In a traditional online casino, you press spin and the result appears. You have no way to know whether the outcome was generated fairly before your bet was placed, or produced by a system that had already decided what you'd get. You trust the casino because they hold a licence, and you trust the regulator because they audited the software. It's trust layered on trust.
Provably fair gambling eliminates that dependency. Using cryptographic mathematics, provably fair systems let any player independently verify that a game result was determined before the round began, that neither the casino nor the player could have predicted or manipulated it, and that the result shown matches the result actually calculated. You don't need to trust the casino. You can check the maths.
This guide explains exactly how that works, what each technical term means in plain English, and how to verify any provably fair result at a crypto casino including our own Duelbits Originals.
Imagine this scenario: you're playing an online dice game and you bet high. The result comes back low. You lose. The question you can't answer at a traditional casino is: was that result determined before you submitted your bet, or after?
A dishonest operator could, in theory, wait to see your bet and then generate a result that makes you lose. This is called "result manipulation", and it's functionally undetectable in traditional RNG (random number generator) systems without access to the casino's internal logs and code.
The licence-and-audit model tries to address this by having third parties regularly inspect the casino's systems. But those audits are periodic, not continuous. They verify the system can be fair, they don't prove every individual round was fair.
Provably fair cryptography proves every individual round was fair. Before you bet, the outcome already exists. After you bet, you can verify it.
The system uses three values that are combined to produce every game result:
Before a round begins, the three are combined using a cryptographic function (typically HMAC-SHA-256) to produce the game outcome. The result of that combination, mapped to the game's range, is what you see at the end of the round.
The clever part is what happens before you see the result.
Here is the sequence that makes the system trustworthy:
Step 1: The casino commits before you play. Before a round, the casino hashes their server seed using SHA-256, a one-way cryptographic function, and publishes the resulting hash string. The hash is a fingerprint of the server seed. Given the hash alone, it is computationally impossible to reverse-engineer the original value.
Example: The server seed might be 3f8a9b2c1d... (a long random string). SHA-256 converts it to a fixed 64-character hash like a7f2e9.... The casino shows you a7f2e9... before you play.
Step 2: You contribute your client seed. Your device generates a random client seed, or you can change it yourself to any value you choose. You're adding randomness that the casino didn't generate and couldn't have predicted.
Step 3: The round plays. The casino's server combines the server seed, your client seed, and the round's nonce (counter) using HMAC-SHA-256, and converts the output to the game result range. A dice game with a range of 1-100 takes the hash output and maps it to that range.
Step 4: You rotate seeds and the truth is revealed. When you request a new seed pair (rotate seeds), the casino reveals the original unhashed server seed, the one behind the hash you were shown in Step 1. You can now hash it yourself and confirm it matches the commitment from before the round. If it does, the casino couldn't have changed their seed after seeing your bet.
Step 5: You reproduce the result. Using the revealed server seed, your client seed, and the nonce for any past round, you run the same HMAC-SHA-256 calculation and apply the same conversion. The output must exactly match the result in your game history.
If it does: the game was provably fair. If it doesn't: something was manipulated and you have cryptographic proof of it.
Generated by the casino's server before your session begins. It's the casino's commitment to a predetermined sequence of outcomes. Before you see it, they hash it and show you only the hash. After you rotate seeds, they reveal the original, and you can verify it matches the hash.
Why it works: SHA-256 is a one-way function. The casino cannot find a different value that produces the same hash. They are locked into the seed they committed to.
Generated on your device or manually entered by you. Combining it with the server seed means the casino cannot predict the game result even though they know their own server seed, because they don't know your client seed until after they've committed.
You can change your client seed at any time. Most provably fair casinos let you type any string as your client seed. The freedom to choose your own input is what ensures the casino cannot pre-calculate results that target your bets.
A simple counter that starts at 1 and increases by 1 for every round played under the same server seed and client seed pair. Without the nonce, the same server and client seed combination would produce the same game result on every single round. The nonce makes each round unique.
Why it matters: You can verify any specific historical round by re-entering its nonce alongside the seed values. The nonce is your round identifier.
SHA-256 (Secure Hash Algorithm 256-bit) is a cryptographic hash function with two properties that make provably fair gambling possible:
1. Deterministic. The same input always produces the same output. If the casino says their server seed was 3f8a9b..., hashing it will always produce the same hash. This is how you verify the commitment.
2. One-way (pre-image resistant). Given only the hash, it is computationally impossible to find the original input. The best computers in the world would need billions of years to brute-force a single SHA-256 reversal. This is why the casino can safely show you the hash before the game without revealing the seed.
The combination of these properties creates a commitment scheme: the casino locks in a value (server seed) cryptographically before play, which you can verify after play. No cheating is possible because:
The actual combination function used in most provably fair casinos is HMAC-SHA-256 (Hash-based Message Authentication Code using SHA-256). It takes two inputs, a key and a message, and produces a 64-character hash.
Typically the implementation looks like:
: + the nonceThe HMAC-SHA-256 output is a 64-character hexadecimal string. This string is then converted to a number within the game's range (0-10000 for a dice game, for example), and that number becomes the game result.
The exact conversion method varies slightly by game and casino and is always published in the fairness documentation, giving you everything you need to reproduce any result independently.
You do not need to be a programmer to verify a provably fair result. Every legitimate provably fair casino provides a verification tool on their platform.
On Duelbits:
Manual verification (for the technical):
Any SHA-256 or HMAC-SHA-256 calculator (freely available online) can reproduce the hash. Apply the casino's published conversion formula and you get the raw game result without relying on the casino's own tool, a fully independent verification.
| Dimension | Traditional RNG | Provably Fair |
|---|---|---|
| How outcomes are generated | Random number generator software, audited periodically | Cryptographic combination of server + client seeds |
| Can players verify individual rounds? | No | Yes, any round, any time |
| Trust model | Trust the casino + trust the auditor | Verify the mathematics yourself |
| Can results be manipulated post-bet? | Theoretically possible without detection | No, cryptographic commitment prevents it |
| Is RTP verified? | By auditor, not by individual players | RTP is emergent from fair outcomes over volume |
| Who controls the randomness? | The casino alone | Shared between casino (server seed) and player (client seed) |
Traditional RNG is not inherently dishonest, the biggest online casinos use properly audited RNG and have strong incentives to operate fairly. But provably fair removes the need for trust entirely. For crypto-native players, the mathematical guarantee carries significantly more weight than a periodic audit.
Our Duelbits Originals, the games we built in-house exclusively for our platform, are provably fair. Every result can be independently verified using the system described in this guide.
Provably fair Originals on Duelbits:
| Game | Type | Provably Fair |
|---|---|---|
| Crash | Multiplier | ✅ |
| Dice | Number range | ✅ |
| Mines | Grid reveal | ✅ |
| Plinko | Peg path | ✅ |
| Keno | Number draw | ✅ |
| Blackjack | Card game | ✅ |
| Roulette | Wheel | ✅ |
| Scratch Cards | Reveal | ✅ |
| Tap Trading | Live SOL price | Based on real market data |
Third-party slots and live casino games on our platform operate under those providers' own RNG certification and external auditing, a different but established trust mechanism.
Traditional online casinos operate in jurisdictions with established regulatory frameworks. Players have legal recourse if they believe a casino is cheating. Banks can process chargebacks. Regulators can investigate.
Crypto casinos operate in a different environment. Transactions are irreversible. Regulation varies by jurisdiction and is still developing in many regions. The player base is global and heterogeneous.
In this context, provably fair is not just a nice feature, it is a foundational trust mechanism that does not rely on regulatory enforcement. A crypto casino with provably fair games can be verified to be operating honestly by any technically capable player, anywhere in the world, in real time.
Combined with a legitimate gaming licence (Duelbits operates under the Curacao Gaming Authority), provably fair gives players both legal recourse through regulation and mathematical proof through cryptography.
"Provably fair means the house has no edge." No. Provably fair confirms results are not manipulated. The house edge is built into the game mechanics themselves (e.g., Crash multiplies out below 1x with a small probability). The edge is transparent and published, provably fair means you can verify the result, not that the result always favours you.
"You have to be a programmer to verify it." No. Casino-provided verification tools on platforms like Duelbits require no coding. Enter the seed values from your game history and the tool does the rest. Manual verification using free online hash calculators requires only the ability to follow a documented formula.
"Changing my client seed gives me better outcomes." No. The client seed affects which outcomes are generated, but not whether those outcomes are favourable. The HMAC-SHA-256 output is uniformly distributed regardless of the input seed value. Choosing a different client seed doesn't improve your odds, it just produces a different sequence of results.
"If I win, the game was fair. If I lose, maybe it wasn't." Loss alone is not evidence of manipulation. Provably fair verification works by reproducing the cryptographic output, not by checking whether the result was a win or loss. You can verify a round you won and a round you lost with equal confidence.
All our Originals, Crash, Dice, Mines, Plinko, Keno, Blackjack, Roulette, and Scratch Cards, are provably fair and verifiable on our platform. Browse them under Casino → Duelbits Originals or check the full Casino lobby.
For more on how crypto casino deposits and withdrawals work, see our Bitcoin Betting Guide and What Is a Crypto Wallet guide.
What does provably fair mean? A cryptographic system where casino game outcomes can be independently verified by players using seed values and hash functions. Results are determined before bets are placed and cannot be changed after the fact.
What is a server seed? The casino's secret random input to the outcome calculation. Before the round, they publish its SHA-256 hash as a commitment. After you rotate seeds, they reveal the original, and you can verify it matches the hash.
What is a client seed? Your random input, combined with the server seed to produce each result. Because the casino doesn't know your client seed when they commit to their server seed, neither party can independently influence the outcome.
What is SHA-256? A one-way cryptographic hash function. The same input always produces the same output, but you cannot reverse-engineer the input from the output. This makes it ideal for commitments, show the hash without revealing the original.
Are provably fair casinos safer than traditional ones? They address a specific problem traditional casinos can't: per-round outcome verification. Combined with a gaming licence, provably fair provides both mathematical and regulatory assurance.
Which Duelbits games are provably fair? All Duelbits Originals: Crash, Dice, Mines, Plinko, Keno, Blackjack, Roulette, Scratch Cards.
