Certification Terms
Certification Terms
This page summarizes, in plain language, the certification terms already published across this site — on the CCF Labs services page, in the CCF-STD-001 testing standard, in The CCF Standard, on the operator page and in the application forms. It doesn't add new terms; each section names where it comes from.
1. Services and published prices
| Service | Price | Notes |
|---|---|---|
| RNG Certification | $1,900 per game | CCF-STD-001 battery (8 NIST SP 800-22 tests) on a sample of at least 1,000,000 bits · ~10 business days |
| RTP Audit | $1,200 standalone | 10 million+ round simulation of the realized RTP vs the declared RTP |
| RNG + RTP Bundle | $2,500 | Both of the above |
| Game Logic Certification | $1,500 per game | How the game turns random numbers into outcomes, checked against the declared math model |
| Hotfix Validation | $490 per game per patch | Diff-based re-analysis of a patched build · 48-hour turnaround · requires an existing active CCF Labs certificate |
| Custom & Volume | Scoped per engagement | For many games, a catalog or a platform · volume discounts available for 5+ games from the same studio |
After you submit a game, CCF Labs confirms the scope with you and sends build delivery instructions; the submission pages say this happens within 2 business days.
Source: CCF Labs services, Submit a Game, For Operators
2. Payment
Payment is due upon certificate issuance.
Source: the agreement on the Submit a Game form
3. Validity and renewal
- Certificates are valid for 12 months. Each certificate's public record shows its issue and expiry dates.
- A certificate whose validity period lapses without renewal becomes Expired.
- For a listed casino, control of its payout-reserve wallets is re-confirmed at renewal.
- Renewal pricing is not published on this site — ask through the contact form.
Source: CCF Labs services, CCF-STD-001 § 9, The CCF Standard (criterion 3)
4. What a certificate covers
- One build only. Every certificate is bound to the specific version or build hash whose output was tested, and covers only that build.
- Changes need revalidation. Any change that can affect RNG behavior — including seeding, the generator algorithm or outcome mapping — voids coverage for the changed build until it is revalidated, either by Hotfix Validation (for changes that don't affect core RNG logic) or by full re-certification.
- Core changes need a full re-certification. Changes to core RNG or RTP logic require a full re-certification at standard pricing.
Source: CCF-STD-001 § 7, CCF Labs services (Hotfix Validation)
5. How a certification run is decided
- A certification run uses at least 1,000,000 bits of RNG output, with a documented collection method, and the SHA-256 hash of the exact sample is recorded in the report.
- A run passes when every test in the battery yields p ≥ 0.01. A single p-value below 0.01 is a failed run.
- A failed run may be repeated once on a freshly collected sample of at least equal size. Two consecutive failed runs are a failed certification; the submitter must fix the issue and start the process again.
Source: CCF-STD-001 §§ 5–6
6. Publication
The standard requires each issued certificate to link to a public test report containing, at minimum, the certificate ID (WC-YYYY-XXXX) and build lock identifier; the test date, sample size and SHA-256 hash of the sample; the per-test p-values; and the standard version used. The reports currently published do not include a build lock identifier, and each one says so. A certificate page without a linked report means the certification run hasn't been completed and published yet, and it is marked that way.
Source: CCF-STD-001 § 8
7. Status changes, complaints and revocation
A certificate's status is Active, Expired or Revoked. Grounds for revocation include:
- operating an uncertified build while displaying the badge;
- material misrepresentation in the submission;
- refusal to cooperate with a re-verification request following a substantiated complaint.
Status changes take effect on the public verification page immediately. Certified casinos are subject to the public complaints process — see how a complaint is handled.
Source: CCF-STD-001 §§ 7 and 9, For Operators
8. Listing and the CCF Certified mark
- Once a game is certified, the casino is listed in the public Certified Casinos register and may display the CCF Certified mark for that game. A certified casino has also met the six criteria of The CCF Standard.
- Standing is tied to real, current certificates: it lapses or is revoked if a certificate does.
- The embeddable badge must link to your casino's record using your casino's CCF ID (
CCF-YYYY-XXXX), not aWC-certificate ID. The badge is a static snippet; current status is shown on the verification record it links to. - Operating a build other than the certified build while displaying the badge violates the certificate terms and is grounds for revocation. A revoked certificate must not be displayed.
Source: For Operators, The CCF Standard, CCF-STD-001 § 7, Verify a Certificate
9. What you confirm when you apply
The application forms ask you to confirm that the information you provide is accurate and that you're authorized to apply. The CCF Labs form also asks you to confirm that the build you submit is the exact version to be certified. Material misrepresentation in a submission is grounds for revocation.
Source: Get Certified and Submit a Game forms, CCF-STD-001 § 9
10. What certification is not
- Not a gambling license. CCF certification is not a legal gambling license, authorizes operation in no jurisdiction, and does not constitute regulatory approval. Casinos remain responsible for their own licensing in the markets they serve.
- Not proof of security. Statistical testing shows the absence of detected departures from randomness in the tested sample. It does not prove cryptographic security or that the generator can't be predicted given knowledge of its internal state, and it says nothing about software or samples that weren't tested.
- Point-in-time. Certification applies to the locked build at the time of testing.
- Not a guarantee against loss. A fair game still has a house edge.
Source: CCF-STD-001 § 10, About CCF
Questions
Ask about prices, scope or these terms through the contact form.