Provably fair
crypto casinos 2026

What you can actually recompute at each casino

A fairness badge tells you nothing on its own. What matters is what the operator's own documentation commits to, because that is the part you can hold it to. The table records, for every casino on this page, the hash function it documents, whether the server seed is committed before the bet, whether the client seed and nonce are yours to control, which in-house games the documentation covers, how third-party slots are treated, and which of our tools reproduces the result. Each row carries the date it was checked. A blank is a blank: where a formula is not published, the table says so.

Sources: Stake implementation page and help-centre article; BC.Game's fairness page and public verifier; roobet.com/fair and Roobet's house games article; Shuffle help centre (commitment schemes, implementation, game events); Duel's Provably Fair Scrolls; rainbet.com/provably-fair; gamdom.com/help/fair; Cloudbet provably fair page and its RNG testing page; bitsler.com. Quoted words are the operator's own.

Three things stand out. First, Stake, Shuffle and BC.Game are the three whose published material our own tools reproduce today, which is why they are the three presets in our verifier; Duel, Rainbet and Cloudbet also publish code or worked examples, which our tools do not implement yet. Second, "provably fair" does not always mean SHA-256: Cloudbet commits with SHA3-256 and draws its numbers from SHAKE256, and BC.Game switches to HMAC-SHA512 for Plinko, so a generic SHA-256 checker will report a mismatch on rounds that are in fact fine. Third, the client seed is only yours in seed-pair games. Crash-style games at Roobet, Shuffle, BC.Game and Duel take their second input from a public source instead (a block hash fixed in advance, or a drand beacon), because every player in the round shares one result.

Three scheme types, and how to check each

The casinos above use three different designs. The check you run depends on which one the game uses, not on the casino's name.

Seed pair: dice, limbo, mines, plinko, keno

The casino shows you a hash of its server seed, you set (or accept) a client seed, and a nonce counts your bets. Stake, Shuffle, Duel, Rainbet, Cloudbet, BC.Game and Roobet's single-player games all work this way. To check a round: note the hashed server seed before you play, play, rotate the seed pair so the old server seed is revealed, hash that seed and compare it with the hash you noted, then recompute the round from server seed, client seed and nonce. For Stake and Shuffle the last step runs in our Stake and Shuffle seed checkers; for the others it runs in the casino's own verifier, and our Roobet Seed Checker covers the hash comparison.

Hash chain: crash, slide and shared roulette

Here there is no personal seed. The operator generates a long chain in advance, where each game's hash is the SHA-256 of the next game's hash, and publishes the end of the chain before play starts: Gamdom documents 10 million hashes per game, Shuffle 10 million for Crash, Roobet 2 million. Because the chain is played backwards, hashing any finished game's hash must give the hash of the game before it. That link check is the proof that the sequence was fixed in advance. The multiplier is then derived from the game hash and a public salt, usually a Bitcoin block hash chosen before it was mined. Our Crash verifier recomputes the multiplier for Stake and BC.Game and checks the chain link for Shuffle.

Public randomness beacon: Duel Crash

Duel's Crash replaces the client seed with a value from drand, a public randomness service. Duel's article states that the hashed server seed and the drand round ID are visible before the round starts, and that the drand value "acts as the client seed from other modes". The check is the same in spirit: confirm the server seed matches its hash, fetch the drand value for the stated round from drand's public API, and recompute the crash point with the formula Duel prints.

Six provably fair casinos in detail

Stake, BC.Game, Roobet, Shuffle, Rollbit and Duel are the six we cover in most detail, each running verifiable in-house Originals under a real license. Rollbit is included for its provably-fair scheme, not as a recommendation, while its Tanzanite data is under review. Each blurb sticks to what we can verify — the games that are actually provable, the operating license, and how the bonus really works (no inflated headline numbers).

1. Stake — the provably fair reference implementation

Stake Originals (Dice, Crash, Limbo, Mines, Plinko, Keno, Hilo) are the games most other casinos copied: a hashed server seed is committed up front and revealed on rotation, with outcomes derived via HMAC-SHA256 at roughly a 1% house edge. Its Pragmatic and Hacksaw slots are standard RNG, not provably fair. Stake is operated by Medium Rare N.V. under Curaçao license OGL/2024/1451/0918 (the newer GCB framework, not the old Antillephone sub-license). On bonuses, be realistic: there is no public deposit-match — rewards are VIP-gated rakeback, reloads and weekly/monthly bonuses through a VIP host. Read our full Stake review or visit Stake.

What the documentation commits to (algorithm pages checked 1 Nov 2026): every verifiable bet uses a client seed, a server seed, a nonce and a cursor fed through HMAC-SHA256; the server seed is a random 64-character hex string whose hash you receive "before you place any bets"; rotating the pair reveals it; and players "are free to edit and change their client seed regularly". Mines, for example, is documented as 24 game events placed with a Fisher-Yates shuffle, of which between 1 and 24 are used depending on the mine count. Our Stake Seed Checker rebuilds seven of these games from the seeds alone. On the licence, the Curaçao Gaming Authority's online gaming registry (last updated 5 Nov 2026) lists Medium Rare N.V. under OGL/2024/1451/0918 with the status "Assessment in progress".

2. BC.Game — large Originals suite, rakeback dressed as a match

BC Originals (Crash, Dice, Plinko and a range of card and number games) are provably fair with standard cryptographic hash verification. BC.Game is licensed in Anjouan and operated by Twocent Technology Ltd. The headline "up to ~470% + spins" offer is widely advertised, but the funds are credited as BC Dollars released gradually as rakeback — not a withdrawable cash deposit-match, so treat it as a loyalty mechanic rather than free cash. See the BC.Game review for the full breakdown.

What the documentation commits to (public verifier checked 10 Nov 2026): BC.Game keeps a separate public verifier page per game. Classic Dice, Limbo and Mines show the same two lines, sha256(server_seed) for the commitment and hmac_sha256(client_seed:nonce, server_seed) for the result; Plinko uses hmac_sha512. The Crash verifier describes a salted hash chain and lists three points at which the salt was changed, each with a public announcement thread. Note the seed order: BC.Game concatenates client seed and nonce without a cursor, which is why a Stake-preset tool gives the wrong answer for a BC.Game round. Use the BC.Game preset in our verifier.

3. Roobet — provably fair Crash and a clean rakeback model

Roobet Originals (Crash is the flagship, plus Mines, Towers and Wheel) use a server-seed-hash + client-seed scheme you can verify; its slots are Pragmatic and Hacksaw RNG. Roobet holds a Curaçao license under the Gaming Control Board. Its durable reward is automatic, loss-based "Roobet Rewards" cashback rather than a deposit match — some affiliate pages quote a 200% match, but that is promo-specific and not the standing offer, so we don't headline it. More in our Roobet review or visit Roobet.

What the documentation commits to (roobet.com/fair, checked 10 Nov 2026): for seed-pair games Roobet gives you an "encrypted hash" of the server seed as you begin playing, lets you change the client seed "before any bet", and raises the nonce by 1 per bet; verifying a bet reveals the server seed and resets both seed and nonce, and the page tells you to take a SHA-256 of the revealed seed and compare. Crash, Roulette and Slide run on a chain of 2 million SHA-256 hashes combined with a public seed, which Roobet describes as the hash of a crypto block committed to "before that block is mined". Roobet's per-game code is published as separate sandboxes rather than one specification, so our Roobet Seed Checker confirms the commitment and leaves the outcome to Roobet's own verifier. The Curaçao registry (5 Nov 2026) lists Raw Entertainment B.V. under OGL/2024/687/0427 with the status "Indefinite".

4. Shuffle — instant rakeback on every bet

Shuffle Originals (Dice, Mines, Plinko, Limbo, Crash, Towers) are provably fair, while its slots come from Pragmatic, Hacksaw, NoLimit and Evolution (RNG/live, not PF). Shuffle is Curaçao-licensed. Its standout feature is instant cashback of up to ~1% on all bets, credited immediately, plus the SHFL token ecosystem — a transparent, low-variance reward rather than a wagering-heavy match. Compare it in our Shuffle review or visit Shuffle.

What the documentation commits to (help centre, checked 10 Nov 2026): Shuffle publishes four articles that together form a full specification: the commitment scheme (a 64-character hex server seed hashed with SHA-256, a client seed you are encouraged to edit, a nonce that starts at 0), the byte generator and float conversion in code, a walk-through of rotating the pair and verifying a bet, and game events for 17 Originals with worked examples. Crash and Slide are seeded from a 10 million-game hash chain plus a Bitcoin block hash named in Shuffle's public seeding posts. Because the worked examples are printed, anyone can test a tool against them; our Shuffle Seed Checker reproduces them. The Curaçao registry (5 Nov 2026) lists Natural Nine B.V. under OGL/2024/1337/0628 with the status "Indefinite".

Rollbit — provably fair Originals (data under review)

Status (as of October 2026): Tanzanite recorded $0 in the 30 days to 1 Nov 2026, after about $1K in the 30 days to 2 Oct and $13.1M in the 30 days before that — tracking gap or operational change, under review. Rollbit's in-house X-Crash, X-Roulette and Rocketpot are provably fair; its 3,500+ slots are provider RNG. On 24 Oct 2026 the crypto-native site’s footer (Rollbit.com) named Acacia Tech Ltd (Nevis), Anjouan licence ALSI-042308006-FII; earlier pages named Bull Gaming N.V. under a Curaçao licence. One nuance to get right: the "UKGC #57869" you may see refers to a separate white-label, Rollbit.co.uk via Grace Media — the crypto Rollbit.com is not UKGC-licensed and geo-blocks the UK, so don't conflate the two. Rewards are rakeback plus the RLB token buyback/lottery, with no deposit match. See the Rollbit review or visit Rollbit.

5. Duel — instant, no-wagering rakeback as the headline

Duel (launched 2025 by Monarch, the operator of CSGOEmpire) makes Duel Originals — Dice, Crash, Plinko, Mines and Duel Blackjack — provably fair with published RTPs and cryptographic proofs. It is licensed in Anjouan (No. ALSI-202411026-FI1) via Immortal Snail LLC. Its hook is genuinely a reward, not a match: instant rakeback with no wagering — 50% of the house edge on slots and live games, credited as real money. Details in our Duel review or Visit Duel.

What the documentation commits to (help centre, checked 10 Nov 2026): Duel's help centre carries nine game articles, each with a real seed, client seed and nonce worked through by hand. The server seed is a 64-character hex string hashed with SHA-256; the HMAC message is clientSeed:nonce for Dice and clientSeed:nonce:cursor for Mines, where 24 cursor values drive a Fisher-Yates shuffle of the 25 tiles. The Mines article is blunt about what that means: "as soon as the round starts, the mine positions are already predetermined. selecting squares doesn't change where mines will be". The articles also list the warning signs to watch for, such as a hashed seed shown only after you commit a client seed. None of our presets reproduces Duel's byte handling, so use Duel's verify page for the outcome.

Rainbet, Gamdom and Cloudbet: three more documented schemes

Rainbet states that provably fair "is the system Rainbet uses to generate the outcome of all Originals games" and publishes the verifier code for each of its 16 Originals. The client seed is editable at any time, the server seed is shown hashed and revealed on rotation, and the nonce starts at 0. One gap: the overview does not name the hash function used for the seed commitment (checked 1 Nov 2026). See the Rainbet review or visit Rainbet.

Gamdom's fairness page is written around the hash-chain design. It says it generated "a chain of 10 million SHA256 hashes for each game", publishes the end hashes for Crash (starting at game 12,152,253), Roulette (12,332,529) and Hilo (20,581,677), and links sample code for eleven games. For Dice, Plinko, Mines and its other single-player games the page links sample code and does not describe the seeds in its text, so the code is what you check a round against (checked 10 Nov 2026). See the Gamdom review or visit Gamdom.

Cloudbet is the outlier on cryptography: SHA3-256 for the commitment and the round signature, SHAKE256 for the random stream, and rejection sampling to remove modulo bias, all explained on one page with two on-site tools (a game verifier and a server-seed checker). The client seed can be up to 255 characters. Eight Cloudbet Originals have their own explainer. Its supplier-built games sit outside the scheme and rely on certified RNG (checked 10 Nov 2026). See the Cloudbet review or visit Cloudbet.

PROVABLY FAIR vs LICENSED RNG — what's the difference?

The single most important thing to understand on this page: "provably fair" and "fair" are not the same claim. Provably fair means you can mathematically reproduce the outcome and confirm it wasn't changed. Licensed RNG means a third-party lab (eCOGRA, iTech Labs, GLI) has tested the random number generator and certified it — you trust the lab, not the math in front of you.

• Provably fair (in-house Originals) — dice, crash, mines, limbo, plinko, keno. Verifiable per round with our verifier. Trust assumption: none.
• Certified RNG slots (Pragmatic, Hacksaw, Nolimit, etc.) — not provably fair. Audited periodically, not per spin. Trust assumption: the auditor.
• Live dealer (Evolution and others) — real cards/wheels on camera, not provably fair and not RNG. Trust assumption: the studio and its regulator.

This is why a casino advertising "10,000+ games" is mostly offering content that cannot be provably fair. When fairness matters most to you, stick to the in-house Originals — and remember provable fairness proves randomness, not profit: every game still carries a house edge.

How provably fair works

Every provably fair round is built from three inputs combined with a one-way cryptographic hash:

1. Server seed — a secret value the casino generates and shows you only as a hash up front, so it is committed before you bet but not yet readable. See server seed.
2. Client seed — your own input (often editable), which guarantees the casino can't have pre-computed the result around a seed it fully controls.
3. Nonce — a counter that increments each bet so the same seed pair produces a fresh result every round. See nonce.

The outcome is HMAC-SHA256(server seed, client seed:nonce), mapped to the game result. Because the server seed was hash-committed beforehand and revealed afterwards, you can re-hash it: if it matches the original hash and reproduces the outcome, the round is proven untampered. For the full walkthrough, read What Is Provably Fair Gambling? and try it live in the Provably Fair Verifier.

Common myths & red flags

Provably fair proves a game result was random and untampered — it does not improve your odds, remove the house edge, or extend to a casino's third-party slots and live tables. Watch for these:

• Myth: "Provably fair means I'll win more." No — it proves the result is random and untouched, not that the odds favour you. The house edge still applies.
• Myth: "The whole casino is provably fair." Only in-house Originals are. Slots and live tables are RNG/live, audited but not provable.
• Red flag: no seed rotation. If you can't reveal the server seed by rotating your seed pair, you can't verify anything — the "provably fair" badge is cosmetic.
• Red flag: a hash that doesn't reproduce. If our verifier can't reproduce the outcome from the revealed seeds, do not trust the game.
• Red flag: bonus terms that hide the wagering. A "470%" headline that only releases as rakeback, or a match with 40× slots-only wagering, is very different from cash — read the terms before depositing.

How to choose a provably fair crypto casino

A genuinely provably fair crypto casino must pass four checks: it commits a hashed server seed before your bet, lets you set your own client seed, reveals the old server seed on rotation, and publishes an algorithm you can re-run. Every casino in our table calls itself provably fair, but the phrase only means something when the implementation passes four concrete checks. Before you deposit anywhere — including sites we rank — run through this list:

1. Pre-commitment before the bet. The site must show you the SHA-256 hash of the server seed before you wager. If the hash appears only after the round, the "commitment" proves nothing — the seed could have been picked after your bet.
2. A client seed you control. You should be able to type your own client seed, not just accept a generated one. Your input is what stops the operator from pre-computing outcomes around a seed it fully controls.
3. Seed rotation that reveals the old seed. Rotating your seed pair must expose the previous unhashed server seed. No reveal, no verification — a fairness page without rotation is a badge, not a proof.
4. A published algorithm you can re-run. The best operators document the exact derivation (HMAC-SHA256 over clientSeed:nonce:cursor, byte-to-float conversion, outcome mapping) so any third-party tool — including ours — can reproduce results independently. If the math is undocumented, you can only verify what the casino's fairness page tells you.

A casino that passes all four lets you confirm any round with our free Provably Fair Verifier or the per-game tools below. A casino that fails any of them belongs in the "trust me" category, whatever its marketing says. And remember the scope: even at the strictest operator, only in-house Originals are provable — third-party slots and live tables never are.

OPEN SCHEMES vs BLACK BOXES — WHAT REPRODUCES BYTE-FOR-BYTE

Only some provably fair casinos publish a full derivation that outside tools have implemented; others publish code or worked examples that only their own verifier runs today, and the rest expose a fairness widget with no formula behind it. There is a real split inside this list between casinos that publish their full derivation and casinos that merely expose a fairness widget. Stake documents its Originals algorithm end-to-end — which is why it became the reference implementation that Shuffle, Rainbet and others largely mirror — and Gamdom publishes verifiable hash chains for Crash. For Stake and Shuffle, our independent code implements the published scheme and reproduces the casino's outcomes byte for byte: the same HMAC-SHA256 stream, the same 4-byte-to-float conversion, the same game mapping. The other operators are rated on their published documentation rather than reproduced rounds. Our code powers our Stake, Shuffle and Roobet seed checkers and the per-game Dice, Crash, Mines, Limbo, Plinko and Keno verifiers.

Where an operator has not published its exact format from a primary source, this page says so rather than guess — hard-coding a guessed scheme would produce wrong results and a false sense of security. In the ranked table, that difference is part of the "PF Originals?" column: "Yes — reference" and "Yes — publishes hash chains" mark the open implementations, while "Partial" flags operators where provable coverage is thin or the scheme is not independently reproducible. If you only take one action from this page, make it this: pick a casino whose scheme is open, rotate your seed, and reproduce one real result yourself in the verifier. It takes about a minute, and it is the entire point of provably fair.