Fairness

How to check that a round was not decided in our favour.

A player has to take a game's word for a great many things. This page is about the one thing they do not have to take on trust, and about what we would hand a testing laboratory that came to check the rest.

A sealed envelope, opened afterwards

  1. A card is written and sealed

    Before the round, a secret number goes onto a card and the card is shut. Nobody has seen it, including the player and including the operator.

  2. Its fingerprint is published

    A short string that could only have come from this card, and from which nobody can work backwards to what is written on it. It goes out while the card is still sealed.

  3. The player adds a number

    Now, and only now. The outcome is worked out from both numbers together, so neither side alone decides what the board does.

  4. The card is opened and matched

    Afterwards the card comes out. The player, their operator, or a regulator can check it against the fingerprint published beforehand, put both numbers back through the same mathematics and arrive at the same board, the same lines and the same payout.

Watch the order rather than read it. What makes the claim checkable is that the fingerprint was public before the player chose, and the card stayed shut until the round was over.

We could not have swapped the card after seeing the player's number, because the fingerprint was public before they chose it. The player could not have steered the result, because the card stayed shut until the round was over.

That is the whole argument, and it is the only part of a slot machine that can be argued without taking anyone's word for anything.

The bank, and why it is fixed

Most of the argument about a slot machine is really an argument about what it is allowed to produce. Our games do not improvise. Every board they can ever show was built in advance, given a weight, and evaluated for what it pays.

The bank is checked byte for byte when the service starts, and every board is re-evaluated against the rules at that moment and must pay exactly what the bank says it pays. One altered byte and the service refuses to load rather than run on mathematics nobody approved.

Boards in the bank
127,040
The complete set of outcomes a base game can produce. Not a generator with a filter on it: a set, fixed, with a fingerprint of its own.
Return to player
96.8%
Set by how much weight sits on paying boards. It is a number in a file rather than a control in an operations console, and no operator can reach it.
Signature window
300s
How long any signed request is good for. Outside it, or replayed inside it, the request is refused.

The audit trail

Stored per round

The model and its fingerprint, the bank's fingerprint, the sealed secret, its published fingerprint, the player's number, the position in the sequence, what was asked for, where the reels stopped and the full result.

Replayable

Feed those values back into the same model and the round reproduces exactly. Our own tests prove the current engine reproduces rounds recorded by the previous one, seed for seed, which is the property that lets a laboratory check history rather than only the present.

Append only

Money movements, configuration changes and administrative actions are journals rather than editable records. The database declines to rewrite them, so an audit is reading rather than reconstructing.

Who and when

Every change to a title's settings carries the person who made it, the time, the reason and the difference. Turning real money on for a brand takes two people.

What a testing laboratory would receive

We are preparing for a GLI-19 style review of the random number generator and the return to player, and we have not yet submitted to a jurisdiction. We do not hold a licence today and we will not imply otherwise.

The pack is assembled rather than promised. It holds the generator and how it is seeded; the draw sequence and how a value in a range is taken from it without bias; the fixed bank, its fingerprint and the optimiser output it came from; the per-model return figures including every capped variant; the statistical test results; and the tool that turns a stored round back into its outcome.

Where does the secret number come from?

The operating system's cryptographic generator, thirty-two bytes at a time. It is encrypted before it is stored and revealed only once the round it belongs to has finished.

Can an operator change the odds mid-session?

No. A session records the configuration version it opened on and stays on it. A change made while somebody is playing applies to their next session, never to the spin in front of them.

Is the feature round a separate calculation?

It has its own bank, derived from the same boards, and it is built so that the expected payout of a purchase equals its price exactly. The mystery package picks between three tree counts with fixed weights before the first free round is drawn, and holds that choice for all five.

What stops a bias in the draw?

Values in a range are taken by rejection sampling over the full space rather than by a remainder, so every value in the range is equally likely. A long run of rejections raises an error instead of quietly returning a skewed value.

If you are reviewing us on behalf of an operator or a regulator, ask for the technical pack directly.