Integration

Embedding in an iframe

The game link returned by POST /playGame.do can be opened in a browser tab or shown inside an <iframe> on your site. Browsers show the iframe only if your site is on the project's list of allowed iframe origins; this page explains how to set it.

How it works#

Every game page is served with a Content-Security-Policy: frame-ancestors header. It always allows the platform's own pages and adds the origins configured for your project. A page embedded from any other origin is blocked by the browser (a blank frame with a console message about frame-ancestors).

<iframe src="LINK_FROM_PLAYGAME" allow="autoplay; fullscreen" style="border:0;width:100%;height:100%"></iframe>

Rules for the list#

• Up to 16 origins per project.
• Each entry is an https:// origin: scheme, host and optional port, nothing else. A bare host (casino.example) is accepted and stored as https://casino.example; a trailing / and letter case are normalised; duplicates and empty lines are dropped.
• Refused with INVALID_FRAME_ORIGINS: more than 16 entries, wildcards (*.casino.example), other schemes (http://), paths, queries, fragments, credentials, hosts without a dot (localhost) and entries over 253 characters.
• A list saved in the admin panel replaces the one set in the platform configuration of your project; an empty saved list allows no site.
• Subdomains are separate origins: list https://casino.example and https://www.casino.example both if you use both.

Where to set it#

In the admin panel open Projects → your project → Integration → Iframe domains, enter one origin per line and save. It can be changed by the platform owner and by your staff with the manage credentials permission; other staff can only view it. The change applies to new game page loads within about 15 seconds, and every change is recorded in the audit log.

The same list is available through the admin API (GET and PUT /admin/api/v2/projects/{partner}/frame-origins, body {"origins": ["https://casino.example"]}), which needs an admin session.

Errors#

See also#

• Game launch, Admin panel