Why Independent Testing Exists
Casino games are software. Software can be written to do anything its creator intends. Without an independent verification layer, there would be nothing stopping a rogue operator from running a game where the RTP is secretly 70% while advertising 96%, or where certain combinations simply never appear, or where the outcome engine is deterministic rather than random.
Independent testing labs exist to eliminate this risk. They sit between the game developer and the casino operator as a neutral third party whose only job is to verify that the game does exactly what it claims to do. Their certification is what regulators, including Ontario's AGCO and iGaming Ontario, require before a game can go live with licensed operators.
The entire system depends on the labs being genuinely independent. They are accredited by national and international standards bodies, typically ISO/IEC 17025 (the international standard for testing and calibration laboratory competence), and they operate under strict conflict-of-interest rules that prohibit any financial relationship with the developers or operators they certify.
The Major Testing Laboratories
A small number of highly accredited labs handle the majority of certification work for regulated online casino markets worldwide. These are the organisations whose seals you will find in the footer of any properly licensed Ontario casino.
Arguably the most recognised iGaming certification body. eCOGRA is accredited to ISO/IEC 17025 and approved by regulators in the UK, Malta, Gibraltar, Isle of Man, Ontario, and many more jurisdictions. Their seal is the most widely displayed in the industry and their seal of "Safe and Fair" is a meaningful endorsement.
The largest independent gaming testing lab in the world. GLI works with regulators in over 475 jurisdictions and certifies everything from online slots to land-based slot machines to lottery systems. Their mathematical team includes engineers, physicists, and statisticians who stress-test game outcomes at scale.
The oldest independent gaming laboratory on the planet. BMM pioneered testing methodology in the early 1980s when electronic gaming machines were first replacing mechanical ones. Their 480-jurisdiction reach means BMM certification is recognised almost everywhere online gambling is legally regulated.
Specialises in RNG testing and online gaming systems. Now operating as a GLI subsidiary, iTech Labs holds ISO/IEC 17025 accreditation from NATA (Australia) and has certified thousands of games across multiple jurisdictions. Their focus on the Asia-Pacific and European markets complements GLI's global reach.
What Does a Testing Lab Actually Check?
A full certification assessment covers far more than most players realise. It is not a matter of a technician playing a game a few hundred times and declaring it fair. The process is systematic, automated, and runs into hundreds of millions of simulated rounds.
Lab engineers receive the game's complete source code and review it for algorithmic integrity. They are looking for any hardcoded outcomes, any code that would behave differently based on external inputs (such as player account status), and any mechanisms that could allow the game's behaviour to be remotely altered.
The Random Number Generator is the heart of any casino game. Labs run the RNG through established statistical test suites including the NIST Special Publication 800-22 battery. These tests include frequency analysis, runs tests, serial tests, poker tests, spectral tests, and more, collectively designed to prove the output has no detectable pattern and cannot be predicted.
Labs calculate the theoretical RTP independently from the developer's declared figure. They simulate the game hundreds of millions of times and verify that the actual output converges on the declared RTP within a permitted statistical tolerance (typically ±0.5%). Any significant deviation triggers a failed certification.
Every bonus round, free spin trigger, scatter mechanism, wild behaviour, and progressive jackpot accumulation rule is tested independently. The lab verifies that bonus triggers occur at the declared frequency, that free spin outcomes are genuinely random, and that jackpot eligibility and payout rules function exactly as described in the paytable.
The lab verifies that every winning combination described in the paytable is achievable and pays correctly. If a game advertises a 10,000x jackpot for five wild symbols, the lab confirms that combination can physically occur with the correct probability and that when it does, the correct payout is awarded without error.
Games are tested for vulnerabilities: can the outcome be influenced by network manipulation? Can a player's bet size affect the RNG seed? Can the game be paused mid-round in a way that allows outcome manipulation? Security testing ensures no attack vector exists that could be exploited by a player, operator, or third party.
Different jurisdictions have different rules. Ontario has specific requirements from the AGCO. The UK has different requirements from the UKGC. Labs test each game against the specific technical standards of each jurisdiction the operator intends to deploy in, issuing jurisdiction-specific certificates.
A Closer Look at RNG Testing
The Random Number Generator test is the most technically demanding part of certification. An RNG is a computer algorithm that produces a sequence of numbers with no discernible pattern. Every spin in every online slot, every card deal in every virtual blackjack game, every roulette number, all of them are determined by an RNG output.
The testing lab runs thousands of statistical tests on millions of RNG outputs. These are not simple tests. The NIST SP800-22 battery alone contains 15 individual tests, each looking for different types of non-randomness. A passing RNG must pass all of them with acceptable p-values. The combined probability of a truly non-random sequence passing the full battery by chance is astronomically small.
One thing this explains is a common misconception: you cannot influence an RNG outcome by timing your spins, stopping the reels manually, or any other behavioural trick. The outcome is determined the instant you press spin. The animation is theatre. The RNG has already produced the result, and the game engine has already decided whether you won or lost.
How RTP Gets Certified
RTP certification is separate from RNG testing, though the two are closely related. The testing lab independently calculates the expected RTP by analysing every possible outcome of the game and its associated probability.
For a simple slot with a small number of symbols, this can be done analytically. For a complex Megaways slot with 117,649 possible ways to win across multiple bonus states, it requires automated simulation running hundreds of millions of rounds. The lab compares the simulated output against the developer's declared RTP. If they match within tolerance, the RTP figure is certified.
After certification, the lab issues a report specifying the exact RTP, the variance, the hit frequency, the maximum win amount, and the bonus trigger frequency. This document is submitted to the regulator as part of the game's licence application, and it is what licensed operators rely on when they publish RTP information to players.
The Certification Timeline
A full game certification typically takes two to eight weeks depending on game complexity, the number of jurisdictions being certified simultaneously, and how many revisions the developer needs to make. A simple video slot for a single jurisdiction might clear in two weeks. A complex progressive jackpot network for multiple jurisdictions might take two months or more.
Developer submits full source code, math model documentation, paytable specifications, and supporting materials to the lab.
Lab engineers review documentation, identify any missing materials, and begin source code analysis. Developer addresses any flagged issues.
Automated RNG testing, RTP simulation, feature verification, and security testing run concurrently. Engineers produce interim findings.
Developer addresses any failed tests or flagged issues. Revised builds are submitted and re-tested. Iterations continue until all tests pass.
Lab issues formal certification report to developer and submits copy to regulator. Certificate is valid for the specific version of the game tested.
Operators must submit to periodic re-audits, typically annually. Any material change to a certified game (including jackpot network changes) requires re-certification.
Ontario's Specific Requirements
iGaming Ontario (iGO), the subsidiary of the Ontario Lottery and Gaming Corporation that operates the province's regulated market, imposes specific technical standards on top of what the AGCO requires. These are among the most rigorous in any North American online gaming jurisdiction.
The practical result for players is that any game available at a licensed Ontario operator has been through a documented, auditable certification process. The certification body, the version of the game tested, the RTP figures, and the pass/fail results of each test are all on record with the regulator. This is a fundamentally different situation from playing at an offshore, unlicensed site where none of these protections exist.
Every operator we review is iGaming Ontario licensed and uses independently-certified software.
