Regulators license the casino. They also, separately, license the company that built the game running inside it — a layer of oversight most players never see.
When gambling regulation is discussed publicly, it is almost always operator regulation: which casinos hold a licence, what they owe their customers, what happens when they breach conditions. There is a second regime running alongside it, applying to companies that never take a bet from anyone.
Game studios, platform providers and aggregators require their own authorisation. In Great Britain this is a gambling software licence issued by the Gambling Commission; Malta issues a Critical Gaming Supply licence covering equivalent ground; most established European jurisdictions run some version of the same thing. A studio supplying games into a regulated market without one is as non-compliant as an unlicensed casino, even though it has no customers in the ordinary sense.
What supplier licensing actually covers
Operator licensing is largely about conduct towards customers: how money is held, how advertising is worded, how vulnerable players are identified. Supplier licensing is about the product.
The core requirements run to four areas. Random number generation must be tested by an approved laboratory and demonstrate genuine statistical randomness. Published return-to-player figures must match what the game build actually does over large simulated volumes. Game rules and information must be accessible from within the game and accurately describe its behaviour. And changes to a certified build cannot simply be pushed live — material changes require recertification.
Corporate scrutiny applies too. Regulators assess ownership, funding and the people in control, which is why supplier licensing occasionally becomes news when a change of ownership triggers a fresh review.
Why the split exists
The division reflects where risk actually sits. An operator can be scrupulous about customer protection and still be distributing a game whose mathematics do not match its published figures. Regulating only the operator would leave nobody with the technical capability or the legal standing to test the game itself.
It is also more efficient. A single studio may supply hundreds of operators across dozens of markets. Certifying the game once at source, rather than requiring every operator to independently verify every title, is the only workable arrangement at that scale.
The trade-off is concentration. Certification for most of the market runs through a small number of testing laboratories, which means a great deal of consumer protection rests on very few institutions — efficient, but with limited redundancy if one of them gets something wrong.
The gap the system leaves
Supplier licensing is not a guarantee about the operator using the games, and this is where players most often draw the wrong conclusion.
Studios license broadly and have limited control over who ends up distributing their catalogue, particularly through aggregators. A well-regarded studio’s logo appearing in a lobby means a commercial agreement exists somewhere in the chain. It says nothing about whether that operator pays out promptly, applies its bonus terms fairly, or holds a licence worth anything in your jurisdiction.
Nor does it guarantee availability matches the marketing. Trackers documenting which operators license EGT games have repeatedly found the advertised supplier list and the searchable lobby telling different stories — a discrepancy that supplier licensing has no mechanism to catch, because it regulates the game rather than the claim made about it.
| Supplier licensing covers | It does not cover |
| RNG integrity | Whether the operator pays out |
| Published RTP accuracy | Bonus terms and their fairness |
| Game information screens | Complaint handling |
| Recertification after changes | Marketing claims about game availability |
What happens when a game fails
The system’s response to a defective game is more interesting than its response to a defective operator, because the remedy is technical rather than punitive.
Where a certified build is found to behave differently from its specification — a payout table that does not match, a feature triggering at the wrong frequency, a return figure that does not hold — the game is withdrawn from distribution pending recertification. Because the same build is deployed across every operator carrying it, a single withdrawal can remove a title from hundreds of lobbies simultaneously.
That centralisation is the regime’s main strength. A defect found once is fixed everywhere, without requiring every operator to notice it independently. It is also why supplier licensing is worth having as a separate layer: nobody in the operator tier has the technical standing to identify the problem in the first place.
The corresponding weakness is the detection rate. Certification tests a build before deployment. Ongoing monitoring of live games is thinner, and depends substantially on regulators’ own sampling and on the studios reporting their own faults.
What it’s worth to a player
Modest but real. Supplier regulation is a reasonable basis for confidence that a licensed game’s stated mathematics are accurate and that its randomness is genuine. That is not nothing — it is the difference between a house edge that is disclosed and one that is not.
What it cannot do is make the game a good bet. A certified, correctly-tested slot with an accurately-published 96% RTP is a game with a verified 4% house edge. The certification confirms the number. It does not change which direction the number points.
The practical instruction that follows is short. Check that a site is licensed by a regulator you can name, and treat the games on it as accurately described. Then read the description, because an accurate description of a product designed to take money is still a description of a product designed to take money — and the regime that guarantees the accuracy was never asked to do anything about that.
Gambling should be budgeted as entertainment spending, never treated as income. Free confidential support: Gambling Therapy. 18+.
