Multi-Factor Authentication Architecture
- TOTP through authenticator applications such as Google Authenticator. Codes update every 30 seconds and are computed from a shared secret that never leaves your device.
- FIDO2/WebAuthn security keys. A physical USB or NFC key stores a private key in its secure element; you tap to authenticate, and the signature is verified without the key ever being exposed.
- On-device biometrics (fingerprint, face) integrated via WebAuthn. Our servers receive only a mathematical representation that cannot be reverse-engineered, never raw biometric scans.
Account Security and Anti-Fraud Systems
Our live anti-fraud engine evaluates every action using device fingerprinting that generates a unique hash from browser, OS, fonts, and WebGL properties—without capturing personal identifiers. When multiple accounts share the same fingerprint, or a single account changes between emulator-like patterns, the system marks it for review. We also oversee transaction velocity: a large deposit followed by an immediate withdrawal request with negligible play automatically freezes the transaction and escalates it to compliance. For bonus abuse, we track wagering progress, game preference, and bet sizing aimed to exploit low-house-edge games. We verify source of funds documentation for larger deposits to comply with anti-money laundering regulations. False positives are limited, and every automated block provides a clear player notification and a direct route to support, guaranteeing transparency and appeal. Our compliance team reviews each flagged case thoroughly before a final decision. This balanced approach protects honest players while discouraging fraud.