How to recognise a legitimate online casino

The question that every new player asks, in one form or another, is whether the casino in front of him is "legit", and the question hides two different ones. The first is whether the site is secure (the encryption of the connection, the storage of card data, the protection of the account), the second whether the operator is reliable, that is solvent, correctly licensed and in the habit of paying. Technology has almost solved the first in twenty years; the second remains open, and it is the subject of this page.

In our experience, since 2002, the houses that failed to pay were rarely the ones with weak encryption; they were the ones with a vague licence, terms written against the player and a "support" that answered only before the deposit. The method below starts from the licence and its register, continues with the certificates and the terms, and ends with the signals a rogue operator leaves in plain sight.

The licence, and the register where it is checked

A licence is a permit granted by an authority to a company, for a territory and for a period, and it is worth exactly what that authority does when a player complains. The UK Gambling Commission (Gambling Act 2005, extended in 2014 to every operator serving Britain) and the Malta Gaming Authority (Gaming Act of 2018) publish registers in which the company name printed in a casino's footer can be looked up in a minute, as we do for every review, and the entry shows the status of the licence and the domains that it covers.

Gibraltar (the Gambling Commissioner, under its Gambling Act of 2005), the Isle of Man (the Gambling Supervision Commission, since 2001) and Alderney (the Alderney Gambling Control Commission, since 2000) belong to the same family of serious regulators, smaller and oriented towards the British market. The Kahnawake Gaming Commission (the Mohawk territory near Montreal, licensing since 1999) is the historical home of the Casino Rewards group and of many houses of the first generation, which chose it when Europe had no licences to offer.

Curaçao deserves a paragraph of its own. For twenty-five years it was the address of the "sub-licence" (a permit resold by four master licensees, with no register and no complaints body), until the national ordinance on games of chance, in force since 24 December 2024, replaced that system with licences issued directly by the Curaçao Gaming Authority. The reform is real, and its effects are young: an operator that shows a Curaçao seal today may hold a provisional licence under review, so the frame remains the weaker one on this site.

Anjouan, one of the islands of the Comoros, has become since 2023 the address of many "crypto" casinos, with a licence issued by its Betting and Gaming Board for a modest fee and without a complaints path worth the name. We treat it as we treat Curaçao: the licence tells you that a company exists, and nothing about what happens when the company refuses to pay!

Certified games and published payouts

The second check concerns the games, whose "RNG" (the random number generator behind each spin and each card) is certified by independent laboratories. The names in the footers are usually three, eCOGRA (London, set up in 2003 with the backing of Microgaming and 888), iTech Labs (Melbourne, since 2004) and GLI (Gaming Laboratories International, in New Jersey since 1989), each with a "seal" linking to the certificate. A seal that links nowhere is a picture.

Some groups go further and publish monthly "payout reports", that is the percentage actually returned to players in each category of game over the month (the Casino Rewards houses publish eCOGRA's). Every modern "lobby" also prints the theoretical "RTP" of each slot in its information panel; the first number describes the past of the whole house and the second the design of one game, and a casino that hides both has, in our view, made a choice.

The terms that must be read

The third check is the terms, long because lawyers write them and decisive, far more than the licence, for whether your win is paid. The clauses that matter, in our reading, are few: the "wagering" (the bets required before a withdrawal, counted on the bonus or on deposit and bonus together), the "max bet" with a bonus active and the "max cashout" on free offers. Then come the time allowed, the games excluded from the count and the limits on withdrawals per week or per month.

The last clause is the one that surprises most, because a player who wins $20,000 at a house with a limit of $2,000 a week will wait ten weeks for his money, and he will have agreed to it! Our page on welcome bonuses shows the calculations on real offers, and the "free spins" page explains the "max cashout" that turns a hundred spins into a ceiling of fifty dollars.

Two further clauses signal the house's attitude rather than its arithmetic: the one on "irregular play" or "bonus abuse" is legitimate when it describes concrete behaviour (betting on both colours of a roulette, for example) and dangerous when it lets the operator void any win it dislikes. The one on "dormant accounts" authorises monthly fees on a balance left untouched, and terms available only after registration are a signal in themselves.

Where a complaint goes when support stops answering

A legitimate casino has a complaints procedure written in its terms, with an address and a deadline, and behind it an external body that the terms must name. For a licence from the UK Gambling Commission the operator must name an approved "ADR" (alternative dispute resolution) provider, usually eCOGRA or IBAS (the Independent Betting Adjudication Service), whose decisions up to a set amount bind the operator. For a Maltese licence the Player Support Unit of the MGA receives your complaint once the operator's own procedure is exhausted.

The Kahnawake Gaming Commission hears disputes through a form on its site, the other regulators through their channels, the new Curaçao authority through a portal still to be judged. Before writing to any of them we would keep every piece of evidence (dates, the names of the agents, the "live chat" transcripts, the screenshots of the terms at the time), because a regulator decides on documents and not on indignation.

The signals of a rogue operator

Some signals are visible before the first deposit, in our experience, and a reader who learns them is spared the complaint. The footer without a company name, an address and a licence number is the first. Software from an unknown or unnamed studio is the second (a legitimate house names its providers because they are its strongest argument). Terms that mention the "real gambler" or promise a casino "legally licensed and fully insured" are the third, since no insurer covers a casino's debts to its players.

The others appear after registration: a "VIP manager" who telephones to suggest a deposit, a verification requested only after a large win and repeated as if the documents had never arrived, a withdrawal that stays "approved" for weeks. A bonus credited without having been asked for is another, since it binds the balance to a wagering that nobody accepted. The complaints forums, read with care, archive all of them.

Our selection of licensed casinos

The casinos below were chosen with this method, as our top 10 was, and with the same limits. Each was tried in "demo" mode (free play, without depositing), its terms read and its licence checked on the register; only Casino Classic and Jackpot City were played with real money, by our collaborators from two Canadian markets before 2025. The offers are the operators' published ones at the time of writing and change, and the terms on their pages prevail.

Ad disclosure

Ad disclosure: some casino links are affiliate links; we may earn a commission at no extra cost to you. It never affects our ratings. 18+.

Markets

Markets: the operators listed on our pages address the international, non-regulated market and do not hold a licence in every country from which our readers arrive: before registering, it is the player's responsibility to check that the law of the country in which he or she is located allows playing with that operator.

  • 888 Casino

    888 casino

    $/€88 no deposit welcome bonus

    888 Casino opened in 1997 on software written in-house, which remains the base of its lobby beside the games of NetEnt, Games Global and Pragmatic Play, and it is one of the few houses whose parent company (888 Holdings, listed in London and renamed Evoke in 2024) publishes accounts that anyone can read; its licences come from the UK Gambling Commission, from Gibraltar and from the Malta Gaming Authority, each of which keeps a public register. The $88 "no deposit" offer, where the operator grants it, carries a "max cashout" and a wagering on the winnings that our 888 Casino review sets out with the calculations.
    18+ | Gamecare | Bonuses under T&Cs

  • JackpotCity Casino

    jackpot city casino

    Twenty-five years online and a package of $1,600

    Jackpot City, online since 2001 in the stable that became Super Group (listed in New York), declares the Malta Gaming Authority and the Kahnawake Gaming Commission as its licences, and the footer of the site reached from each country names the company that answers for that market, which is where a check on the register begins. The games of Games Global (formerly Microgaming) sit at its core, the site speaks more than twenty languages, and the package of $1,600 over four deposits is the operator's published offer; it is one of the two casinos on this site played with real money, by our collaborators from two Canadian markets before 2025, as our Jackpot City review tells.
    18+ | Gamecare | Bonuses under T&Cs 

  • Casino Classic 

    casino classic

    A tested classic with one free chance at a jackpot

    Casino Classic is the house of the Casino Rewards group that our collaborators from two Canadian markets tested with real play before 2025, from the first deposit to the withdrawal, and the group's Kahnawake licence, its monthly eCOGRA payout reports and a quarter of a century online are the reasons it stands here, rather than its offer. The offer itself, one free chance at a progressive jackpot on registration, replaced long ago the $500 for sixty minutes of the early years, and the terms attached to it (a wagering on any win and a ceiling) are read in our Casino Classic review.

  • Prime Slots

    Prime Slots

    A €131 bonus and 123 spins on the first deposit

    Prime Slots is operated by Skill On Net Limited of Malta under licence MGA/CRP/171/2009/01 of the Malta Gaming Authority, a number that any reader can type into the authority's register, and its lobby, built around the slot machine from the beginning, gathers more than 1,500 titles from many studios with a section of scratch cards and a live casino. The welcome offer is made of "free spins" (123 on the first deposit, according to the page we reached) beside the bonus the page lists, and the wagering on the winnings of the spins is the clause to read before depositing.
    18+ | Gamecare | Bonuses under T&Cs

  • Betway Casino & Sports  

    betway

    From the live casino to esports, with national licences

    Betway, a bookmaker since 2006 and a casino since soon after, belongs to Super Group and holds licences from the UK Gambling Commission, from the Malta Gaming Authority and from several national regulators, which is the strongest frame a player can find for an international brand; one account opens sports, "esports", the casino, the live tables and a "Vegas" section of slots. The welcome offers vary by country and by product, and our Betway review reads the casino terms clause by clause rather than repeating the headline.

    18+ | Gambling Therapy | Bonuses under T&Cs

The precautions before a deposit

A few habits spare most of the troubles described above. Have your identity document and a proof of address ready before registering, and send them to support before the first deposit rather than after the first win, since the "KYC" check (the identity verification required by every licence) is otherwise requested at the first withdrawal and adds days to it. Deposit a small sum first, withdraw a part of it to see the "cashier" work in both directions, and only then decide.

Prefer written channels to the telephone, save the transcripts of every chat and read the terms of each bonus before accepting it (a bonus can be refused, and often should be). The responsible-gambling tools exist at every licensed house and work only for the player who sets them, so they are worth setting before the first deposit and not after the first loss.

If your country regulates online gambling, the choice is simpler, because a casino licensed there answers to a regulator within your reach; the markets box above says why we repeat it on every page. A player outside such a country chooses among international operators, and this page was written for that player.

No deposit bonus lists by region

Frequently asked questions

The answer is a method rather than a list: look up the company printed in the footer on the regulator's register, check that the games carry a certificate (eCOGRA, iTech Labs or GLI), read the terms on wagering, "max cashout" and withdrawal limits, and make sure a complaints body exists beyond the operator's support.

No: a licence is worth what its authority does when a player complains. A permit from the UK Gambling Commission or the Malta Gaming Authority, with public registers and complaints bodies, protects a player in a way that a permit from Curaçao or Anjouan does not, even after the Curaçao reform of 24 December 2024.

Not by itself, since a seal certifies that the random number generator and, sometimes, the monthly payouts were tested by an independent laboratory, which says nothing about the terms or the speed of payments, and a seal without a link to the certificate on the laboratory's site is only an image.

First to the operator, in writing and with the evidence kept, then to the body named in the terms: for a British licence an approved "ADR" provider such as eCOGRA or IBAS, for a Maltese licence the Player Support Unit of the MGA, and for Kahnawake, Gibraltar or the Isle of Man the regulator's own complaints form.

By the method described on our About page: demo play by the editorial team, terms read in full, licence checked on the register, reputation gathered from public sources, and real play only for Casino Classic and Jackpot City, by our collaborators from two Canadian markets before 2025. A licence from Curaçao alone keeps a casino between 2.5 and 3.5 whatever its offers.

The age is 18 in most jurisdictions and 21 in some, and a legitimate casino asks for the identity document precisely to check it, so that a house which never asks is not being generous but careless with everyone's money.

By the Online-Casinos.ws editorial team · Online since 2002 · Last updated: 9 October 2026