GALAXY_AVIATOR
The classic crash format. Players watch the multiplier climb and cash out before the plane flies away.
- 4 bet slots per round
- Auto or manual cash-out
- Live social bet feed
B2B crash-game platform
Five provably-fair games and one small server-to-server API. Create a session, drop in an iframe and receive signed wallet webhooks. You can go live in days.
Game portfolio
The classic crash format. Players watch the multiplier climb and cash out before the plane flies away.
A high-velocity crash game with the same root-namespace engine, built for players who want quick rounds.
A step-by-step risk ladder. Every lane crossed raises the payout, and the player decides when to stop.
Crash mechanics with an arcade feel. It is light enough for casual players and fast enough for regulars.
Keno compressed into seconds-long draws, a natural cross-sell for lottery and numbers audiences.
How it works
Your backend calls POST /api/v1/session/create with your API key.
You receive a signed gameUrl. The player token is kept in the URL fragment so it never reaches your server logs.
Show the link in an iframe. The game reads the token once and removes it from the address bar.
Signed bet, win and refund webhooks debit and credit your player's wallet.
Platform
HMAC-SHA256 signatures, three retries with backoff, and a betId on every event so your handler can safely skip duplicates.
Grant free bets to one player or all of them, set wagering requirements and win caps, or award them automatically after losing streaks.
GGR, RTP, revenue trends, big wins, hourly heatmaps and webhook delivery health in one dashboard.
Suspensions and self-exclusion are checked at every session, connection, bet and game switch, and take effect immediately.
The server seed hash is published when betting opens and revealed when the round ends. Players can add their own entropy with client:seed.
Use the hosted iframe, or build your own UI on top of the Socket.IO real-time API.
For developers
The full integration guide covers authentication, wallet events, free bets, reports, WebSocket events and a go-live checklist, with code you can copy.
OPEN THE INTEGRATION GUIDEconst res = await fetch(`${GALAXY}/api/v1/session/create`, {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'X-Api-Key': process.env.GALAXY_API_KEY,
},
body: JSON.stringify({
externalPlayerId: 'player_123',
gameType: 'aviator',
launch: 'game',
}),
});
const { gameUrl, playerId } = await res.json();
<iframe
src="https://games.example.com/aviator#token=eyJ..."
width="100%" height="700"
allow="fullscreen"
sandbox="allow-scripts allow-same-origin
allow-popups allow-forms">
</iframe>
// verify X-Galaxy-Signature over the RAW body
const expected = 'sha256=' + crypto
.createHmac('sha256', WEBHOOK_SECRET)
.update(req.body).digest('hex');
switch (event.type) {
case 'bet': debit(event); break;
case 'win': credit(event); break;
case 'refund': credit(event); break;
}
FAQ
Three things: a server endpoint that requests a game link, a page with an iframe that shows it, and a webhook endpoint that updates your player's wallet when they bet or win. Galaxy Games handles everything else.
For every real-money action, Galaxy Games sends a signed POST to your webhook URL: bet (debit), win (credit) and refund (credit). Demo sessions never send webhooks.
Yes. The token is placed in the URL fragment after #, which browsers never send to servers. It expires after 4 hours, and the game removes it from the address bar after reading it.
97% RTP target, bets from 1 to 10,000, a max win of 500,000 per bet, ETB currency and a 20% revenue share. You can change all of them in the admin panel.
Yes. You can grant free bets to a single player, a list of players or all your active players. Set the amount, wagering requirement (1–20x), win cap and expiry, or turn on automatic bonuses after losing streaks.
Players can be active, suspended or self-excluded. Status is checked at session creation, on every WebSocket connection, every bet and every game switch. Suspended players are disconnected immediately.
Talk to our team about an operator account. You'll receive your API key, webhook secret and admin panel access.