Player Account Management
/players, /auth/*
Registration, JWT authentication (access + refresh tokens), player profiles with KYC status and VIP tier tracking.
Endpoints
POST /players
GET /players/{id}
POST /auth/login
POST /auth/refresh
Event-Sourced Wallet
/wallet/{player_id}/*
Append-only event log: BET, WIN, DEPOSIT, WITHDRAWAL, BONUS_CREDIT, BONUS_DEBIT. Balance computed from events, never updated directly.
Endpoints
GET /wallet/{id}/balance
POST /wallet/{id}/transaction
GET /wallet/{id}/history
Game Aggregation Layer
/gal/*
Game sessions, server-side CSPRNG bet resolution, RNG seed hash audit trail. Integrates with wallet for atomic bet/win.
Endpoints
POST /gal/launch
POST /gal/bet
GET /gal/sessions/{id}
Compliance (KYC / AML)
/compliance/*
KYC document submission and operator verification, AML velocity-based alerts with risk scoring (low/medium/high/critical).
Endpoints
POST /compliance/kyc/{id}/submit
POST /compliance/kyc/{id}/verify
GET /compliance/aml/alerts
POST /compliance/aml/alerts/{id}/review
GET /compliance/aml/risk/{id}
Responsible Gaming
/responsible-gaming/*
Player deposit limits (daily/weekly/monthly), self-exclusion with enforced cooling-off, reality checks with net position tracking.
Endpoints
POST /responsible-gaming/limits/{id}
POST /responsible-gaming/exclude/{id}
GET /responsible-gaming/status/{id}
Game Control
/game-control/*
Server-side RTP configuration (80-99%) per game, aggregate statistics, actual vs target RTP deviation tracking.
Endpoints
GET /game-control/rtp
PUT /game-control/rtp/{slug}
GET /game-control/stats