Rules.

Draft cash prize draw rules — professional review required Version draft-v1, 3 October 2026. These rules describe the sandbox implementation and proposed mechanics; they are not a live invitation.

1. The per-draw page states its reference, fictional cash prize, simulated per-entry price, eligibility, combined cap, opening and closing timestamp in UTC, state and seed commitment. Live pages must add verified promoter and postal address, funded prize details and all reviewed significant conditions. 2. A draw accepts online orders only while ACTIVE and within its published window. Only one draw can be ACTIVE; a database partial unique index enforces this. The visible queue is ordered by fixed publication position. The manager closes after the published deadline and activates the next eligible queued draw in the same transaction. Published terms, cap, dates, price and seed commitment cannot be edited. 3. Paid entries arise only from verified payment success. Each paid quantity produces that many random entry tokens. Postal submissions are logged, validated or rejected with an operator, reason and decision timestamp; accepted quantities produce individual tokens in the same table. Eligibility and the combined per-person cap apply to both routes. Neither route has a preferential draw weight. Self-declared age/residency and email-based identity matching are sandbox controls; stronger verification and duplicate-person controls are launch gates. 4. Outstanding payments, refunds and postal decisions prevent freezing. A postal operator must attest that all timely mail has been recorded and decided. The draw operator freezes an ordered list of every accepted individual entry token in one transaction. Late discoveries require escalation; no new entry or edit can be made to a frozen pool. 5. Algorithm sha256-commit-pool-rejection-v1: generate a 32-byte OS-random seed at publication and publish SHA-256(seed). At freeze, sort 128-bit random entry tokens lexicographically and hash their canonical compact JSON array. At draw, hash seed bytes || pool-hash bytes || an eight-byte unsigned big-endian counter, starting at zero. Treat the SHA-256 result as an unsigned 256-bit integer. Reject values at or above 2^256 minus (2^256 mod entry count); increment the counter and repeat. Otherwise, select integer mod entry count as the zero-based winner index. 6. The server records the winning token, algorithm, seed reveal, random sample, rejection counter, pool hash, operator, timestamps and evidence hash. A unique draw record and serialized transaction give one committed result under retries and concurrency. A crash before commit can be retried; a committed draw returns its stored evidence. An empty pool is escalated, never drawn. 7. Public evidence includes the pseudonymous token manifest and enough information to reproduce the calculation. It excludes names, email, date of birth, entry route and operator identity. Tokens may still be personal data where someone can link them to an entrant. Secret seed custody, privileged-access protections and independent/external randomness assurance need review. Reproducibility does not itself prove the operator could not manipulate data or seeds. 8. Real winner contact, eligibility checks, payout, objection to winner publication and unclaimed prize remedies are [OWNER/PROFESSIONAL REVIEW]. There is no automatic rerun. Proposed prize payout must not depend on ticket sales. No actual payout or live refund adapter is implemented.

No Gambling Commission approval, provider approval, certification or independent audit is claimed.