Game Certification: eCOGRA, iTech Labs, and GLI Overview

Last updated: 12 July 2026

Why this still matters now

In the last year, a small studio pushed a new slot live in two markets. Players asked if the game was fair. The studio said “yes, it is certified.” That one line changed the talk. It was not a guess. A lab had checked the random number generator, the math, and the system. A regulator had the report. This is the quiet power of game certification.

This guide shows what the big labs do, how the process works end to end, how you can check a certificate in under a minute, and what each lab name on a seal means in the real world.

TL;DR you can act on

Certification is a lab check of game math, RNG, RTP, and controls. It is not a license.
Three names you will see a lot: eCOGRA, iTech Labs, and GLI.
You can verify a seal fast: open the seal, match game, studio, date, and market.
Red flag: seal image with no link, old dates, or a lab not known in that market.

Who does what: regulators, labs, and auditors

Think of three roles. Regulators set rules and say what is legal in a place. Labs test games and systems to check they meet those rules. Operators and studios build and run the games and the platform. Auditors then check that live controls match what was tested.

Do not mix up license and lab cert. A license lets an operator run in a place. A lab cert shows a game or system meets a test scope. For a clear look at how one top regulator lists test houses, see the UK Gambling Commission approved test houses.

Labs are not random firms. Good labs hold the right accreditation for testing. A key piece is mutual recognition across borders. To see how that works, check the ILAC MRA signatories. It shows which bodies can accredit labs and how trust travels.

The pipeline: from build to certified release

Here is a simple path most projects follow. Your details may vary by lab and by market.

Submission pack. The studio sends the game build, math sheet, RNG notes, pay table, art, rules, and any scripts or setup files. Platform docs go in for system tests.
Test plan. The lab sets a scope based on the rules for that market. The plan maps each rule to a test. It cites the method the lab will use and the standards it will rely on, such as ISO/IEC 17025 testing competence for the lab’s own quality.
Hands-on tests. RNG and game math get deep checks. RTP is checked across many cycles. The lab also checks art vs rules, help screens, game states, and error paths. If it is a platform test, the lab looks at account controls, logs, change control, and security.
Fix and retest. If a rule is not met, the studio fixes and the lab retests the fail points.
Report and certificate. The lab issues a report and, if passed, a cert. The file lists game name, version, hash, and scope. Some labs host a public page for each item.
Regulator sign-off. In some places, the regulator must log the report or give a go-live tick.

The big three, at a glance

These three logos cover a large share of markets. The table is neutral and short on claims. Facts only. For a sample of how a regulator lists labs, see the MGA recognised testing laboratories.

eCOGRA	2003; London	ISO/IEC 17025; ISO/IEC 17065 in areas	RNG, RTP, game math, live dealer, platform controls	Strong in UK/EU and select global markets	Seal/cert pages on official site	RNG cert, game cert, systems audit	eGAP; links to local rules	Roots in player protection and ADR
iTech Labs	2004; Melbourne	ISO/IEC 17025	RNG, RTP, game math, platform API checks	Wide use in EU, APAC, LatAm	Public certificates directory	RNG cert, game math report, protocol test	Jurisdiction-specific rule maps	Clear online cert pages per game
GLI	1989; New Jersey	ISO/IEC 17025 and others per site	RNG, RTP, game math, systems, field audits	Very broad: U.S., Canada, LatAm, Africa, APAC	Standards and advisories on GLI standards library	Game cert, system/field reports, security	GLI-11 (slots), GLI-19 (interactive), more	Large standards library and regulator ties

eCOGRA in practice

eCOGRA is known for fair play work and player dispute help. In tests, they focus on RNG review, math, RTP, live dealer flows, and controls on the platform. They also check that help text and rules match the math and the UI.

How to verify: on a site, click the eCOGRA seal or a “certificate” link. You should land on a page at the eCOGRA official site. Check the game name, studio, version, date, and scope. Check that the market listed matches where you play. If the link is just an image and does not click through, treat that as a caution sign.

Where you see them: strong in UK and EU work, plus other regions. They also run system audits and can review live dealer studios and platform change control.

Strength: a steady focus on player protections and ADR roots. This can help when sites need both tech and conduct checks.

iTech Labs in practice

iTech Labs is a common name on single game cert pages. Their pages are easy to read. They include the game, hash, rules version, and RTP. They also have clear RNG certs for platform or studio RNGs.

To verify, look for a link that goes to the iTech Labs certificates area. On that page, use search by studio or title. Match the version and the market. Dates should be current. If the page is gone, ask support on the site you use.

Where they show up: across Europe, APAC, and LatAm, often for RNG and game math work. They can also test APIs for wallet or platform links, per the scope.

Strength: clean, public cert pages and a broad set of game checks.

GLI in practice

GLI is big and works with many regulators. They write public standards that many markets cite. These include game math and system rules. If you see “GLI-11,” that is a slots standard. “GLI-19” covers online interactive games.

If a site says “GLI certified,” it can mean the game or platform passed tests mapped to a GLI standard, or that a regulator accepts GLI work. You can read the standards in the GLI standards library. The exact test report is not always public, but operators must keep it on file for regulators.

Where you see them: U.S. states, Canada, LatAm, Africa, and APAC. They handle both lab and field work at scale.

Strength: deep ties to regulators and a large, public standards set.

What labs actually test, minus the buzzwords

RNG. The lab checks that the random source is sound and not biased. They run test suites over large samples. One core suite is the NIST SP 800-22 test suite. The lab also checks how the RNG is seeded, how seeds are saved, and that the code uses the numbers right in the game flow.

Advanced RNG checks. In some scopes, the lab may also use academic test sets, like the TestU01 statistical tests. These go deeper into patterns. Still, no finite test can prove “true random.” The point is to rule out known bias and bad use.

RTP and game math. RTP is the long-run payback rate. Labs check that the math model fits the target RTP and that variance and hit rates make sense. They test edge states, bonus rules, and max win caps. Session swings can be big. One night of luck does not break the long-run math.

System and platform. Labs can test user flows, error states, limits, logs, and change control. They check that updates are tracked, that keys are stored safe, and that the system blocks things it should block in that market (for example, features not allowed).

How to verify a certificate in the wild (60-second check)

Find the seal or “Certification” or “RNG” link in the footer or in the game help.
Click through. You should land on a lab page (eCOGRA, iTech Labs, GLI, etc.), not a random PDF host.
Match the market. If you play in New Jersey, a useful reference is the New Jersey DGE test labs list. If the lab is not known to your regulator, ask support.
Match the game and version. The title, build number, and sometimes a hash must match what you see in the client.
Check the date and scope. The cert should be current. Scope should fit the game type (RNG, live, system).
Check the RTP if shown. It should match the game help screen for your market.
If anything is off, take a screenshot and ask the operator to explain.

Want a human-vetted shortcut? Our team keeps snapshots of live cert pages and flags stale links. You can see curated picks and offer checks, including exclusive sportsbook bonuses, updated on a rolling basis. Note: we may earn a fee from some partners. Always set limits and play safe.

Edge cases and myths to clear up

White-label platforms. A brand may run on a host platform. The platform can be certified, but a specific game build or a market RTP can still differ. Check both the platform cert and the game cert. Also, cross-border rules change fast. For a snapshot of reforms in one hub, see the Curaçao gaming framework updates.

Copied seals. Bad actors can paste a lab image with no link. Or link to a file that is not on the lab’s domain. Click through, then check the URL and the details. If there is no link, treat it as unverified.

Myths. “Certification equals a license.” No. A cert is a test pass. A license is permission to operate. “GLI is always mandatory.” No. Markets accept different labs. “RNG cert is enough.” Not always. Many rules cover RTP versions, features, and system controls too.

Mini checklists

For studios and operators (pre-submission)

Lock math, pay table, and feature sets per target market.
Freeze build and record a hash for each file sent to the lab.
Write clear help text that matches rules and math.
Prepare RNG docs: source, seeding, use in game flow.
Have change control and release notes ready.
Set logs and error capture to the levels in market rules.
Map scope to rules cited by your market (e.g., Gibraltar’s remote standards at the Gibraltar Gambling Division).

For players and compliance readers (60-second trust check)

Seal links to a lab domain, not a static image.
Game name and version match what you play.
Date is current; market listed is your market.
RTP in the cert matches the help screen.
License details on the site match the regulator’s register.

FAQ

What is game certification and who needs it?

It is a test by an independent lab. It checks RNG, RTP, math, and system rules. Studios, platforms, and operators need it before release in most regulated markets.

Is eCOGRA the same as a gambling license?

No. eCOGRA is a lab and a cert body for some scopes. A license is from a regulator. You can have a cert but still need a license to offer games in a place.

How do I verify an iTech Labs certificate?

Click the seal on the site or in the game help. It should open on an itechlabs.com page. Check name, version, date, and market. You can also search the iTech Labs certificates page by studio or title.

What are GLI standards like GLI-11?

They are public rule sets for tests. GLI-11 covers slots. GLI-19 covers online games. Many regulators use them or similar rules as a base.

Does certification expire or need renewal?

It can. If a game build, RNG, or rule changes, the cert can go stale. Some markets set a time window. Always check the date on the cert page.

Is RNG testing enough to prove fairness?

No. RNG is one part. Labs also check math, RTP versions, game states, and system controls. All parts must match the market rules.

Why do different markets accept different labs?

Each regulator sets its own rules. Some list labs they accept. Others accept any lab with the right accreditation. Check the local rule site for the current list.

Sources and further reading

This guide cites primary sources and standards bodies so you can read the rules first-hand.

UK Gambling Commission approved test houses
ILAC MRA signatories
ISO/IEC 17025 testing competence
MGA recognised testing laboratories
eCOGRA official site
iTech Labs certificates
GLI standards library
NIST SP 800-22 test suite
TestU01 statistical tests
New Jersey DGE test labs
Curaçao gaming framework updates
Gibraltar Gambling Division standards
IBIA resources

Author, review process, and policy

By Alex M., compliance editor. I have reviewed lab reports for slot and table games since 2017 and have led two submissions from build freeze to go-live. For this guide, I cross-checked lab pages, regulator lists, and ISO/IEC sources. I do not rank labs. I explain scope and how to verify. If we list a partner or an offer, we add a clear note and use rel="sponsored" on links. Change log: minor link refresh and examples updated in July 2026.