Trust signals

Tier of the regulator the casino is licensed under. Tier-1 regulators (UKGC, MGA, AGCO Ontario, GBGA) score highest; tier-2 (Curaçao GCB post-2024 framework, Isle of Man) score mid-range; legacy or shell-only licences score low.

No active suspension, revocation, or material restriction. Verified directly against the regulator’s register, not the casino’s own footer.

Fines, cautions, or licence conditions imposed in the last 24 months. A single old fine doesn’t sink the score; a pattern does.

Casino actually blocks restricted jurisdictions at signup, not just in the terms. Tested with a verified IP probe.

Player balances held in a separate, ring-fenced account that is audited and disclosed. The strongest version is regulator-mandated trust accounts.

Median time from withdrawal request to funds received, observed across at least 20 sample withdrawals in the last 60 days.

Daily, weekly, and monthly withdrawal caps published in the operator’s terms in plain language, not buried in VIP-only addenda.

Whether the casino allows pending withdrawals to be re-bet during the processing window. We mark this negatively because it’s a known harm vector.

Random-number generator certified by eCOGRA, GLI, iTech Labs, BMM, or equivalent. Self-audits do not count.

Aggregate RTP figures published per game category, ideally with monthly updates and an audit firm signature.

Proportion of the lobby supplied by tier-1 studios (Evolution, Pragmatic Play Live, NetEnt, Hacksaw, Push, Nolimit). Higher-quality studios are themselves licensed and audited.

Wagering requirements, max-bet rules, and excluded games disclosed without jargon traps. Manually reviewed against a fixed checklist.

The ultimate parent and material shareholders are publicly identifiable through corporate filings or the operator’s About page.

The address on the operator’s site matches the registered office on file with the regulator and corporate registry.

The operator publishes a versioned change log of its terms. Silent changes to wagering or withdrawal rules are a red flag.

Whether the operator names an external ADR (Alternative Dispute Resolution) body players can escalate to.

Built-in cooling-off, time-out, and permanent self-exclusion options that are easy to find and irrevocable for the chosen period.

Integration with national self-exclusion schemes such as GAMSTOP (UK), Spelpaus (Sweden), or ROFUS (Denmark) where the operator is licensed in those markets.

Daily, weekly, and monthly deposit limits that take effect immediately on tightening (and only after a cool-off when loosening).

Documented affordability checks on high-deposit accounts and automated harm-marker monitoring (e.g. chasing losses, late-night sessions). Tier-1 regulators increasingly require this.

Share of complaints filed with public mediation services (AskGamblers, ThePogg, regulator ADR) resolved in the player’s favour or by mutual agreement.

Documented cases where the operator confiscated winnings on terms not clearly disclosed at sign-up. Even one well-documented case is significant.

Years the brand has operated under its current licence and ownership. New brands are not penalised, but they don’t earn the bonus a long, clean track record does.

Material incidents reported by regulators, mainstream press, or reputable gambling news outlets in the last 24 months. Allegations are not enough; documented findings are.