Customizable iGaming Platform Integration

I am looking for an experienced developer or development team with an **existing, ready-made iGaming platform** that can be customised for my business.

I already have a **Game API and Payment Gateway API**. The project involves integrating these APIs, customising the customer-facing website and backend administration system, and preparing the platform for deployment.

Preference will be given to developers who can demonstrate a working solution and provide ongoing technical support.

The required work includes:

- **Frontend customisation:** Modern, responsive design for desktop and mobile, including registration, login, game lobby, wallet, deposits, withdrawals, profile and transaction history.
- **Backend administration:** Player management, game/provider management, payment management, reports, configurable settings and staff access permissions.
- **Game API integration:** Game launching, wallet integration, transaction records, bet settlement and reconciliation, according to the provider’s documentation.
- **Payment gateway integration:** Deposit and withdrawal workflows, payment status verification, callbacks, failed transactions and reconciliation.
- **Additional modules:** Please identify existing features such as promotions, bonuses, VIP tiers, affiliate management and multilingual support, and quote any customisation separately.

The platform must meet the following technical and security requirements:

1. **Modern, supported frameworks**
Use current stable or LTS versions that receive security updates. Suitable options include Laravel/PHP or NestJS/Node.js, with React/Next.js or Vue/Nuxt where appropriate. Other established frameworks are welcome. Please disclose exact versions, dependencies, support dates and any required upgrades.

2. **Maintainable architecture**
Modular code, documented APIs, database migrations, version control, separate testing and production environments, and a deployment and rollback process.

3. **Defined security baseline**
Target OWASP ASVS 5.0 Level 2 for applicable requirements, with additional Level 3 controls assessed for wallet, payment and privileged administration functions. Provide a verification checklist and evidence.

4. **Account and access security**
Mandatory MFA for administrators, role-based permissions enforced on the server, secure password hashing, session protection, login rate limiting and additional verification for sensitive actions.

5. **API and payment protection**
Keep API credentials server-side. Authenticate callbacks using the providers’ supported methods, verify payment status and transaction details, and prevent forged requests, replay attacks and duplicate credits or withdrawals.

6. **Wallet integrity**
Use precise monetary calculations, atomic database transactions, concurrency controls, an auditable transaction ledger and reconciliation. Test simultaneous requests, retries, timeouts and out-of-order callbacks.

7. **Application and infrastructure security**
Protect against SQL injection, XSS, CSRF and unauthorised data access. Include HTTPS, secure secrets management, appropriate encryption, firewall/WAF configuration and DDoS mitigation.

8. **Monitoring and recovery**
Record administrative actions and balance adjustments in tamper-resistant audit logs. Include suspicious-activity alerts, automated encrypted backups and tested restoration procedures.

9. **Testing and maintenance**
Include functional, integration, load and security testing. Quote independent penetration testing separately, with critical and high-risk findings fixed and retested before launch. State your security patching and ongoing support arrangements.

Please include the following in your proposal:

- A working frontend and admin demo using sample data.
- Relevant iGaming projects and your role in developing them.
- Your technology stack, exact versions and current platform limitations.
- Features already available versus features requiring development.
- Source-code access, licensing terms and rights to modify and self-host the system.
- Itemised pricing for the platform, customisation, integrations, hosting, security testing and maintenance.
- Estimated timeline, milestones, warranty and support response times.

**If you already have a suitable iGaming solution, please share your demo and technical details so we can discuss the project further.**

Budget and timeline will be discussed after reviewing the existing solution and required modifications.