Platform guide

Build, connect and operate.

Core workflows for deploying bots, routing payments and managing modules.

1Deploying your first bot

Create a Telegram botOpen @BotFather on Telegram, send /newbot and follow the prompts. Copy the token.
Fund your workspaceGo to Dashboard → Workspace Funds and deposit crypto via the configured payment gateway.
Choose your productSelect finance, Mini App, support, commerce, booking or community automation. Every Mini App is deployed as its own separate bot.
Paste token and launchEnter your BotFather token, select billing period and click Validate & Launch. Your white-label bot goes live instantly.
Pro tip: Use the 24-hour free demo to validate the complete customer journey first.

2Finance engines

Investment Engine provides configurable plans, deposits, referrals, ledgers and owner-controlled payout requests. YieldFlow Pro is a separate advanced product with strategies, allocation limits, mandatory risk acceptance, maturity tracking, reserves and an auditable ledger.

Plan and strategy configuration

Use Manage Node to define limits, durations, target ranges and payout rules. Financial results are not presented as guaranteed; the owner controls approvals, funding review and payout processing.

Keyboard builder

Open Customization Studio to design the reply keyboard, assign supported actions and rename labels. Changes are applied to the selected bot only.

3Independent Mini Apps

The four Mini Apps are separate products, not visual skins: Nova Tap is a tap economy, CEO Empire is an idle strategy game, Skill Tap Arena runs verified competitive rounds, and DropFarm combines timed farming with an arcade drop game.

Independent deployment

Every Mini App uses its own bot token, route, economy, player records, tasks, leaderboard and visual identity.

Owner customization

Configure token identity, rewards, limits, tasks, theme colors and menu labels from the selected bot's owner tools. Server-side checks protect score submission, reward claims and repeat actions.

4Payments and payouts

Workspace checkout

Subscription checkout supports the currencies shown on the payment screen, currently USDT (TRC20), TRX, BTC and LTC. Commerce bots may expose additional currencies when the selected gateway account supports them.

Confirmation and payout control

CoinPayments IPN messages are verified before a balance or order is credited. Withdrawal requests remain visible in the owner or administrator queue, where gateway availability and platform policy determine automatic or manual processing.

Gateway modes

Each bot can use the platform wallet or the owner's configured CoinPayments credentials for independent payment processing.

5Customization

Every bot is fully white-label. From Customization Studio you control:

Brand identityPublic brand name, welcome message, footer signature and description.
Keyboard layoutFree-form visual builder: add rows, place buttons, pick actions, set custom labels.
User accessBan or restore individual Telegram users per bot. Banned users see a clear rejection message.
Game brandingToken name, symbol, logo, conversion rate, referral rewards, theme colors and all UI labels.

6Affiliate program

Earn commissions by referring new users to the platform. The administrator controls the active commission rate and payout policy.

Sign upOpen /affiliate/register.php and create a partner account.
Share your linkCopy your unique referral link from the partner dashboard and share it anywhere.
Earn commissionsEligible payments attributed to your referral create a commission record.
Request a withdrawalAdd the supported wallet details and submit a payout request. Processing follows the administrator's configured policy.

7Security model

Webhook verification

Every Telegram bot uses a unique webhook secret token generated at deployment. Incoming updates are cryptographically verified before processing. Unauthorized requests receive HTTP 403.

Session protection

User sessions use regenerated IDs after login, HTTPS-only cookies with SameSite=Lax, and CSRF tokens on every state-changing form. Admin login is throttled after 5 failed attempts.

Payment validation

CoinPayments IPN callbacks are HMAC-verified against the configured IPN secret. Transaction IDs are checked for duplicates before crediting balances. Commerce orders use atomic database transactions with row locking.

Important: Never share your BotFather token, webhook secret or CoinPayments API keys. Rotate credentials immediately if they are ever exposed.