A random number generator produces a fresh, unpredictable number for every game event, and the software maps that number to a card, a reel stop or a wheel pocket. Understanding how RNG works matters because it explains why no spin is ever due, and why independent testing is the only real guarantee of fairness.
The generator is not a mystery box. It is a well-understood piece of engineering, subject to published standards and periodic audit, and the properties it must satisfy are specific and testable.
How RNG works, step by step
The sequence is the same across virtually all online casino software.
- The generator runs continuously, producing numbers whether or not anyone is playing
- You commit an action — press spin, or place a bet and confirm
- The software takes the number available at that instant
- That number is mapped through the game's paytable to an outcome
- The outcome is displayed; reel animations are presentation, not calculation
Step 1 is the one players most often get wrong. Because the generator is already running before you act, there is no window in which your timing can select a favourable result. Pressing the button a fraction of a second later gives you a different number, not a better one.
Step 5 matters too. By the time the reels start spinning, the result is already fixed. Stopping them early changes the animation and nothing else.
Most casino generators are pseudorandom. They are deterministic algorithms seeded from an unpredictable source, producing sequences that pass statistical randomness tests. Certification is what confirms the output is indistinguishable from true randomness.
What is the difference between true and pseudorandom?
A true random generator draws from a physical source — thermal noise, radioactive decay, atmospheric measurement. A pseudorandom generator computes a sequence from a starting seed.
Pseudorandom generators are used in gaming because they are fast, reproducible for audit purposes, and testable at scale. The seed is drawn from a genuinely unpredictable source, and the algorithm is chosen so that knowing part of the output does not let you predict the rest.
The practical requirement is not philosophical purity. It is that no player, and no employee, can predict or influence the next value. That property is what laboratories test.
Who tests how RNG works in practice?
Independent laboratories accredited by regulators. Three names dominate the market.
- Gaming Laboratories International — the largest, and author of the widely adopted GLI-19 standard for online gaming systems
- BMM Testlabs — one of the oldest independent gaming test houses
- iTech Labs — widely used for RNG and RTP certification in Asian and European markets
Their work covers two separate things. First, the generator itself: does the output pass statistical tests for uniformity, independence and unpredictability across many millions of values? Second, the game: does the paytable, applied to that output, produce the declared return figure?
Both checks are needed. A perfect generator attached to a misdescribed paytable still misleads players about what the game returns — which is the number covered in slot RTP explained.
What tests does an RNG have to pass?
Standard statistical batteries, run over very large samples. The specific suites vary by laboratory, but the properties examined are consistent.
Uniformity — every possible value occurs about equally often over a long run. Independence — knowing one value tells you nothing about the next. No detectable period — the sequence does not repeat within any practical timeframe. Seed unpredictability — the starting state cannot be inferred or forced.
An interesting consequence is that passing these tests requires streaks. A sequence with no long runs of the same outcome would fail the independence tests, because genuine randomness clusters. This is precisely why hot and cold streaks are normal rather than suspicious, as covered in whether slots are due to hit.
Can an operator change how RNG works after certification?
Not without breaking its licence. Certified builds are version-controlled, and regulators require that the deployed software matches what was tested.
What an operator can legitimately do is deploy a different certified configuration. Some providers ship a title at more than one RTP setting, each separately certified, and the operator picks which to run. That is disclosed in the game panel rather than hidden, which is why reading the panel in the game you are playing beats consulting a third-party list.
What cannot legitimately happen is a game tightening after a payout or loosening during a drought. That would require the software to track results and adjust, which certification is designed to detect and which the independence tests would fail.
What can the RNG not do?
It cannot make a game fair in the sense of breaking even. Fairness in gaming means the stated odds are the real odds — not that the odds favour you.
A perfectly certified generator still sits inside a paytable that pays less than true odds. That gap is the house edge, and it is intentional, published and unaffected by randomness quality. A 96% slot with an impeccable RNG still returns 96%. See house edge explained for how that number behaves.
The generator also cannot protect you from an unlicensed operator. Certification only means something if a regulator requires and verifies it. Without a licence there is nothing compelling the operator to run the build that was tested, or to honour the results at all.
How do you check any of this as a player?
Check the licence first, then the game panel. Those two steps cover everything you can practically verify.
In the Philippines, PAGCOR licenses operators and requires certified games. The register is public, and the process takes a minute — see how to check if an online casino is PAGCOR-licensed. If the operator is not on it, no claim about how RNG works on their site is verifiable.
Then open the game's information panel and read the stated return figure. A certified game will have one. A game that does not state it is telling you something.