A 12-Point Checklist for Choosing Your B2B Slot Provider
Guides · 2026-06-24 · 6 min read · By CROCO Games
A practical scorecard covering certification, math transparency, retention data, integration effort, content cadence, promo tools and reporting.
Choosing a B2B slot provider is a procurement decision that too often gets made on demo-reel dazzle instead of the things that determine whether the deal pays off: certification, math transparency, retention evidence, integration effort and support. A great-looking game from a provider who cannot produce a certificate, cannot show you retention data, and takes a month to integrate is a worse buy than a solid game from a provider who can. This is a 12-point scorecard you can run against any provider in an afternoon, with what "good" looks like on each point.
The 12-point scorecard
Score each 1-5; anything scoring 1-2 on certification, compliance or integration is close to disqualifying regardless of the rest.
| # | Criterion | What good looks like |
|---|---|---|
| 1 | Certification | Per-build, per-RTP certificates from an accredited lab (GLI-19 style), mapped to the exact build you deploy |
| 2 | Math transparency | Will share RTP variants, volatility, hit frequency and win distribution, not just a one-word label |
| 3 | Retention data | Provides real Day-2/Day-7 evidence you can A/B on your own traffic, not vibes |
| 4 | Integration effort | Single clean REST API; realistic days-not-weeks go-live; seamless-wallet support |
| 5 | Distribution reach | Available direct and via the aggregators you already run |
| 6 | Content cadence | A credible, regular release schedule so the catalogue stays fresh |
| 7 | Promo tools | Tournaments, free-round/free-spin support, jackpot mechanics you can theme campaigns around |
| 8 | Reporting granularity | Round-level, native metrics you can feed into your own cohort analysis |
| 9 | Compliance flexibility | Per-jurisdiction toggles (RTP, bonus buy, feature gating) |
| 10 | Responsible-gaming support | Limit enforcement, disconnection protection, fast-cadence guardrails |
| 11 | Support and relationship | Responsive escalation, a roadmap you can influence if strategic |
| 12 | Portfolio range | Volatility and genre spread that can cover multiple lobby rows |
Run every candidate through the same table and the demo-reel bias evaporates.
The three points that actually gate the deal
Not all twelve carry equal weight. Three are pass/fail:
Certification (1). If a provider cannot produce a certificate for the exact build and RTP you will run, from a recognised lab, the conversation is over — no amount of content quality survives an uncertified game in a regulated market. NDA-gated certificates are normal; refusal or vagueness is not. See the certification guide for the full document set to demand.
Compliance flexibility (9). A provider whose games cannot toggle bonus buy off in a banning market, or cannot serve the right RTP variant per jurisdiction, will block you from markets you need. Per-jurisdiction control is not a nice-to-have.
Integration effort (4). A messy, multi-endpoint, poorly-documented API turns a "quick" deal into a quarter of engineering. A single REST integration with seamless wallet support and a realistic 24-hour-class go-live is the bar. CROCO, for example, ships its 11-game portfolio behind one REST API with ~24-hour integration, and is reachable both directly and through SoftSwiss, Hub88, QTech, TurboStars and GPK Asia — which means the integration and distribution boxes are checkable facts, not promises.
The points operators under-weight
Three criteria that quietly decide whether the deal ages well:
- Retention data (3). Most providers show you art; few show you evidence a title retains. Ask for Day-2/Day-7 benchmarks and, crucially, the ability to reproduce them on your own traffic. CROCO publishes a live benchmark across 60+ deployments (13.78% Day-2 versus a 12.83/11.56/7.98 competitor set) and its retention technology methodology — treat any such figure as a hypothesis to A/B, but reward providers who can even have the conversation.
- Content cadence (6). A catalogue is a depreciating asset; players exhaust it. A provider shipping regularly keeps your lobby fresh without you re-procuring. Ask for the last 12 months of releases and the next 6 months of roadmap.
- Reporting granularity (8). As covered in the direct-vs-aggregator comparison, native round-level data is what lets you actually optimise placement and player LTV. A provider who exposes it hands you a lever; one who does not leaves you guessing.
How to run the evaluation
- Send the same 12-point request to every candidate. Certificates, math sheets, retention data, API docs, release history, roadmap, jurisdiction toggle list.
- Score pass/fail on 1, 9 and 4 first. Eliminate before you invest more time.
- Trial via an aggregator you already run if the provider offers it — validate retention claims cheaply on your own traffic before a direct build.
- Weight retention, cadence and reporting for the long-run decision, not just the demo.
- Promote proven providers to direct for margin and richer data once the numbers justify it.
Because a founded-2025 provider like CROCO can be trialled through an existing aggregator connection, you can put its retention claims on your own cohorts before committing engineering — which is exactly the disciplined path this scorecard is meant to enforce.
Red flags that should end the conversation
Some answers are disqualifying regardless of how the rest of the scorecard reads. Watch for these:
- "Our games are certified" with no document. A provider who will not map a certificate to the specific build you deploy — even under NDA — is hiding something or has nothing. This is the number-one red flag.
- A single blended RTP with no variants or no willingness to discuss math. Opacity about the maths usually means the maths will not survive scrutiny.
- No per-jurisdiction controls. If they cannot toggle bonus buy or serve the right RTP by market, they will lock you out of markets or into compliance risk.
- A multi-endpoint, undocumented API. A messy integration is a tax you pay forever, not just at onboarding.
- Retention claims they cannot let you verify. A benchmark you cannot reproduce on your own traffic is marketing, not evidence. Reward providers who invite the test; be wary of those who resist it.
- A stale catalogue. No releases in the last year signals a studio that will not keep your lobby fresh.
A provider can have beautiful art and still trip several of these. The scorecard exists precisely so that the demo reel does not get a vote on the questions that actually determine whether the partnership pays off over the eighteen months you will live with it.
Key takeaways
- Score every provider on the same 12 points; it kills the demo-reel bias that drives bad procurement.
- Certification, compliance flexibility and integration effort are pass/fail — a great game fails all of them if these do not clear.
- Under-weighted but decisive: retention evidence you can A/B, content cadence, and native round-level reporting.
- Demand per-build certificates and per-jurisdiction toggles; treat vendor retention benchmarks as hypotheses to test on your own traffic.
- Trial via an aggregator you already run, then promote proven providers to direct for margin and data.