Pirating Major Studios’ Games, Then Controlling Each Player’s Wins and Losses: Inside Game API Provider OMG

File photo: a computer keyboard, photographed 17 July 2016. Used for general software-technology context only; not OMG equipment, an OMG interface or evidence from the reported investigation. Photo: Alexander-design / Pixabay, via Wikimedia Commons, CC0 1.0. Display cropped to fit where necessary. Image source.

A game aggregation API provider calling itself OMG sells gambling platforms pirated copies of games from international studios such as PG and JILI. It also supplies a set of interfaces that let platforms raise or lower the return rate for individual players, first “cultivating” them and then “killing” them.

These are not allegations made by outsiders. They are descriptions found in OMG’s own publicly available integration documentation, game list and notices to customers.

A Document That Gives “Killing Players” a Number

OMG’s integration documentation is publicly available on its official website in Chinese and English. Under “Reports and Functional Interfaces,” it lists an interface called “Player Targeted Control (RTP Adjustment).” According to the documentation, a platform can set return rates for one or more players, with available settings ranging from 10% to 99%. There are two modes, “soft control” and “hard control,” and the setting automatically ends after 90 days. The distinction between “hard” and “soft” control indicates that a platform can do more than make small adjustments to probabilities: it can forcibly bring a particular player’s wins and losses to a prescribed level.

Another interface is called “Set Player Cultivation and Killing.” The documentation states that a type parameter of 14 represents “cultivation” and 15 represents “killing”; “cultivation” has three speeds: fast, slow and ultra-fast. The cultivation amount is capped at 100U per player. Using Brazilian reais as an example, the documentation gives a converted range of R$0.01 to R$513.79. It also specifically notes that the money “given to players” through cultivation “is calculated separately and is not offset against overall wins and losses.” In other words, that money is added separately to the bill the platform settles with OMG. Letting new players win a little at first is, in OMG’s billing, a separate marketing cost, and that “cost” ultimately has to be recovered from the players who are “killed.”

There is also an “Automatic Cultivation of New Players” switch. The documentation describes it as follows: once enabled, all newly registered players enter cultivation mode until they reach the preset cultivation amount.

In regulated markets, slot outcomes must be determined by certified random number generators, return rates must be disclosed in advance and verified by testing bodies, and operators cannot adjust wins and losses for an individual player. OMG’s documentation contains no information about a corporate entity, gambling licence or third-party testing certification. On 22 October 2026, this publication searched the GLI, eCOGRA and BMM websites and the Curaçao gambling regulator’s certificate verification page, finding no records for OMG or its associated domains.

“Original Game ID”

The source code of the game demonstration page on OMG’s official website links to a public online spreadsheet listing 1,329 games available for integration. Alongside game brands, OMG numbers and multilingual names, the headers include a column labelled “对应正版ID / Original Game ID.” Numerical values are entered in 1,190 rows.

Almost all the brands in the spreadsheet are internationally known game developers: 238 games labelled PP, 144 Hacksaw, 136 PG, 129 JILI, 129 TADA and 104 RedTiger, along with JDB, 3OAKS, Spribe, BGaming, IGT and others. For PG’s Fortune Tiger (虎虎生财), for example, the OMG number is 126 and the “Original Game ID” is also 126. JILI’s Fortune Gems has OMG number 10109 and “Original Game ID” 109.

That column is OMG’s own labelling: the games in the spreadsheet are not the developers’ originals but copies corresponding to particular “genuine” games, with even the numbers copied. Legitimate aggregators connect directly to developers’ official servers and have no need to keep a separate set of “Original Game IDs.” OMG’s business representative states it more plainly in a public profile: “Complete 1:1 PG slots 🐯, pp, jili, tada and other brands.”

Over the past two years, PG Soft has repeatedly published warnings on its official website about counterfeit PG games appearing in the market. It has also introduced an official verification tool that lets players check transaction records to establish whether a game comes from PG. PG Soft says it holds licences in Malta and Gibraltar and that its games are certified by the testing bodies BMM and GA. PG Soft’s statements do not name OMG.

Impersonating Domains on the Same Certificate

The sample game-entry link in OMG’s documentation points to a domain beginning with “pgf-” that resembles an official PG game server. Public certificate transparency records on crt.sh show that these domains and OMG’s own domains belong to the same network.

Certificate number 29256236776 was issued on 4 September 2026. The same certificate covers the main domain of OMG’s official website and two other OMG-named domains, as well as domains impersonating developer names, including pgf-aspb7a, pgsoft-games, pgsoftct-games and spribegaming, and a domain named southasiabp. Another certificate, issued on 12 July, covers impersonating domains including jilligame, pragmaticsplay, pragmaticsplay-ct and tadagaming.

These domains imitate the official domains of developers such as PG Soft (pgsoft.com), JILI (jiligames.com), Pragmatic Play (pragmaticplay.com) and Spribe, but they are not official domains. They appear on the same certificate as OMG’s official website domain, issued under the same applicant. The pirated games run on these impersonating domains: the game-entry example in OMG’s documentation points to precisely such a “pgf-” domain.

The Hidden Registrant

OMG’s official website domain was registered on 29 May 2024. The registrant’s details are privacy-protected, and the domain’s DNS is hosted on Amazon’s cloud.

The code for OMG’s demonstration site contains another condition: when the domain being accessed contains “gm,” the page title displays “GM Demo”; otherwise, it displays “OMG Demo.” The same system may also be offered under another name.

“Control and Kill, with Fine-Tuned Adjustments”

In OMG’s merchant recruitment and customer service materials obtained by this publication, the company describes its integration offering as doing more than simply allowing games to be entered and played. It says it “additionally supports rapid integration of the various control interfaces, allowing you to control and kill with fine-tuned adjustments.”

The materials also show a category of “KOL merchants” in OMG’s back office. According to OMG’s explanation, these merchants are used for livestream promotion to “record explosive wins,” or so-called “high-payout” play.

The pricing is also clearly set out: OMG takes a share of the merchant platform’s revenue, at around 4%, with a separate minimum monthly charge.

OMG’s business representative spells out the selling points even more directly in a public profile: “Complete 1:1 PG slots 🐯, pp, jili, tada and other brands, adjustable RTP, no domestic business whatsoever.” The profile also claims “headquartered in Japan, the industry’s strongest technology, a development team of a hundred.” These are OMG’s own boasts. This publication could not verify them and found no corporate registration information that could substantiate them.

Who Is It Sold To?

OMG’s currency list includes the Brazilian real, Indian rupee, Philippine peso, Indonesian rupiah, Vietnamese dong, Thai baht, Malaysian ringgit, Myanmar kyat, Cambodian riel, Nigerian naira, Pakistani rupee, Colombian peso and Mexican peso, as well as cryptocurrencies including USDT and Bitcoin. All 1,329 games on its game list are marked “CNY not supported.” Its business representative’s profile also specifically states “no domestic business whatsoever.” Not accepting renminbi and staying out of the Chinese market appear to be a deliberate attempt to avoid Chinese police action against cross-border gambling, placing the business entirely in developing markets abroad. In its notices announcing new games, OMG lists its “popular regions” as Latin America (Brazil and Mexico), the Commonwealth of Independent States, Europe and Southeast Asia.

Most of those markets either prohibit online gambling altogether or permit only licensed operations.

This publication has not yet established how many customers OMG actually has or which platforms use its games and “targeted control” functions. Searches of public website-scanning databases also did not identify gambling websites loading the impersonating domains described above.

The Player Under “Targeted Control”

Taken together, these features mean that a player is facing not a slot machine but a back office that can see them and set their wins and losses individually.

In a fair slot game, the result of every spin is determined by random numbers, the return rate is the same for everyone, and the player’s long-term losses can be anticipated. OMG’s “targeted control” removes that premise: a platform can lower one player’s return rate to 10%, or raise it to 99% for a period. The reels still spin on the screen, but the player has no way of knowing that their chance of winning in that round has been individually altered.

“Cultivation” and “killing” are two steps in the same logic. The documentation states that, once the switch is enabled, a newly registered player is placed in “cultivation” mode on arrival: the platform first lets the player win until the preset amount is reached, after which it can apply “killing” to that player. In several online gambling cases solved by Chinese police, defendants described precisely this approach: first give gamblers a taste of winning, wait for them to increase their stakes, and then use the back office to make them lose everything. The difference at OMG is that the practice has been turned into standard, numbered interfaces that can be configured by player and dispatched in batches.

The “high-payout” KOL merchants extend this manipulation into promotion. According to OMG, these merchants are used for livestream promotion to “record explosive wins.” The consecutive big wins viewers see in livestreams and short videos may come from an account whose return rate has been deliberately raised, while ordinary players drawn in by those videos play under a different set of parameters.

OMG’s target markets are concentrated in developing countries: Brazil, Mexico and Colombia; India and Pakistan; Vietnam, Cambodia, Myanmar, Indonesia and the Philippines; and Nigeria. Some prohibit gambling entirely, while others have only recently introduced licensing systems. Regulators have limited enforcement and website-blocking capacity, leaving players with virtually nowhere to complain once they have been “killed.”

Legitimate game developers are victims too. Games that companies such as PG Soft and JILI have invested in developing and certifying are copied wholesale, placed on impersonating domains and fitted with back doors for controlling wins and losses before being sold. Players believe they are playing a tested game from a major studio. When they lose money or encounter problems, they cannot find anyone accountable for that game, while the original developer’s brand acquires a reputation for “unfairness” on behalf of the pirated copy.

OMG itself also has no traceable licence or testing certification. There is no regulator to complain to, no testing report to check and no corporate entity to hold accountable. Whose pocket the player’s money goes into, and who decides the wins and losses, remain concealed behind a domain with hidden registrant details.

Conclusion

OMG’s own documentation, game list, certificate records and notices to customers reveal a clear business: copy major studios’ games, run them on impersonating domains, include a back office that can decide wins and losses by player, take a share of platform revenue, and sell to gambling platforms in weakly regulated markets. The wording in its customer notices is “control and kill.”

Sources

• OMG’s public integration documentation, including pages on “Player Targeted Control (RTP Adjustment),” “Set Player Cultivation and Killing,” “Automatic Cultivation of New Players” and the “Currency List” (archived by this publication on 22 October 2026)
• OMG’s game-list spreadsheet, linked in the source code of its official website (archived by this publication on 22 October 2026)
• crt.sh certificate transparency records, certificate IDs 29256236776, 28166863132 and 27869420347 (archived by this publication)
• Public RDAP registration information for OMG’s official website domain
• PG Soft’s official anti-counterfeiting statements: https://www.pgsoft.com/en/news/188/ , https://www.pgsoft.com/en/news/211/ , https://www.pgsoft.com/en/news/224/ ; verification tool: https://verify.pgsoft.com/
• Public profile of OMG’s business representative (archived by this publication on 22 October 2026)
• OMG’s merchant recruitment and customer service materials obtained by this publication; originals archived
• Licensing and testing-body searches: internal searches of GLI, eCOGRA and BMM, and the Curaçao GCB certificate verification page (22 October 2026)