Operator Reference
This page is maintained by the Dive & Cash team to answer common regulatory and integrity questions from casino operators evaluating the game for their license. It is not an independent certification.
Every round uses commit-reveal fairness. Before the round the player receives SHA-256(serverSeed). After the round the plaintext seed, client seed, and nonce are published so any third party can recompute the crash point.
The public verifier is available at /fairness. Formula and source code are documented in the whitepaper.
The crash mechanic is designed to align with GLI-19 (Interactive Gaming Systems) requirements for RNG determinism, seed disclosure, round auditability, and idempotent settlement. Independent lab certification (GLI, iTech Labs, BMM) is arranged per-operator on request and is a prerequisite for regulated markets.
Dive & Cash is a game engine. KYC, source-of-funds checks, sanctions screening, and transaction monitoring are the responsibility of the licensed operator embedding the game. The integration exposes a playerId field so operators can associate each round with their verified account.
Operators should reject launch requests for players who have not passed KYC in their jurisdiction, and should block launch for self-excluded users before calling POST /launch.
The engine does not display to unauthenticated visitors when launched via the embed flow — the operator must verify age (18+ or 21+ per jurisdiction) before minting a launch token.
Dive & Cash is offered to operators licensed in their local jurisdiction. We do not offer the game to residents of prohibited jurisdictions including but not limited to the United States (outside licensed states), United Kingdom without UKGC coverage, France, and any OFAC-sanctioned country. Operators are responsible for enforcing their own geo-restrictions on player launch.
Round data (bet, crash point, seeds, cashout multiplier, timestamps, opaque playerId, opaque playerWallet) is retained for audit purposes. No PII (name, email, address, IP, KYC documents) is collected or stored by Dive & Cash — the operator holds all player identity data.
See /legal for the full data-processing terms.
Responsible disclosure: security@diveandcash.example. PGP key on request. Please allow 72 hours for initial response.