Disclosure Agreements

Overview

Some cashout flows require the user to accept the latest legal disclosure before continuing. ZBD tracks acceptance by disclosure type and version, so a user may need to accept a new version even if they accepted an older version before. Your application is responsible for presenting the documents and collecting the user’s acceptance before it creates a widget session. The widget does not render Terms of Service, Privacy Policy, or other disclosure documents, or record acceptance on the publisher’s behalf. It validates that the required terms have been accepted before the user can access its services.

End-to-end Flow

Your server creates or resolves the widget user.
Your server reads `outstanding_disclosures` from the response or calls Get Disclosure Status.
Your application presents each outstanding document to the user outside the widget.
Your server records acceptance with Submit Disclosure Acceptance.
Your server creates a widget session.
Your frontend opens the returned `widget_url`.
The user can continue to bank linking, identity verification, and cashout.

Do not open a widget session until the publisher-side disclosure flow is complete. The disclosure APIs require your server-side API key and must not be called from a browser, game client, or WebView.

Outstanding Disclosures on User Creation

You do not need a separate call to discover what a user still owes. The Create User response (POST /api/v1/widget/users) already includes an outstanding_disclosures array on that first user request — the disclosure versions this user has not yet accepted. Surface or record them right away; if the array is empty, the user is current. outstanding_disclosures only lists what is still outstanding. When you need the complete picture — including which disclosures a user has already accepted and when — use the dedicated endpoints:

Get Disclosure Status — list every current disclosure type with the user’s acceptance state (tos_current, accepted_at), so you can show accepted vs. outstanding.
Submit Disclosure Acceptance — record acceptance of the latest version from your server.

The same outstanding_disclosures shape also appears in the widget session status during a session (see Session Status). Create User is the initial snapshot at provisioning time; Get Disclosure Status is the source of truth for the full, up-to-date acceptance state.

Disclosure Types

The widget disclosure endpoints can check and record acceptance for all current disclosure types.

Disclosure type	Type ID	Used for
Terms of Service	`2`	General ZBD terms
Privacy Policy	`3`	General privacy disclosure
Electronic Funds Transfer	`6`	ACH bank payout authorization

ACH cashout submission requires the current Electronic Funds Transfer disclosure to be accepted. If the user has not accepted the latest Electronic Funds Transfer disclosure, the cashout request is rejected until acceptance is recorded.

Session Status

During a widget session, ZBD can return outstanding disclosure information as a read-only status. The field is named outstanding_disclosures. This does not cause the widget to display the documents or collect acceptance. Terms of Service and Privacy Policy are expected to be accepted before session creation. Cashout-specific checks, such as Electronic Funds Transfer acceptance for ACH, are enforced when the user submits the cashout. Example session status shape:

{
  "success": true,
  "data": {
    "id": "4ac4fd8a-cc2c-4d03-af09-a76f4e89d652",
    "email": "player@example.com",
    "is_id_verified": true,
    "kyc_tier": 2,
    "kyc_status": "approved",
    "capabilities": [],
    "outstanding_disclosures": [
      {
        "id": 12,
        "type_id": 2,
        "name": "Terms of Service",
        "description": "ZBD Terms of Service Document.",
        "version": "1.4.0",
        "content_uri": "https://...",
        "created_at": "2026-06-24T20:11:45Z",
        "due_date": "2025-08-11T00:00:00"
      }
    ]
  },
  "message": "Session account status retrieved successfully.",
  "error": null
}

If outstanding_disclosures is empty, the user is current on all session disclosures returned by this endpoint. If it is not empty, return the user to the publisher-side acceptance flow rather than expecting the widget to collect it. Use the widget disclosure APIs from your server before opening the widget. The API key determines the project context, so these endpoints only require the widget user ID in the path.

Disclosure endpoints require your server-side API key. Do not call these endpoints directly from a browser, mobile client, game client, or WebView.

Use Get Disclosure Status to check current disclosure acceptance and Submit Disclosure Acceptance to record acceptance for the latest version of one or more disclosure types.

Existing Users

Disclosure acceptance is versioned. If a user already exists and needs to accept a current disclosure, submit the acceptance with the disclosure endpoint above. Do not rely on an idempotent user-create call to update disclosure acceptance for an existing user. User creation can return an existing user without recording new disclosure acceptance.

Sandbox

Sandbox uses the same disclosure status and acceptance model as production. When testing disclosure handling, use your sandbox API key and sandbox API base URL:

https://sandbox-api.zbdpay.com

Some sandbox bypass settings can skip cashout checks for faster testing. If you specifically need to verify cashout disclosure blocking behavior, make sure your sandbox setup is not bypassing the cashout disclosure gate.

Overview

Events

API Reference

Testing

Overview

End-to-end Flow

Outstanding Disclosures on User Creation

Disclosure Types

Session Status

Recording acceptance before the widget

Existing Users

Sandbox

​Overview

​End-to-end Flow

​Outstanding Disclosures on User Creation

​Disclosure Types

​Session Status

​Recording acceptance before the widget

​Existing Users

​Sandbox

Overview

End-to-end Flow

Outstanding Disclosures on User Creation

Disclosure Types

Session Status

Recording acceptance before the widget

Existing Users

Sandbox