Luckotto

Demosino

GameDemosino
Playerdemo
How to play

Buy a Luckotto ticket with Bitcoin

Get a payment address, send Bitcoin, then track your ticket through the public round ledger.

PlayView rounds

Ticket flow

Step 1Pick a ticket

Choose six tiles for the current round and reserve that ticket.

Step 2Send Bitcoin

Each reserved ticket gets its own deposit address. Send any positive amount to fund that ticket.

Step 3Wait for confirmation

After the payment confirms, the ticket keeps its chosen tiles and gains draw weight from the confirmed sats.

Step 4Check the round

At the weekly draw, Luckotto commits the round CSV hash and minor seed hash on-chain. The draw block 2 blocks later selects one sold ticket.

Step 5Verify the result

Use the embedded verifier to check the draw tiles and winning ticket from public round data.

How Luckotto works

Start with a ticket

Ticket basicsA ticket is a set of tiles from 1-36

Every ticket has exactly 6 tiles. Players receive a round-scoped Bitcoin address; after payment confirmation, Luckotto chooses the final tile set.

Example ticketFixed-size ticket: 6 tiles
  1. 01
    Get address

    Each reserved ticket gets its own deposit address.

  2. 02
    Send

    On-time confirmed Bitcoin payments fund the selected ticket. Late confirmations roll forward into the next available round.

  3. 03
    Hit 6 to win

    At draw time, losing pool tiles are eliminated until one tile set remains, then duplicate tickets are resolved by weight.

Cumulative jackpotEvery confirmed ticket adds to the same round prize

The jackpot is cumulative: every confirmed payment grows the current open round's prize. It keeps growing until the weekly draw resolves the winning ticket.

Round prizeShared by all partnersFunded ticket weight only.
Draw at a high levelThe draw eliminates losing tiles

At the weekly draw, Luckotto uses the draw block hash and committed CSV weights to eliminate losing pool tiles until one tile set remains. That survivor's sorted tiles become the recorded draw tiles.

The selected ticket wins. Larger confirmed payments increase that ticket's weight; the tile numbers themselves do not change odds.

ResultOne 6-tile winning draw
Payout and verificationThe selling partner receives the jackpot for the player

The partner site that sold the winning ticket is paid the entire jackpot, minus Bitcoin transaction fees, so they can distribute it to the player.

The final CSV hash, draw tiles, winning ticket, and payout are publicly replayable from the on-chain commitment and slow draw block.

Partner receivesJackpot minus tx fees
Anyone can verifyTickets, draw, winner, payout
Allocation ruleReservation creates the ticket

A player chooses 6tiles and receives a deposit address for that reserved ticket. On-time confirmed sats enter that round's prize pool and set the selected ticket's draw weight.

Weight ruleWhat you pay funds your draw weight

There is no minimum ticket price in the app. Any positive on-time confirmation funds the selected ticket's draw weight (the site you bought through may keep a posted fee share); late confirmations are credited forward.

Public settlementThe minor seed and draw block seed the replay

At the draw cutoff, the worker hashes the deterministic round CSV, commits that hash and the minor seed hash on-chain, waits 2 blocksafter confirmation, then combines the revealed minor seed with the draw block hash for the weighted elimination draw. The stored result is the winning ticket's sorted draw tiles.

Late paymentsLate confirmed sats roll forward

Payments confirmed after the original round closes roll the same tiles into the next available round for that player.

1Commit ticketsThe final CSV and minor seed hash are fixed before the draw block.
2Eliminate losing tilesThe survivor's tiles become the draw tiles.
3Weighted ticket winsTicket weight determines the chance, not tile choice.