The Quantic Play UK Ltd Engine · Behind Every Draw
Built on cryptographic certainty.
At IT BAGS, randomness is not a feature — it is the foundation. Every draw runs on the Quantic Play UK Ltd random engine: a cryptographically secure random source, sealed by a public commitment before it runs, and replayable by anyone after.
Powered byQuantic Play UK Ltd
↑ live entropy bitmap (illustrative)
01 — Foundation
A cryptographically secure random source.
Every random byte we use comes from the operating system's CSPRNG via the standard Web Crypto API (crypto.getRandomValues) — the same primitive that secures TLS handshakes, password hashing, and modern authentication tokens across the internet.
It is non-deterministic, drawn from the OS entropy pool, and impossible to predict or reproduce from the outside.
OS entropy pool
Kernel-level randomness from hardware noise, interrupt timing and device jitter.
Web Crypto API
Industry-standard CSPRNG primitives, identical to those securing HTTPS.
Single-use seeds
Each 256-bit seed is bound to exactly one raffle, then permanently retired.
02 — Commit before you draw
We don't just pick a winner.
We prove how.
Hours before any draw runs, we publish a cryptographic commitment that locks down three things at once. Once published, the outcome is mathematically fixed — we cannot change the seed, the entry list, or the algorithm without breaking the commitment.
Entries are frozen
A snapshot of every paid and free entry is taken and hashed (SHA-256). Nothing can be added, removed or reordered after this point.
Seed is bound
A fresh 256-bit seed is pulled from the pool. Its SHA-256 hash is published immediately — but the seed itself stays sealed until after the draw.
Commitment is published
We combine the raffle ID, the entries hash, the seed hash and the algorithm version into a single SHA-256 commitment. This hash is the public promise.
03 — Draw and reveal
How the winner is chosen.
At draw time, the sealed seed is fed into the CSPRNG along with the frozen entry pool. We use rejection sampling to pick a winning ticket index — eliminating the modulo bias that weaker systems suffer from. Every ticket has exactly equal probability. No rounding. No tilt.
Immediately after the draw:
- The seed is revealed publicly.
- The full algorithm is versioned and hash-pinned.
- Anyone can replay the draw with the revealed seed and the published entries hash, and reach the same winner. Bit for bit.
Live · Engine flow
Watch a draw, end to end.
Every IT BAGS draw moves through the same four stages — sealed, committed, drawn and revealed. Below is the loop, simplified.
- 01
Entries frozen
SHA-256 snapshot of every paid + free entry.
- 02
Seed sealed · commitment published
256-bit seed bound. Commitment hash goes public.
- 03
Draw executes
Rejection sampling picks the winning ticket index.
- 04
Seed revealed · replayable
Anyone can re-run the draw and reach the same winner.
04 — Guarantees
What every draw delivers.
Four non-negotiables. Every entry, every draw, every winner.
Truly random
Drawn from the OS entropy pool. Each draw begins from a non-deterministic, single-use state.
Tamper-proof
Entries, seed and algorithm are sealed by SHA-256 before the draw runs. Any change breaks the commitment.
Independently verifiable
Anyone can replay the draw with the revealed seed and reach the same winner.
Auditable
Every step — seed minted, entries frozen, commitment published, draw executed, seed revealed — is written to an immutable, hash-chained audit log.
04b — How we compare
Our random engine vs. common alternatives.
A neutral, factual comparison against the most widely used random sources in UK prize draws today.
Compare against
This site
Quantic Play UK Ltd engine
Alternative
RANDOM.org
Entropy source
Where the randomness comes from.
OS CSPRNG (Web Crypto)
Atmospheric noise (TRNG)
Cryptographically secure
Suitable for security-sensitive use, not just simulations.
YesCSPRNG, 256-bitYesHardware TRNGBias-free sampling
Every ticket has exactly equal probability — no modulo bias.
YesRejection samplingYesRange-correct APIPre-draw commitment
Outcome is mathematically locked before the draw runs.
YesSHA-256 commit-revealYescreateTickets / revealTickets (Signed API R4)Independently replayable
Anyone can re-run the draw and reach the same winner, bit-for-bit.
YesSeed + entries hash + algorithm publishedPartialSHA-512 signature verifies result, draw not re-runnableHash-chained audit log
Every step (seed minted, entries frozen, draw executed) linked SHA-256 to the previous.
YesImmutable, verifiable head hashPartialPer-key serial + ticket chain, no public Merkle logVersioned & hash-pinned algorithm
The exact draw code is fixed and identifiable per draw.
YesAlgorithm version in commitmentPartialAPI release-versioned (R4), not per-drawDesigned for prize draws
Purpose-built for regulated competitions, not general randomness.
YesBuilt for UK prize competitionsYesThird-Party Draw Service + Gambling licence
Tap a chip above to compare against another provider.
Comparison reflects each provider's publicly documented behaviour at time of writing. RANDOM.org and Google are independent third parties and not affiliated with IT BAGS or Quantic Play UK Ltd.
Standards & method
How we measure up.
We don't claim certifications we don't hold. We do commit to the methods that make a draw provably fair.
Cryptographically secure random source
Commitment, seed, entry and algorithm hashing
Outcome locked before the draw, seed revealed after
Zero modulo bias — every ticket equally weighted
Every action linked to the previous, blockchain-style
Prize competition framework
World-class technology. Verified every time.
Whether you are competing for an iconic bag or simply playing for fun, every IT BAGS draw is powered by the Quantic Play UK Ltd engine — fair, transparent and independently replayable.