Casino game return percentages (RTP) are verified through regular audits by independent testing labs like eCOGRA, iTech Labs, and GLI. These audits run millions of game rounds to confirm published RTP figures match actual payout behaviour. The process is mandatory for licensed operators, but audit frequency, sample sizes, and enforcement vary by jurisdiction. Malaysian players accessing offshore casinos rely on these third-party certifications, since local regulation doesn’t cover international sites.

What Casino Game Return Percentages Actually Measure
Return to player (RTP) is the percentage of all wagered money a game is programmed to pay back over time. A slot with 96% RTP will, in theory, return MYR 96 for every MYR 100 wagered across millions of spins. The remaining 4% is the house edge.
RTP is calculated over the long term. A single session can swing wildly above or below the stated percentage. The figure becomes meaningful only after hundreds of thousands or millions of rounds, which is why audits test at scale rather than observing a few dozen spins.
Three factors determine actual return percentages:
- Base game RTP: The return percentage from standard gameplay, excluding bonus features or jackpot contributions.
- Feature RTP: Additional return from free spins, multipliers, or bonus rounds. Some games report combined RTP, others break it down.
- Configuration settings: Providers often let operators choose from multiple RTP settings for the same game (e.g., 94%, 96%, or 98%). The audit applies to each configuration separately.
RTP audits verify that the random number generator and payout logic deliver results that match the published figure. The process doesn’t evaluate game fairness in subjective terms (like whether bonus rounds feel frequent enough) but whether the math aligns with what the developer claims.
Who Conducts RTP Audits and How They’re Structured
Independent testing laboratories conduct RTP audits. These labs are accredited by regulatory bodies or industry standards organizations and operate separately from both game developers and casino operators. The most common labs testing games available to Malaysian players include:
| Testing Lab | Headquarters | Primary Focus |
|---|---|---|
| eCOGRA | London, UK | RTP verification, RNG testing, responsible gambling compliance |
| iTech Labs | Queensland, Australia | Game certification, RNG analysis, platform integrity |
| GLI (Gaming Laboratories International) | New Jersey, USA | Global game testing, RTP audits, regulatory compliance |
| BMM Testlabs | Nevada, USA | Land-based and online game certification, payout verification |
| NMi (Gaming Labs) | Netherlands | European market testing, RNG certification |
The audit process typically follows this structure:
Initial certification: Before a game goes live, the developer submits the complete source code, game logic, and RTP configuration to a testing lab. The lab runs simulation software that plays the game millions of times, recording every outcome. If the observed RTP matches the theoretical RTP within an acceptable margin (usually ±0.1%), the game passes.
Ongoing monitoring: After launch, some jurisdictions and operators require periodic re-audits. The lab may test live game data from real player sessions or run fresh simulations on updated game builds. Frequency varies: Malta Gaming Authority requires annual reviews, Curacao licenses often rely on initial certification only.
Variance tolerance: Audits don’t demand perfect alignment. A game advertised at 96.00% RTP might measure 96.08% or 95.93% during testing due to statistical variance. Labs apply confidence intervals (usually 95% or 99%) to determine whether discrepancies fall within expected randomness or indicate a configuration error.

How Testing Labs Verify RTP in Practice
Testing labs don’t manually play games. They use automated simulation platforms that execute game rounds far faster than human play. A typical audit involves:
Sample size determination: The lab calculates the minimum number of rounds needed to achieve statistical confidence. High-volatility slots require larger samples because payouts cluster around rare big wins. Low-volatility games stabilize faster. Common sample sizes range from one million to ten million rounds.
RNG analysis: The lab examines the game’s random number generator to confirm it produces unpredictable, uniform results. This step runs parallel to RTP testing. If the RNG fails (e.g., outputs follow a detectable pattern), the game cannot pass certification regardless of payout results.
Payout table verification: The lab compares the game’s internal payout logic against the published paytable. For example, if a slot claims a five-of-a-kind symbol pays 500x, the code must award exactly 500x when that combination lands. Discrepancies here flag potential errors or fraud.
Feature frequency check: Bonus rounds, free spins, and multipliers contribute to overall RTP. The lab measures how often these features trigger and whether their payout distribution matches the developer’s specification. A game might have correct base-game RTP but fail certification if bonus rounds trigger less frequently than programmed.
Why Audit Certificates Don’t Guarantee Fair Play
An RTP audit confirms the game pays out as advertised, but it doesn’t verify the casino delivers winnings to players. A certified 96% RTP slot means nothing if the operator delays withdrawals, voids wins on technicalities, or goes offline with player funds. Audit certificates apply to game software, not operator behaviour.
What Happens When a Game Fails an RTP Audit
If the measured RTP falls outside acceptable variance, the lab issues a non-conformance report. The developer must investigate the cause, which typically falls into one of these categories:
Configuration error: The game was set to the wrong RTP version. For example, the operator requested the 96% configuration, but the server deployed the 94% build. The fix involves redeploying the correct version and re-testing.
Code bug: A programming error causes payouts to deviate from the intended logic. This might affect specific features (e.g., multipliers applying incorrectly) or the entire game. The developer patches the code and resubmits for audit.
RNG malfunction: The random number generator produces biased results. This is rare in professionally developed games but can occur if the RNG implementation interacts poorly with server infrastructure. The developer must re-engineer the RNG and pass a fresh audit.
Games that fail certification cannot be offered by licensed operators until they pass re-testing. However, unlicensed casinos may continue running non-compliant games since they operate outside regulatory oversight. This is one reason verifying casino licensing matters for Malaysian players using offshore platforms.
Audit Frequency and Regulatory Requirements
How often casino game return percentages are re-audited depends on the operator’s license jurisdiction. Here’s what major licensing authorities require:
Malta Gaming Authority (MGA): Requires annual RTP audits for slots and quarterly audits for live dealer games. Operators must publish monthly payout reports showing actual return percentages across their game library. If a game’s real-world RTP deviates significantly from the certified figure, the MGA can demand an investigation.
UK Gambling Commission (UKGC): Mandates biennial re-certification for all RNG games. Operators must also maintain continuous monitoring systems that flag statistical anomalies in real-time. The UKGC can audit any game at any time without notice.
Curacao eGaming: Requires initial certification but no mandatory re-audits. Operators may voluntarily commission follow-up tests, but enforcement is minimal. Many casinos serving Malaysian players hold Curacao licenses, which means RTP oversight relies heavily on the initial audit.
No license: Unlicensed casinos have no audit requirements. Some still seek voluntary certification from labs like eCOGRA to build trust, but there’s no enforcement mechanism. Players have no recourse if games pay below advertised RTP.
For live dealer games, audits focus on shuffle integrity and dealer procedures rather than software-generated RTP. Labs review video feeds, inspect card-handling protocols, and verify that physical equipment (wheels, shufflers) operates fairly. These audits happen less frequently since live games have fewer variables than RNG slots.

How Players Can Check RTP Audit Status
Most games display audit certifications in their information screens. Open any slot, tap the “i” or “?” icon, and scroll to the bottom. You should see:
- The testing lab’s logo (eCOGRA, iTech Labs, GLI, etc.)
- A certification number or seal
- The certified RTP percentage
- The audit date (if disclosed)
Some labs provide online verification tools. For example, eCOGRA publishes a searchable database of certified games at ecogra.org. You can enter the game name or certification number to confirm the audit is legitimate.
Red flags that suggest a game may not be properly audited:
- No testing lab logo or certification seal in the game info screen
- RTP listed as “up to 99%” or similar vague language (real audits report exact figures like 96.12%)
- Casino refuses to disclose which RTP configuration is active (games with multiple settings should clearly state which version you’re playing)
- Lab logo present but no certification number (easy to fake a logo without linking to actual audit records)
If you’re unsure, contact the casino’s support team and ask for the game’s audit certificate or testing lab report. Licensed operators should provide this on request. If they refuse, consider it a warning sign.
The Difference Between Certified RTP and Real-World Payouts
A game can pass every audit and still feel like it’s paying poorly. Here’s why certification doesn’t guarantee a positive player experience:
Variance overwhelms RTP in short sessions: RTP is a long-term average. Over 100 spins, you might experience 80% or 110% return purely due to luck. The certified 96% figure only emerges after millions of rounds. Audits can’t smooth out the natural volatility players encounter in real sessions.
Operators can choose lower RTP configurations: Many slots offer multiple RTP settings. A game certified at 96%, 94%, and 92% has passed audit for all three, but the casino decides which version to deploy. Some operators mix configurations across their library, offering higher RTPs on popular titles and lower RTPs on less-played games. Unless the casino discloses the active setting, you won’t know which version you’re playing.
Bonuses and promotions alter effective RTP: A 95% RTP slot becomes effectively 105% if you’re playing with a 10% cashback offer. Conversely, wagering requirements can drag your net return below the game’s certified RTP. Audits measure base game performance, not promotional terms.
Withdrawal obstacles reduce real-world value: A game paying 98% RTP is meaningless if the casino takes six weeks to process your withdrawal or rejects it on fabricated grounds. RTP audits focus solely on game mechanics, not operator reliability. This is why we measure withdrawal times and verification processes separately in our casino reviews.
What RTP Audits Cover
- Game software pays stated percentage over millions of rounds
- RNG produces unpredictable, statistically random results
- Payout logic matches published paytable
- Bonus features trigger at correct frequency
What RTP Audits Don’t Cover
- Whether the casino actually pays winners
- Withdrawal speed or verification demands
- Which RTP configuration the operator deployed
- Bonus terms, wagering requirements, or promotional value
Why RTP Transparency Matters More Than Audit Frequency
Annual re-audits sound reassuring, but they’re less useful than clear RTP disclosure. A casino that publishes exact RTP figures for every game, states which configuration is active, and links to audit certificates provides more accountability than one that simply claims “all games are tested.”
Some operators go further and publish monthly payout reports showing real-world return percentages across their entire library. These reports aggregate millions of player rounds and reveal whether games are performing as certified. If a slot is certified at 96.5% but the monthly report shows it paid 94.2%, the operator owes an explanation.
Malaysian players using offshore casinos should prioritize transparency over licensing jurisdiction. A Curacao-licensed casino that discloses RTP settings and publishes payout data is often more trustworthy than an MGA-licensed site that buries this information or refuses to clarify which game versions are active.
Responsible Gambling Considerations
Understanding RTP audits helps set realistic expectations, but no audit changes the fact that casino games favour the house over time. RTP percentages reflect long-term averages across all players; your individual results will vary, often significantly.
Even a 99% RTP game has a house edge. If you play long enough, the math works against you. Audits verify that the game operates as designed, not that it’s a viable way to make money. Use deposit limits, session timers, and self-exclusion tools to keep gambling recreational rather than financially harmful.
Frequently Asked Questions
How often are casino game RTP percentages audited?
It depends on the operator's license. Malta Gaming Authority requires annual audits, UK Gambling Commission mandates biennial re-certification, and Curacao licenses often require only an initial audit. Unlicensed casinos have no mandatory audit schedule.
Can a casino change a game's RTP after it passes an audit?
Operators cannot alter a game's RTP without re-certification, but many games offer multiple pre-certified RTP configurations (e.g., 94%, 96%, 98%). The casino can switch between these certified versions. Players should check the game info screen to confirm which setting is active.
Which testing lab is the most trusted for RTP audits?
eCOGRA, iTech Labs, GLI, and BMM Testlabs all meet international standards. The lab's reputation matters less than whether the casino publicly discloses certification details and allows players to verify audit status through the lab's database.
Do live dealer games undergo RTP audits?
Yes, but the process differs. Labs audit shuffle integrity, dealer procedures, and physical equipment (wheels, shufflers) rather than software RNG. Live game audits happen less frequently since there are fewer variables than RNG slots.
What should I do if a game feels like it's paying below the stated RTP?
Short-term results don't reflect long-term RTP due to natural variance. If you suspect a persistent issue, check the game's certification details, verify the audit with the testing lab's online database, and report concerns to the casino's license authority if the operator is regulated.
Are RTP audits mandatory for all online casino games?
Only for games offered by licensed operators. Regulators like MGA and UKGC require certification before games can go live. Unlicensed casinos have no audit obligation, though some seek voluntary certification to build trust.
How many game rounds does an RTP audit typically test?
Most audits run between one million and ten million rounds. High-volatility games require larger sample sizes to achieve statistical confidence since payouts concentrate around rare big wins.
RTP audits verify that games pay as advertised, but they don’t guarantee operator reliability or fast withdrawals. For a complete picture, check out our guides on how RNGs work behind the scenes, what to expect during account verification, and which payment methods deliver the fastest payouts when you win.
