How We Review: Seven Criteria and What Each One Cannot Tell You
Direct Answer: What This Method Can and Cannot Establish
We assess brands on seven criteria a reader can check without special access: licence disclosure, payment rails, game providers, bonus terms, support reachability, responsible-gambling tooling, and brand longevity. Every one is an external signal, and none opens the operator books.
Our method can tell you whether a brand has published what it should publish, and whether those numbers hold together. It cannot tell you whether player funds are segregated, whether a generator is fair, or whether a withdrawal you file next Tuesday will be paid.
- Seven criteria, all checkable from outside the operator
- Bonus terms are the only criterion a reader can fully verify alone
- We hold no audit access, no backend data, no payout records
- We publish no first-person testing claims we cannot evidence
- Pages are rechecked against live terms on a rolling basis
- Last reviewed: August 2026
The seven criteria, and the exact point at which each stops being useful
What follows is the part most review sites leave out: the point where each signal runs out of evidence.
| Criterion | What it establishes | What it does not establish |
|---|---|---|
| Licence disclosure | That an external body has a registered obligation, and that a complaint has somewhere to go | That games are fair, that funds are safe, or that a regulator will act quickly |
| Payment rails | That the operator has invested in local banking integration in ringgit | That the operator is solvent, or that withdrawals clear at any given speed |
| Game providers | That the game mathematics were built and certified by the named studio | Anything at all about the cashier, the account terms or the payout process |
| Bonus terms | The full cost of an offer, in ringgit, before you accept it | How the terms will be applied in an edge case, or whether they will change |
| Support reachability | How many independent channels can hold the operator to a written answer | Consistency, because any single test is a sample of one agent on one day |
| Responsible-gambling tools | That the operator has built features that cap its own revenue | Whether those features are enforced, or merely displayed |
| Brand longevity | That the brand has something to lose from mistreating players | Nothing about current ownership, which can change without any public notice |
A licence number buys you an address for complaints, not fair play
The value of a published licence number is procedural: it gives a dispute somewhere to go that is not the operator inbox. Where a number exists you can look it up on the regulator register, confirm the entity behind it, and escalate.
What it does not do is guarantee outcomes. Regulators differ in how actively they enforce and whether they arbitrate individual disputes. Treat a licence as the existence of a route, not a promise about where it leads.
One further point gets skipped for Malaysian readers: Malaysia does not licence online casinos, so there is no local register to check for any operator. Where no foreign number is published either, every dispute is settled bilaterally.
Local payment rails prove operational investment, not solvency
Integrating DuitNow, a local eWallet and bank transfer in ringgit takes arrangements a temporary operation would not bother making, so payment breadth is a reasonable proxy for seriousness. It also removes a category of dispute, because money that leaves in ringgit and arrives in ringgit is easy to trace.
The limit is that it says nothing about the balance sheet behind it. We can see the rails, not the accounting.
One rail deserves a caution: USDT on TRC-20 is irreversible by design, and a completed crypto transfer leaves you no independently held record to fall back on.
Tier-one studios certify the game, and stop there
Where a lobby carries studios that licence their games under contract, those titles were built and tested by the studio rather than the casino. A lobby of unbranded games is a serious warning.
The signal ends at the game boundary. Almost every complaint a player files concerns the account layer, not the game layer, so this criterion carries less weight here than its prominence elsewhere suggests.
Bonus terms are the only criterion you can fully verify without us
We spend the most time here because it is the one criterion where a reader holds the same evidence we do. The terms are published and the arithmetic is public.
Read the multiple, the base it applies to, the maximum withdrawal, then the exclusions. Those four clauses give you the cost and the ceiling of any offer in ringgit, and our page on reading bonus terms clause by clause works through a live set.
The limit is timing, not arithmetic. Terms are a snapshot and can be amended, so we date what we check and tell readers to screenshot terms on the day they opt in.
A support test is a sample of one, and we report it as one
Asking support how a promotion turnover is calculated produces either a real answer or a template. What it is not is a measurement: one agent on one day cannot establish general responsiveness, and we will not convert it into a claim that looks like data.
The part that does generalise is channel breadth. An operator reachable by chat, email, phone and a messaging app has more routes that leave a written record than one reachable only through a widget it can close.
Responsible-gambling tooling is the hardest signal to fake and the easiest to under-deliver
Deposit limits, session reminders, cooling-off and self-exclusion cost the operator revenue, which is why they are expensive to fake. But presence in an interface is not enforcement in a database: we can confirm a control exists, not that an excluded account stays excluded across brands. If gambling has stopped being entertainment, our responsible gaming page matters more than this one.
Longevity is a survivorship signal, and ownership is invisible
Brands that exit with player balances rarely last under one name, so a brand trading for years with a footprint findable outside its own marketing has more to lose than a domain registered last quarter. That is a real, if weak, signal.
Two limits apply. A founding date reported only by the operator is a claim until corroborated. And a brand name can persist through a change of ownership with no announcement, so longevity tells you the name survived, not who is behind it today.
Four things we will not do
- We do not invent licence claims. If no number is published, we say so, and we never fill the gap with a badge image or a vague reference to being "internationally regulated".
- We do not publish testing we did not do. No invented withdrawal timings, no fabricated player counts, no ratings derived from nothing.
- We do not quote competitor figures without evidence. Citing a rival wagering multiple requires a dated screenshot and a link. Without that we describe structures, not numbers.
- We label marketing claims as claims in the sentence itself.
What we cannot see at all
The honest close to a methodology page is what the method never reaches. With no audit access we cannot verify return-to-player figures, generator certification, or whether player funds are segregated. With no backend access we cannot verify payout speeds. With no legal standing we cannot arbitrate or compel a response.
If you need those assurances, the answer is not a better review site. It is an operator that publishes a verifiable licence number, checked on the regulator register rather than a footer badge.
Key takeaways
- All seven criteria are external signals. None of them opens the operator's books.
- A licence number creates an escalation route, not a guarantee. Malaysia licences no online casinos, so there is no local register for anyone.
- Bonus terms are the only criterion a reader can fully verify alone, which is why we spend the most space on them.
- A support test is a sample of one, and we refuse to publish it as if it were data.
- We cannot verify fund segregation, RTP, or payout speed. We say so rather than implying access we do not have.
Read next: How to read bonus terms · Complaints and disputes · Editorial team · About us
Commercial disclosure: this site is an affiliate partner of U88 and may earn a commission if you open an account through our links. It does not change the terms, multiples or limits you receive, and it does not change what we verify or decline to verify. 18+. Play responsibly.
Primary sources: U88 published promotion terms and terms and conditions. Free, confidential support in Malaysia: Befrienders Malaysia.