Security and fair play

1. Provably fair dealing

Every hand on Riverline is dealt from a shuffle produced by hardware entropy and a ChaCha20 stream, committed to before the hand begins and revealed after it ends. You can verify any hand you played at /verify: the page recomputes the shuffle from the published seed and shows you it matches the cards you saw. Our RNG is submitted for independent certification; the certificate will be linked from this page when issued.

We never see or influence the order of the deck, and neither does any operator skin.

2. Prohibited software and assistance

The following are prohibited at every real-money table and, at our discretion, at play-money tables:

• Real-time assistance (RTA): any solver, chart, equity or range tool consulted while a hand is in progress, whether software, a website, a document or another person.
• Bots and automation: any software that acts, folds, sits, or selects tables for you, or that plays alongside you.
• HUDs and tracking overlays at the table. You may review your own hand histories after the session with any tool you like.
• Seating and table-selection scripts, including tools that alert you when specific players sit or leave.
• Automated note tools that share or import notes on players.
• Remote-desktop, screen-sharing or virtual-machine software running while you play, and multi-device controllers that mirror input.
• VPNs, proxies or location spoofing to evade jurisdiction checks.
• Data mining of hands you were not dealt into.

Riverline's client collects limited integrity signals (input timing, window focus, automation flags) while you are seated. What we collect is listed in the Privacy Policy. We do not scan files outside the client.

3. Collusion and soft play

Two or more players acting together against the table is collusion. It includes sharing hole cards by any channel, coordinating actions, dumping chips, agreeing not to bet against each other ("soft play"), coordinated sit-outs, whipsaw raising, and any agreement about bounties in knockout events. Legitimate exceptions: checking down a hand when a third player is all-in and everyone else is heads-up against them is normal play.

4. Multiple accounts, ghosting and account sharing

One person, one account. Creating or using more than one account, playing on another person's account, allowing anyone else to play on yours, or receiving advice from a spectator or another player during a tournament ("ghosting") are all prohibited. Staking arrangements must be declared through the client's backing feature where offered; undeclared financial links between players at the same table are treated as collusion.

5. Predatory practices

• Bum-hunting: repeatedly joining tables only when specific players are seated and leaving when they leave. Persistent patterns are sanctioned.
• Hit-and-run and ratholing are governed by House Rules §3.4–3.5.
• Buttoning and queue abuse: manipulating seating to avoid blinds.

6. Chip dumping and money laundering

Deliberately losing chips to another player, at any stake, is chip dumping. We treat it as both a fair-play breach and a financial-crime signal, and we report suspicious transactions where the law requires. All deposits and withdrawals are screened; withdrawals go only to addresses you have verified, and in the same asset you deposited.

7. How we detect

Riverline runs an integrity pipeline on every hand: timing distributions, action entropy, solver similarity, co-seating graphs, net transfer between pairs of players, funding clusters, device and session shape. Chat is classified for collusion language. Signals open a case for a human integrity analyst. We never ban on a score alone: every sanction below a warning is reviewed by a person with the hand histories in front of them.

8. Sanctions

In rising order, depending on severity and history:

1. Warning
2. Removal of rewards and bonuses earned during the period concerned
3. Temporary suspension
4. Permanent closure across the whole Riverline network
5. Confiscation of funds

Confiscated funds are returned to the players who were harmed where they can be identified; Riverline does not keep them. Where victims cannot be identified the funds go to the bad-beat and freeroll pool.

We publish quarterly transparency figures: cases opened, accounts closed, amounts returned to players.

9. Appeals

Every sanction can be appealed once, in writing, within 14 days. Appeals are reviewed by a different analyst than the one who decided the case. The outcome of an appeal is final.

10. Reporting

If you suspect a player, report them from the table menu ("Report player") or write to integrity@riverline.example with the hand number. Reports are confidential; we never tell the reported player who reported them.

11. Bug bounty

If you find a security or fairness flaw in Riverline, tell us first: security@riverline.example. We pay for responsibly disclosed findings that affect money, cards or accounts, and we do not take action against researchers who follow the disclosure rules on that page.