Payments
In pilotNo payout rests on one person.
A cashier with responsible gaming, KYC and terms checked before every deposit, withdrawals approved by one person and sent by another, refunds and chargebacks with four eyes, and reconciliation on a schedule.
What it does
A cashier with the checks inside
Before a deposit starts: geo, self-exclusion, deposit limits counting deposits in flight, KYC and terms. Every request carries an idempotency key.
Routing per country
Payment routes per operator and per country with priorities, credentials encrypted at rest, and tests and secret rotation from the console.
Withdrawals with two people
Whoever approves a withdrawal never sends it, at any amount, and above the platform threshold two different people approve. AML, bans and KYC are read again at approval and at dispatch.
Refunds and chargebacks
Every refund is requested by one person and approved by another before anything reaches the gateway. Chargebacks get a case with a hold, evidence and a two-person decision on a loss.
Reconciliation on a schedule
Open deposits are checked with the gateway every minute, withdrawals and refunds every five, and settlement statements line by line every hour.
- In pilot
Gateway adapters
Adapters for cards, Pix, OXXO, bank transfer and mobile money are built and run with sandbox credentials only. None is verified with a live provider yet.
By the numbers
Deposit status check
Every 60 s
Withdrawal and refund checks
Every 5 min
People to refund a deposit
2
by default
Details
Idempotent at every step
Ledger rows, deposit intents, withdrawal requests and adjustments each carry a key the database holds unique, with an HMAC fingerprint where a client sends the request. A refund is dispatched once, and gateways that accept our idempotency key receive it.
An unclear answer never releases money
A withdrawal is claimed before the gateway is called, and an ambiguous reply keeps the money locked until the gateway confirms. Payouts go only through the gateway: nobody can mark one as sent by hand.
A paid deposit whose webhook was lost is found by asking the gateway, and after 24 hours without an answer it goes to a person.
Two people, by design
Thresholds come from the platform, and an operator can only tighten them. The database refuses the same person approving and dispatching a withdrawal. A person may refund alone only up to a ceiling that is zero by default, and never in Slovakia, Brazil, Mexico or Nigeria.
A gate before real money
An operator cannot go live without a real gateway, verified webhooks and a restricted database role. Every payment check can only be switched off with a reason, and switching it off raises an alert.
- Not available: instant or automatic withdrawals, crypto withdrawals, currency conversion, and chargebacks or settlement reports read automatically from a live provider.
Contact
Tell us what you are building.
Markets, brands, verticals. We show you the platform with your case in mind.