Slot certification: what a test lab certificate attests and what it does not

What is slot certification?

Slot certification is an independent check of a game before it reaches players. A test lab examines the game's random number generator, its maths and its software against a written set of requirements. If the game passes, the lab records the result in a report or certificate for that game.

The randomness side of the work is explained in how random number generators work in slots. This guide is about the certificate itself: who issues it, what it covers and what Kenya's rules ask for.

GLI says it certifies gaming products on the basis of its laboratories' testing, inspection and compliance determinations. It tests products for conformity with its own GLI Standards and with the requirements of individual jurisdictions.

What do GLI, BMM Testlabs and iTech Labs say they test?

Each lab sets out its scope on its own website. The table summarises what each one says about the parts that matter for slots.

BMM states that jurisdictional requirements drive its testing procedures. So the requirements behind a certificate depend on the market the game was tested for.

What goes into a lab submission?

A certificate is only as good as the material behind it. BMM publishes the list of items it wants with a game's maths, and the list shows how much of the game a lab sees.

It starts with the game rules and mechanics from start to finish, the source code and build procedure for the maths simulations, and spreadsheets with their formulas. It goes on to the hits and probabilities of each paying prize in each game state, simulation statistics such as averages and standard deviation, PAR sheets and a flow chart of how play moves between states.

Labs also publish rules for the certificates and marks they issue. GLI points to its Product Certification Scheme, PC-QS-011, for its Gaming Labs Certified mark, and says that document covers its complaints and appeals process. BMM publishes its own Product Certification Scheme and a document on its Certified Mark.

What does a slot certificate attest?

A certificate ties a test result to one item. It covers the game or RNG version the lab received, measured against the standard or jurisdiction requirements chosen for that test. For a slot, the core findings are that the RNG output is random and unbiased, the game follows its rules, and the theoretical RTP matches the maths model.

The configuration matters as much as the maths. BMM lists the production game configuration among the items it validates against the maths model, so the settings that will actually run are part of the check. The RTP figure and what it measures are covered in return to player in slots.

What does a certificate not attest?

A certificate is narrow by design. It does not show any of the following.

• That the website offering the game holds a Kenyan licence. That is a separate check, set out in whether online slots are legal in Kenya.
• That you will receive the RTP in a session. RTP is a theoretical average over a very large number of plays.
• That a game changed after testing still matches the tested version. Kenya handles this through notification and re-testing rules, described below.
• That streaks, hot machines or cold machines exist. The guide to slot myths and timing explains why a tested RNG has no memory.
• How an operator handles deposits, withdrawals or complaints. Those duties sit in the Gambling Control Act, 2025 and its Regulations.

What do Kenya's rules require for testing?

Section 28(2)(l) of the Gambling Control Act, 2025 lists gambling equipment testing among the activities the Authority licenses. Section 2 defines a testing agent as a person licensed under the Act to test and calibrate gambling machines, equipment or devices. Under r.14 of the Gambling Control (Licensing) Regulations, 2026 (L.N. 111), a testing service applies on Form 11.

Form 11 asks a lab to tick its scope from five options: RNG evaluation and certification, game logic and math verification, hardware integrity and security testing, payout percentage verification, and network and software security audits. It asks for testing methods with reference to international standards, giving ISO and GLI standards as examples, and for any independent accreditation, such as ISO/IEC 17025. The lab must also describe its conflict of interest policy and send a sample test report and certificate of compliance.

Form 12 also asks for the name and accreditation number of the independent testing laboratory and the date of its full compliance report. The applicant commits to notify the Authority of any material change to the software and to submit it for re-testing before deployment.

The same form refers to the Authority's Technical Standards, GRA-TS:2025, on RNG certification, game rules and mathematical fairness, transaction security, data protection, load capacity, player funds segregation and anti-fraud measures. The Regulations name those standards but do not reproduce their text.

How should you read a certification claim on a casino site?

A lab logo in a site footer shows that a lab was involved somewhere. On its own it does not say which game, which version or which market's rules were tested. A claim that names the lab, the game and the jurisdiction tells you more.

Start with the operator's licence, because certification cannot stand in for it. Then open the game information and read the rules and the RTP; the guide on finding a slot's RTP in the game information shows where to look.

If a game seems to malfunction, raise it with the operator first. The Regulations send any complaint still open after 72 hours on to the Authority (L.N. 112 r.9(2)(e)). Section 88 of the Act gives the Gambling Appeals Tribunal power to hear complaints about the outcome of a gambling transaction and the functionality of gambling machines and equipment.