Guide · Updated July 2026
It's worth starting with an important distinction, because the word "rigged" gets thrown around loosely in casino forums and social media comments, usually after a losing session. A licensed online casino running certified RNG software doesn't need to manually rig outcomes to make money — the built-in house edge on every game already guarantees it a long-run mathematical profit, the same way a real casino floor does. Losing a session, even a long or expensive one, isn't evidence of rigging; it's evidence of variance interacting with a house edge that was always there, explained in full in our house edge guide and our piece on why RTP says nothing about your next ten spins.
What this guide is actually about is different: identifying operators that are unfair or dishonest in ways that go beyond normal mathematical variance — sites with no real licence, unaudited or fabricated game software, or business practices designed to prevent winning players from ever being paid. That's a genuinely different problem from "I had a bad session," and it has concrete, checkable warning signs rather than a feeling.
The checklist
Each of these is something you can verify yourself in a few minutes, before risking any money.
Every legitimate online casino states its licensing jurisdiction somewhere on the site, typically in the footer — commonly a Curaçao eGaming licence for offshore-facing operators serving South Africa, sometimes alongside provincial gambling board information for premises-linked online operations. If you scroll the entire site and can't find a licence number or issuing authority mentioned anywhere, that's a serious warning sign. See our guide on how to verify a casino license for the actual lookup tools to confirm a licence number is real, not just printed on the page.
Legitimate operators source games from studios — Pragmatic Play and similar major providers — whose RNG software has been independently tested and certified by recognised testing labs before the games are ever deployed. A casino that can't point to certified game providers, or that runs unfamiliar, unbranded "games" with no stated software provider at all, hasn't demonstrated that its outcomes are genuinely random and fair. Our guide on how random number generators work explains what proper certification actually verifies.
The single clearest red flag of an actively dishonest operator is a documented pattern — not one isolated complaint, but a recurring pattern across multiple independent players — of approved withdrawals that never arrive, accounts frozen right after a win, or shifting excuses each time a player follows up. One delayed withdrawal can be an operational hiccup; a consistent pattern across many players, especially visible in casino forums and review sites, is a business model.
Deposit limits, self-exclusion, session reminders and links to support organisations are now baseline features at any operator serious about long-term, sustainable business — because regulators in reputable licensing jurisdictions require them. Their complete absence suggests either an unlicensed operation or one that isn't taking its licensing obligations seriously, both of which correlate with other fairness problems. Our self-exclusion guide covers what these tools should look like when properly implemented.
Every bonus has terms, and legitimate ones — even generous ones — state them clearly. A red flag is bonus terms that are deliberately vague, buried, contradictory, or that change retroactively after a player has already opted in and started wagering. Extremely high wagering requirements (triple digits, for instance) combined with short expiry windows are sometimes used less as a genuine promotion and more as a mechanism designed so very few players ever actually clear them.
A legitimate operator publishes a real company name, registration details tied to its licensing jurisdiction, and functioning contact channels — live chat, email, sometimes a phone line. A site offering only a generic contact form with no company name, or contact details that bounce or go unanswered for days, is a meaningful warning sign, especially once real money is involved and something goes wrong.
It might seem counterintuitive, but a casino that never asks for identity verification before a withdrawal is itself a red flag, not a convenience. Legitimate operators are required to verify identity as part of anti-money-laundering compliance tied to their licence — its total absence often means the operator isn't meaningfully licensed or regulated at all. Our KYC verification guide and FICA verification guide explain what a normal, properly run verification process looks like.
Mzansi Pro-Tip
Do this five-minute check before depositing anywhere unfamiliar: search "[casino name] withdrawal problem" or "[casino name] complaint" alongside the operator's name, and read a handful of the most recent results rather than the oldest ones — operator practices can change over time, for better or worse. A cluster of recent, detailed, consistent complaints about withheld payouts is worth far more than a single angry post from a player who simply lost a session and is venting.
We built our own rating methodology around exactly this kind of verifiable evidence — licensing status, real account testing, and consistency of payout behaviour — rather than marketing claims, which is why we're comfortable naming Pantherbet, 10bet and Hollywoodbets specifically as operators that pass this checklist based on our own testing.
If you're already registered somewhere and something feels wrong — a withdrawal that's been "under review" far longer than the operator's stated timeframe, a bonus that got cancelled with a vague explanation, or support that stops responding — there's a sensible order of steps rather than immediately assuming the worst. Start by re-reading the specific terms that apply to your situation; a surprising number of disputes trace back to a wagering or game-weighting clause the player genuinely missed, covered in our guide on why some games are excluded from bonus wagering, rather than the operator acting in bad faith.
If the terms don't explain the issue, escalate through the operator's own complaints process in writing, keeping a clear record of every exchange with dates and screenshots. Licensed operators — including Curaçao-licensed ones — are typically required to have a formal dispute process, and many licensing authorities offer a complaints channel of their own if the operator's internal process doesn't resolve things reasonably. If the operator has no licence at all, or the licence can't be verified, your practical leverage is much lower, which circles back to why checking licensing status before you ever deposit is the single most protective step available to you.
The most efficient way to avoid ever needing this checklist mid-dispute is to apply it before you deposit a single Rand, and to lean on independent, evidence-based reviews rather than an operator's own marketing. That's the entire premise behind our legit online casinos guide and our individual reviews of Pantherbet, 10bet and Hollywoodbets — each built from actual account registration, real deposits, real gameplay and real withdrawal attempts, not just a summary of the operator's own promotional copy.
None of this checklist guarantees a winning session — no legitimate checklist can, because the house edge is real and permanent regardless of how fair or licensed an operator is. What it does is separate "I lost money to a mathematical edge I understood going in" from "I lost money, or couldn't access money I won, because of a genuinely dishonest operator" — two very different outcomes that deserve very different responses, and the first step in telling them apart is always the licensing and evidence check covered above.
Common questions
No. Every casino game carries a built-in house edge, so losing sessions — even long or expensive ones — are expected mathematical outcomes, not evidence of manipulation. Rigging refers to something different: fabricated or uncertified game software, or dishonest business practices around payouts.
A documented pattern of legitimate withdrawal requests being refused, delayed indefinitely, or met with shifting excuses across multiple independent players. One isolated complaint can be an operational issue; a consistent pattern is a business model.
Use the issuing authority's own public lookup or registry tool rather than trusting a badge or logo on the casino's site — logos can be copied. Our guide on how to verify a casino license covers the specific tools for Curaçao and South African provincial licences.
Not automatically, but it's a meaningful warning sign when combined with other red flags. Reputable operators overwhelmingly stock games from known, independently certified studios like Pragmatic Play rather than unbranded software with no stated provider.
Yes, it's a strong indirect signal. Licensed operators in reputable jurisdictions are generally required to offer deposit limits and self-exclusion. Their total absence often correlates with weak or absent licensing more broadly.
Identity verification is a standard, required part of legitimate licensing and anti-money-laundering compliance. A casino that pays out large sums with no verification at all is often unlicensed or not meaningfully regulated.
Re-check the specific bonus and wagering terms first, then escalate in writing through the operator's formal complaints process, keeping records. If the operator holds a real licence, the licensing authority may also have its own complaints channel.
Yes — our rating methodology specifically checks licensing status, game provider certification, and payout consistency through real account testing before we recommend any operator. See our how-we-rate-casinos page for the full process.