What are the Gambling Commission’s remote technical standards, and why should they matter to anyone who plays at slots or table games online? Put simply, these are the detailed rules that every licensed operator must follow to ensure their software and systems work fairly, transparently and securely.
How fair play gets coded into every real-money game
The standards demand that games use a certified random number generator (RNG) that cannot be manipulated by the operator or any third party. Each spin of a slot or deal of a blackjack hand must be statistically independent from the one before it. Testing houses submit the RNG and the game’s logic to millions of simulated rounds, confirming that the actual return to player (RTP) stays within a tiny tolerance of the published figure. For a slot with a 96% theoretical RTP, the tested outcome over a huge cycle might land at 95.98% or 96.02%, and that is what the regulator accepts. Players who also browse non GamStop UK options often notice that the same testing certifications are rarely displayed for those platforms.
Game rules must also be displayed clearly on screen before a round starts. For a bonus buy feature on a slot, the standard means the exact cost and the change in volatility or hit frequency must be spelled out. If a table game offers a side bet with a house edge of 8%, that edge cannot be buried in a sub-menu. Licensed sites must also ensure that a game never misrepresents a near miss in a way that implies a win was closer than the RNG’s output actually allowed.
The way critical game logs work and what they record
Remote technical standards require every significant event to be logged in a format that can be replayed by a tester or an auditor. A single round of slots generates a record containing the seed value, the timestamp, the stake, the positions of the reels and the payout. If a player’s connection drops after the spin request reaches the server, the standards say the outcome must already be fixed and stored, so the win cannot be altered by the disconnection.
These logs accumulate into a transaction history that the player can access for at least 12 months. The operator’s own system must retain them for longer, typically several years, in a secure and unalterable format. The same logging rules apply to live dealer tables, where a time-stamped video feed runs alongside the digital record of each card dealt. If a dispute arises over a roulette result, the log shows the ball track sensor data and the precise moment the number was called, leaving little room for ambiguity.
What the financial protection rules demand from operators
Licensed operators must separate customer funds from their own operating accounts, a requirement that falls into one of three protection tiers. The highest tier keeps player money in a fully independent account controlled by a trustee or an external auditor, so the funds are clearly off the balance sheet if the business fails. A medium level still requires segregation but gives the operator more control, while the basic level simply means accounts are kept separate on paper, with no extra protection for balances.
The Commission publishes which category each licensee has chosen, and the information must also appear on the operator’s own website. This classification is not a minor administrative detail. In the event of insolvency, a player whose balance sat in a top-tier account has a much clearer legal route to recover it than someone whose operator only met the minimum segregation rule. The table below summarises the key differences across the three levels of protection.
| Protection level | How funds are held | Insolvency risk for player balances |
| High (full segregation) | Held in an account independently controlled by a trustee or external auditor | Very low; funds clearly outside the operator’s estate |
| Medium | Segregated in a separate client account but controlled by the operator | Moderate; some legal safeguards but slower recovery |
| Basic | Accounts labelled separately but not structurally ring-fenced | Higher; balances treated as general creditor claims |
| Not rated | No segregation requirement at all | Highest; funds are part of the operator’s working capital |
How remote standards keep bonus and withdrawal systems in check
Promotional offers are not banned, but the standards force operators to present terms in a way that does not trap a player in a cycle they did not understand. A wagering requirement must be stated as a single multiplier, such as 35x the bonus amount, and the contribution of each game type must be published. If slots contribute 100% but blackjack contributes 10%, that split must sit on the same page as the offer itself, not in a separate PDF linked at the bottom of a terms page.
Withdrawal rules are equally constrained. An operator cannot apply a blanket minimum withdrawal amount of, say, £50 without making it conspicuous before a deposit is made. They also cannot suspend a withdrawal request indefinitely while demanding documents that were not listed in the initial verification policy. The standards specify that identity checks should usually be completed within 72 hours of receiving all requested documents, and any delay beyond that must be explained in writing.
The oversight that keeps testing houses and operators accountable
The Gambling Commission does not test games itself. It licences and audits a small group of approved testing laboratories, each of which must maintain accreditation against international standards for software testing. When a new slot goes live on a British-licensed site, a test lab has already verified the RNG, the payout logic, the game log integrity and the return-to-player display at multiple stake levels. The operator cannot switch out a tested version for an untested build without triggering a re-certification requirement.
Operators also face regular compliance audits that sample live game logs against the original test submissions. If a site runs a promotion that modifies the RTP or the probability of a feature triggering, the lab must have approved that alteration in advance. The following list covers five core areas that a remote technical standards audit typically examines.
- RNG source code integrity and entropy seeding
- Game log completeness and replay accuracy
- Display of RTP, rules and bonus restrictions to the player
- Segregation of customer funds and withdrawal processing times
- Verification of promotional terms against the build that players actually see
All of this works because the licence can be suspended or revoked when an operator fails an audit. The technical standards are not advisory guidelines. They form part of the licence conditions themselves, and a breach can trigger a financial penalty or a full review of the operator’s suitability to hold a British gambling licence. For anyone who plays regularly, knowing that a test lab has replayed thousands of rounds and compared them to the original certification offers a layer of reassurance that goes well beyond a logo at the foot of a homepage.