Seed Commitment
Before play, the server shows a SHA-256 hash of the hidden server seed. That hash commits the server to the seed before the round is played.
Round Generation
Each bet uses HMAC-SHA256 with the server seed, your client seed, the current nonce, and a cursor. The generated random floats drive a Fisher-Yates shuffle over numbers 1-40, then the first 10 shuffled results become the draw.
Verification
When you rotate seeds, the previous server seed is revealed. You can recompute the hash, regenerate the draw with the same client seed and nonce, and confirm that the stored result matches.