RNG certification gaming licence rules come down to one thing: no regulated authority grants final approval until an accredited laboratory confirms your games run fair. The certificate proves the random number generator behind your slots and table games produces unpredictable results at the stated return to player. This guide explains who actually needs certification, what it costs across the whole licence project, and how to sequence the testing so it does not delay your launch. It also covers the part most guides skip, which is who carries liability and what happens to the certificate after your licence goes live.
Key takeaways
- Regulators such as the Malta Gaming Authority, the UK Gambling Commission, ONJN, and the Curacao Gaming Authority require certified RNG evidence before go-live
- An accredited testing laboratory issues the certificate, not the regulator; the lab must hold ISO/IEC 17025 accreditation for the gaming scope
- B2C operators offer certified games; B2B suppliers certify the random number generator they build
- A single game RNG certification usually takes two to six weeks once the lab holds a clean build
- A certificate covers only the named build and version, and it does not replace the licence in each target market
Is RNG certification required to get a gaming licence?
Yes. In every regulated market, RNG certification is a condition of the gaming licence, not an optional extra. The authority will not issue final approval until an accredited laboratory signs off the random number generator behind your games. So the RNG certification gaming licence link is direct: the certificate is one of the technical documents the regulator relies on to grant and keep your authorisation.
The reason is practical. Players cannot check fairness themselves, and a regulator will not take the operator’s word for it. An independent certificate is the only proof that stands up. The Malta Gaming Authority, for one, conditions its approval on test reports from recognised labs. Because of that, the RNG certification gaming licence check sits inside the licence process rather than beside it. Our platform consultancy and RNG testing team maps the exact certification each target market expects before you file anything.
Who needs RNG certification: B2C operators vs B2B suppliers
This is where operators get the RNG certification gaming licence question wrong. A business-to-consumer operator, the brand that markets to players, does not usually certify a random number generator itself. Instead, it must offer games whose RNG is already certified by an accredited lab. The obligation is to source compliant content, not to run the test.
The certification burden sits with the business-to-business supplier. If you build your own games or your own RNG, you are the party that commissions the assessment and holds the certificate. Game studios and platform providers therefore carry the direct testing cost, while operators inherit the evidence through their supply contracts.
The split matters for licensing. In Malta, for example, a B2B gaming supply licence covers the provider of the games, while the B2C licence covers the operator who runs them. Each side answers to the Malta Gaming Authority for its own scope. So confirm early which role you hold, because it decides whether you pay for certification directly or verify it in your supplier agreements. If you supply rather than operate, our guide to a platform software evaluation shows where the certificate gets scored in the technical file.
RNG certification gaming licence requirements by jurisdiction
Every regulated jurisdiction expects certified RNG evidence, but the recognised standards and the depth of review differ. The table below sets out what each authority looks for as a licence condition. In each case, the certificate must come from a laboratory the regulator recognises.
| Jurisdiction | Regulator | RNG condition for the licence |
|---|---|---|
| Malta | Malta Gaming Authority | Certification from an approved laboratory before go-live, plus periodic system audits |
| Romania | ONJN | Software and RNG certification from an ONJN-recognised body as a licence condition |
| Isle of Man | Gambling Supervision Commission | Independent test reports for the RNG and games, with ongoing technical oversight |
| Curacao | Curacao Gaming Authority | RNG certification expected under the reformed framework, scope confirmed at application |
| Bulgaria | National Revenue Agency | Certified gaming software and RNG from an accredited laboratory before approval |
Accreditation underpins all of it. Regulators recognise labs that hold accreditation to ISO/IEC 17025 for the gaming scope. Gaming Laboratories International, eCOGRA, BMM Testlabs, and iTech Labs are among the bodies whose certificates authorities commonly accept. Before you commission any test, confirm two things: the lab holds current accreditation, and your target regulator recognises its reports. A certificate from an unrecognised lab carries no weight.
What RNG certification costs across the licence project
The lab fee is only one line. Operators who budget for the test alone underestimate the RNG certification gaming licence spend, because the work starts before the lab clock does and continues after launch. The table below breaks the cost into the categories that actually appear on a project.
| Cost category | What it covers |
|---|---|
| Single game certification | A straightforward slot commonly runs from a few hundred to a few thousand euros per title |
| Platform RNG assessment | The core generator is usually priced separately from individual games; larger libraries cost more |
| Pre-submission engineering | Building audit logs, version locking, and deterministic replay before the lab reviews the build |
| Ongoing re-audit | Periodic system audits and monitoring the regulator requires to keep the approval |
| Recertification | A fresh assessment whenever a material change touches the RNG or the game logic |
Exact figures vary by lab, by the number of games, and by the complexity of each title. Because of that, treat the ranges above as planning inputs for the RNG certification gaming licence budget and confirm quotes for your specific library. Build the testing budget into your launch plan from the start, alongside the licence fees and corporate setup. Our page on how RNG testing works covers the assessment itself in more detail.
How to sequence RNG testing with your licence application
Timing decides whether certification helps or hurts your launch date. The regulator reaches a technical review stage during your application, and it will not grant final approval without the lab report. So the certificate has to land before that stage, which means booking the lab early. The table below shows realistic phase durations.
| Phase | Typical duration |
|---|---|
| Pre-submission engineering | Weeks to months, before the lab clock starts, depending on your build |
| RNG certification (single game) | 2 to 6 weeks once the lab holds a complete build |
| Full library and platform RNG | Several weeks to a few months, by library size |
| Regulator technical review | 4 to 12 weeks, depending on the authority and its queue |
These phases overlap in a well-run project, so the RNG certification gaming licence timeline is shorter than the sum of the parts. Still, first-time applicants underestimate the pre-submission work and the regulator feedback stage. If the build arrives without deterministic replay or clean logging, the lab returns it, and the clock effectively restarts. To keep the sequence predictable, we align the testing with your gaming licence acquisition so the certificates arrive before the technical review.
Liability and ongoing obligations after your licence goes live
A certificate is not a one-off clearance. It covers only the build and version named on it, so the RNG certification gaming licence relationship continues for as long as you operate. Three points catch operators after launch.
First, liability. The licensed operator answers to the regulator for the games it offers, even when a B2B supplier built and certified the RNG. If a certified generator later produces biased results or gets compromised, the authority looks to the licence holder. So set the responsibility split with your supplier in the contract, including who funds a re-test and who covers player remediation.
Second, ongoing audits. Regulators run periodic checks and monitor return to player over time. When a live game fails an audit, the authority can require you to pull that game, and repeat failures can put the wider licence at risk. Keeping the certificate current is part of your gaming licensing compliance obligations, not a separate project.
Third, transferring a certificate between labs. A report is tied to the lab that issued it and the standard it applied. Another regulator may accept that report, or it may require a fresh assessment from a lab it recognises. Confirm recognition before you assume a certificate carries across, because the answer changes by market. For the full set of technical rules a platform must meet, see the licensed gaming platform technical requirements.
Why RNG certification holds up a gaming licence
Most delays in the RNG certification gaming licence review trace to a short list of preventable faults. A generator that fails statistical randomness tests fails the certification outright. Game maths that does not match the published return to player fails too. Beyond those, the recurring causes are procedural rather than mathematical.
- An unstable build submitted before the code is frozen and version-locked
- An incomplete maths model, so the lab cannot verify the return to player
- Weak or exposed seeding, which is the most common way a generator fails
- RNG logic mixed into general game code instead of an isolated module
- No deterministic replay or clean audit logging for the lab to reproduce outcomes
- A certificate from a lab the target regulator does not recognise
The pattern behind these failures is usually sequence, not capability. Operators who build first and check the rules later find gaps that are expensive to close. So confirm the requirements for each target market before you commission or accept a platform. When your markets and model make the right route unclear, our guide to choosing a gaming platform provider is a useful starting point. Beyond that, the entropy design principles labs draw on are published in the NIST Random Bit Generation guidance.
Frequently asked questions
Is RNG certification required for a gaming licence?
In every regulated market, yes. Authorities such as the Malta Gaming Authority and the UK Gambling Commission will not grant final approval until an accredited laboratory certifies the random number generator. The certificate is one of the technical conditions the regulator relies on to issue and maintain the licence.
Who needs RNG certification, the operator or the game supplier?
The supplier that builds the games or the RNG holds the certificate. A B2C operator does not usually certify a generator itself. Instead, it must offer games whose RNG is already certified, and verify that evidence in its supplier agreements.
Does RNG certification cost extra on top of the licence fee?
Yes. Certification is a separate cost from the application and annual licence fees. A straightforward slot commonly runs from a few hundred to a few thousand euros, and the core platform RNG is usually priced on its own. Budget for pre-submission engineering and periodic re-audits as well.
Who is liable if a certified RNG fails after launch?
The licensed operator answers to the regulator for the games it offers, even when a supplier built the RNG. That is why the responsibility split, including who funds a re-test and covers player remediation, should sit in the supply contract. The certificate does not transfer regulatory accountability away from the licence holder.
Can I transfer an RNG certificate between testing labs?
A certificate is tied to the lab that issued it and the standard it applied. Another regulator may accept that report, or it may require a fresh assessment from a lab it recognises. Confirm recognition for each market before you assume the certificate carries across.
Does one RNG certificate cover every jurisdiction?
No. A certificate covers the named build and the standards applied for a specific market. A game certified for one authority may need changes or a separate assessment for another. Certification also does not replace the licence you need in each jurisdiction.
How long before the licence application should RNG testing start?
Start it early enough that the certificate lands before the regulator’s technical review. A single game takes two to six weeks once the lab holds a clean build, and larger libraries take longer. Add pre-submission engineering time, since the lab clock only starts once the build is frozen and documented.
What happens if a live game fails an ongoing RNG audit?
The regulator can require you to withdraw the game until it is fixed and re-certified. Repeated failures can put the wider licence at risk. Keeping certificates current and monitoring return to player are part of your post-launch compliance obligations.
Sequence your RNG certification with your licence application
DD Consultus maps your games and platform against the RNG certification gaming licence requirements for each target market. We confirm which labs your regulator recognises, coordinate the testing, and prepare the technical file the authority reviews. First, we set the standards that apply to your markets and model. Then we sequence the certification so the reports arrive before the regulator reaches technical review. Book a consultation to check your platform against the requirements before you commit to a build.
Phone: +356 99408536 | Email: contact@licencegaming.com