CyberB2B Certificate of Compliance
What the certificate covers and what evidence is required.
Validity
1 Year. Annual recertification audit available.
Standards
ISO/IEC 27001:2022, ISO 9001:2015, ISA 230/315/330/500/520/530.
Assurance
Provides regulators and stakeholders with independent assurance of security, integrity, and compliance.
Certification Coverage Areas
| Requirement | Supporting Evidence Required | What the Certificate Confirms |
|---|---|---|
| 1. User Accounts & Gaming Accounts | Account creation, registration, balance management, authentication, KYC verification | Compliance with access control, user lifecycle security, and process controls |
| 2. Games Involving RNG | Independent RNG testing reports, fairness evaluations, mathematical analysis | RNG compliance and integrity of randomness |
| 3. Games Not Involving RNG | System audits, operational logs, outcome determination testing | Fairness and transparency of non-RNG games |
| 4. Inspection Systems | Monitoring evidence, audit logs, regulatory reporting systems | Inspection traceability and audit-readiness |
| 5. Information Security Management | ISO 27001 ISMS policies, penetration test reports, access logs | Alignment with ISO 27001 security framework |
| 6. Privacy & Personal Data (GDPR) | Privacy policy, GDPR compliance evidence, user consent management | Compliance with international data protection standards |
| 7. Gaming Platform Functionalities | KYC, deposit/withdrawal systems, balance management, account registration evidence | Compliance of core operational platform features |
| 8. Anti-Fraud / AML / CTF | AML/CTF policy, SAR evidence, KYC and transaction monitoring records | Anti-fraud and AML/CTF framework is in place |
| 9. Safeguarding of Personal Data | Encryption protocols, secure storage, access control reviews | Player data safeguarded per ISO 27001 |
| 10. Security & Traceability of Communications | SSL/TLS certificates, secure API logs, communication monitoring | Integrity, traceability, and encryption of communications |
| 11. Integrity of Player Access | MFA implementation, penetration testing, vulnerability scan reports | Secure, traceable, and authorized player access confirmed |
| 12. Traceability of Transactions & Game Changes | Audit logs, transaction history, system change documentation | Transparency, traceability, and non-repudiation validated |