“Is this casino safe?” is the first question any New Zealand player should ask before depositing. The answer depends on three verifiable factors: who licences the operator, whether the games use certified random number generation, and whether the operator has a documented history of paying players.
This guide explains what each of these factors means in practice, how to verify them directly, and what warning signs indicate an operator is worth avoiding.
What “safe” means for NZ players at offshore casinos
New Zealand does not licence offshore online casinos. The Gambling Act 2003 allows Kiwis to play at offshore sites legally, but no NZ government body audits, regulates, or provides dispute resolution for offshore operators. Safety depends entirely on the jurisdiction that licences the operator.
A safe offshore casino for NZ players means:
- Licensed by a recognised jurisdiction. The licence requires the operator to maintain segregated player funds, respond to player complaints, and submit to periodic audits.
- Games certified by an independent testing laboratory. Certified RNGs confirm that game outcomes are random and that published RTPs are accurate.
- Documented payout history. The operator has a verifiable track record of paying out winnings without disputing legitimate claims.
- Transparent terms. Bonus terms, withdrawal limits, and account closure policies are clearly stated and consistently applied.
Offshore licences: what they cover
The most common licence for offshore casinos serving NZ players is the Curaçao Gaming Authority (CGA), operating under the Kingdom of the Netherlands. As of 2024, the CGA underwent reform: operators now apply individually (rather than as sub-licensees) and must meet updated requirements including responsible gambling tools, segregated player funds, and mandatory dispute resolution.
The CGA licence number appears in the casino’s footer. You can verify it against the CGA’s public register. Both BitStarz and Cashy operate under Curaçao licence OGL/2024/165/0185, issued to Gareton B.V.
Other licences you may encounter:
- Malta Gaming Authority (MGA): a higher regulatory standard. MGA-licensed operators must maintain larger reserves and participate in an independent dispute resolution scheme.
- UK Gambling Commission (UKGC): does not cover NZ players — UKGC licences are for UK-resident players only.
A casino with no displayed licence, or a licence that cannot be verified against a public register, is an unlicensed operator. Do not deposit at an unlicensed site.
RNG certification: how to verify fair games
Random number generation (RNG) determines every game outcome at an online casino. A certified RNG has been tested by an independent laboratory to confirm it produces statistically random results and that published RTP percentages are accurate.
Common testing labs:
- eCOGRA — UK-based, widely recognised
- iTech Labs — Australian-based, common among Curaçao-licensed operators
- BMM Testlabs — international
- GLI (Gaming Laboratories International)
Look for the testing lab logo in the casino footer. You can verify the certification directly on the lab’s website using the certificate number displayed.
Software providers are also certified separately from the operator. Major studios — Pragmatic Play, NetEnt, Evolution, Play’n GO — are certified in multiple jurisdictions. Their RTP certifications are published on their own websites and in databases such as Game Audit.
SSL encryption: what the padlock means
SSL (Secure Sockets Layer) or TLS encryption is the baseline technical requirement for any site handling financial data. It encrypts data in transit between your browser and the casino’s servers.
Verify it: click the padlock icon in your browser address bar when on the casino’s domain. The certificate should be issued to the operator’s domain, not a third-party domain.
SSL protects your login credentials and payment data in transit. It does not protect you from the operator itself mishandling your data or funds.
How to check an operator’s payout history
The most reliable signals of legitimate payout behaviour are:
1. Player review platforms. Trustpilot, AskGamblers, and Casino Guru aggregate player feedback. Filter reviews by most recent and look specifically for complaints about withheld or delayed withdrawals. A pattern of similar complaints is a warning sign.
2. Blacklists. Casino Guru and AskGamblers maintain blacklists of operators with documented histories of non-payment or predatory terms. Check before depositing.
3. Industry recognition. Operators with industry awards and a long public operating history (5+ years) have a documented reputation to protect. New operators lack this track record — not disqualifying, but a higher due-diligence bar.
BitStarz has operated since 2014 and holds a Trustpilot Excellent rating with 4,700+ reviews. It represents the type of documented track record worth looking for.
Red flags to avoid
- No licence number in the footer, or a licence number that cannot be verified.
- Withdrawal limits that reset monthly at amounts below what you might realistically win (e.g. NZ$1,000/month withdrawal limit on a site advertising NZ$10,000 jackpots).
- Bonus terms with very high wagering requirements (50x+) combined with short validity windows — these are mathematically designed to prevent withdrawal.
- No KYC on sign-up, followed by KYC demands when you attempt a withdrawal. This pattern is used by some operators to delay or dispute payouts.
- Unnamed operator. The company name, registration number, and registered address should be in the footer. If they are not, the operator is not being transparent.
- Unsolicited bonus credits. If an operator credits bonuses without your request, those bonuses may carry terms that lock your deposits until wagering is complete.
What to do if you have a complaint
If you have a dispute with a licensed operator:
- Contact the operator’s customer support and document the exchange in writing.
- If unresolved, file a complaint with the licensing authority. For Curaçao-licensed operators, the CGA handles player complaints through their official dispute process.
- Post a factual, documented review on AskGamblers or Casino Guru — both platforms contact operators on behalf of complainants.
Our casino complaint guide covers the full dispute process step by step.
Our review methodology
Every casino in our reviewed list has been evaluated against these safety criteria. Our review methodology explains the framework and scoring weights. All reviewed operators display verifiable licences, use certified software, and have documented payout histories.
NZ regulation from December 2026
The Online Casino Gambling Act 2026 introduces a domestic licensing regime for online casinos in New Zealand. From 1 December 2026, the DIA will issue up to 15 licences to operators who meet New Zealand’s compliance, responsible gambling, and financial standards.
For NZ players, a DIA-licensed casino will provide the highest safety tier — subject to NZ law, NZ consumer protections, and NZ regulatory oversight. Until the market opens, the safety checklist above applies to all offshore operators.
Our NZ Licensed Casinos tracker will list every confirmed DIA licence holder as the DIA publishes its register. See the NZ Online Casino Gambling Act 2026 guide for the full licensing timeline.
Safe casinos we currently review
Every casino below has been checked against the safety criteria above before publication. Each entry shows the three most important safety signals: licence verifiability, dispute resolution access, and operating track record.
| Casino | Licence | Dispute resolution | Operating since | Emma’s note |
|---|---|---|---|---|
| Ice Casino | Curaçao | Casino Guru named | 2021 | Player-settable limits; NZD native |
| Cashy | Curaçao OGL/2024/165/0185 | Verify on site | 2025 | 0x wagering; Gareton B.V. operator published |
| BitStarz | Curaçao | Verify on site | 2014 | Trustpilot Excellent (4,700+ reviews); longest track record |
| FastPay Casino | Tobique + Anjouan | Verify on site | 2018 | Sub-10-min processing; Novatrix SRL operator named |
| V.Vegas | Curaçao | Verify on site | 2016 | POLi + NZD native; 8-year track record |
| Slotoro | Curaçao | Verify on site | 2023 | 80+ studios; operator published |
| FS Casino | Curaçao | Verify on site | 2019 | SoftSwiss network; operator published |
| HitnSpin | Curaçao | Verify on site | 2020 | SoftSwiss network; operator published |
| Verde Casino | Curaçao | Verify on site | 2020 | SoftSwiss network; operator published |
What “Verify on site” means for dispute resolution: the casino may offer dispute resolution through a third-party service (Casino Guru, eCOGRA, etc.) that is not explicitly named in the publicly available T&Cs at the time of scoring. Check the operator’s current terms under the “Complaints” or “Responsible Gambling” section.
Tobique and Anjouan licences (FastPay Casino) carry lighter regulatory weight than Curaçao or MGA — they are valid licences but with less player-protection infrastructure behind them. Emma notes this in the FastPay review and weights it in the Trust & Fairness score.
None of the above are NZ-licensed (the DIA market has not opened yet). All operate legally under offshore licences that are verifiable through the Curaçao Gaming Authority’s public register.
Summary: safety checklist for NZ players
Before depositing at any online casino:
- Find the licence number in the footer and verify it on the licensing authority’s website.
- Confirm the operator company name is published.
- Check the withdrawal terms: minimum amount, approval window, any pending period.
- Set deposit and session limits before your first spin.
- Save the customer support contact and the licensing authority’s complaint link before you need them.
Q: How do I know if an NZ online casino is safe?
A: Check for a current gambling licence (Curaçao eGaming, Malta MGA, Isle of Man GSC or NZ DIA from December 2026), verifiable company registration, published responsible gambling tools, and a track record of paying players. Read independent reviews and check for withdrawal complaints on player forums before depositing.
Q: What licence should an NZ casino hold?
A: The most common licences at NZ-facing casinos are Curaçao eGaming (Antillephone), the Malta Gaming Authority (MGA) and the Isle of Man Gambling Supervision Commission. The MGA and Isle of Man are considered higher-tier regulators with stricter compliance requirements. From December 2026, a NZ DIA licence will be the gold standard for operators serving NZ players.
Q: Is my money safe at an online casino?
A: At a licensed operator, player funds are typically held in segregated accounts — separate from the company’s operating funds. If the company becomes insolvent, player balances should be protected. Not all Curaçao-licensed operators segregate funds, which is one reason higher-tier licences matter.
Q: What responsible gambling tools should a safe casino offer?
A: Deposit limits (daily, weekly, monthly), session time limits, reality checks, self-exclusion, and cooling-off periods. These should be available from your account settings without requiring you to contact support. Safe casinos make these tools easy to find and fast to activate.
Q: What are red flags that an online casino is unsafe?
A: Unlicensed operation (no verifiable licence), no identity verification required (bypasses AML obligations), bonus terms that are impossible to clear, no withdrawal method for winnings, delayed or refused withdrawals without explanation, and no published contact information or company registration details.