Security

Your Security Is Our Priority
Royal Casino Onxtra employs multiple layers of security to protect your account, your funds, and your personal data. Here's how we keep you safe.
TLS/SSL Encryption

All data transmitted between your browser and our servers is encrypted with TLS 1.3. Your connection is always secure.

Passwordless Authentication

No passwords to steal or guess. We use one-time email codes (OTP) for every login — fresh, unique, and expires in 5 minutes.

Rate Limiting

Automated request throttling protects against brute-force attacks, credential stuffing, and denial-of-service attempts.

Bot Protection

Cloudflare Turnstile CAPTCHA challenges on authentication forms prevent automated attacks and bot registrations.

Data Protection

We take comprehensive measures to protect your personal and financial data:

  • All sensitive data is encrypted in transit and at rest
  • Database access is restricted and monitored
  • No passwords stored — passwordless architecture eliminates password breach risk entirely
  • Session tokens are securely managed with automatic expiration
Payment Security

Your financial transactions are protected at every step:

  • Payments processed through a PCI-compliant payment gateway
  • Webhook signatures verified with HMAC-SHA256 to prevent tampering
  • Idempotent deposit processing prevents double-crediting
  • Wallet transactions use database-level locking to prevent race conditions
Infrastructure Security

Our platform is built on secure, modern infrastructure:

  • Content Security Policy (CSP) headers prevent cross-site scripting (XSS)
  • Strict security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy)
  • Rate limiting at application and infrastructure levels
  • Regular security audits and dependency vulnerability scanning
Game Integrity

Our games are protected against manipulation and abuse:

  • Provably fair algorithms using SHA-256 and HMAC-SHA256 cryptographic hashing
  • Server seeds committed before gameplay — outcomes cannot be altered retroactively
  • Risk management controls: daily win caps, dynamic max bets, payout limits
  • All game outcomes are independently verifiable on our Provably Fair page
Responsible Disclosure

If you discover a security vulnerability, please report it responsibly to security@onxtra.com. We take all reports seriously and will investigate promptly. We ask that you do not publicly disclose vulnerabilities until we have had an opportunity to address them.

Security questions or concerns? Contact

security@onxtra.com