Skip to content

Who Audits Slot RTP? eCOGRA, iTech Labs and GLI Compared

Three labs carry the industry: eCOGRA certifies operator conduct and mediates disputes, iTech Labs verifies RNGs and maths models, GLI writes the standards regulators require. What each seal proves, what none of them prove, and the three-legged check that reads them correctly.

CryptoCasinoi Editorial Team
CryptoCasinoi Editorial Team
Editorial Team
01 Aug 2026
6 min read
1,128 words

"Independently audited" appears in every casino footer and means somewhere between everything and nothing, depending entirely on who audited what. The three names that carry actual weight (eCOGRA, iTech Labs, GLI) do different jobs that players routinely conflate, and the conflation is exactly what dishonest operators exploit. Here's who checks what, and how to read the seals like someone who knows.

The three labs and their actual jobs

eCOGRA (est. 2003, London) is the most player-facing of the three: its historical "Safe and Fair" programme and current ORCA-era seals certify operator conduct: game fairness on the floor, responsible-gambling implementation, and payout behaviour, alongside published percentage-payout reports for sealed operators and an ADR (dispute mediation) function that players can actually invoke. When our methodology notes an operator posting monthly eCOGRA RTP reports (Cinoslots does, a practice we score well), that's this: floor-level verification that the games as deployed return what they claim.

iTech Labs (est. 2004, Melbourne) is the certification workhorse of the provider layer: RNG evaluations (statistical testing of the random number generation), maths-model verification (does the game return its published RTP over simulated billions of rounds), and ongoing compliance checks. The certificates on a studio's game sheet (the Pragmatic/Hacksaw/NetEnt paperwork behind the titles in our RTP list) very often carry iTech's name. When we say a slot's RNG "can't be tuned per player", iTech-class certification is the evidence chain.

GLI (Gaming Laboratories International, est. 1989, New Jersey) operates one layer up again: it writes the standards (GLI-11 for gaming devices, GLI-19 for interactive gaming systems) that regulators worldwide adopt as technical requirements, and runs the largest testing operation implementing them. When a licensing regime (post-LOK Curaçao included) requires certified RNG, "certified" operationally means "tested against GLI-19 or equivalent by an approved lab". GLI is why the same technical bar applies across dozens of jurisdictions that never coordinated directly.

The layering matters: iTech/GLI certify the game as shipped by the studio; eCOGRA-class programmes certify the operator as running; the regulator's licence requires both. Three different failure points, three different checks.

What a certificate does not prove

The gap between "certified game" and "safe bet" is where players get hurt, so itemise it:

Not the build. Certification covers each RTP build a studio ships, including the reduced ones: a 94.5% Gates of Olympus is exactly as certified as the 96.5%. The certificate proves the maths is honest as labelled; the paytable tells you which label your casino licensed. Two different checks, always.

Not the operator's cashier. A floor full of certified games at an operator that stalls withdrawals is a museum of honest maths behind a locked exit. Certification says nothing about payout behaviour, which is why we time withdrawals instead of reading seals.

Not the seal itself. Footer badges are images, and blacklist-grade operators paste them freely: fabricated seals sit beside fabricated licences in the standard scam stack. Genuine seals link: eCOGRA seals click through to a verification page naming the operator; studio certificates are verifiable through the labs. An unclickable seal is wallpaper.

Not the uncertified games beside it. Mixed floors exist: certified provider slots next to in-house games with no certification and no provably-fair scheme. The certificate covers what it names, nothing adjacent.

Reading an operator like an auditor

The three-legged check, two minutes total: (1) Licence on the regulator's register (the OGL walkthrough). (2) Certification chain: click the footer seals, confirm they resolve to verification pages naming this operator; spot-check a flagship game's paytable for its build and the studio's lab paperwork if you're thorough. (3) Measured behaviour: someone's stopwatch on actual withdrawals: ours is public, 2,127 timed payouts across the ranked set, precisely because legs one and two can both be genuine at an operator whose cashier still crawls.

Every operator on our list passes all three; most of the blacklist fails two. The zero-of-three operators (no verifiable licence, wallpaper seals, no payout evidence: the standard Telegram-casino profile) aren't gambling products at all; they're counterparty risk with reels painted on.

What does eCOGRA certification mean?

Operator-level assurance: game fairness as deployed, responsible-gambling standards, payout-percentage reporting, plus a dispute-mediation channel players can invoke. Genuine eCOGRA seals click through to a verification page naming the operator; an unclickable badge proves nothing.

What's the difference between iTech Labs and GLI?

iTech Labs is a certification lab focused on RNG and maths-model verification for game providers. GLI both writes the technical standards regulators adopt (GLI-19 for online gaming) and tests against them. In practice iTech certifies many of the games; GLI defines what "certified" must mean for many licences.

Can a certified slot still be unfair?

The maths as shipped can't be quietly altered, but three legitimate gaps remain: reduced-RTP builds are certified too (check the paytable), certification doesn't cover the operator's payment behaviour, and fake seals exist. Certificates are one leg of verification, not the whole animal.

How do I verify a casino's certification is real?

Click the seal: genuine eCOGRA/lab seals resolve to verification pages naming the operator. For game-level certification, studios publish lab certificates for their portfolios. If footer badges are static images with no target, treat them as decoration and the operator accordingly.

Do crypto casino originals have eCOGRA certification?

Usually not: in-house originals typically rely on provably-fair commit-reveal schemes (player-verifiable per round) instead of lab certification. That's a legitimate alternative assurance model when implemented properly, and a red flag when a game offers neither seeds nor certificates.

The verdict

The labs are real, the work is real, and the seals mean exactly what they cover: honest maths at the layer named. Read them precisely: iTech/GLI for the game, eCOGRA-class programmes for the floor, the register for the licence, and a stopwatch for the money. Operators who pass all four aren't hard to find: we publish eight of them, with the receipts the seals don't carry.


Researched and written by the CryptoCasinoi Editorial Team under methodology v3.3. Certification-chain checks from the 2026 audit cycle. No compensation from any laboratory or operator named. Affiliate relationships disclosed here.

CryptoCasinoi Editorial Team
ABOUT THE AUTHOR

CryptoCasinoi Editorial Team

Editorial Team

Editorial work on CryptoCasinoi (crypto casino reviews, category rankings, methodology updates and blog posts) is attributed to the in-house CryptoCasinoi Editorial Team — the staff of CryptoCasinoi Media Ltd. We do not currently publish individual author bylines while we transition to a verifiable contributor model during 2026. The editorial process — testing, fact-checking, sign-off, and 30-day post-publication re-audit — is described on the methodology page.

Editorial standards · YMYL fact-checking · withdrawal-speed auditing

Crypto casino site briefing

Get every crypto casino site audit before the ranking moves.

One short email when we re-test a crypto casino site, when the Trust Index drops on a brand, or when a regulator publishes a public-disclosure update worth knowing. Zero ad-copy. Zero affiliate spam. Unsubscribe in one click.

  • Weekly recap: new disputes, withdrawal-time regressions, fresh license updates.
  • Bonus alerts re-priced by our wagering-math model, never the headline number.
  • The raw spreadsheet, when we publish a methodology revision (E-E-A-T receipts).
What would you like to hear about?

No advertising. No spam. Two emails per month, maximum. GDPR/CCPA compliant — we ask consent every time and delete on request within 48 hours.