Skip to content

Reference last reviewed 27 October 2026

Technology and platforms

How a game is certified before anyone can play it

Random number generators, test laboratories and jurisdiction-specific builds: what actually happens between a finished game and its first real stake.

Reading time 8 minutesLast reviewed 27 October 2026

No licensed market lets a game take a real stake because the studio says it works. Between a finished build and a live lobby sits an independent laboratory, a jurisdiction-specific technical standard, and a change management process that is itself part of what gets approved.

The process is unglamorous and it is the reason online casino games are, on the narrow question of fairness, among the more thoroughly tested consumer products in existence.

What a random number generator has to prove

A random number generator produces the numbers that decide every outcome. Certification tests it on several properties at once, and all of them have to hold.

  • Distribution. Outcomes occur at the expected frequencies across very large samples, tested statistically rather than by inspection.
  • Independence. Each outcome is unrelated to the ones before it, so no sequence carries information about the next result.
  • Unpredictability. Knowing previous outputs must not allow the next to be derived, which is why the seeding and the algorithm are examined, not only the output.
  • Scaling. The mapping from raw numbers to game symbols must not introduce bias, which is a more common source of defects than the generator itself.

The generator is usually certified once as a component and then tested again in the context of each game that uses it, because a sound generator wired incorrectly into a paytable produces an unsound game.

What else is tested

Game certification covers considerably more than randomness.

The usual scope of a game certificate
AreaWhat is checked
Return to playerSimulated over a very large number of rounds and compared with the declared figure
Paytable and rulesThat the help screen describes the game accurately, including feature triggers and maximum win
Market configurationStake caps, spin duration, autoplay, bonus-buy availability and any prohibited features
Error handlingWhat happens on a dropped connection mid-round, and that the round can be recovered or voided correctly
LoggingThat every round is recorded in a form that allows a dispute to be reconstructed
Theme and contentIn several jurisdictions, whether the subject matter is permitted at all

Who does the testing

A small number of accredited laboratories do most of this work, and their accreditation is jurisdiction-specific: a certificate is only useful if the destination regulator recognises the laboratory that issued it. Gaming Laboratories International, BMM Testlabs and eCOGRA are the names that appear most often.

Some of these laboratories also write the technical standards that regulators adopt. Where a jurisdiction lacks the resources to draft its own specification, it can reference a published standard directly, with the result that a privately authored document becomes a regulatory requirement across many markets. It is an unusual arrangement and it is rarely remarked on.

Why the same game differs by market

A studio does not ship one build worldwide. The same title is configured for each jurisdiction, and the differences are substantive rather than cosmetic: maximum stake, minimum spin duration, whether autoplay exists, whether the feature can be bought, which return setting is permitted, and whether jackpots may be attached.

Germany is the sharpest example. A slot offered there runs under a stake cap, a mandatory pause between spins and no autoplay, with no jackpot attached, because the federal licence requires it. The same title in Britain has none of those constraints but is subject to a stake limit of its own. Most of these rules arrived from machine regulation.

What certification does not cover

  • Whether the game is good value. A certified 88 per cent game is certified; it is simply worse for the player than a certified 97 per cent one.
  • Whether the operator applied the right configuration. That is a licensing and audit question, which is why some markets require the figure to be displayed in the game.
  • Marketing claims. Advertising sits under a different regime entirely.
  • Commercial conduct. Bonus terms, withdrawal handling and customer treatment are matters for the regulator, not the laboratory.

Certification answers one question well: does this game behave as it says it does. Every other question about an operator is answered elsewhere.

Questions and answers

Can a certified game be rigged?

Not in the sense usually meant. The build tested by the laboratory is fingerprinted, and markets with live reporting can verify that the build in production matches the certified one. The realistic risks are a wrong configuration being deployed or an uncertified build reaching production, both of which are process failures rather than hidden mechanisms.

Who pays for certification?

The supplier, as part of bringing a game to market, and it is a meaningful cost for a small studio entering several jurisdictions at once.

How long does it take?

Weeks rather than days in most cases, and longer where a market requires its own specification to be met. Laboratory capacity sits on the critical path of a release, so studios manage it as a scheduling problem.

Does certification apply to live dealer games?

Yes, with a different emphasis. There is no random number generator deciding a roulette spin in a studio, so testing covers the physical equipment, the wheel or shoe, the card recognition system, the dealer procedures and the handling of mistakes.

Related explainers

Technology and platforms

How an online casino is put together

Between a player pressing spin and a game paying out there are at least five separate companies. This is who they are and what each one is paid for.

Technology and platforms

What a platform provider does

The least visible company in the chain runs the accounts, the wallet, the bonuses and the regulatory reporting. Why almost nobody builds their own.

In the reference

Testing and certification

Gaming Laboratories International

The largest testing laboratory in the sector, and the author of technical standards used by many regulators.

Testing and certification

BMM Testlabs

The oldest independent gaming test laboratory, accredited across a long list of jurisdictions.

Testing and certification

eCOGRA

A testing agency that began as an industry self-regulation body and became an accredited laboratory.

Regulator

Spillemyndigheden

The Danish Gambling Authority, which ran one of the earliest and most imitated European licensing regimes.