Key takeaways
- RNG testing online casino games confirms two things: the generator produces statistically random output, and each game pays out at its stated return to player.
- An accredited testing laboratory, not the regulator, runs the assessment and issues the certificate.
- Certification and licensing are separate. The licence authorises the business; the RNG certificate clears the games.
- Labs apply recognised statistical batteries, review the source code, and verify the entropy source behind the generator.
- A single game certification typically takes two to six weeks once the lab has the build and documentation.
- Certification covers fairness, not security or responsible gambling. You still carry those obligations separately.
What RNG testing online casino games involves for operators
A random number generator drives every outcome a player sees: the symbols on a slot reel, the card the dealer turns, the number a roulette wheel lands on. RNG testing online casino games checks that this generator produces unpredictable, evenly distributed results and that the game logic built on top of it returns the percentage the operator advertises. The testing laboratory runs two distinct evaluations. First, it measures randomness at the source. Then, it confirms the return to player and checks whether the game rules match the maths model the studio submitted.
The randomness check sits at the heart of the work. A laboratory feeds millions of generator outputs through recognised statistical batteries, looking for any pattern a player or an insider could predict. The fairness check then plays each game through millions of simulated rounds and compares the actual payout against the theoretical return to player. When both pass, the lab issues a certificate that names the game, the build version, and the standards applied. That certificate is the document a regulator wants to see.
How a casino RNG actually works
Two types of generator appear in online gaming, and the distinction matters when you commission a test.
Pseudo-random number generators
Most online casino games use a pseudo-random number generator, or PRNG. A PRNG runs a deterministic algorithm that an entropy source seeds, and it produces a sequence that passes as random for gaming purposes. The strength of a PRNG depends on the algorithm, the seed, and how well the implementation protects the seed from prediction. Random number generator testing focuses heavily on this seeding process, because a weak or exposed seed is the most common way a generator fails.
True random number generators
A true random number generator, or TRNG, draws its output from a physical entropy source rather than an algorithm. Hardware noise and similar physical phenomena feed the values. TRNGs appear less often in standard casino software but matter in live dealer and certain cryptographic contexts. NIST sets out the design principles and validation requirements for the entropy sources behind both types in its Random Bit Generation guidance, which testing laboratories draw on when they assess a generator.
Why regulators require RNG testing online casino games
Regulators require RNG testing online casino games because players cannot verify fairness themselves. A gambling authority licenses operators on the condition that the games behave honestly, and an independent certificate is the only practical proof. The Malta Gaming Authority, the UK Gambling Commission, ONJN in Romania, and the Isle of Man Gambling Supervision Commission all condition their approvals on test reports from accredited laboratories. No regulator takes the operator’s word for it.
The RNG compliance requirements protect the operator as much as the player. A certified generator gives you a defence if a player disputes an outcome, a payment provider questions your fairness, or a regulator audits your platform after launch. It also signals to banks and aggregators that your operation meets recognised standards. Read our guide on staying compliant after a gaming licence for how RNG certificates fit into your wider post-launch obligations.
How RNG testing online casino games works step by step
A testing laboratory follows a defined sequence. The exact steps vary by lab and jurisdiction, but the structure below covers what most operators experience.
- You submit the game build, the RNG documentation, the maths model, and the source code under a non-disclosure agreement.
- The lab reviews the source code and the entropy source to confirm the design follows recognised principles.
- The lab collects a large sample of generator output and runs it through statistical randomness batteries.
- The lab simulates millions of game rounds and compares the actual return to player against the theoretical figure.
- The lab checks the game rules, paytable, and any bonus logic against the submitted specification.
- The lab issues a certificate naming the game, the build version, and the standards applied, or it returns the build with the failures it found.
The statistical stage uses recognised test batteries. The table below lists the checks that appear most often in online casino game fairness testing and what each one detects.
| Test | What it checks |
|---|---|
| Frequency and distribution | Whether each possible outcome appears as often as probability predicts across a large sample. |
| Runs and gaps | Whether sequences of repeated or absent values fall within expected limits. |
| Serial correlation | Whether one output predicts the next, which would let a player anticipate results. |
| Entropy and seeding review | Whether the seed carries enough unpredictability and stays protected from exposure. |
| Return to player simulation | Whether the actual payout over millions of rounds matches the advertised return to player. |
RNG testing online casino games and licensing are separate steps
Your operating licence and your RNG certificate answer different questions. The licence answers whether your company may offer gambling in a jurisdiction. The certificate answers whether a specific game runs fair. One testing laboratory certifies the games; one gambling authority licenses the business. You arrange both, and you schedule the testing so the certificate lands before the regulator reaches the technical review stage of your application.
Timing matters here. Operators who book RNG testing online casino games too late delay their whole launch, because the regulator will not grant final approval without the lab report. Our breakdown of the gaming licence acquisition timeline shows where the technical review sits in the wider process, and our guide to choosing the right gaming licence explains how the testing burden changes across jurisdictions. If you supply games rather than operate them, our page on licensing for software providers covers the B2B side of certification.
RNG testing requirements by jurisdiction
Every regulated jurisdiction expects RNG testing online casino games, but the depth and the recognised standards differ. The table below summarises what to expect across common jurisdictions.
| Jurisdiction | Regulator | RNG testing expectation |
|---|---|---|
| Malta | Malta Gaming Authority | Certification from an approved laboratory before go-live, plus periodic system audits. |
| Romania | ONJN | Software certification from an ONJN-recognised testing body as a licence condition. |
| Isle of Man | Gambling Supervision Commission | Independent test reports for the RNG and games, with ongoing technical oversight. |
| Curacao | Curacao Gaming Authority | RNG certification expected under the reformed framework, scope confirmed at application. |
| Bulgaria | National Revenue Agency | Certified gaming software and RNG from an accredited laboratory before approval. |
Accreditation underpins all of this. Regulators recognise laboratories that hold accreditation to the international standard for testing competence, ISO/IEC 17025. When you select an RNG testing laboratory, confirm it holds that accreditation for the gaming scope and that your target regulator recognises its certificates. Verify both before you commission the work, since a certificate from an unrecognised lab carries no weight with the authority.
What RNG testing costs and how long it takes
Cost depends on the number of games, the complexity of each title, and the laboratory. A single straightforward slot certification usually runs from a few hundred to a few thousand euros. A full platform with a large game library and an integrated RNG costs more, and most labs price the core RNG assessment separately from individual game certifications. Build the testing budget into your launch costs from the start, alongside the licence fees and corporate setup.
Timing follows a similar pattern. Once the lab holds a complete build and documentation, a single game certification typically takes two to six weeks. A larger library or a custom RNG extends that. Book the laboratory early and submit a clean, well-documented build, because incomplete submissions trigger the same back-and-forth that slows a licence application. Our gaming licence compliance checklist sets out the documents to prepare so the technical stage runs without delay.
What RNG testing does not cover
An RNG certificate proves fairness. It does not prove security, and it does not discharge your other obligations. The certificate says nothing about how well your platform protects player data, how you handle anti-money laundering checks, or how your responsible gambling tools work. Those sit under separate audits and policies. A passed RNG test also covers only the build and version named on the certificate, so any material change to the generator or the game logic requires a fresh assessment.
Treat RNG certification as one component of a compliant launch, not the whole of it. You still need a licence, a banking relationship, AML controls, and a player protection framework around the certified games. Plan all of them together rather than in sequence, so the RNG certificate arrives in time for the regulator and the other pieces are ready alongside it.
Frequently asked questions
What does RNG testing online casino games actually prove?
It proves two things. First, the random number generator produces statistically random, unpredictable output. Second, each game pays out at its advertised return to player over millions of simulated rounds. A passed test results in a certificate that names the game, the build version, and the standards the laboratory applied.
Who carries out RNG certification for online casinos?
An independent testing laboratory carries out the work, not the regulator. The laboratory should hold accreditation to ISO/IEC 17025 for the gaming scope, and your target regulator must recognise its certificates. The regulator then relies on that certificate when it approves your platform.
Is RNG testing the same as getting a gaming licence?
No. The licence authorises your company to offer gambling in a jurisdiction. The RNG certificate confirms that a specific game runs fair. You arrange both, and most regulators will not grant a final licence approval until an accredited laboratory certifies the random number generator.
How long does RNG testing take?
A single game certification usually takes two to six weeks once the laboratory holds a complete build and the supporting documentation. A large game library or a custom RNG extends that. Submitting a clean, well-documented build keeps the assessment on schedule.
How much does RNG testing cost?
A straightforward slot certification typically runs from a few hundred to a few thousand euros. Most laboratories price the core RNG assessment separately from each game certification, so a full platform with a large library costs more. Build the figure into your launch budget alongside licence fees.
Do I need to retest a game after I change it?
Yes, if the change is material. A certificate covers only the build and version named on it, so any meaningful change to the random number generator, the maths model, or the game logic requires a fresh assessment. Minor cosmetic changes that do not touch the outcome logic usually do not.
What is the difference between a PRNG and a TRNG?
A pseudo-random number generator uses a deterministic algorithm that an entropy source seeds, and it drives most online casino software. A true random number generator draws output from a physical entropy source instead. RNG testing examines the seeding and entropy of whichever type your platform uses.
Does an RNG certificate cover security and responsible gambling?
No. The certificate covers game fairness only. Data security, anti-money laundering controls, and responsible gambling tools fall under separate audits and policies. You carry those obligations independently of the RNG certificate.
Planning a launch and need your RNG testing sequenced correctly with your licence application? DD Consultus coordinates game certification and licensing end to end from our Sliema office. Call +356 99408536 or email contact@licencegaming.com.