user simply completes facial recognition with liveness detection.

How the technology works

The first time a user registers on a platform integrated with Legitimuz, they must complete the full verification flow:

• Document upload and validation via advanced optical character recognition (OCR)
• Data cross-checks against official Receita Federal databases
• Facial recognition with liveness detection
• Information stored in encrypted form, in line with the LGPD (Brazilian General Data Protection Law) and with user consent

When that same person signs up to another platform hours, days, weeks or months later, the system automatically recognises the CPF (Brazilian individual taxpayer registry) ID number and identifies that approved documentation already exists in the repository. Instead of repeating the entire process, the user only needs to complete facial recognition — which takes milliseconds. There is no need to get off the sofa to fetch a wallet or even leave the platform to search for an official PDF.

Security is preserved because every new registration triggers:

• Mandatory facial recognition with liveness detection for each registration
• Updated checks against Receita Federal databases
• Screening against PEP (Brazil’s politically exposed persons registry) and sanctions/restrictive lists
• Verification of links to sports entities
• Real-time geolocation monitoring
• PLD/FTP (prevention of money laundering and financing of terrorism and proliferation) alerting system

Regulatory compliance remains fully intact, while friction in the process disappears.

Metrics

The larger the verified-user repository, the higher the probability that new registrations will already have approved documentation on the platform. This is a self-reinforcing network effect that maximises conversion rates over time.

The entire process remains fully aligned with Law 14,790/2023 and the SPA/MF (Brazil’s Secretariat of Prizes and Betting of the Ministry of Finance) ordinances.

Fred Justo, Legitimuz’s director of PLD and former general coordinator for anti-money laundering monitoring at the SPA/MF, explains: “Compliance and efficiency are not opposites. When the technical architecture is well designed, the fastest path for the user ends up being the safest, and the one most aligned with legal requirements.”

Today, Legitimuz has verified more than half of bettors in Brazil’s regulated market. For operators, that means:

• Higher onboarding conversion
• Significant CAC reduction
• Shorter time to first deposit (TTD)

For users, it means:

• A very low-friction experience
• Registration completed in under 30 seconds
• Less unnecessary circulation of sensitive data

For the market as a whole, it means greater operational efficiency and lower data exposure.

What comes next?

Kayky Janiszewski, CEO of Legitimuz, puts the initiative in context: “We built Brazil’s largest repository of verified documents because we focused on the local market from day one. Today, that repository has become shared infrastructure that benefits the entire sector. Operators convert more, users suffer less and security is guaranteed.”

Legitimuz holds ISO/IEC 27001 certification and GLI validation, meeting the highest security and compliance standards in the sector.

Legitimuz is a Brazilian technology company specialising in compliance and identity verification solutions for the regulated igaming market.

ISO/IEC 27001 certified and GLI validated, it provides an integrated platform that includes KYC with document re-use, transaction monitoring (PLD/FTP), real-time geolocation, link verification and checks against restrictive databases.

With more than 22 million verified users and 67% market share, Legitimuz turns compliance into a real competitive advantage for operators.