GeoComply Integration

sequenceDiagram participant FE as Frontend (Browser/App) participant BE as Backend API participant GC as GeoComply participant RG as RiskGuard participant DB as Database / Session Note over FE,DB: Triggered by: registration complete, pay-in, pay-out, SC game launch, IP change FE->>BE: POST /geolocation/geocomply/license BE-->>FE: License (fetched from GeoComply, cached in Redis) FE->>GC: Run GeoComply SDK (device + location) GC-->>FE: Encrypted geoData FE->>BE: POST /geolocation/geocomply/evaluate BE->>BE: Decrypt & validate geoData BE->>RG: Get fraud data (userId + reason) RG-->>BE: Fraud tags (device sharing, suspicious user, etc.) alt Fraud detected & auto-ban enabled BE->>DB: Check fraud-detection whitelist alt User NOT whitelisted BE->>DB: Ban user (reason: fraudDetection) + apply fraud tags BE->>DB: Delete all user sessions else User whitelisted BE->>DB: Apply fraud tags only (no ban) end else No fraud / RiskGuard disabled Note over BE,DB: No action needed end BE->>BE: Evaluate geo result (location / device check) alt Geo check negative BE->>DB: Destroy session (logout user) BE-->>FE: Geo check failed else Geo check positive BE->>DB: Update session (geo confirmed, expiry, state/province code) BE-->>FE: Success end

flowchart TD A["RiskGuard returns fraud_detected = true\n+ recommendation = DENY"] --> B{fraudAutoBanEnabled\nin platform config?} B -->|No| E[Apply fraud tags to user\nNo ban] B -->|Yes| C{User on\nfraud-detection whitelist?} C -->|Yes| E C -->|No| D[Ban user\nreason: fraudDetection\n+ delete all sessions]