How Casinos Test New Games Before Players Ever See Them
The slot you loaded up last night was almost certainly opened on a workbench, wired to a diagnostic rig, and run through a source-code review before you ever touched it. Casinos test new games in three stages: the studio builds and simulates the math model and puts prototypes in front of real players, an independent testing laboratory certifies the random number generator and verifies the payback math against the submitted paperwork, and a state regulator reviews that certification before approving the game, in many cases only after a supervised trial run on a live casino floor.
That pipeline is longer and considerably more paranoid than most players assume. It is also almost entirely invisible from the player side, which is a shame, because knowing what actually gets checked tells you a lot about which parts of a game you can trust and which parts are just marketing. Here is what happens between a designer’s spreadsheet and the lobby of your online casino.
What Happens Before a New Casino Game Leaves the Studio
Before a regulator ever sees it, a new game is a spreadsheet. Studios build the mathematics first: the symbol distribution across each reel, the pay table, how often a winning combination lands, and the theoretical return to player. All of it gets documented on what the industry calls a PAR sheet, short for probability and accounting report, which lists every possible outcome, sorts winners from losers, and derives the overall payback percentage from that.
The math model is then hammered with simulation. Studios run the game engine through many millions of rounds to confirm that the theoretical numbers on paper hold up when the software actually executes them. This matters more than it sounds, because a rounding error or a mishandled bonus trigger changes what the game really pays without changing anything a player can see. Every distinct payback version of a game is treated as its own separate math model with its own paperwork.
Then Real People Get Their Hands on It
Math tells a studio whether a game is solvent. It says nothing about whether anyone wants to play it, which is why the big manufacturers run structured player testing. When CDC Gaming surveyed the major slot makers in 2019, IGT said roughly 2,400 players a year came through focus groups at its Las Vegas facility, in sessions of about 30 people at a time. Everi described what it called walk-away testing: catching players in a live casino the moment they stood up from a machine and asking what they had just felt. Konami said it was putting about 30% of its titles through player testing at that point, and all three reported scrapping or rebuilding games based on what they heard.
The observation methods are more revealing than the questionnaires. Sessions get recorded so designers can watch body language and hesitation, on the theory that what a player does not say about a bonus round matters more than what they do. (IGT and Everi have since been combined under the IGT name, after Apollo Global Management closed its acquisition of both businesses in July 2025.) The same reporting put a full game’s development cycle at around nine months.
📊
Two different tests, two different questions
The studio’s own testing asks “will people play this?” The lab and the regulator ask “does this do exactly what the paperwork says?” A game can sail through one and fail the other. Only the second one is legally required.
Who Actually Tests Casino Games?
Independent testing laboratories do, and they are registered by the same regulators who approve the games. Four names cover most of the North American market: Gaming Laboratories International (GLI), BMM Testlabs, eCOGRA, and iTech Labs. They are private companies, not government agencies, but they operate inside a regulatory framework that spells out what they must test and what they must certify in writing.
Here is the part nobody in the industry advertises: the manufacturer pays the lab. Nevada’s Regulation 14 says so explicitly, noting that testing fees “shall be determined solely between the manufacturer or operator and the independent testing laboratory.” That is a real conflict of interest and worth naming plainly. The counterweight is that labs have to be registered with the Gaming Control Board to do the work at all, they file their certification results under penalty of perjury, and the Board can pull a registration. A lab that waves through a broken game is not risking one client. It is risking its license to operate in the jurisdiction.
Labs work against published technical standards rather than improvising. GLI maintains a numbered series that regulators around the world adopt by reference, and the version numbers matter because a game certified to an old revision may need re-testing:
| Standard | What it covers | Version |
|---|---|---|
| GLI-11 | Gaming devices (the standard for slot machines) | v3.0 |
| GLI-12 | Progressive jackpots | v3.0 |
| GLI-19 | Interactive gaming systems (online casino) | v3.0 |
| GLI-24 | Electronic table game systems | v1.3 |
| GLI-29 | Card shufflers and dealer shoes | v1.0 |
| GLI-33 | Event wagering systems (sportsbook) | v1.1 |
You can read the full published series on the GLI standards page. Table games get their own scrutiny too: shuffler randomness and card-shoe behavior are tested the same way a slot’s number generator is.
What an Independent Lab Actually Checks
Four things, roughly in order of how badly they can go wrong: the random number generator, the game mathematics, the source code, and the game’s behavior on real hardware under real network conditions.
The random number generator. Labs evaluate whether the generator produces genuinely random, unbiased output and whether the mapping from raw numbers to game symbols preserves that randomness. Both halves matter. A perfect generator wired to a sloppy symbol map produces a predictable game.
The game mathematics. The lab re-derives the payback percentage from the submitted math and confirms that the running software actually produces it over very large simulated samples. If the game advertises a payback figure, that figure has to survive the lab’s own simulation, not just the studio’s.
The source code. This is the step players tend not to know about. Labs read the code, then prove that the code they read is the code that ships.
The environment. Behaviour is checked across devices and connection speeds, along with the protocols the game uses to talk to the casino’s accounting and monitoring systems. A dropped connection mid-spin has to resolve correctly every time.
Nevada spells out exactly what a lab has to hand over when it certifies something, and the list is unusually specific. Certification results must include the SHA1 signature of every applicable file as it would appear after installation, an attestation that the reviewed source code “successfully produced materially identical software to the production software tested,” the start and end dates of testing, a description of any issues found and how they were resolved, any deviation from standard testing protocols, and a statement signed under penalty of perjury.
💡
Why the file hash is the whole ballgame
A cryptographic signature of every shipped file is what stops the oldest trick in the book: certify a clean build, then quietly deploy a different one. Regulators can hash the software running on a live machine and compare it against the certified value. A mismatch is not a paperwork problem, it is an enforcement matter.
How Regulators Decide Whether You Get to Play It
State regulators review the lab’s certification and then run their own process, and in New Jersey they run their own laboratory as well. The Division of Gaming Enforcement tests every slot machine, casino floor system, and internet gaming platform before it goes into service, through a Technical Services Bureau split into four units: an Engineering Unit that operates the slot lab, a Cyber Security and Analytics Unit, an Information Technology Investigations Unit that handles audits and patron complaints, and a Quality Assurance Unit that processes every incoming submission.
What a manufacturer has to submit to New Jersey covers six categories:
- Operation manuals describing how the game functions
- Hardware specifications including full schematics
- Complete software source code, not a compiled binary
- Mathematical pay table documentation
- Random number generator test results
- Casino computer system compliance details, plus anything else the Division decides it needs
Nevada attacks the same problem from the rules side. Under Regulation 14, a gaming device must “theoretically pay out a mathematically demonstrable percentage of all amounts wagered, which must not be less than 75 percent for each wager available for play on the device.” Outcomes have to be determined by chance, player skill, or a combination of the two, and the rules of play, the wager required, and the amount paid on a win all have to be displayed accurately and without misleading the player. As of a February 2026 amendment, Nevada applies the same minimum standards to new table games and game variations under a newly adopted section, not only to machines.
Regulators also compete for submissions, which speeds things up. New Jersey runs a “New Jersey First” priority track for products submitted there before or at the same time as any other jurisdiction, and its rule is blunt: if the Division has not finished its review within 14 days, it issues a field trial approval on or before the 14th day.
The Field Trial: A Real Casino Floor Is the Final Exam
Some games get approved on paperwork alone. Others have to survive a time-limited trial on a live casino floor, with real players and real money, before final approval is granted. In Nevada, the Board Chair can allow or require that a new gaming device be tested at a licensed casino for no more than 180 days, extendable by another 90 days on written request while the application works its way to the Board and Commission. New table games and game variations get the same 180-day ceiling.
There is also a longer track for genuinely new technology. Nevada’s New Innovation Beta process lets a manufacturer run a field test for up to 270 days (plus a possible 90-day extension) in exchange for accepting the trade: the casino has to notify patrons that the machine is part of a field test and is being exposed for play before the product is finalized. In other words, you can be playing an unfinished game, and the state’s condition for allowing that is that you get told.
⚠️
That small sticker on the machine means something
New Jersey requires a notice affixed to the front of a machine operating under a field trial. Nevada’s beta track requires patron notification too. If you see one, the game is legal to play and its math has been reviewed, but the product itself is still provisional and can be pulled or changed.
The trial is not only a safety check. It is also where a manufacturer finds out whether the thing earns its floor space, because a cabinet that nobody sits at is a cabinet the casino swaps out. Plenty of games clear every regulatory gate and still disappear within a year for the unglamorous reason that players walked past them.
What Certification Guarantees, and What It Doesn’t
Certification proves that a game does what its paperwork says it does. It does not prove the game is a good bet, and conflating those two is the single most common misreading of the whole system. A lab seal means the outcomes are random, the payback matches the declared math, and the software running is the software reviewed. It says nothing about whether that payback is generous.
Three things are worth keeping straight:
- A legal minimum is a floor, not a target. Nevada’s 75% applies to each wager available on the device. Most real machines run well above it, but “certified” and “loose” are unrelated claims.
- Payback percentages are long-run figures. They are derived over hundreds of millions of simulated rounds. Your two hundred spins on a Saturday are statistical noise by comparison, which is exactly why a game can feel rigged while being perfectly certified.
- Randomness certification kills the “due” machine. A verified generator means each spin is independent of the last. There is no stored-up payout, no warming period, and no pattern to catch. What persists across every certified game is the house edge.
The honest summary: this testing regime is genuinely good at catching fraud, broken math, and software that misbehaves. It was never designed to make gambling profitable for you, and it doesn’t.
How to Tell if the Game You’re Playing Was Actually Tested
Play at an operator licensed in a regulated state, and the answer is yes by default, because the regulator will not let an untested game go live. Everything below is how you confirm it yourself:
- Check the license, not the logo. A site operating under a New Jersey, Pennsylvania, or Michigan license is running games the state regulator has approved. Offshore sites answer to nobody you can call.
- Open the game’s info screen. Regulated slots disclose their payback percentage and full rules in the help or paytable menu. If a game hides that, treat it as a signal.
- Look for the lab in the footer. GLI, BMM Testlabs, eCOGRA, and iTech Labs seals are the ones that carry weight. eCOGRA also publishes ongoing payout reports for operators it certifies.
- Watch for the field-trial notice. On a physical machine it is required to be posted. It is not a warning, but it does tell you the product is provisional.
If you want the mechanics behind the platform rather than the individual game, our explainer on how online casinos work covers the licensing and payment plumbing sitting underneath all of this. For operators that clear the regulatory bar, our best online casinos rankings are the place to start, and established brands such as Borgata run their entire game libraries through the same New Jersey lab process described above.
None of this makes the games beatable. What it does mean is that the thing spinning on your screen has been read line by line, hashed, simulated to death, and signed off by somebody who would be committing perjury if they lied about it. In an industry that has spent a century fighting its own reputation, that is a more interesting guarantee than most players realise they have.
Play Safe: Gambling should be fun, not stressful. Set limits, stick to your budget, and never chase losses. If you or someone you know has a gambling problem, call 1-800-MY-RESET or visit ncpgambling.org. For more resources, see our Responsible Gambling page.
Frequently Asked Questions
The questions players ask most often about game testing tend to be about who is checking the work and what the certification actually buys them. Here are the short answers.
Who actually tests casino games before they go live?
Independent testing laboratories registered by state gaming regulators do the technical certification. In North America that is mostly Gaming Laboratories International (GLI), BMM Testlabs, eCOGRA, and iTech Labs. Some states also run their own lab: New Jersey’s Division of Gaming Enforcement tests every slot machine, casino floor system, and internet gaming platform through its Technical Services Bureau before it can be used.
How long does it take to get a new slot machine approved?
It depends on the jurisdiction and whether a live trial is required. Lab certification runs on its own timeline, and then the regulator reviews it. In Nevada, a field test of a new gaming device on a real casino floor can run up to 180 days, with a possible 90-day extension, while the newer New Innovation Beta track allows up to 270 days. New Jersey’s expedited New Jersey First track issues a field trial approval within 14 days if the Division has not finished its review by then.
Does a game being certified mean I have a better chance of winning?
No. Certification confirms that the outcomes are random and that the game pays back exactly what its submitted mathematics say it does. It does not mean the payback is generous. Nevada’s legal minimum is 75% of amounts wagered for each available wager, which is a floor rather than a target, and the house edge stays intact on every certified game.
What stops a company from certifying one version and shipping a different one?
Cryptographic file signatures. Nevada requires a lab’s certification results to include the SHA1 signature of every applicable file as it would appear after installation, plus an attestation that the source code reviewed produced materially identical software to what was tested. Regulators can hash the software running on a live machine and compare it to the certified value, and the certification statement itself is signed under penalty of perjury.
I saw a notice on a slot machine saying it is being tested. Is it safe to play?
Yes, it is legal to play and its mathematics have already been reviewed, but the product is provisional. New Jersey requires a notice affixed to the front of any machine operating under a field trial, and Nevada’s New Innovation Beta track requires the casino to tell patrons the device is being exposed for play before the product is finalized. The game can still be modified or withdrawn.
Do online casino games go through the same testing as machines in a physical casino?
They go through equivalent testing against a different standard. Land-based slot machines are typically certified to GLI-11, the gaming devices standard, while online casino platforms and their games are certified to GLI-19, the interactive gaming systems standard. Both cover random number generation, game mathematics, and source code, and in regulated US states the same regulator signs off on both.
