Key Changes
ApexBet Casino - Official Changelog 🚀
Version 1.1
Additional Information
🕹️ Gaming & Player Experience
Parlay & Multi-Betting: Integrated a sophisticated betslip that supports multi-selection parlay bets with automated odds calculation and multi-leg resolution logic.
Daily Rewards Ecosystem: Added an animated Daily Spin Wheel with a weighted reward system (Jackpots, Cash, Points, and Free Spins) and a 24-hour cooldown.
Smart "Recently Played" Engine: A new homepage section that tracks and displays a user's game history, winnings, and play counts, optimized with a route-ordering fix for faster loading.
Real-World Sports Integration: Switched from generated data to Real-Time APIs (CricketData, Odds API) for Cricket, Tennis, and Basketball, featuring live scores and dynamic player photos.
⚙️ Casino Core & Math Rebalancing (The "Fair-Play" Engine)
Unified RTP Rebalance: Mathematically recalibrated all 6 game engines (CreateJS, Novomatic, Pragmatic, etc.) to ensure a natural ~96% RTP before house edge application.
Global & Per-Game Control: Introduced a unified system to apply House Edge and Max Win Multipliers either globally or to specific games, allowing precise profit management.
Deterministic Fallbacks: Implemented a seeded PRNG for sports player names and logos, ensuring a professional look even when external APIs are unavailable.
Advanced Live Admin UI: Completely redesigned the Live Games management board with image previews, quick-action toggles, and per-game math controls.
🛡️ Security Hardening & Anti-Fraud
Cluster Mode & Redis Integration: Moved CSRF tokens, rate limiters, and anti-cheat cooldowns to Redis, enabling seamless performance across multiple server workers (PM2 Cluster Mode).
User Privacy & Info Leak Protection: Replaced all standard console logging with a secure Winston logger to prevent sensitive data (emails, payments) from appearing in server logs.
Session Security: * Added Timing-Safe Token Validation to prevent side-channel attacks.
Implemented Periodic WebSocket Re-validation (every 5 mins) to automatically kick banned or expired users.
Fixed User Enumeration vulnerabilities in the registration flow.
Geo-Blocking Middleware: A "Fail-Open" security layer that uses IP-lookups to block restricted countries with 24-hour caching to save API costs.
🏗️ Architecture & Infrastructure
Shared Technical Modules: Consolidated all core logic into shared modules for Secure RNG, Database Transactions, and Global Constants to eliminate code duplication.
Persistent Disk Caching: API responses for sports and logos are now cached to disk, ensuring the site stays functional and fast even during API downtime or server restarts.
Enterprise Test Suite: Integrated over 80 automated tests covering RNG fairness, anti-cheat validation, and financial math integrity.
Database Hygiene: Cleaned up balance adjustment logic to prevent orphaned transactions and blocked $0 adjustments.