Provably Fair Explained: How an Online Casino Proves Randomness
Most players take a casino’s word that the dice weren’t loaded. Provably fair gives them a way to check. The idea came out of Bitcoin gambling. SatoshiDice launched in 2012 as a provably fair dice game where each bet won or lost depending on its transaction hash, and Blockworks puts its house edge at 1% to 1.9%.
A spokesperson for the site’s new owner, known only as Brown, told CoinDesk in 2013 what made the model attractive. Crypto casinos still lean on it, and a provably fair game is now a standard lobby category on many of them.
“demonstrating trust through mathematics instead of identity”
— Brown, spokesperson for SatoshiDICE’s owner, CoinDesk (2013)
How Does a Provably Fair System Work?
| Input | Created by | Role |
|---|---|---|
| Server seed | Casino | Secret random value that drives the result |
| Hashed server seed | Casino | SHA-256 fingerprint published before the first bet |
| Client seed | Player | Editable string the casino cannot predict |
| Nonce | Platform | Counter that rises with every new bet |
The casino creates a secret number, the server seed, and shows you only its hash. A hash is a scrambled version of the number that can’t be turned back into the original. You then pick your own text, the client seed. For every bet, the platform combines the two seeds with the bet number (the nonce) using a standard formula – usually HMAC-SHA256 – and the result of that formula decides how the game ends.
The reveal comes when you rotate the seed pair and the casino lays the unhashed server seed on the table. Hash it and hold it against the fingerprint you saw earlier, then replay your bets one by one. The order of events is what makes the scheme honest. The casino had to commit before it knew your seed, so no outcome could be chosen for you, and you never saw its seed while you played, so you had nothing to bend the dice with either.
What Does the Verification Process Look Like?
Here is a demo run with real math. You can reproduce every line with Python’s hmac and hashlib modules.
| Step | Value |
|---|---|
| Server seed, revealed after rotation | d7a5c1e94b0f3a62c8e1f7b9045d3a6e2b8c9f01a4d6e7385c2b1f0e9a7d4c63 |
| SHA-256 of the server seed, published before betting | 144f63cc7076abc155cc808ff182bd00d55fea317871dcd5dfa876bb98318755 |
| Client seed | bsw-demo |
| Nonce | 0 |
| HMAC-SHA256 of "bsw-demo:0" keyed with the server seed | 16a82501cd097dc6f9044c6caa4d400ea574bbd46340c01ff802ca91854b6d8f |
| First 8 hex characters as a number | 380118273 |
| Dice roll (number divided by 2^32, times 100) | 8.85 |
With a nonce of 1, the same seeds produce 77.42. For different games, the operators use various ways of mapping their hashes to the result, which is why you need to look up the formula used by the casino first to validate any proof. There are two situations where the proof will fail: either the seed hashes to a wrong commitment (seed replacement) or the calculated roll deviates from the original one.
Provably Fair vs Traditional Online Casinos
A traditional online casino uses a random number generator that an accredited lab has tested. You trust the lab’s certificate and the regulator behind it. European Gaming notes that in Great Britain this testing is mandatory for licensed operators, and provably fair technology is optional.
| Aspect | Provably fair | Lab-certified RNG |
|---|---|---|
| Who checks | The player, after any bet | An accredited lab, before launch and after changes |
| What it proves | This outcome was not altered | The generator's output is statistically random |
| Status in licensed markets | Optional | Required in markets such as Great Britain |
| Limit | Says nothing about payout odds | Does not let a player re-check a single bet |
A provably fair badge also says nothing about licensing. An unlicensed site can run the same math while skipping the anti-money-laundering and player protection duties that a licensed operator carries.
Which Casino Games Use Provably Fair Algorithms?
Dice, crash, plinko, mines and keno are the easy ones, since a single hash gives a single result. A coin flip needs just one bit. Card games work too, with the hash driving the shuffle. Provably fair slots exist, though you still need a separate paytable and RTP disclosure.
Sports betting is a harder fit. The match result comes from the real world, so verification can only cover the bet record and the odds. Live games are harder still: the cards and wheels are physical objects in a studio, seed math can’t verify them, and they depend on studio audits. Some blockchain games use a smart contract, a program on the blockchain that runs the game and pays out in crypto by itself.
How Can a Player Check Fairness?
A “provably fair” label is a promise, and a promise has to be collected on. Write down the hashed server seed before the first bet, because a fingerprint you never recorded can’t testify later. Replace the default client seed with one you invented: a string you chose could hardly have been prepared in advance. After a rotation, don’t stop at a single bet. Then check several bets, not one, and use a verifier that doesn’t come from the casino, for example a free open-source script.
A verifier is useless without knowing the formula followed by it, and so select websites that show the formula for each game. In case the game reveals the house edge, check if it corresponds to the average figures provided in the FAQ below.
Why Would a Casino Operator Add Provably Fair Games?
Disputes are the practical reason. Support can answer a rigged-result ticket with the seeds and the nonce, and a new crypto casino gets a way to earn trust from players who’ve never heard of it.
Most problems come from how the system is built, not from the idea itself. Weak random numbers, a hash that isn’t secure, a server seed used twice or a bet counter that skips or repeats can each leave a pattern, and attackers look for patterns. An outside code audit before launch is cheap protection against these mistakes. After launch, players should be able to change their seeds on their own and see the bet number next to each result. A verifier page where they paste the seeds and see the same roll appear completes the picture.
The license stays with the operator, and where a regulator demands lab certification, the math doesn’t excuse anyone from it. BSW builds crypto casino platforms and connects 150+ game providers through a single API, so provably fair titles can be scoped while the platform is being built.
FAQ
What is provably fair gambling?
It’s a model where a player can mathematically check each game outcome. The casino commits to a hashed server seed, the player adds a client seed, and the revealed seed lets anyone recompute the result.
What is the least rigged game in a casino?
Licensed games are tested, so the useful measure is house edge. Blackjack with basic strategy sits near 0.5%, the banker bet in baccarat is 1.06% and the craps pass line is 1.41%. A provably fair dice game lists its own edge, often around 1%.
How does provably fair technology work?
A committed server seed, the player’s client seed and a nonce go through HMAC-SHA256. The casino publishes the hash first and reveals the seed afterward, so the result can’t change after the bet.
Is provably fair truly fair, or can it be rigged?
The outcome can’t be altered once the commitment is published, but the rest of the system can still be unfair. A site may set a high house edge, use weak seeds or show a “provably fair” badge with no working verifier. Check the formula, the edge and the seed tools.
How can users verify the fairness of a provably fair game?
Rotate the seed pair to reveal the unhashed server seed. Hash it with SHA-256 and match it to the saved commitment. Then recompute the result from the server seed, client seed and nonce using the game’s formula, either in the casino’s verifier or an independent one.
What are the differences between provably fair and traditional online casinos?
Traditional casinos rely on lab certification and regulation, while provably fair lets players check individual bets. Provably fair doesn’t cover payout odds or player protection, and regulated markets still require certified RNG testing.
Ready to
launch your business?
An advanced provider of betting software operating globally. A wide range of innovative products and services for both sports and virtual and casino betting.