A real-money cycle running two weeks per operator: real deposits, real KYC documents and real withdrawal requests across several rails, all timed to the minute. No demo play, no free operator credits, no shortcuts.
Most casino reviews you'll find online trace to one of three places: the operator's press kit reworded with synonyms, a rival's review re-spun by an AI, or a top-10 ranked by commission. None of them need the writer to have opened a real account, never mind cleared a bonus or timed a withdrawal. The output reads like a review but describes a casino the author never touched.
I go about it differently. Every operator on this site runs through a two-week real-money cycle, identical site to site — which is how the rating framework turns out comparable scores. The deposits leave my own bank account, the KYC documents are mine, and the withdrawals return to my own accounts. The commission model that keeps the site going is disclosed in full on the affiliate disclosure page, and it never reaches the testing bench.
This page lays out the full method in the order I run it. If a figure in the Roospin review looks unusual — a 2h 39min PayID withdrawal on a Monday afternoon, say — you should be able to read this page, see how that number came about, and decide whether to trust it.
Before I open an account, I gather the operator's public record. The Curaçao licence is checked against the Gaming Control Board register — both licence number and corporate licensee — because a listed licence isn't an active one. I read the Terms & Conditions cover to cover, flagging the clauses that most often trigger complaints: the max-bet-during-bonus rule, the bonus-winnings cashout cap, the reverse-withdrawal window and dormant-account fees.
I also run the domain past the ACMA offshore blocklist. Turning up on that list isn't a pass-or-fail verdict by itself, but it's context a reader is owed and a question I want to be ready to answer in the "Is It Legit" section of the review.
Complaint patterns come from public threads on AskGamblers, Casino Guru and the Australian gambling subreddits. I'm not chasing one-off bad reviews — every casino collects them — I'm after recurring patterns. A dozen different players describing the same KYC stall on the same document type is a signal.
I register with genuine details: full legal name, real Sydney address, real date of birth, real phone number. It's the only way KYC clears later, and the only honest way to see what the registration flow does with your data. I clock the time from the first form field to the confirmation email, in minutes.
The first deposit is usually A$50 on Visa debit — a rail chosen to match the most common AU path, a bank card in a mid-range mobile browser rather than a crypto wallet on desktop. I record the time to clear, any 3D Secure friction, any declines, and whether the funds land in the cashier balance with or without the bonus. Screenshots at each step.
If the operator's default path fires the welcome bonus on first deposit, that's how I take it. I read the bonus T&C page in full before I click activate. The wagering multiplier, the max-bet-during-bonus rule, the contribution table and the expiry window all get logged against the live page rather than marketing copy — these are the figures that later cause most disputes.
Most Curaçao operators wave a first deposit through before verification but hold withdrawals until KYC clears — that's the behaviour I test. I send in three documents: a current Australian passport, an electricity bill under three months old, and a selfie holding the passport. Then I time the turnaround from first upload to approval email.
I note whatever the operator requests beyond the strict minimum, and any friction on the re-upload path. In my experience the usual KYC hold-up is a blurred date line on a utility bill — I leave it blurred on the first pass on purpose, to see whether the operator catches it, how they flag it, and how long the second round runs. That's the KYC delay written up in the Roospin review.
I use no VPN, no residential proxy and no address other than my real home. Offshore operators run geo-IP checks, and a mismatch between the account address and the access IP is the sort of flag that can freeze a cashout. Testing behind a VPN would warp every number this site puts out.
I clear the welcome bonus at realistic stakes — usually A$2–A$5 spins on mid-volatility slots, not A$0.20 minimums to pad the bankroll and not A$50 spins that breach the max-bet rule. The idea is to reproduce what a real AU player does after claiming the offer.
I keep track of cumulative turnover against the wagering requirement, which games count 100% and which count less, and the running balance at regular intervals. Finish the wagering still in the black and that becomes the bonus-clearing story in the review. Come up short — the more usual outcome, since 40× wagering at 96% RTP rarely favours the player — and the net loss goes in as a specific figure, not buried.
The max-bet-during-bonus rule gets a test of its own. I deliberately set one spin right at the edge of the stated limit to confirm the rule bites as written. I also check whether bonus play on restricted categories (table, live) is blocked at the game level or only flagged after the fact. After-the-fact voiding is the single biggest reason Australian players lose a bonus-funded win, and operators that handle it openly score above those sheltering behind a T&C clause.
This is where the review earns its score. I put at least two withdrawals through on two different rails. For Roospin, those were a A$250 PayID withdrawal and a Bitcoin withdrawal of around A$400.
I break every withdrawal into three timed segments rather than one lump figure: request to approval email, approval email to the casino's broadcast (crypto) or processing submission (fiat), and processing submission to funds landing in the destination account. Each segment is logged because the bottleneck moves from operator to operator. Some run a quick approval queue but a sluggish processing cadence; others approve once a business day, then clear the network leg in seconds.
I don't accept talk of a "first withdrawal review" or a "mandatory 24-hour hold" as cover for poor performance — if the published T&C promise processing within 24 hours, the clock starts the moment I hit request, not when the compliance desk feels ready. Those are the numbers that go into the payments section of the review.
I test live chat at least four times during the two-week cycle, at different times of day, with questions of increasing specificity. The easy round is "what is the minimum withdrawal" — an agent should answer that in under ninety seconds without checking anything. The harder round is a specific bonus T&C question: game contribution percentages, max bet during bonus, whether the welcome bonus can be cleared on live dealer tables. That separates agents who have read the T&C from agents who copy-paste a generic answer.
Email gets one test, with a question a stock macro can't answer. I record the response time in hours, the quality of the reply, and whether the agent actually read my question. Phone support, where it's offered, gets the same treatment.
Mobile is tested on two handsets — an iPhone 13 on Safari over home Wi-Fi and a mid-range Android on Chrome over 4G. I open the same pokie on both and note the time-to-first-spin. I also run a cashier flow on mobile to confirm deposits, withdrawals and bonus activation all hold up without dropping back to a desktop page.
Security testing is mechanical: TLS certificate validity, the presence of HSTS headers, whether the login page offers two-factor authentication, and whether the account section allows you to set deposit and loss limits. The absence of 2FA on a real-money account is a knock, and it is noted in the "Is It Legit" section of the Roospin review for that reason.
I open the account's responsible gambling section and try each tool. Deposit limits: does a A$100 daily cap really block a A$150 deposit, or quietly let the bigger amount through? Loss limits: enforced across sessions, or only within one? Self-exclusion: how many clicks to set it off, is there a cooling-off period before reactivation, and does the account truly lock server-side rather than just hide the buttons?
These are the questions the responsible gambling page uses in its walk-through of what AU players should expect from an operator. They are also part of the score in how we rate casinos.
Once the notes are in, the draft runs through a structured pre-publication fact-check. Every verifiable claim is re-checked against its live primary source: the licence number on the regulator's register, the bonus terms on the current cashier page, the provider list in the live lobby, the processing windows in the current T&C. Any number a screenshot or timestamped log can't stand behind is cut, not published with a hedge.
The full editorial process — author attribution, fact-check, correction, and freshness policy — is documented at the editorial policy. The process is why the "last fact-checked" date at the top of the review actually corresponds to a verification event, not to a CMS save.
Every review is re-tested at least every six months, and out of cycle whenever the operator changes something material — a reshaped welcome bonus, new payment rails, a licensing change. The date at the top updates only when a real verification has taken place: if it moves, something was re-tested; if nothing was, it holds. That's the rule, enforced on the editorial side.
If you spot a number on the review that is out of date — a bonus that has changed, a payment method that has been removed, a processing window that no longer matches — please tell us. Reader tip-offs on factual drift are the single most reliable way we catch changes between scheduled re-tests.