PROVABLY FAIR

Every outcome is derived from HMAC-SHA256(serverSeed, clientSeed:nonce:round). The server commits to its seed up front by showing you its SHA-256 hash — it can't change the seed after your bets. Rotate your seed pair any time to reveal the old server seed and audit every bet you made with it.