Last updated: 14 April 2026
By James Mitchell · 200+ casinos tested with own funds since 2018
Every Fortunica review runs through the same eight-stage protocol. I open a real account, deposit my own money, play, claim the bonus, request a withdrawal, time the support response, and document each step with screenshots. There's no demo mode, no operator-supplied test login, no shortcut. The full cycle takes between five and ten working days per casino, depending on KYC turnaround and withdrawal speed.
This page describes the protocol exactly as I run it. Every claim in a Fortunica review traces back to a specific stage below.
Before the methodology, the economics. Each test deposit is £20 to £50, occasionally £100 for highroller-specific testing. About 60% of that comes back as withdrawals on average, with heavy variance. The rest is the cost of the test. Across 2025 my total test spend was £4,800; net loss after withdrawals was £2,100. That's tracked in a spreadsheet, declared on my UK self-assessment as a business cost, and is one reason we run on affiliate revenue rather than reader donations — donations would never cover it.
Before I deposit a penny, Imogen and I spend a couple of hours on the paperwork. The licence number on the casino's footer goes onto the regulator's public register: gamblingcommission.gov.uk for UKGC, mga.org.mt for Maltese licences, curacao-egaming.com for Curaçao. About one in twelve operators we plan to review fails this stage — wrong licence number, lapsed status, or registered to a holding company that doesn't match the operating brand. Those drop out of the queue immediately.
We then look up the parent N.V. or holding company on the relevant corporate registry. Beneficial ownership matters: an operator I've previously flagged for slow payments will sometimes appear under new branding with a new licence but the same beneficial owner. That counts as the same operator and inherits the previous rating until proven otherwise.
I create an account using my real ID — full UK passport, current address, accurate date of birth. The signal here is friction: how many fields, how many forced upsells, whether the bonus opt-in is buried, whether the form fails on a real UK postcode. Anything over four minutes from start to confirmation email is flagged in the review.
KYC then sits between deposit and first withdrawal at most operators. Standard documents: passport or driving licence, proof of address dated within three months, sometimes a selfie holding the ID. I track turnaround from upload to verified. Under 24 hours is fast. 24 to 48 hours is normal. Anything past 72 hours without communication gets a downgrade. KYC requests that arrive only at the withdrawal stage — rather than at deposit — are a specific flag I write up explicitly, because the timing pattern is associated with operators who slow-pay winners.
I deposit £20–£50 via at least two different methods, typically a debit card and either an e-wallet or crypto. Times are recorded from "submit" to "balance updated". Visa and Mastercard should clear within 30 seconds; e-wallets in under a minute; crypto depending on chain congestion (typically 2–10 minutes for ETH, 15–60 for BTC at 1 confirmation). Bank transfers I time over the full processing window (usually 1 to 3 working days.
Failed deposits, pending statuses on instant methods, or the bonus failing to activate when the deposit lands — each gets noted with the time and the support response (if I had to ask). I keep the screenshot of the deposit confirmation in case anything is disputed later.
If the operator runs an automatic welcome bonus, I track it appearing in the bonus dashboard. If it requires a code, I test the activation flow — about one in eight code-based offers fails on first attempt for reasons unrelated to the user. I read the full T&C before playing, not after, and pull out the four numbers that determine real value: wagering multiplier, calculation base (bonus only or bonus + deposit), max bet during clearance, expiry window. I also note game contribution percentages. "Live casino excluded" is a specific enough flag to put in the review headline.
I don't typically clear the entire wagering — most welcome bonuses have negative expected value at standard contribution percentages, and clearing them on autopilot is a money-losing exercise. I clear enough to verify the maths is consistent with the published terms, which usually means 20–40% of total wagering volume.
Four to six hours of actual play, split across slots (60% of session), table games (20%), and live dealer (20%). Slot picks vary but typically include a NetEnt classic (Starburst or Gonzo's Quest), a high-volatility Hacksaw or Nolimit City title, and whatever the casino is featuring on its homepage. Table games are blackjack and European roulette. Live dealer is one Evolution table, usually Lightning Roulette or a high-stakes blackjack room.
What I track during gameplay: load times for each title (anything over 4 seconds gets flagged), live dealer stream stability (audio sync, video glitches, mid-game disconnects), responsive design on mobile (browser, not app), and whether the cashier remains accessible mid-session without disrupting an open game. I also keep the bet history exported afterwards as a sanity check on the bonus contribution claims.
This is the stage that actually matters. I request a withdrawal as soon as bonus terms allow it, ideally to the same payment method I deposited from. Volumes are kept modest (typically £80 to £150 — to avoid triggering large-withdrawal review queues that aren't the standard player experience.
The clock runs from "request submitted" to "funds in receiving account or wallet". I also note the intermediate states: "pending", "processing", "approved", and any KYC steps that re-trigger here. Under 24 hours end-to-end is fast (the standard for most crypto and good e-wallet operators). Two to three working days is normal for fiat. Four working days plus is slow. Anything past five working days without proactive communication gets a major downgrade.
I also test what happens to a small second withdrawal (sometimes the first goes through, the second sits in queue. And I check whether the operator runs a "reverse withdrawal" feature where pending cashouts can be reversed back into the playable balance. That's a player-protection red flag and gets called out in the review.
I open at least three support tickets per casino. One simple (asking about deposit limits). One bonus-related (asking for clarification on a wagering edge case). One complaint-style (a "delayed withdrawal" enquiry, even when my own withdrawal has cleared, to see how they handle the question). Live chat response times are noted to the minute. Email responses I time end-to-end including the queue. Quality of answer is judged by whether the agent actually resolves the question or fobs me off to T&Cs.
Live chat available 24/7 in English with under 3-minute waits is the standard for a passing score. Anything where the live chat closes overnight UK time, or where weekend response stretches beyond 30 minutes, gets flagged. Generic shell-script responses in broken English get a specific call-out.
The full test repeats on mobile, both iOS Safari and Android Chrome. I check that the cashier works, that bonus activation flows are accessible, that live dealer streams hold up on 4G, and that responsible gambling tools (deposit limits, self-exclusion, time-out) are reachable in fewer than four taps from the main menu. Buried tools count as effectively absent.
SSL certificate verification is automatic, but I still check it manually. Two-factor authentication availability gets noted (it's still missing from a surprising number of offshore operators in 2026). Session timeout behaviour I test by leaving a tab idle for 30 minutes — anything that keeps me logged in indefinitely is a security flag.
Not every test makes it to publication. The honest record matters here.
About 8% of casinos we begin testing fail at registration or KYC for reasons that look like reviewer detection — "your documents are not acceptable", repeated requests for notarised translations of UK documents, or accounts being closed within 24 hours of opening. We don't publish reviews from incomplete tests. We do flag the operator internally so we don't waste time on the same brand again under a different domain.
Another 5% fail at the withdrawal stage. The deposit goes in, the play happens, the bonus is cleared, and the withdrawal then sits in pending for fourteen days or longer with no resolution. Those operators get added to a private "delayed payment" file that informs our future testing priorities.
Test data feeds the scoring formula on the How We Rate page, weighted across eight criteria. The draft review goes through fact-checking against original screenshots before publication. Reviews are revisited every six months as standard, and immediately when material changes occur. The Editorial Policy sets out the wider standards.
