What Is an RNG in Online Casino Games? Fairness and Testing

An RNG, or random number generator, is hardware or software that produces number sequences used to determine outcomes in gambling products. In a regulated game, randomness is only one control: the game must map numbers to outcomes correctly, follow its published rules and pass the testing required in that market.

This guide is for players, operators, game studios, researchers and journalists who need to understand casino RNG claims. It explains generation, scaling, mapping, testing, game versions and certification evidence. It does not audit a named game, predict results or claim that one regulator's standard applies worldwide.

What an RNG does in an online casino game

The Gambling Commission's technical definitions describe a random number generator as hardware or software used to generate numbers with the intended property of statistical randomness. The raw number usually is not the visible result. The game applies scaling and mapping rules to translate that input into an outcome.

Consider a digital card game. An RNG may produce values across a much larger range than the 52 positions in a standard deck. Scaling converts the raw range into values the game can use, and mapping connects each value to a card or position. A slot uses its own mapping between RNG inputs, reel stops, symbols and pay-table results.

The visual animation can happen after the outcome is determined. That does not show whether the result was fair or unfair. The evidence lies in the RNG implementation, the mapping, the mathematical design, the game version and the testing performed on the production configuration.

RNG, mapping, RTP and volatility are separate concepts

A statistically sound RNG can still sit inside a faulty game if the scaling, mapping or pay table is implemented incorrectly. The reverse is also true: accurate artwork and rules do not prove that the generator is unpredictable. Good testing follows the chain from the number source to the result shown and settled in the player's account.

Software, hardware and pseudorandom generation

Casino standards can cover software and mechanical sources of randomness. Software systems commonly use deterministic methods that produce an output sequence from an initial state. These are often called pseudorandom number generators. The word pseudorandom does not by itself mean biased or unsuitable; implementation, unpredictability and testing determine whether a generator meets the relevant standard.

The US National Institute of Standards and Technology describes deterministic random bit generators in SP 800-90A Revision 1 as mechanisms that generate random bits using deterministic methods based on cryptographic algorithms. NIST's standard is not a gambling approval, but it provides a precise technical reference for the deterministic-generation concept.

A hardware or mechanical system has different physical controls. The British rules address mechanical RNGs and require, where applicable, construction that resists component degradation or manipulation. Live dealer roulette and shuffled cards also require controls, but they should not be described as software RNG products unless the actual outcome is generated that way.

What acceptably random means under British standards

The Gambling Commission's RTS 7 on random outcomes requires random number generation and game results to be acceptably random for the activities within its scope. The standard says the output should be demonstrably random to a high degree of confidence through generally accepted statistical tests and methods.

• Outputs should be distributed across the full range, while game outcomes should follow their expected or theoretical probabilities.
• The next output should be unpredictable without complete knowledge of the algorithm and seed value.
• Generators should not repeat the same output cycle or synchronise identical streams between two instances.
• Seeding, reseeding and scaling should not introduce predictability or distort the required qualities.
• Adaptive behaviour that changes outcome probabilities during play is not permitted under the cited British standard.

RTS 7 also requires games to operate according to the rules and prevailing payouts described to the customer. Random inputs must be used in the order received and cannot be discarded merely to change the result. An out-of-range value should produce a logged and investigated error rather than a hidden selection of a preferred outcome.

How an RNG and game are tested

The British testing procedure separates RNG testing from game testing. This matters because a generator can pass statistical checks while the game using it contains an implementation error.

1. Review the RNG documentation and understand where the generator sits in the gaming system.
2. Research the algorithm or hardware for known weaknesses relevant to the implementation.
3. Review source code against the documented design and version.
4. Run statistical tests on raw output and, where relevant, scaled values or shuffled-deck data.
5. Verify game design, mathematics, artwork, rules and theoretical RTP.
6. Test software in an environment representing intended live operation, including mapping and displayed outcomes.
7. Record non-compliance, retest corrections and document any limitation on the RNG's permitted use.

The test report should identify the test house and supervisor, licensee, test date, certificate reference, RNG description and version, digital signature, platform supplier and platform version. It should also state the scope, methods, limitations and results. A badge or certificate number without these connections cannot establish which production build was assessed.

Who is responsible for testing and release

Responsibility depends on the licence and supply chain. A game studio may develop the mathematics and code. An RGS or host may run the game engine. An operator may integrate the product and make it available to customers. A test house provides independent assessment where the regulator requires it.

The Commission's testing strategy summary says relevant new products must be adequately tested by an approved test house before release, with evidence supplied to the regulator. When a B2C licensee relies on a B2B supplier, the B2B can provide a games-register reference linking the test report, but the operator still has duties for the products it offers.

This is why the provider name alone is insufficient. Our casino game provider guide separates the studio, publisher, RGS, host and aggregator. The iGaming platform explainer shows how game sessions and money records connect to the operator's systems.

Why game and RNG versions matter

Certification applies to a defined implementation. A game can have multiple maths profiles, RTP settings, markets, clients or platform integrations. The same title and artwork can therefore appear in configurations that require separate evidence or market approval.

The British strategy distinguishes major changes from minor changes. Updates affecting fairness may require external retesting. If an RGS or RNG change can affect many games, the licensee and approved test house should choose a representative sample across game types and generations, then complete testing before the updated system launches.

A new device channel can also require testing of the interface and display even when the back-end maths has not changed. Evidence review should therefore capture the game identifier, version, RNG version, platform version, client channel, test date and permitted jurisdiction. A certificate for an earlier build does not automatically prove the current deployment.

Pre-release testing and live monitoring answer different questions

Pre-release testing asks whether the defined RNG and game implementation meet the applicable requirements before customers use them. Live monitoring asks whether production results and controls continue to behave as expected after launch. One does not replace the other.

A short player session is not a valid statistical audit. Random sequences naturally include clusters, long gaps and outcomes that feel unusual. A personal win or loss pattern cannot establish whether the generator, mapping or RTP implementation is compliant. Testing requires the appropriate dataset, expected distribution, method and version context.

The British games-register guidance requires relevant remote gambling and software licensees to submit game and RNG test results. The register links evidence to regulated release and major updates. It should still be read with the licence scope and production configuration rather than as a general endorsement of a brand.

What an RNG certificate does and does not prove

RNG certification does not prove that an operator is licensed, solvent or fair in every other part of the customer relationship. It does not verify withdrawals, bonuses, safer-gambling controls or the ownership of a public brand. Those claims need separate records.

How to verify an RNG fairness claim

Use a chain of matching evidence rather than relying on a logo:

1. Identify the game, supplier, RGS or host, version and configuration shown in the production client.
2. Identify the legal operator and verify its licence for the customer market and domain.
3. Find the regulator's technical standard and testing requirements for that product type.
4. Confirm that the test house is approved for the relevant standard and date.
5. Match the report or certificate to the RNG, game, platform, version, digital signature and permitted use.
6. Check whether later updates, new channels or configuration changes required retesting.
7. Record limitations, unresolved mismatches and the date on which the evidence was checked.

The legal side of the check starts with our gambling licence explainer and the practical guide to verifying an online gambling licence. A technical report tied to the wrong operator, market or game version should be recorded as a mismatch rather than stretched into a positive conclusion.

Common RNG misconceptions

Random does not mean that every short sequence looks evenly balanced. It means outcomes meet the defined statistical and unpredictability properties across suitable tests. A run of similar results can occur without proving that the generator has adapted to one player.

RNG also does not mean every casino game has the same chance of returning a prize. The pay table and mapping define outcome probabilities and payouts. Two games can use suitable random generation while having different theoretical returns or volatility profiles.

Changing the stake does not provide enough evidence to infer that the operator changed the RNG. The game specification may use stake-independent outcomes, different bet options or another configured model. Only the tested rules, maths, code and production evidence can answer how that game handles stake changes.

Frequently asked questions

What does RNG stand for in online casino games?

RNG stands for random number generator. It is hardware or software that produces numerical inputs used to determine game outcomes. The game then scales or maps those inputs to cards, reel symbols or other results. The RNG is one component of the wider game system.

Is a pseudorandom generator automatically unfair?

No. Pseudorandom describes deterministic generation from an initial state, often involving a seed. Suitability depends on the algorithm, unpredictability, seed or entropy controls, implementation and testing. A technical label alone cannot establish compliance or unfairness; the tested system and regulatory standard must be matched.

Does an RNG determine a game's RTP?

Not by itself. The RNG supplies numerical inputs. The game's scaling, mapping, probability model and pay table determine how often outcomes occur and what they pay. Testing should examine both the generator and the game implementation, including theoretical RTP and simulations where the regulator requires them.

Can a player test an RNG from a short session?

No reliable compliance conclusion can be drawn from a short personal session. Random sequences can contain streaks and gaps. A proper assessment needs the relevant output data, expected distribution, statistical method, game and RNG versions, implementation details and enough observations for the chosen test.

Who certifies online casino RNGs?

Independent test houses assess RNGs and games where a regulator's testing strategy requires it. The regulator defines which laboratories and procedures it accepts. Verify the laboratory's approval for the market, then match the report to the supplier, RNG, game, version, platform and test date.

The RNG research rule

An RNG claim is not complete until the number source, mapping, game maths and production version are connected. The strongest record names the operator, supplier, game, RNG, platform, jurisdiction, test house, report reference, digital signature, limitations and verification date.

This evidence sits inside the wider iGaming industry structure. The game provider may develop or host the product, while the operator makes it available to players. Record each role separately and do not convert a test certificate into a claim about activities the report did not assess.

Why this record matters

BETTIMES links this publication to structured company, market and source records. Material changes can therefore be checked and refreshed without detaching the article from its original evidence.