₿Luckotto

How Luckotto works

Game guide

Start with a ticket

Ticket basicsA ticket is a set of tiles from 1-36

Every ticket has exactly 6 tiles. Ordinary users buy tickets from resellers, who fund Luckotto tickets from confirmed Bitcoin balance; at draw time, Luckotto chooses the winning tile set.

Example ticketFixed-size ticket: 6 tiles
  1. 01
    Fund reseller balance

    Resellers deposit Bitcoin before they can buy Luckotto tickets.

  2. 02
    Create ticket

    The reseller API creates a ticket and spends sufficiently confirmed balance into that ticket atomically.

  3. 03
    Pick 6 tiles

    At draw time, 6 tiles are drawn from public checkpoints, then the winner checkpoint selects the winning live ticket by weight.

Cumulative jackpotEvery ticket adds to the same round jackpot

The jackpot is cumulative: every ticket grows the current open round's jackpot. It keeps growing until the weekly draw resolves the winning ticket.

Round jackpotShared by all resellersFunded ticket weight only.
Draw at a high levelThe draw reveals 6 winning tiles

At the weekly draw, Luckotto uses the draw block hash and committed entries to draw 6 tiles from public checkpoints. Each eligible tile bucket is weighted by the total funded amount of live tickets containing that tile.

The selected ticket wins. Larger confirmed deposits increase that ticket's weight; the tile numbers themselves do not change odds.

ResultOne 6-tile winning draw
Jackpot and verificationThe winning reseller receives the jackpot for the player

The reseller that owns the winning ticket is paid exactly the sum of all ticket weights, with Bitcoin payout fees paid outside the jackpot amount.

The committed CSV, round secret hash, and CSV HMAC are public as soon as the round locks — before the on-chain commitment confirms. The resolved proof reveals the round secret, winning ticket, and draw tiles, publicly replayable from the on-chain commitment and delayed draw block, alongside the admin-recorded jackpot txid.

Reseller receivesExact jackpot
Anyone can verifyTickets, draw, winner, jackpot
Allocation ruleReservation creates the ticket

A player buys through a reseller. The reseller chooses or receives 6tiles, then funds the ticket with confirmed Bitcoin balance. The funded sats enter that round's jackpot and set the ticket's draw weight.

Weight ruleWhat the reseller pays funds draw weight

Luckotto records the Bitcoin amount the reseller spends on the ticket. The reseller may sell it externally at whatever price and terms it chooses.

Public resolutionThe draw block starts the checkpoints

After sales close, the worker seals the entry-number-ordered round CSV under an HMAC keyed by the round secret hash and immediately publishes the CSV, hash, and HMAC — before the on-chain commitment confirms. It commits the HMAC on-chain, waits 2 blocks after confirmation, then stores checkpoints and resolves the weighted draw. The resolved proof reveals the round secret, winning ticket, and draw tiles in checkpoint order together.

Confirmed balanceDeposits credit after sufficient depth

Reseller deposits can appear as confirmed before they are safe enough to spend; ticket creation only uses sufficiently confirmed balance.

1Commit ticketsThe final CSV HMAC is fixed before the draw block.
2Draw 6 tilesEach tile filters the live tickets.
3Weighted ticket winsTicket weight determines the chance, not tile choice.