Security and audit trail

A gaming venue must be able to rebuild the history of every amount: who decided it, when, on which device, why. This page says what Lucky Touch guarantees. It does not describe how these guarantees are kept: that is on purpose.

Every decision is recorded

The audit log keeps every decision that matters: who, when (to the second), on what, the state before and after, and the reason when one is required. See Audit log.
Sensitive actions require a written reason: cancel a manual payment, force-unlink a tablet, dismiss a proof, correct a payment mode, close an unclaimed debt.
An action reserved for operations, taken at the register, requires a manager to identify on the device; this identification is recorded in the ledger and closes after the action.
An action taken from the online back office or from the owner app is carried out by the venue and recorded on both sides, marked “depuis le BO en ligne” (from the online back office).

Nothing is erased

A money line is never changed or deleted. A mistake is corrected with a new line (correction, adjustment, reversal); the old one stays visible.
Accounting entries are numbered with no gaps. Every night, the venue checks that nothing has been altered, removed or added; an anomaly is reported by an alert, never hidden.
Money always goes through: no audit-trail check blocks a register action. A variance becomes an alert that operations handles.

Documents

Each receipt carries its document number.
A reprint carries DUPLICATA (DUPLICATE), with the date and time of the reprint to the second: it never passes itself off as the original. Each reprint is recorded.
A document whose subject was corrected prints the original and the correction, never only the current form.
An exported file (accounting, archive) can be verified: it really comes from this venue and has not been changed. See Tamper evidence.

Backups

The venue backs itself up every night and on demand, from its back office, with no terminal. A backup is encrypted, can be copied to a USB stick or downloaded, and can be tested without overwriting anything. Restoring is guided, on the same PC or on a new PC. See Backups and restore.

Access

Each role sees only what concerns it; the Security role never sees an amount. See Roles.
PINs and passwords are never stored in plain text. After several wrong attempts, access is blocked for a while.
The owner and the company administrators sign in online with a second factor.
On the phone, a sensitive action (approving a withdrawal from the safe, for example) requires your fingerprint or the app code. A lost phone can be signed out remotely.
For a manual payment on a coin machine, the person who photographed the proof cannot pay it themselves: another account approves (“four eyes”).
An exceptional action at the register may require a manager’s personal approval code, separate from their PIN.

Retention

Money data is kept for at least ten years: this legal minimum can only be set in the online back office, and no purge goes below it. The proof photos of manual payments follow the same rule.