Is Vegastars safe? Judged on what can be checked without an account, the basics are covered. The Tobique licence had an operating status of VALID on the regulator’s page on 2 October 2026, Sumsub identity checks come before payouts, the Help Centre says third-party auditing firms check and certify the games, and withdrawals return to the method you paid with. The weak points lie in what the casino leaves unpublished, beginning with any game-testing certificate on the site itself.
Day to day, the largest risk is one you can manage yourself: counterfeit copies of the casino. The Vegastars Help Centre is blunt about it: “Only trust vegastars12.com”. This page is a summary of Vegastars’ published terms, October 2026, compared with the T&C, the Help Centre and the regulator’s validation page. We have no account at the casino and haven’t deposited.
What Vegastars does to protect your account
Licence and operator
Neptune Projects S.R.L., registered in Costa Rica (no. 3-102-900308), operates Vegastars under licence no. 0000020 issued by the Tobique Gaming Commission. Clicking the footer seal brings up the regulator’s validation page, which on 2 October 2026 showed the company, two registered websites (www.vegastars.com and www.vegastars12.com) and the status VALID. That page doesn’t show the licence number itself; we took it from the casino’s footer.
Identity checks (KYC)
Sumsub handles verification. According to the casino, automatic checks normally take less than five minutes, and a manual review can take up to 24 hours. Expect three requests:
- Photo ID: passport, driving licence or government ID card.
- Proof of address: a utility bill or a statement from a traditional bank. Neobank statements, from Revolut or Wise for example, are refused.
- Proof of payment: a card photo with only the first 6 and last 4 digits visible, and the middle digits and CVV covered.
The same checks protect you and can slow you down. Someone holding a stolen card or a borrowed identity finds it harder to cash out. Your own withdrawal can stall too: under the T&C the casino may verify identity before any payout (12.2), possibly with a call to the phone number on the account, and an account is locked if the casino can’t reach you by email or phone within two weeks of a withdrawal request (9.9).
Payments and personal data
Sultucia Ltd, a payment agent registered in Cyprus (HE464112), processes payments for the operator. Third-party payments and business cards are refused, and a withdrawal goes back the way the deposit came: crypto in, crypto out. Should money leave your account without your say-so, act fast. Refund requests are considered within 24 hours of the transaction, or within 30 days if someone else got into your account (T&C 13.1). Personal-data requests are handled at dpo@vegastars.com, and KYC records are kept for at least five years after an account closes.
Fair play: RNG and third-party testing
The Help Centre’s article on fairness says the games run on random number generators that approved third-party auditing firms check and certify on a regular basis. Those firms go unnamed, though, and no certificate is shown. Homepage marketing copy mentions certification by a well-known testing body, but its certificate or seal appears nowhere on the site, and the only footer seal opens the licence check. So we count game testing as something the casino states rather than something the page proves.
Outside evidence offers some reassurance. The catalogue comes from established studios such as Pragmatic Play, Play’n GO, Hacksaw Gaming and Playtech, whose titles run at many other casinos. Casino Guru, which updated its Vegastars review in September 2026, tested a sample of games across several providers and found no fakes. The last check falls to you: before playing, open the paytable or info screen and look at the RTP, since a casino can run a lower setting than the game’s default.
Fake Vegastars sites and phishing
Scammers, the Help Centre warns, set up look-alike sites that differ by a small spelling change or an extra letter. Vegastars itself adds to the confusion: the address lists in its marketing text and in its site code contradict each other, yet the regulator has only two websites on record, vegastars.com and vegastars12.com. When we checked, vegastars.com redirected to vegastars12.com. The numbered domains are covered one at a time on our page about Vegastars mirror links.
- Reach vegastars12.com by typing it in or from a bookmark, and never log in through links in emails, DMs, group chats or ads.
- Before entering a password, read the address bar letter by letter. A single extra character is enough for a copy.
- Pick a password you use nowhere else, and keep your login to yourself.
- Any page or self-styled agent asking for your password or card details outside the cashier is a cue to stop and check with the live chat on vegastars12.com.
- ID documents go in My Account, under Verification, and nowhere else. Never send them through messaging apps or to anyone who contacted you first.
Security risks and who handles them
| Risk | What Vegastars does | What you do |
|---|---|---|
| Fake look-alike site | Help Centre names vegastars12.com as the only address to trust | Bookmark vegastars12.com and check the spelling before logging in |
| Someone uses your card or account | No third-party payments or business cards; proof of payment; identity check before payouts | Unique password; check your transaction history; report within 24 hours |
| ID documents in the wrong hands | Uploads through My Account, Verification, handled by Sumsub | Upload only inside your account; cover the middle card digits and CVV |
| Withdrawal held for checks | Identity check before payout (T&C 12.2), possibly by phone | Verify before your first withdrawal; keep your phone and email current |
| Unfair games | RNGs and third-party auditing, as stated in the Help Centre | Play titles from known studios; check RTP in the paytable |
| A dispute you can’t settle | complaints@vegastars.com, then free dispute resolution through EGIS-FZCO | Complain in writing from your registered email; raise a bet dispute within 3 days |
| Losing control of spending | Deposit, loss and wager limits; time-out; self-exclusion | Set a deposit limit before your first deposit |
Checked against the Vegastars T&C (9.9, 12.2, 13.1, 16), Help Centre and the regulator’s validation page, 2 October 2026.
Of all the rows, withdrawals cause the most real trouble. Casino Guru rates Vegastars 8.5 (High) on its Safety Index, yet seven of the ten complaints on its page are about delayed or cancelled withdrawals, and players there and on Trustpilot report fresh document requests after a win. Getting verified before you need the money won’t head off every extra check. It does take the standard one out of your wait.
What Vegastars doesn’t publish
- The names of its game-testing firms, or any game certificate.
- Whether two-factor authentication is available. The T&C and Help Centre material we read say nothing about it, and account settings stay hidden until you log in.
- Encryption and other technical protections. We haven’t tested these and make no claim about them in either direction.
- Past security incidents. Breach records weren’t part of our research, so we can’t say whether the site has or hasn’t been hacked.
Bonus maths, payout times and game counts in A$ are all set out in our Vegastars Aussie casino guide.