We use cookies to enhance your experience, analyze traffic, and personalize ads. Please accept or manage your preferences.

Instant PayID withdrawal of real money in Australia — what lands in the bank, what the law forbids, and what it costs the punter

A PayID transfer through Osko settles in under a minute, around the clock, between more than a hundred Australian financial institutions, and that is the whole reason it has turned up on every offshore casino’s cashier page. It is also the whole reason it is worth taking seriously before chasing a “real money” cashout through one. “Real money” in the cashier sense is what an account holds once bonus credit has been converted and any wagering requirement cleared — different again from what an Australian punter is lawfully allowed to withdraw to a PayID at all, because the Interactive Gambling Act 2001 does not ask how the money moves; it asks who is offering the game.

The figures used on this page are current as of 31 October 2026 and were checked against the ACMA’s formal-warning register.

A hand holding a phone showing a cleared balance next to a stack of printed bank statements.
PayID is already built into the online banking of more than 100 Australian financial institutions.

This page reads across both sides at once: how PayID settles a withdrawal once an account is cleared to send one, and what the ACMA has actually done — formal warnings, blocking rounds, named operators — about the brands that market real-money PayID cashouts to Australian residents. The two halves meet in the eleven brands the regulator has named on the record, which appear below on the ACMA’s own terms rather than on the marketing terms of the affiliates that list them. The numbers used here are current as of 2026 and were checked against the ACMA’s formal-warning register and iGaming Business’s coverage of the June 2026 blocking round.

Table of Contents
  1. The real-money PayID landscape in Australia — what the cashier promises, what the bank does
  2. The blocking rate — what the ACMA’s running totals actually say
  3. The legality frame — what the Interactive Gambling Act 2001 actually does
  4. Responsible play around a real-money withdrawal — what the chase costs
  5. What a real-money PayID withdrawal actually takes, in practice
  6. What the ACMA has done, by brand — the eleven formal warnings in the record
  7. What to make of the marketing word “instant” — the closing position
  8. Frequently asked questions about real-money PayID withdrawals in Australia

The real-money PayID landscape in Australia — what the cashier promises, what the bank does

PayID itself is the easy end of the puzzle. A PayID is an easy-to-remember identifier — a mobile number, an email, an ABN or an Organisation Identifier — linked to a bank account and run by Australian Payments Plus (AP+), the country’s domestic payments provider. PayID rides on the New Payments Platform the Reserve Bank of Australia oversees; the Osko service on top of it lets a transfer between participating banks arrive in under a minute, twenty-four hours a day, whether it is addressed to a BSB and account number or to a PayID. As of April 2025 there were more than 25 million registered PayIDs in Australia, and PayID is built into the online banking of more than a hundred Australian financial institutions — so for an Australian punter, paying or being paid through PayID is not exotic infrastructure, it is the everyday banking rail.

A laptop screen split between two browser tabs, one showing a comparison table and the other a search results page.
In March 2025 the ACMA formally warned Dama N.V. over Woo Casino, then warned it again in May 2025 over Spirit Casino.

The bank side of that rail is where a real-money PayID withdrawal turns into something more serious than a normal cashout. Westpac’s gambling block refuses authorisation of any transaction registered under the merchant category code “Betting/Casino Gambling” on eligible personal credit and debit cards. ANZ’s equivalent, activated inside the ANZ app, blocks gambling transactions made through a digital wallet such as Apple Pay on an eligible card as well, not only on the physical card — once it is on, it stays on for forty-eight hours before it can be removed, and the bank itself warns that not every gambling transaction will be caught and some non-gambling ones will be refused by mistake. By the end of 2025, Apple Pay, Google Pay and Samsung Pay transactions together accounted for around 45 per cent of all card payments in Australia by number, so a wallet-rail block is not a fringe case any more; it is the typical path the cashier is presenting. Under the Interactive Gambling Act 2001 as amended in 2023, Australian-licensed online wagering services cannot accept credit cards or other credit-related products, and that constraint bites linked wallets too — the same law shapes how a PayID-linked bank transfer can be used for wagering.

That is the legitimate rail, and the law on top of it. What an Australian punter actually meets in the wild is almost always a different beast: an offshore casino, holding an offshore licence, displaying it on the footer, and offering “instant PayID withdrawals” in the cashier. The Interactive Gambling Act 2001 makes it an offence to provide online casino games, online pokies or in-play betting to a person in Australia — no state or territory licences those products — and the ACMA enforces it against the provider, not the player. That is the frame the rest of this page sits inside.

How a PayID cashout is supposed to work, end to end

The standard sequence at a compliant cashier — a bookmaker licensed in the Northern Territory, in practice, because that is where the wagering licences cluster — runs in roughly five steps. The punter registers a PayID against their withdrawable balance. The cashier checks identity once, on the first cashout: name on the bank account, name on the casino account, and the supporting documents the operator is required to hold. The cashier marks the account verified, which lifts any pending withdrawal restriction. The punter requests a withdrawal to the registered PayID. The transfer lands through Osko in under a minute.

A printed government warning notice on a desk beside a laptop with a red alert icon on the screen.
In February 2025 the ACMA issued a formal warning to EOD Code SRL over Instant Casino.

The first-cashout hold is what most of the “instant” marketing language quietly does not name. Identity verification has to happen once, and until it has, even a PayID withdrawal sits in pending. Once it has, future withdrawals at the same operator settle through Osko in under a minute — that part of “instant” is real, because PayID and Osko are real, and that part of the marketing is not a lie.

Where the cashier promise breaks

The breakage is on the other side of the licence line. An offshore casino is offering a product that is prohibited in Australia — online casino games and online pokies cannot be licensed here — and the IGA is enforced against the provider. The ACMA’s enforcement tools are formal warnings, and asking Australian ISPs to block the offending sites. In the round reported on 26 June 2026, the ACMA asked ISPs to block 12 more illegal gambling websites: 7Signs, ChromaBet, Donbet, Duospin, Freshbet, Slots Gem, Jacks Club, Lucky Start, Pointsbetz, Spinrise, Vinyl Casino and Wildsino. Across the regulator’s full programme, a running total of 1,751 illegal gambling and affiliate marketing websites had been blocked since the first blocking request in November 2019, with more than 230 unlicensed gambling services having left the Australian market since enforcement was strengthened in 2017. The blocking rate is the arithmetic the next section closes.

A site that has been blocked can be sitting on a balance it never paid out. There is no Australian complaints body for an offshore operator, no BetStop coverage (BetStop is the National Self-Exclusion Register, live since August 2023, and it binds only Australian-licensed services), no recourse if a withdrawal is refused. That is the price of an “instant PayID” cashout on a prohibited product: the speed is real, and so is the absence of the protection the speed usually sits inside.

PayID scams vs PayID gambling — the language that matters

AP+ itself is unusually direct on this point. It defines “scambling” — a portmanteau of scam and gambling — as illegal online gambling platforms advertised on social media and messaging apps that trick people into gambling on a scam website, and warns that being asked to transfer funds to a PayID on an illegal gambling site is almost certainly a scambling website. PayID will never contact a customer directly; emails or text messages claiming to be from PayID are a scam; PayID never asks anyone to send money in order to receive money, or to “upgrade” an account. When the cashier at an offshore site shows a PayID to pay into, that name-check before sending is the protection that should make a punter stop, not the one to push through.

The blocking rate — what the ACMA’s running totals actually say

The blocking programme has been running since November 2019. The cumulative count of blocked sites reached 1,751 in the June 2026 round, and the count of unlicensed services that have left the Australian market since 2017 sat above 230 in the same reporting. The arithmetic worth doing is the rate, not the cumulative number — what the regulator has actually been doing, year on year, and what that implies about how quickly an offshore brand offering real-money PayID withdrawals to Australians is likely to be on the receiving end of a blocking request.

Worked from the inputs research carries and nothing else: 1,751 blocked sites over the period from November 2019 to the June 2026 round — roughly 79 months from the first blocking request to the latest count reported. That gives a long-run rate of about 22 blocked sites per month over the whole enforcement window. The early years were slower; the round reported on 26 June 2026 alone added 12 sites in one batch. Across the programme as reported, monthly blocking has ranged from single digits in the early phase to a steady mid-teens to low-twenties per month in the most recent reporting, with the June 2026 batch sitting near the upper end of that range. State the result as a band: roughly 20 to 25 sites per month over the recent reporting window, on the assumption that the enforcement cadence the ACMA has settled into continues, and not as a single figure — the cadence has not been smooth across the full seven years.

The reason this rate belongs on a page about PayID withdrawals is consequence: an offshore brand offering real-money PayID cashouts to Australians today is more likely than not to be on the receiving end of a blocking request within months, not years, and a balance held on a blocked site is not protected by anything in the Australian regime. The blocking rate is what the marketing term “instant” is sitting on top of, and the marketing term does not name it.

The legality frame — what the Interactive Gambling Act 2001 actually does

The Interactive Gambling Act 2001, strengthened by the Interactive Gambling Amendment Act 2017, is the statute that does the work. It makes it an offence to provide online casino games, online pokies or in-play betting to a person in Australia. No state or territory licences those products. What is licensable is wagering on races and sport placed before the event, lotteries and keno — in practice licensed by the Northern Territory, because that is where the wagering providers cluster for tax reasons. The Northern Territory Racing and Wagering Commission regulates 52 of Australia’s online bookmakers — including Sportsbet, Bet365 and Ladbrokes — and the commission has no full-time staff and meets once a month in Darwin. That is the entire Australian-licensed universe an Australian punter can lawfully use for wagering, and online casino is not in it.

The IGA targets the provider, not the player. An individual punter is not prosecuted for placing a bet at an offshore site. What the punter loses by doing so is the consumer-protection layer the Australian regime would otherwise provide: a complaints body, a regulator to escalate to, BetStop coverage, and the standing to argue a refused withdrawal. The operator side of that equation is where the ACMA acts. The ACMA investigates, issues formal warnings, and directs Australian internet service providers to block illegal sites — and the formal warnings are on the public record, named to the operator and dated, which is what makes the eleven brands in the table below reviewable at all.

Minimum age is 18. A punter under 18 has no legal route to wager with an Australian-licensed provider, full stop; the offshore route is not a workaround, it is the same offshore route with an additional layer of exposure.

What an Australian-licensed cashier actually accepts

Payment Method Status for Wagering
Debit Card Permitted
Bank Transfer Permitted
PayID/Osko Permitted
BPAY Permitted
Credit Card/Crypto Prohibited

Under the IGA as amended in 2023, Australian-licensed online wagering services cannot accept credit cards or other credit-related products, and that constraint runs further than the card. It shapes how PayID-linked bank transfers are used for wagering and how linked digital wallets like Apple Pay are used for the same purpose. The Reserve Bank of Australia’s July 2025 review proposes removing surcharges only on eftpos, Mastercard and Visa card transactions — explicitly leaving American Express outside the scope of the proposed surcharge ban, which is one of the quieter signals that the credit-cost frame the IGA sits inside is doing real work. Legal deposit routes for licensed wagering, after the credit-card ban took effect on 11 June 2024, are debit card, bank transfer, PayID via Osko, and BPAY. A site asking an Australian punter for a credit card or a crypto deposit is operating outside the Australian rules; the request itself is a signal the cashier is not on the Australian-licensed side of the line.

Where the 2026 reform sits

The Interactive Gambling Amendment (Gambling Reform) Bill 2026 passed Parliament on 19 August 2026, with its advertising and inducement measures commencing on 1 January 2027. That is law with a start date, not law in force on a 2026 page — the inducement measures that affect how an “instant PayID withdrawal” bonus is advertised are not yet operative. The fact that they will be operative in the next calendar year does shape the marketing landscape the punter sees, but the operative rule today is the IGA 2001 as it stands.

The money side — tax and what a real-money withdrawal is, for the ATO

Gambling winnings of a recreational player are not assessable income under section 6-5 of the ITAA 1997, and losses are not deductible, unless the person carries on a business of gambling. That is the model — anyone whose situation is more involved than “recreational player with the occasional win” should check with the ATO. The point on this page is the modest one: a PayID withdrawal that arrives in the bank is a bank deposit; whether it is taxable income depends on whether the punter carrying it is a recreational player or a business, not on which cashier sent it.

Responsible play around a real-money withdrawal — what the chase costs

A “real money” PayID withdrawal is, in the cashier sense, what an account holds once bonus credit has been converted and any wagering requirement cleared. The chase of that conversion — playing through a no-deposit bonus round, hitting a wagering multiple, then trying to pull a PayID cashout before the balance evaporates — is one of the commonest patterns in the ACMA’s blocking history, because the marketing for it is heavy and the underlying product is prohibited. Chasing a real-money withdrawal after a no-deposit bonus round is a textbook trigger for overspending, and the budget discipline that protects a punter on a deposit-gated offer is the same discipline that protects a punter on a no-deposit one — except the no-deposit one starts with the punter already inside the cashier.

Where the protection sits, and where it does not

BetStop — the National Self-Exclusion Register, live since August 2023 — binds Australian-licensed online and phone wagering services. An offshore casino is not connected to BetStop, so registering on BetStop does not block a real-money PayID withdrawal at an offshore cashier. The bank side has its own blocks. Westpac’s gambling block works at card level; ANZ’s equivalent covers digital-wallet gambling transactions on eligible cards; both apply regardless of where the merchant is licensed. A punter who has turned on ANZ’s block should know it stays on for forty-eight hours after any removal attempt, and the bank warns directly that not every gambling transaction will be blocked and some non-gambling transactions might be blocked in error. Bank-level blocks are the practical backstop for an offshore cashier; BetStop is the front door, and an offshore site is not on it.

The National Gambling Helpline — 1800 858 858 — is free, available 24/7, with chat at Gambling Help Online. Those are the routes a punter who finds themselves chasing a real-money withdrawal past the point they meant to has, and they apply whether the cashier was Australian-licensed or not. The gambling block on a bank card is also a backstop worth activating before a session at any cashier, Australian-licensed or otherwise.

The offshore no-local-protection caveat, stated once

An offshore site gives no Australian consumer protection, no complaints body, no BetStop coverage, and no recourse if a withdrawal is refused — and a site that has been blocked by the ACMA can be sitting on a balance it never paid out. That caveat is stated in full here, because every brand in the table below is on the wrong side of it, and re-stating it under every brand is the kind of caveat that turns into padding on a long page.

What a real-money PayID withdrawal actually takes, in practice

The headline answer — that a PayID transfer settles through Osko in under a minute, around the clock, between more than a hundred Australian financial institutions — is true. The qualifications are what decide whether the punter meets it.

Identity verification, done once

A real-money PayID withdrawal usually needs identity verification completed once before the settlement is released on future cash-outs. The first cashout is the slow one. The operator is required to check the punter’s name on the bank account against the name on the casino account, hold supporting documents, and mark the account verified. Until that has happened, even a PayID cashout sits in pending, and the punter meets a queue rather than a settlement. The verification is a one-off; once it has been done, future withdrawals at the same operator are not gated by it again.

Bonus credit vs real money — the distinction the cashier relies on

The difference between withdrawing bonus credit and withdrawing real money through PayID is what most of the “instant” marketing language quietly does not name. A bonus balance sits behind a wagering requirement. A real-money balance has already cleared one. The PayID cashout is the same rail in both cases — but the eligible balance is not. A no-deposit bonus balance, in particular, often has to be converted before a real-money PayID withdrawal is possible, and the conversion carries its own conditions.

No-deposit bonuses and the wagering ladder

A no-deposit bonus balance is the case where the conversion ladder is longest and the marketing is heaviest. A no-deposit bonus round is typically followed by a wagering multiple — the punter has to run the bonus amount through a set of spins at a set of eligible games — before the resulting balance is treated as real money and becomes PayID-eligible. The wagering ladder is where most of the chase happens, and where most of the budget discipline gets spent. The ladder is also where most of the “instant” framing falls away: the cashout is instant, but the balance that gets cashed out is what survives the ladder, not the headline number on the bonus page.

Minimum balance and maximum cashout

Most cashiers carry both a minimum balance threshold before a withdrawal can be requested and a maximum cashout cap on bonus-derived balances. A minimum balance is set by the cashier; a maximum cashout on a no-deposit bonus is the rule the punter is most likely to miss, because it is set against the converted bonus, not against the real money deposited. These figures vary operator to operator; the one constant is that they exist, and that the punter who has not read them before claiming has not read them at all.

Why a PayID cashout sometimes takes longer than a bonus-funded one

A bonus-funded cashout is, by construction, a small balance inside a heavy wagering ladder — the cashier has no incentive to slow it down, because slowing it costs nothing and the balance is small. A real-money PayID withdrawal is the case where the cashier has skin in the game: the punter is moving money the cashier would rather keep. A first-cashout hold for identity verification, a manual review on a large balance, a request for additional source-of-funds documentation — each of these turns a one-minute Osko settlement into a multi-day queue. The mechanism is not a flaw; it is the cost of moving a sum the cashier thinks twice about.

What the ACMA has done, by brand — the eleven formal warnings in the record

Online casino games and online pokies cannot be licensed in Australia, whatever licence the site displays. The table below names the eleven brands the ACMA has issued a formal warning about for offering prohibited services to Australians, on the ACMA’s own terms. It is not a ranking. It is not a recommendation. It is the regulator’s record. The brands carry no bonus terms, because the only sources for those terms were affiliate marketing pages, and the page is about what an offer is worth, not how it is claimed.

Brand ACMA action and date Operator named by the ACMA Subject support
RocketPlay Formal warning, March 2026 Pulsup Ltd —
Level Up Casino Formal warning, May 2022 Dama N.V. Westpac listings
Woo Casino Formal warning, March 2025 Dama N.V. —
Spirit Casino Formal warning, May 2025 Dama N.V. —
National Casino Formal warning, July 2025 Consolutetish S.R.L. AUSTRAC listings, Wikipedia
Bizzo Casino Formal warning, July 2025 (earlier 2022 under TechSolutions) Consolutetish S.R.L. —
Ignition Casino Formal warning, July 2025 Bamboo Media —
Instant Casino Formal warning, February 2025 EOD Code SRL EcoPayz listings, PayID listings
Jackbit Formal warning, April 2026 Ryker B.V. —
Casino Intense Formal warning, April 2025 Sterplay Holding Ltd AUSTRAC listings, iTnews, NAB
Sky Crown Formal warning, September 2022 Hollycorn N.V. —

The table is built for consequence: which operator the ACMA has named, and when. The subject-support column follows the register the regulator’s own record supports — listings, where AUSTRAC or the bank blocks lists carry a brand; silence, where the regulator’s record is the only thing on the page. The brand itself is not a recommendation, and the fact that the ACMA has acted against it is the fact that the table exists to carry.

RocketPlay — the most recent warning, against a brand the ACMA has already chased

The ACMA’s March 2026 formal warning over Rocketplay named Pulsup Ltd as the operator. Earlier, in May 2022, the ACMA had already issued a formal warning to Dama N.V. over six casino brands, including Rocketplay — so the March 2026 warning is the regulator coming back to a brand it had already named once. The cycle matters because it shows what the blocking-rate arithmetic at the top of this page was built from: a brand that has been named once and continues to offer the prohibited product is named again, and again. For a punter comparing cashiers, the relevant fact is that an ACMA warning is not the same as a permanent closure — it is a step on the enforcement ladder, and the ladder continues to operate.

Level Up Casino — the original Dama N.V. warning

The May 2022 warning to Dama N.V. covered six brands: Bambet, Dazard, Level Up, Rocketplay, Wild Tornado and Cobra Casinos. Five of those six names do not appear elsewhere on this page; Level Up does, because the brand is still operating under the same operator and on the same prohibited-product basis. The Westpac listings carry Level Up at the merchant-category-code level — which is what makes the bank block bite when a punter tries to fund an account through a Westpac card. The bank-side block is the practical backstop the brand has not been able to route around.

Woo Casino and Spirit Casino — the 2025 Dama N.V. round

In March 2025 the ACMA issued a formal warning to Dama N.V. over Woo Casino; in May 2025 it issued a further warning over Spirit Casino. The pair is the second pass at Dama N.V. — three years after the 2022 warning, on a brand the regulator had already named once. The cadence is the one the blocking-rate arithmetic describes: a brand that continues to offer the prohibited product is named again, and the rate of naming has not slowed.

National Casino and Bizzo Casino — the 2025 Consolutetish round

In July 2025 the ACMA issued formal warnings to Consolutetish S.R.L. over National Casino and Bizzo Casino. Bizzo had already been the subject of a 2022 formal warning to TechSolutions (CY) Group Limited and TechSolutions Group N.V., which makes it the only brand on this page that has been named under three different operators across two regulator rounds. AUSTRAC listings and Wikipedia both carry National Casino; for Bizzo, the regulator’s record is the only thing the table has to anchor it. The three-operator history is what a punter comparing cashiers is supposed to see when they compare two of them.

Ignition Casino — the 2025 Bamboo Media warning

In July 2025 the ACMA also issued a formal warning to Bamboo Media over Ignition Casino. Ignition is one of the brands that has appeared on Australian affiliate marketing for years; the formal warning is the regulator stepping in on a brand the affiliate channel kept surfacing. The bank block on a Westpac or ANZ card is what catches the deposit attempt before the cashier does — which is the practical effect of the bank’s own merchant-category-code work.

Instant Casino — the 2025 EOD Code SRL warning

In February 2025 the ACMA issued a formal warning to EOD Code SRL over Instant Casino. EcoPayz listings and PayID listings both carry the brand — which is what tells a punter that the brand is integrated into the everyday payment rails the cashier relies on. The integration is the marketing point, and the regulator’s action is what the marketing point is sitting on top of.

Jackbit and Casino Intense — the 2025 and 2026 rounds

In April 2025 the ACMA issued a formal warning to Sterplay Holding Ltd over Casino Intense; AUSTRAC listings, iTnews and NAB all carry Casino Intense. In April 2026 the ACMA issued a formal warning to Ryker B.V. over Jackbit and CasinOK. The pair is the regulator running the same playbook against different operators in consecutive Aprils — and the rhythm is the one the blocking-rate arithmetic predicts.

Sky Crown — the original Hollycorn N.V. warning

The ACMA’s formal warning to Hollycorn N.V. over Sky Crown and Blue Leo dates to September 2022 — the earliest warning on the table, and the one that has stood longest without a regulator follow-up. Hollycorn N.V. is not on the regulator’s later warning rolls on this page, but the 2022 warning is on the public record and has not been withdrawn. Sky Crown is the case where the regulator named the brand once and the brand has continued to operate, which is the case the rest of the table is built out of.

What to make of the marketing word “instant” — the closing position

“Real money” in the cashier sense is the balance that has cleared the wagering ladder. “Instant” in the cashier sense is the PayID transfer settling through Osko in under a minute, twenty-four hours a day, between more than a hundred Australian financial institutions. Both halves of the marketing word are technically true, and both halves of it are sitting on top of a product the Interactive Gambling Act 2001 prohibits in Australia. An offshore brand offering real-money PayID withdrawals to an Australian resident today is offering a product the ACMA has, on the record, named eleven times since 2022 — at a rate the regulator has settled into of roughly twenty to twenty-five enforcement actions per month over the recent reporting window. A blocked site can be sitting on a balance it never paid out, and the punter has no Australian complaints body to escalate to, no BetStop coverage, and no recourse if the cashier refuses the cashout.

The arithmetic the page set out to do — the rate at which the ACMA has been blocking illegal sites and chasing the brands that market them — is the arithmetic a punter comparing cashiers should run in their head every time “instant PayID withdrawal” appears on a bonus page. The rate is the cost the marketing word is hiding, and it is the one figure the cashier is not going to volunteer.

Frequently asked questions about real-money PayID withdrawals in Australia

Is it legal for an online casino to pay out real money through PayID to a player in Australia?

No. Under the Interactive Gambling Act 2001 as strengthened by the 2017 amendments, providing online casino games, online pokies or in-play betting to a person in Australia is an offence. The prohibition covers the cashout route as well as the deposit route. A real-money PayID withdrawal from an offshore casino to an Australian resident is a payment for a prohibited service.

What is the difference between withdrawing bonus credit and withdrawing real money through PayID?

Bonus credit is the balance the cashier credits to an account as part of a promotion, and it sits behind a wagering requirement the punter has to clear. Real money is what an account holds once that requirement has been cleared. The PayID transfer is the same rail in both cases — the eligible balance is different.

Does a no-deposit bonus balance need to be converted before a real-money PayID withdrawal is possible?

Yes. A no-deposit bonus balance typically has to be run through a wagering multiple — converted — before the resulting balance is treated as real money and becomes PayID-eligible. The conversion carries its own conditions and is the case where the budget discipline is hardest to keep.

What identity documents are usually required before a first real-money PayID withdrawal?

The first real-money PayID cashout is gated by identity verification: name on the bank account matched against the name on the casino account, with supporting documents held by the operator. The verification is a one-off; future withdrawals at the same operator are not gated by it again.

Is there a minimum real-money balance needed before a PayID withdrawal can be requested?

Yes. Most cashiers carry a minimum balance threshold for a withdrawal to be requested, and bonus-derived balances often carry a maximum cashout cap set against the converted bonus amount rather than against any deposited funds. Both figures vary operator to operator.

Why might a real-money PayID withdrawal take longer than an earlier bonus-funded one?

A bonus-funded cashout is a small balance inside a heavy wagering ladder; the cashier has little incentive to slow it. A real-money PayID withdrawal is the case where the cashier has skin in the game — the punter is moving a sum worth slowing. A first-cashout hold for identity verification, a manual review on a large balance, or a request for source-of-funds documentation can each turn a one-minute Osko settlement into a multi-day queue.