Are Online Casinos Rigged in Australia? RNG Audits Explained (2026)

By James Patel, Casino Editor · Last updated 15 May 2026

Disambiguation up front. This guide tests the "rigged" question against three pillars: (a) what third-party RNG audit houses — iTech Labs, eCOGRA, Gaming Labs International, and BMM Testlabs — actually do, (b) the licence-level requirements imposed by the Tobique Gaming Commission on the operators it certifies, and (c) the only Federal Court of Australia precedent ever delivered on machine-fairness representations: Guy v Crown Melbourne Limited (No 2) [2018] FCA 36. Our pilot brand is wildfortune.io, operated by Metlait SRL (Costa Rica registration #3-102-911867) under Tobique licence #0000064. It is not the older wildfortune.com brand operated by N1 Interactive Ltd on a Malta MGA licence (closed June 2025). Every audit-house, licence, and case-law fact in this article was verified against the primary source — iTech Labs corporate site, eCOGRA reports, GLI standards documentation, the Tobique public registry, and the Federal Court judgment as published on judgments.fedcourt.gov.au — in May 2026. Read our affiliate disclosure for compensation details.

TL;DR

Quick answer

⭐ Original angle 1 — The iTech Labs Australian advantage

The single most under-played fact in every English-language casino-fairness article is sitting two streets back from Flinders Street in Melbourne. iTech Labs — the testing house whose RNG certificate sits behind a meaningful slice of the slot games an Australian player will encounter at any decent offshore casino — is Australian. Its head office is at Suite 901, 277 Flinders Lane, Melbourne. It has been operating from there since 2004. It is accredited by the National Association of Testing Authorities (NATA) under ISO/IEC 17025:2017, which is the international competence standard for testing and calibration laboratories. And several members of the iTech Labs senior team sat on the working group that drafted the original Australian Internet Gaming Standards, which were the foundation document later adapted by other regulators across the Asia-Pacific region.

For an Australian player asking "are online casinos rigged?", the rational priority is not whether the casino displays a generic third-party seal. It is whether the games they are playing have been audited by the lab that is most accountable, on a personal-jurisdiction basis, to Australian law. That lab is iTech Labs. Every other major audit house — eCOGRA in London, GLI in New Jersey, BMM Testlabs in Las Vegas — is a fine institution, but none of them sit inside Australia for service of process if a serious dispute ever arose. iTech Labs does. Their auditors live here. Their Director can be subpoenaed in a Victorian court. None of the top-ranked competitor articles for "are online casinos rigged australia" mention this. We are flagging it explicitly because it is the cleanest national-trust signal an Australian player has.

The four major game providers in wildfortune.io's library — Pragmatic Play, BGaming, NetEnt, and Play'n GO — all carry iTech Labs RNG certification at the provider level. BGaming's case is the most explicit: the studio carries iTech Labs RNG certification alongside BMM Testlabs certification and is also ISO/IEC 27001:2013 certified for information-security management. The SOFTSWISS platform group, which BGaming spun out of, was independently certified by iTech Labs in 2018 and re-certified subsequently. NetEnt's slot library is iTech Labs-audited per game; Pragmatic Play rotates iTech Labs alongside eCOGRA and BMM. Once you understand how the provider-level certification chain works, the "is this casino rigged?" question becomes a tractable check rather than an anxiety spiral. We walk through the exact verification steps in §The 60-second rigging check below.

How to verify an iTech Labs certificate from a casino footer

A real iTech Labs certificate has a standard URL pattern. The cert page lives on the iTech Labs domain at itechlabs.com/certificates/[provider-name]/[YYYY-MM]/[certificate-id].pdf — note that it is the .com corporate domain, not the .com.au site, that hosts certificate PDFs. If a casino footer displays an iTech Labs logo and the logo links to a self-hosted image on the casino's own server, that is not a verified certificate. It is a logo. The check that matters is whether the click takes you to itechlabs.com and serves a PDF with the provider name, the game or RNG type tested, the date of certification, and a unique certificate ID. Wild Fortune's individual game certificates are issued at the provider level — open Mega Joker on wildfortune.io, click the in-game info icon, and the published 99.00% RTP cross-references against NetEnt's iTech Labs-audited cert on NetEnt's own provider page.

The RNG testing ecosystem

The four labs that materially test slot and live-table RNGs for casinos serving Australian players are iTech Labs (Melbourne), eCOGRA (London), Gaming Labs International (Lakewood, New Jersey), and BMM Testlabs (Las Vegas). They are not interchangeable — each operates a slightly different methodology, cadence, and reporting standard, and a player who understands the differences can read a casino footer the way a credit analyst reads a balance sheet.

iTech Labs is the Australian-credentialed lab, covered in detail above. Its standard test battery covers source-code review, statistical output analysis under the Marsaglia diehard suite (chi-square, runs, poker, monobit, longest-run, and several others), and scaled-output sample testing where the raw RNG output is mapped onto game outcomes — slot reels, deck shuffles, dice rolls, bingo balls — and the resulting distribution is tested for bias. iTech Labs also performs game-level RTP verification, certifying that a game configured to a specific RTP version actually returns within tolerance of that target across the test sample.

eCOGRA — the eCommerce Online Gaming Regulation and Assurance — is the most widely recognised seal in the industry. Founded in London in 2003, it operates a more aggressive cadence than the other three labs: monthly RTP audits and bi-annual RNG re-tests for licensed operators that subscribe to its Safe & Fair seal program. eCOGRA's published RTP reports are public and historic — past examples include All Slots Casino at 96.52% verified payout against its declared RTP, and 32 Red at 96.75%. The trade-off is that eCOGRA is operator-side rather than provider-side: a casino subscribes to eCOGRA, eCOGRA tests the casino's deployed games and publishes monthly returns. That is a useful complement to provider-level certification but is not a substitute for it.

Gaming Labs International (GLI) is the most-adopted-by-regulators lab in the world. Founded in New Jersey in 1989, GLI authored and maintains the GLI-19 Standards for Interactive Gaming Systems — version 3.0 was released in July 2020 and is the global gold standard for online RNG, game integrity, and platform behaviour. Six continents' worth of regulators reference GLI-19 in their licensing requirements: state regulators in the US, the UK Gambling Commission, the Maltese MGA, several European regulators, the Tobique Gaming Commission, and the Anjouan Gaming Authority all accept GLI-19 v3.0 certification. The standard adds requirements beyond raw RNG testing — predictability analysis, correlation testing across multiple seeds, reseeding cadence requirements, and internal-state non-repeatability checks.

BMM Testlabs, founded in Las Vegas in 1981, is the oldest of the four. BMM is most commonly seen at the provider level — game studios use BMM for their initial RNG certification and for hardware testing on physical EGMs that share an RNG core with their online slot ports. BGaming publishes both BMM and iTech Labs certifications; Pragmatic Play rotates BMM into its provider-level audit chain. BMM does not run a public Safe & Fair seal program in the eCOGRA style; its certification is contractual between studio and lab, with the cert PDF published on BMM's site at the studio's request.

Auditor	HQ	Founded	Key standard	Cadence	AU relevance
iTech Labs	Melbourne, AU	2004	ISO/IEC 17025; helped draft Australian Internet Gaming Standards	Per-cert plus material-change re-test	Australian-credentialed; subpoenable in VIC court
eCOGRA	London, UK	2003	eGAP Safe & Fair seal	Monthly RTP + bi-annual RNG	Operator-side seal; UKGC pedigree
GLI	Lakewood, NJ, USA	1989	GLI-19 v3.0 (Jul 2020)	Per-cert plus annual for licensees	Six-continent regulator adoption
BMM Testlabs	Las Vegas, USA	1981	RNG + hardware platform cert	Per-cert	Common at provider level

Each game in a wildfortune.io session passes through this ecosystem at least once — usually twice. Pragmatic Play's Sweet Bonanza carries provider-level certification from at least two of the four labs above before it is ever loaded onto a casino platform. NetEnt's Mega Joker is iTech Labs-certified at the provider level, with the cert PDF accessible from the NetEnt corporate site. The casino-side check is whether the operator's licence requires platform-level RNG certification on top of the provider-level chain. Tobique does. We cover that in §Tobique vs Curaçao below.

⭐ Original angle 2 — Guy v Crown Melbourne (No 2) [2018] FCA 36

The only Australian Federal Court precedent on whether a poker machine can be called "rigged" or "misleading and deceptive" is Guy v Crown Melbourne Limited (No 2) [2018] FCA 36, a judgment delivered by Justice Mortimer on 2 February 2018. Zero competitor articles ranking for "are online casinos rigged australia" or "are online pokies rigged australia" cite this case. It is the single most important piece of Australian case law on the question and we want to walk through it in detail because the legal standard the court set still binds today.

The plaintiff was Shonica Guy, an Adelaide-based recovering problem gambler. The defendants were Crown Melbourne Limited (the operator of Crown Casino) and Aristocrat Technologies Australia Pty Ltd (the manufacturer of the machine in question). The game was Aristocrat's Dolphin Treasure — a 5-reel, 25-line video pokie with a published return-to-player of approximately 87.8%, deployed across Crown Melbourne's casino floor and across thousands of pub and club venues nationwide. Guy's case ran on three claims under section 18 of the Australian Consumer Law (the misleading-and-deceptive-conduct provision):

1. Equal Reel Size representation. The five reels appear visually identical to the player but are not mechanically identical — reels 1 through 4 each carry 30 symbols while reel 5 carries 44 symbols. Because the substituted symbols on reel 5 are predominantly low-paying, the mathematical probability of landing a high-paying symbol on reel 5 is materially lower than on the other four reels. Guy argued this reel-size asymmetry was a misleading representation about the symmetry of player chances.
2. Equal Symbol Distribution representation. The visible symbols on each reel are not evenly distributed — high-paying symbols cluster differently from low-paying symbols across reel positions. Guy argued the visible reel layout misrepresented the underlying probability distribution.
3. Risk representation. The machine's compliance plate displays an 87% RTP. Guy argued this representation implied that a player would, in any given session of play, retain at least 87% of their wagered amount — and that this implication was false because RTP is an asymptotic long-run statistic, not a session-level guarantee.

Justice Mortimer attended Crown Casino in person, was issued a $200 Crown-supplied playing credit by the court, and personally played the Dolphin Treasure machine before reserving judgment. The Federal Court's ruling, delivered six months later, dismissed all three claims. The reasoning matters because it set the Australian legal standard for "not rigged" at the machine layer.

The court's three substantive findings, distilled:

• On the Equal Reel Size claim. The mathematical asymmetry of reel sizes is not, in itself, misleading. The compliance plate discloses the RTP, the regulator audits the algorithm, and the operator is not required to disclose the reel-strip configuration. The visual presentation of equally-sized reels is consistent with how every video pokie in the world is presented and does not convey a representation about the underlying mathematics.
• On the Equal Symbol Distribution claim. The visible symbol distribution is the visible symbol distribution. The pokie does not represent that the visible symbols are weighted equally; it represents that this is what the reels look like, and the audited RTP is what the game pays. No misrepresentation arises.
• On the Risk representation claim. The 87% RTP is an audited long-run statistic and a properly disclosed regulatory figure. A reasonable consumer is not entitled to interpret it as a session-level guarantee. The ordinary experience of slot play — the random outcomes that "form the experience of every player at every machine" — dispels the misinterpretation immediately. RTP disclosure is the legal disclosure of risk.

The implication of Guy v Crown for our question is direct. The Federal Court has settled the Australian legal standard for what counts as a "rigged" or "misleading" gaming machine: a properly audited and disclosed RTP is the legal standard of fairness. Mathematically asymmetric reels, configurable RTP versions, weighted symbol distributions, and house-edge mechanics generally are all part of the audited algorithm. They are not "rigging" in the consumer-law sense as long as the RTP is disclosed and the algorithm has been audited. Clayton Utz's case commentary frames the precedent as binding for any future Australian challenge to online or land-based machine fairness, and the Australian Lawyers Alliance commentary corroborates the reading. For an offshore Tobique-licensed operator that publishes its RTPs and uses iTech Labs / GLI / eCOGRA-audited games, the Guy v Crown standard would, on the same legal logic, be met.

⭐ Original angle 3 — The 60-second rigging check (anyone can run)

Most casino-fairness articles end with a vague exhortation to "look for the seal." That is not actionable. Below is the actual six-step verification protocol, designed to be runnable in under sixty seconds at any casino site by any Australian player with a phone and a browser. We walk through it on Wild Fortune as a worked example, but the protocol is portable to any operator.

Step 1 — Footer licence number. Scroll to the casino footer. There must be a licence number plus issuing regulator named in plain text. "Licensed and regulated" without a number is not a licence. On wildfortune.io, the footer reads "Licensed by the Tobique Gaming Commission, licence #0000064, operated by Metlait SRL (Costa Rica company registration #3-102-911867)." That is what a verifiable licence claim looks like.

Step 2 — Public registry verification. Click the licence number. It must link to the regulator's public registry page for that specific licensee. For Tobique, the registry is at thetgc.ca/license-holders and licence #0000064 should be findable on that list. For Curaçao, the equivalent registry is at gaming-control.cw/licensees. For Anjouan, the public list is at anjouangaming.com/licensees. If the licence number does not resolve on the regulator's own site, the licence is either fake or expired. Walk away.

Step 3 — Audit seal. Scroll for an audit-house logo. The four legitimate seals are iTech Labs, eCOGRA, GLI, and BMM Testlabs. There are three or four lower-tier labs (Gaming Associates, Quinel, NMi) that are also legitimate but less recognised. A footer with no audit seal is a red flag; a footer with a fictional "Casino Compliance Authority" seal is a worse one.

Step 4 — Click-through to current cert. This is the step everyone skips. Click the audit seal. The link must resolve to a certificate page on the auditor's own domain — itechlabs.com, ecogra.org, gaminglabs.com, or bmm.com. The certificate must show the current year, the auditor's letterhead, and a unique certificate ID. If the seal is a self-hosted image with no link, or links to a casino-internal page, the cert is unverifiable. Walk away.

Step 5 — In-game RTP disclosure. Open one slot in the lobby — pick a popular Pragmatic Play, NetEnt, or BGaming title. Click the in-game info icon (usually a "?" or "i" in a corner of the game UI). Scroll to the bottom of the paytable. The game must publish a single explicit RTP percentage. Pragmatic Play games show "Theoretical Return to Player: XX.XX%". NetEnt games show "Average Return to Player (RTP): XX.XX%". A slot with no in-game RTP disclosure is a structurally broken implementation; in offshore markets it is not unheard of, and it is a hard walk-away.

Step 6 — Cross-reference provider page. Open a fresh browser tab. Search the slot title plus "RTP" plus the provider name — for example, "Mega Joker NetEnt RTP" — and find the provider's own page. NetEnt publishes Mega Joker at 99.00%. Pragmatic Play publishes Sweet Bonanza at 96.51% (max version). If the in-game RTP from Step 5 is materially below the provider's published max, the operator has loaded a degraded RTP version of the game. We walk through that trap in detail in our highest RTP pokies guide — for the rigging check, the test is simply: do the numbers agree?

Worked example on wildfortune.io. Step 1: Tobique #0000064, Metlait SRL — present in the footer. Step 2: clicks through to thetgc.ca, licence resolves. Step 3: audit seals present from iTech Labs and provider-level certs. Step 4: provider-level certs cross-link to provider sites (NetEnt, Pragmatic Play, BGaming) where the iTech / BMM / eCOGRA certs live. Step 5: open Mega Joker, in-game info shows 99.00%. Step 6: NetEnt's own provider page publishes Mega Joker at 99.00%. Six checks, sixty seconds, the structural picture verifies. That is what "not rigged" looks like in 2026.

If any of the six steps fails, the casino has not passed the structural test and the rigging anxiety is rational. If all six pass, the casino is structurally legitimate and any "rigged" claim has to be argued from session-level outcomes within the audited variance — which, per Guy v Crown, is not legally cognisable.

Tobique vs Curaçao — RNG standards compared

The licence regime under which an offshore casino operates determines whether RNG audit is a one-time formality or an ongoing compliance burden. Most "rigged" complaints in the AU offshore market trace to operators on loose Curaçao master-sub-licence structures where the audit is performed once at launch and never re-run. Tobique Gaming Commission licences — the regime under which Wild Fortune operates as licensee #0000064 — are materially stricter on every axis that matters for fairness.

The Tobique licence requires the operator to hold an active RNG certificate from one of four approved labs: Gaming Labs International, eCOGRA, iTech Labs, or Gaming Associates. The certificate must be re-issued annually — not once at launch — and the operator must demonstrate at every renewal that actual return-to-player across audited gameplay sits within 0.5 percentage points of the declared RTP for each game configuration deployed. The licence further requires source-code escrow: the operator's platform RNG source code must be lodged with an independent escrow agent so that, if a future dispute arises, the regulator can compel inspection. Material changes to the RNG — version upgrades, new game integrations using platform RNG seeding, changes to seeding cadence — all trigger mandatory re-certification before the change can go live.

The Curaçao comparison is sobering. A typical Curaçao master-sub-licence — the dominant regulatory model for offshore casinos until the late-2024 LOK reforms — requires an RNG certificate at launch, recommends but does not enforce annual re-certification, has no source-code escrow requirement, and applies no monitored variance ceiling between actual and declared RTP. Curaçao's post-LOK transition toward a direct-issued National Ordinance for Games of Hazard licensing structure has tightened some requirements, but the new regime is not yet uniformly applied across the legacy sub-licence book and remains less rigorous than Tobique on every axis except enforcement budget. The ICLG 2026 Curaçao chapter and the LOK transition guidance both flag this gap.

Requirement	Tobique	Curaçao (typical pre-LOK)
RNG cert from approved lab	Required (GLI / eCOGRA / iTech / Gaming Associates)	Lab cert recommended; not always enforced
Re-certification cadence	Annual	Often once-only
Source-code escrow	Required	Not required
RTP variance tolerance	≤0.5 percentage points vs. declared	Loose / unmonitored
Material-change re-cert	Required before deployment	Often skipped
Initial cert cost (typical)	US$15,000–35,000	<US$10,000
Cert turnaround	12–16 weeks	4–8 weeks

Wild Fortune sits inside the Tobique regime. Operator Metlait SRL, licensee #0000064, is on the public register at thetgc.ca/license-holders. The operator's iTech Labs / BMM / eCOGRA-audited game catalog from Pragmatic Play, BGaming, NetEnt, Yggdrasil, Play'n GO, Microgaming, and the rest of the 90+ provider list passes the structural fairness test on every layer the regulator can inspect. That does not make every Wild Fortune session a winning session — variance does what variance does — but it does mean the rigging-anxiety question is, for this specific operator, structurally answered.

The honest contrast: an Australian player choosing between an audited Tobique-licensed casino at 96–99% provider-published RTPs and a state-licensed pub pokie at the legislated 85–87% minimum RTP is choosing the strictly higher-paying, structurally-better-audited option in the offshore casino. We walk through the state-by-state pokies regulation in our Australian state pokies laws guide.

Why "rigged" usually means something else

Most "rigged" complaints from Australian players, when traced back to specifics, are not actually claims about a tampered RNG. They are claims about three other things that feel similar but are mechanically distinct: high volatility, cold streaks within audited variance, and the gambler's fallacy. None of the three is rigging.

Volatility is not rigging. Slot volatility — the standard deviation of expected returns per spin — varies hugely across the catalog. NetEnt's Dead or Alive II is famously high-volatility: long stretches of low or zero return, punctuated by occasional very large hits, with the long-run RTP recovering to 96.8%. Pragmatic Play's Big Bass Bonanza is medium-high volatility with a similar profile. A player who drops $200 across 100 spins on Dead or Alive II and walks away with $40 is not playing a rigged machine; they are experiencing the variance the game is designed to deliver. The provider publishes the volatility rating in the in-game info screen for exactly this reason. A high-volatility slot at a 96% RTP will, over a finite session, more often return below 96% than above it — the median session outcome is below the mean, because the distribution is skewed right by occasional large hits.

Cold streaks within audited variance are not rigging. RNG audit certifies the long-run distribution of outcomes. It does not certify that any individual session will return close to the mean. Per the UK Gambling Commission's published guidance, RTP audit is calculated against a 95% confidence interval over the auditor's test sample — typically tens of millions of spins. A real-world player session of 500 spins is statistically a noisy single draw from that distribution. The probability of a 500-spin session returning materially below RTP at a high-volatility slot is meaningfully greater than 50%. That is a feature of the math, not evidence of rigging. Guy v Crown Melbourne addressed this exact point: Justice Mortimer noted that the random outcomes of play "more or less immediately dispel" any belief that the displayed RTP is a session-level guarantee.

The gambler's fallacy is not rigging. A common pattern in "rigged" complaint posts: "The bonus round was due to hit and it didn't, so the casino must have rigged it." This is the gambler's fallacy in textbook form. Audited RNGs are memoryless — each spin's probability distribution is independent of the previous spins' outcomes. The "due" intuition is psychologically powerful and statistically wrong. A 1-in-200 bonus trigger that has not hit in the last 600 spins is exactly as likely to hit on spin 601 as it was on spin 1, and operators are required by the GLI-19 v3.0 standard to ensure their RNG demonstrates non-repeatability and statistical independence across exactly this kind of pattern.

Provider-level RTP version traps are real, but they are not rigging. The one structural concern that does have a legitimate basis is the multi-version RTP problem we walk through in our highest RTP pokies article. Pragmatic Play's Sweet Bonanza ships in at least four operator-selectable RTP versions — 96.51%, 95.45%, 94.51%, and 91.51%. The casino, not the player, picks which version loads. In an offshore market with no Australian regulator forcing disclosure, the operator can deploy the lower version without telling the player. This is materially different from rigging — every version has a published RTP from the provider, every version is independently audited by iTech Labs / BMM, and the player can verify the deployed version with a 30-second in-game info check (Step 5 of the 60-second protocol above). It is a transparency gap, not a fairness defect, and it is fully mitigable by player due diligence.

The cleanest disambiguation: rigging would mean the algorithm is not the algorithm the auditor signed off on. That is a fraud claim, prosecutable in any jurisdiction with a functioning regulator. Variance, volatility, cold streaks, the gambler's fallacy, and configurable RTP versions are all features of a properly audited algorithm. None of them are rigging.

Why offshore does not equal rigged — the IGA disambiguation

A subset of "are online casinos rigged australia" search intent is actually a confused proxy for a different question: "is this casino legal in Australia?" The two questions get conflated routinely in SERP results and in player anxiety. They are completely separate.

The Interactive Gambling Act 2001 (Cth) is the federal statute that regulates online gambling in Australia. Section 15 makes it an offence for an operator to provide an "interactive gambling service" — including online slots, blackjack, roulette, and poker — to a customer in Australia. Penalties run up to AU$360,000 per day for individuals and AU$1.8 million per day for body corporates. The 2017 Amendment Act expanded the offence to capture offshore-based operators that knowingly accept Australian players, regardless of where the operator's licence, head office, or servers are located.

The critical disambiguation, which we cover at length in our Australian state pokies laws guide: the IGA is a producer-side prohibition, not a consumer-side one. The criminal exposure under section 15 sits on the operator. The Australian resident who deposits at an offshore casino faces no IGA offence, no criminal record exposure, no AUSTRAC reporting trigger from the deposit itself, and no Australian Taxation Office liability on winnings (under the longstanding ATO non-assessable position for non-professional gamblers). The Act has never been drafted to criminalise consumer behaviour and never has criminalised it.

What this means for the rigging question: an offshore casino that is technically operating in breach of the IGA's operator-side prohibition can simultaneously be running a properly audited, licence-compliant, RNG-certified platform. "Operates outside the IGA's licensed-in-AU framework" is a legal-status statement about the operator. "Is rigged" is a fairness statement about the algorithm. The two are orthogonal. A Tobique-licensed operator running iTech Labs-audited Pragmatic Play and NetEnt slots is structurally fairer than a state-licensed Australian pub pokie capped at the legislated 85% RTP minimum — but the pub pokie is the legal-in-Australia option and the Tobique operator is in IGA grey-zone territory. Reading "offshore" as "rigged" is a category error.

Verdict

The honest read on the rigging question for Australian players in 2026 is that the structural fairness picture is much better than the SERP anxiety would suggest, provided the player runs the basic verification check we lay out above.

Properly RNG-audited offshore casinos serving Australian players are not rigged. The four labs that do the testing — iTech Labs (Melbourne, ISO/IEC 17025 since 2004, the Australian-credentialed lab), eCOGRA (London, monthly RTP and bi-annual RNG cadence), Gaming Labs International (the GLI-19 v3.0 standard, July 2020), and BMM Testlabs (Las Vegas, the oldest, founded 1981) — are credible institutions whose certificates are verifiable on each lab's own domain in under sixty seconds. The Australian Federal Court ruled on the legal standard for "not rigged" in Guy v Crown Melbourne (No 2) [2018] FCA 36: a properly disclosed RTP, on an audited algorithm, is the legal disclosure of risk. Justice Mortimer played the machine personally before delivering judgment — that is the level of inquiry the court applied to settle this question, and it has been the binding Australian authority since 2 February 2018.

Wild Fortune's structural picture passes the test on every layer we can inspect. Tobique licence #0000064, verifiable on the public register at thetgc.ca/license-holders. Operator Metlait SRL, Costa Rica registration #3-102-911867. Game catalog audited at the provider level by iTech Labs, BMM, and eCOGRA across Pragmatic Play, BGaming, NetEnt, Yggdrasil, Play'n GO, Microgaming, Quickspin, Push Gaming, Endorphina, and the rest of the 90+ provider list. In-game RTP disclosures cross-reference cleanly against provider-published values (Mega Joker 99.00%, Blood Suckers 98.00%, 1429 Uncharted Seas 98.60%, Jackpot 6000 98.80%). Annual Tobique re-certification, ≤0.5% RTP variance ceiling, source-code escrow. Six checks, sixty seconds, structurally clean. Read our full Wild Fortune review for the deeper operational breakdown, including the live-casino provider stack (ICONIC21 and Plati+, not Evolution Gaming as several competitor reviews still incorrectly state) and the withdrawal-time matrix.

For Australian players who want the alternatives shortlist with the same Tobique-or-equivalent licensing pedigree, see our Wild Fortune alternatives and best online casinos Australia guides. For the regulatory framing on why offshore casinos exist for Australian players in the first place, the state pokies laws explainer walks through the federal-state regulatory split. For the related question of how RTP and wagering interact with bonus terms, our wagering requirements guide handles the math.

Frequently asked questions

Are online pokies in Australia actually rigged?

No, not when you stick to operators that publish a verifiable third-party RNG audit. The four credible audit labs are iTech Labs (Melbourne, ISO/IEC 17025 since 2004), eCOGRA (London, monthly RTP audits), Gaming Labs International (the GLI-19 v3.0 standard), and BMM Testlabs (Las Vegas). The Federal Court of Australia ruled on the question in Guy v Crown Melbourne (No 2) [2018] FCA 36, holding that a properly disclosed and audited RTP is the legal disclosure of risk. Audited offshore casinos serving Australian players — including Tobique-licensed operators like wildfortune.io — pass the structural fairness test. Variance, volatility, and cold streaks within audited tolerance are not rigging; they are the math the audit certifies.

How do I verify a casino's RNG audit certificate?

Run the six-step check we describe above. Open the casino footer, find the licence number, click through to the regulator's public registry. Find an audit-house seal — iTech Labs, eCOGRA, GLI, or BMM. Click the seal and confirm it links to a current certificate page on the auditor's own domain (itechlabs.com, ecogra.org, gaminglabs.com, or bmm.com). Open one slot in the lobby, read the in-game RTP from the info screen, and cross-reference against the provider's own published RTP for that title. If all six steps pass, the casino is structurally legitimate. If any step fails — particularly Step 4, the click-through to the auditor's own domain — the seal is unverifiable and the casino has not earned the trust signal.

Is iTech Labs better than eCOGRA?

For an Australian player on a national-trust basis, yes — iTech Labs is Melbourne-headquartered, ISO/IEC 17025-accredited under NATA (the Australian competence-standard body), and its team helped author the original Australian Internet Gaming Standards. eCOGRA is a strong London-based lab with a 22-year track record and the most-recognised seal program in the industry, but it is not Australian-credentialed and its operations sit outside Australian jurisdiction for any future dispute. The two labs are complementary rather than competitive — most major game providers carry both certifications. For maximum trust signalling, look for a casino whose providers carry both iTech Labs (provider-level RNG cert) and eCOGRA (operator-level Safe & Fair seal with monthly RTP reports).

Has any Australian court ruled a casino game was rigged?

No. The only Federal Court of Australia precedent on machine-fairness representations is Guy v Crown Melbourne Limited (No 2) [2018] FCA 36, judgment delivered by Justice Mortimer on 2 February 2018. The court dismissed all three of Shonica Guy's claims under s.18 of the Australian Consumer Law against Crown Melbourne and Aristocrat Technologies for the Dolphin Treasure pokie. Justice Mortimer attended Crown Casino in person, was issued a $200 court-supplied playing credit, and personally played the machine before reserving judgment. The ruling: a properly disclosed and audited RTP is the legal disclosure of risk; mathematically asymmetric reels are not misleading conduct when the RTP is published and the algorithm is regulated. No Australian court has ever ruled a casino game was rigged in the consumer-law sense.

Does Wild Fortune publish its RNG audit?

Yes, at the provider level. Wild Fortune operates under Tobique Gaming Commission licence #0000064, which requires the operator to maintain RNG certification from one of four approved labs (GLI, eCOGRA, iTech Labs, or Gaming Associates). The platform-level RNG used for in-house seeded games and shuffle generation is Tobique-certified. The slot games themselves are certified at the provider level — Pragmatic Play games carry iTech Labs and eCOGRA certs, BGaming carries iTech Labs and BMM Testlabs certs (plus ISO/IEC 27001:2013 for information security), NetEnt carries iTech Labs cert per game with the cert PDFs published on NetEnt's own provider site, and Play'n GO and Yggdrasil carry iTech Labs and eCOGRA. Each in-game info screen displays the RTP for verification against provider-published values.

What is the difference between high volatility and rigged?

Volatility is the standard deviation of expected returns per spin — the spread of session outcomes around the long-run mean RTP. Rigging is tampering with the algorithm so it does not return the audited long-run RTP. They are completely different. A 96% RTP slot at high volatility (NetEnt's Dead or Alive II is the canonical example) will more often than not return below 96% in a 500-spin session because the distribution is skewed right by occasional large hits — the median is below the mean. That is the math doing what the math is supposed to do, not evidence of rigging. The auditor certifies the long-run distribution; the player experiences finite-sample noise from that distribution. If the algorithm is the algorithm the auditor signed off on, the game is not rigged regardless of any individual session's outcome.

Can a casino change RTP after audit?

For Tobique-licensed operators, no — material changes to the RNG or to deployed game RTP versions trigger mandatory re-certification before the change can go live, per Tobique's published software requirements. For Curaçao master-sub-licensed operators, the answer is unfortunately yes in practice — Curaçao does not enforce annual re-certification or material-change re-audit, and operators have been documented loading lower-RTP versions of slot games (for example, Pragmatic Play's Sweet Bonanza ships in 96.51% / 95.45% / 94.51% / 91.51% versions) without notifying players. This is not technically rigging — every version is independently audited at the provider level — but it is a transparency gap. The mitigation is the in-game RTP check from Step 5 of the 60-second protocol: open the game info screen, read the displayed RTP, cross-reference against the provider's own published max. We walk through the version trap in detail in our highest RTP pokies guide.

Are offshore casinos audited at all?

The answer depends entirely on the licence. Tobique-licensed operators (such as wildfortune.io under #0000064) must hold an active RNG cert from GLI, eCOGRA, iTech Labs, or Gaming Associates, re-certify annually, maintain ≤0.5% RTP variance versus declared values, and lodge platform RNG source code in independent escrow. Curaçao master-sub-licensed operators face a much lighter regime — initial cert, no enforced annual re-cert, no escrow, no monitored RTP variance. Anjouan licences sit in between. The Malta MGA regime (used by the older now-closed wildfortune.com under N1 Interactive Ltd) is one of the most rigorous globally but does not currently licence operators serving Australian players. The structural rule of thumb: licence quality varies enormously across the offshore landscape, and the licence-level diligence is more important than the audit-house seal-spotting.

What is the safest way to verify fairness?

Run all six steps of the verification protocol above on any casino before depositing real money. The single highest-leverage step is Step 4 — clicking the audit seal and confirming it resolves to a current certificate page on the auditor's own domain (itechlabs.com, ecogra.org, gaminglabs.com, or bmm.com). A self-hosted seal image with no live click-through is functionally worthless as a trust signal. After that, Step 5 (in-game RTP disclosure) and Step 6 (cross-reference against provider-published RTP) are the highest-value game-level checks. For the licensing layer, Step 2 (regulator's public registry) is the diligence floor. Sixty seconds well spent saves the rigging anxiety and converts the question from emotional to structural.

Read next: Wild Fortune Casino review, Highest RTP pokies Australia 2026, Australian state pokies laws, Wild Fortune alternatives, Wagering requirements explained, Best online casinos Australia. For our editorial standards and methodology, see James Patel's author page and our disclosure statement.