Provably fair n=0

Every round's outcome is determined by HMAC-SHA256(serverSeed, clientSeed:nonce). The server seed is committed (hashed and shown) before each round and revealed when you rotate.

How verification works
  1. Before each round, the server seed is hashed (SHA-256) and shown — that's a binding commitment.
  2. The outcome of every round is HMAC-SHA256(serverSeed, clientSeed:nonce) interpreted per game rules.
  3. When you rotate, the previous server seed is revealed. Hash it yourself — it must match the prior commitment. Then replay any past nonce to verify the outcome.

Free practice · no real money

Plinko

Balance1,000
Drop0
Place a bet to drop

Want to play plinko for real where it is legal? Reviewed casinos →

Practice only. No deposits or real cash.

How plinko works

Each peg sends the ball left or right with equal probability. The final slot determines your payout.

Multipliers vary by risk and row count. Higher risk = more variance, with bigger top-end and smaller centre wins.

Each L/R bounce uses crypto.getRandomValues for entropy.