Game Certification
Game certification is independent lab testing confirming that games, RNGs and gaming systems meet a regulator's technical standards before and during live operation.
What it means
Certification is testing by an accredited independent laboratory against a defined technical standard, evidenced in a report a regulator accepts. It splits into three jobs that operators routinely conflate: game and RNG testing, confirming randomness is sound and each game's live RTP matches its declared maths; system or platform certification, covering player account management, wallets, transaction logging, bonusing and reporting; and information security auditing, usually benchmarked to ISO/IEC 27001.
The recognised labs are a short list — Gaming Laboratories International, BMM Testlabs, eCOGRA, iTech Labs, Quinel, Trisigma, Gaming Associates — and accreditation is never a global property. A lab is accredited by a specific regulator, for a specific scope. GLI's published standards are widely referenced: GLI-19 for interactive gaming systems, GLI-33 for event wagering, GLI-11 for gaming devices.
Why it matters for operators
Certification is a launch dependency that looks like someone else's job until it lands on the critical path. A platform vendor's existing certificate may cover a different jurisdiction, an older release, or a game set that isn't yours. Regulators differ structurally: the UK runs approved test houses with a major/minor change model, an annual games testing audit and live RTP monitoring; Malta works through approved Audit Service Providers doing a systems audit at onboarding and compliance audits thereafter; Brazil requires certification by an SPA-recognised lab with annual revalidation.
It's also recurring rather than one-off. Annual audits, revalidations and re-testing triggered by major platform changes make certification an operating expense, and lab capacity is finite — booking a slot months ahead costs nothing, needing one in three weeks costs everything.
Example
An operator's platform vendor holds a GLI-19 certificate for one market. Entering a second market, the regulator requires supplementary testing against its own standard, and the vendor's next major release resets the certification status mid-project — two dependencies that were never in the launch plan.