CT-GT — Gambling Industry Tester glossary

154 terms the exam expects you to know, defined in plain language.

A

Access Controls for Data(data access controls): Security measures that prevent unauthorized viewing, modification, or deletion of data.
Account Recovery Testing: Verification that account recovery processes (e.g., password reset) are secure and functional.
Accounting Meter Verification(meter verification, accounting meter verification): Checking that electronic gaming machines correctly record coin-in, coin-out, and other financial meters.
Accounting Meters(accounting meters, meters): Data tracking mechanisms for financial metrics like coin-in, coin-out, and jackpots in gambling machines.
Accounting meter accuracy testing(meter accuracy testing, accounting meter accuracy testing): Comparison of EGM internal meters with host records to detect protocol or implementation faults.
Active Payline(active paylines): A payline selected by the player to be eligible for win evaluation.
Anti-Money Laundering (AML) Checks(aml checks): Controls that detect and prevent money laundering activities within a gaming system.
Audit trail(audit trail, audit trails): A clear chain of evidence from regulatory requirements to test documentation.
Autocorrelation Test(autocorrelation test): A statistical test that examines correlation between elements of an RNG sequence at different lags.

B

BOB (Best of Breed)(bob, best of breed): A communication protocol used in gambling systems for exchanging meters, events, and commands.
BOB Protocol(bob, best of breed): A standardized protocol (Best of Breed) used for communicating meter data and events from games to hosts.
Best of Breed (BOB)(bob, bob protocol): A protocol used primarily for communication in progressive jackpot systems.
Brute-force Attack Resistance: The ability of authentication systems to withstand repeated login attempts using many password combinations.
Buffering Critical Events(buffered events, buffer critical events): The process of storing essential game and accounting events in non-volatile memory during communication loss for later transmission.

C

Casino protocol functional testing(protocol functional testing): Verification that messages between EGMs and host systems are correctly formatted, sent, received, and interpreted.
Chi-squared Test(chi-squared test): A statistical test used to verify that RNG output is uniformly distributed.
Cluster Pays Win Calculation(cluster pays): A method awarding wins for groups of matching symbols that are adjacent horizontally or vertically.
Communication Loss(communication loss, communication failure): A scenario where a gambling machine loses connection to the host but must continue to increment meters locally.
Communication Protocol Functional Testing(communication protocol functional testing): A test that verifies correct message formatting, sending, receiving, and interpretation of protocols like SAS, G2S, and BOB.
Communication Protocol Testing(communication protocol testing): Testing protocols like SAS and G2S to ensure accurate accounting and player session management.
Communications loss testing(communications loss testing): Simulation of network failure to verify standalone EGM operation and meter buffering until communication is restored.
Compliance matrix(compliance matrix): A document mapping each regulatory requirement to the test that verifies it.
Compliance testing(compliance testing): The process of verifying that gambling products meet regulatory requirements for fairness, security, and reliability.
Compliance testing for gambling software(compliance testing): The process of verifying that gambling products meet regulatory requirements for fairness, security, and reliability.
Credential Stuffing Resistance: The ability to detect and block login attempts using credentials leaked from other services.
Cross-Jurisdictional Compliance Assumption(cross-jurisdictional compliance): The common mistake of assuming compliance in one jurisdiction implies compliance in another.

D

Data Encryption(encryption in transit, encryption at rest): The conversion of sensitive data into encoded form to protect it during transmission and storage.
Data Integrity(data integrity): The property that no events are lost, duplicated, or reordered during communication loss and recovery.
Data Integrity in Host Reporting(data integrity): The preservation of accurate and unaltered transactional data during transmission and storage despite network issues.
Display vs. Logic Pay Table Consistency(display vs. actual pay table discrepancies, consistency between display and logic, displayed pay table consistency, pay table consistency, display vs. logic pay table consistency): The requirement that the pay table displayed to the player matches the internal game engine configuration.
Documentation lifecycle update(lifecycle update): The requirement to update documentation throughout the testing lifecycle.
Documentation quality standards(quality standards): Criteria requiring documentation to be accurate, complete, and unambiguous.

E

EGM-to-Host Communication(egm-to-host communication): Data exchange between electronic gaming machines and a central host system using protocols like SAS.
Event Transmission Order(correct order): The requirement that buffered events are sent to the host in the exact sequence they occurred.
eCOGRA(ecogra): An independent testing agency that certifies online gambling sites for fairness.
eCOGRA Generally Accepted Practices(egap, ecogra's generally accepted practices (egap)): A set of fair play standards, including the requirement that displayed pay tables match internal logic, set by eCOGRA.
eCOGRA's Generally Accepted Practices (eGAP)(egap, generally accepted practices): A set of standards for fair and responsible online gambling.
eGAP(egap): eCOGRA's Generally Accepted Practices requiring that pay tables and game rules are clearly displayed and match actual operation.

F

Fraud Detection Rules(fraud detection): Configurable conditions that trigger alerts or actions when suspicious patterns are observed.
Fraud Prevention Controls: System mechanisms that detect and block exploitation of vulnerabilities, including AML, KYC, and account security.
Functional Game Testing(functional game testing, functional testing): The process of verifying that a gambling game functions as designed, using the game specification as the primary source for test cases.
Functional Protocol Testing(functional protocol testing): A verification method that confirms pay table data is correctly transmitted and synchronized between systems.
Functional test scenarios for protocols(test scenarios for protocols, functional test scenarios for protocols, functional test scenarios): Set of test areas covering normal operation, meter accuracy, communications loss, and invalid messages.

G

G2S (Game-to-System)(g2s, game-to-system, game to system protocol, game to system (g2s) protocol): A communication protocol for exchanging meter data, events, and commands between electronic gaming machines and host systems.
G2S Protocol(g2s, game to system): A modern, XML-based protocol for EGM-to-host communication supporting downloadable games and player tracking.
GLI (Gaming Laboratories International)(gli, gaming laboratories international, gaming laboratories international (gli)): A testing lab that certifies gambling equipment and software for compliance.
Game Cycle(game cycle): The sequence of states a game goes through, such as idle, spin, result, payout.
Game Integrity: The property that game outcomes are random, fair, and consistent with published rules.
Game Logic Testing(game logic testing): Verification that the game correctly implements the rules and pay tables.
Game Logic Verification(game logic testing): Testing that the rules and state transitions of online casino games behave as specified.
Game Specifications(game specification, game specifications, game specification document): A document that defines the intended behavior of a gambling game, including rules, pay tables, RNG integration, and RTP.
Game State Synchronization(state synchronization): The process of keeping the game state consistent across all players in a multiplayer game through communication protocols.
Game Version Configuration Management(configuration management): Ensuring the correct game build is tested for each jurisdiction.
Game to System (G2S)(g2s, g2s (game to system), game to system): A modern XML-based protocol supporting downloadable games and player tracking for EGM-to-host communication.
Gaming Laboratories International (GLI)(gli, gaming laboratories international): A primary testing and certification body for gaming systems whose standards are adopted by many jurisdictions.

H

Hit frequency: A measure of how often a game produces a winning outcome, distinct from RTP.
Host Reporting(host reporting): The process by which a central system receives accurate data from each gambling machine.
Host Reporting Testing(testing host reporting, host reporting tests): Verification that game messages are correctly sent, acknowledged, and that data remains intact under normal and error conditions.
House Edge(house edge): The mathematical advantage the casino has over players, complement of RTP.

I

ISTQB CT-GT syllabus documentation requirements(istqb ct-gt requirements): Emphasizes that documentation must be traceable to regulatory requirements.
ISTQB Glossary(istqb glossary, glossary): The official glossary providing canonical definitions for testing terminology used in ISTQB certifications.
Independent Testing Agency(independent testing agencies, ecogra, gli, gaming laboratories international): An organization like eCOGRA or GLI that certifies game compliance with industry standards.
Interoperability Testing(interoperability testing): Checking that the game functions correctly across different operating systems, screen sizes, and network conditions.
Invalid Message Handling Testing(invalid message testing): A test scenario that sends malformed messages to verify graceful handling without data corruption.
Invalid message handling(invalid message handling, malformed message handling): Graceful processing of malformed or unexpected messages by the EGM without data corruption or crashes.

J

Jurisdiction(jurisdiction): The regulatory authority that licenses and oversees gambling operations.
Jurisdiction-Specific Parameters(jurisdiction-specific parameters): Parameters like game version, localized messages, and mandatory loss limits that differ per jurisdiction.
Jurisdiction-specific documentation(jurisdiction-specific): Documentation tailored to the specific jurisdiction and product type for certification.
Jurisdictional Compliance(jurisdictional compliance, compliance with jurisdictional regulations): Meeting additional regulatory requirements beyond RNG certification for each jurisdiction.
Jurisdictional Regulatory Compliance(regulatory compliance by jurisdiction): Adherence to the specific gambling regulations of each jurisdiction where a product is offered.
Jurisdictional Specification(jurisdictional specification, jurisdictional specifications): Regulatory requirements imposed by a specific gambling authority, such as minimum RTP, maximum bet limits, and responsible gaming features.
Jurisdictional Specifications(jurisdictional specification, jurisdictional specifications): Regulatory requirements imposed by a gambling authority that mandate minimum RTP, bet limits, responsible gaming features, or reporting.
Jurisdictional variability(jurisdictional variability): The concept that a product approved in one region may not be compliant in another due to differing requirements.
Jurisdictional variability in gambling compliance(jurisdictional variability): The concept that a product approved in one jurisdiction may not be compliant in another due to differing requirements.

K

Know Your Customer Procedures(kyc): Processes to verify player identity and age, often required for regulatory compliance.
Know-Your-Customer (KYC) Verification(kyc verification): The process of verifying the identity of customers to prevent fraud and comply with regulations.

L

Left-to-Right Evaluation(left to right): The direction of checking consecutive matching symbols on a payline starting from the leftmost reel.
Live Dealer Game Testing(live dealer testing, live dealer game testing): Testing that covers video streaming, game interaction, camera angles, and dealer behavior for live dealer games.
Localization Testing(localization testing): Verifying that localized messages comply with local language and cultural norms.

M

Math model(game math model): A probability distribution of all possible game outcomes, including reel strip layouts, symbol frequencies, and pay table values.
Meter Accuracy(meter accuracy): The requirement that accounting meters, such as total wagered and total won, match between the game and the host system.
Meter Buffering(meter buffering): The process by which an EGM stores meter data locally during a network outage and transmits it upon reconnection.
Meter Reconciliation(reconcile meters, data reconciliation): The process of ensuring meter values match between a game and host after network interruptions or errors.
Multi-Platform Compatibility Testing(cross-platform testing, multi-platform compatibility testing, multi-platform testing): Ensuring online casino games function correctly across desktop, mobile, and other devices.
Multi-factor Authentication(mfa, multi-factor authentication): A security mechanism that requires two or more verification factors to authenticate a user.
Multiplayer Game Testing(multiplayer game testing, multiplayer testing): Testing synchronization and communication protocols for multiplayer online casino games.

N

Non-volatile Memory(non-volatile memory): Persistent storage within an EGM that retains buffered events during communication loss without power.

P

Password Complexity(password complexity): Requirements that enforce minimum length and character diversity to resist password guessing.
Password Complexity Requirements(password policies): Rules that enforce minimum length and character diversity for passwords to resist guessing.
Pay Table(pay table, pay tables): A table showing winning symbol combinations and their corresponding payouts.
Pay Table Accuracy(pay table verification, pay table accuracy): Verification that the pay table on a slot machine correctly matches the game's programmed payout rules.
Pay Table Consistency(pay table consistency): The requirement that the displayed pay table exactly matches the internal game engine configuration for fairness and compliance.
Payline(payline): A predefined line across the reels used to evaluate matching symbols for wins.
Payline-Based Win Calculation(payline-based, payline-based win calculation, payline wins): A method awarding wins for matching symbols on active paylines, typically left to right.
Paylines(paylines): Predefined lines on a slot machine where matching symbols must appear for a payout.
Payout percentage reports(payout percentage reports): Documentation that reports the percentage of wagers returned to players as winnings.
Player-Perspective Testing(player-perspective testing): Testing the user interface, responsiveness, and functionality across web browsers and mobile devices.
Privacy Compliance(gdpr compliance, data protection regulations): Adherence to data protection regulations such as GDPR, including user data rights and account deletion.
Protocol(protocol): A set of rules that govern the exchange of data between two or more systems.
Protocol Analyzer(protocol analyzer): A tool that captures and validates message sequences to verify correct protocol communication between EGMs and hosts.
Protocol Functional Testing(protocol functional testing, casino protocol functional testing): Testing that verifies correct formatting, sending, receiving, and interpretation of messages defined by casino communication protocols.
Protocol conformance(protocol conformance): Adherence to protocol standards essential for regulatory compliance and accurate accounting in gambling systems.
Pseudo-Random Number Generator (PRNG)(pseudo-random number generator): An RNG that uses mathematical algorithms to produce deterministic sequences that appear random.

R

RNG Period(rng period): The length of the sequence generated by a PRNG before it repeats.
RNG Seed(rng seed): The initial value used to determine the sequence produced by a PRNG.
RTP Statistical Variance(rtp statistical variance, long-term statistical average, statistical variance, volatility, variance): The principle that RTP is a long-term average and short-term results can vary significantly.
RTP Verification(rtp verification): Testing that actual RTP from simulated game rounds matches the theoretical RTP using statistical confidence intervals.
RTP calculation: The computation of RTP by summing the product of each winning outcome's probability and its payout, divided by total wager.
RTP compliance testing: The process of verifying that a game's actual RTP falls within a regulatory tolerance range through simulation, RNG testing, and code audit.
Random Number Generator (RNG)(random number generator, rng): A software algorithm that produces unpredictable outcomes for game fairness.
Random Number Generator (RNG) Integration(rng integration, random number generator integration): The incorporation of a random number generator into a game to ensure unpredictable outcomes.
Random Number Generator (RNG) Testing(rng testing): The process of verifying that a game's RNG produces statistically random and unpredictable outcomes.
Random Number Generator Testing(rng testing, rng verification, rng and fairness testing): The process of verifying that a slot or online game's RNG produces unpredictable and fair outcomes.
Re-synchronization(re-synchronize, reconnection): The process after communication restoration where the EGM transmits buffered events to the host in correct order and reconciles data.
Real-Time Data Feed Handling(real-time data feed testing): Testing the accurate and timely processing of live sports data feeds for betting updates and settlement.
Regression Testing(regression testing): Retesting affected areas like RTP and RNG after frequent game updates.
Regulator vs testing lab distinction(regulator vs testing lab, regulator vs testing lab distinction): The key difference that regulators set rules while testing labs certify compliance.
Regulators(regulators): Entities that set rules for gaming operations and compliance.
Regulatory Compliance(regulatory compliance, compliance): The state of a gambling game meeting all legal requirements imposed by a jurisdiction, including rules on RTP, bet limits, and responsible gaming.
Regulatory body vs. testing lab distinction(regulator vs. testing lab): The separation of roles where regulators set rules and testing labs certify compliance.
Regulatory requirement traceability(regulatory traceability): The need to trace test cases back to specific regulatory requirements.
Regulatory tolerance(tolerance range): The allowable range within which a game's actual RTP must match its declared RTP.
Return to Player(rtp, return to player): The percentage of wagered money returned to players over time, with minimums varying by jurisdiction.
Return to Player (RTP)(return to player, rtp, theoretical return-to-player (rtp), theoretical return-to-player): The theoretical percentage of wagered money a game returns to players over time.
Return-to-Player (RTP) Percentage(rtp percentage, rtp): A design specification for the percentage of wagered money a game returns to players over time.
Return-to-Player Verification(rtp verification, return-to-player verification): Testing that the theoretical RTP percentage matches actual results over simulated game rounds.
Runs Test(runs test): A statistical test used to check for patterns in RNG output sequences.

S

SAS (Slot Accounting System)(sas, slot accounting system): A communication protocol that defines message formats for meter data, events, and commands between EGMs and host systems.
SAS Protocol(sas, slot accounting system): A legacy protocol for EGM-to-host communication covering accounting meters, game events, and configuration.
Session Management Controls(session management, session management controls): Mechanisms that handle user sessions, including automatic logout and concurrent session limits.
Session Management Testing(session management testing): A security testing process that evaluates functional aspects (timeouts, concurrent sessions) and token security in gaming systems.
Session Management for Online Casinos(session management testing): Testing how online casino games maintain user sessions, handle timeouts, and prevent unauthorized access.
Session Token Invalidation(token invalidation): The process of marking a session token as expired, typically on logout, to prevent reuse.
Simulation testing(simulation runs): The use of automated spins to verify that RTP converges to the expected theoretical value.
Slot Accounting System (SAS)(sas, sas (slot accounting system), slot accounting system): A widely used legacy protocol for communication between electronic gaming machines and host systems.
Slot Game / Electronic Gaming Machine (EGM)(slot game, electronic gaming machine, egm): A game where players spin reels with symbols and outcomes are RNG-determined.
Sports Betting Odds Calculation(odds calculation verification, sports betting odds calculation): Verification that the odds used in sports betting are correctly computed based on input data and algorithms.
Standalone Mode(standalone mode): An operational state of an EGM during communication loss where it continues to function independently and buffer critical events.

T

Technical specifications documentation(technical specifications): Documentation detailing the technical design and implementation of a gambling product for compliance review.
Test Level vs. Test Type(test levels and test types): Categorization of testing: test levels (e.g., component, integration) and test types (e.g., functional, performance).
Test case documentation(test case): A document that includes expected results and links to specific compliance criteria.
Test documentation traceability(traceability): The requirement that test documents be linked to specific regulatory requirements for audit.
Test level(test level): A specific stage of the testing process, such as unit, integration, system, or acceptance testing.
Test plan(test plan): A document outlining the scope, approach, resources, and schedule of testing activities.
Test result documentation(test results): Documentation of test outcomes required for certification evidence.
Test type(test type): A category of testing focused on a specific test objective, such as functional, non-functional, or structural testing.
Testing Labs(testing labs): Organizations that certify compliance of gaming systems with regulatory standards.
Theoretical Return-to-Player (RTP)(rtp, theoretical return-to-player, rtp (return to player)): A mathematical model that indicates the expected percentage of wagered money a game will pay back to players over time.
True Random Number Generator (TRNG)(true random number generator): An RNG that derives randomness from physical processes such as atmospheric noise or radioactive decay.

V

Validation vs. Verification(validation and verification): Two distinct testing activities: verification confirms requirements are met, validation confirms intended use satisfaction.
Verification(verification): The process of evaluating a system or component to determine whether it meets specified requirements.
Version control for test documentation(version control): A best practice for managing updates to test documentation using version control.
Volatility(variance): A measure of risk in a game's payout distribution, distinct from RTP.

W

Ways-Based Win Calculation(ways-based, ways-based win calculations, ways-based wins, ways-based win calculation, ways-based slots): A method awarding wins for matching symbols on adjacent reels regardless of payline position.