DD-L I-GAMINGCASINO

BRL

⚡ ATTENTION, OPERATORS!

Experience the proprietary D-L games

Demo environment to test seamless wallet, deposits, withdrawals and rounds. Starting balance R$ 100.000 — 100% mockup.

What is a seamless wallet? It's a casino-integrated wallet: the player's balance automatically transfers between the operator's site and games via iframe, without redirects or manual deposits within each game.

⚡ INTEGRATION IN 5 MINUTES Live Sandbox · No registration🌐 38 Languages

⚡ READY TO PLAY!iframetokenembed

🎰

🐯

D-L Jackpot Mockup

438.523.575,66

🦫

🎮 New game every 3 weeks · 💎 Seamless Wallet integrated in minutes · ⚡ Configurable RTP per operator · 🔒 100% demo environment · 🎰 Play Caramelo da Sorte, Capivara Milionária and more

DEMO / MOCKUP. No real money is transacted. Deposits, withdrawals, bets, wins, and losses are simulated.

Popular

20 games

PROPRIETARY

Proprietary Games D-L

Own mathematical engine, configurable RTP, administrative dashboard, quick integration, seamless wallet, limit control, and reports.

Configurable RTP

Adjustable Volatility

Complete Dashboard

Seamless Wallet

Auto Cashout

API Integration

Round History

Demo Environment

Bet Limits

Reports per operator

Ready to integrate proprietary games?

Test the full experience in a demo environment: games, seamless wallet, mockup deposits, mockup withdrawals, and dashboard.

Request integration Talk to the team

Operator Panel — DEMO-OP-001

Configure games, bill, audit, and monitor security in one place.

Session not initialized

Security

End-to-end Security

Wallet centralized in the portal. Games only execute rounds. HS256 signed tokens, anti-replay by JTI and Origin allow-list in each request.

Launch token HS256

HMAC-SHA256 signed, TTL 60s, audience per game, payload with balance/operator/player. Rejects invalid signature, wrong audience or expired.

Anti-replay (JTI)

Each token has JTI ≥16 random bytes consumed on INSERT into dl_authorize_jti table. Reuse responds 401 jti_replay.

Origin allow-list

/api/public/dl/* endpoints check Origin against fixed list (*.i-gaming.co, game hosts, Lovable previews). Violation → 403 origin_not_allowed.

RLS + RBAC

All tables in public with Row Level Security. Roles stored in a separate user_roles, validated via has_role() SECURITY DEFINER. Server functions requireSupabaseAuth + role check.

Wallet single source of truth

Balance, debit, and credit live in the portal. Games do not directly touch the wallet; they use seamless/bet, seamless/win, and seamless/rollback with idempotency by round_id.

Idempotency

/start requires Idempotency-Key (≥8 chars); /cashout is idempotent by roundId. Retries return the same win, without double charging.

Rate limit per player

10 starts/min per token and 30 starts/min per synthetic_user_id; 60 reveals/10s. Excess → user_rate_limited.

Game-isolated Secrets

Each integration has its own secret (IGAMING_API_TOKEN_<SLUG>) shared only between the portal and the corresponding game. Compromise of one game does not leak others.

Immutable Audit

Every config change, activation/deactivation, role change, and security event logs to audit_logs with operator, IP, and UA. Exportable in CSV.

Auditoria nível bancário

Cada centavo rastreado. Fraud detected before loss.

Toda chamada da Seamless Wallet é assinada, idempotente e gravada em um ledger append-only. Operadores e admins recebem alertas automáticos sobre padrões anômalos — rollback elevado, replays, spikes por usuário, latência degradada e variação anormal por token.

Ledger imutável

Cada débito, crédito e rollback grava hash, idempotency key, status HTTP e latência em wallet_transactions — append-only, com saldo antes/depois calculado por token.

Extrato com saldo cronológico

Página /wallet-audit reconstrói o saldo do operador transação a transação, igual extrato bancário, com scroll infinito sobre 100% das movimentações.

Indicadores em tempo real

Taxa de rollback, falhas, p95 de latência, net Δ e variação por token — calculados em janelas de 1h a 7d sem amostragem.

Alertas anti-fraude

Detecção automática de rollback alto, spikes por usuário, latência degradada, tokens com z-score |≥2.5| e padrões de exploit.

Idempotência verificada

Replays e chaves de idempotência reutilizadas com bet/round/valor divergentes são sinalizados — bloqueia double-spend e tentativas de manipulação.

Trilha por hash

Token, round, bet, user e idempotency key são copiáveis e cruzam com os logs do jogo, permitindo perícia round-a-round.

Acesso restrito e logado

Somente operador dono ou admin via Auth + RLS. Cada acesso ao extrato passa por requireSupabaseAuth com bearer validado server-side.

Reconciliação contínua

Webhooks de reconcile e workers diários comparam o ledger interno com o operador externo, abrindo ticket automático em qualquer divergência.

Public API

D-L i-Gaming Integration

Base URL: https://i-gaming.co/api/public/dl/<action>. Session endpoints require header x-dl-session: <token>

Public API available

We have a complete API for B2B integration. Log in to view the full documentation with endpoints, request, and response examples.

Attention: always use over HTTPS. The header x-dl-session authenticates operator calls; never expose the token on the public frontend.

Helpers de integração

Tudo pra integrar rápido

Node/TS, Python e PHP com HMAC signing, retries e idempotency-key nativos.

Quickstarts copy-paste

Laravel, NestJS e FastAPI — wallet callbacks completos + launch token em um arquivo.

Sandbox local (Docker)

Wallet mock + Postgres + Adminer + MailHog espelhando produção. `docker compose up`.

Playground de webhooks

Dispare bet.settled / invoice.paid pro seu endpoint e veja a resposta em tempo real.

Especificação completa — importe no Postman/Insomnia ou gere seu próprio SDK.

Playground interativo

Teste os endpoints direto no navegador com seu token, sem escrever código.

Postman collection

Coleção pronta com todas as rotas, exemplos e variáveis de ambiente.

Troubleshooting HMAC

Guia passo a passo para diagnosticar `bad_signature`, timestamp skew e nonce replay.

Ver página de integração Documentação completa