When hundreds of players share a synchronized game with credits or tokens at stake, every shortcut becomes an exploit. The client cannot be trusted with anything that affects the outcome.
The server owns the truth
Ball draws, card validation, win detection and jackpots all run server-side. The client only renders. A modified client can cheat its own screen, never the game state — because the state lives where the player cannot reach it.
Money moves through controlled, audited paths
Buying cards, spending credits and paying out are validated by webhooks and guarded against concurrency. No double spends, no phantom winners; every sensitive action is logged for audit and dispute resolution.
Synchronization is the experience
Every player must see the same ball at the same instant. We keep rooms in lockstep with authoritative timing, so the game feels fair because it is fair — not because players hope it is.
Live chat, rankings, history and an admin panel sit on top, but the core is the same engineering that protects any real-time, money-bearing system.