Not only is keeping the games safe, well-protected and on a level playing field a companywide priority at Amaya, it’s a real passion for many of our expert staff. The Amaya security team, which has a headcount of more than 300, is well trained and offers 24/7/365 coverage to fight fraud at all stages. Amaya’s sophisticated, proprietary software uses a range of quantitative and qualitative ways to prevent and stop fraud at Amaya sites.

From the level of encryption of our software, the sophistication of our Random Number Generator (RNG) and the dedication of our Game Integrity team through to our robust verifications processes and hands-on Security and Compliance teams, we take every step to guarantee you a fair environment to enjoy playing at PokerStars and Full Tilt. Please read on to find out more detail about the lengths we go to protect our customers.

Security Highlights:

All communications between our software running on customers’ computers and our state-of-the-art server facility is encrypted. It is important to note that strictly speaking, encryption itself does not guarantee privacy. For example, a site where pocket cards of all the players are transferred to everybody, this is not secure regardless of encryption. That’s why we have dedicated so much time, resource and expertise into designing industry-leading security systems and policies.

Software Download:

The first point at which security becomes an important factor is when the client software is downloaded from one an Amaya site. It’s absolutely key to ensure that the client software is downloaded unmodified. To address this requirement, we built the following features into the download process:

  • The installer executable file is signed using an RSA 2048 bit code-signing certificate that was issued to Amaya and can be verified with VeriSign, a public certificate authority which can be validated via your web browser.
  • This ensures that the client installer came from the software publisher.
  • It protects the client installer from alteration between the point of publication and later installation on your machine.

Play-time security:

We have a number of built-in features to ensure the security of the game itself.

  • Our client software uses the certificates issued by our own Certificate Authority (CA) to authenticate our servers.
  • Our client software uses the industry standard SSLv3 protocol. We are currently using a 2048-bit RSA key, which according to RSA is sufficient until 2030. As we review and update private server keys every three months, we are secure within a large safety margin. We support the following ciphers: AES128-SHA (128 bits) and DES-CBC3-SHA (168 bits)
  • No private data, such as pocket cards, is ever transferred to other players (except in accordance with the game rules).
  • All client input is validated server-side.


Collusion is a form of cheating in which two or more players signal their holdings or otherwise form a cheating partnership to the detriment of the other players at the same table.

While on one hand it is easier to pass information between colluding players in online poker than it is in brick & mortar rooms, it is much more difficult to avoid eventual detection, as the cards for all players can be examined after the play.

No matter how sophisticated the collusion is, it must involve a play of a hand that would not be played that way without collusion. Our sophisticated detection methods run 24/7 and flag unusual play patterns to our expert security personnel, who will then make a thorough manual investigation. We also investigate every single player report about suspected collusion.

If any player is found to be participating in any form of collusion his or her account may be permanently closed.