RNG Certifications and Testing Labs: Who Verifies Fairness?

Three small logos sit in the footer of a casino site. You see them after a big spin. One logo looks like a seal. One says “GLI.” One is the regulator. Do these marks prove your game is fair? Or are they just nice badges? This guide breaks down what they mean, who checks Random Number Generators (RNGs), and how you can verify a claim in under three minutes. No heavy jargon. Just clear steps and facts.

Jump to: Labs that certify RNGs • Which rules matter • How to verify a certificate fast

What “fairness” means for an RNG (in plain words)

An RNG drives the result of a slot spin, a dice roll, or a card shuffle in digital form. When we say “fair,” we mean three things:

Unpredictable: you cannot guess the next number.
Uniform: each valid number has the right chance to appear.
Independent: the next number does not depend on the last one.

This matters in different ways. In slots, the RNG picks stops for reels. In card games with a virtual shoe, it shuffles the deck. In live dealer hybrids, the RNG may pick a side bet or a wheel step. If any part is weak, the game can drift from its math plan.

You may also hear “provably fair.” That model lets you check each bet with a public seed or a public source. One such source is the NIST Randomness Beacon, which posts random values in time. In most licensed markets, though, games use lab-certified RNGs. Labs test the design and the output, and regulators check the lab.

Meet the labs that verify fairness

In iGaming, a small set of test houses review RNGs, game math, and systems. Names you will see include eCOGRA, Gaming Laboratories International (GLI), iTech Labs, BMM Testlabs, QUINEL, and SIQ. These labs are known across many regions. The key baseline is lab competence: accreditation to ISO/IEC 17025. That shows an external body has checked the lab’s methods and controls.

Here is a quick view of who tests what, where you can often find them, and how to verify:

eCOGRA	RNG testing, game testing, RTP checks, audit seals	Widely in UK/EU and other licensed markets	ISO/IEC 17025; local regulatory rules	Search or browse on ecogra.org (Seal or Reports sections)
Gaming Laboratories International (GLI)	RNG and game testing; systems; security; field audits	Global reach; many US states (e.g., NJ, NV)	GLI-11 (RNG); GLI-19 (interactive); ISO/IEC 17025	Standards and info at gaminglabs.com; regulators often host GLI approvals
iTech Labs	RNG and game testing; RTP and math review	Many EU and rest-of-world markets	ISO/IEC 17025; market rules	Certificate pages on itechlabs.com (per vendor/product)
BMM Testlabs	RNG, systems, security, and compliance	Global, incl. North America and EU	ISO/IEC 17025; jurisdiction standards	Overview and contacts at bmm.com; many approvals listed via regulators
QUINEL	RNG and game testing; platform reviews	Various EU and LatAm markets	ISO/IEC 17025; market rules	quinel.com (news/certifications sections)
SIQ	RNG, device, and game testing	EU markets	ISO/IEC 17025; local rules	siq.si (certification and services sections)

How an RNG gets certified (start to finish)

Here is the usual path, in simple steps:

Submission: The maker sends the RNG design, source code, build notes, and a test plan to the lab.
Design review: The lab checks the math model, the seed plan, and how the RNG gets entropy (random input). They look at period length and how outputs map to game results.
Stat tests: The lab runs large test sets on the RNG output. They use known suites (more below). They check for bias and patterns.
Code and build check: The lab checks that the code they saw is the code that ships. They may hash the build and note the version.
Scope and cert: The lab writes a report and, if all is fine, issues a certificate. It names the product, the version, the date, and the scope (RNG engine, or specific games).
After launch: There are change controls, re-tests on updates, and spot checks by regulators or labs.

This is the big idea: a single test run is not the end. Version control, sealed builds, and re-checks keep the RNG in line over time.

The rules and standards behind those seals

Many markets look to GLI frameworks for core guidance. GLI-11 sets out key RNG rules and tests. GLI-19 covers interactive systems that host the games. These sit on top of the lab’s own quality system under ISO/IEC 17025.

Stat checks rely on known tools. The NIST Statistical Test Suite looks for common signs of bias in bit streams. TestU01 adds deep tests like Crush and BigCrush. These suites do not “prove” true randomness. They show that no pattern was found above a set risk level.

One more note on lab quality: ISO/IEC 17025 means the lab’s methods are checked by an external body. It does not mean a game is fair by itself. It means the lab is competent to test it.

Rules change by place: check the jurisdiction

Each regulator sets its own mix of rules and accepted labs. In the UK, see the UK Gambling Commission technical standards. In Malta and much of the EU, the Malta Gaming Authority guides how games and systems are tested. In the US, state bodies lead. For example, the New Jersey Division of Gaming Enforcement and the Nevada Gaming Control Board list rules and handle approvals.

So, a logo is not enough. The certificate must match where you play. It must list the right product and version. If you play in State A, a cert for State B may not apply.

How to verify an RNG certificate in 3 minutes

Try this on the next casino you visit:

Find the seal: Scroll to the footer. Look for eCOGRA, GLI, iTech Labs, BMM, QUINEL, or SIQ. Click it. It should go to the lab’s site or to a public record page.
Check the domain: The page should be on the lab’s domain (for example, ecogra.org) or a known regulator domain. If the “certificate” is a PDF on the casino’s own domain, be careful.
Match the details: On the record, look for product name, version, scope, date, and market. These should match what the casino runs.
Cross-check lab status (optional): If you want to be sure the lab is accredited, use the ILAC MRA signatory search. In the UK, you can also check the UKAS accredited organisations search.

Here is a simple example of a red flag. The footer says “RNG Certified by Lab X.” You click through. The record shows “RNG Engine v2.8 — Certified 2022-03-05.” But the game’s about page says “Engine v3.1.” The dates do not match. This could be fine if v3.1 is a skin of v2.8 with no RNG change, but you need proof. If you cannot find it, treat it as a risk.

If you want a shortcut, our team keeps an updated list of brands where we check the lab and the certificate date before we list a bonus or a review. If you read Danish offers, you can start with our gratis spins casino page. We mark the lab name and the last seen date so you do not have to do this each time.

Edge cases and red flags to watch for

Non-clickable logos: A seal that is just an image, with no link, is weak.
Self-hosted “certificates” only: A PDF on the casino’s site with no lab link is not enough.
No version or date: A cert that does not list a version or a date is hard to trust.
No ISO/IEC 17025 scope: If a lab does not show its accreditation and scope, that is a red flag.
Vague “independent audit” claims: If there is no lab name, ask for it.

After launch: how operators keep it fair

Fairness is not “set and forget.” Good operators lock builds with hashes. They control code changes with tickets. They ship new versions only after tests. Many keep a copy of the exact build that is live. Labs and regulators can ask for it. Some markets also require periodic re-tests or field checks. Live dealer hybrids add more checks, like table camera views plus RNG rules for side games and shufflers.

Quick FAQ

Do all games in a casino share one RNG?
No. Some do, some do not. A platform may host one RNG service for many games. Others ship an RNG inside each game. The cert you read should say which case it is.

How often are RNGs re-tested?
It depends on the market and on changes. A major version change needs a re-test. Some places also require periodic audits or spot checks.

Can labs test RTP claims too?
Yes. Labs review math and do long runs to see if returns align with the design. RNG fairness and RTP are linked but not the same thing.

What is the difference between certification and accreditation?
A lab certifies a product. An external body accredits the lab (for example, under ISO/IEC 17025). Both matter.

Do regulators have their own standards?
Yes. Many use GLI docs as a base but add local rules. Always match the cert to your jurisdiction.

Short, practical checklist

Click the seal. Do not trust a logo by itself.
Check that the page is on a lab or regulator domain.
Match product, version, date, and market.
Optional: check lab accreditation via ILAC/UKAS.
If in doubt, pick a site with clear, current lab records.

Closing note

A seal is a signal. The real proof is in the record behind it and the rules that sit above it. When the lab is accredited, the cert lists the exact version you play, and the market rules match your location, you can trust the result of each spin or shuffle. Make the check a habit, or use a pre-vetted list, and play with more peace of mind.

Editorial note: We review and update this guide on a regular cycle. When regulators update rules or labs change public pages, we refresh links and examples.

Responsible play: Please play only where it is legal for you, and set clear limits. If you feel at risk, seek help in your region.