💰 Cashback Tracking
Live weekly cashback ledger broken down by net losses, tier percentage (5%/8%/10%/12%/15%) and the Monday credit estimate. Cashback clears at 1× wagering, the lowest on the brand.
Everything a British player needs to get back into the lobby or open a fresh account at Fatpirate. The page works through the sign-in overlay, the registration fields actually requested, the documents that clear KYC at the first cash-out, the password recovery path, the locked-account scenarios and the security panel inside the dashboard — written as a reference, not a sales page.

The login overlay opens on top of the current page rather than navigating away — a small UX touch that preserves whatever the player was browsing. The flow takes four inputs: email, password, optional «Stay signed in» checkbox and the sign-in button. There is no captcha on standard logins; suspicious patterns escalate to an email-based confirmation code.
Sessions remain active until the user logs out or sixty minutes of inactivity pass. On shared devices the «Stay signed in» option should be left unticked — the casino does not lock the account when a session resumes on a new IP within the same country, which means a forgotten public-machine login can be reopened by the next user.
The registration flow asks for the minimum information required to open a regulated-style account. Mandatory fields:
The email confirmation link is dispatched within thirty seconds of submission. Clicking the link activates the account and unlocks the cashier; without confirmation the wallet remains frozen at zero balance and cannot accept deposits.
Identity verification is mandatory before any withdrawal and is enforced upstream by the operator’s compliance obligations. The cashier blocks the first cash-out until the documents have cleared. Documents required:
Upload path: My Account → Verification. Accepted formats: JPG, PNG, PDF. Maximum 5 MB per file. Verification typically completes inside one business day for clean submissions.
Password reset runs from the login overlay itself. Clicking «Forgot password?» opens a single-input form that accepts the registered email address. The reset link is dispatched within two minutes and remains valid for 30 minutes from issuance. The new password must meet the same minimum length and complexity rules as the original.
If the reset email never arrives, the most common causes are spam-filter routing, an outdated email address on file, or a mistyped email at submission time. Live chat can dispatch a manual reset link after verifying the player’s identity through the registered name and date of birth.
Five consecutive incorrect password entries trigger an automatic thirty-minute lockout. No support contact is required — the lock clears on its own. A password reset can be initiated immediately and bypasses the wait.
Login from a previously unseen device or an unusual geographic location triggers a one-time confirmation code sent by email. Entering the code clears the lock and adds the device to the trusted list.
A KYC review, suspected multi-account or AML trigger places the account in a hard lock with cashier access disabled. Resolution requires live-chat or email contact with the compliance team, supplemented by any documents specifically requested. Standard resolution window: 24–72 hours.
FatPirate offers TOTP-based 2FA as an opt-in security layer. Setup runs through any standard authenticator app:
Once active, the casino requests the 6-digit code at every login from a new device. Known devices can store the 2FA result for thirty days. Additional account-security tools include deposit limits, loss limits, session-time reminders and self-exclusion — all configurable from the same Security panel.

Mobile login uses the same overlay flow as desktop. The recommended setup pins the Progressive Web App to the home screen so that the login icon launches the casino in fullscreen without a browser bar.
Apple Keychain and Google Password Manager both auto-fill the login fields correctly — the form uses standard HTML attributes rather than custom widgets. Face ID and Touch ID work through the password-manager autofill prompt.
| Error message | Severity | Likely cause | Player-side fix |
|---|---|---|---|
| «Invalid email or password» | Low | Typo, Caps Lock, wrong account | Verify Caps Lock; start password reset |
| Reset link invalid | Low | 30-minute window expired | Request a new reset link |
| «Session expired» | Low | 60 min inactivity | Log in again |
| «Email not confirmed» | Low | Verification link never clicked | Request a new verification email |
| Blank page after login | Low | Cookies blocked or third-party cookies disabled | Allow site cookies in browser settings |
| 2FA code rejected | Medium | Phone clock drift > 30 seconds | Set phone time to automatic and resync |
| «Account temporarily locked» | Medium | 5 failed password attempts in a row | Wait 30 minutes or start password reset |
| «Region not available» | Medium | VPN active and routing through a blocked region | Disable VPN, retry from a UK IP |
| «Account locked — contact support» | High | KYC, AML or compliance review | Live chat with name, DOB and email on file |
Closing a FatPirate account is a one-message request handled by support. The standard flow:
For problem-gambling situations the brand offers an immediate self-exclusion path: a 24-hour to 30-day cool-off or a six-month to permanent block. Self-exclusion overrides closure and cannot be lifted by the player before the period expires. More on the responsible gaming page.
Continue: Full brand review · Welcome bonus · Mobile app guide
The Security panel inside the dashboard bundles every login-protection control in one place. The table below sets each feature against its default state, the configuration path and the practical outcome for a British account holder. Players landing fresh on the platform should consider switching on 2FA and login notifications before the first deposit.
| Feature | Default state | Configuration path | What it does |
|---|---|---|---|
| Two-factor authentication (TOTP) | Off | My Account → Security → Activate 2FA | Adds a 6-digit code requirement at every new-device login; works with Google Authenticator, Authy, Microsoft Authenticator and 1Password |
| Session timeout | 60 minutes inactivity | Automatic, not configurable | Logs the wallet out after one hour of no activity to limit exposure on shared devices |
| IP-change challenge | On | Automatic on geo-mismatch | Sends an email confirmation code when login originates from a previously unseen IP or country |
| Login notifications | Off | My Account → Notifications → Email alerts | Delivers an email each time the account is accessed, with device fingerprint and IP |
| Trusted devices list | Empty | My Account → Security → Devices | Stores the 2FA result for 30 days per device and lets the player revoke any session remotely |
| Password reset | Self-serve | Login overlay → Forgot password | Dispatches a reset link valid for 30 minutes; live chat can issue a manual link after identity check |
Cashier-facing limits (deposit cap, loss cap, session-time reminder, self-exclusion) sit on the same Security panel and overlap with responsible-gaming controls — configured once, they survive every future login.
The signed-in state surfaces tools that the public lobby keeps hidden. The six cards below cover the most-used dashboard widgets after the first deposit clears KYC. Every item is visible from the same My Account hub once 2FA is configured.
Live weekly cashback ledger broken down by net losses, tier percentage (5%/8%/10%/12%/15%) and the Monday credit estimate. Cashback clears at 1× wagering, the lowest on the brand.
Full audit trail of every welcome, reload and Bonus Shop award — activation date, wagering completed, expiry deadline and final cashable balance. Active bonus progress bar updates in real time.
Current tier (Bronze through Diamond), turnover required for the next tier, applicable daily and monthly withdrawal caps and the cashback percentage that travels with the tier.
One-click deposit using a stored method — Apple Pay, Revolut, Visa or a crypto wallet address. Crypto withdrawals route straight to the automated approval lane without re-entering the wallet address.
Personal slot list synced across desktop and the Progressive Web App. The Recents row keeps the last 20 launched titles one tap away — particularly useful inside a 10,000-slot lobby.
Single login, two wallets. The dashboard toggles between casino and sportsbook balances without re-authenticating. KYC clears once and applies across both verticals.
None of these surfaces appear before login. Players locked out for password or 2FA reasons can reach support through live chat without authenticating — the agent will verify by registered name, date of birth and email rather than an active session.