Provable Fairness

<p class="no-margin">Every game starts with the same list of floats, as explained in <b>How results are generated</b>. This article shows how each game turns those floats into a result.</p><p class="no-margin">Several games use the <b>pick-and-remove</b> method. The game starts with a list of options, such as tiles or squares. For each float, it picks the item at position floor(float × items left), then removes that item from the list. This way the same item can never be picked twice.</p><p class="no-margin"></p>
<h2 id="h_ecc054d09d">Dice</h2><p class="no-margin">Uses 1 float. Roll = floor(float × 10,001) / 100. This gives a roll from 0.00 to 100.00, with 10,001 possible results.</p><p class="no-margin"></p>
<h2 id="h_236c239b2d">Limbo</h2><p class="no-margin">Uses 1 float. The result is:</p><pre><code>16,777,216 / (floor(float × 16,777,216) + 1) × 0.99</code></pre><p class="no-margin">It is rounded down to 2 decimal places. The lowest possible result is 1.00×. The 0.99 is the 1% house edge.</p><p class="no-margin"></p>
<h2 id="h_abf01fc538">Plinko</h2><p class="no-margin">Uses 1 float per row. At each row, a float below 0.5 sends the ball left. Otherwise it goes right. The ball's final slot depends on how many times it went right.</p><p class="no-margin"></p>
<h2 id="h_52aaf3e0d7">Roulette</h2><p class="no-margin">Uses 1 float. Pocket = floor(float × 37). This gives a number from 0 to 36, like a European wheel.</p><p class="no-margin"></p>
<h2 id="h_932912402c">Wheel</h2><p class="no-margin">Uses 1 float. Segment = floor(float × number of segments). You choose 10, 20, 30, 40 or 50 segments.</p><p class="no-margin"></p>
<h2 id="h_2f82d440a8">Diamonds</h2><p class="no-margin">Uses 5 floats, one for each gem. Each gem = floor(float × 7), which picks one of 7 gem types.</p><p class="no-margin"></p>
<h2 id="h_161b4a1040">Keno</h2><p class="no-margin">Uses 10 floats. The game uses pick-and-remove on the 40 squares of the board, so it draws 10 different squares.</p><p class="no-margin"></p>
<h2 id="h_cdd7b9ecfc">Mines</h2><p class="no-margin">Uses 1 float per mine. The 25 tiles are counted left to right, top to bottom, starting from 0. The game uses pick-and-remove to place each mine on a different tile.</p><p class="no-margin"></p>
<h2 id="h_0558670a23">Goat Run</h2><p class="no-margin">There are 25 lanes, numbered 1 to 25. The game uses pick-and-remove to choose the lanes with an accident. The number of accident lanes depends on difficulty:</p><ul><li><p class="no-margin">Easy: 1</p></li><li><p class="no-margin">Medium: 3</p></li><li><p class="no-margin">Hard: 5</p></li><li><p class="no-margin">Expert: 10</p></li></ul><h2 id="h_65b7d5b785">G3 Tower</h2><p class="no-margin">The tower has 9 rows. For each row, the game uses pick-and-remove on that row's tiles to choose the safe tiles.</p><ul><li><p class="no-margin">Easy: 3 safe tiles out of 4</p></li><li><p class="no-margin">Medium: 2 safe tiles out of 3</p></li><li><p class="no-margin">Hard: 1 safe tile out of 2</p></li><li><p class="no-margin">Expert: 1 safe tile out of 3</p></li><li><p class="no-margin">Master: 1 safe tile out of 4</p></li></ul><h2 id="h_6107bb1557">Punch</h2><p class="no-margin">Each turn uses its own float: turn 1 uses float 1, turn 2 uses float 2, and so on. A move lands if the float is below its chance of success:</p><ul><li><p class="no-margin">Slap: 1.10×, lands if the float is below 1 / 1.10 (about 90.9%)</p></li><li><p class="no-margin">Punch: 1.50×, lands if the float is below 1 / 1.50 (about 66.7%)</p></li><li><p class="no-margin">Uppercut: 2.00×, lands if the float is below 1 / 2.00 (50%)</p></li><li><p class="no-margin">Spin: 4.00×, lands if the float is below 1 / 4.00 (25%)</p></li></ul><p class="no-margin">If every move lands, your payout is the multipliers multiplied together, times 0.98.</p><p class="no-margin"></p>
<h2 id="h_a0f24af69c">Order Up</h2><p class="no-margin">Cards have values from 1 to 99. The game uses pick-and-remove to deal them, so no value appears twice in a round.</p><p class="no-margin"></p>
<h2 id="h_79765f5ca7">Card games</h2><p class="no-margin">Card games use this list of 52 cards, in this order: 2♦, 2♥, 2♠, 2♣, 3♦, 3♥, 3♠, 3♣ and so on, up to A♦, A♥, A♠, A♣. Card 0 is 2♦ and card 51 is A♣.</p><p class="no-margin"></p>
<h2 id="h_8fad2af5a8">Blackjack and Hilo</h2><p class="no-margin">Each card = floor(float × 52). The deck is unlimited, so the same card can appear more than once. Cards are dealt in float order.</p><p class="no-margin"></p>
<h2 id="h_1defce8c67">Baccarat</h2><p class="no-margin">Uses up to 6 floats, each mapped with floor(float × 52) from an unlimited deck. Cards are dealt in this order:</p><ol><li><p class="no-margin">Player's first card</p></li><li><p class="no-margin">Banker's first card</p></li><li><p class="no-margin">Player's second card</p></li><li><p class="no-margin">Banker's second card</p></li><li><p class="no-margin">Any third cards, in order, following standard baccarat rules</p></li></ol><h2 id="h_68bafe00e0">G3 Cards</h2><p class="no-margin">Uses 52 floats to shuffle one real 52-card deck. The game uses pick-and-remove, so each card appears exactly once.</p>

How each Goated Original turns random numbers into a result

Game Results

<p class="no-margin">This article is for players who want the technical details. It explains how we turn your seeds into random numbers.</p><p class="no-margin"></p>
<h2 id="h_e014db1e62">Step 1: Create random bytes</h2><p class="no-margin">We use HMAC-SHA256. The server seed is the key. The message is your client seed, the nonce and a cursor, joined with colons:</p><pre><code>HMAC_SHA256(key = serverSeed, message = clientSeed + ":" + nonce + ":" + cursor)</code></pre><p class="no-margin">Each HMAC gives 32 bytes. The cursor starts at 0. If a game needs more than 32 bytes, we run the HMAC again with the cursor set to 1, then 2, and so on. We join the outputs in order.</p><p class="no-margin"></p>
<h2 id="h_83502f71a3">Step 2: Turn bytes into numbers between 0 and 1</h2><p class="no-margin">We split the bytes into groups of 4. Each group becomes one number, called a float, between 0 (included) and 1 (not included). So each HMAC gives 8 floats.</p><p class="no-margin">For a group of 4 bytes (b1, b2, b3, b4), the float is:</p><pre><code>float = b1/256 + b2/256² + b3/256³ + b4/256⁴</code></pre><h2 id="h_b3a0bc66ff">Example</h2><p class="no-margin">Say the first 4 bytes are 163, 244, 224 and 172.</p><ul><li><p class="no-margin">163 / 256 = 0.636719</p></li><li><p class="no-margin">244 / 65,536 = 0.003723</p></li><li><p class="no-margin">224 / 16,777,216 = 0.000013</p></li><li><p class="no-margin">172 / 4,294,967,296 = 0.00000004</p></li></ul><p class="no-margin">Adding them up gives a float of about 0.640455.</p><p class="no-margin"></p>
<h2 id="h_5ed2aed0a7">Step 3: Turn floats into a game result</h2><p class="no-margin">Each game uses its floats in its own way. For example, Dice multiplies the float by 10,001, rounds down, and divides by 100. A float of 0.640455 gives a roll of 64.05.</p><p class="no-margin">See <b>Game results</b> for how every game uses its floats.</p>

The technical details of how your seeds become random numbers

How Results Are Generated

<p class="no-margin">This article explains how we lock in your results before you play, so that nobody can change them later. This is called a <b>commitment scheme</b>.</p><p class="no-margin"></p>
<h2 id="h_1acb7f1537">What is a commitment scheme?</h2><p class="no-margin">Think of it like a sealed envelope. We write down a secret, seal it, and hand you the envelope before you play. Later, you open it and check that the secret was there all along.</p><p class="no-margin">It has two phases:</p><ul><li><p class="no-margin"><b>Commit:</b> Before you play, we lock in the server seed by showing you its hash.</p></li><li><p class="no-margin"><b>Reveal:</b> When you rotate your seeds, we show you the real server seed, so you can check it.</p></li></ul><h2 id="h_c947193dc6">Server seed</h2><p class="no-margin">The server seed is a random 64-character value we create using a secure random generator. While it is in use, you only see its SHA-256 hash.</p><p class="no-margin">SHA-256 is a one-way function:</p><ul><li><p class="no-margin">You cannot work out the server seed from the hash.</p></li><li><p class="no-margin">We cannot find a different server seed that gives the same hash. So once you have the hash, we cannot swap the seed.</p></li></ul><p class="no-margin">We also show you the hash of your <b>next</b> server seed. That seed is the one you get when you rotate. So even your next seed is locked in before you use it.</p><p class="no-margin"></p>
<h2 id="h_78222c0727">Client seed</h2><p class="no-margin">The client seed is yours. When you join, we give you a random one. You can change it at any time by rotating your seed pair. It must be 3 to 20 letters or numbers.</p><p class="no-margin">Because you can set the client seed after the server seed is locked, we cannot pick a server seed that works against you.</p><p class="no-margin"></p>
<h2 id="h_b438774d78">Nonce</h2><p class="no-margin">The nonce is a counter. It starts at 0 for each new seed pair and goes up by 1 with every bet. It makes sure every bet gets a different result, even though the seeds stay the same.</p><p class="no-margin">Games with several steps, like Mines, Blackjack or G3 Tower, use one nonce for the whole round. The full round is decided when you place the bet.</p><p class="no-margin"></p>
<h2 id="h_736c2b31fb">Rotating your seeds</h2><p class="no-margin">When you rotate:</p><ol><li><p class="no-margin">Your current server seed is revealed, so you can verify past bets.</p></li><li><p class="no-margin">Your "next" server seed becomes your new active server seed.</p></li><li><p class="no-margin">A new "next" server seed is created and its hash is shown.</p></li><li><p class="no-margin">Your new client seed takes effect, and the nonce resets to 0.</p></li></ol>

How server seeds, client seeds and nonces lock in your results before you play

Seeds and Nonces

<p class="no-margin">You can check any Goated Original bet yourself. It only takes a few steps.</p><p class="no-margin"></p>
<h2 id="h_30a81aa8d5">Why do I need to change my seeds first?</h2><p class="no-margin">While your seeds are in use, your server seed stays secret. If we showed it, you could work out the results of your next bets. So we only show the server seed once you stop using it. You do this by <b>rotating</b> your seed pair.</p><p class="no-margin"></p>
<h2 id="h_efa5e5f2a3">Step 1: Rotate your seed pair</h2><ol><li><p class="no-margin">Open any Goated Original game and click <b>Provably Fair</b> under the game.</p></li><li><p class="no-margin">On the <b>Seeds</b> tab, find <b>Rotate Seed Pair</b>.</p></li><li><p class="no-margin">Enter a new client seed. It must be 3 to 20 letters or numbers.</p></li><li><p class="no-margin">Click <b>Rotate</b>.</p></li></ol><p class="no-margin">Your old server seed is now revealed. A new seed pair starts, and the nonce goes back to 0.</p><p class="no-margin"></p>
<p class="no-margin"><b>Note:</b> You cannot rotate while a game is still in progress, like an unfinished Mines or Blackjack round. Finish the game first.</p><p class="no-margin"></p>
<h2 id="h_2b8a6ac33b">Step 2: Open the bet you want to check</h2><ol><li><p class="no-margin">Go to your bet history and click the bet.</p></li><li><p class="no-margin">The bet details show the client seed, the server seed and the nonce used for that bet.</p></li><li><p class="no-margin">Check that the revealed server seed matches the hashed server seed you saw before you played.</p></li></ol><h2 id="h_1b3acd8f60">Step 3: Verify the result</h2><ol><li><p class="no-margin">Click <b>Verify</b> in the bet details. You can also go to the <b>Verify</b> tab in the Provably Fair window.</p></li><li><p class="no-margin">Choose the game.</p></li><li><p class="no-margin">Enter the client seed, server seed and nonce from the bet. Add any game settings, such as the number of mines or Plinko rows.</p></li><li><p class="no-margin">The tool shows the result. It should match the result of your bet exactly.</p></li></ol><h2 id="h_ae10d014bb">Can I check without using your tool?</h2><p class="no-margin">Yes. Our method is the same one used across the industry. You can run it with any HMAC-SHA256 tool or a few lines of code. See <b>How results are generated</b> and <b>Game results</b> for the details.</p>

Step-by-step instructions to check any Goated Original bet

How to Verify Game Results

<h2 id="h_b711c92227">How we make sure our games are fair</h2><p class="no-margin">Our Goated Original games are <b>provably fair</b>. This means you do not have to trust us that a result was random. You can check it yourself, for every bet you make.</p><p class="no-margin">Provable fairness proves three things:</p><ul><li><p class="no-margin">The result was decided before you placed your bet.</p></li><li><p class="no-margin">We could not change the result after you bet.</p></li><li><p class="no-margin">You helped decide the result, so we could not pick it on our own.</p></li></ul><h2 id="h_2f2ef5d066">How does it work?</h2><p class="no-margin">Each result comes from three values:</p><ul><li><p class="no-margin"><b>Server seed:</b> A secret random value we create. Before you play, we show you a scrambled version of it, called the hash. The hash locks the server seed in place without showing it.</p></li><li><p class="no-margin"><b>Client seed:</b> A value that belongs to you. You can change it to anything you like.</p></li><li><p class="no-margin"><b>Nonce:</b> A counter that goes up by one with every bet you place.</p></li></ul><p class="no-margin">We combine these three values using a standard method called HMAC-SHA256. The output becomes your game result. Because the server seed is locked before you play, and you choose the client seed, neither side can control the result alone.</p><p class="no-margin">When you change your seeds, we show you the real server seed. You can then check that it matches the hash we showed you, and replay any of your past bets to get the same results.</p><p class="no-margin"></p>
<h2 id="h_b43f512dbf">Which games are provably fair?</h2><p class="no-margin">These Goated Originals: Baccarat, Blackjack, Diamonds, Dice, G3 Cards, G3 Tower, Goat Run, Hilo, Keno, Limbo, Mines, Order Up, Plinko, Punch, Roulette and Wheel.</p><p class="no-margin">Games from other providers use their own fairness systems, which are tested by those providers.</p><p class="no-margin"></p>
<h2 id="h_da38d1cde2">Learn more</h2><ul><li><p class="no-margin"><b>How to verify game results:</b> step-by-step instructions.</p></li><li><p class="no-margin"><b>Seeds and nonces:</b> how the commitment works.</p></li><li><p class="no-margin"><b>How results are generated:</b> the technical details.</p></li><li><p class="no-margin"><b>Game results:</b> how each game turns the numbers into a result.</p></li></ul>

How we make sure our games are fair, and which games you can check

Provable Fairness

Game Results

How Results Are Generated

Seeds and Nonces

How to Verify Game Results

Overview