How RNG testing and certification work in Kenya

Kenya's 2026 gambling regulations require the random number generator behind every game of chance to be certified by the Gambling Regulatory Authority or its approved agent, game rules to be evaluated or certified annually, and equipment to meet set standards. Certification confirms a game behaves as declared. It does not make the game favourable to the player.

By Nairobi Ultimate Editorial (prepared with AI tools under our editorial policy) · Last updated 2026-10-04

What is actually tested

Three things sit behind any software game: a random number generator (RNG) that produces unpredictable values, game rules that turn those values into results and payouts, and a platform that records stakes and pays out. Testing looks at each layer.

Physical gambling adds a fourth: the machine, wheel or device itself. Kenyan law deals with software and hardware in different places, so the rules are spread over the Gambling Control Act, 2025 and two sets of 2026 regulations.

The rules at a glance

"Operations Regulations" means the Gambling Control (Conduct of Gambling Operations) Regulations, 2026 (L.N. 112). "Licensing Regulations" means the Gambling Control (Licensing) Regulations, 2026 (L.N. 111).

Randomness and the declared percentage

Regulation 45(2) links two tests. The certified RNG is to be statistically tested for "the randomness, theoretical return to player". In practice these are separate questions.

The randomness question is whether the generator's output can be predicted or shows patterns. Statistical tests look at very long output sequences for bias, repetition and correlation between values.

The percentage question is whether the game's rules, fed with truly random values, return what the operator declares. That is a mathematics check of the paytable and the probabilities, explained from the player's side in the guide to how RTP and house edge work.

Regulation 20(2) then requires a licensee to "display clearly rules of games, odds, house edge and average return to the player". The tested figure and the displayed figure are meant to be the same number.

Who may do the testing

The Act defines a "testing agent" as "a person licensed under this Act to test and calibrate gambling machines, equipment or devices" (section 2). Regulation 14 of the Licensing Regulations requires anyone who intends to offer a gambling equipment testing service to apply for a licence in Form 11.

Form 11 shows what the regulator expects such a laboratory to cover. Its scope list reads: "RNG Evaluation & Certification", "Game Logic & Math Verification", "Hardware Integrity & Security Testing", "Payout Percentage Verification" and "Network & Software Security Audits".

The form also asks for independent laboratory accreditation, giving ISO/IEC 17025 as an example, and for a conflict of interest policy that describes how the laboratory stays independent of the manufacturers and operators it tests. The Second Schedule lists 100,000 for the application and 500,000 for the annual licence under "Gambling equipment testing", and the Fourth Schedule gives the licence a duration of one year.

What software suppliers must declare

Regulation 15 of the Licensing Regulations requires a person who intends to provide gambling software or a platform to apply in Form 12. In that form the applicant confirms that the software is designed to comply with the "GRA's Technical Standards (GRA-TS:2025)".

The listed areas include "Random Number Generator (RNG) certification", with the certificate attached, and "Game rules and mathematical fairness". The applicant names the independent testing laboratory, gives its accreditation number and attaches the full compliance report.

The form ends with a commitment to notify the Authority of any material change to the software and to submit it "for re-testing prior to deployment". A changed game is, for this purpose, a new game.

Machines and physical equipment

For gambling machines, section 44 of the Act requires that they are "sourced from a certified source with international certification standards", have an import certificate issued by the Authority, and "undergo standards verification after every three months". Section 63 repeats this for betting machines and adds that the verification is conducted by the Kenya Bureau of Standards.

Regulation 58(1) of the Operations Regulations says a licensee shall operate gaming equipment that meets the standards prescribed by the Authority. Under regulation 59, imported machines are inspected and tested by the Authority before use and, where advised, undergo standardization testing by the Kenya Bureau of Standards or another approved entity.

Regulation 57(2)(c) requires a licensee to report any machine failure to the Authority as soon as it occurs and to tell the public immediately.

Ongoing checks after approval

Approval is not a one-off event. Regulation 47(1) gives a licensee seven days to notify the Authority of any material change to an online platform, and regulation 47(2) provides for an annual test and audit of the approved system.

Regulation 41 requires an online system to keep a secure, tamper evident audit log and to give the Authority real-time monitoring through a secure interface. Regulation 92(1)(q) lists "fairness of games and test reports from recognised gaming laboratory prescribed by the authority" among the records a licensee must keep.

What a certificate does and does not prove

• It does show that, when tested, the generator's output passed statistical checks and the game's maths matched its declared return.
• It does not show that the game is cheap. A game with a declared return of 90% can be certified just as a game at 97% can.
• It does not predict a session. Random results include long losing runs, as the guide to how crash games work shows with numbers.
• It does not travel. A badge or logo on a website is only a picture. The requirements described here bind holders of a Kenyan licence, not sites operating without one.

How a player can check the basics

Open the game's rules or help screen before staking. Under regulation 45 the rules and the theoretical return to player should be there to read. If they are missing, that is itself information.

Confirm that the company holds a licence on the regulator's list of licensed gaming companies. The published list describes the 2025/26 trading period and the page was last modified on 2026-03-19, so check the live page instead of relying on a copy.

If a result looks wrong, write to the operator's customer care centre and keep the round details. Regulation 9 requires that centre to resolve complaints and to refer unresolved matters to the Authority. None of this changes the arithmetic covered in the guide to the roulette house edge: a tested game is an honest game with a built-in cost.