HMAC-SHA256 · Verified · Transparent
Every game at Citadel is cryptographically verifiable. No blind trust, no black-box RNG, no third-party auditors. Just mathematical proof that every outcome is fair.
Provably fair is a system that uses cryptographic hash functions to ensure that neither the casino nor the player can predict or manipulate game outcomes. It is the gold standard for transparency in online gambling, and Citadel implements it across the entire platform.
Server Seed
Generated by Citadel before each round. A SHA256 hash of this seed is shown to you before you bet, committing the casino to a specific outcome.
Client Seed
Set by you (or generated automatically). This introduces player-controlled randomness that the server cannot predict or influence.
Nonce
An incrementing counter for each bet within a seed pair. Ensures uniqueness even when server and client seeds remain constant across multiple rounds.
The game outcome is determined by computing HMAC-SHA256(serverSeed, clientSeed:nonce). This produces a deterministic hex string that is then converted into game-specific results (card values, reel positions, multipliers, etc.).
Because the server seed hash is published before your bet, and the client seed is controlled by you, neither party can unilaterally control the outcome. The result is mathematically predetermined at the moment you click "bet," and you can verify it after every round.
Before placing your bet, the game displays a SHA256 hash of the server seed. This is the casino's cryptographic commitment — it proves the outcome was chosen before your bet. Save or screenshot this hash.
Place your bet and play normally. Behind the scenes, HMAC-SHA256 combines the server seed, your client seed, and the current nonce to produce the game result. The outcome is instant and deterministic.
After the round completes (or when you choose to rotate your seed pair), the raw server seed is revealed. Navigate to your game history or seed settings to find it.
Take the revealed server seed and compute its SHA256 hash using any tool (our built-in verifier, an online SHA256 calculator, or a command-line tool). If the hash matches the one shown before your bet, the commitment is valid.
Using the server seed, your client seed, and the nonce, compute HMAC-SHA256 yourself. Convert the output to a game result using the documented algorithm. It must match what was displayed in the game.
| Category | Verification | Method |
|---|---|---|
| Slots | Provably Fair | HMAC-SHA256 reel mapping |
| Crash Games | Provably Fair | HMAC-SHA256 multiplier chain |
| Dice & Mines | Provably Fair | HMAC-SHA256 outcome |
| Lottery | Provably Fair | SHA-256 draw verification |
| Scratch Cards | Provably Fair | HMAC-SHA256 reveal |
| Table Games | Provably Fair | HMAC-SHA256 card deck |
| Live Dealer | HD Streamed | Real-time video verification |
| Sports Betting | Real Events | Official result feeds |
Live dealer games use physical cards and wheels streamed in HD. While not cryptographically verifiable in the same way, the real-time video feed provides visual transparency. Sports results come from official data providers.
Open Algorithm
The verification algorithm is publicly documented. Any developer can build a third-party verifier.
Player-Controlled Seeds
You set your own client seed. The casino cannot influence the randomness you contribute.
Pre-Committed Hashes
Server seed hashes are shown before every bet. Changing the outcome after commitment is impossible.
Full Game History
Every bet includes all seeds and nonces needed for independent verification in your account.
Stop trusting. Start verifying. Join Citadel and play games where every outcome is backed by cryptographic proof, not corporate promises.
Enter the Casino