Security and Infrastructure

At Casino xBet your account, your money and your games are protected by a multi-layer security infrastructure. This page explains openly what is protected and how.

SSL encrypted connection

• The site runs only over HTTPS; every http request is redirected to https automatically.
• The connection is encrypted with TLS 1.2 / 1.3 (256-bit); old and weak protocols (TLS 1.0 / 1.1) are disabled.
• HSTS tells your browser to always connect encrypted; every resource on the page loads encrypted (no mixed content).
• The certificate renews itself and its expiry is monitored continuously.

Provably fair — every round verifiable

• In Golden 777, Golden Pilot, Plinko, European Roulette and Blackjack the result is derived with HMAC-SHA256 from server seed + client seed + nonce.
• The server seed hash is shown to you in advance; when you rotate the seeds the old seed is revealed and you can verify your past rounds yourself.
• The result is independent of your bet and your moves; the server cannot change the next outcome.

Signed money ledger and double lock

• Every money movement (deposit, withdrawal, bet, win, bonus) is recorded signed; any record altered afterwards is detected immediately.
• Balance and money history are under constant reconciliation; each game's own ledger matches the site's money history one to one.
• Deposits and withdrawals are double-locked: the same transaction cannot be processed twice, a withdrawal request is deducted once.

Encrypted storage

• Your password is never stored in plain text; it is hashed one-way with bcrypt. Even we cannot see it.
• API keys of payment and data providers are stored encrypted in the database; even the admin panel shows only the last 4 characters, and they are never written to any log.

Account security

• Single-device login: your account stays open on only one device at a time; signing in from another device closes the previous session.
• Cross-site request protection (CSRF), attempt limits, sign-out and copy protection are active on every page.
• A server firewall and automatic blocking (fail2ban) run on the server; errors are filtered so no technical detail leaks to visitors.

Responsible gaming

• Casino xBet is closed to anyone under 18.
• Games are for entertainment; never play with money you cannot afford to lose. Contact live support if you need help.