How to choose an online casino: a 20-point checklist
Learn how to choose an online casino by checking the licence register, the operator’s own terms and practical payout signals before you deposit. This checklist separates hard failures from fixable doubts.
Checks you can verify, not vibes
The scoring table sits further down the page. Work through it before you open an account: the first question is whether the site is safe to use, not whether you like the games.
A rating badge, a social media comment or a list of the best sites proves nothing. Evidence means a public register entry, a clause in the operator’s own terms, or a test you can run before risking more money. Reviews can organise research, but they are not evidence. If you need the platform basics first, read how online casinos work before money changes hands.
How to use the checklist
This casino checklist has two layers. Tier 1 has five kill criteria. If any one fails, stop the evaluation. The other fifteen checks are scored, but a high score cannot rescue a failed licence, hidden operator, missing funds disclosure, absent dispute route or weak safer gambling setup.
The casino safety checklist uses weights, not a glossy star rating. High-weight money and terms checks decide whether a balance can be withdrawn on sensible terms. Standard checks cover game transparency, limits and support quality.
Group | Weight | How to mark it | Deposit decision |
|---|---|---|---|
Tier 1 non-negotiables | Kill criterion | Pass or fail | Any fail means no deposit |
Tier 2 money checks | High | Pass, risk or fail | Any fail means no deposit until fixed |
Tier 3 terms checks | High | Pass, risk or fail | Any hidden or retroactive clause blocks play |
Tier 4 games, limits and support | Standard | Pass, risk or fail | Risks may be acceptable only if disclosed before deposit |
A pass means all five non-negotiables pass and no high-weight money or terms item fails.
Tier 1: the five non-negotiables
For Great Britain checks, the Gambling Commission business register accepts business name, trading name, domain name or account number, and its register states that Active means the licence is active and up to date.
The same organisation requires remote casino, bingo and betting licensees to display licensed status on every gambling screen, to keep customer funds in a separate client bank account where they hold those funds, to state in terms whether balances are protected on insolvency and how, and to allow free ADR if a dispute is not resolved within eight weeks.
The Malta Gaming Authority licence register can be searched by licensee name, authorisation status, URL or gaming service. The Curaçao Gaming Authority publishes overviews of licensed entities, but says those overviews do not guarantee current licence validity. If the licence is outside your country, check the legal position with online casino laws by country.
Licence verified in the register
How to verify: copy the casino domain, search the relevant public register, then open the record rather than trusting a footer badge. For a casino licence check, the domain and trading name should match the site you are using.
Good looks like: the domain appears under the same legal entity named in the terms, with an active or current authorisation status.
Failure looks like: no domain match, a different company, a lapsed status, or a register record that cannot be tied to the site.
Register lookup field | What to record | Pass signal |
|---|---|---|
Domain searched | The exact web address used by the casino | Exact match in the register |
Legal entity | Name shown in register and terms | Same entity in both places |
Status | Current licence status wording | Active or equivalent current status |
Products covered | Casino, slots, table games or betting permissions | The product you will use is covered |
Operating company identified
How to verify: open the footer, terms, privacy notice and complaints page. The same legal company should appear throughout. Search that company in the licence register.
Good looks like: the company name, registered address and licence record align. If several group companies are named, the contracting company is clear.
Failure looks like: vague wording such as a group brand, no contracting company, or one company in the footer and another in the terms.
Player funds protection
How to verify: search the terms for funds, insolvency, protection and client account. This is not about whether the casino is profitable. It is about what happens to your balance if the operator fails.
Good looks like: the terms state whether funds are protected, the level of protection and the method used.
Failure looks like: no insolvency clause, no level of protection, or marketing language that does not say what happens to player balances.
ADR route named
How to verify: open the complaints section and search for ADR, dispute and alternative dispute resolution.
Good looks like: the complaints process names the ADR body, explains escalation and does not charge the player for the required dispute service.
Failure looks like: only a support email, no escalation path, or a clause saying the operator’s decision is final in all cases.
Responsible gambling tools present
How to verify: check the account area before depositing. Look for deposit limits, loss limits, time-outs, self-exclusion and reality checks. The Gambling Commission says offered financial-limit periods should include 24 hours, 7 days and one month, with at least 24 hours before customer-led increases take effect. GAMSTOP lists online self-exclusion periods of six months, one year, five years and five years with auto-renewal.
Good looks like: limits are visible before deposit, decreases apply quickly, increases are delayed, and self-exclusion is not hidden behind chat.
Failure looks like: no visible tools, only a generic responsible gambling page, or pressure to keep playing after asking for restrictions.
Tier 2: the money checks
For Great Britain, the Gambling Commission requires remote licensees to verify identity before a customer is permitted to gamble, prohibits using a withdrawal request to demand extra information that could reasonably have been requested earlier, bars credit-card gambling payments, and says consumers must not be given the option to cancel a withdrawal request.
Withdrawal limits per day, week and month
Where to find it: payment terms, banking page, withdrawal policy and bonus terms. Search for withdrawal limit, cashout limit, per day, per week and per month.
A low monthly cap can turn a payable win into a long drip-feed. Test the clause by dividing the balance you would be unwilling to leave on-site by the monthly cap. If the result is more monthly payments than you would accept, mark it as a fail. A claim of fast payouts does not change that cap.
Fees and currency conversion
Where to find it: cashier, payment method table and currency terms. Search for fee, charge, conversion, exchange rate and processing.
Use the same comparison each time: withdrawal amount minus stated fixed fee minus any stated conversion cost. If the operator does not disclose the conversion method before deposit, mark the item as a risk. If it applies a fee only after you request cashout, mark it as a fail.
Return-to-source rules
Where to find it: payment terms and anti-money-laundering section. Search for return to source, original payment method and closed card.
Good terms explain how withdrawals return to the original method and what happens if that method is unavailable. Bad terms let the operator choose an alternative without explaining checks, timelines or evidence.
When KYC is required
Where to find it: registration flow, account verification page and identity clauses. Search for KYC, verification, source of funds, source of wealth and documents. For the practical detail, use casino KYC and account verification explained.
Good practice is to tell you what documents may be needed before you deposit or gamble. A risk appears when the site lets you deposit quickly, then introduces broad document demands only after you ask to withdraw.
Evidence of actual payout speed
Where to find it: not in a banner. Run a small withdrawal test and record the request time, approval time and arrival time. Keep copies of any emails.
Good evidence is a completed withdrawal under your own account conditions. Poor evidence is a claim of instant cashouts without proof, a pending period with a reverse button, or support refusing to point to the relevant term.
Tier 3: the terms checks
The Gambling Commission requires contractual gambling terms to be easily accessible. Do not accept a bonus, deposit or spin until you have opened the relevant clauses. For clause-by-clause reading, use the casino terms that matter before you opt in. For risk wording, compare with unfair casino terms to look for.
Wagering requirement and its base
Ctrl+F search terms: wagering, playthrough, bonus balance, real balance and contribution.
Check what must be wagered and what it is applied to. A clear clause states whether the base is bonus funds, deposit funds, winnings or a combined balance. A fail hides the base until after opt-in or lets the operator recalculate it later.
Max bet during wagering
Ctrl+F search terms: max bet, maximum bet, stake limit and bonus abuse.
The max bet rule is one of the easiest ways to void bonus winnings. Good terms display it next to the offer and in the bonus terms. A fail buries it in a separate document or applies it to bets placed before the player could see it.
Max cashout
Ctrl+F search terms: max cashout, maximum withdrawal, winnings cap and capped winnings.
A max cashout clause limits how much can be withdrawn from a bonus. Good terms state it before opt-in and explain whether it applies to bonus winnings only. A fail applies the cap to real-money winnings or changes the cap after play.
Dormancy and forfeiture
Ctrl+F search terms: dormant, inactive, inactivity fee, confiscate, void and forfeiture.
Look for the trigger, notice process and what happens to cash balances. A fairer clause gives clear notice and separates bonus expiry from real-money balance forfeiture. A fail lets the operator remove funds without clear notice.
Unilateral amendment rights
Ctrl+F search terms: amend, change, update, sole discretion and without notice.
Terms change over time. The risk is a clause that lets the operator apply new terms to past play, pending withdrawals or already-earned winnings. Mark it as a fail if the operator claims unrestricted discretion.
Clause | Acceptable evidence | Unacceptable threshold |
|---|---|---|
Wagering base | Base stated before opt-in | Base hidden, variable or changed after play |
Max bet rule | Prominent in offer and bonus terms | Buried rule used to void winnings |
Max cashout | Cap stated before opt-in and limited to bonus context | Cap applied to real-money winnings |
Dormancy | Trigger and notice process explained | Funds forfeited without clear notice |
Amendments | Future changes apply prospectively | New terms applied to past play or withdrawals |
Tier 4: games, limits and support
The Gambling Commission says game rules should include restrictions such as play-duration limits and maximum wins, and its remote slots standard sets a minimum 2.5-second interval between starting a game and being able to start the next game cycle.
Providers and certification
How to verify: open several games and check whether the provider name appears in the game frame or help file. Then check whether the site names an independent testing body or certification route for game fairness.
Good looks like: provider names are visible, game rules load, and certification claims are specific. Failure looks like: copied logos, blank help files or no route to verify randomness and rules.
RTP disclosure and configurable RTP
How to verify: open the game information panel, record the slot RTP shown in-game, then compare it with the provider’s published figure for the same title and version. Do not assume the title alone identifies the setting.
The point many players miss is configurable RTP. The same game title can be supplied at more than one return setting, and the operator’s chosen setting is the one that matters. Game rules and configurations decide the maths.
Table and bet limits
How to verify: open roulette, blackjack, baccarat or live games before depositing where possible. Record the table minimum, table maximum, side-bet limits and any maximum win rule.
Good looks like: limits are visible before staking. Failure looks like: a player discovers after deposit that preferred games are unavailable at their intended stakes.
Demo availability
How to verify: open a game without logging in or before funding the account. If demo play is blocked, check whether the rules and RTP are still visible.
Good looks like: you can read the help file before staking real money. Failure looks like: no rules until after deposit.
Support responsiveness
How to verify: ask one precise question: Which clause states the level and method of insolvency protection for customer funds? Measure the reply and save the answer.
Good looks like: support links the exact clause. Failure looks like: scripted reassurance, no clause, or pressure to deposit first.
Scoring it: what a pass actually looks like
The table below is the on-page checklist and an anonymised scorecard. It follows the evidence-first logic used in the casino review scoring method, but you can run it yourself without trusting a rating.
No row matches your search.
Point | Check | Weight | Example result |
|---|---|---|---|
1 | Licence verified in public register | Kill | Pass |
2 | Operating company identified | Kill | Pass |
3 | Player funds protection stated | Kill | Pass |
4 | ADR route named | Kill | Pass |
5 | Responsible gambling tools present | Kill | Pass |
6 | Withdrawal limits per day, week and month | High | Risk |
7 | Fees and currency conversion disclosed | High | Pass |
8 | Return-to-source rules clear | High | Pass |
9 | KYC timing and documents clear | High | Pass |
10 | Actual payout test completed | High | Risk |
11 | Wagering base clear | High | Pass |
12 | Max bet during wagering clear | High | Pass |
13 | Max cashout clear | High | Pass |
14 | Dormancy and forfeiture clear | High | Pass |
15 | Unilateral amendment risk controlled | High | Pass |
16 | Providers and certification visible | Standard | Pass |
17 | RTP disclosed in-game | Standard | Pass |
18 | Table and bet limits visible | Standard | Pass |
19 | Demo or rules visible before play | Standard | Pass |
20 | Support answers clause-specific question | Standard | Risk |
This example does not pass for deposit yet. The kill criteria pass, but a high-weight withdrawal-limit risk remains unresolved.
The 30-minute pre-deposit test
Use this practical routine before risking more than a small test amount. The goal is not to prove the casino is generous. The goal is to find blockers before they control a meaningful balance.
-
Register without depositing. Check whether the operator identifies itself, shows account limits and requests identity information early.
-
Open three terms sections. Read payments, bonuses and complaints. Search the exact terms listed above.
-
Check the licence register. Match the domain, legal entity, status and product permission.
-
Deposit the minimum you are comfortable testing. Use a payment method you would also use for withdrawal.
-
Request a withdrawal of part of it. Look for document requests, pending status, fees and any option to cancel the withdrawal.
-
Ask support the insolvency-protection question. A good answer points to the clause. A weak answer gives reassurance without evidence.
If any step produces a vague answer, stop. A small deposit test is useful only if you are willing to walk away from a failed result.
Red flags that override the score
Some casino red flags are serious enough to end the review immediately. Use rogue casino warning signs before you deposit if any of these appear.
Red flag | Why it overrides the score |
|---|---|
Licence cannot be matched to the exact domain | The site may not be covered by the authorisation it displays |
Company name changes between footer, terms and register | You may not know who holds your balance |
No funds protection wording | You cannot assess insolvency risk |
No named ADR route | A dispute may stop at support |
Withdrawal can be cancelled after request | It pressures continued gambling with money already requested |
Terms allow winnings to be voided at sole discretion | The operator keeps too much control after play |
What this means for you
Run Tier 1 before every new account, not once a year. Licences, company details and terms can differ between sites that look similar. If the non-negotiables fail, do not try to balance the risk with bonuses, game choice or payout promises.
Frequently asked questions
How do I know if an online casino is safe?
Treat a casino as unsafe if the licence is not verified, the operating company is unclear, player funds protection is not stated, no ADR route is named, or responsible gambling tools are missing. If those five kill criteria pass, use the checklist to test payments, terms, games and support before depositing.
How do I check a casino licence?
First, copy the exact domain and legal company from the casino’s footer and terms. Second, search the relevant public register by domain, company name or account identifier. Third, open the register record and match the domain, company, status and permitted gambling products, instead of relying on a footer seal.
Are casino reviews trustworthy?
Reviews can be useful prompts, but commission from operators pays for most of them, including parts of this site. Treat any review as a lead, not proof. Verifiable signals are stronger: public licence records, operator terms, payment clauses, complaint routes, safer gambling tools and a small withdrawal test under your own account.
What withdrawal limit is reasonable?
For this checklist, the monthly cap should meet your own cashout threshold. Use the arithmetic before depositing: divide the largest balance you would be willing to leave on the site by the longest payout period you would accept. If the stated monthly limit is lower than that result, mark it as a fail.