Provably Fair

Every outcome is derived from a server seed (committed by hash before you bet), your client seed, and a per-bet nonce. Rotate your seed to reveal the old one — then any past round can be replayed and checked, byte for byte.

How it works

We generate a random server seed and show you only its SHA-256 hash. The seed is locked in before any bet.
Each bet computes HMAC_SHA256(serverSeed, clientSeed:nonce:cursor) and maps the bytes to game outcomes. The nonce increases every bet.
When you rotate, the old server seed is revealed. Hash it yourself — it must equal the committed hash — then replay any round below.