AZA-ZPayA-ZPay bank-transfer API

Partner portal

A-ZPay exposes a partner casino portal for integration and reconciliation. This page documents the partner-facing portal experience only.

Partner casino portal

Partner operators log in at /partner with MFA. They can only see their own casino account.

The portal includes:

  • Dashboard: balance KPI cards, daily money movement graph, integration credentials, webhook URL, exact signature formula, and a payout request form for TRY amount + USDT TRC20 wallet address.
  • Transactions: partner-scoped search, status/type/date filters, pagination, Excel export, requested deposit amounts, actual operator-confirmed deposit amounts, and final credited amounts.
  • Payouts: create payout requests, view pending/approved/rejected payout history, filter/search/date-filter rows, export to Excel, and open Tronscan links after approval.
  • Users: partner_admin users can create partner admins/operators scoped to the same casino, deactivate/reactivate accounts, and delete accounts. Creators never see MFA secrets; new users enroll MFA themselves on first login via QR code.
  • Reports: settlement totals, pending exposure, commission totals, daily graph, and export controls.

Integration credentials

The dashboard shows the values casino developers need:

  • apiKey
  • apiSecret
  • hashSecret
  • webhookUrl
  • canonical signature formula: <timestamp>.<METHOD>.<path>.<raw_body>.<hashSecret>

Keep these values secret. Never send them to the browser outside the partner portal and never expose them in player-facing pages.

Deposit actual amounts

The player may transfer a different amount than the amount requested by your cashier. For example, your casino may create a 1000.00 TRY deposit but the player transfers 990.00 TRY or 1100.00 TRY.

When A-ZPay approves a deposit, the signed webhook includes:

  • requestedAmountCents: the amount you requested.
  • actualAmountCents: the amount the operator confirmed was actually received.
  • amountDifferenceCents: actual minus requested.
  • playerAmountCents: final amount to credit after A-ZPay commission.

Your casino must credit by playerAmountCents from the verified webhook, not by the original requested amount.

Casino payout requests

Partner casinos request settlements from their portal in Turkish Lira. A-ZPay does not expose an exchange API: operators manually convert the requested TRY amount to USDT, send it on TRC20 only, and confirm the payout with:

  • usdtAmount: exact USDT sent.
  • tronTxId: 64-character Tron transaction ID.
  • tronscanUrl: generated as https://tronscan.org/#/transaction/<tronTxId> for review.

Pending payout requests reserve casino balance; approval keeps it deducted and rejection releases it.

Access control

Partner roles:

  • partner_admin: casino portal dashboard, integration credentials, payout requests, reports, transaction/payout exports, and partner-user management.
  • partner_operator: casino portal dashboard, integration credentials, payout requests, reports, and transaction/payout exports only.

Every portal login requires MFA. For newly created users, the first successful password check returns a QR-code setup challenge instead of a session; the user must scan the code and verify a current TOTP before portal access is granted.