Almost every gambling site displays a licence badge in its footer and a testing-lab seal somewhere on the homepage. Most players read these as a single blanket assurance: someone official has checked this, so it must be fine. In practice the two things certify entirely different objects, are issued by entirely different bodies, and cover far less than the badges imply.
Knowing what each one actually guarantees is the difference between a meaningful check and a decorative one. It takes about two minutes to verify properly, and the process is worth learning once.
A licence and a certification are not the same thing
A licence is issued by a government or territorial regulator to an operating company. It covers the business: whether player funds are held separately from operating capital, whether anti-money-laundering procedures exist, whether complaints have somewhere to go, whether responsible-gambling tools are in place.
A certification is issued by an independent testing laboratory to a piece of software. It covers the maths: whether the random number generator produces statistically sound output, and whether a game’s actual return matches its published RTP across millions of simulated rounds.
The distinction matters because they fail independently. A perfectly certified game can sit on a platform with no segregated player funds. A well-licensed operator can host an uncertified title. Footer badges are the most commonly falsified element on gambling sites, which is why the verification step below always runs from the regulator’s register rather than from the badge itself — and why platforms that publish their licence number as verifiable text rather than an image, Caswino among them, make the check considerably faster to complete.
The main licensing jurisdictions
Regulators differ enormously in what they require and what recourse they offer. The table below covers the ones you will encounter most often.
| Jurisdiction | Player funds segregated | Independent dispute body | Audit frequency | Practical strength |
|---|---|---|---|---|
| UK Gambling Commission | Mandatory, tiered | Yes — ADR mandatory | Continuous reporting | Strictest; heavy player protections |
| Malta Gaming Authority | Mandatory | Yes — MGA mediation | Annual + ad hoc | Strong, well-established process |
| Isle of Man | Mandatory, trust account | Yes | Annual | Strong; smaller operator pool |
| Gibraltar | Mandatory | Yes | Annual | Strong; selective licensing |
| Curaçao (post-2023 reform) | Required under new framework | Improving under LOK | Periodic | Mid-tier; reformed but variable |
| Anjouan / smaller registries | Not consistently required | Rarely effective | Minimal | Weak; limited practical recourse |
The single most useful column is the dispute body. A regulator that will actually read a complaint and compel a response is worth more to you than any technical standard, because it is the only mechanism that matters when something goes wrong. Curaçao’s 2023 reform under the Landsverordening op de Kansspelen materially tightened requirements compared to the older master-licence structure, though enforcement remains less consistent than in Malta or the UK.
What testing laboratories actually test
Four names cover most of the market: eCOGRA, iTech Labs, GLI (Gaming Laboratories International) and BMM Testlabs. Their work falls into three categories.
RNG certification subjects the random number generator to statistical batteries — chi-square, serial correlation, runs tests — across tens of millions of outputs, checking for distribution bias and predictable sequencing.
RTP verification compares a game’s observed return over a very large simulated sample against the figure in its paytable, confirming the maths matches the claim.
Live studio auditing covers physical dealing: shuffle procedures, wheel balance, card-handling standards and camera coverage.
What none of them certify is the operator’s conduct. A lab tests the game, not whether the company will pay you. This is the single most common misreading of a certification seal, and it explains why lab logos appear on sites that are otherwise unremarkable.
Verifying a licence in two minutes
The badge in the footer proves nothing on its own. Do this instead:
- Find the licence number as text, not as a logo. It should appear in the footer or the terms page, typically as a reference like MGA/B2C/xxx/xxxx.
- Go to the regulator’s own website directly — type the address yourself rather than clicking the badge, which is often just an image or a link the site controls.
- Search the public register for that number. Every serious regulator maintains one.
- Check the company name matches what appears in the site’s terms and conditions. A mismatch between the licensed entity and the operating entity is a genuine warning sign.
- Check the licence status and the URL list. Licences cover specific domains. A valid licence held by the right company but not covering the site you are on offers you nothing.
- Note the expiry or renewal date. Lapsed licences sometimes stay displayed for months.
If any of these steps fails or the information cannot be found at all, you have learned something more useful than any badge could have told you.
What certification does not cover
Worth being explicit about the boundaries, because the seals imply more than they deliver:
- Certification does not mean a game is favourable. A certified RTP of 88% is certified as accurate at 88%.
- It does not cover withdrawal speed, support quality or terms fairness.
- It does not apply retroactively to updated software; a title can be recertified or not after a version change.
- It says nothing about which RTP variant an operator has selected, since providers routinely ship multiple versions of the same game.
- It does not guarantee the operator remains solvent, which is precisely why fund segregation under a licence matters separately.
The practical hierarchy
If you are evaluating a platform quickly, weight the signals in this order: an active, verifiable licence from a jurisdiction with a real dispute mechanism; recognisable game providers, since major studios contract selectively and their presence is a form of secondary vetting; a lab certification you can confirm on the lab’s own site; and clear, findable terms.
The last one is undervalued. Terms written to be understood, with limits and conditions stated plainly rather than scattered across sections, correlate strongly with operators who intend to honour them. Deliberate obscurity in a terms page is rarely accidental.
None of this makes any platform a good financial proposition — that is not what licensing does. It establishes that the games behave as described and that a complaint has somewhere to go. Those are worth confirming before you deposit rather than after.
A closing note that belongs in any honest piece on this subject: certification confirms the maths is accurate, and that maths is designed to favour the house. Set a budget you are entirely comfortable losing, decide your stop point in advance, and step away when you reach it. Gambling is for adults 18+ only, and free support services operate in every Australian state.
