Last updated:  · Editor: Emma Whitfield · 18+ Play responsibly · 0800 654 655

We do not write a single review without first depositing real New Zealand dollars at an operator, playing real games, and successfully withdrawing the funds back to a Kiwi bank account or e-wallet. The 23 steps below are what stand between you and a casino that does not pay.

This page is a living document. Every step listed here is what Daniel Kahu (Senior Reviewer, Auckland) and Emma Whitfield (Editor & Fact-Checker, Wellington) actually do, in this order, every time we onboard a new operator or re-test an existing one. We re-test each casino on our list at least once per quarter; the "Last re-tested" stamp at the top of every operator review tells you when we last completed the full sequence.

The four-stage process at a glance

StageStepsWhat we are testing
1. Sign-up & KYC1–7Account creation, age + identity verification, AML/CFT compliance, support responsiveness
2. Deposit8–11NZD-friendly cashier, supported rails, deposit confirmation speed, fees
3. Gameplay & RTP12–15Game library audit, provider mix, RTP labelling, fairness audits, mobile parity
4. Bonus & wagering16–19Welcome bonus structure, wagering multiplier, max bet, expiry, contribution rates
5. Withdrawal20–22Withdrawal request → received-in-NZ, daily/weekly/monthly limits, KYC re-check
6. Responsible gambling23In-account deposit/loss/session limits, reality-check timers, self-exclusion lengths

Stage 1 — Sign-up & KYC (steps 1–7)

Step 1

Domain & licence verification

We confirm the operator's primary domain, the licensing authority on the footer (Curaçao GCB, Anjouan, Tobique, MGA, etc.), and we cross-check the licence number against the regulator's public registry. Operators that obscure or misstate their licence are immediately disqualified.

Step 2

Sign-up flow timing

We register a fresh account with a real New Zealand-resident identity, time the steps, and note any geo-blocking, redirects, or upsell pressure. We use a unique email per operator so we can track marketing email cadence later.

Step 3

Age & ID verification (KYC)

Every reviewed casino must verify age (18+) and identity. We submit standard NZ documents — driver licence + a recent utility bill — and time how long verification takes. We flag any casino that lets us deposit before KYC is complete.

Step 4

Source-of-funds (AML) check

Where required, we comply with AML/CFT Act 2009-aligned source-of-funds requests. We document what's asked for, timing, and clarity of the instructions. NZ-targeted operators that skip AML at any deposit tier are flagged as a regulatory risk.

Step 5

T&C audit

Emma Whitfield reads the full Terms & Conditions, focusing on bonus terms, withdrawal limits, dormant-account fees, max-cashout caps, and dispute-resolution clauses. Every concerning clause is captured for the review's "Things to know" section.

Step 6

Customer support response time

We open a live chat with a low-stakes pre-deposit question, time the first response, and note whether it's a real person or a chatbot. We also email support and measure first-response time (median across 3 trials).

Step 7

Responsible-gambling tooling check (pre-deposit)

Before we deposit a single dollar, we confirm that deposit limits, loss limits, session-time limits, reality-check timers, and self-exclusion are all available in the account settings — and we set a deposit limit. Any operator missing these tools is dropped.

Stage 2 — Deposit (steps 8–11)

Step 8

NZD-friendly cashier audit

We confirm NZD is shown natively (not USD with a conversion ribbon) and audit the available deposit methods: Visa/Mastercard, NZD bank transfer, Apple Pay / Google Pay, e-wallets (Skrill, Neteller, MiFinity, ecoPayz, Jeton), Neosurf vouchers, and cryptocurrency (BTC, ETH, USDT, LTC, SOL).

Step 9

Real-money NZD deposit

We deposit a baseline of NZ$50 minimum (or the minimum required to qualify for the welcome bonus, whichever is higher). We log time-from-submit to balance-credited for each rail we test. Crypto deposits are tested through our own MetaMask, Trust Wallet, or Trezor — never custodial.

Step 10

Fee + FX audit

Some operators charge a 2–3% card fee or apply hidden FX margins on NZD. We document fees per rail, against the deposit confirmation screen and the in-account ledger.

Step 11

Welcome-bonus opt-in / opt-out behaviour

We test both pathways: claiming the welcome bonus (and being bound by its wagering) and skipping it (and keeping a clean balance). Operators that auto-apply bonuses without explicit consent are flagged.

Stage 3 — Gameplay & RTP sampling (steps 12–15)

Step 12

Game library size + provider mix

We count games available to NZ-IP visitors (some titles are geo-blocked from offshore casinos). We list providers represented — Pragmatic Play, NetEnt, Microgaming, Play'n GO, Aristocrat, Hacksaw Gaming, Nolimit City, BTG, Push Gaming — and confirm Aristocrat brand handles (Lightning Link, Buffalo, Where's the Gold) where present.

Step 13

Per-game RTP labelling

Pragmatic Play, NetEnt and Play'n GO ship multiple RTP variants of the same title (Book of Dead in 94.25% and 96.21% versions, for example). We open the in-game info panel on at least 5 titles and document the RTP variant served.

Step 14

Fairness-audit verification

We check for eCOGRA, iTech Labs, GLI or BMM certification badges and verify them on the certifier's public page. Badges that are decorative-only (no link, no listing on the issuer's site) are flagged as unverifiable.

Step 15

Mobile parity test

We play 30+ minutes on iPhone 15 Pro Max (Safari + iOS native browser) and Samsung Galaxy S24 (Chrome). We record frame rate during high-feature gameplay (free spins, bonus rounds), data usage per hour, and any mobile-only bugs (orientation, gesture, login-state persistence).

Stage 4 — Bonus & wagering (steps 16–19)

Step 16

Wagering multiplier + game contribution

We document the wagering multiplier (commonly 30×–50×), what it applies to (bonus only, deposit + bonus, or just winnings), and the per-category contribution (pokies usually 100%, table games 10–20%, live dealer often 0–5%).

Step 17

Max-bet-during-bonus check

The single most common reason free-spin or welcome-bonus winnings get voided. We test the cashier's enforcement of max-bet caps (typically NZ$5–NZ$10 per spin while bonus funds are active) and document any silent voiding behaviour.

Step 18

Bonus-expiry window

Some welcome offers expire in 3 days, others in 30. We confirm the expiry on the offer page, in the email confirmation, and in the cashier — and flag any inconsistencies.

Step 19

Real-bonus-value calculation

We apply our real-value formula (Bonus × RTP^Wagering) to compute the theoretical value retained after wagering at the casino's average RTP. The number is published on every review.

Stage 5 — Withdrawal timing (steps 20–22)

Step 20

Withdrawal request submission

We submit a withdrawal of approximately 80% of the balance (leaving a small play-back amount). We time-stamp the request submission to the second.

Step 21

KYC re-check timing

Some operators re-verify KYC on first withdrawal even if it cleared at sign-up. We log the re-verification request, the documents asked for, and the time from request to release.

Step 22

Funds received in NZ

We log the timestamp the funds land in our NZ bank account (for bank rail), our wallet (for crypto), or our e-wallet (Skrill, Neteller, MiFinity, ecoPayz). The end-to-end "withdrawal request → received" figure is published verbatim on every review.

Stage 6 — Responsible gambling tooling (step 23)

Step 23

Self-exclusion + reality-check confirmation

After all financial steps are complete we test self-exclusion (we activate a 24-hour cool-off and confirm we cannot log in). We confirm session-time limits trigger reality-check pop-ups at the documented intervals. We verify that excluding from one product (pokies) does not silently leave another (live casino, sportsbook) accessible.

The Kiwi Trust Score

How we score, in six dimensions

Every operator is scored out of 10 across six dimensions. The composite is the Kiwi Trust Score, surfaced at the top of every review.

DimensionWeightWhat we measure
Licensing & ownership20%Verified licence with link to public registry; parent-company transparency; track record
Payout reliability20%End-to-end withdrawal time, tested with our own NZD funds
Game integrity15%Per-provider RTP labels published; eCOGRA / iTech Labs / GLI audits
NZ payment support15%NZD-native cashier, crypto breadth, Apple/Google Pay, bank transfer
Bonus fairness15%Wagering multiplier ≤ 40× preferred; max-cashout caps; max bet during bonus play
RG tooling15%In-account limits; self-exclusion length; reality checks; helpline links

How often we re-test

Every operator on our list is re-tested at least quarterly (every 90 days). The "Last re-tested" stamp at the top of each review and the next-scheduled-test date are visible publicly so you can see when we last completed the full 23-step sequence. If a casino changes a material policy mid-quarter (e.g. tightens wagering, drops a payment method, changes a withdrawal cap), we re-test out-of-cycle and refresh the page.

What happens when we find a problem

Three escalation paths:

  1. Editorial correction. If a fact in our review is wrong, email [email protected]. We acknowledge within 2 business days and fix material errors within 5.
  2. Operator-side issue. If a casino misbehaves at any of our 23 steps, the issue is logged on the review page and the Kiwi Trust Score is downgraded.
  3. Player complaint mediation. When a reader sends us a complaint about a casino on our list, we contact the operator on the player's behalf. We publish the resolution outcome on the review page.

Why a 23-step process matters in 2026

The Online Casino Gambling Act 2025 received Royal assent in early 2026, with advertising prohibitions for unlicensed operators commencing 1 May 2026 and the first DIA-licensed online casinos going live in Q1 2027. Through the transition, offshore operators remain lawful for Kiwi players but cannot advertise into NZ. That makes independent, methodology-led editorial coverage the single most reliable way for New Zealanders to identify safe operators. The 23 steps above are the standard we hold ourselves to. They are also the bar we expect the upcoming DIA licensing regime to enforce.

Need help right now?

Free, confidential, 24/7 support is one phone call away.

0800 654 655

NZ Gambling Helpline · text 8006 · safergambling.org.nz

Process owners: Daniel Kahu (Sign-up, Deposit, Gameplay, Withdrawal) · Emma Whitfield (T&C audit, fact-check, RG tooling)

He aha tāku i te āwhina ai? — How can I get help?

"He waka eke noa" — we are all in this together.

If your pokies play has stopped feeling like fun, free confidential 24/7 support is one phone call away. Gambling Helpline NZ — 0800 654 655 · Text 8006 · safergambling.org.nz

Pasifika whānau: Mapu Maia 0800 21 21 22 (talanoa in English, Samoan or Tongan). Asian whānau: Asian Family Services 0800 862 342 (eight languages). Multi-venue self-exclusion: multivenueexclusion.org.nz.