Start With the Certificate, Not the Claim
A site can print the word "fair" on its homepage and still leave you with no way to check the claim. The useful question is not whether a casino calls itself legitimate, but what evidence it publishes that you can verify yourself. Two different tools get confused constantly: RNG testing certificates and provably-fair verification. They answer different questions, and neither one answers the question of whether a site will pay you.
An RNG testing certificate comes from an independent laboratory that examines the random number generator behind a game. The certificate covers game mechanics: whether outcomes are produced by a process that behaves statistically as it should, without patterns a player or the operator could exploit. It does not cover the operator's financial conduct. A site with a valid RNG certificate can still be slow to pay, can still attach aggressive terms to a bonus, and can still be a clone of a real site using a stolen logo.
Provably fair is a different mechanism, common on crypto-based games. A hashed server seed is published before you play and revealed afterwards, so you can check that the outcome was not altered after your bet. That verifies the integrity of an individual round. It is not a licence, not an audit, and not a guarantee that the operator has the funds to pay a large withdrawal.
| What you are checking | What it verifies | What it does not verify |
|---|---|---|
| RNG testing certificate | Game outcomes behave statistically as expected | Solvency, payout speed, bonus fairness, ownership |
| Provably fair verification | A specific round was not altered after the bet | Licensing, auditing, solvency, future conduct |
| Terms and conditions | The rules the operator says it will apply | Whether the operator will honour them |
| Complaints and dispute channel | Where a problem can be escalated | That the escalation will resolve in your favour |
The certificate tells you something narrow and real. The absence of one tells you something too, but it does not by itself prove a site is a scam. Some operators publish certificates in a footer link; others bury them in a game's information panel. Where the certificate is missing, the question becomes why a site would not publish evidence it already paid for.
Read the Terms Like a Contract, Because They Are One
Most fairness questions are contract questions. A game can be perfectly random and the offer can still be structured so that almost no one ever withdraws. The terms page is where that structure lives, and a few clauses reliably signal how much friction sits between a win and a withdrawal.
Wagering requirements are the first thing to check. A multiplier states how much must be wagered before bonus-related funds can be withdrawn. As an example, a 30x requirement on a 50-unit bonus means 1,500 units must be wagered. The number alone is not the whole story: game weighting changes how much each wager counts. A slot spin might count fully toward the requirement while a blackjack hand counts at a fraction or not at all. The terms should state the weighting per game category.
Maximum-cashout caps matter as much as wagering. A no-deposit bonus or free spins offer can carry a cap that limits how much of the resulting balance can ever become withdrawable, regardless of how the playthrough goes. Free spins winnings are commonly credited as bonus funds subject to wagering requirements rather than as withdrawable cash. Read the cap before you play, not after you win.
Expiry windows are the third clause to check. Bonus funds and free spins carry time limits, and a short window can make a high wagering requirement practically impossible to complete. The operator states these windows on the promotion page or in the bonus terms. If the window is not stated, that absence is itself a signal.
What a Working Dispute Path Looks Like
A functioning complaints path has visible stages. First, the operator should publish a complaints or support channel with a stated response window. Second, there should be an escalation step beyond the first support agent, whether an internal review team or an external dispute body. Third, the operator should state which authority or scheme, if any, oversees the dispute process where you are. You are looking for the path, not a promise of outcome.
Where a site lists no complaints channel, or lists one that routes every query back to the same chat window, the practical question is what happens when a withdrawal is held. The answer is that you have fewer places to take the problem. That does not make the site a scam by itself, but it removes the main leverage a player has.
When you contact support about a dispute, keep a record of what you asked and what was answered. A site that resolves a complaint in writing is behaving differently from one that only answers by phone and leaves no trace. The written record is what you would need if the dispute ever moved to a third party.
Spotting a Clone Before You Deposit
Phishing and cloned sites are a separate risk from a poorly run operator. A clone copies the look of a real site, often with a domain name one character off, and collects deposits and login details from players who do not notice the difference.
The checks are concrete. The domain name is the first one: look at the address bar, not the logo. A clone may use a hyphen, a different top-level domain, or a letter substitution that passes a quick glance. The second check is the padlock and certificate details in the browser; a clone can have a padlock, so the padlock alone proves nothing, but the certificate should match the domain you intended to visit. The third check is how you arrived: a link in an unsolicited message is a weaker starting point than a domain you typed yourself or had bookmarked.
Deposit methods are another signal. A clone often pushes payment to a wallet address or account name that does not match the operator's published details. On-chain transfers are irreversible once confirmed, require the correct network to be selected, and settle according to network confirmation times and fees rather than the operator's banking hours. Before you send anything, compare the receiving address against the one shown in the cashier of the site you intended to use, not the one in the message that brought you there.
What Changes Under Your Control
None of these checks changes the mathematics of the games. Return to Player is a theoretical percentage of total wagered money a game returns to players over a very large number of spins or hands. It is a long-run statistical average, not a per-session guarantee. House edge is the mathematical advantage the operator holds on a given game, expressed as a percentage of each wager. House edge and RTP are complements: they sum to 100% for the same game. Volatility describes how payouts are distributed over time: high volatility means rarer but larger payouts, low volatility means more frequent but smaller ones. Volatility does not change a game's RTP.
What you control is the selection of games and bets, the speed of play, the session length, and the amount you risk. Different bets on the same table carry materially different house edges. A European roulette wheel has 37 pockets with a single zero; an American wheel has 38 with a single and double zero. The extra pocket increases the house edge on the American layout. Choosing one wheel over the other is a choice that changes the expected rate of loss, not a way to win.
No betting pattern changes the built-in edge of a negative-expectation game. Progression systems, including doubling after losses, redistribute outcomes rather than remove the edge. A long winning session is variance, not evidence that a site is rigged in your favour, and a long losing session is not evidence that it is rigged against you. The certificate and the terms are where fairness questions get answered; the game results are where variance does.
FAQ
Does an RNG certificate mean a casino site is safe to use?
It means the game mechanics were tested by an independent laboratory and behaved statistically as expected. It does not cover the operator's financial conduct, payout behaviour, bonus terms, or ownership. Treat it as one check among several, not a safety verdict.
Can provably fair verification replace a licence or audit?
No. Provably fair verifies that a specific round was not altered after your bet was placed. It does not establish that the operator is licensed, solvent, or subject to any external dispute process. A provably fair game can still sit on a site with aggressive withdrawal terms.
What should I do if a casino site withholds a withdrawal?
First check the terms you accepted: wagering requirements, game weighting, maximum-cashout caps, and expiry windows are the usual reasons a withdrawal is held. If you believe the terms were met, use the site's published complaints channel and keep a written record. Where the site lists an external dispute body or authority, that is the escalation path. This article does not decide the status of any named operator; the applicable authority and the operator's own terms carry the answer.
If you or someone you know is struggling with gambling, help is available. Contact the National Problem Gambling Helpline at the helpline printed in the footer below for free, confidential support, 24/7.
Play responsibly
Gambling should be treated as paid entertainment, never as a way to earn income or recover losses. 1-800-MY-RESET (1-800-697-3738)
18+ or 21+ depending on where you are; follow the minimum age that applies to you.
This article is general information about how these mechanics work. It is not legal advice and not a recommendation to gamble or to use any particular operator. Availability and legality differ by jurisdiction — check the rules that apply where you are.