The method behind the ranking
How we test crypto casinos: the terms, the register and two real accounts
The scores in the ranking come from the operators' own terms and from the registers that issued the licences. At Vave and TrustDice the desk has also used its own money. Here is how it all hangs together.
How we test a crypto casino: we open the terms the operator has published themselves, find the clauses on identity checks and money, and look the licence up in the register of the body that issued it. Every answer gets a clause number and a date. What is not stated there earns no score.
The size of a bonus, the number of games and the design do not count. Those are things that change from week to week and say little about what happens on the day you want your money out. The score concerns what you can find again in a text and check yourself. The result of this method can be seen in full on the home page of the Kryptospill comparison, where all the operators are gathered.
How we test: the five points
Each casino can get one point per point, so five at most. The figure on the page shows the five questions together; here is what each of them means in practice.
1. Is there a clause on identity checks?
We look for a provision in the terms saying the operator may ask for ID, proof of address or other documents. Almost all have such a text. The point falls away only when we find no wording about a check in what the operator has published themselves.
2. Does it say when the check starts?
Here it is not enough that the operator «may» check. The terms have to say what triggers the check: a withdrawal request, a deposit above a certain size, play with a particular coin or something else concrete. Wolfbet and Thunderpick have a clause about a check, but with no such moment, and so lose this point.
3. Is an amount given?
An amount makes the check predictable. Bitcasino.io mentions €2,500 or the equivalent in crypto (cl. 6.6), and Rocketpot has two figures in two clauses, $2,000 and $2,500 (cl. 11.4 and 12.4). Both get the point, even though both also reserve the right to check below the limit.
4. Has a period been set for the documents?
How long do you have when the operator asks for papers? We give the point when the period is written down: Rainbet gives 72 hours in cl. 20.1 and Wild Fortune two weeks in cl. 8.4 and 9.3. Rocketpot grants you 30 calendar days under cl. 12.2, while Metaspins writes 30 days in cl. 9.10. The period applies to your documents, not to how long the operator takes.
5. Does the licence stand in the register under the operator's own domain?
A seal in the footer is not enough, because anyone can paste in an image. We look the number up in the register of the body that issued the licence, and see whether the operator's own domain is listed. For Curaçao that means cert.cga.cw, for Anjouan the register the Anjouan authority publishes itself.
| Casino | Score | Licence | Identity check | Document threshold | Link |
|---|---|---|---|---|---|
 VaveThe desk's own real-money account | 3/5 | Curaçao · the certificate shows vavegame.com | At the withdrawal requestcl. 8.7 | no amount | To the casino |
1 Bitcasino.io | 4/5 | Curaçao · register: active | Triggered by an eventcl. 3.13, 6.6 | €2,500 (or the value in crypto)cl. 6.6 | To the casinoFile |
2 Rocketpot | 4/5 | Curaçao · portal: invalid | At the withdrawal requestcl. 11.4, 12.4 | $2,000–$2,500 (two clauses)cl. 11.4, 12.4 | To the casinoFile |
3 Wild Fortune | 4/5 | Anjouan · valid until 29 September 2026 | Triggered by an eventcl. 2.7, 11.2 | no amount | To the casinoFile |
6 Shuffle.com | 3/5 | Curaçao · register: active | Triggered by an eventcl. 5.2 | no amount | To the casinoFile |
7 Bitsler | 2/5 | Curaçao · register: active | Triggered by an eventcl. 8.22, 4.3 | no amount | To the casinoFile |
8 Thunderpick | 2/5 | Curaçao · register: active | No moment statedcl. 21.1 | no amount | To the casinoFile |
Every To the casino button in this table opens the same place: the casino this page is paid to show, and not the operator standing in the row beside it. File goes to the operator's own entry, where the clauses behind the scores are quoted. The scores are counted from published terms and register entries, and that count is not for sale.
Where each answer is read
We read the terms on the operator's own domain, in the version that is up that day. For most of the twelve in the ranking the terms were read on 2 September 2026. Shuffle.com was read on 8 September 2026, and Vave's section 8 is from 25 August 2026.
The registers were queried on 12 September 2026, with a few exceptions. Shuffle.com was queried on 8 September 2026, and Rocketpot was checked twice, on 12 and 13 September 2026. Both times the portal showed the certificate as invalid.
When the sources do not say the same thing
The queries often reveal discrepancies, and then we write both pieces of information instead of choosing one:
- Metaspins: the terms point to an Anjouan number, while the Curaçao register has Metaspins N.V. with a number of its own. Two bodies, with no explanation from the operator of how they connect.
- Wild.io: the certificate stands in the name of Nonce Gaming B.V., the terms mention Stack Gaming Ltd.
- Bitsler: the register shows an active number for Oyine N.V., but the terms still describe it as an application.
- Thunderpick: the number is active in the register, but the terms mention neither the body nor the number.
- Rainbet: the seal carries no number, and cl. 21.6 points only to Gaming Services Provider N.V.
The whole overview with every field is in the list with files.
Dates, and why saved copies do not count
Every piece of information has a reading date because terms change without notice. A clause that was there last year may have been rewritten today. So we only use texts we have opened on the operator's or the register's own page.
Saved copies of old versions we never use as a source, not even when they are the only thing there is. A copy shows how a page looked once, not what applies now. For Jack.com, Thunderpick and TrustDice that means several fields stand with a dash, even though older texts exist.
The two accounts with real money
Everything above is read, not played. But at two operators the desk has also used its own money, and those are the only two times.
Vave, 28 August 2026
The desk deposited and withdrew its own money. No ID was requested while the total of the withdrawals rose towards roughly 5,000 USDT. This is one account and one period, so an observation and not a rule.
cl. 8.7 of Vave's terms still gives the operator the right to ask for ID before any payout. The period for sending documents is 14 days under the same clause.
TrustDice, May 2026
Here the deposits in USDT ran over several weeks. The first withdrawals required no documents; only once the total had crossed roughly $5,000 did it stop. The withdrawal after that got the status «payment under review», and shortly afterwards an email arrived from the compliance department with a link to Veriff.
The driving licence was refused, while the passport was approved on the fifth attempt. Some time later another email came in which TrustDice wanted the documents once again.
Three practical pieces of advice from that round: use a passport rather than a driving licence, photograph in even light with no glare, and make sure the selfie resembles the photo in the document.
Why Vave stands outside the ranking
That is why Vave stands above the ranking and has neither a rank nor a score in the text. It would have been misleading to mix that row into a list meant to rest on the terms and the register.
You still get the same information about Vave as about the others: Latcas B.V. is listed with OGL/2024/1676/0905, active since 19 May 2025, but on 12 September 2026 cert.cga.cw showed only the domain vavegame.com under that number. Vave's section 8 has a check clause and a document period, but no amount.
The names with no score
Below the twelve in the ranking, several casinos stand on the list with no score. The names were gathered on 16 September 2026 from the casino lists on pages that came up for the search «krypto casino norge». They are there because readers meet them elsewhere, but we have not worked through their terms clause by clause, and so they get no rank either.
Four brand names with a dash in every field
Stake, Roobet, Rollbit and MyStake each have a page of their own, but all five fields stand with a dash. When we tried to open their terms on 16 September 2026, stake.com and mystake.com answered with a robot check (HTTP 403), and rollbit.com answered with a regional block (HTTP 451). Roobet.com loaded but showed no terms text without a script.
Since we do not use saved copies, there is a dash where the answer should have been. The pages about Stake, Roobet, Rollbit and MyStake show instead where you can find the answers yourself.
How we test again when things change
The terms and the registers have to be read again when an operator changes a text or when a certificate expires. Wild Fortune's Anjouan licence, for example, is given as valid until 29 September 2026, so that field has a known expiry date.
A certificate that expires can be renewed, but it can also be left out of the register. When an answer changes, we update the field, the clause number and the date. The score follows automatically from the five answers, so the places in the ranking can move without us writing anything new about the operator.