Provably Fair

Every Tonza Original outcome is verifiable

Our native games (Coin Flip and more) don't rely on a hidden RNG. Each result is derived cryptographically from three values you can inspect — so neither you nor we can alter a bet after it's placed.

1Before you bet, we commit to a secret server seed by showing you its SHA-256 hash. We can't change the seed afterwards without breaking the hash.
2Your outcome is computed as HMAC-SHA256 of the server seed keyed with your client seed and a nonce that increases by 1 each bet.
3When you rotate your seed, we reveal the old server seed — you can then recompute every past result and confirm it matches.
outcome = HMAC_SHA256(serverSeed, clientSeed:nonce:cursor)

Your current seeds

Log in to see and verify your seeds.

Your rounds

Pick any round you played and we'll fill the verifier with that round's own client seed, nonce and settings — not your current ones. The server seed shows up only once the seed it was played on has been rotated.

Log in to see and verify your seeds.

Verify a result

Recompute any outcome yourself, right in your browser. Uses the exact same HMAC-SHA256 formula the server uses — nothing is sent anywhere. You need the revealed server seed (available after rotating that seed), your client seed and the bet's nonce.

Fill in the server seed, client seed and nonce — or pick one of your rounds above.

Worth reading

Frequently asked questions

What does provably fair mean?

It is a way to prove the casino did not tamper with the outcome. Before you bet you receive a hash of the server seed, you set your own client seed, and after the round the server reveals the full seed. Recomputing the result from the same inputs shows it was fixed in advance.

Why is the server seed hidden until later?

If the seed were known before the bet, outcomes could be computed ahead of time and played risk-free. So only its hash is published beforehand — the seed cannot be swapped after that without breaking the hash — and it is revealed when the seed is rotated.

How do I verify an older round?

Pick the round from the history on this page and it loads into the verifier: client seed, nonce and parameters fill themselves in. The server seed appears once its epoch has been rotated. If it has not, rotate your seed and the previous epoch becomes verifiable.

Do all games on Tonza work this way?

Five in-house games do: Coin Flip, Mines, Roulette, Plinko and Blackjack. Games from external studios use their own random number generators, certified by those studios, and are verified on their side rather than here.

What if the recomputed result does not match?

First check that the fields were not edited after loading the round and that the server seed belongs to that round — the page compares it by hash. If the mismatch persists, contact support with the round id: that is worth investigating.