SANS 1718 Part 4 2018, Ed. 3.00
Wagering record-keeping software
The betting part. Accounts and passwords, the particulars of each bet, the wallet, settlement, reports and returns, security, clocks, significant events, communications.
The standard
The South African National Standard for gambling systems, published by the SABS. It is what a regulator means when it asks whether a bookmaker's software has been tested.
SASFA sits before the laboratory: it tests to the same standard so a product arrives there with its evidence in order. A SASFA report is not a certificate or a licence.
The standard is modular. A product complies with the clauses of the parts that match its shape; the chapters written for physical machines do not apply. Editions change, so the edition is recorded on every report.
SANS 1718 Part 4 2018, Ed. 3.00
The betting part. Accounts and passwords, the particulars of each bet, the wallet, settlement, reports and returns, security, clocks, significant events, communications.
SANS 1718 Part 10 2009, Ed. 1.00
Products whose outcome is generated on a server: software control, submission, the certified-build verification, parameter changes, reporting, recovery.
SANS 1718 Part 2 2016, Ed. 4.00
The generator, result determination, maximum prize and stake, significant events, and the submission guidelines in its first annex.
SANS 1718 Parts 3 and 9 2023 and 2021
Logging, backups, encryption, master resets, metering and message authentication, reused as the control checklist for any system that reports centrally.
Every bet stored with type, stake, odds, potential win, event, selection and time. Entering a result triggers settlement, tax and the database update together.
Where the software decides the result, the generator must be unpredictable, uniform and independent, documented, and tested in isolation.
Money in, money out, wagered and won on meters nobody can edit or roll back, and append-only transaction records retained for the periods the standard sets.
Things the system must detect and act on: verification failures, data corruption, lost communication, limits exceeded, privileged actions. Classed by the response required, from log-only to disable until cleared.
Proof that the software in production is the software that was certified: every file hashed, the manifest signed, verified at boot and on demand.
Bet state survives a crash. A bet interrupted mid-placement completes or is refunded, never stranded or duplicated.
That is the method behind a SASFA conformance matrix. Request a test.