RNG certificates and test reports: reading the files casinos publish

Online casinos often show small badges in the footer: a regulator's logo, a testing lab's seal, a link to a "fairness certificate". Behind those badges sit real documents, usually PDF files, that say what was tested, by whom and when. Reading one takes a few minutes and tells you far more than the badge.
What an RNG is
A random number generator (RNG) is the software that decides outcomes in digital casino games: which card comes next, where the virtual reel stops. Regulated markets require the RNG and each game to be tested by an accredited laboratory before launch. Well-known labs include Gaming Laboratories International (GLI), BMM Testlabs, eCOGRA and iTech Labs; regulators include bodies such as the UK Gambling Commission and the Malta Gaming Authority.
What a certificate usually states
| Item | What to look for |
|---|---|
| Tested party | The operator or the game supplier named on the certificate |
| Scope | RNG only, specific games, or the whole platform |
| Standard | The technical standard or jurisdiction tested against |
| Date | When testing took place; very old dates deserve a question |
| Game versions | Often listed with version numbers or file hashes |
Hashes: the link to the file world
Labs and regulators often record the approved game software by its file hashes. A hash is a fingerprint of a file: if the code changes, the hash changes. That lets an auditor confirm that the version running live is the version that was certified. It is exactly the same tool our guide to checksums describes for driver downloads.
RTP reports
Some operators also publish return-to-player (RTP) figures per game or monthly payout reports. A theoretical RTP of, say, 96 percent describes the long-run average over a very large number of rounds. Over one evening, results swing widely in both directions; the figure tells you about the game's design, not about what will happen to your session.
Quick checks before you play
- Is the licence number shown, and does it appear on the regulator's public register?
- Does the certificate name this operator or the game's supplier?
- Is the date recent, and does it cover the games you actually play?
- Are RTP values shown in the game's help screen?
Badges are easy to copy; registers and dated documents are much harder to fake.