New Zealand is preparing to open its online casino market to licensed operators, and the testing regime being proposed could offer an interesting comparison for the increasingly mature US iGaming industry.
The country’s Department of Internal Affairs (DIA) has published a discussion draft setting out how online casino technology would be tested, certified and monitored under its Online Casino Gambling Act 2026. With New Zealand preparing to auction 15 online casino licenses, the framework provides a useful look at how a newer market is approaching the technology and compliance questions that US states have been dealing with for years.
What Stands Out?
One notable feature is the extent to which testing follows the operator throughout its lifecycle rather than simply serving as a pre-launch hurdle.
Before receiving a license, applicants would need to submit a Game and RNG Register showing that every intended game, including live dealer content, and each random number generator has been tested by an approved independent laboratory. They would also have to identify critical technology providers and hosting locations and provide evidence of appropriate information security controls.
At launch, operators would then have to provide an updated register and certification from their CEO or chief compliance officer that their technology stack complies with the requirements. That extends beyond games and RNGs to areas including third-party technology, databases, operating systems, infrastructure and gaming software.
Where the US Comparison Gets Interesting
For American online casino operators, none of this is particularly alien. Independent game testing, RNG certification, platform security as well as responsible technical controls are already familiar parts of regulated iGaming.
The interesting difference is how New Zealand is attempting to consolidate those obligations into a national framework from the outset. The draft allows previous testing conducted in other regulated markets to potentially satisfy New Zealand requirements where it provides sufficient assurance. The DIA specifically points to jurisdictions including the UK and Ontario.
That approach could be particularly relevant to suppliers and operators expanding across North America. Rather than treating every market as an entirely separate compliance exercise, regulators can potentially recognize existing certification while still requiring operators to demonstrate that their systems meet local standards.
New Zealand would nevertheless require independent Game Testing and Platform Certification within six months of licensing and at least annually thereafter.
Testing Does Not Stop at Launch
The proposed rules also take a relatively continuous view of technology compliance, as every new game or RNG would require external testing, while existing products would need to be retested where changes could affect fairness. Smaller modifications could be handled internally, but only where operators have controls covering areas such as version management, source-code security, access restrictions, peer review and separation between development, testing and production environments.
There would also be ongoing vulnerability scanning, penetration testing, system monitoring and Return to Player monitoring, with operators required to retain documentation covering their testing activity.
That is where the framework starts to resemble the direction of travel across regulated US iGaming. Regulators increasingly have to account for the technology, suppliers, updates and security infrastructure supporting an online casino throughout its operation.
New Zealand is still at the starting line. Its 15 licenses are now moving toward a two-week “silent auction” following the initial expression-of-interest process. But as new online casino markets emerge, its approach could become another useful reference point for an industry already accustomed to navigating different technical standards across the US state-by-state system.
