Last updated: 2026-06-29 • Author: Gambling Compliance Editor • Methodology: real test play, license and lab checks, sample withdrawals
Mia saw a big welcome deal. She made a small deposit and hit a good win on a slot. When she tried to cash out, support said she broke a bonus rule she had never seen. The site then asked for new papers two times. Days went by. No money.
Was the game “rigged”? Maybe not. But the terms and the way the site handled her win were not fair. Here is a simple way to spot both: fake games and bad rules.
Good testers act like a careful friend. They check the license in the public register. They click lab seals and read the certificate number. They save the Terms and the Bonus page as screenshots with dates. They make a small first cashout to time it. They talk to live chat and ask a simple hard question: “Where is your ADR or dispute body?” They keep notes.
Use the same flow. The table below shows what to check, how to do it fast, and what is normal vs not normal.
“Rigged” is a strong word. True rigging is rare on licensed sites. But there are other bad things that hurt you just as much. Some games can use fake software or clones outside any control. Some sites use unfair terms. Some push dark design tricks that make you click and deposit fast. You need to tell normal variance from clear abuse.
Normal variance means long downswings can happen even on fair games. Unfair terms are different. They block wins, delay cash, or change rules after you play. Learn to spot both.
| License / Regulator | Shows legal control and rules the site must follow | Open the license page and find the site in a public register by name or URL | Match on company name and domain; license is active | Logo on footer but no match in the register |
| Jurisdiction cross-check | Some rules are stronger than others | Search the licensed entities list (MGA) or use Curaçao license validation | Record shows the same legal entity as on the site | License holder is a different company with no link to the site |
| RNG / Testing lab | Confirms random results for games | Click the lab seal; use eCOGRA seal verification or the GLI Certified directory | Live certificate with site name, product list, and expiry | Static image; link goes nowhere or to a generic page |
| RTP disclosure | Shows long-term payback for a game | Open the game info page; look for RTP and date | Clear RTP within normal ranges for that genre | No RTP, or only a range with no value used on this site |
| Bonus terms | Stops “gotcha” rules from killing your win | Read wagering, max bet, game weights; look for vague power words | Wagering ≤ 35x; plain limits; no “void at our sole discretion” | “We may void any bonus or winnings at our discretion” |
| Cashout flow | Shows if you can get your money on time | Find payout times and KYC steps on the Payments or FAQ page | Fixed windows (e.g., 24–72h) and clear doc list | Endless “security review” after any win |
| Withdrawal limits | Big wins should not be split for months | Read daily/weekly caps; note VIP or game-source exceptions | Reasonable caps and faster limits for verified users | Tiny cap (e.g., $500/week) with no reason |
| ADR / Disputes | Gives you an independent place to complain | Look for a named ADR; UK sites list approved ADR providers | Clear ADR link; steps and timelines shown | “Support is final” with no ADR or regulator path |
| Game providers | Top studios add trust and audit trails | Check if well-known providers are named and link to them | Official provider list; games load with proper studio tags | Unknown studios; game files look off; broken icons |
| Complaint patterns | Shows real user pain across time | Scan forum threads; look for repeat claims and staff replies | Few, varied issues; staff fix them with proof | Many cases of frozen wins, same stock reply, no fix |
A license logo is not enough. Click it. Then verify in a public register that the company name and the site domain match. Look at status and the scope of games covered.
For EU/EEA style sites, check the Malta Gaming Authority’s licensed entities list. For Curaçao, use the official Curaçao license validation tool. Watch for old subs or shell firms. If the legal name is new to you, search it.
Lab seals must link to a live profile. If the eCOGRA or GLI badge is a dead image, treat that as a red flag. Each seal should show the product scope, the site, and an expiry date.
Labs test RNG. You can verify a site’s lab status by the eCOGRA seal verification page or the GLI Certified directory. RNG uses math and strong entropy. If you want to go deep, see NIST’s work on random bit generation.
RTP is the long-term payback of a game. It does not mean you will win today. The house edge explained piece is a good plain read. Low RTP is not “rigged” by itself. But if a site hides RTP, uses the lowest variant of a game, and never tells you, that is not fair.
Bonus terms often hide the real risk. Read the key parts: wagering, max bet while on bonus, game weights, time to play, and cashout caps. If a rule says the site may void your wins “at our sole discretion,” walk away.
For fair ads, the main rules must be easy to see. See this guide on significant terms in promotions. Also, see the UK’s CMA action on unfair terms for real cases where terms had to change.
One more tip: some sites ban “low risk” bets while on bonus but do not list what that means. That is not okay. The site must give clear, short lists of banned games or bets.
KYC (Know Your Customer) checks are normal. You may need to send an ID, a proof of address, or a card photo. What is not normal is asking for new docs again and again for no reason, or asking for odd papers not on the list.
Read the site’s terms and conditions or payments page for timelines and steps. If it says “payouts in 24–72 hours,” that is fine. If support keeps saying “another security review” after each win, that is a red flag.
Some think live dealer games are “fixed by the dealer.” That is a myth. Live games use strict tech rules, cameras, and logs. Reputable studios follow set test rules like those in technical standards for interactive gaming. The site still needs to pay you on time and honor wins. If they do not, the game being fair does not help.
Crypto can be fast. It can also hide who owns the site. If a crypto site has no clear license, no address, no ADR, and no lab seals, the risk is high. Check the license first. Then read the fee rules and the provider list. If they say “we can change any rule at any time,” do not deposit.
If you like to read policy, see the FATF virtual asset risks overview to learn why controls matter for crypto.
A single bad review can be noise. Many of the same type is a sign. Read how support responds. Do they fix issues with proof? Or do they paste the same lines? Can you see a clear path to a dispute body? UK-licensed sites must list approved ADR providers.
If talks fail, send your case to the right place. For Malta licenses, you can file a complaint with the MGA. In New Jersey, use the state regulator complaint form. Follow the steps and add screenshots and dates.
Independent hubs can do the legwork for you. They check licenses in public lists, click lab seals, read bonus fine print, and time cashouts with real tests. They keep screenshots and share simple results you can trust.
When you compare offers, look for a page that ranks welcome deals and also explains the rules in plain words. For example, this Spanish resource lists best casino bonuses and highlights key terms like wagering and max bet. Even if you do not read Spanish, the layout makes it easy to see the numbers and find the links to full terms. Use tools like this as a start, then do your own checks before you deposit.
No. Low RTP means the house edge is higher. It can still be a fair, tested game. The risk is higher for you. Know the RTP before you play.
Yes. A site can be licensed yet use harsh or vague rules. Read the bonus and cashout sections. If in doubt, skip the offer.
That can still be normal. RNG only means results are random. Long losing streaks can happen. Check the lab seal and RTP. Set a budget and stop when done.
Use the site’s ADR or the regulator for your region. UK sites list approved ADR providers. For MGA sites, you can file a complaint. For New Jersey, use the state regulator complaint form.
It depends on your country or state. Check your local laws and the casino’s license. No license and no clear country for disputes means high risk.
If you are in the US, call the national helpline (US). In the UK, see support and tools (UK). Set limits, take breaks, and seek help early.
Play on sites that pass basic checks. Start small. Keep proof. Use ADR when talks fail. If a deal looks too good to be true, it likely is. Your time is worth more than any bonus. Use the table here, keep your own notes, and trust simple checks over hype.
Disclaimer: Gambling laws vary by country and state. This guide is for general information. Always follow local rules. Play responsibly.