Quote from: CryCrptoCry on December 28, 2018, 04:21:13 PM

I have a simple question in my mind. What are the possible ways in which any provably fair dice gambling website like Bitsler and Primedice can cheat players.

Excellent question. This is the exact sort of question that needs to be asked.

So the very first, and most important thing that needs to be verified is if the provably fair algorithm itself makes sense. I can't remember the scheme bitsler uses (and the site doesn't appear to be working for me at the moment to take a quick look) but primedice uses the sort of "industry norm" scheme which I believe was originally made by just-dice.com (if memory serves..).

I can't really offer proof it's sane, but I can assure you it is. There's been a lot of provably fair schemes from shitty sites that don't make any sense, like those incompetent enough to use md5 (wtf??) or those malicious-enough to insert information directly under their control (999dice did this with the "bet id") or produce a house edge larger than advertised.

So let's just assume that PrimeDice's scheme is fair (which is is Grin

) we need to ask "how can they still cheat" and we can come up with a list:

1) They don't credit your deposit
2) They don't process your withdrawal
3) They don't properly adjust your balance according to the bets
4) They give you a maliciously picked client seed (or alter the code that generates them to do so)
5) The bet results don't match what they should (i.e. altered bet amounts / targets / outcome )

So 1) and 2) are the most obvious and easiest to verify (you're probably already doing this without paying much attention). 3) Is a little annoying to do, but pretty simple maths. 4) Is the hardest to verify, I personally would never even try bother. Just just always pick your own client seed, so you don't need to worry about if their generation is rigged or not. And 5) is the most annoying, you need to record all your bets, your client seed, and the server seed hash (before you started betting...) and then match them all.

If you do all that, and it all checks out -- then you are guaranteed you weren't cheated. Hence the site is "provably fair".

But if we're discussing weaknesses: The biggest weakness by far is that if you are cheated, you can't prove it (it's not non-repudiable). It would be 100% your word against theres, and people would tend to err on not believing you.

The good news though is, none of the serious sites would even consider scamming you. I've been following the space closely (and a former casino operator) and haven't seen a single credible scam accusation against PD in the last ~4 years. From a business point of view it just wouldn't make much sense.