About only1win

At only1win, we run a lucky-number game for phones: every player at a table holds a number, one block of the TRON chain picks the lucky one, and the winner takes the pool. A Global round every 60 seconds from ₹1, instant 1v1 / 1v5 / 1v10 tables and Friends Rooms — fair by design, settled in seconds, in rupees.

Partners put only1win inside their own website or app. Their users play as ordinary only1win players — with an only1win wallet, deposits and withdrawals handled by only1win — and the partner earns on every game those players play.

What you get

Where to go next

• How it works — the whole flow in five lines.
• Become a partner — free for anyone: how to apply, what you receive, your first sign-in.
• Launch API — the only call you make; then The frame and Messages.
• Go-live checklist — before you flip the switch.

The flow

1. Your server asks only1win for a launch URLTheir id on your platform + the mobile number, signed with your API key. One call per open.
2. You open that URL in an iframeThe first time, the player confirms the mobile number with an SMS code (sent and paid for by only1win), ticks 18+ and starts playing. After that, every launch opens the game at once — no code.
3. The player plays with a normal only1win walletThey deposit (UPI, bank, USDT) and withdraw on their own; only1win handles the money, KYC and support. You never touch player money.
4. You earn the moment each game endsOn every game played through your platform — by a player you brought or an only1win player who simply plays there — credited to your partner wallet; withdraw in USDT whenever you like.

A few rules

• Phone numbers in the dashboard are masked; balances, bank and wallet details of players are never shown to partners.
• A launch URL works once and for 5 minutes — ask for a fresh one on every open.
• The player’s session inside your frame lasts 24 hours; when it ends, the game tells your page (need_session) and you launch again.
• Withdrawals are confirmed with an SMS code and are done on the web version — see Withdrawals.
• Where a game is played decides who earns. Every game inside your frame counts for you — whether the player is new to only1win or already had an account. The same player playing on another platform, or on only1win.bet directly, does not count for you.

How to apply

There is no form. Write in our Telegram discussion group that you want to integrate only1win — your platform’s name and site are enough — and a member of our team will contact you there and set everything up: your dashboard login, your API key and your game address.

What you receive

• A dashboard login — an email (your sign-in name) and a first password.
• An API key id (pk_…) and the secret (sk_…) — the secret is shown once; keep it on your server.
• Your game address: https://api.only1win.club/embed/<your-slug> — the launch URL points there.

Your first sign-in

1. Open partner.only1win.club and sign in with the email and password you were given.
2. Set a new password (at least 10 characters).
3. Set up Google Authenticator — scan the QR, type the code, save the backup codes. Every sign-in asks the app’s code from then on, and so do payouts, the payout address and key rotation.

What is in the dashboard

JSON in, JSON out. Every call carries an HMAC-SHA256 signature over the exact bytes you post, so only your server can launch your players — never call it from a browser or an app.

Authorizations

Body

Response

{
  "url": "https://api.only1win.club/embed/your-slug#c=…",
  "expires_in": 300,
  "status": "new"
}

Errors

<iframe id="o1w" src="LAUNCH_URL_FROM_YOUR_SERVER"
  allow="autoplay; microphone; clipboard-write; clipboard-read; web-share"
  style="border:0;width:100%;height:100%;display:block" title="only1win"></iframe>

Where it may be framed

Add the exact https origin of the page that holds the iframe to the dashboard → Settings → Allowed origins (e.g. https://play.example.com). Your site URL is added for you when your account is made. only1win refuses to be framed anywhere else — the browser blocks it.

What the player sees

• First open: a splash with your logo and “in Partnership with only1win”, then a card — the mobile number (locked, from your launch call), Send OTP, the 6-digit code, a name, the 18+ tick — and the game.
• Every later open: the splash, then the game. No code, no login.
• Inside the frame the player has Home, Players, Lucky and Me — the whole game. Only the account’s security pages (password, 2FA, devices) live at only1win.bet.

Rules of the frame

• Keep allow="autoplay; microphone; clipboard-write; clipboard-read; web-share": the reel sound, voice chat at the tables, Copy buttons and sharing need it.
• Give the frame the whole viewport (or at least 360 × 640 px). The game is built for phones first.
• Do not set referrerpolicy="no-referrer" on the iframe — the game uses your origin to send you messages. The browser default is fine.
• In a native app, use a real browser view (Chrome Custom Tabs / SFSafariViewController) or a WebView that allows microphone and clipboard. Inside a WebView the game knows it is in an app and sends withdrawals to the web — see Withdrawals.

From the game to you

From you to the game

Sample

const O1W = 'https://api.only1win.club';   // the frame's origin
const frame = document.getElementById('o1w');
window.addEventListener('message', (e) => {
  if (e.origin !== O1W || e.data?.ns !== 'o1w') return;         // only the game, nobody else
  const { type, data } = e.data;
  if (type === 'ready') frame.contentWindow.postMessage({ ns: 'o1w', v: 1, type: 'init', data: { insets: { top: 0, bottom: 0 } } }, O1W);
  if (type === 'need_session') reloadWithFreshLaunchUrl();    // the 24 h session ended — ask your server for a new launch url
  if (type === 'open_url') window.open(data.url, '_blank');    // Telegram help, a UPI app — open outside the frame
  if (type === 'close') hideTheFrame(data.reason);
  if (type === 'route') console.log('screen', data.screen);    // lobby · global · 1v1 · wallet …
  if (type === 'balance') showBalance(data.inr / 100);         // the player's ₹ balance, in paise
});
// to the game, when you need to:
// frame.contentWindow.postMessage({ ns:'o1w', v:1, type:'visibility', data:{ hidden:true } }, O1W);   // your app went to the background
// frame.contentWindow.postMessage({ ns:'o1w', v:1, type:'back' }, O1W);                               // the user pressed Back in your app

• Deposits are never withdrawable; only winnings are (the normal only1win rule).
• A partner player confirms every withdrawal with an SMS code to their mobile number — one more check, because they have no only1win password.
• Withdrawals are done on the web version only. When the game runs in a browser tab on your website, players withdraw inside the frame. Inside an app or WebView the game shows “Withdrawals are done on the web version” with your site URL, where they open the game again and withdraw.
• App-only platform, no website? Leave the site URL empty: players are sent to only1win.bet, where they log in with the same mobile number (they set a password at the first login) and withdraw there.

How only1win earns, in one line

On every table the players’ bets make a pool; the winner takes the pool minus a 10 % platform fee. That fee is all only1win earns — and your earnings come out of it. Nothing is charged to you, ever.

Pick a model

Side by side

Good to know

• Switching the model in Settings changes future players only.
• Where a game is played decides who earns. Every game inside your frame counts for you — by a player you brought or an only1win player who already had an account. The same player playing elsewhere does not count for you.
• No fee is ever paid twice: your own Referral players earn you their referral commissions, not a seat share on top.
• Everything is credited the moment a game ends; there is no hold, minimum or review. Withdraw from Payouts any time.

1. Save your USDT (TRC20) address in the dashboard → Settings → Payout address — locked with your Google Authenticator code.
2. Open Payouts, press Withdraw to USDT, type the amount in ₹ and your Authenticator code.
3. The ₹ are converted at only1win’s USDT withdrawal rate (shown on the page), the TRON network fee comes out of the amount, and the transfer leaves only1win’s treasury on-chain. The page tracks it live and shows the transaction id.

• No hold, no review, no schedule — your wallet is yours the moment a game ends.
• One payout at a time: the next one waits the few seconds the first takes to confirm.
• Any amount that converts to at least 1 USDT after the network fee.

YOUR LOGOin Partnership with

• PNG, JPEG or WebP, up to 2 MB; converted to WebP on upload.
• Shown 112 px tall, the width follows — a wide wordmark or a square mark both work; avoid tiny text.
• The background is dark green felt: use a transparent background with a light or coloured mark. A dark logo on a dark box disappears.
• Upload it in the dashboard → Settings → Logo; the preview there shows it on the felt, as players see it.

• Settings → Allowed origins has the exact https origin of every page that frames the game.
• Settings → Site URL is set (or deliberately empty for an app-only platform).
• Settings → Logo uploaded and checked on the felt.
• Your server signs launches with the key id and secret from Settings → API key; the clock is right; a nonce is never reused.
• Your page listens for need_session and open_url.
• Settings → Payout address saved, so you can withdraw your earnings.
• Test with your own mobile number: launch → SMS code → play a ₹1 Global round → see the game in Games and the share in Earnings.

Launch API

Inside the frame

These are shown to the player as a card, with a “Reopen from <your platform>” button that sends you close: