No single sign proves that an online casino is legitimate. Twelve checks, each possible in a few minutes, add up to an informed picture: whether the licence is real and covers the domain you are on, who the operator is, what the terms allow, how withdrawals and identity checks work and where you can complain. A passing check is not a safety guarantee, and we never label a casino “safe”; this guide shows what to look at, what each result does and does not prove, and what we recorded for the 15 casinos we profile.
The 12 checks
- A licence is named – with a number and a regulator. Look in the footer and the terms. A badge or a general statement that the casino “has a licence” without a regulator and number is a claim, not a licence. Next: what a licence is.
- The register confirms it. Leave the casino’s site and open the regulator’s own register. Match the company name, the status (active, suspended, expired) and the domain. A seal that links only to an image does not count. Next: how to check a licence and the register check for 15 casinos.
- The domain is the one on the register. A licence can belong to one site and not to a lookalike. Type the address yourself instead of following a link from an ad or message. Next: how to spot fake and cloned casino sites.
- An operating company is named. The brand is not the licence holder. The terms should name the company, its country and its registration details. Next: brand versus operator.
- The terms can be read and are dated. Terms and conditions, privacy policy and bonus rules should be reachable without an account. Check which language is binding and which law and venue apply. Next: the clauses we flag.
- Withdrawal rules are stated. Look for processing times, limits, fees and whether withdrawals must go back to the deposit method. Remember that a target time is not a guarantee. Next: withdrawal times and limits.
- Identity checks are explained. A casino that regulates itself properly tells you when it may ask for ID or proof of the source of funds. “No KYC” rarely means never. Next: casino KYC explained.
- Payment methods and networks are documented. For crypto, the cashier should name coins and networks. A wrong network can lose a deposit. Next: crypto casino payments.
- Bonus conditions are complete. Wagering, time limit, maximum bet and maximum cashout belong next to the offer, and the casino’s own pages should not contradict each other. Next: bonus terms.
- Player-protection tools exist. Deposit limits, cooling-off and self-exclusion should be available and explained. Next: limits and self-exclusion.
- A complaint route is named. The terms should say whom to contact and what happens next, ideally with an independent dispute body. What exists depends on the licence. Next: complaint routes by licence.
- Fairness is explained. Either a provably fair method you can recompute, or a description of how game results are produced and tested. A test certificate says nothing about whether the operator pays. Next: provably fair explained.
Signs to stop
- No operator, no register entry or a domain that differs from the register.
- A licence claim that cannot be matched to a regulator’s public list.
- Pressure to deposit quickly, to install software from outside an official app store or to move to a messaging app.
- Terms that are missing, undated or only available after you have deposited.
- A withdrawal that is refused without a written reason tied to a clause.
An SSL padlock only means the connection is encrypted; it says nothing about who runs the site, and a seal of approval without a register entry proves nothing.
What our checks found for the 15 casinos we profile
Our verification process runs eight checks on every casino: operator, licence, exact domain, terms, payments, KYC policy, bonus terms and restricted countries. Verified means that the process is complete for a casino, not that it is safe or recommended. Findings stay visible even when a casino is verified.
| Casino | Our 8 checks | Licence finding | Operator named in the terms | Checked |
|---|---|---|---|---|
| 888casino | 6 of 8 checks · Pending | Domain match not confirmed | Not published | 7 Oct 2026 |
| BC.Game | 7 of 8 checks · Pending | Listed in issuer registry | Not published | 5 Oct 2026 |
| Betway | 7 of 8 checks · Pending | Confirmed in registry | Not published | 13 Oct 2026 |
| BitStarz | 8 of 8 checks · Verified | Confirmed in registry | Not published | 13 Oct 2026 |
| Gamdom | 6 of 8 checks · Pending | Listed in issuer registry | Not published | 13 Oct 2026 |
| Guts | 7 of 8 checks · Pending | Confirmed in registry | Not published | 7 Oct 2026 |
| LeoVegas | 7 of 8 checks · Pending | Confirmed in registry | Not published | 13 Oct 2026 |
| mBit Casino | 6 of 8 checks · Pending | Confirmed in registry | Not published | 13 Oct 2026 |
| Mirax Casino | 5 of 8 checks · Pending | Confirmed in registry | Not published | 13 Oct 2026 |
| Mr Green | 8 of 8 checks · Verified | Confirmed in registry | Not published | 13 Oct 2026 |
| Rizk | 8 of 8 checks · Verified | Confirmed in registry | Not published | 13 Oct 2026 |
| Roobet | 7 of 8 checks · Pending | Confirmed in registry | Not published | 13 Oct 2026 |
| Shuffle | 7 of 8 checks · Pending | Confirmed in registry | Not published | 5 Oct 2026 |
| Wild.io | 8 of 8 checks · Verified | Listed in issuer registry | Not published | 10 Oct 2026 |
| Winz.io | 8 of 8 checks · Verified | Confirmed in registry | Not published | 10 Oct 2026 |
What this does not prove
A snapshot is not a prediction. A confirmed licence says a regulator lists the operator, not how it will treat your withdrawal; a clean set of terms says nothing about conduct. We have not deposited, played or withdrawn at any casino for these profiles, and every statement about a casino is what its own documents and the registers say, with a check date. For how we turn the results into a score, see our methodology.
Frequently asked questions
How can I check if an online casino is legit?
Find the licence number and regulator in the terms, then confirm in the regulator’s own register that the operator is listed, active and covers the domain you are using. Then read the terms for withdrawal rules, identity checks and the complaint route. The twelve checks above put this in order.
Is a casino with a Curaçao or Anjouan licence legit?
A licence from either jurisdiction tells you which issuer stands behind the operator; it does not guarantee payouts. The two registers differ in what they show, so check the entry itself and read the terms. Our guide on Anjouan versus Curaçao licences explains the difference and where to complain.
Does the SSL padlock mean a casino is legit?
No. It means the connection between your browser and the site is encrypted. It says nothing about who operates the site or whether it holds a licence.
Can a casino be licensed and still refuse to pay?
A licence gives you a regulator and a complaint route, not a guarantee. If a payout is refused, ask for the reason in writing and follow the route for that licence; see what to do when a withdrawal is rejected or pending.
Gambling can harm. Set limits before you play and use our responsible gambling page if play stops being fun.