Fair shuffle and data security
Every shoe is shuffled with a cryptographically secure random number generator and dealt in a fixed order, the game is free-play only for players aged 21+, and web sign-in uses single-use codes sent by the bot.
How the shoe is shuffled
8 decks per player
Each player has their own 8-deck shoe. Nobody else draws from it, so another player's hands never change the cards you receive.
Fisher-Yates with random_int
The shoe is shuffled with the Fisher-Yates algorithm, using PHP's cryptographically secure random_int for every swap. This gives every possible order of the cards the same chance.
Fixed deal order
Cards are dealt in a fixed order from the top of the shuffled shoe. The game never picks a card for a player or the dealer on the fly.
Shoe saved after every draw
The state of the shoe is saved after every card. A hand started in Telegram and finished on the web continues from exactly the same shoe.
Reshuffle at 80%
When 80% of the shoe has been dealt, it is reshuffled between rounds, never in the middle of a hand. Players see a "Shoe shuffled" message.
Tested for uniformity
We ran a test of 2,000 shuffles and checked where each card landed. The distribution was uniform: no card favoured any position in the shoe.
Why streaks happen
Players sometimes write to say the dealer wins too often, or that they lost five hands in a row. Streaks are a normal property of random cards, not a sign that something is wrong. In a long series of fair hands, runs of wins and losses appear far more often than most people expect, because people tend to imagine randomness as neat alternation.
The game has no way to react to a player's results. The shoe is shuffled before play, the cards come out in the order the shuffle produced, and the dealer follows fixed rules: stands on all 17, peeks on an ace or ten, no insurance. The full rules are on the blackjack tournament page. Because the shuffle does not know who is playing, it cannot favour or punish anyone.
Free-play only, 21+ only
- Players confirm they are 21 or older before they can play.
- Each tournament gives 10,000 free chips. There are no refills, no shop, no real money, no crypto and no paid power-ups.
- A tenant can label chips with a currency name such as USD for realism, but the chips are always virtual.
- Prizes are a bonus balance at the sponsoring casino with 1x wagering, credited by the casino's own staff.
- Players send /practice in the bot (or switch it on at the web table) to play with a separate practice bankroll. It never touches the leaderboard or the minimum hands to qualify; send /practice again to return to the tournament chips.
- Tenants are responsible for the laws and advertising rules of the countries they target. Read our responsible use policy.
Web sign-in security
One-time code from the bot
Players sign in to the web table with their bot nickname and a 6-digit code that the bot sends them on Telegram. Each code works once and expires after 10 minutes.
30-day sessions
A web session lasts 30 days, so players do not need a new code every visit on their own device.
New-login notice
Every new web login triggers a message from the bot. If a player did not sign in, they know at once.
Log out everywhere with /webLogout
The /webLogout command in the bot ends all web sessions for that player on every device.
Embed protection
A tenant can show the web table on their own website with an iframe. The dashboard keeps an allowed-domains list, and the table only loads inside the domains on that list. This stops other sites from copying the embed code and running your tournament inside their pages. Setup steps are in our guide to embedding the blackjack web table.
What player data is stored
| Data | Why it is stored |
|---|---|
| Telegram ID | To link the player to the bot, send messages and connect Telegram and web play. |
| Nickname | Shown on the leaderboard instead of a real name. 3 to 20 letters or numbers, Arabic allowed. |
| Language | So every message and the web table appear in the language the player chose. |
| Game history | Hands, wagers, points and chips, needed to calculate the score and the leaderboard. |
| Web sessions | So a signed-in player stays signed in, and so /webLogout can end every session. |
No real names on display
Leaderboards, rank alerts and leaderboard images only show nicknames. A player's real name is never shown in the game. When a player wins a prize, the bot asks for the email they used to register at the casino, and that email is posted only in the tenant's private staff group so the casino can credit the bonus. The full details are in our privacy policy.
Fairness questions
Can a tenant change the odds or the cards?
No. Tenants control branding, tournaments, prizes and messages. The shuffle and the table rules are the same for every tenant.
Is the shuffle the same on Telegram and the web?
Yes. Both use the same saved shoe, so a hand started in Telegram can be finished on the web with the same cards.
Why does the shoe reshuffle before it is empty?
Reshuffling at 80% between rounds keeps enough cards for every hand and stops a round from running out of cards in the middle.
What happens if a player uses /cancel?
The bet is forfeited and the hand counts for nothing, so cancelling a bad hand gives no advantage.
Can a player sign in to the web table without Telegram?
No. The 6-digit sign-in code is only sent by the bot, which ties every web session to the player's Telegram account.
See the table for yourself
Book a 20-minute demo and play a few hands on a table with your own logo.
- Real table rules
- Free-play only, 21+
- 3-month free trial