Provably-fair dice
The server commits to a hashed dice seed before the match and reveals it at the end. Any player can recompute every roll and prove nothing was rigged.

If Supercell made backgammon

Rebuilt to a AAA bar — provably-fair dice, living Mediterranean worlds and real competition.
Free to play · iPhone · iOS 18+ · landscape-first
Gameplay
Juicy game feel — ceremonies, haptics, particles — over a warm Mediterranean art direction. 100% rendered, bespoke art.

The Santorini table — walnut, marble and carved dice, with the FAIR seal on every match.
Three pillars
The 5,000-year-old game, rebuilt with the craft of a billion-dollar title — and the fairness of modern cryptography.
The server commits to a hashed dice seed before the match and reveals it at the end. Any player can recompute every roll and prove nothing was rigged.
Climb a ladder of Mediterranean tables — a warm Tangier café up to the celestial Orion summit — each with its own materials, light and seasons.
A season pass, daily quests, a collectible card album, clubs and a live leaderboard. There's always a reason for the next game.
Living worlds
Six worlds, each with locked materials, light and seasons — from a warm Tangier café to the obsidian Orion table.
Where every voyage begins.
Classical calm, marble and gold.
Velvet, lacquer, high stakes.
Glass towers and golden light.
The signature sunset table.
The celestial summit.
The meta

Two reward tracks, every season — free and premium.

A ranked, skill-rated ladder that never stops.

Promote from Driftwood all the way to Orion.
Provably-fair dice
Most dice games ask for your trust. Orion gives you proof — the same commit-and-reveal cryptography used to keep online systems honest.
Before the first roll, the server generates a secret seed and sends you its SHA-256 hash — a sealed promise it can't take back.
sha256(seed) → 9f2a…c7Every die is derived from that seed with HMAC-SHA256. The outcome was fixed at commit time — no roll can be re-drawn to help anyone.
roll = HMAC(seed, nonce)At the end, the server reveals the seed. Your device re-hashes it and checks it against the opening commitment. Match? Provably fair.
sha256(seed) == 9f2a…c7 ✓Rolls are computed by an isolated backend and validated by a separately-tested rules engine. No third-party services touch your game.