SASFA, South African Software Fairplay Audit

Intended scope

Online bookmaker wagering and record-keeping software

SASFA’s intended focus is the software used by licensed bookmakers to accept, record, account for and settle wagers. This is an intended scope, not yet an accredited scope.

Why the wording matters

“Online gambling software” is too broad for the current South African framework. The National Gambling Board states that SANS 1718-4:2018 applies to Wagering and Record-Keeping Systems and does not provide for standalone Remote Gambling Servers to be certified under that part.

Source: NGB notice on Remote Gambling Servers and SANS 1718-4.

Activities being developed for the intended scope

Wager capture and record keeping

How a bet is accepted, identified, time-stamped, priced, retained and shown back to the player.

Settlement and accounting

How results become settlements, how transactions reach the ledger and how balances remain traceable.

Player and operator controls

The controls implemented in the wagering system, assessed only where they fall inside the applicable test scope.

Security and significant events

Access, event records, error conditions, recovery and the evidence needed to reconstruct a system event.

Software identity

Versioning, cryptographic fingerprints and proof that the submitted artefact is the build named in the report.

Change control

The relationship between a tested release, a changed release and the requirements that must be re-examined.

What is not being claimed

  • SASFA does not yet hold an accredited scope for any of these activities.
  • The intended scope is not approval for interactive or remote gambling products.
  • A test report will not replace the NRCS Letter of Certification or a provincial approval.
  • A report for one product, version or build will not approve every product made by that provider.
  • Requirements outside the granted scope will not be implied to have been tested.

How the final scope will be published

The operational page will name the accreditation certificate, applicable SANS parts and editions, test activities, methods, limitations, effective date and technical signatories. Until then, the scope remains explicitly labelled “intended”.