Frequently Asked Questions

Provably Fair

Provably Fair: How We Guarantee Every Unbox Is Legit

At Supabox, trust is non-negotiable. Every spin, every prize, every outcome is powered by a Provably Fair system—so you can enjoy the thrill of unboxing, knowing the result is locked in before the animation even begins.

What Is Provably Fair?

Provably Fair is a cryptographic system that proves your outcome was pre-determined and tamper-proof before the unboxing starts.

Here's how it works:

• Before your spin, our system generates a random number using a secure method:
  crypto.randomBytes(32)


• This number becomes a float between 0 and 1, which is matched against a fixed prize table.


• For example:
  
  
  
  • 0.00–0.40 → Prize A
  
  
  • 0.40–0.70 → Prize B
  
  
  • 0.70–0.90 → Prize C
  
  
  • 0.90–1.00 → Prize D
  
  
  
  


• The outcome is sealed using:
  
  
  
  • A hashed server seed
  
  
  • A client seed from your browser
  
  
  • A nonce (your spin count)
  
  
  
  

This combination locks in your result before anything is displayed on screen. After unboxing, we reveal all values so you can check the fairness yourself.

In short: we can't manipulate the outcome, and you can prove it.

Why It Matters

• The result is determined before any animation plays


• Visual effects are just that—visual


• Odds are visible, fair, and fixed


• Every outcome is independently verifiable

Mystery boxes should be thrilling—but they should also be trustworthy.

How to Verify Your Result

Go to your Unboxing History, click any box, and you'll find:

• Server seed and hash


• Client seed


• Nonce


• A link to verify your result using these values

No coding or crypto knowledge required.

Provably Fair FAQ

AML Policy

Anti-Money Laundering (AML) Policy

At Supabox, your security is our priority. We are committed to protecting our platform, users, and partners by actively preventing Money Laundering ("ML"), Terrorist Financing ("TF") and other fraudulent and/or criminal activity.

This Anti-Money Laundering ("AML") Policy outlines how we comply with the relevant regulatory frameworks to ensure that Supabox is not used for unlawful financial conduct.

Our Commitment

Supabox maintains strict controls across all areas of operations to detect and deter any misuse of our services.

We are committed to maintaining the highest standards of ethical behaviour and integrity in all business operations. We are steadfast in our commitment to adhering to all applicable AML/Counter Terrorist Financing ("CTF") laws and regulations, and to proactively identifying, assessing, and mitigating any risks associated with ML and TF.

We will maintain vigilance in monitoring and reporting suspicious activity, fostering a culture of compliance and accountability within our organisation. We are dedicated to continuously improving our AML/CFT controls and procedures to ensure our commitment to a safe and secure environment.

Applicable Laws and Regulations

We follow global AML standards and require all users and partners to comply with our Policy.

Our AML practices are aligned with:

• EU Directive 2024/1640 (AMLD VI) on the prevention of ML and TF;


• EU Directive 2019/1153 on the use of financial information;


• EU Regulation 2024/1624 (AMLR);


• EU Regulation 2023/113 (TFR) on the Transfer of Funds;


• Financial Action Task Force ("FATF") guidelines; and,


• Other relevant and applicable legislation.

Definitions

Money Laundering

ML is the act of disguising the origin of illegally obtained money to make it appear legitimate. It includes converting, transferring, or hiding assets derived from criminal activity.

There are three common stages in the laundering of money, which frequently involve numerous transactions. These stages are:

• Placement: The introduction of the benefit of criminal conduct into the financial system, whether by cash deposit or otherwise;


• Layering: Separating illicit proceeds from their source by creating complex layers of financial transactions designed to disguise the source of money, subvert the audit trail and provide anonymity; and,


• Integration: Creating the impression of apparent legitimacy to criminally derived wealth. In situations where the layering process succeeds, integration schemes effectively return the laundered proceeds back into the general financial system and the proceeds appear to be the result of, or connected to, legitimate business activities.

Terrorist Financing

TF is the process of raising, managing, and providing funds to terrorists or terrorist organisations. The goal of TF is to provide terrorists with the resources they need to plan, execute, and sustain their operations.

Customer Due Diligence

Initial Due Diligence

To keep Supabox secure, we follow Customer Due Diligence ("CDD") procedures, otherwise known as Know Your Customer ("KYC") procedures. At the point of initial registration, we will request at a minimum:

• Full legal name;


• Date of Birth; and,


• Country of residential address.

Customer Verification

Further to this, on a Risk Based Approach ("RBA") Supabox may request:

• A government-issued photo ID (passport, driver's license, or national ID)


• A recent utility bill or bank statement (issued within the last 3 months)


• A photo of your ID next to a handwritten note that includes "Supabox.com"

In certain cases, we may also request additional information or conduct Enhanced Due Diligence("EDD") for higher-risk customers.

Ongoing Monitoring

Supabox continuously monitors all customers and activity on the platform to detect irregular transactions or behaviour. We retain relevant records and cooperate with legal authorities where required.

If we suspect that an account is involved in fraudulent or unlawful activity, we may suspend or close it without prior notice and report it to the relevant authorities.

Employee Training and Awareness

All employees will receive regular training on AML regulations, the recognition of suspicious activities, and the relevant reporting standards.

Training will be updated to reflect changes in legislation, regulatory guidance, and/or the emergence of new ML threats and techniques.

Reporting Suspicious Activity

Employees are required to immediately report any suspicious activities or transactions to the designated Money Laundering Reporting Officer ("MLRO") within the company.

The MLRO is responsible for assessing the reported information and, if appropriate, for filing a Suspicious Activity Report ("SAR") to the Unit for Combating Money Laundering ("MOKAS").

Record Keeping

All financial transactions and customer-related information obtained through CDD measures will be retained for a minimum period of five years to comply with legal and regulatory requirements.

Compliance and Monitoring

Regular audits and reviews will be conducted to ensure compliance with this Policy and the effectiveness of the AML measures in place.

Non-compliance with this Policy by any employee will result in disciplinary action and could lead to termination of employment.

Policy Review & Update

This Policy will be reviewed annually or as needed to reflect changes in legislation, regulatory requirements, or company operations.

If you have questions about this Policy or our CDD procedures, please contact our support team.