iGaming test labs – explained

Testing labs are a key part of the industry. And when everything works well, they go largely unnoticed. The main priority of a testing lab is to ensure safety, both for players and for casinos. Though their role is essential, it can sometimes take a scandal to remind us just how important a test lab’s work is.

The Absolute Poker scandal

Many might not remember Absolute Poker, but back in 2007, it had significant market share (around 5% globally). However, a cheating scandal changed everything. A small group of keen poker players on the site reckoned that another player, Greycat, had an unfair advantage. It was as though Greycat could see other players' hole cards. 

Looking at the way Greycat played, it was clear something was up – they almost never lost, even with terrible cards. The only way a player could make the calls they were was if they could see what they were playing against. 

The investigating players ran the numbers and the evidence was conclusive: Greycat was undoubtedly cheating. They pressured the top brass at Absolute Poker to admit there had been a security breach. And after a very long battle, they did, refunding losses to those who’d played against Greycat, to the tune of $1.6 million. It seemed ‘people power’ care of the internet had won, but not for long. 

Soon, a similar breach was discovered at sister site UltimateBet.com, but this had been going on longer, racking up profits (for the cheat) of some $20 million. An internal investigation found someone within the company had breached security to play poker while being able to see the hole cards of the other players. The Kahnawake Gaming Commission in Canada hit both Absolute Poker and UltimateBet.com with hefty fines ($500,000 and $1.5 million respectively). But was it sufficient?

The company had conducted no security searches when the businesses were acquired in 2006 and only conducted an internal review under huge pressure from angry players. They also never took the offending player to court. The Kahnawake Gaming Commission didn’t even know who owned the sites. Read more here. 

Benefits of testing labs

With the Absolute Poker scandal in mind, it becomes easier to see why testing labs have become so important. What may have once seemed like a new-ish, niche industry was growing rapidly – by just about every meaningful metric. 

The Absolute Poker scandal was far from the only case of impropriety that better testing and security could have prevented. However, the industry is becoming safer every day thanks to the work of testing labs. Here are just a few of the benefits they provide:

• Instil confidence in players
• Increase industry credibility
• Identify unscrupulous operators 
• Ensure fairness and transparency

How do test labs work?

Nobody can dispute the benefits brought by test labs, but how do they achieve them? Let’s look at how things work in the UK. This roadmap shows each step that an online casino must take to be granted (and maintain) a licence from the UK Gambling Commission.

• Licensing Laws Set: The UK Gambling Commission (UKGC) oversees the industry standards that operators must meet to receive their UKGC licence.
• Software Testing: The labs (BMM, eCOGRA, GLI et al) conduct tests on the software being used by online casinos to ensure it meets required UKGC standards. 
• Fairness Checks: These tests check for the use of random number generators (RNGs) to ensure fairness, confirm the advertised RTP of games, and keep up to date with any changes in game mechanics. 
• Periodical Reviews: With all boxes ticked, the casinos are allowed to operate subject to regular reviews (annually as a minimum, more frequent for those with a chequered compliance history). 
• Homepage Displays: Casinos licensed by the UKGC will always show this on their homepage. Some casinos also choose to show their fairness certifications from testing labs like eCOGRA and iTechLabs.

How does the fairness testing process work?

There are three key elements to fairness testing. Below is a brief overview of how each works.

Random number generator (RNG) testing

For almost all games (excluding live dealer games) a random number generator is used. Its purpose is to ensure that the cards dealt, dice rolled, or wheels spun are all decided at random. 

In order to test the RNG an algorithm analysis is conducted. This ensures the random number generator is, well, random. The results from the simulations should show no discernible pattern. If a pattern is spotted, the RNG isn’t working correctly. 

Return to player (RTP) testing

Slots players will be familiar with the term 'RTP'. It stands for Return to Player and refers to the percentage of their stake a player can expect to get back over an extended period of time (tens of thousands of spins). The RTP can be an important deciding factor in which slot game to play with many players looking for an RTP above 96%. 

According to the Gambling Commission:

“Average %RTP is generally measured over 10,000 or 100,000 games for compensated machines and more games than this for random machines, depending on their category.”

Some sites will advertise the RTP rate, others won’t, but either way, it has to be correct. Test labs check the RTP of all games straight from developers before they’re released. However, they also independently check them during their audits. 

To do this, the lab will conduct extensive playthroughs and calculate an average pay-out. If it matches the rate advertised then the game passes the test. 

Game mechanics testing

The final element of game testing revolves around game mechanics. Again, this is particularly prevalent in slots, as they often have multiple different features. However, tests also need to be run to ensure the user interface on live dealer games works correctly, as well as that the different bet options work properly on table games.

To do this, the lab conducts functional testing. Here, they verify that every element of the game works correctly. From correctly paying paylines to bonus rounds working as intended, this is all checked across all possible devices. 

How does security testing work?

As well as checking for fairness, test labs also check for security. There are five stages to a security test, as follows:

• Vulnerability Assessment: The site is assessed for potential weaknesses such as outdated software or misconfigurations in settings.
• Attack Attempts: With any weak spots identified, an ethical hacking team simulates cyberattacks. This penetration testing provides information on areas that need attention.
• Encryption Check: Using the ethical hacking team, the lab will try to gain access to player data and financial data. They’ll also check that encryption protocols are up to date.
• Compliance: With any weak areas identified and issues rectified, the last active step is checking that the site complies with required UKGC regulations. The lab will review the security policy and incident procedures of the company.
• Report: Finally a report is made giving recommendations for improvement. If the site passes the test with flying colours then certification is awarded.

Who are the main iGaming test labs?

There are a number of companies that carry out these tests, but below are four of the most widely used:

• eCOGRA: An internationally recognised testing agency located in London, offering independent accreditation for online casinos. 
• iTechLabs: A testing lab that specialises in the quality assurance and certification of casino games and software.
• BMM: The longest-standing game testing lab in the world, used on six continents.
• GLI: Globally recognised testing agency, giving the GLI mark to companies that pass their inspections.

Conclusion

While the presence of testing labs means that games sometimes take a little longer to make it to market, that’s really where the drawbacks begin and end. Fairness and security testing by iGaming test labs are essential to the functioning of a safe and fair gambling industry. Ensuring casinos are compliant means that players enjoy complete impartiality with every spin of the wheel or roll of the dice.