What Inclave is and what it does at sign in
It is a single sign on layer. Instead of each casino storing your password, the casino hands the sign in step to Inclave, which checks who you are and tells the casino the check passed. The pattern is the same one behind every button that says sign in with some other service, and it is why a login created at one participating brand is recognised at the next.
What that gives you is one credential to keep safe rather than five, and no password typed into a cashier page on a phone. What it costs you is a second party in the chain, holding the key that opens all of those accounts.
- 01
You create the login at the first brand
The sign up form belongs to the casino, but the credential is registered with the login service. The email address you use here becomes the anchor for everything that follows.
- 02
You set a passkey or a password
Where a passkey is offered, take it. The section below explains what it is and why a stolen server database is worth nothing against it.
- 03
The casino account is created separately
Your balance, your bonus state and your documents belong to that operator. The login service authenticates you; it does not hold your money.
- 04
A second brand offers the same sign in
You approve linking the existing credential rather than making a new one. You still complete that operator's own registration and its own checks.
- 05
Nothing else carries across
Not the balance, not the bonus, not the verification you already passed, and not any limit or exclusion you set. Each of those is per brand.
Compare the casinos in the table
Which brands use a shared login is not confirmed in the data we hold, so the rows below rank the offers rather than the sign in method. Look for the button on the operator's own registration page before assuming either way.
Bonus terms
Offer placeholder. Bonus amount, wagering, minimum deposit and eligibility are to be confirmed with the operator before publishing. 18+. T&Cs apply. Play responsibly.
Bonus terms
Min. deposit €20 | 125% bonus up to €1,000 + 100 free spins | 40x wagering on bonus & free-spin winnings | Bonus valid 7 days | Free spins credited over 4 days | First deposit only | T&Cs apply.
Bonus terms
18+ | New customers only | Bonus code BLISS | Min. deposit €20 | 120% bonus up to €500 + 125 free spins | 40x wagering within 14 days | T&Cs apply.
- #4
Bonus terms
Min. deposit €20 | 1st dep: 100% up to €500 + 100 FS | 2nd dep: 75% up to €2,000 + 75 FS | 3rd dep: 50% up to €2,000 + 75 FS | 4th dep: 25% up to €3,500 + 50 FS | 5th dep: 50% up to €2,000 + 100 FS | 40x-50x wagering on bonus & FS winnings | Bonus and free spins valid 3 days | Max withdrawal 5x deposit | First 5 deposits only | T&Cs apply.
- #5
Bonus terms
New customers only | Min. deposit €20 | 100% bonus on the first deposit up to €600 + 125 free spins (25 free spins daily over 5 days) | Wager the bonus within 7 days | T&Cs apply | 18+ | Gambling can be addictive.
- #6
Bonus terms
Welcome bonus 280% up to €3,200 + 800 free spins. Bonus winnings are subject to wagering and are capped at €500. The bonus expires after 5 days if the wagering is not met. One bonus per person. 18+. T&Cs apply. Play responsibly.
- #7
Bonus terms
New customers only | Min. deposit €250 | Deposit bonus 100% up to €5,000 + 100 free spins on Collapsed Castle (€0.20 per spin) | Free spins credited in 2 packs of 50 every 24 hours | Bonus wagering x25 (free-spin winnings x25) | Wagering to be met within 14 days | Bonus can be reactivated after 7 days | Bonus is not withdrawable until fully wagered | Bonus T&Cs apply.
- #8
Bonus terms
18+ | New users | Welcome pack across 3 deposits: 100%/80%/60% bonus, up to €2,500 in total + 300 free spins | Min. deposit €20 | 45x wagering | Max bonus bet €5 | Activate within 48 hours, valid 5 days | T&Cs apply | BeGambleAware.org
- #9
Bonus terms
18+ | New customers only | 100% deposit bonus up to €200 | Min. deposit €20 | 40x wagering | Max bet €5 | Bonus valid 10 days | Max withdrawal 10x the bonus amount | T&Cs apply | Gambling can be addictive.
- #10
Bonus terms
18+ | New players | Min. first deposit €20 (CAD/AUD: 15) | Bonus code FIRST | 100% bonus up to €1,000 + 100 free spins | 40x wagering on bonus & free-spin winnings | Max bonus withdrawal equals the bonus amount received | Max bet €5 while wagering | T&Cs apply | BeGambleAware.org
- #11
Bonus terms
Welcome bonus: 100% up to €1,250 on the first deposit (min. €20). The bonus must be wagered 30x with real money and is valid for 14 days. One redemption per player. 18+. T&Cs apply. Play responsibly.
- #12
Bonus terms
18+ | All deposits | Min. deposit €50 | Privilege Wheel: up to €700 bonus or 50 free spins on 3 Royal Coins / Lucky Streak 1000 | 30x wagering | Max withdrawal from free spins €300 | The prize must be activated with a min. €50 deposit | T&Cs apply | BeGambleAware.org
- #13
Bonus terms
Min. deposit €20 | 1st dep: 100% up to €1,000 + 200 FS | 2nd dep: 100% up to €200 + 50 FS | 35x wagering on deposit & bonus | 40x wagering on free-spin winnings | Bonus must be activated within 7 days | Wagering to be met within 10 days | Max withdrawal 6x the bonus amount | First 2 deposits only | T&Cs apply.
- #14
Bonus terms
Welcome package: 100% bonus up to €10,000 + 500 free spins, min. deposit €20. Bonus funds and deposits must be wagered 3x before a withdrawal is possible. Check whether your country is accepted before depositing. Full terms apply. 18+. Play responsibly.
- #15
Bonus terms
18+. New customers only. The casino welcome bonus of 100% up to €500 + 50 free spins applies on a successful first deposit after the bonus code is entered. Before any withdrawal a 5x wagering of the deposit is required, counting only sports bets at minimum odds 1.6 and casino bets without minimal or zero risk. Withdrawal limits and further bonus conditions apply under the general terms. 18+. T&Cs apply. Play responsibly.
What a shared login stores
A service of this kind has to hold a small, specific set of things in order to work at all. The list is short, and knowing what is on it tells you what an incident at that service would and would not expose.
| Your email address | The identifier for the account and the route for any recovery message. It is the single most valuable detail in the set, because whoever controls the inbox controls the reset. |
|---|---|
| A credential | Either a stored hash of a password or, for a passkey, a public key that is useless on its own. The private half of a passkey never leaves your device. |
| Which brands are linked | The list of operators the credential opens. That list is itself information about you, in a category most people would rather not have aggregated anywhere. |
| Sessions and devices | Records of which device signed in and when, which is how a sign in from a new phone gets flagged. |
| Not your money or your documents | Balances, bonus state, deposit history and identity files are held by each operator under its own terms. The only authority on what the login service itself retains is its own privacy terms, and ours are on our privacy page. |
What one login across several casinos means for you
| Area | Shared across the brands | Separate at every brand |
|---|---|---|
| Credentials | One email address and one passkey or password | Nothing |
| Money and bonuses | Nothing | Each operator holds its own balance, its own wagering progress and its own offer state |
| Identity checks | Nothing that is confirmed in public terms | Each operator runs its own checks and asks for its own documents, again |
| Deposit limits and exclusion | Nothing | A limit or a closure at one brand leaves every other brand open |
| A stolen credential | The single point of failure: one credential, several accounts reachable | Each operator's own account data and payout controls |
One sign in does not mean one set of limits
This is the part worth reading twice. A convenience layer that opens several accounts with one tap does nothing to connect the controls on those accounts. Closing an account, setting a deposit limit or excluding yourself at one brand has no effect at the others, even though the same credential opens them. Controls that work across operators are a different mechanism entirely, and the self exclusion page covers what exists in Australia.
Signing in without a password: what a passkey actually is
A passkey is a pair of cryptographic keys generated on your device when you register. The private key stays on the device or in the platform keychain and never leaves it. The service keeps only the public half. When you sign in, the service sends a challenge, your device signs it after Face ID, a fingerprint or the device PIN, and the service checks the signature against the public key.
Two things follow, and they are the reason this matters more on gambling sites than almost anywhere else. A breach of the service's database yields public keys, which cannot be replayed to sign in as you: there is no password in there to steal. And a passkey is bound to the domain it was created for, so a copied sign in page on a lookalike domain cannot use it, because the browser will not offer it there. The trick that catches people with passwords does not work.
What works
- One credential to keep strong, instead of five reused variations of the same password.
- A passkey cannot be phished on a lookalike domain and cannot be leaked in a server breach.
- Sign in on a phone is a fingerprint rather than a password typed into a small form.
- New device sign ins are visible in one place rather than scattered across five accounts.
What to watch
- One credential opens several gambling accounts, which is the definition of a single point of failure.
- The email address behind it becomes the master key. Whoever reads that inbox can start a reset.
- None of your limits, exclusions or verification carry across, so the convenience is one sided.
- If the login service is unreachable, every brand that depends on it is unreachable with it.
If you lose the device or the email address
- Keep the passkey synced, not stranded. A passkey held in a platform keychain follows you to a new phone. One created outside that sync lives on a single device and dies with it.
- Protect the inbox first. Put two factor authentication on the email account itself. It is the recovery route for the login, which makes it the recovery route for every casino account behind the login.
- Use an address you will keep. Not a work address and not one attached to a phone number you are about to change. Recovery runs through it years later.
- Expect documents if both are gone. With no credential and no inbox, the operator's support team is the only route, and it will ask for identity documents before it moves a balance. The verification page covers what those checks look like and why they get triggered at the worst moment.
- Keep the name consistent. The name on the casino account has to match the name on the payout destination, whatever the login method was. A mismatch stalls a withdrawal no matter how you signed in.
None of this changes what actually decides an outcome on an offshore account, which is the terms under the row rather than the sign in screen above it. If you are weighing operators up, the safest casinos page sets out what can and cannot be checked from the outside, the trusted casinos page looks at published terms and payout behaviour, and the sister casinos page explains how brands that share a login often share an operator behind it as well. For play on a phone, the mobile casino page covers what a browser build has to get right.
The sign in is the easy part
Wagering multiple, maximum bet while a bonus is live, expiry and any cap on bonus winnings decide what you keep. All four are printed under every row of the table.
Open the table