RB7 Gaming Platform API

Introduction

Welcome to the RB7 Gaming Platform API. Our API provides seamless access to multiple game providers including casino games, slot machines, sports betting, and lottery systems.

API surface

RB7 exposes two integration directions.

Game APIs — endpoints your system calls on RB7.

Agent APIs — webhook paths you host so RB7 can call your backend when wallet or user events occur.

Authentication

RB7 issues three credentials per agent. Use Agent ID and Secret Key when your system calls Game APIs. Use Callback Key to verify webhook requests that RB7 sends to your Agent API endpoints.

Agent credentials

When onboarding, your team submits an agent name and webhook endpoint URL to RB7. After provisioning, RB7 returns the credentials below.

Game APIs — JWT with Secret Key

When calling RB7 Game APIs, sign a JWT with your Secret Key and send it in the Authorization header of each request.

JWT Token Structure

Your JWT token should contain the following payload:

// Install: composer require firebase/php-jwt

use Firebase\JWT\JWT;

$secretKey = 'YOUR_SECRET_KEY';
$agentId = '1000';
$userId = 1;

$payload = [
    'userId' => $userId,
    'agentId' => $agentId,
    'iat' => time(),
    'exp' => time() + (60 * 60 * 24) // 24 hours
];

$jwt = JWT::encode($payload, $secretKey, 'HS256');

echo $jwt;

// Install: npm install jsonwebtoken

const jwt = require('jsonwebtoken');

const secretKey = 'YOUR_SECRET_KEY';
const agentId = '1000';
const userId = 1;

const payload = {
  userId: userId,
  agentId: agentId,
  iat: Math.floor(Date.now() / 1000),
  exp: Math.floor(Date.now() / 1000) + (60 * 60 * 24) // 24 hours
};

const token = jwt.sign(payload, secretKey);

console.log(token);

Agent APIs — verify Callback Key

When RB7 calls your Agent API webhooks, it signs a JWT with your Callback Key and sends it in the Authorization header — the same header pattern as Game APIs, but signed with Callback Key instead of Secret Key. Your server must verify the token before processing the webhook body.

// Install: composer require firebase/php-jwt

use Firebase\JWT\JWT;
use Firebase\JWT\Key;
use Firebase\JWT\ExpiredException;

$callbackKey = 'YOUR_CALLBACK_KEY';
$authHeader = $_SERVER['HTTP_AUTHORIZATION'] ?? '';
$token = preg_replace('/^Bearer\s+/i', '', $authHeader);

try {
    $payload = JWT::decode($token, new Key($callbackKey, 'HS256'));
    // Token valid — process webhook payload
} catch (ExpiredException $e) {
    http_response_code(401);
    exit('Token expired');
} catch (\Exception $e) {
    http_response_code(401);
    exit('Invalid signature');
}

// Install: npm install jsonwebtoken

const jwt = require('jsonwebtoken');

const callbackKey = 'YOUR_CALLBACK_KEY';
const authHeader = req.headers.authorization || '';
const token = authHeader.replace(/^Bearer\s+/i, '');

try {
  const payload = jwt.verify(token, callbackKey);
  // Token valid — process webhook payload
} catch (err) {
  return res.status(401).send('Invalid signature');
}

Quick Start

Get started with the RB7 API in just a few steps:

GETList Games

Retrieve a list of available games from a specific game provider. Currently supports Slot type games.

$token = 'YOUR_JWT_TOKEN';
$baseUrl = 'https://game-api-staging.linexgaming.com';
$gameProvider = 'pg'; // PG Slot

$ch = curl_init($baseUrl . '/api/game/lists?game=' . $gameProvider);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: ' . $token,
    'Content-Type: application/json'
]);

$response = curl_exec($ch);
$statusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

if ($statusCode === 200) {
    $data = json_decode($response, true);
    print_r($data['data']); // Array of games
}

const axios = require('axios');

const token = 'YOUR_JWT_TOKEN';
const baseUrl = 'https://game-api-staging.linexgaming.com';
const gameProvider = 'pg'; // PG Slot

try {
  const response = await axios.get(`${baseUrl}/api/game/lists`, {
    params: { game: gameProvider },
    headers: {
      'Authorization': token,
      'Content-Type': 'application/json'
    }
  });

  console.log(response.data.data); // Array of games
} catch (error) {
  console.error('Error:', error.response?.data);
}

{
  "statusCode": 200,
  "data": [
    {
      "code": "63d77314c7b4ea8acf592874",
      "name": "Coffee Or Me Bingo",
      "type": "arcade_bingo",
      "active": true,
      "order": 1,
      "imageUrl": "https://download.x-gaming.com/assets/arcade/coffeeormebingo/banner.png"
    }
  ],
  "timestamp": "2022-07-07T15:57:37+00:00"
}

GETLaunch Game

Get the game URL to launch and display the game in an iframe or webview.

{
  "statusCode": 200,
  "data": "https://www.sai.slgaming.net/app.aspx?username=xxxx&token=F5277F0AE1D5009E67651054F0E4AE4A&lobby=A7720&lang=th&returnurl=",
  "timestamp": "2022-07-07T15:57:37+00:00"
}

GETTransaction Detail

Retrieve detailed information about a specific game transaction including bet amount, win amount, and other transaction-specific data.

$token = 'YOUR_JWT_TOKEN';
$baseUrl = 'https://game-api-staging.linexgaming.com';
$game = 'rb7sportbook';
$transactionId = 'BET123456';

$ch = curl_init($baseUrl . '/api/game/transaction/detail?game=' . urlencode($game) . '&id=' . urlencode($transactionId));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Authorization: ' . $token,
    'Content-Type: application/json'
]);

$response = curl_exec($ch);
$statusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

if ($statusCode === 200) {
    $data = json_decode($response, true);
    print_r($data);
}

const axios = require('axios');

const token = 'YOUR_JWT_TOKEN';
const baseUrl = 'https://game-api-staging.linexgaming.com';
const game = 'rb7sportbook';
const transactionId = 'BET123456';

try {
  const response = await axios.get(`${baseUrl}/api/game/transaction/detail`, {
    params: { game, id: transactionId },
    headers: {
      'Authorization': token,
      'Content-Type': 'application/json'
    }
  });

  console.log(response.data);
} catch (error) {
  console.error('Error:', error.response?.data);
}

{
  "statusCode": 200,
  "data": {
    "bet_id": "BET123456",
    "bet_amount": 100.00,
    "win_amount": 250.00,
    "status": "completed",
    "url": "https://provider.com/bet/BET123456"
  },
  "timestamp": "2022-07-07T15:57:37+00:00"
}

Agent APIs

Agent APIs are endpoints that your system must implement and expose. RB7 calls these webhook paths on your side when wallet or user events happen during gameplay. This is the opposite direction of Game APIs, where your system calls RB7.

Agent onboarding

Before integrating Agent APIs, RB7 must provision your agent account. Your team provides the details RB7 needs to register callbacks; RB7 returns the credentials used on both sides of the integration.

POSTUpdate User Credit

Update User Credit is a webhook endpoint that the agent must implement for RB7 to call. When a game transaction changes player credit, RB7 posts to this path on your system. If the user ID is valid, accept the request and adjust credit by the balance amount (positive or negative). To reject a request, return HTTP status 400 or 500 only.

{
  "success": true
}

GETList Users

Retrieve a list of all users under your agent account.

{
  "data": [
    {
      "id": 1,
      "username": "test",
      "firstName": "name",
      "lastName": "lastname",
      "credit": 1000.50
    }
  ]
}

GETGet User By ID

Retrieve detailed information about a specific user.

{
  "id": 1,
  "username": "test",
  "firstName": "name",
  "lastName": "lastname",
  "credit": 1000.50
}

Game Providers

List of supported game providers and their codes.

Error Codes

Common HTTP error codes and their meanings in the RB7 API.