Surely, you’ve ever wondered who tests that random number generator in games. It is the random number generator and payout ratios that are essential for legitimate gaming. For example, the player can find the payouts on the casino’s website, but where there is a guarantee that they are correct.
Software developers such as Microgaming or NetEnt already have some responsibility for honest game programming, but in general, every game, casino, and even the developers themselves should be controlled by an independent third party. And at this moment, the auditors come on the scene.
There are some gambling auditors around the world. eCOGRA (eCommerce Online Gaming Regulation and Assurance) is probably the best known and most frequently used. This London-based audit firm was founded in 2003, and it focuses primarily on the gambling industry. Each casino that was audited also receive a “Safe and Fair Seal”.
Other well-known audit companies include Gaming Labs, which, in addition to testing programming and the code of ethics, also provides consulting services. And last but not least, the audit giant, one of the ten largest private companies in the world, Price Waterhouse Coopers.
How to Test a Random Number Generator
Software testing in a casino audit begins with a random number generator, which determines the result of all online casino games. The correct and legitimate functioning of the RNG is therefore essential for the player. The auditing company IGtech described the testing in 2 phases:
Testing of source code:
- Identification of RNG algorithm and its weaknesses
- Verification of the internal state of the RNG
- Verification of unpredictability and non-repeatability of RNG
- Verification of the use of random numbers, including change of values
RNG statistical testing
Several statistical methods can be used. The best known are the “DieHard” test or the Chi-square test. The specific analysis is selected by the test laboratory depending on the RNG system.
However, every auditor has its own and well-protected know-how to check the validity of the random number generator. Here is just an example of what a test procedure might look like.
Testing of the Payout
The second most frequently checked element is the average return to player. Players give enough credit to it. The auditor’s task is to confirm that the advertised payout for individual games is the same as the real payout. Auditors, again, use statistical analyses and their technological procedures.
Of course, the tech part of the audit does not end with just testing the RNG and the payouts. It also includes testing of game systems. For example, it is tested whether the casino can re-launch the game with all the necessary data within a specified time after the fall.
It also examines how the game stores information about the user and about the game itself. For example, how long the player played it, how much he/she bet and how much he won or lost. The emphasis is mainly on jackpots and above-average winnings. Jackpots may be a separate area of interest in some audits.
Online Casino Security Check
An essential part of every audit is checking how the casino is prepared for crises. As everyone can think of, they test how servers are protected against attacks and how well casinos protect players’ information. But that’s not all.
Casino employees are also tested in the areas of relevant training. The auditors check the legitimacy of access to the personal information of players by all employees, contractors and other third parties. The casino must also submit an emergency plan, which includes, among other things, how it will respond to unexpected situations in the media.
If a casino wants to be certified, it has to prove that it does not support dangerous gambling. For example, every online casino must create a responsible gaming page on its website, which must be accessible from every page. Most casinos place it on the bottom bar along with general information.
In addition to this information obligation, the casino must provide the possibility for the player to set limits:
- The number of bets
- The amount of loss
- Deposit amount
- Maximum time spent in online casino
The player should also be able to block some games himself, temporarily or entirely. Once he/she does so, the casino can no longer accept further bets or deposits from the player. Both of these options should be available from the responsible gaming site mentioned above.
What Is Not in Audits
As you can see, the audit of online casinos has a lot in common with the audit of a regular commercial company. However, what these independent companies do not offer is a financial audit, which is quite essential for other in-depth inspections. It is because most casino testers are technology companies or laboratories that cannot check accounting.