How to Check RNG Fairness Audits Like eCOGRA and GLI

Check the license first: MGA, PAGCOR, Curacao and Anjouan

Every casino page you open will tell you the same thing. Games run on certified RNG and RTP systems¹. Slots use certified random number generators that are regularly tested and audited by third-party agencies². A specific slot is "developed by Pragmatic Play using certified RNG technology for fair gameplay"³. Another operator says all its games are provably fair and use RNG algorithms⁴. Another says all games use certified RNGs with systems audited for fairness⁵. A baccarat table at a major crypto casino says it uses provably fair technology and RNGs⁶.

None of that is checkable from the page. What is checkable is who licenses the operator, because a regulator keeps a register and a license number is a fact you can look up.

So the order is: license first, audit claim second. If the license does not exist, the audit claim is decoration.

Malta (MGA). An MGA license carries real obligations. Licensees must prove financial stability every single year, and player funds are kept separate from operational funds⁷. That separation matters more to you than any RNG badge, because it is the thing that decides whether your balance still exists if the operator fails. You can check an MGA license on the regulator's own register, and you can read more about what the license covers on our Malta Gaming Authority page.

PAGCOR (Philippines). PAGCOR licenses and supervises gaming venues and the service providers behind online play. Its rules set the age floor, the banned-person checks and the KYC deadlines that apply to players³. If a site claims PAGCOR licensing, the claim is checkable against PAGCOR's own records. Our PAGCOR Entertainment City licensees page lists who holds what.

Curacao. A Curacao eGaming license is common among crypto casinos. One operator describes itself plainly as "a provably fair casino with the Curacao eGaming license"⁸. Curacao licenses the operator; it does not make the site legal where you live. That distinction is the one people get wrong most often. See The Curacao Gaming Authority and How to Verify a Curacao Gambling License.

Anjouan. Anjouan issues licenses that can be validated on a public verification page. That is what a real check looks like: a status, a company name, a license number, a date. If a site shows an Anjouan seal but the validation page returns nothing, the seal is not evidence. See Anjouan Gaming Licenses and How to Verify an Anjouan Gaming License.

A quick way to keep the two questions apart:

If you want the general method rather than a country-by-country walkthrough, our How to Check if a Casino, Betting Site or Lottery Is Licensed page covers it step by step, and Public Gambling License Registers tells you where each regulator publishes its list.

Unauthorized URLs: what MGA warning notices cover

The Malta Gaming Authority publishes notices naming websites it has no connection with. When it names a site, it is saying the operator's claim of a Maltese license is false and misleading. If a casino you are considering appears on one of those lists, treat the license claim as untrue and look elsewhere.

Read that pattern carefully. These are not sites that lost a license. They are sites that never had one and said they did. The MGA's notices exist precisely because a license claim is the easiest thing in this industry to fake, and the cheapest thing for you to check.

If a site you are looking at displays an MGA logo, do not trust the logo. Go to the MGA's own site, find the register, and search the company name. If the company is not there, or if the site appears in a warning notice, you have your answer. Our Websites That Falsely Claim an MGA Licence page collects the pattern, and Fake Gambling License Claims explains cloned seals and copied license numbers.

One more thing worth knowing about the MGA specifically: it sets real requirements on the operators it licenses. An MGA licensee has to prove financial stability every single year, and player funds are kept separate from operational funds⁷. None of that changes how you check a license, but it tells you what a genuine MGA license actually commits the operator to.

Licenses that have been revoked or suspended

A license that existed last year is not a license today. Regulators revoke and suspend, and the site often keeps the old badge up.

Revocations and suspensions are not only a European story. Regulators in several markets have pulled licenses from operators that failed to meet conditions, and when that happens the site usually keeps trading while players find out the hard way, through delayed withdrawals and complaint routes that go quiet. If you are looking at a site whose license you cannot confirm as current, that context is worth having.

Curacao has had its own turbulence at the licensing end. Disputes between license holders, sub-licensees and the regulator are not rare, and they tend to reach players as payment delays and closed complaint routes. Before you deposit, check that the license named on the site is current and matches the company you are actually dealing with.

The practical habit is simple. Check the license status, not just the license. A register entry that says suspended, revoked or not active is a different thing from an active one, and our What Happens When a Gambling License Is Suspended or Revoked page explains what players can and cannot do at that point. If a site is still trading on a dead license, that is the moment to stop depositing, not the moment to ask for a withdrawal.

Player-side rules in the Philippines: age, KYC and excluded groups

If you are playing from the Philippines, the rules that apply to you are set out clearly, and they are stricter than most people assume.

Age. The legal gambling age is 21 or older⁵. PAGCOR's venue rules bar persons under twenty-one and students of any school, college or university in the Philippines from entering, staying or playing³. The same floor appears in the payment rules, which require an eligible account owner to be at least 21 years old¹¹, and in research on the Philippine online gambling market, which treats users as at least 21¹². You will find international sites that accept Filipino players at 18, usually European-based ones, but Filipinos must still respect their own country's legal gambling age of 21⁵. Under-21s are also barred from buying betting tickets¹³.

Who else is barred. Government officials connected directly with the operation of the Government or any of its agencies, members of the Armed Forces of the Philippines including the Army, Navy, Air Force and the Philippine National Police, persons under 21 or students, banned individuals in the National Database of Restricted Persons, and unregistered players shall not be allowed entry, stay or play at any gaming venue³. Banning orders apply nationwide and may be a self-exclusion, a family exclusion or one emanating from a licensee³.

KYC. Only persons 21 and above, and not among the banned personalities under Memorandum Circular No. 6 series of 2016 of the Office of the President, may register¹⁴. Licensed operators run systems capable of identifying banned players to prohibit registration and access to play, in line with PAGCOR's National Database of Restricted Persons manual¹⁴. In practice, many licensed casinos require KYC before withdrawals or before you can access certain account features, typically a valid government-issued ID and in some cases a selfie¹⁵.

The deadline. Full KYC and identification verification must be done before your first withdrawal or cash-out request, or within seven days from registration or sign-up, whichever comes first⁴. If something is missing, the registered player gets an additional seven days from notification to complete the requirements, and failure means automatic forfeiture of the funds in favor of the Government⁴. That is not a soft deadline. Seven days from notification, then the money is gone.

Accepted IDs. The list used for PCSO's e-Lotto is a good guide to what counts: PhilID or ePhilID, SSS card, GSIS card, UMID card, LTO driver's license, PRC ID, PhilHealth ID, TIN ID, Postal ID, Philippine passport, OWWA ID, COMELEC voter's ID or voter's certificate, IBP ID, Senior Citizen ID, Person with Disability ID, Alien Certificate of Registration ID card or DOLE work permit for foreign nationals, NBI clearance, PNP clearance, seaman's book, and government office and GOCC ID¹⁶.

Offshore play. Filipino residents cannot join local online casino sites, but they are allowed to frequent offshore-based casinos, and players are not fined for joining offshore operators⁵. You are free to place bets across international online casinos that accept players from the Philippines⁵. Offshore sites charge no entry fees and access is free¹⁷. Identity must be verified through KYC before any withdrawal request¹⁷. Transactions with digital currencies are completely legal in the Philippines⁵, and there are 646 casinos found accepting players from the Philippines that offer Bitcoin⁵.

Self-exclusion. The self-exclusion schemes with published step-by-step processes are Singapore's, run by the National Council on Problem Gambling. Individuals may apply to exclude themselves from one or more gambling activities in Singapore, covering the two casinos, jackpot machine rooms at private clubs, and Singapore Pools online betting¹⁸. The exclusion blocks you from casinos, Singapore Pools online betting, and jackpot machine rooms at private clubs²⁰. Under section 31(3) of the Gambling Control Act, an excluded person must not engage in any gambling in or from Singapore in contravention of any gambling ban²¹. If you are in the Philippines and want to stop, the route is a request to the operator or to PAGCOR rather than a published national form.

Tax. A final tax of 20 percent applies to prizes and other winnings from sources within the Philippines, except prizes of ₱10,000 or less and Philippine Charity Sweepstakes and Lotto winnings²².

What a fairness audit does not tell you

This is the part most guides skip, and it is the part that decides whether you get paid.

An RNG audit answers one narrow question: does the game produce outcomes you could not predict or influence? That is it. It says nothing about whether the operator will process your withdrawal, whether your funds are held separately, whether a complaint route exists, or whether the license is real.

Take the strongest claim you will see. One operator states that every shuffle follows a strict process and cannot be altered by outside forces, including staff, administrators or any other users²³. That is a genuine and meaningful statement about the shuffle. It is not a statement about the operator's solvency, its withdrawal times, or its willingness to answer a complaint.

Here is what a fairness audit does not cover:

• Whether you get paid. Payment behavior is a licensing and financial question, not a maths question.
• Whether your funds are protected. Fund separation is an MGA-style requirement⁷, not an RNG one.
• Whether the license is genuine. That is a register check, and warning notices exist because so many claims are false⁹.
• Whether you are eligible. Age, banned-person status and KYC deadlines are set by the regulator³.
• Whether the operator will still be there. Licence status changes, and revocations happen at scale²⁴.

So when you see a certification badge, treat it as one line of evidence among several, and the least checkable one. The checkable lines are the license number, the register entry, the status, and the regulator's warning list. If those four come back clean, the RNG claim is plausible. If they do not, the RNG claim does not matter.

If you want to go further, our Risks of Playing on Unlicensed Gambling Sites page covers what actually goes wrong, and What Licensed Gambling Operators Must Do to Protect Players sets out the obligations that come with a real license. For complaints, start with How to Complain to a Gambling Regulator, and if the regulator cannot help, Gambling ADR explains independent dispute resolution.