How do certified random number generators get tested and who is responsible for approving them in Ontario?

Fair question — and the real worry behind it is obvious: if you can't trust that the outcomes are genuinely random, nothing else about an online casino matters. Here's exactly how Ontario handles it, because the answer is more structured than most players realize.

Who is actually responsible

The AGCO (Alcohol and Gaming Commission of Ontario) sets the rules, but it doesn't do the testing itself. RNGs must be certified against the AGCO's Registrar's Standards for Internet Gaming by an ITL (Independent Testing Lab) registered with the AGCO — the AGCO will not directly test or approve igaming technology through its in-house gaming laboratory. That's a deliberate design choice: the regulator writes the standards and oversees the labs, while accredited third parties do the hands-on technical work.

An ITL certification is a form of written assurance issued by registered independent test laboratories to indicate that the technology meets the relevant AGCO Registrar's Standards for Internet Gaming. ITL certifications for Ontario's igaming market can only be issued by ITLs that are registered by the AGCO. So the chain of accountability runs: AGCO sets standards → registered ITL tests and certifies → operator can deploy.

When Ontario's competitive igaming market launched, four ITLs were registered to test and certify key components of igaming systems such as games and RNGs — BMM North America, eCOGRA, Gaming Associates Europe, and Gaming Laboratories International. Additional labs may have been added since; the live list lives at the AGCO's registered ITLs page.

What the labs actually test for

The AGCO's technical standards are specific. The outputs from a random source must pass applicable statistical tests of randomness and demonstrate unpredictability — and the random source must not be capable of being influenced by any means, such as the amount bet, style or method of play, or play history.

For software-based RNGs — which cover virtually all online casino games — the bar is cryptographic: all software-based RNGs must be cryptographically strong, meaning that given an initial state or sequence of past values, it must be computationally impossible to predict or estimate future values, and the RNG must periodically modify its state through use of an external source of entropy.

Statistical analysis involves data sets with millions of data points to verify the randomness of both physical (hardware) and virtual (software) RNGs used to determine game outcomes — which are central to game integrity. The labs also check that valid output from the random source is used for game outcomes without alteration or secondary decision by the game — meaning no hidden layer can override what the RNG produced.

The ITL itself must meet a quality standard too: the independent review must be certified by an individual or group not directly involved in the development of the gaming device, or an independent test lab with ISO/IEC 17025 accreditation for such work.

Nothing goes live without a certificate

Before applicable technologies can be deployed in Ontario's market, operators must ensure that games, RNGs, and components of igaming systems that accept, process, determine the outcome of, display, and log details about player bets and wagers — including slot games, table games, sport and event betting, poker, and other card games — have been certified against the applicable standards by an AGCO-registered ITL.

The AGCO doesn't prescribe which entity must request the ITL certification, although it is anticipated that it will most commonly be the game provider. So when you play a slot or a blackjack variant on a regulated Ontario site, the game's RNG will have been put through this process before it ever appeared on the platform.

One practical check worth knowing: regulated Ontario operators display both the iGaming Ontario logo and the BetGuard logo on their sites. Those logos signal the site is managed by iGaming Ontario and regulated by the AGCO — meaning its RNG-certified games have gone through exactly the process described above. If you don't see them, the site isn't part of Ontario's regulated market and has no obligation to meet these standards. ConnexOntario (1-866-531-2600) is there if gambling ever becomes a concern — but for anyone playing on a registered site, the RNG oversight described here is real, mandatory, and enforced before a single spin is offered.