iGaming Compliance & Certification
A gambling licence gets you legal standing. Certification (ISO 27001, GLI, RNG) is what aggregators, tier-1 procurement and banks actually ask for next. We run that process; accredited bodies and labs issue.
What iGaming certification actually covers
Certification is the layer after licensing that unlocks commercial deals. Aggregators and platform providers gate integrations on it, tier-1 operators' procurement commonly expects ISO/IEC 27001 from suppliers, and some regulators bake it in: Greece requires accredited ISO 27001 certification, and Denmark waives part of its security-audit requirements for holders. Without the right certificates, a licensed studio or operator still can't close the deals the licence was meant to enable.
The stack splits into two families. Management-system certification covers ISO/IEC 27001 for information security, with add-ons for cloud (27017/27018), privacy (27701), business continuity (22301) and anti-bribery (37001), and is issued by accredited certification bodies on a three-year cycle with annual surveillance. Technical/game certification covers GLI-19 for interactive gaming systems, GLI-33 for event wagering, RNG fairness certification and eCOGRA seals, and is issued by independent test labs (GLI, BMM, iTech Labs, eCOGRA).
Our role is preparation and coordination. We are not a certification body or a lab. Certificates are issued only by accredited bodies and independent test labs. What we do is run the whole process so it doesn't consume your team: gap analysis, the ISMS and documentation build, evidence preparation, selecting and engaging the right body or lab, and managing the audit dialogue to issuance, then keeping the certificate alive through surveillance and delta testing.
The routes that work for an iGaming operator
The information-security backbone counterparties ask for first. Add-ons where your market needs them: cloud (27017/27018), privacy/GDPR (27701), continuity (22301), anti-bribery (37001).
Technical certification for gaming systems (GLI-19) and sportsbook/event wagering (GLI-33), plus RNG fairness testing through GLI, BMM, iTech Labs or eCOGRA.
Independent fairness and player-protection seals operators use as a trust badge, which some markets also recognise formally.
The certification stack at a glance
| Standard | What it proves | Who asks for it | Cycle |
|---|---|---|---|
| ISO/IEC 27001 | Information-security management | Tier-1 procurement, Greece (required), banks | 3 years + annual surveillance |
| GLI-19 | Interactive gaming system integrity | Regulators, aggregators, operators | Per version — delta testing on changes |
| GLI-33 | Event-wagering system integrity | Sportsbook counterparties & regulators | Per version — delta testing on changes |
| RNG certification | Fairness of randomness | Every serious counterparty | Per engine/version |
| eCOGRA seal | Fairness & RTP, player protection | Operators as a trust badge; some markets | Ongoing with periodic review |
| ISO add-ons (27017/18/27701/22301/37001) | Cloud, privacy, continuity, anti-bribery | EU-facing and enterprise deals | Follows the 27001 cycle |
iGaming certification requirements
How iGaming certification works, step by step
- Discovery Your products, markets and counterparty requirements. We map which certificates actually unlock revenue and which can wait. Day 1
- Gap analysis Fixed-fee assessment against the target standards. Out of it comes the exact scope, sequence and cost, before you commit to anything. Week 1–2
- Build & prepare ISMS, documentation, controls, engineering evidence. We drive the build while your team stays on product. Weeks–months by scope
- Audit & issue The accredited body or lab audits; we manage the dialogue and findings to issuance. Body/lab-dependent
- Maintain Annual surveillance, delta testing on releases, renewals. The certificate stays alive without consuming your roadmap. Ongoing
Want an iGaming operator taken off your desk?
Tell us your product, target markets and payment mix — we'll confirm the route that gets you live fastest at the lowest all-in cost, with the number itemised.
How much does an iGaming operator cost?
We don't quote a flat certification price, because body and lab fees depend on your scope. After the gap analysis you get a fixed-scope estimate: exact cost, exact sequence, before committing. Certificates are issued only by accredited certification bodies and independent test labs.
iGaming certification — jurisdictions & related services
iGaming certification FAQ
How much does iGaming certification cost?
Body and lab fees depend entirely on scope, which is why we don't publish a flat figure. The process starts with a fixed-fee gap analysis; out of it you get a fixed-scope estimate covering our management, the body's audit fees and lab testing, before you commit.
Do you issue the certificates?
No, and nobody consulting you should claim to. Certificates are issued only by accredited certification bodies (ISO) and independent test labs (GLI, BMM, iTech Labs, eCOGRA). We manage the entire process to issuance and through maintenance.
Do operators need ISO 27001, or only studios?
Both, increasingly. Tier-1 operators' procurement commonly expects it from suppliers; on the operator side, Greece requires accredited ISO 27001 and Denmark waives part of its security-audit requirements for holders. It's also a banking-diligence asset.
What's the difference between GLI-19 and GLI-33?
GLI-19 covers interactive gaming systems, the RGS/online-casino stack. GLI-33 covers event-wagering systems, the sportsbook side. Suppliers running both product lines typically need both.
How long does a certificate stay valid?
ISO 27001 runs a three-year cycle with annual surveillance audits. GLI and RNG certification is per system version — releases trigger delta testing rather than a full re-test. We manage both calendars so nothing lapses.
Licences by product
Reviewed by the Vantegris licensing team. This page is general information, not legal advice. Fee schedules and timelines mirror our jurisdiction pages and change when regulators change them.
Start your iGaming certification file.
Tell us the product and we'll map the licence, banking and structure that gets it live. The consultation is free and confidential, and most enquiries get a reply within 24 hours.