A two-week, real-money cycle for each operator: real deposits, real KYC documents and real withdrawal requests across several rails, all timed to the minute. No demo play, no free operator test credits, no shortcuts.
Most online casino reviews trace back to one of three sources: an operator press kit reworded with synonyms, a rival review re-spun by an AI, or a top-10 list ranked by commission. None of those require the writer to have opened a real account, let alone cleared a bonus or timed a withdrawal. The result reads like a review while describing a casino the author has never actually used.
I work the other way round. Every operator covered here goes through a two-week real-money cycle, and that cycle is identical from one site to the next, which is how the rating framework keeps scores comparable across reviews. The deposits come from my own bank account, the KYC documents are mine, and the withdrawals land in my own accounts. The commission model that funds the site is disclosed in full on the affiliate disclosure page, and it never reaches the testing bench.
This page sets out the full method in the order I work through it. If a figure in the Casiny review looks surprising, such as a 2h 39min PayID withdrawal on a Monday afternoon, you should be able to read this page, see exactly how that number was produced, and decide for yourself whether to trust it.
Before opening an account, I gather the public record on the operator. The Tobique licence is checked against the operator's licensing body, the Tobique Gaming Commission, covering both the licence reference and the corporate licensee, since a listed licence is not always an active one. I then read the operator's Terms & Conditions from start to finish and flag the clauses that most often spark complaints: the max-bet-during-bonus rule, the bonus-winnings cashout cap, the reverse-withdrawal window and dormant-account fees.
I also run the domain against the ACMA offshore blocklist. A casino appearing on that list is not a pass or fail signal on its own, but it is context a reader deserves, and it is a question I need to be ready to answer in the "Is It Legit" section of the review.
Complaint patterns come from public threads on AskGamblers, Casino Guru and the Australian gambling subreddits. One-off bad reviews are not the point, since every casino collects a few; what I look for is a repeating pattern. When a dozen separate players describe the same KYC stall on the same document type, that is a signal worth recording.
I sign up with genuine details: my full legal name, my actual Sydney address, my real date of birth and phone number. That is the only way KYC will clear later, and the only honest way to see what the registration flow does with your data. I clock the time from the first form field to the confirmation email, in minutes.
The first deposit is usually A$50 on Visa debit. I choose that rail because it mirrors the most common Australian path: a bank card in a mid-range mobile browser rather than a crypto wallet on a desktop. I log the time to clear, any 3D Secure friction, any declines, and whether the funds appear in the cashier balance with or without the bonus attached, taking screenshots at every step.
The welcome bonus is activated on the first deposit when that is the operator's standard path. I read the bonus T&C page before clicking activate. The wagering multiplier, the max-bet-during-bonus rule, the game contribution table and the bonus expiry window are all recorded from the live page rather than from marketing material, because these are the numbers that cause most disputes later.
Most offshore operators on this kind of licence allow a first deposit before verification but hold withdrawals until KYC clears. That is the behaviour I test. I submit three documents: a current Australian passport, a recent electricity bill under three months old, and a selfie holding the passport. I time the turnaround from the first upload to the approval email.
I note anything the operator asks for beyond what is strictly required, and any friction on the re-upload path. In my experience the most common KYC delay is a blurred date line on a utility bill, so I deliberately leave that as it is on the first submission to see whether the operator catches it, how clearly they explain the problem, and how long the second round takes. That is the KYC delay written up in the Casiny review.
I never use a VPN, a residential proxy or any address other than my real home. Offshore operators run geo-IP checks, and a mismatch between the account address and the access IP is a flag that can freeze a cashout. Testing through a VPN would distort every number this site produces.
I clear the welcome bonus at realistic stakes, usually A$2–A$5 spins on mid-volatility pokies. I avoid both A$0.20 minimums that just pad out the bankroll and A$50 spins that breach the max-bet rule. The aim is to mirror what a real Australian player does after claiming the offer.
I keep tabs on cumulative turnover against the wagering requirement, on which games count 100% and which count less, and on the running balance at intervals. If the wagering finishes with money left, that becomes the bonus-clearing story in the review. More often it comes up short, because the math rarely favours the player on 40× wagering at a 96% RTP, and in that case the net loss goes into the review as a hard figure rather than being buried.
The max-bet-during-bonus rule gets a dedicated test. I place one spin right at the edge of the stated limit to confirm the rule is enforced as written. I also check whether bonus play on restricted categories such as table and live games is blocked at the game level or only flagged after the fact. Retroactive voiding is the most common reason Australian players lose a bonus-funded win, and operators that handle it transparently score better than those that hide behind a T&C clause.
This is the stage where the review earns its score. I make at least two withdrawals on two different rails. At Casiny those were a A$250 PayID withdrawal and a Bitcoin withdrawal of roughly A$400.
Every withdrawal is timed in three segments rather than as a single combined number: from request to approval email, from approval email to the casino's broadcast (for crypto) or processing submission (for fiat), and from processing submission to funds landing in the destination account. I record each segment because the bottleneck differs by operator. Some sites have a fast approval queue but a slow processing cadence; others approve once a business day and then clear the network leg in seconds.
I do not treat a "first withdrawal review" or a "mandatory 24-hour hold" as an excuse for poor performance. If the site's published T&C say withdrawals process within 24 hours, the clock starts the moment I hit request and runs until the money is in my account. Those are the numbers that go into the payments section of the review.
I contact live chat at least four times over the two weeks, at different hours and with steadily harder questions. An easy one, such as the minimum withdrawal amount, should come back in under ninety seconds with no lookup. A tougher one is a specific bonus-T&C query: contribution percentages, the max bet during bonus, or whether the welcome bonus clears on live tables. That quickly separates agents who have read the T&C from those who paste a generic reply.
Email is tested once, with a question that needs a real answer rather than a canned macro. I record the response time in hours, the quality of the answer, and whether the agent has actually read my question. Phone support, where it exists, gets the same treatment.
Mobile is tested on two devices: an iPhone 13 on Safari over home Wi-Fi and a mid-range Android on Chrome over 4G. I open the same pokie on both and record the time to first spin, then run a full cashier flow on mobile to confirm that deposits, withdrawals and bonus activation all work without dropping back to a desktop page.
Security testing is mechanical: TLS certificate validity, the presence of HSTS headers, whether the login page offers two-factor authentication, and whether the account section lets you set deposit and loss limits. A missing 2FA option on a real-money account counts against the site, and it is noted in the "Is It Legit" section of the Casiny review for that reason.
I open the responsible gambling section of the account and test each tool. Deposit limits: does setting a A$100 daily cap actually block a A$150 deposit attempt, or does it quietly let the larger amount through? Loss limits: are they enforced across sessions or per session only? Self-exclusion: how many clicks to trigger it, is there a cooling-off period before reactivation, and does the account genuinely lock on the server side rather than just hiding the UI?
These are the questions the responsible gambling page uses in its walk-through of what AU players should expect from an operator. They are also part of the score in how we rate casinos.
Once the test notes are done, the draft goes through a structured pre-publication fact-check. Every verifiable claim is checked again against its live primary source: the licence reference on the regulator's register, the bonus terms on the current cashier page, the provider list in the live lobby, and the processing windows in the current T&C. Any figure that a screenshot or timestamped log cannot support is removed rather than published with a caveat.
The full editorial process, covering author attribution, fact-checking, corrections and the freshness policy, is documented at the editorial policy. That process is why the "last fact-checked" date at the top of the review lines up with a real verification event rather than a routine content save.
Every review is re-tested at least every six months, and out of cycle whenever the operator changes something material such as a reshaped welcome bonus, a new set of payment rails or a licensing shift. The date at the top moves only when a real verification has taken place, so a changed date always means something was re-tested, and an unchanged date means it was not. That rule is enforced editorially.
If you spot a number in the review that is out of date, whether a bonus that has changed, a payment method that has been removed or a processing window that no longer matches, please tell us. Reader tip-offs on factual drift are the most reliable way we catch changes between scheduled re-tests. The site's remit is set out on about and in the main Casiny review; the terms, privacy policy and cookie policy cover the legal side, and the sitemap lists every page.
