What is actually being tested
#A game's random number generator is an algorithm that turns an internal state into a stream of numbers, and testing it answers two separate questions. The first is statistical: do the outputs behave like true randomness, with no detectable bias, pattern or correlation across very large samples. Labs run batteries of statistical tests on millions of draws, and the generator must also be shown to be unpredictable, so that observing past outcomes gives no usable information about the next one.
The second question ties the generator to the game on top of it: dealt from these random numbers, does the game's realised return over huge simulated volumes converge on the RTP the developer declares. The RTP page covers what that figure means; certification is where it stops being a claim and becomes a tested property. The two tests together are why a licensed slot cannot quietly pay less than its published figure without the discrepancy being detectable.
The chain: regulator, laboratory, operator
#The regulator writes the technical standard. In Great Britain, the Gambling Commission's remote technical standards require games to be randomly generated, to display their chances of winning, and to be tested by a body the Commission itself approves; other licensing jurisdictions maintain equivalent lists. The standard is public, which is what makes the rest of the chain auditable.
The laboratory does the testing. Names like eCOGRA, GLI and iTech Labs recur across the industry because accreditation is expensive and jurisdictions approve a limited roster; the lab issues a certificate for a specific game build and RTP configuration. The operator's obligation is the last link: run the certified build unmodified, and display the information the certificate covers. Licence conditions make swapping in an uncertified build a violation the regulator can act on, which is what gives the paper teeth.
What a certificate does not cover
#A certificate proves the game is fair in the technical sense: random, unpredictable, paying at its declared rate. That declared rate still includes the house edge, so certification is entirely compatible with a game that keeps 10% of everything staked; the certificate confirms the price is as labelled, not that the price is good. Every edge derived across this site, from roulette's 2.70% upward, sits comfortably inside certified games.
The certificate also says nothing about the rest of the operation: how bonuses are termed, how withdrawals are handled, how disputes are resolved. Those protections come from the licence itself, which is why the licensing pages on this site treat the regulator, not the testing lab, as the primary fact about a casino. A crash game's provably fair scheme makes the same point from the other direction: cryptographic proof of non-manipulation, like a lab certificate, verifies the game follows its stated rules, and leaves reading the rules to you.
How to check it yourself
#The chain is verifiable from public documents, which is the point of it. A licensed casino states its regulator, and the regulator's public register confirms the licence; the UK Gambling Commission and the Curaçao Gaming Authority both run searchable registers linked from this site's licensing pages. Testing labs publish their accreditations, and game information screens state the RTP configuration in force, which is the certified figure that applies to you.
The practical rule follows from the chain's structure: fairness of the draw is the best-verified property in licensed online gambling, so doubts are usually better directed elsewhere. A player who checks the licence, reads the game's own information screen and treats the house edge as the certified price of playing has extracted everything the trust chain has to offer; the chain was never designed to make the game worth playing, only honestly priced.
Questions, answered
Can a licensed casino rig its games?
Not without breaking the terms of its licence in a detectable way. Certified games ship as tested builds with declared returns, regulators require operators to run them unmodified, and realised returns that drift from the certificate are exactly what the testing regime is built to catch. The realistic risk on a licensed site is not a rigged draw; it is the certified house edge, plus terms and conditions, doing their normal work.
Who certifies the certifiers?
The licensing regulator. Jurisdictions approve a roster of testing laboratories, and labs additionally hold generic accreditations such as ISO/IEC 17025 for testing competence. A certificate only counts for licensing purposes if the lab that issued it is on the approved list of the regulator in question, which keeps the chain anchored to a public authority rather than to the industry itself.
Is a certified RNG the same as provably fair?
They solve the same problem by different routes. Certification has an accredited third party test the generator before deployment; provably fair lets each player cryptographically verify each round afterwards. Both verify the game follows its published rules, and neither says anything about how favourable those rules are. The strongest arrangement is a licensed operator whose games carry both.
Sources
Related