How We Test Online Casinos

A real-money cycle of two weeks per operator: real deposits, real KYC documents and real withdrawal requests across several rails, all timed to the minute. No demo play, no free operator credits, no shortcuts.

Why the Method Beats the Score

Most casino reviews online come from one of three places: the operator's press kit reworded with synonyms, a rival's review re-spun by an AI, or a top-10 ranked by commission. None of them require the writer to have opened a real account, let alone cleared a bonus or timed a withdrawal. The result reads like a review but describes a casino the author never touched.

I do it differently. Every operator on this site runs through a two-week real-money cycle, identical from site to site — which is how the rating framework turns out comparable scores. The deposits leave my own bank account, the KYC documents are mine, and the withdrawals return to my own accounts. The commission model that keeps the site running is disclosed in full on the affiliate disclosure page, and it never reaches the testing bench.

This page sets out the full method in the order I run it. If a figure in the Spinaud review looks unusual — a 2h 39min PayID withdrawal on a Monday afternoon, say — you should be able to read this page, follow how that number came about, and decide whether to trust it.

Stage 1 — Pre-Test Research (day zero)

Before opening an account, I pull the operator's public record. The Curaçao licence is verified against the Gaming Control Board register — both licence number and corporate licensee — because a listed licence isn't an active one. I read the Terms & Conditions cover to cover, flagging the clauses that most often spark complaints: the max-bet-during-bonus rule, the bonus-winnings cashout cap, the reverse-withdrawal window and dormant-account fees.

I also run the domain through the ACMA offshore blocklist. Appearing on that list isn't a pass-or-fail verdict on its own, but it's context a reader is owed and a question I want to be ready for in the "Is It Legit" section of the review.

Complaint patterns come from public threads on AskGamblers, Casino Guru and the Australian gambling subreddits. I'm not chasing one-off bad reviews — every casino has them — I'm after recurring patterns. A dozen different players describing the same KYC stall on the same document type is a signal.

Stage 2 — Registration and First Deposit (day 1)

I register with real details: full legal name, real Sydney address, real date of birth, real phone number. It's the only way KYC clears later, and the only honest way to see what the registration flow does with your data. I note the time from the first form field to the confirmation email, in minutes.

The first deposit is usually A$50 on Visa debit — a rail chosen to match the most common AU path, a bank card in a mid-range mobile browser rather than a crypto wallet on desktop. I record the time to clear, any 3D Secure friction, any declines, and whether the funds appear in the cashier balance with or without the bonus. Screenshots at each step.

If the operator's standard path activates the welcome bonus on first deposit, that's how I take it. I read the bonus T&C page in full before clicking activate. The wagering multiplier, the max-bet-during-bonus rule, the contribution table and the expiry window all get logged against the live page rather than marketing material — these are the figures that later cause most disputes.

Stage 3 — KYC Verification (days 1–3)

Most Curaçao operators let a first deposit through before verification but hold withdrawals until KYC clears — that's the behaviour I test. I submit three documents: a current Australian passport, an electricity bill under three months old, and a selfie holding the passport. Then I time the turnaround from first upload to approval email.

I record what the operator asks for that is not strictly required, and what friction appears on the re-upload path. The most common KYC delay in my experience is a blurred date line on a utility bill — I leave that as-is on purpose for the first submission, to test whether the operator catches it, how they communicate the problem, and how long the second cycle takes. That is the KYC delay documented in the Spinaud review.

I use no VPN, no residential proxy and no address other than my real home. Offshore operators run geo-IP checks, and a mismatch between the account address and the access IP is the kind of flag that can freeze a cashout. Testing behind a VPN would distort every number this site produces.

Stage 4 — Clearing the Bonus (days 3–10)

I work the welcome bonus at realistic stakes — usually A$2–A$5 spins on mid-volatility slots, not A$0.20 minimums to artificially stretch the bankroll and not A$50 spins that breach the max-bet rule. The aim is to reproduce what a real AU player does after claiming the offer.

I track: cumulative turnover against the wagering requirement, which games contribute at 100% and which contribute less, and the current balance at regular intervals. If I finish the wagering and still have a positive balance, that becomes the bonus-clearing anecdote in the review. If I do not — which is more common, because the math rarely favours the player on 40× wagering at 96% RTP — the net loss is documented as a specific figure, not hidden.

The max-bet-during-bonus rule gets a dedicated test. I deliberately place one spin at the edge of the stated limit to confirm the rule is enforced as written. I also test whether bonus play on restricted game categories (table, live) is prevented at the game level or only flagged retroactively. Retroactive voiding is the single most common reason Australian players lose a bonus-funded win, and operators that handle it transparently score better than operators that hide behind a T&C clause.

Stage 5 — Withdrawals (days 10–13)

This is where the review earns its score. I put at least two withdrawals through on two different rails. For Spinaud, those were a A$250 PayID withdrawal and a Bitcoin withdrawal of around A$400.

Every withdrawal is timed in three segments, not as a single aggregate number: time from request to approval email, time from approval email to the casino's broadcast (for crypto) or processing submission (for fiat), and time from processing submission to funds arriving in the destination account. I record each segment because the pain point differs by operator. Some sites have a fast approval queue but a slow processing cadence. Others approve once per business day and clear the network leg in seconds.

I do not accept operator explanations about a "first withdrawal review" or a "mandatory 24-hour hold" as a justification for poor performance — if the site's published T&C say withdrawals process within 24 hours, the clock starts when I hit request, not when the compliance desk feels ready. Those are the numbers that go into the payments section of the review.

Stage 6 — Customer Support (throughout)

I test live chat at least four times during the two-week cycle, at different times of day, with questions of increasing specificity. The easy round is "what is the minimum withdrawal" — an agent should answer that in under ninety seconds without checking anything. The harder round is a specific bonus T&C question: game contribution percentages, max bet during bonus, whether the welcome bonus can be cleared on live dealer tables. That separates agents who have read the T&C from agents who copy-paste a generic answer.

Email is tested once, with a question that requires a real response rather than a macro. Response time in hours, quality of the answer, and whether the agent has actually read my question are all recorded. Phone support, when available, gets the same treatment.

Stage 7 — Mobile and Security (all the way through)

Mobile is tested on two devices — an iPhone 13 running Safari over home Wi-Fi, and a mid-range Android running Chrome over 4G. I load the same pokie on both devices and record time-to-first-spin. I run a cashier flow on mobile to confirm that deposits, withdrawals, and bonus activation all work without falling back to a desktop page.

Security testing is mechanical: TLS certificate validity, the presence of HSTS headers, whether the login page offers two-factor authentication, and whether the account section allows you to set deposit and loss limits. The absence of 2FA on a real-money account is a knock, and it is noted in the "Is It Legit" section of the Spinaud review for that reason.

Stage 8 — Responsible Gambling Tools

I open the responsible gambling section of the account and test each tool. Deposit limits: does setting a A$100 daily cap actually block a A$150 deposit attempt, or does it quietly let the larger amount through? Loss limits: are they enforced across sessions or per session only? Self-exclusion: how many clicks to trigger it, is there a cooling-off period before reactivation, and does the account genuinely lock on the server side rather than just hiding the UI?

These are the questions the responsible gambling page uses in its walk-through of what AU players should expect from an operator. They are also part of the score in how we rate casinos.

Stage 9 — Pre-Publication Fact Check

Once the notes are complete, the draft goes through a structured pre-publication fact-check. Every verifiable claim is re-checked against its live primary source: the licence number on the regulator's register, the bonus terms on the current cashier page, the provider list in the live lobby, the processing windows in the current T&C. Any number a screenshot or timestamped log can't back is cut, not published with a hedge.

The full editorial process — author attribution, fact-check, correction, and freshness policy — is documented at the editorial policy. The process is why the "last fact-checked" date at the top of the review actually corresponds to a verification event, not to a CMS save.

Re-Testing and Updates

Every review is re-tested at least every six months, and out of cycle whenever the operator changes something material — a reshaped welcome bonus, new payment rails, a licensing change. The date at the top updates only when a real verification has taken place: if it moves, something was re-tested; if nothing was, it holds. That's the rule, enforced on the editorial side.

If you spot a number on the review that is out of date — a bonus that has changed, a payment method that has been removed, a processing window that no longer matches — please tell us. Reader tip-offs on factual drift are the single most reliable way we catch changes between scheduled re-tests.

Responsible gambling — 18+ Gambling can be addictive. If play stops being fun, stop. Free confidential help for Australian residents is available from Gambling Help Online (1800 858 858) and BetStop (national self-exclusion register).