A full-stack, server-authoritative poker platform with 7 game variants, tournament management, payment processing, and regulatory compliance. Deploy in weeks, not years.
Six core systems working together — game engine, tournaments, payments, compliance, marketing, and administration.
Server-authoritative architecture with a 10-state finite state machine. Cryptographic card shuffling (Fisher-Yates + crypto.randomInt). Mutex-protected action processing eliminates race conditions entirely.
Multi-table tournaments, Sit & Go with auto-replenishment, and Satellites with full ticket lifecycle. Automatic table balancing, final table formation, rebuy/re-entry, and up to 50 payout positions.
Multi-balance architecture with Serializable transaction isolation. Stripe, Coinpayments, bank transfer, and manual processing across 9 currencies including BTC and ETH. Dead letter queue for failed operations.
35-page back-office with real-time dashboard, table and tournament management, user CRUD, financial analytics, rake reporting, compliance tools, marketing campaigns, CMS, and 21 feature toggles.
Six strategy profiles with multi-variant hand evaluation, position-aware play, and pot odds calculation. Human-like timing with 5-level decision complexity and variance to prevent detectable patterns.
10-level affiliate referral system, agent sub-operator networks, event-triggered bonus engine, promo codes, email campaigns with audience targeting, and a CMS with block editor for content pages.
Every variant fully implemented with correct dealing, evaluation, turn order, and showdown logic.
2 hole cards, 5 community cards. Best 5 of 7 wins. The world's most popular variant.
4 hole cards with strict 2+3 rule. Engine checks all 60 possible combinations per hand.
Split pot between best high and qualifying low (8-or-better). High scoops if no low qualifies.
2s–5s removed. Flush beats full house. A-6-7-8-9 is the lowest straight.
No community cards. Up to 7 individual cards across 5 betting streets with face-up/face-down dealing.
Same dealing as Stud with split pot. 8-or-better qualifying low. Shared low evaluator engine.
Automatic variant rotation with configurable hands per game (default 8). Betting limits switch per variant. Custom operator-defined rotations supported with full cycle tracking.
Server-authoritative design means zero client-side game state manipulation. Every action validated, every transaction isolated.
All game logic runs server-side. Clients send actions; the server validates state, turn order, and bet legality before applying.
All balance mutations use PostgreSQL Serializable Snapshot Isolation with automatic retry — eliminating race conditions on concurrent updates.
Critical WebSocket events are tracked, acknowledged, and retried. Sequence numbers detect gaps on reconnect. 5-minute reconnection window.
Multi-stage Docker builds, Kubernetes health probes, circuit breakers, Redis horizontal scaling, automated backups, and graceful shutdown.
// 10-state finite state machine enum GameState { WAITING → STARTING → PREFLOP → FLOP → TURN → RIVER → SHOWDOWN → COMPLETE } // Mutex-protected action pipeline async processAction( playerId: string, action: PlayerAction ) { await this.mutex.acquire() this.validateGameState(action) this.validateBetAmount(action) this.applyAction(action) } // Cryptographic shuffle (not Math.random) const deck = fisherYatesShuffle( cards, crypto.randomInt )
Enterprise-grade security with full KYC, AML, sanctions screening, fraud detection, and audit trail. Built for licensed markets.
5-minute access tokens with rotating refresh tokens. HttpOnly, Secure, SameSite=Strict cookies.
Encryption at rest for TOTP secrets and payment API keys. Unique IV per operation.
Identity, proof of address, and selfie verification with in-panel document review.
Collusion, multi-accounting, chip dumping, and bot activity detection with investigation workflow.
Anti-money laundering review queue. Sanctions screening with confidence scoring.
50+ granular permissions with group-level overrides and privilege escalation prevention.
HTTP API, database-backed login tracking, and per-user WebSocket limits. Survives restarts.
Mandatory for admins. 10 bcrypt-hashed backup codes per user. Rate-limited with account lock.
Account deletion with 30-day grace period. Sensitive field redaction in all logs.
One-time license fee with ongoing support. Building equivalent functionality in-house costs $1.5M+ and 18–24 months.
An apples-to-apples comparison of building equivalent functionality in-house versus licensing Poker Engine.
| Cost Category | Build In-House | License (Professional) |
|---|---|---|
| Engineering team (18–24 mo) | €1,200,000+ | — |
| Domain expertise & consulting | €125,000 | — |
| License fee (annual) | — | €75,000 |
| Support & updates (Year 1) | €180,000 | Included |
| Infrastructure (annual) | €24,000 | From €120 |
| Total Year 1 | €1,529,000+ | €75,120 |
| Time to market | 18–24 months | 24–48 hrs* |
| Test coverage at launch | Unknown | 8,400+ tests |
Have questions about Poker Engine? We reply fast.
Chat Now