Game Certification & RNG

A regulated casino must be able to demonstrate, with independent third-party evidence, that its games behave fairly. “Fairly” here is a precise claim, not a slogan: the random-number generator is mathematically sound, the declared return-to-player (RTP) percentage is what the maths actually delivers over the long run, the game cannot be manipulated by us or by a player, and the paytable and rules shown to players match the configured behaviour.

We do not certify our own games. We rely on the same testing laboratories that serve regulators in the United Kingdom, Malta, Sweden, the United States, Curaçao, and other established jurisdictions. The AOFA (Anjouan Offshore Financial Authority) accepts these laboratories on the same terms, which keeps our certification record portable and verifiable.

The platform accepts certificates issued by, among others:

• BMM Testlabs — bmm.com. One of the longest-established laboratories; certifications recognised globally.
• Gaming Laboratories International (GLI) — gaminglabs.com. Industry-standard for North American and European regulators.
• iTech Labs — itechlabs.com. Strong in Australasian and European markets.
• eCOGRA — ecogra.org. Specialist independent body, also operates an alternative-dispute-resolution service for online casinos.
• Quinel — quinel.com. European-focused, certifies for Malta among others.

A game on our platform must hold an active certificate from at least one of these (or another laboratory accepted by the AOFA). Certificates are stored in our vendor-and-certificate registry alongside the game record; regulator auditors have direct access.

A typical certification covers the following at minimum. Different laboratories and different game categories add specific tests, but this is the floor:

• Random-number-generator entropy. The RNG must pass statistical tests for randomness — uniformity, independence, sequence-prediction resistance — applied over very large samples (typically billions of draws).
• Return-to-player fidelity. The mathematical model declares an RTP. The lab simulates a very large number of rounds and confirms the simulated payout converges to the declared figure within a tight tolerance.
• Paytable accuracy. The pay structure shown in the user interface matches the maths. No paytable trick where the maths declared on screen differs from the maths in the engine.
• Anti-tampering and integrity. The lab inspects the binary artefact and signs a hash; deployments must serve the same hash. Any drift is detected by our hash-verification tooling and the game is removed.
• Regulatory hooks. Logging, payout caps, jackpot payout rules, session-time pop-ups, and any jurisdiction-specific behaviour are tested against the regulator’s requirements.
• Anti-cheat. The game is examined for known cheating vectors and the engine’s server-authoritative decision points are confirmed.

The return-to-player (RTP) percentage of a slot or RNG-based game is the long-run fraction of wagered money the game returns to players in winnings. An RTP of 96% means that, over millions of rounds, players collectively get back 96 cents for every dollar wagered.

RTP is a long-run statistical property, not a guarantee on any single session.

• Short-run variance. Even a high-RTP game has many sessions where players lose, and many where they win big. RTP is a property of the game over thousands of sessions.
• Per-game disclosure. The certified RTP for each game is shown on the game info pane, accessible before you launch the game and during play. The certificate ID and the issuing laboratory are also linked there.
• RTP variants. Some games have multiple RTP configurations (operators may choose a 92%, 94%, or 96% variant). On this platform we run a single configuration per game; the figure shown is the figure live.
• Game-to-game variation. RTP varies by game type. Most slots are 92–98%. Live-dealer table games typically run 97–99%. Specialty games sometimes lower. The category mix on the lobby is balanced for player choice, not optimised against RTP.

Each certificate has four states:

• Issued. The laboratory has signed off and the certificate is recorded against the game. The game is eligible for the lobby.
• Valid. The certificate is within its validity window (typically 12–24 months). The game is live in the lobby.
• Expiring. Within 60 days of expiry, the platform alerts the game-management team and the provider. A re-test is scheduled.
• Expired. The day a certificate expires without renewal, the game is automatically removed from the lobby. It cannot be relaunched until a fresh certificate is in the registry. Player wallet balances and any in-flight sessions are protected.

A certificate can be revoked early by the issuing laboratory if a defect is discovered (e.g., a paytable bug, an RNG anomaly, a regulatory non-compliance). Revocation triggers immediate removal from the lobby and a material-incident notification to the AOFA per License Conditions §12.

Every game-content provider on the platform is subject to a vendor-master policy. Key requirements:

• B2B licensing. The provider holds an Anjouan B2B (business- to-business) gaming licence, or an equivalent licence from a regulator the AOFA recognises. License Conditions §14 imposes this requirement explicitly.
• Contract. A signed master agreement covers data sharing, audit access, certificate refresh obligations, financial terms, and termination conditions. Contracts are filed with the AOFA.
• Risk rating. Each provider is risk-rated (low / medium / high / critical). Higher-risk providers undergo more frequent reviews and tighter operational controls. The risk register is regulator-accessible.
• Periodic review. Every active provider is reviewed at a cadence proportionate to its risk rating — at minimum annually.
• Termination. A provider whose B2B licence lapses, fails a review, or commits a serious operational breach is suspended from the lobby and may be retired permanently.

If you believe a specific game-round produced an incorrect outcome — a mis-paid jackpot, an apparent RNG anomaly, a paytable mismatch, an unexplained loss — please raise a complaint under our Complaints & Disputes procedure.

We retain a complete, immutable round-by-round log for every game spin or hand, for a minimum of seven years. On request from the AOFA or via the formal complaints process, we can produce:

• The exact game state at the start of the round.
• The RNG seed (or its cryptographic commitment) used.
• Every input received during the round.
• The final game state and the payout decision with timestamps.
• The hash of the game binary version that served the round.

This evidence is sufficient for the regulator or an alternative-dispute- resolution provider to verify that a round was conducted correctly. We never contest a player’s right to a regulator review of a specific round.

For questions about game certification, RTP, or a specific game-round dispute, please contact compliance@huli.bet. For a formal complaint, follow the procedure in our Complaints & Disputes page.

This policy mirrors Anjouan Offshore Financial Authority (AOFA) License Conditions APR-2026 §6 and §14. It is drafted in good faith but is subject to final review by qualified counsel before relied upon for any specific legal purpose.