View File

ApexBet – Enterprise-Grade Online Casino Platform

---

ApexBet – Complete Online Casino Platform

ApexBet is a powerful, launch-ready online casino platform designed for operators who want to start their own casino website quickly and professionally.

The system includes 120+ casino games, a full plugin ecosystem, a peer-to-peer sports exchange, 165+ currencies, a modern admin dashboard, multiple payment gateways, advanced bonus systems, and real-time features that create a fully interactive gaming experience.

Since its first release, ApexBet has shipped five major updates adding new games, a complete sportsbook, a real-time chat system, a WordPress-style plugin engine, eleven ready-made plugins, hundreds of extension points, and more than 50 security hardenings across two full audits. Every new update is delivered automatically to your installation with one click.

---

Custom Development Available

We also provide custom development services. If you need additional features, integrations, or custom modifications, we can implement them according to your requirements.

• ✔ Custom features

• ✔ Custom integrations

• ✔ UI / design modifications

• ✔ New payment gateways

• ✔ Any requested functionality

---

Live Demo

You can test the platform using the demo links below.

Frontend Demo

https://demo.apexbet.to/

Admin Panel Demo

https://demo.apexbet.to/panel

Admin Login

• Username: demo_admin

• Password: demo1234

---

Documentation

Full documentation, system overview, and preview screenshots are available here:

https://apexbet.to/docs

---

Key Features

100+ Casino Games

ApexBet ships with a huge, constantly growing library of casino games:

• 60+ slot games from CreateJS, EGT, PlayTech and more — themes include Africa, Aztec Glory, Age of Egypt, Bermuda Triangle, and dozens more

• 12 premium PG Soft slots added in v1.3 with full server-side logic, Spine animations, and 96% RTP (Fortune Tiger, Treasures of Aztec, Bikini Paradise, Queen of Bounty, Songkran Party, and more)

• 4 new American video-poker games — Deuces Wild, Fruit Poker, Tens or Better, and All American Poker — each with server-side logic and its own paytable

• Classic table games: Blackjack, Roulette, Video Poker, Keno, Bingo

• Live Casino: Blackjack, Roulette Classic, Casino Hold’em, Joker Poker, Super Wheel, and more

• Crypto Prediction (Bitcoin price game) with real-time charts, countdown, 1.95× multiplier, and TradingView integration

• All game outcomes are computed server-side with a secure RNG and a configurable house edge (default 4%)

• Unified RTP rebalance across all engines (CreateJS, Novomatic, Pragmatic, EGT, PG, V-Games) to a natural ~96% RTP

• Global and per-game math controls — set house edge and maximum-win multipliers globally or per specific game directly from the admin panel

Aviator — Real-Time Multiplayer Crash Game

A fully integrated, real-time multiplayer crash game built from the ground up:

• Powered by Socket.IO for seamless, low-latency gameplay

• Custom branded UI with smooth Canvas animations

• Fake-player bots for social proof, exponential multiplier curves, and secure server-side RNG

• Hardened against cash-out-after-crash race conditions and SQL injection

Advanced Sportsbook Engine

A professional 1xBet-style sportsbook:

• Live odds integration via The Odds API, with CricketData.org for cricket and real-time score updates

• Match cards with dynamic market grids, live scores, and player photos

• Parlay & multi-betting with automated odds calculation and multi-leg resolution

• Football, Basketball, Hockey, Boxing, MMA, Tennis, Cricket, and more

• Deterministic fallbacks — professional UI even when external APIs are down, backed by persistent disk caching

🛉 Plugin Ecosystem

ApexBet ships with a full plugin system that lets you extend, replace, or reshape almost any part of the platform without touching core files. Your customisations survive every future update.

• 686+ extension points across the platform — from login and registration to every bet, deposit, withdrawal, and game result

• 53 UI injection slots across 23 pages — drop new sections, banners, widgets, or full-page takeovers anywhere

• Replace any page, modal, or widget from a plugin without editing core code

• Shortcode engine — place [shortcode_name] tags inside any text field and plugins render them

• Per-plugin translations in all 6 supported languages, shipped inside the plugin itself

• Auto-generated settings UI — each plugin declares its own fields and the admin panel renders the form automatically

• Enable, disable, and reconfigure plugins from the admin panel with no restart

🏪 Plugin Store & Eleven Ready-Made Plugins

Browse, install, update, and purchase plugins directly from the admin panel. One-click install — no SSH, no manual steps. Automatic update detection when a new version is published.

Eleven plugins are available out of the box with:

• Sport Exchange (Back & Lay) — A full peer-to-peer betting exchange in the Betfair model. Your players trade outcomes against each other and you earn commission on winnings with zero book risk.

• Agent & Affiliate System — Multi-level agent management with three commission modes (turnover, net-loss, deposit), flexible settlement periods (realtime / daily / weekly / monthly), and a dedicated agent dashboard.

• Friends & Activity Feed — Friend requests, public profiles, real-time activity feed, and a friends leaderboard with full per-user privacy controls.

• Complaint Management — Ticket system with SLA monitoring, auto-escalation, and real-time messaging between users and admins.

• Email Campaign Manager — Bulk campaigns with audience segmentation, open/click tracking, unsubscribe system, ready-made templates, and a variables engine.

• Anti-Fraud & AML Monitoring — Real-time fraud detection with 8 configurable rules and a full alert workflow.

• Provably Fair Gaming — Cryptographic game fairness with player-controlled seeds and a public verification page.

• Achievements & Badges — 24 pre-configured achievements with automatic progress tracking and configurable rewards (cash or loyalty points).

• Leaderboard & Rankings — Daily / weekly / monthly boards with automatic prize distribution.

• Flash Sales & Limited Offers — Time-limited deposit bonuses with countdown timers, scheduling, and push notifications.

• Winback & Anti-Churn — Automatic inactive-player detection with personalised bonus codes and re-engagement emails.

Multiple Payment Gateways

Supports 10+ payment methods, including:

• Stripe

• PayOp

• NowPayments

• CoinsPaid

• Skrill

• Neteller

• Perfect Money

• Manual transfer

Deposit double-credit race conditions were closed across every flow (Stripe, NowPayments webhooks, NowPayments polling, and saved cards). Additional payment gateways can be integrated on request.

Flexible Withdrawal Methods

Withdrawal methods are fully managed by the admin — add as many as you like, with no fixed limit. Create any method you need (crypto, bank transfer, e-wallets, local payment options, or anything custom) directly from the admin panel, with custom fields, min/max limits, fees, and full approval workflow. Every withdrawal uses atomic balance deductions to prevent race conditions.

Powerful Admin Dashboard

A complete control panel to manage the entire platform, fully redesigned in v1.3 with a glassmorphism UI, gradient sidebars, and smooth animations:

• User management, KYC verification, and role management (with whitelisted role assignment)

• Financial operations, deposits, withdrawals, and manual balance adjustments

• Game settings with live per-game math controls and quick-action toggles

• Promotions, bonus codes, and VIP configuration

• 12 new stat cards, 7-day performance charts, and Top 5 games/winners tracking

• Live notification centre — real-time bell for withdrawals, support tickets, and KYC reviews

• System health monitor — real-time API status displayed in header and sidebar

• Support tickets, FAQ management, and live chat moderation

• Full site configuration: branding uploads (favicon, logos, icons with automatic WebP conversion), maintenance mode, 2 design templates, and content management (About, FAQ, Terms, Privacy)

Bonus & Promotion System

Built-in marketing tools to increase player engagement, now powered by a centralised bonus engine:

• Welcome bonus up to 500% — auto-granted on first deposit

• Deposit bonuses, free spins, and promo codes

• Weekly cashback (15%) — works across all game types: slots, table, Aviator, crypto prediction, sports, and provider games

• VIP-linked cashback rates with a daily cap per user and real-time balance notifications

• Daily Spin Wheel — animated wheel with a weighted reward system (Jackpots, Cash, Loyalty Points, Free Spins) on a 24-hour cooldown

• Daily Challenges — 8 challenge types with 4 random challenges per user per day and targets that scale with VIP level

• Referral rewards ($25 per referred friend) with accurate deposit-based commission tracking

• Wagering tracking across every game type, automatic expiry, and withdrawal blocking with a clear message when a bonus is not yet cleared

• Flash sales with countdown timers, scheduling, and push notifications (via plugin)

• Winback automation for inactive players with personalised bonus codes (via plugin)

VIP & Loyalty Program

6 VIP levels — Bronze, Silver, Gold, Platinum, Diamond, Legendary. Players earn loyalty points and unlock rewards automatically:

• Levels and thresholds are read from the database and fully editable

• Inactive players are auto-downgraded

• Tier changes are delivered instantly via WebSocket

• VIP-linked cashback rates and bonus multipliers

• Tournaments and leaderboards with automatic prize distribution

💱 Global Multi-Currency Engine

Expand your casino to every corner of the world with a fully dynamic multi-currency engine:

• 165+ currencies and 229 countries with auto-translated names in all 6 languages

• Four pluggable rate providers — Free (open.er-api, no API key), ExchangeRate-API, OpenExchangeRates, and CurrencyLayer. Admins can test any provider and key before saving.

• Per-user rates across the whole platform — sports bets, crypto prediction, deposits, withdrawals, game launch, and every game handler (CreateJS, Pragmatic, Relax, Nolimit, Yggdrasil, Greentube, PG, V-Games, Sport Exchange) now use each session user’s own currency and rate

• Live exchange rates with a 6-hour cache and instant clearing when the provider or API key changes

• IP-based detection — country and currency automatically detected during registration

• Smart geo-blocking — block registration/login from restricted regions while still allowing public browsing

Real-Time Features

Interactive features powered by WebSockets to keep players engaged:

• Live community chat with tipping, rain rewards, emoji reactions, bots, and daily tasks

• Instant balance updates across deposits, withdrawals, and game results — no page refresh

• Real-time winners ticker and progressive jackpot counter

• Live leaderboards (daily / weekly / monthly) with automatic prize distribution

• Chat mini-games and instant notifications

• Online player count and live stats

• Full admin moderation tools with a smart auto-mod filter

🔄 One-Click Auto-Update System

Stay up to date effortlessly — the built-in admin updater handles everything:

• Check for updates and view release notes directly from the admin panel

• Downloads, extracts, applies SQL changes, rebuilds the frontend, and restarts the server automatically

• Visitors see a professional “System Updating” page during the process

• One-click rollback to a previous version if anything goes wrong

🛡 Enterprise Security

Built with the strongest security standards and hardened across two full security audits:

• 256-bit SSL encryption, JWT authentication with refresh tokens, CSRF & XSS protection, Helmet.js security headers, rate limiting, and server-side anti-cheat

• Redis-backed cluster mode — CSRF tokens, rate limiters, and anti-cheat cooldowns are shared across multiple PM2 workers

• Winston secure logging — no sensitive data in server logs

• Timing-safe token validation and timingSafeEqual for password comparisons

• Periodic WebSocket re-validation (every 5 minutes) to auto-kick banned users

• Geo-blocking middleware with 24-hour IP caching

• More than 50 security fixes in v2.0 covering SQL injection, IDOR, XSS, race conditions, double-credit deposit issues, session invalidation, role-assignment whitelisting, and information leakage through public APIs

• Settings API sensitive fields (payment credentials, SMTP passwords) are now fully masked

• 80+ automated tests covering RNG fairness, anti-cheat validation, and financial math integrity

Multi-Language Support

Supports 6 languages with instant switching and automatic RTL/LTR layout:

• English

• Arabic (RTL)

• Spanish

• French

• Portuguese

• Turkish

Per-user dynamic language — 36 places that were previously hardcoded now respect each user’s preferred language. Full SEO support with hreflang tags, locale-based URLs (/ar/, /en/), and dynamic server-side language/direction metadata.

Mobile & PWA Ready

• Fully mobile optimised

• Installable Progressive Web App (PWA)

• Push notifications

• Offline caching

• App-like experience

Built With Modern Technologies

React 19 • TypeScript • Vite • Tailwind CSS • Node.js • Express 5 • MySQL 8 • Socket.IO • Redis • JWT Authentication • Helmet.js • PM2 Cluster Mode • Stripe SDK

Quick Installation

The platform ships with an automated installer:

bash install.sh

Your casino platform can be installed and running in about 10 minutes. All future updates are delivered automatically through the admin panel.

---

ApexBet is actively maintained with frequent updates, new features, and critical improvements. Explore the full changelog: https://apexbet.to/changelog

Submitter Mahmoud

Submitted 03/10/2026

Category Scripts

Demo

https://apexbet.to/

@Mahmoud  is it multicurrency? And does it have odds management?

17 minutes ago, Maj2026 said:

is it multicurrency

Yes, users can select their preferred currency on registration (USD, EUR, SAR, etc.), and crypto payments

support multiple coins (BTC, ETH, USDT, etc.).

17 minutes ago, Maj2026 said:

And does it have odds management?

Currently, odds are generated automatically based on match data. A manual odds management panel is not currently available, but I may add it in a future update.

This file has been updated to v1.1

What's New in this Version:

ApexBet Casino - Official Changelog 🚀

Version 1.1

Release Date: March 12, 2026

---

🕹️ Gaming & Player Experience

• Parlay & Multi-Betting: Integrated a sophisticated betslip that supports multi-selection parlay bets with automated odds calculation and multi-leg resolution logic.

• Daily Rewards Ecosystem: Added an animated Daily Spin Wheel with a weighted reward system (Jackpots, Cash, Points, and Free Spins) and a 24-hour cooldown.

• Smart "Recently Played" Engine: A new homepage section that tracks and displays a user's game history, winnings, and play counts, optimized with a route-ordering fix for faster loading.

• Real-World Sports Integration: Switched from generated data to Real-Time APIs (CricketData, Odds API) for Cricket, Tennis, and Basketball, featuring live scores and dynamic player photos.

⚙️ Casino Core & Math Rebalancing (The "Fair-Play" Engine)

• Unified RTP Rebalance: Mathematically recalibrated all 6 game engines (CreateJS, Novomatic, Pragmatic, etc.) to ensure a natural ~96% RTP before house edge application.

• Global & Per-Game Control: Introduced a unified system to apply House Edge and Max Win Multipliers either globally or to specific games, allowing precise profit management.

• Deterministic Fallbacks: Implemented a seeded PRNG for sports player names and logos, ensuring a professional look even when external APIs are unavailable.

• Advanced Live Admin UI: Completely redesigned the Live Games management board with image previews, quick-action toggles, and per-game math controls.

🛡️ Security Hardening & Anti-Fraud

• Cluster Mode & Redis Integration: Moved CSRF tokens, rate limiters, and anti-cheat cooldowns to Redis, enabling seamless performance across multiple server workers (PM2 Cluster Mode).

• User Privacy & Info Leak Protection: Replaced all standard console logging with a secure Winston logger to prevent sensitive data (emails, payments) from appearing in server logs.

• Session Security: * Added Timing-Safe Token Validation to prevent side-channel attacks.

  • Implemented Periodic WebSocket Re-validation (every 5 mins) to automatically kick banned or expired users.

  • Fixed User Enumeration vulnerabilities in the registration flow.

• Geo-Blocking Middleware: A "Fail-Open" security layer that uses IP-lookups to block restricted countries with 24-hour caching to save API costs.

🏗️ Architecture & Infrastructure

• Shared Technical Modules: Consolidated all core logic into shared modules for Secure RNG, Database Transactions, and Global Constants to eliminate code duplication.

• Persistent Disk Caching: API responses for sports and logos are now cached to disk, ensuring the site stays functional and fast even during API downtime or server restarts.

• Enterprise Test Suite: Integrated over 80 automated tests covering RNG fairness, anti-cheat validation, and financial math integrity.

• Database Hygiene: Cleaned up balance adjustment logic to prevent orphaned transactions and blocked $0 adjustments.

sir do you accept crypto payments?

Yes, click on Buy, and the available payment methods will appear for you.

I am currently working on mobile app development using React Native, the same technology trusted by leading tech companies like Meta for apps such as Facebook and Instagram, as well as Discord. More details will be announced soon. 🚀

جامد اوي بس ايه السعر الخيالي ده

This file has been updated to v1.2

What's New in this Version:

🚀 Version 1.2 — The "Global Expansion & Performance" Update

Release Date: March 21, 2026

We are excited to announce a major update to the ApexBet Casino platform! This version introduces our custom-built Aviator Multiplayer Game, a robust Auto-Update System, and a complete overhaul of the Multi-Currency engine.

---

🕹️ 1. New Feature: Aviator (Crash) Game

A fully integrated, real-time multiplayer Crash game built from the ground up for maximum performance and engagement.

• Real-time Multiplayer: Powered by Socket.IO for seamless, low-latency gameplay.

• Custom UI/UX: Redesigned with the WIN Casino theme (Navy/Amber), Cairo font, and smooth Canvas animations.

• Advanced Engine: Includes "Fake Player" bots to boost social proof, exponential multiplier curves, and secure server-side RNG.

⚙️ 2. New: One-Click Auto-Update System

Stay up to date effortlessly! Our new admin-side update system handles everything for you.

• Admin Dashboard: Check for updates and view changelogs directly from the panel.

• Automated Deployment: Downloads, extracts, applies SQL changes, builds the frontend, and restarts the server automatically.

• Maintenance Mode: Visitors see a professional "System Updating" page during the process.

🌍 3. Global Multi-Currency & Geo-Targeting

Expand your reach to every corner of the world with our new dynamic currency engine.

• 165+ Currencies & 229 Countries: Full support with auto-translated names in 6 languages.

• Live Exchange Rates: Auto-syncing with open.er-api.com every 6 hours.

• IP-Based Detection: Automatically detects user country and currency during registration.

• Smart Geo-Blocking: Block registration/login from specific regions while allowing public browsing.

⚡ 4. Performance & Caching (Layer 3 Optimization)

Experience lightning-fast load times with our new triple-layer caching system.

• Redis Integration: API responses (Stats, Banners, Games) are cached to reduce DB load by up to 50%.

• Advanced Browser Caching: Immutable caching for assets (1 year) and smart ETag validation for HTML.

• Optimized Memory: LRU (Least Recently Used) eviction policy for in-memory fallback.

🛡️ 5. Security Audit & Hardening

Your security is our priority. We’ve addressed critical vulnerabilities to ensure a safe environment.

• RNG Fix: Corrected high-precision math in secureRandom() for 100% fair outcomes.

• Race Condition Fixes: Atomic balance deductions for withdrawals and session locks for all game handlers.

• XSS & CSRF Protection: New HTML entity encoding and user-bound CSRF tokens.

• Timing Attack Mitigation: Implemented timingSafeEqual for legacy password comparisons.

🔍 6. SEO & i18n Enhancements

• Locale-Based URLs: SEO-friendly URL structures (e.g., /ar/, /en/) with automatic language detection and redirection.

• Hreflang Tags: Full support for multi-language indexing by search engines.

• Dynamic Metadata: Correct lang and dir (RTL/LTR) attributes injected server-side.

🛠️ 7. Bug Fixes & Improvements

• Auth Reliability: Fixed "ErrorBoundary" crashes during registration failure.

• SSE Fix: Resolved 401 Unauthorized errors for real-time notifications.

• Game Management: Added "Game Not Found" recovery pages and removed deprecated engines for better stability.

• Payment Precision: Fixed decimal handling in non-USD deposits and withdrawals.

hey @Mahmoud can you check pm which is regarding the payment for the apexbet

4 hours ago, 0x 1ucif3r said:

hey @Mahmoud can you check pm which is regarding the payment for the apexbet

Answered

How does your casino work? How can we get attractive clients to earn money?

Soon😃

This file has been updated to v1.3

What's New in this Version:

ApexBet Casino - Official Changelog 🚀

Version 1.3

---

✨ New Features & Core Systems

• 12 New Premium Slots (PG Soft)
  Added high-quality slot games such as Fortune Tiger and Treasures of Aztec, including full server-side logic, RNG system, and Spine animations (96% RTP).

• Advanced Sportsbook Engine
  Implemented 1xBet-style match cards with live scores, real odds integration via The Odds API, cricket support via CricketData.org API, and dynamic market grids.

• Real-time Chat System
  Introduced a WebSocket-based chat system with tipping & rain features, emoji reactions, bots, daily tasks, and full admin moderation tools.

• Multi-Language & RTL Support
  Added support for Arabic, French, Turkish, Spanish, and Portuguese with automatic RTL/LTR layout switching.

• Real-time Balance System
  Instant balance updates using WebSockets across deposits, withdrawals, and game results without page refresh.

• Branding Upload System
  New admin interface for uploading and auto-converting (WebP) site assets such as favicon, desktop logo, and site icon.

• Comprehensive Player Systems
  Added KYC verification, multi-tier VIP system, tournaments, and automated bonus system (Welcome, Deposit, Cashback).

• Smart Referral Commissions
  Configurable commission system based on actual deposit balance (accurate tracking of deposited vs. won funds).

• Dynamic Site Branding
  Replaced hardcoded names with global {siteName} variable configurable from settings.

---

📊 Admin Dashboard Expansion

• New Design System
  Fully redesigned admin panel with glassmorphism UI, gradient sidebars, glowing inputs, and smooth animations.

• Live Notification Center
  Real-time notification bell for withdrawals, support tickets, and KYC reviews.

• Advanced Analytics
  Added 12 new stat cards, 7-day performance charts, and Top 5 games/winners tracking.

• System Health Monitor
  Real-time API status monitoring displayed in header and sidebar.

• Icon Upgrade
  Migrated to Lucide React SVG icons across 14 admin pages.

---

🚀 Improvements & Optimization

• Sports UI Enhancements
  Improved match cards and odds buttons layout. No-draw matches now display 2 buttons instead of 3.

• User Dashboard Updates
  Added detailed win/loss session history with advanced filtering.

• Performance Optimization
  Removed unused routes, optimized database queries, and fixed WebSocket memory leaks.

• File Upload Handling
  Increased body-parser limit to 5MB for better base64 image upload support.

---

🛡️ Security Updates (Critical)

• Wallet Protection
  Enforced signature validation for wallet callbacks (/balance, /bet, /win) with atomic database transactions.

• System Hardening
  Secured updater and games routes against path traversal and injection attacks.

• Authentication Improvements
  Increased email verification code length to 8 digits and added rate limiting for KYC endpoints.

• Secure Randomization
  Moved TOKEN_SECRET to environment variables and upgraded to crypto.randomInt with secure IV generation.

---

🐛 Bug Fixes

• Fixed RTL/LTR layout alignment issues on homepage sections.

• Fixed default currency assignment for new users.

• Fixed referral commission calculation to depend only on deposit-based funds.

• Fixed text overflow in sports market buttons.

• Updated "suspended" badge color for better visibility.

• Added missing translation keys for sports section and layout alerts.

want to change frontend and also want to add sprts exchange on sports secton. is it possble?

Hello,

Yes, it is possible. The script does not contain any encrypted code, so you are free to customize the frontend according to your requirements, including adding a sports exchange section.

I also support custom development requests if you need specific features implemented.

In addition, in the upcoming update we are introducing a major feature to expand the platform — a full plugin system with a built-in add-ons marketplace. We have already developed 10 add-ons so far, which will make it much easier to extend the platform with new features.

For more information, please check: https://apexbet.to/

Best regards.

This file has been updated to v2.0

What's New in this Version:

Plugin Revolution, Sport Exchange & Multi-currency Overhaul

The biggest release in ApexBet history. This update introduces a complete plugin ecosystem, launches a peer-to-peer sports betting exchange, ships eleven new plugins in the store, delivers a platform-wide multi-currency overhaul, and closes more than 50 security issues across two full audits.

🧩 Plugin Ecosystem — Brand New

ApexBet now has a full WordPress-style plugin system. You can extend, replace, or reshape almost any part of the platform — the homepage, the sidebar, the dashboard, the games list, the checkout flow, the admin panel — from inside a plugin, without touching any core files. When the next update ships, your customisations carry over cleanly.

• 686+ extension points across the platform — from login and registration to every bet, deposit, withdrawal, and game result.

• 53 UI injection slots across 23 pages — drop new sections, banners, widgets, or full-page takeovers anywhere you want.

• Replace any page, modal, or widget from a plugin without editing core code.

• Shortcode engine — authors place [shortcode_name] tags inside any text field and plugins render them.

• Per-plugin translations in all 6 supported languages, shipped inside the plugin itself.

• Auto-generated settings UI — each plugin declares its own fields and the admin panel renders the form automatically.

• Enable, disable, and reconfigure plugins from the admin panel with no restart.

🏪 Plugin Store

• Browse, install, update, and purchase plugins directly from the admin panel.

• One-click install — pick a plugin, press install, and the platform handles everything automatically. No SSH. No manual steps.

• Automatic update detection with one-click upgrade when a new version is published.

🆕 Eleven New Plugins

Eleven new plugins are available in the store with this release. Click any name to see its full description, screenshots, and install instructions.

• Sport Exchange (Back & Lay) — A full peer-to-peer betting exchange in the Betfair model. Your players trade outcomes against each other and you earn commission on winnings with zero book risk.

• Agent & Affiliate System — Multi-level agent management with three commission modes, flexible settlement periods, and a dedicated agent dashboard.

• Friends & Activity Feed — Friend requests, public profiles, real-time activity feed, and friends leaderboard with full per-user privacy controls.

• Complaint Management — Ticket system with SLA monitoring, auto-escalation, and real-time messaging between users and admins.

• Email Campaign Manager — Open/click tracking, unsubscribe system, ready-made templates, and a variables engine.

• Anti-Fraud & AML Monitoring — Real-time fraud detection with 8 configurable rules and a full alert workflow.

• Provably Fair Gaming — Cryptographic game fairness with player-controlled seeds and a public verification page.

• Achievements & Badges — 24 pre-configured achievements with automatic progress tracking and rewards.

• Leaderboard & Rankings — Daily / weekly / monthly boards with automatic prize distribution.

• Flash Sales & Limited Offers — Time-limited bonuses with countdown timers and claim limits.

• Winback & Anti-Churn — Automatic inactive-player detection with personalised bonus codes.

💱 Multi-currency Overhaul

The platform now correctly respects each user's own currency across every money flow. Before this release, a user with a non-USD currency who entered a "50" stake would have it converted at the site rate instead of their own — producing wrong values in high-volume cases. That is now fixed everywhere.

• Four pluggable currency rate providers — Free (open.er-api, no API key), ExchangeRate-API, OpenExchangeRates, and CurrencyLayer. Admins can test any provider and key before saving.

• Per-user rates across the whole platform — sports bets, crypto prediction, deposits, withdrawals, game launch, and every game handler (CreateJS, Pragmatic, Relax, Nolimit, Yggdrasil, Greentube, PG, V-Games, Sport Exchange) now use each session user's own currency and rate.

• Rate cache with 6-hour TTL and instant clearing when the provider or API key changes.

🛡️ Security — More Than 50 Fixes

Two full security audits were conducted covering every critical, high, medium, and low-severity issue. Highlights:

• Table game wins are now computed server-side instead of being accepted from the client.

• The settings API was exposing payment gateway credentials and SMTP passwords to any caller — this has been completely closed and all sensitive fields are now masked.

• Public API endpoints that were leaking OAuth secrets, API keys, and internal configuration to unauthenticated visitors have been closed.

• Closed a SQL injection hole in the Aviator engine.

• Closed an IDOR vulnerability on a chat endpoint that exposed full user records without authentication.

• Fixed deposit double-credit race conditions across every payment flow (Stripe, NowPayments webhook, NowPayments polling, saved cards).

• Fixed the sports bet auto-resolve double-payout issue.

• PG card games now use a secure cryptographic random generator instead of the predictable JavaScript default.

• Fixed the Aviator cash-out race condition that could let players cash out after the crash point.

• Fixed race conditions in chat tips, loyalty store redemptions, daily spin, and daily challenge claims.

• Session cache no longer stays valid for 5 minutes after a password change.

• Admin role assignment is now whitelisted — admins can no longer grant themselves or others arbitrary roles.

• Rate limiting added to wallet callbacks, the withdrawal endpoint, crypto prediction bets, and public chat endpoints.

• Six in-memory maps that were leaking indefinitely now have cleanup intervals.

• CSRF tokens are now consumed on validation instead of being reusable for the full hour TTL.

• Gamble round limits (Pragmatic Play, Greentube, CreateJS) all capped at 10.

• The referral endpoint no longer exposes player personal information.

• Prevented password hash and token leakage through broad user queries.

• …and around 30 more medium and low severity fixes covering XSS hardening, LIKE injection, encryption warnings, numeric parser strictness, WebSocket shutdown, and more.

💰 Bonuses, Cashback, VIP & Challenges

• Centralised bonus engine — wagering tracking across every game type, automatic expiry, withdrawal blocking with a clear message when an active bonus is not yet cleared, and an automatic welcome bonus on the first deposit.

• Centralised cashback — now works across all game types (slots, table, Aviator, crypto prediction, sports, and provider games). Rates pulled from VIP level settings with a daily cap per user and real-time balance notifications.

• VIP automation — levels are now read from the database, inactive players are auto-downgraded, and tier changes are delivered via WebSocket.

• Daily challenges — expanded from 4 to 8 types with 4 random challenges per user per day and targets that scale with VIP level.

🎰 Games & UI

• 4 new AM poker games — Deuces Wild, Fruit Poker, Tens or Better, and All American Poker. Each with its own server-side logic and paytable.

• V-Games free spins system for 4 bonus titles (BikiniParadise, QueenOfBounty, SongKranParty, TreasuresOfAztec) with scatter detection, re-trigger during free spins, and a buy-feature endpoint.

• Premium SVG icon system — emojis replaced across the platform with 35+ gradient-background icon variants.

• Per-user dynamic language — 36 places across the platform that were hardcoded to English or Arabic now correctly use each user's preferred language.

📦 Dependency Updates

• Updated mysql2 from 3.17.1 to 3.22.0

• Updated vite from 7.2.4 to 7.3.2 (patches 3 high-severity vulnerabilities: Path Traversal, server.fs.deny bypass, and WebSocket file read)

• Updated react from 19.2.3 to 19.2.5

• Updated react-dom from 19.2.3 to 19.2.5

• Updated axios from 1.13.5 to 1.15.0

• Updated dotenv from 17.3.1 to 17.4.1

• Updated ws from 8.19.0 to 8.20.0

• Updated tailwindcss from 4.1.17 to 4.2.2

• Updated @tailwindcss/vite from 4.1.17 to 4.2.2

• Updated tailwind-merge from 3.4.0 to 3.5.0

• Updated lucide-react from 0.564.0 to 1.8.0

• Updated react-icons from 5.5.0 to 5.6.0

• Updated @types/react from 19.2.7 to 19.2.14

• Updated @types/node from 22.0.0 to 25.6.0

• Patched path-to-regexp, picomatch, and rollup transitive vulnerabilities (DoS and path traversal)

• Result: 0 known vulnerabilities (was 4 high)