Provably Fair: What It Proves and What It Does Not

Provably fair is a genuine piece of cryptography and one of the few real technical advantages crypto casinos have. It is also routinely oversold. It proves one narrow thing very well, and proves nothing at all about several things that matter more to whether you get paid.

How it works

The scheme is a commitment. Before you play, the casino generates a secret server seed and publishes its SHA-256 hash — a fingerprint that reveals nothing about the seed but cannot be produced by any other value. You supply a client seed. Each round adds a nonce, a counter that increases by one every time.

The outcome is computed from all three: HMAC-SHA256(server seed, client seed:nonce). When you rotate seeds, the casino reveals the old server seed. You then hash it yourself and check it matches the fingerprint published before you played. If it matches, the operator could not have changed the seed after seeing your bet. If it does not match, you have proof it did.

How to actually verify a round

• Before playing, copy the published server seed hash. That is the operator’s commitment and it is worthless to you afterwards if you did not save it.
• Set your own client seed manually. This is the step nearly everyone skips, and it is the one that matters — if you leave the site’s generated client seed in place, the operator controls both inputs and the guarantee is largely gone.
• Play. The nonce increments with each round on the same seed pair.
• Rotate the seed to make the operator reveal the previous server seed.
• Check the commitment: compute SHA-256 of the revealed seed and compare it with the hash you saved.
• Check the outcome: recompute HMAC-SHA256 using the formula in the site’s documentation and compare with your results.
• Do the maths independently — with a third-party verifier or your own script, not the calculator hosted on the casino’s own site. Otherwise you are checking the casino with the casino’s tool.

What it does not prove

• It does not prove the operator can pay. The mathematics of a round is unconnected to whether there is money in the account to settle it.
• It does not prove the operator will pay. A demonstrably fair win and an unpaid win are entirely compatible. Provably fair covers neither a verification freeze at withdrawal, nor forfeiture, nor an operator that disappears.
• It does not protect your balance. Compare the British requirement: under licence condition 4.2.1 an operator must disclose whether customer funds are protected on insolvency, and if the answer is “not protected”, remind you every six months, stating the amount you hold, and stop you gambling until you acknowledge it. Cryptography offers nothing equivalent.
• It gives you no route to enforce anything. A hash is not a judgment. In Britain a licensed dispute goes to free independent adjudication after eight weeks; a cryptographic proof cannot compel a payment.
• In practice most people never check. As the same source notes, “many users still rely on the reputation of the platform rather than performing the verification themselves.” A guarantee nobody exercises is a marketing claim.

There is also a technical caveat: if a server seed is compromised or revealed before a round completes, the scheme breaks — someone could work backwards to a winning client seed.

Which games can do it, and which cannot

Provably fair works where the result can be derived from the seeds by a single formula: dice, crash, plinko, mines, limbo, keno, wheel, hi-lo, and card or roulette games with a deterministic shuffle generated from the seed. These are typically the casino’s own in-house games.

Third-party slots cannot be provably fair. The outcome is produced inside the game provider’s own system, not from a seed pair you can influence, so there is nothing for you to recompute. A site advertising “provably fair” across a library of thousands of third-party slots is describing a handful of its own games and letting you assume the rest.

How Britain does the same job differently

The licensed model is not a competitor to provably fair — it is a different layer. It checks that the system as a whole cannot be quietly altered, rather than that one roll was honest.

• Every new product must be tested by an approved test house before release, with the report going to the Commission.
• Any change capable of affecting fairness — including changes to the random number generator, to scaling and mapping, or to game rules — counts as a major update and requires fresh external testing.
• An annual audit checks that the operator classified its changes honestly and monitored return to player correctly.
• The RTS rules are explicit that “adaptive behaviour (that is, a compensated game) is not permitted” — a game may not adjust its odds based on how a player has been doing.

Frequently asked questions

Does provably fair mean I am more likely to win?

No. It proves the result was not manipulated after your bet. The house edge is unchanged — a game can be provably fair and still take a large margin. Check the return to player figure separately.

Do I have to set my own client seed?

If you want the guarantee to mean anything, yes. Leaving the site’s generated client seed in place hands the operator control of both inputs. It takes about ten seconds and it is the whole basis of the scheme.

Are provably fair casinos safe?

The games are verifiable. That is not the same as the operator being safe. It says nothing about whether they hold enough to pay you, whether they will pay you, or what happens if they close. Those questions are answered by the terms — see the clauses we found — and by the legal position.

Can slots be provably fair?

Third-party slots, no — the outcome is generated in the provider’s system rather than from a seed pair you influence. Only the casino’s own games (dice, crash, plinko, mines and similar) can genuinely be verified this way.

Written by James Whitlock, Editor-in-Chief. Sources read August 2026: UKGC approved test houses list and testing strategy, RTS requirements, Chainlink technical documentation.